Function at 0x140099e20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
mov eax, 0x25e8
call fcn.140128020
sub rsp, rax
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x2550], xmm6
mov qword [rbp + 0x2548], 0xfffffffffffffffe
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
movabs r14, 0x3c2824282d22
mov qword [rbp + 0x2510], r14
mov dword [rbp + 0x2510], 0x626d6961
mov word [rbp + 0x2514], 0x746f
xorps xmm0, xmm0
movaps xmmword [rbp + 0xdb0], xmm0
movaps xmmword [rbp + 0xdc0], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x140099ef1
mov qword [rbp + 0xdc0], rsi
mov qword [rbp + 0xdc8], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0xdb0]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xdb0
jmp 0x140099f66
mov qword [rbp + 0xdc8], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x140099f30
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140099f3c
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xdb0], rdi
mov qword [rbp + 0xdc0], rsi
mov qword [rbp + 0xdc8], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov qword [rbp + 0x2530], r14
mov dword [rbp + 0x2530], 0x626d6961
mov word [rbp + 0x2534], 0x746f
xorps xmm0, xmm0
movaps xmmword [rbp + 0xdd0], xmm0
movaps xmmword [rbp + 0xde0], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed90
mov rsi, rax
cmp rax, 0xf
ja 0x140099fe9
mov qword [rbp + 0xde0], rsi
mov qword [rbp + 0xde8], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0xdd0]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xdd0
jmp 0x14009a06f
mov qword [rbp + 0xde8], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009a032
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24ce], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009a045
lea rcx, [rbx + 1]
mov byte [rbp + 0x24ce], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xdd0], rdi
mov qword [rbp + 0xde0], rsi
mov qword [rbp + 0xde8], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmm6, xmmword [0x1401715e0]
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x250], xmm0
movaps xmmword [rbp + 0x260], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed9c
mov rsi, rax
cmp rax, 0xf
ja 0x14009a0f9
mov qword [rbp + 0x260], rsi
mov qword [rbp + 0x268], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x250]
lea rdx, [rbp + 0x24f0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x250
jmp 0x14009a17f
mov qword [rbp + 0x268], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009a142
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24cf], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009a155
lea rcx, [rbx + 1]
mov byte [rbp + 0x24cf], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x250], rdi
mov qword [rbp + 0x260], rsi
mov qword [rbp + 0x268], rbx
lea rdx, [rbp + 0x24f0]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov byte [rbp + 0x24cf], 0
lea rsi, [rbp + 0x24d0]
lea rdx, [rbp + 0x250]
lea r8, [rbp + 0xdd0]
lea r9, [rbp + 0xdb0]
mov rcx, rsi
call fcn.14006b7c0
lea rcx, [rbp + 0x2540]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, qword [rbp + 0x24e8]
cmp qword [rbp + 0x24e0], rax
jne 0x14009a1f6
cmp rdi, 0x10
jb 0x14009a1d6
mov rsi, qword [rbp + 0x24d0]
lea rdx, [rbp + 0x2540]
mov rcx, rsi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
cmp rdi, 0x10
jae 0x14009a1fe
jmp 0x14009a236
xor esi, esi
cmp rdi, 0x10
jb 0x14009a236
mov rcx, qword [rbp + 0x24d0]
lea rdx, [rdi + 1]
cmp rdx, 0x1000
jb 0x14009a231
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400aed8a
add rdi, 0x28
mov rdx, rdi
mov rcx, rax
call fcn.140127e30
mov rax, qword [0x14059d150]
mov byte [rax + 0x71], sil
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
movabs rax, 0x3f272131243627
mov qword [rbp + 0x2510], rax
mov dword [rbp + 0x2510], 0x77617264
mov word [rbp + 0x2514], 0x6f66
mov byte [rbp + 0x2516], 0x76
mov byte [rbp + 0x2518], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0xdf0], xmm0
movaps xmmword [rbp + 0xe00], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x14009a2ed
mov qword [rbp + 0xe00], rsi
mov qword [rbp + 0xe08], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0xdf0]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xdf0
jmp 0x14009a362
mov qword [rbp + 0xe08], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009a32c
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009a338
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xdf0], rdi
mov qword [rbp + 0xe00], rsi
mov qword [rbp + 0xe08], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov qword [rbp + 0x2530], r14
mov dword [rbp + 0x2530], 0x626d6961
mov word [rbp + 0x2534], 0x746f
xorps xmm0, xmm0
movaps xmmword [rbp + 0xe10], xmm0
movaps xmmword [rbp + 0xe20], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aeda8
mov rsi, rax
cmp rax, 0xf
ja 0x14009a3e5
mov qword [rbp + 0xe20], rsi
mov qword [rbp + 0xe28], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0xe10]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xe10
jmp 0x14009a46b
mov qword [rbp + 0xe28], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009a42e
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24cc], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009a441
lea rcx, [rbx + 1]
mov byte [rbp + 0x24cc], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xe10], rdi
mov qword [rbp + 0xe20], rsi
mov qword [rbp + 0xe28], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x270], xmm0
movaps xmmword [rbp + 0x280], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aedb4
mov rsi, rax
cmp rax, 0xf
ja 0x14009a4ee
mov qword [rbp + 0x280], rsi
mov qword [rbp + 0x288], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x270]
lea rdx, [rbp + 0x24f0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x270
jmp 0x14009a574
mov qword [rbp + 0x288], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009a537
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24cd], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009a54a
lea rcx, [rbx + 1]
mov byte [rbp + 0x24cd], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x270], rdi
mov qword [rbp + 0x280], rsi
mov qword [rbp + 0x288], rbx
lea rdx, [rbp + 0x24f0]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov byte [rbp + 0x24cd], 0
lea rsi, [rbp + 0x24d0]
lea rdx, [rbp + 0x270]
lea r8, [rbp + 0xe10]
lea r9, [rbp + 0xdf0]
mov rcx, rsi
call fcn.14006b7c0
lea rcx, [rbp + 0x2540]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, qword [rbp + 0x24e8]
cmp qword [rbp + 0x24e0], rax
jne 0x14009a5eb
cmp rdi, 0x10
jb 0x14009a5cb
mov rsi, qword [rbp + 0x24d0]
lea rdx, [rbp + 0x2540]
mov rcx, rsi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
cmp rdi, 0x10
jae 0x14009a5f3
jmp 0x14009a62b
xor esi, esi
cmp rdi, 0x10
jb 0x14009a62b
mov rcx, qword [rbp + 0x24d0]
lea rdx, [rdi + 1]
cmp rdx, 0x1000
jb 0x14009a626
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400aed8a
add rdi, 0x28
mov rdx, rdi
mov rcx, rax
call fcn.140127e30
mov rax, qword [0x14059d150]
mov byte [rax + 0xa8], sil
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
movabs rax, 0x6272656767697274
mov qword [rbp + 0x2510], rax
mov dword [rbp + 0x2518], 0x3824
mov word [rbp + 0x2518], 0x746f
xorps xmm0, xmm0
movaps xmmword [rbp + 0xe30], xmm0
movaps xmmword [rbp + 0xe40], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x14009a6d7
mov qword [rbp + 0xe40], rsi
mov qword [rbp + 0xe48], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0xe30]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xe30
jmp 0x14009a74c
mov qword [rbp + 0xe48], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009a716
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009a722
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xe30], rdi
mov qword [rbp + 0xe40], rsi
mov qword [rbp + 0xe48], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov qword [rbp + 0x2530], r14
mov dword [rbp + 0x2530], 0x626d6961
mov word [rbp + 0x2534], 0x746f
xorps xmm0, xmm0
movaps xmmword [rbp + 0xe50], xmm0
movaps xmmword [rbp + 0xe60], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aedc0
mov rsi, rax
cmp rax, 0xf
ja 0x14009a7cf
mov qword [rbp + 0xe60], rsi
mov qword [rbp + 0xe68], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0xe50]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xe50
jmp 0x14009a855
mov qword [rbp + 0xe68], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009a818
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24ca], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009a82b
lea rcx, [rbx + 1]
mov byte [rbp + 0x24ca], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xe50], rdi
mov qword [rbp + 0xe60], rsi
mov qword [rbp + 0xe68], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x290], xmm0
movaps xmmword [rbp + 0x2a0], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aedcc
mov rsi, rax
cmp rax, 0xf
ja 0x14009a8d8
mov qword [rbp + 0x2a0], rsi
mov qword [rbp + 0x2a8], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x290]
lea rdx, [rbp + 0x24f0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x290
jmp 0x14009a95e
mov qword [rbp + 0x2a8], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009a921
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24cb], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009a934
lea rcx, [rbx + 1]
mov byte [rbp + 0x24cb], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x290], rdi
mov qword [rbp + 0x2a0], rsi
mov qword [rbp + 0x2a8], rbx
lea rdx, [rbp + 0x24f0]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov byte [rbp + 0x24cb], 0
lea rsi, [rbp + 0x24d0]
lea rdx, [rbp + 0x290]
lea r8, [rbp + 0xe50]
lea r9, [rbp + 0xe30]
mov rcx, rsi
call fcn.14006b7c0
lea rcx, [rbp + 0x2540]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, qword [rbp + 0x24e8]
cmp qword [rbp + 0x24e0], rax
jne 0x14009a9d5
cmp rdi, 0x10
jb 0x14009a9b5
mov rsi, qword [rbp + 0x24d0]
lea rdx, [rbp + 0x2540]
mov rcx, rsi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
cmp rdi, 0x10
jae 0x14009a9dd
jmp 0x14009aa15
xor esi, esi
cmp rdi, 0x10
jb 0x14009aa15
mov rcx, qword [rbp + 0x24d0]
lea rdx, [rdi + 1]
cmp rdx, 0x1000
jb 0x14009aa10
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400aed8a
add rdi, 0x28
mov rdx, rdi
mov rcx, rax
call fcn.140127e30
mov rax, qword [0x14059d150]
mov byte [rax + 0xca], sil
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
mov word [rbp + 0x2518], 0
movabs rax, 0x6b63656863736976
mov qword [rbp + 0x2510], rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0xe70], xmm0
movaps xmmword [rbp + 0xe80], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x14009aab7
mov qword [rbp + 0xe80], rsi
mov qword [rbp + 0xe88], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0xe70]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xe70
jmp 0x14009ab2c
mov qword [rbp + 0xe88], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009aaf6
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009ab02
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xe70], rdi
mov qword [rbp + 0xe80], rsi
mov qword [rbp + 0xe88], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov qword [rbp + 0x2530], r14
mov dword [rbp + 0x2530], 0x626d6961
mov word [rbp + 0x2534], 0x746f
xorps xmm0, xmm0
movaps xmmword [rbp + 0xe90], xmm0
movaps xmmword [rbp + 0xea0], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aedd8
mov rsi, rax
cmp rax, 0xf
ja 0x14009abaf
mov qword [rbp + 0xea0], rsi
mov qword [rbp + 0xea8], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0xe90]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xe90
jmp 0x14009ac35
mov qword [rbp + 0xea8], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009abf8
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24c8], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009ac0b
lea rcx, [rbx + 1]
mov byte [rbp + 0x24c8], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xe90], rdi
mov qword [rbp + 0xea0], rsi
mov qword [rbp + 0xea8], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x2b0], xmm0
movaps xmmword [rbp + 0x2c0], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aede4
mov rsi, rax
cmp rax, 0xf
ja 0x14009acb8
mov qword [rbp + 0x2c0], rsi
mov qword [rbp + 0x2c8], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x2b0]
lea rdx, [rbp + 0x24f0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x2b0
jmp 0x14009ad3e
mov qword [rbp + 0x2c8], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009ad01
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24c9], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009ad14
lea rcx, [rbx + 1]
mov byte [rbp + 0x24c9], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x2b0], rdi
mov qword [rbp + 0x2c0], rsi
mov qword [rbp + 0x2c8], rbx
lea rdx, [rbp + 0x24f0]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov byte [rbp + 0x24c9], 0
lea rsi, [rbp + 0x24d0]
lea rdx, [rbp + 0x2b0]
lea r8, [rbp + 0xe90]
lea r9, [rbp + 0xe70]
mov rcx, rsi
call fcn.14006b7c0
lea rcx, [rbp + 0x2540]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, qword [rbp + 0x24e8]
cmp qword [rbp + 0x24e0], rax
jne 0x14009adb5
cmp rdi, 0x10
jb 0x14009ad95
mov rsi, qword [rbp + 0x24d0]
lea rdx, [rbp + 0x2540]
mov rcx, rsi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
cmp rdi, 0x10
jae 0x14009adbd
jmp 0x14009adf5
xor esi, esi
cmp rdi, 0x10
jb 0x14009adf5
mov rcx, qword [rbp + 0x24d0]
lea rdx, [rdi + 1]
cmp rdx, 0x1000
jb 0x14009adf0
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400aed8a
add rdi, 0x28
mov rdx, rdi
mov rcx, rax
call fcn.140127e30
mov rax, qword [0x14059d150]
mov byte [rax + 0xc7], sil
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
mov word [rbp + 0x2518], 0
movabs rax, 0x65636e6174736964
mov qword [rbp + 0x2510], rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0xeb0], xmm0
movaps xmmword [rbp + 0xec0], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x14009ae97
mov qword [rbp + 0xec0], rsi
mov qword [rbp + 0xec8], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0xeb0]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xeb0
jmp 0x14009af0c
mov qword [rbp + 0xec8], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009aed6
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009aee2
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xeb0], rdi
mov qword [rbp + 0xec0], rsi
mov qword [rbp + 0xec8], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movabs r12, 0x3a242633362d35
mov qword [rbp + 0x2530], r12
mov dword [rbp + 0x2530], 0x75736976
mov word [rbp + 0x2534], 0x6c61
mov byte [rbp + 0x2536], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x2538], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0xed0], xmm0
movaps xmmword [rbp + 0xee0], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aedf0
mov rsi, rax
cmp rax, 0xf
ja 0x14009afa7
mov qword [rbp + 0xee0], rsi
mov qword [rbp + 0xee8], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0xed0]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xed0
jmp 0x14009b02d
mov qword [rbp + 0xee8], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009aff0
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24c6], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009b003
lea rcx, [rbx + 1]
mov byte [rbp + 0x24c6], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xed0], rdi
mov qword [rbp + 0xee0], rsi
mov qword [rbp + 0xee8], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x2d0], xmm0
movaps xmmword [rbp + 0x2e0], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aedfc
mov rsi, rax
cmp rax, 0xf
ja 0x14009b0b0
mov qword [rbp + 0x2e0], rsi
mov qword [rbp + 0x2e8], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x2d0]
lea rdx, [rbp + 0x24f0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x2d0
jmp 0x14009b136
mov qword [rbp + 0x2e8], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009b0f9
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24c7], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009b10c
lea rcx, [rbx + 1]
mov byte [rbp + 0x24c7], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x2d0], rdi
mov qword [rbp + 0x2e0], rsi
mov qword [rbp + 0x2e8], rbx
lea rdx, [rbp + 0x24f0]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov byte [rbp + 0x24c7], 0
lea rsi, [rbp + 0x24d0]
lea rdx, [rbp + 0x2d0]
lea r8, [rbp + 0xed0]
lea r9, [rbp + 0xeb0]
mov rcx, rsi
call fcn.14006b7c0
lea rcx, [rbp + 0x2540]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, qword [rbp + 0x24e8]
cmp qword [rbp + 0x24e0], rax
jne 0x14009b1ad
cmp rdi, 0x10
jb 0x14009b18d
mov rsi, qword [rbp + 0x24d0]
lea rdx, [rbp + 0x2540]
mov rcx, rsi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
cmp rdi, 0x10
jae 0x14009b1b5
jmp 0x14009b1ed
xor esi, esi
cmp rdi, 0x10
jb 0x14009b1ed
mov rcx, qword [rbp + 0x24d0]
lea rdx, [rdi + 1]
cmp rdx, 0x1000
jb 0x14009b1e8
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400aed8a
add rdi, 0x28
mov rdx, rdi
mov rcx, rax
call fcn.140127e30
mov rax, qword [0x14059d150]
mov byte [rax + 0x48], sil
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
mov word [rbp + 0x251c], 0
movabs rax, 0x676e69646e756f62
mov qword [rbp + 0x2510], rax
mov dword [rbp + 0x2518], 0x786f625f
xorps xmm0, xmm0
movaps xmmword [rbp + 0xef0], xmm0
movaps xmmword [rbp + 0xf00], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x14009b296
mov qword [rbp + 0xf00], rsi
mov qword [rbp + reloc.WS2_32.dll_ntohs08], 0xf
lea rcx, [rbp + 0xef0]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xef0
jmp 0x14009b30b
mov qword [rbp + reloc.WS2_32.dll_ntohs08], 0xf
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009b2d5
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009b2e1
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xef0], rdi
mov qword [rbp + 0xf00], rsi
mov qword [rbp + 0xf08], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov qword [rbp + 0x2530], r12
mov dword [rbp + 0x2530], 0x75736976
mov word [rbp + 0x2534], 0x6c61
mov byte [rbp + 0x2536], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x2538], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0xf10], xmm0
movaps xmmword [rbp + 0xf20], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee08
mov rsi, rax
cmp rax, 0xf
ja 0x14009b39c
mov qword [rbp + 0xf20], rsi
mov qword [rbp + reloc.WS2_32.dll_ntohs28], 0xf
lea rcx, [rbp + 0xf10]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xf10
jmp 0x14009b422
mov qword [rbp + reloc.WS2_32.dll_ntohs28], 0xf
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009b3e5
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24c4], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009b3f8
lea rcx, [rbx + 1]
mov byte [rbp + 0x24c4], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xf10], rdi
mov qword [rbp + 0xf20], rsi
mov qword [rbp + 0xf28], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x2f0], xmm0
movaps xmmword [rbp + 0x300], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee14
mov rsi, rax
cmp rax, 0xf
ja 0x14009b4a5
mov qword [rbp + 0x300], rsi
mov qword [rbp + 0x308], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x2f0]
lea rdx, [rbp + 0x24f0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x2f0
jmp 0x14009b52b
mov qword [rbp + 0x308], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009b4ee
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24c5], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009b501
lea rcx, [rbx + 1]
mov byte [rbp + 0x24c5], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x2f0], rdi
mov qword [rbp + 0x300], rsi
mov qword [rbp + 0x308], rbx
lea rdx, [rbp + 0x24f0]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov byte [rbp + 0x24c5], 0
lea rsi, [rbp + 0x24d0]
lea rdx, [rbp + 0x2f0]
lea r8, [rbp + 0xf10]
lea r9, [rbp + 0xef0]
mov rcx, rsi
call fcn.14006b7c0
lea rcx, [rbp + 0x2540]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, qword [rbp + 0x24e8]
cmp qword [rbp + 0x24e0], rax
jne 0x14009b5a2
cmp rdi, 0x10
jb 0x14009b582
mov rsi, qword [rbp + 0x24d0]
lea rdx, [rbp + 0x2540]
mov rcx, rsi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
cmp rdi, 0x10
jae 0x14009b5aa
jmp 0x14009b5e2
xor esi, esi
cmp rdi, 0x10
jb 0x14009b5e2
mov rcx, qword [rbp + 0x24d0]
lea rdx, [rdi + 1]
cmp rdx, 0x1000
jb 0x14009b5dd
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400aed8a
add rdi, 0x28
mov rdx, rdi
mov rcx, rax
call fcn.140127e30
mov rax, qword [0x14059d150]
mov byte [rax + 0x21], sil
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
mov word [rbp + 0x2519], 0
movabs rax, 0x69616873736f7263
mov qword [rbp + 0x2510], rax
mov byte [rbp + 0x2518], WSACleanup
xorps xmm0, xmm0
movaps xmmword [rbp + 0xf30], xmm0
movaps xmmword [rbp + 0xf40], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x14009b688
mov qword [rbp + 0xf40], rsi
mov qword [rbp + reloc.WS2_32.dll_ntohs48], 0xf
lea rcx, [rbp + 0xf30]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xf30
jmp 0x14009b6fd
mov qword [rbp + reloc.WS2_32.dll_ntohs48], 0xf
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009b6c7
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009b6d3
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xf30], rdi
mov qword [rbp + 0xf40], rsi
mov qword [rbp + 0xf48], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov word [rbp + 0x2534], 0
mov dword [rbp + 0x2530], 0x6373696d
xorps xmm0, xmm0
movaps xmmword [rbp + 0xf50], xmm0
movaps xmmword [rbp + 0xf60], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee20
mov rsi, rax
cmp rax, 0xf
ja 0x14009b779
mov qword [rbp + 0xf60], rsi
mov qword [rbp + reloc.WS2_32.dll_ntohs68], 0xf
lea rcx, [rbp + 0xf50]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xf50
jmp 0x14009b7ff
mov qword [rbp + reloc.WS2_32.dll_ntohs68], 0xf
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009b7c2
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24c2], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009b7d5
lea rcx, [rbx + 1]
mov byte [rbp + 0x24c2], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xf50], rdi
mov qword [rbp + 0xf60], rsi
mov qword [rbp + 0xf68], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x310], xmm0
movaps xmmword [rbp + 0x320], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee2c
mov rsi, rax
cmp rax, 0xf
ja 0x14009b882
mov qword [rbp + 0x320], rsi
mov qword [rbp + 0x328], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x310]
lea rdx, [rbp + 0x24f0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x310
jmp 0x14009b908
mov qword [rbp + 0x328], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009b8cb
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24c3], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009b8de
lea rcx, [rbx + 1]
mov byte [rbp + 0x24c3], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x310], rdi
mov qword [rbp + 0x320], rsi
mov qword [rbp + 0x328], rbx
lea rdx, [rbp + 0x24f0]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov byte [rbp + 0x24c3], 0
lea rsi, [rbp + 0x24d0]
lea rdx, [rbp + 0x310]
lea r8, [rbp + 0xf50]
lea r9, [rbp + 0xf30]
mov rcx, rsi
call fcn.14006b7c0
lea rcx, [rbp + 0x2540]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, qword [rbp + 0x24e8]
cmp qword [rbp + 0x24e0], rax
jne 0x14009b97f
cmp rdi, 0x10
jb 0x14009b95f
mov rsi, qword [rbp + 0x24d0]
lea rdx, [rbp + 0x2540]
mov rcx, rsi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
cmp rdi, 0x10
jae 0x14009b987
jmp 0x14009b9bf
xor esi, esi
cmp rdi, 0x10
jb 0x14009b9bf
mov rcx, qword [rbp + 0x24d0]
lea rdx, [rdi + 1]
cmp rdx, 0x1000
jb 0x14009b9ba
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400aed8a
add rdi, 0x28
mov rdx, rdi
mov rcx, rax
call fcn.140127e30
mov rax, qword [0x14059d150]
mov byte [rax + 0xae], sil
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
mov word [rbp + 0x2518], 0
movabs rax, 0x6e6f74656c656b73
mov qword [rbp + 0x2510], rax
xorps xmm0, xmm0
movaps xmmword [rbp + 0xf70], xmm0
movaps xmmword [rbp + 0xf80], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x14009ba61
mov qword [rbp + 0xf80], rsi
mov qword [rbp + reloc.WS2_32.dll_ntohs88], 0xf
lea rcx, [rbp + 0xf70]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xf70
jmp 0x14009bad6
mov qword [rbp + reloc.WS2_32.dll_ntohs88], 0xf
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009baa0
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009baac
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xf70], rdi
mov qword [rbp + 0xf80], rsi
mov qword [rbp + 0xf88], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov qword [rbp + 0x2530], r12
mov dword [rbp + 0x2530], 0x75736976
mov word [rbp + 0x2534], 0x6c61
mov byte [rbp + 0x2536], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x2538], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0xf90], xmm0
movaps xmmword [rbp + 0xfa0], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee38
mov rsi, rax
cmp rax, 0xf
ja 0x14009bb67
mov qword [rbp + 0xfa0], rsi
mov qword [rbp + reloc.WS2_32.dll_ntohsa8], 0xf
lea rcx, [rbp + 0xf90]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xf90
jmp 0x14009bbed
mov qword [rbp + reloc.WS2_32.dll_ntohsa8], 0xf
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009bbb0
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24c0], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009bbc3
lea rcx, [rbx + 1]
mov byte [rbp + 0x24c0], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xf90], rdi
mov qword [rbp + 0xfa0], rsi
mov qword [rbp + 0xfa8], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x330], xmm0
movaps xmmword [rbp + 0x340], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee44
mov rsi, rax
cmp rax, 0xf
ja 0x14009bc70
mov qword [rbp + 0x340], rsi
mov qword [rbp + 0x348], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x330]
lea rdx, [rbp + 0x24f0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x330
jmp 0x14009bcf6
mov qword [rbp + 0x348], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009bcb9
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24c1], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009bccc
lea rcx, [rbx + 1]
mov byte [rbp + 0x24c1], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x330], rdi
mov qword [rbp + 0x340], rsi
mov qword [rbp + 0x348], rbx
lea rdx, [rbp + 0x24f0]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov byte [rbp + 0x24c1], 0
lea rsi, [rbp + 0x24d0]
lea rdx, [rbp + 0x330]
lea r8, [rbp + 0xf90]
lea r9, [rbp + 0xf70]
mov rcx, rsi
call fcn.14006b7c0
lea rcx, [rbp + 0x2540]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, qword [rbp + 0x24e8]
cmp qword [rbp + 0x24e0], rax
jne 0x14009bd6d
cmp rdi, 0x10
jb 0x14009bd4d
mov rsi, qword [rbp + 0x24d0]
lea rdx, [rbp + 0x2540]
mov rcx, rsi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
cmp rdi, 0x10
jae 0x14009bd75
jmp 0x14009bdad
xor esi, esi
cmp rdi, 0x10
jb 0x14009bdad
mov rcx, qword [rbp + 0x24d0]
lea rdx, [rdi + 1]
cmp rdx, 0x1000
jb 0x14009bda8
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400aed8a
add rdi, 0x28
mov rdx, rdi
mov rcx, rax
call fcn.140127e30
mov rax, qword [0x14059d150]
mov byte [rax + 0x20], sil
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
movabs rax, 0x2c262e2a282d02
mov qword [rbp + 0x2510], rax
mov dword [rbp + 0x2510], 0x6c6d6941
mov word [rbp + 0x2514], 0x6e69
mov byte [rbp + 0x2516], 0x65
mov byte [rbp + 0x2518], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0xfb0], xmm0
movaps xmmword [rbp + 0xfc0], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x14009be64
mov qword [rbp + 0xfc0], rsi
mov qword [rbp + reloc.WS2_32.dll_ntohsc8], 0xf
lea rcx, [rbp + 0xfb0]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xfb0
jmp 0x14009bed9
mov qword [rbp + reloc.WS2_32.dll_ntohsc8], 0xf
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009bea3
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009beaf
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xfb0], rdi
mov qword [rbp + 0xfc0], rsi
mov qword [rbp + 0xfc8], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov qword [rbp + 0x2530], r14
mov dword [rbp + 0x2530], 0x626d6961
mov word [rbp + 0x2534], 0x746f
xorps xmm0, xmm0
movaps xmmword [rbp + 0xfd0], xmm0
movaps xmmword [rbp + 0xfe0], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee50
mov rsi, rax
cmp rax, 0xf
ja 0x14009bf5c
mov qword [rbp + 0xfe0], rsi
mov qword [rbp + reloc.WS2_32.dll_ntohse8], 0xf
lea rcx, [rbp + 0xfd0]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xfd0
jmp 0x14009bfe2
mov qword [rbp + reloc.WS2_32.dll_ntohse8], 0xf
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009bfa5
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24be], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009bfb8
lea rcx, [rbx + 1]
mov byte [rbp + 0x24be], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xfd0], rdi
mov qword [rbp + 0xfe0], rsi
mov qword [rbp + 0xfe8], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x350], xmm0
movaps xmmword [rbp + 0x360], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee5c
mov rsi, rax
cmp rax, 0xf
ja 0x14009c065
mov qword [rbp + 0x360], rsi
mov qword [rbp + 0x368], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x350]
lea rdx, [rbp + 0x24f0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x350
jmp 0x14009c0eb
mov qword [rbp + 0x368], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009c0ae
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24bf], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009c0c1
lea rcx, [rbx + 1]
mov byte [rbp + 0x24bf], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x350], rdi
mov qword [rbp + 0x360], rsi
mov qword [rbp + 0x368], rbx
lea rdx, [rbp + 0x24f0]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov byte [rbp + 0x24bf], 0
lea rsi, [rbp + 0x24d0]
lea rdx, [rbp + 0x350]
lea r8, [rbp + 0xfd0]
lea r9, [rbp + 0xfb0]
mov rcx, rsi
call fcn.14006b7c0
lea rcx, [rbp + 0x2540]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, qword [rbp + 0x24e8]
cmp qword [rbp + 0x24e0], rax
jne 0x14009c162
cmp rdi, 0x10
jb 0x14009c142
mov rsi, qword [rbp + 0x24d0]
lea rdx, [rbp + 0x2540]
mov rcx, rsi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
cmp rdi, 0x10
jae 0x14009c16a
jmp 0x14009c1a2
xor esi, esi
cmp rdi, 0x10
jb 0x14009c1a2
mov rcx, qword [rbp + 0x24d0]
lea rdx, [rdi + 1]
cmp rdx, 0x1000
jb 0x14009c19d
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400aed8a
add rdi, 0x28
mov rdx, rdi
mov rcx, rax
call fcn.140127e30
mov rax, qword [0x14059d150]
mov byte [rax + 0x74], sil
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
mov word [rbp + 0x2519], 0
movabs rax, 0x6f4272656e726f43
mov qword [rbp + 0x2510], rax
mov byte [rbp + 0x2518], pe_nt_image_headers64
xorps xmm0, xmm0
movaps xmmword [rbp + 0xff0], xmm0
movaps xmmword [rbp + 0x1000], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x14009c248
mov qword [rbp + 0x1000], rsi
mov qword [rbp + 0x1008], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0xff0]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0xff0
jmp 0x14009c2bd
mov qword [rbp + 0x1008], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009c287
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009c293
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0xff0], rdi
mov qword [rbp + 0x1000], rsi
mov qword [rbp + 0x1008], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov qword [rbp + 0x2530], r12
mov dword [rbp + 0x2530], 0x75736976
mov word [rbp + 0x2534], 0x6c61
mov byte [rbp + 0x2536], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x2538], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1010], xmm0
movaps xmmword [rbp + 0x1020], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee68
mov rsi, rax
cmp rax, 0xf
ja 0x14009c34e
mov qword [rbp + 0x1020], rsi
mov qword [rbp + 0x1028], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x1010]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x1010
jmp 0x14009c3d4
mov qword [rbp + 0x1028], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009c397
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24bc], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009c3aa
lea rcx, [rbx + 1]
mov byte [rbp + 0x24bc], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x1010], rdi
mov qword [rbp + 0x1020], rsi
mov qword [rbp + 0x1028], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x370], xmm0
movaps xmmword [rbp + 0x380], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee74
mov rsi, rax
cmp rax, 0xf
ja 0x14009c457
mov qword [rbp + 0x380], rsi
mov qword [rbp + 0x388], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x370]
lea rdx, [rbp + 0x24f0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x370
jmp 0x14009c4dd
mov qword [rbp + 0x388], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009c4a0
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24bd], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009c4b3
lea rcx, [rbx + 1]
mov byte [rbp + 0x24bd], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x370], rdi
mov qword [rbp + 0x380], rsi
mov qword [rbp + 0x388], rbx
lea rdx, [rbp + 0x24f0]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov byte [rbp + 0x24bd], 0
lea rsi, [rbp + 0x24d0]
lea rdx, [rbp + 0x370]
lea r8, [rbp + 0x1010]
lea r9, [rbp + 0xff0]
mov rcx, rsi
call fcn.14006b7c0
lea rcx, [rbp + 0x2540]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, qword [rbp + 0x24e8]
cmp qword [rbp + 0x24e0], rax
jne 0x14009c554
cmp rdi, 0x10
jb 0x14009c534
mov rsi, qword [rbp + 0x24d0]
lea rdx, [rbp + 0x2540]
mov rcx, rsi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
cmp rdi, 0x10
jae 0x14009c55c
jmp 0x14009c594
xor esi, esi
cmp rdi, 0x10
jb 0x14009c594
mov rcx, qword [rbp + 0x24d0]
lea rdx, [rdi + 1]
cmp rdx, 0x1000
jb 0x14009c58f
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400aed8a
add rdi, 0x28
mov rdx, rdi
mov rcx, rax
call fcn.140127e30
mov rax, qword [0x14059d150]
mov byte [rax + 0x68], sil
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
movabs rax, 0x2c262e2a31310c
mov qword [rbp + 0x2510], rax
mov dword [rbp + 0x2510], 0x6c74754f
mov word [rbp + 0x2514], 0x6e69
mov byte [rbp + 0x2516], 0x65
mov byte [rbp + 0x2518], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1030], xmm0
movaps xmmword [rbp + 0x1040], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x14009c64b
mov qword [rbp + 0x1040], rsi
mov qword [rbp + 0x1048], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x1030]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x1030
jmp 0x14009c6c0
mov qword [rbp + 0x1048], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009c68a
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009c696
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x1030], rdi
mov qword [rbp + 0x1040], rsi
mov qword [rbp + 0x1048], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov qword [rbp + 0x2530], r12
mov dword [rbp + 0x2530], 0x75736976
mov word [rbp + 0x2534], 0x6c61
mov byte [rbp + 0x2536], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x2538], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1050], xmm0
movaps xmmword [rbp + 0x1060], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee80
mov rsi, rax
cmp rax, 0xf
ja 0x14009c751
mov qword [rbp + 0x1060], rsi
mov qword [rbp + 0x1068], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x1050]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x1050
jmp 0x14009c7d7
mov qword [rbp + 0x1068], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009c79a
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24ba], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009c7ad
lea rcx, [rbx + 1]
mov byte [rbp + 0x24ba], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x1050], rdi
mov qword [rbp + 0x1060], rsi
mov qword [rbp + 0x1068], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x390], xmm0
movaps xmmword [rbp + 0x3a0], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee8c
mov rsi, rax
cmp rax, 0xf
ja 0x14009c85a
mov qword [rbp + 0x3a0], rsi
mov qword [rbp + 0x3a8], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x390]
lea rdx, [rbp + 0x24f0]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x390
jmp 0x14009c8e0
mov qword [rbp + 0x3a8], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009c8a3
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24bb], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009c8b6
lea rcx, [rbx + 1]
mov byte [rbp + 0x24bb], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x390], rdi
mov qword [rbp + 0x3a0], rsi
mov qword [rbp + 0x3a8], rbx
lea rdx, [rbp + 0x24f0]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov byte [rbp + 0x24bb], 0
lea rsi, [rbp + 0x24d0]
lea rdx, [rbp + 0x390]
lea r8, [rbp + 0x1050]
lea r9, [rbp + 0x1030]
mov rcx, rsi
call fcn.14006b7c0
lea rcx, [rbp + 0x2540]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov rdi, qword [rbp + 0x24e8]
cmp qword [rbp + 0x24e0], rax
jne 0x14009c957
cmp rdi, 0x10
jb 0x14009c937
mov rsi, qword [rbp + 0x24d0]
lea rdx, [rbp + 0x2540]
mov rcx, rsi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete sil
cmp rdi, 0x10
jae 0x14009c95f
jmp 0x14009c997
xor esi, esi
cmp rdi, 0x10
jb 0x14009c997
mov rcx, qword [rbp + 0x24d0]
lea rdx, [rdi + 1]
cmp rdx, 0x1000
jb 0x14009c992
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x1400aed8a
add rdi, 0x28
mov rdx, rdi
mov rcx, rax
call fcn.140127e30
mov rax, qword [0x14059d150]
mov byte [rax + 0x49], sil
mov word [rbp + 0x2540], WSACleanup
mov byte [rbp + 0x2540], Ordinal_50
mov byte [rbp + 0x2542], 0
mov word [rbp + 0x2534], 0
mov dword [rbp + 0x2530], 0x64616548
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1070], xmm0
movaps xmmword [rbp + 0x1080], xmm0
lea rcx, [rbp + 0x2530]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aed85
mov rsi, rax
cmp rax, 0xf
ja 0x14009ca2f
mov qword [rbp + 0x1080], rsi
mov qword [rbp + 0x1088], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x1070]
lea rdx, [rbp + 0x2530]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x1070
jmp 0x14009caa4
mov qword [rbp + 0x1088], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009ca6e
lea rcx, [rbx + 0x28]
call fcn.140127dec
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009ca7a
lea rcx, [rbx + 1]
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x1070], rdi
mov qword [rbp + 0x1080], rsi
mov qword [rbp + 0x1088], rbx
lea rdx, [rbp + 0x2530]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
mov qword [rbp + 0x2510], r12
mov dword [rbp + 0x2510], 0x75736976
mov word [rbp + 0x2514], 0x6c61
mov byte [rbp + 0x2516], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x2518], 0
xorps xmm0, xmm0
movaps xmmword [rbp + 0x1090], xmm0
movaps xmmword [rbp + 0x10a0], xmm0
lea rcx, [rbp + 0x2510]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aee98
mov rsi, rax
cmp rax, 0xf
ja 0x14009cb35
mov qword [rbp + 0x10a0], rsi
mov qword [rbp + 0x10a8], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x1090]
lea rdx, [rbp + 0x2510]
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rbp
add rsi, 0x1090
jmp 0x14009cbbb
mov qword [rbp + 0x10a8], reloc.WS2_32.dll_ntohs
mov rax, rsi
or rax, 0xf
cmp rax, 0x17
mov ebx, reloc.WLDAP32.dll_Ordinal_22
cmovae rbx, rax
cmp rbx, 0xfff
jb 0x14009cb7e
lea rcx, [rbx + 0x28]
mov byte [rbp + 0x24b8], 1
call fcn.140127dec
mov rdi, rax
add rdi, 0x27
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14009cb91
lea rcx, [rbx + 1]
mov byte [rbp + 0x24b8], 1
call fcn.140127dec
mov rdi, rax
mov qword [rbp + 0x1090], rdi
mov qword [rbp + 0x10a0], rsi
mov qword [rbp + 0x10a8], rbx
lea rdx, [rbp + 0x2510]
mov rcx, rdi
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
add rsi, rdi
mov byte [rsi], 0
movaps xmmword [rbp + 0x24f0], xmm6
mov dword [rbp + 0x2500], 0x333a
mov word [rbp + 0x2500], 0x6769
xorps xmm0, xmm0
movaps xmmword [rbp + 0x3b0], xmm0
movaps xmmword [rbp + 0x3c0], xmm0
lea rcx, [rbp + 0x24f0]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
test rax, rax
js 0x1400aeea4
mov rsi, rax
cmp rax, 0xf
ja 0x14009cc3e
call fcn.140008e60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov byte [rbp + 0x24ce], 1
call fcn.140008e60
mov byte [rbp + 0x24cf], 1
call fcn.140008e60
mov byte [rbp + 0x24cc], 1
call fcn.140008e60
mov byte [rbp + 0x24cd], 1
call fcn.140008e60
mov byte [rbp + 0x24ca], 1
call fcn.140008e60
mov byte [rbp + 0x24cb], 1
call fcn.140008e60
mov byte [rbp + 0x24c8], 1
call fcn.140008e60
mov byte [rbp + 0x24c9], 1
call fcn.140008e60
mov byte [rbp + 0x24c6], 1
call fcn.140008e60
mov byte [rbp + 0x24c7], 1
call fcn.140008e60
mov byte [rbp + 0x24c4], 1
call fcn.140008e60
mov byte [rbp + 0x24c5], 1
call fcn.140008e60
mov byte [rbp + 0x24c2], 1
call fcn.140008e60
mov byte [rbp + 0x24c3], 1
call fcn.140008e60
mov byte [rbp + 0x24c0], 1
call fcn.140008e60
mov byte [rbp + 0x24c1], 1
call fcn.140008e60
mov byte [rbp + 0x24be], 1
call fcn.140008e60
mov byte [rbp + 0x24bf], 1
call fcn.140008e60
mov byte [rbp + 0x24bc], 1
call fcn.140008e60
mov byte [rbp + 0x24bd], 1
call fcn.140008e60
mov byte [rbp + 0x24ba], 1
call fcn.140008e60
mov byte [rbp + 0x24bb], 1
call fcn.140008e60
mov byte [rbp + 0x24b8], 1
call fcn.140008e60
mov byte [rbp + 0x24b9], 1
call fcn.140008e60
mov byte [rbp + 0x24b6], 1
call fcn.140008e60
mov byte [rbp + 0x24b7], 1
call fcn.140008e60
mov byte [rbp + 0x24b4], 1
call fcn.140008e60
mov byte [rbp + 0x24b5], 1
call fcn.140008e60
mov byte [rbp + 0x24b2], 1
call fcn.140008e60
mov byte [rbp + 0x24b3], 1
call fcn.140008e60
mov byte [rbp + 0x24b0], 1
call fcn.140008e60
mov byte [rbp + 0x24b1], 1
call fcn.140008e60
mov byte [rbp + 0x24ae], 1
call fcn.140008e60
mov byte [rbp + 0x24af], 1
call fcn.140008e60
mov byte [rbp + 0x24ac], 1
call fcn.140008e60
mov byte [rbp + 0x24ad], 1
call fcn.140008e60
mov byte [rbp + 0x24aa], 1
call fcn.140008e60
mov byte [rbp + 0x24ab], 1
call fcn.140008e60
mov byte [rbp + 0x24a8], 1
call fcn.140008e60
mov byte [rbp + 0x24a9], 1
call fcn.140008e60
mov byte [rbp + 0x24a6], 1
call fcn.140008e60
mov byte [rbp + 0x24a7], 1
call fcn.140008e60
mov byte [rbp + 0x24a4], 1
call fcn.140008e60
mov byte [rbp + 0x24a5], 1
call fcn.140008e60
mov byte [rbp + 0x24a2], 1
call fcn.140008e60
mov byte [rbp + 0x24a3], 1
call fcn.140008e60
mov byte [rbp + 0x24a0], 1
call fcn.140008e60
mov byte [rbp + 0x24a1], 1
call fcn.140008e60
mov byte [rbp + 0x249e], 1
call fcn.140008e60
mov byte [rbp + 0x249f], 1
call fcn.140008e60
mov byte [rbp + 0x249c], 1
call fcn.140008e60
mov byte [rbp + 0x249d], 1
call fcn.140008e60
mov byte [rbp + 0x249a], 1
call fcn.140008e60
mov byte [rbp + 0x249b], 1
call fcn.140008e60
mov byte [rbp + 0x2498], 1
call fcn.140008e60
mov byte [rbp + 0x2499], 1
call fcn.140008e60
mov byte [rbp + 0x2496], 1
call fcn.140008e60
mov byte [rbp + 0x2497], 1
call fcn.140008e60
mov byte [rbp + 0x2494], 1
call fcn.140008e60
mov byte [rbp + 0x2495], 1
call fcn.140008e60
mov byte [rbp + 0x2492], 1
call fcn.140008e60
mov byte [rbp + 0x2493], 1
call fcn.140008e60
mov byte [rbp + 0x2490], 1
call fcn.140008e60
mov byte [rbp + 0x2491], 1
call fcn.140008e60
mov byte [rbp + 0x248e], 1
call fcn.140008e60
mov byte [rbp + 0x248f], 1
call fcn.140008e60
mov byte [rbp + 0x248c], 1
call fcn.140008e60
mov byte [rbp + 0x248d], 1
call fcn.140008e60
mov byte [rbp + 0x248a], 1
call fcn.140008e60
mov byte [rbp + 0x248b], 1
call fcn.140008e60
mov byte [rbp + 0x2488], 1
call fcn.140008e60
mov byte [rbp + 0x2489], 1
call fcn.140008e60
mov byte [rbp + 0x2486], 1
call fcn.140008e60
mov byte [rbp + 0x2487], 1
call fcn.140008e60
mov byte [rbp + 0x2484], 1
call fcn.140008e60
mov byte [rbp + 0x2485], 1
call fcn.140008e60
mov byte [rbp + 0x2482], 1
call fcn.140008e60
mov byte [rbp + 0x2483], 1
call fcn.140008e60
mov byte [rbp + 0x2480], 1
call fcn.140008e60
mov byte [rbp + 0x2481], 1
call fcn.140008e60
mov byte [rbp + 0x247e], 1
call fcn.140008e60
mov byte [rbp + 0x247f], 1
call fcn.140008e60
mov byte [rbp + 0x247c], 1
call fcn.140008e60
mov byte [rbp + 0x247d], 1
call fcn.140008e60
mov byte [rbp + 0x247a], 1
call fcn.140008e60
mov byte [rbp + 0x247b], 1
call fcn.140008e60
mov byte [rbp + 0x2478], 1
call fcn.140008e60
mov byte [rbp + 0x2479], 1
call fcn.140008e60
mov byte [rbp + 0x2476], 1
call fcn.140008e60
mov byte [rbp + 0x2477], 1
call fcn.140008e60
mov byte [rbp + 0x2474], 1
call fcn.140008e60
mov byte [rbp + 0x2475], 1
call fcn.140008e60
mov byte [rbp + 0x2472], 1
call fcn.140008e60
mov byte [rbp + 0x2473], 1
call fcn.140008e60
mov byte [rbp + 0x2470], 1
call fcn.140008e60
mov byte [rbp + 0x2471], 1
call fcn.140008e60
mov byte [rbp + 0x246e], 1
call fcn.140008e60
mov byte [rbp + 0x246f], 1
call fcn.140008e60
mov byte [rbp + 0x246c], 1
call fcn.140008e60
mov byte [rbp + 0x246d], 1
call fcn.140008e60
mov byte [rbp + 0x246a], 1
call fcn.140008e60
mov byte [rbp + 0x246b], 1
call fcn.140008e60
mov byte [rbp + 0x2468], 1
call fcn.140008e60
mov byte [rbp + 0x2469], 1
call fcn.140008e60
mov byte [rbp + 0x2466], 1
call fcn.140008e60
mov byte [rbp + 0x2467], 1
call fcn.140008e60
mov byte [rbp + 0x2464], 1
call fcn.140008e60
mov byte [rbp + 0x2465], 1
call fcn.140008e60
mov byte [rbp + 0x2462], 1
call fcn.140008e60
mov byte [rbp + 0x2463], 1
call fcn.140008e60
mov byte [rbp + 0x2460], 1
call fcn.140008e60
mov byte [rbp + 0x2461], 1
call fcn.140008e60
mov byte [rbp + 0x245e], 1
call fcn.140008e60
mov byte [rbp + 0x245f], 1
call fcn.140008e60
mov byte [rbp + 0x245c], 1
call fcn.140008e60
mov byte [rbp + 0x245d], 1
call fcn.140008e60
mov byte [rbp + 0x245a], 1
call fcn.140008e60
mov byte [rbp + 0x245b], 1
call fcn.140008e60
mov byte [rbp + 0x2458], 1
call fcn.140008e60
mov byte [rbp + 0x2459], 1
call fcn.140008e60
mov byte [rbp + 0x2456], 1
call fcn.140008e60
mov byte [rbp + 0x2457], 1
call fcn.140008e60
mov byte [rbp + 0x2454], 1
call fcn.140008e60
mov byte [rbp + 0x2455], 1
call fcn.140008e60
mov byte [rbp + 0x2452], 1
call fcn.140008e60
mov byte [rbp + 0x2453], 1
call fcn.140008e60
mov byte [rbp + 0x2450], 1
call fcn.140008e60
mov byte [rbp + 0x2451], 1
call fcn.140008e60
mov byte [rbp + 0x244e], 1
call fcn.140008e60
mov byte [rbp + 0x244f], 1
call fcn.140008e60
mov byte [rbp + 0x244c], 1
call fcn.140008e60
mov byte [rbp + 0x244d], 1
call fcn.140008e60
mov byte [rbp + 0x244a], 1
call fcn.140008e60
mov byte [rbp + 0x244b], 1
call fcn.140008e60
mov byte [rbp + 0x2448], 1
call fcn.140008e60
mov byte [rbp + 0x2449], 1
call fcn.140008e60
mov byte [rbp + 0x2446], 1
call fcn.140008e60
mov byte [rbp + 0x2447], 1
call fcn.140008e60
mov byte [rbp + 0x2444], 1
call fcn.140008e60
mov byte [rbp + 0x2445], 1
call fcn.140008e60
mov byte [rbp + 0x2442], 1
call fcn.140008e60
mov byte [rbp + 0x2443], 1
call fcn.140008e60
mov byte [rbp + 0x2440], 1
call fcn.140008e60
mov byte [rbp + 0x2441], 1
call fcn.140008e60
mov byte [rbp + 0x243e], 1
call fcn.140008e60
mov byte [rbp + 0x243f], 1
call fcn.140008e60
mov byte [rbp + 0x243c], 1
call fcn.140008e60
mov byte [rbp + 0x243d], 1
call fcn.140008e60
mov byte [rbp + 0x243a], 1
call fcn.140008e60
mov byte [rbp + 0x243b], 1
call fcn.140008e60
mov byte [rbp + 0x2438], 1
call fcn.140008e60
mov byte [rbp + 0x2439], 1
call fcn.140008e60
mov byte [rbp + 0x2436], 1
call fcn.140008e60
mov byte [rbp + 0x2437], 1
call fcn.140008e60
mov byte [rbp + 0x2434], 1
call fcn.140008e60
mov byte [rbp + 0x2435], 1
call fcn.140008e60
mov byte [rbp + 0x2432], 1
call fcn.140008e60
mov byte [rbp + 0x2433], 1
call fcn.140008e60
mov byte [rbp + 0x2430], 1
call fcn.140008e60
mov byte [rbp + 0x2431], 1
call fcn.140008e60
mov byte [rbp + 0x242e], 1
call fcn.140008e60
mov byte [rbp + 0x242f], 1
call fcn.140008e60
mov byte [rbp + 0x242c], 1
call fcn.140008e60
mov byte [rbp + 0x242d], 1
call fcn.140008e60
mov byte [rbp + 0x242a], 1
call fcn.140008e60
mov byte [rbp + 0x242b], 1
call fcn.140008e60
mov byte [rbp + 0x2428], 1
call fcn.140008e60
mov byte [rbp + 0x2429], 1
call fcn.140008e60
mov byte [rbp + 0x2426], 1
call fcn.140008e60
mov byte [rbp + 0x2427], 1
call fcn.140008e60
mov byte [rbp + 0x2424], 1
call fcn.140008e60
mov byte [rbp + 0x2425], 1
call fcn.140008e60
mov byte [rbp + 0x2422], 1
call fcn.140008e60
mov byte [rbp + 0x2423], 1
call fcn.140008e60
mov byte [rbp + 0x2420], 1
call fcn.140008e60
mov byte [rbp + 0x2421], 1
call fcn.140008e60
mov byte [rbp + 0x241e], 1
call fcn.140008e60
mov byte [rbp + 0x241f], 1
call fcn.140008e60
mov byte [rbp + 0x241c], 1
call fcn.140008e60
mov byte [rbp + 0x241d], 1
call fcn.140008e60
int3