Function at 0x140001d20
Capabilities:
Authenticate hmac
Parse pe header
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x500]
sub rsp, 0x600
movdqa xmm1, xmmword [0x14004c810]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x26
mov r8b, 0x45
mov r9b, 0x5e
mov r10b, reloc.WS2_32.dll_setsockopt
mov r11b, 8
movzx ebx, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
xor r9b, cl
mov byte [rsp + 0x32], r9b
xor r10b, cl
mov byte [rsp + 0x33], r10b
xor r11b, cl
mov byte [rsp + 0x34], r11b
xor bl, cl
mov byte [rsp + 0x35], bl
mov byte [rsp + 0x36], 0
lea rdx, [rsp + 0x21]
lea rcx, [rsp + 0x50]
call fcn.140003730
nop
mov byte [rsp + 0x20], 0x79
mov al, reloc.WLDAP32.dll_Ordinal_22
mov cl, reloc.WS2_32.dll_setsockopt
movzx edx, cl
xor r8b, r8b
mov r9b, Ordinal_30
mov r10b, reloc.WLDAP32.dll_Ordinal_27
mov r11b, reloc.WLDAP32.dll_Ordinal_30
mov bl, 0x57
mov dil, Ordinal_30
mov sil, 1
movzx r14d, dil
xor r15d, r15d
xor al, 0x79
mov byte [rsp + 0x21], al
xor cl, 0x79
mov byte [rsp + 0x22], cl
xor dl, 0x79
mov byte [rsp + 0x23], dl
xor r8b, 0x79
mov byte [rsp + 0x24], r8b
xor r9b, 0x79
mov byte [rsp + 0x25], r9b
xor r10b, 0x79
mov byte [rsp + 0x26], r10b
xor r11b, 0x79
mov byte [rsp + 0x27], r11b
xor bl, 0x79
mov byte [rsp + 0x28], bl
xor dil, 0x79
mov byte [rsp + 0x29], dil
xor sil, 0x79
mov byte [rsp + 0x2a], sil
xor r14b, 0x79
mov byte [rsp + 0x2b], r14b
mov byte [rsp + 0x2c], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rsp + 0x70]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140001ea0
lea rdx, [rsp + 0x21]
lea rcx, [rsp + 0x70]
call fcn.140003890
nop
mov byte [rsp + 0x37], 0x65
mov al, Ordinal_30
mov cl, 0x53
mov dl, 0x51
mov r8b, 1
mov r9b, 7
mov r10b, 2
mov r11b, 0x4b
xor dil, dil
movzx esi, al
xor r14b, r14b
xor r15d, r15d
xor al, 0x65
mov byte [rsp + 0x38], al
xor cl, 0x65
mov byte [rsp + 0x39], cl
xor dl, 0x65
mov byte [rsp + 0x3a], dl
xor r8b, 0x65
mov byte [rsp + 0x3b], r8b
xor r9b, 0x65
mov byte [rsp + 0x3c], r9b
xor r10b, 0x65
mov byte [rsp + 0x3d], r10b
xor r11b, 0x65
mov byte [rsp + 0x3e], r11b
xor dil, 0x65
mov byte [rsp + 0x3f], dil
xor sil, 0x65
mov byte [rsp + 0x40], sil
xor r14b, 0x65
mov byte [rsp + 0x41], r14b
mov byte [rsp + 0x42], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp - 0x70]
call fcn.140003870
nop
lea rax, [rsp + 0x38]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140001f50
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x70]
call fcn.140003890
nop
mov byte [rsp + 0x37], 0x46
mov al, 0x3e
mov cl, 0x75
mov dl, reloc.WS2_32.dll_WSACleanup
mov r8b, Ordinal_35
mov r9b, 0x24
mov r10b, reloc.WLDAP32.dll_Ordinal_33
mov r11b, 0x68
mov dil, reloc.WLDAP32.dll_Ordinal_35
movzx esi, al
movzx r14d, dil
xor r15d, r15d
xor al, 0x46
mov byte [rsp + 0x38], al
xor cl, 0x46
mov byte [rsp + 0x39], cl
xor dl, 0x46
mov byte [rsp + 0x3a], dl
xor r8b, 0x46
mov byte [rsp + 0x3b], r8b
xor r9b, 0x46
mov byte [rsp + 0x3c], r9b
xor r10b, 0x46
mov byte [rsp + 0x3d], r10b
xor r11b, 0x46
mov byte [rsp + 0x3e], r11b
xor dil, 0x46
mov byte [rsp + 0x3f], dil
xor sil, 0x46
mov byte [rsp + 0x40], sil
xor r14b, 0x46
mov byte [rsp + 0x41], r14b
mov byte [rsp + 0x42], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp - 0x50]
call fcn.140003870
nop
lea rax, [rsp + 0x38]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140002000
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x50]
call fcn.140003890
nop
mov byte [rsp + 0x37], reloc.WS2_32.dll_listen
mov al, 0x69
mov cl, 0x64
mov dl, 0x68
mov r8b, reloc.WLDAP32.dll_Ordinal_35
movzx r9d, dl
mov r10b, 0x75
movzx r11d, dl
xor edi, edi
xor al, 0xd
mov byte [rsp + 0x38], al
xor cl, 0xd
mov byte [rsp + 0x39], cl
xor dl, 0xd
mov byte [rsp + 0x3a], dl
xor r8b, 0xd
mov byte [rsp + 0x3b], r8b
xor r9b, 0xd
mov byte [rsp + 0x3c], r9b
xor r10b, 0xd
mov byte [rsp + 0x3d], r10b
xor r11b, 0xd
mov byte [rsp + 0x3e], r11b
mov byte [rsp + 0x3f], dil
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp - 0x30]
call fcn.140003870
nop
lea rax, [rsp + 0x38]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140002090
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x30]
call fcn.140003890
nop
mov byte [rsp + 0x20], 0x3e
mov al, 0x4a
mov cl, 0x5d
mov dl, Ordinal_79
mov r8b, 0x48
mov r9b, 0x57
mov r10b, 0x5b
mov r11b, 0x49
mov dil, reloc.WS2_32.dll_recv
movzx esi, r10b
mov r14b, 0x46
movzx r15d, r10b
xor r12d, r12d
xor al, 0x3e
mov byte [rsp + 0x21], al
xor cl, 0x3e
mov byte [rsp + 0x22], cl
xor dl, 0x3e
mov byte [rsp + 0x23], dl
xor r8b, 0x3e
mov byte [rsp + 0x24], r8b
xor r9b, 0x3e
mov byte [rsp + 0x25], r9b
xor r10b, 0x3e
mov byte [rsp + 0x26], r10b
xor r11b, 0x3e
mov byte [rsp + 0x27], r11b
xor dil, 0x3e
mov byte [rsp + 0x28], dil
xor sil, 0x3e
mov byte [rsp + 0x29], sil
xor r14b, 0x3e
mov byte [rsp + 0x2a], r14b
xor r15b, 0x3e
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp - 0x10]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140002150
lea rdx, [rsp + 0x21]
lea rcx, [rbp - 0x10]
call fcn.140003890
nop
mov byte [rsp + 0x20], 0x60
mov al, 1
mov cl, reloc.WS2_32.dll_setsockopt
mov dl, reloc.WS2_32.dll_sendto
mov r8b, reloc.WS2_32.dll_ntohs
mov r9b, reloc.WS2_32.dll_select
movzx r10d, cl
mov r11b, reloc.WS2_32.dll_ntohl
mov dil, reloc.WS2_32.dll_send
mov sil, Ordinal_79
mov r14b, 5
mov r15b, Ordinal_26
movzx r12d, r14b
xor r13d, r13d
xor al, 0x60
mov byte [rsp + 0x21], al
xor cl, 0x60
mov byte [rsp + 0x22], cl
xor dl, 0x60
mov byte [rsp + 0x23], dl
xor r8b, 0x60
mov byte [rsp + 0x24], r8b
xor r9b, 0x60
mov byte [rsp + 0x25], r9b
xor r10b, 0x60
mov byte [rsp + 0x26], r10b
xor r11b, 0x60
mov byte [rsp + 0x27], r11b
xor dil, 0x60
mov byte [rsp + 0x28], dil
xor sil, 0x60
mov byte [rsp + 0x29], sil
xor r14b, 0x60
mov byte [rsp + 0x2a], r14b
xor r15b, 0x60
mov byte [rsp + 0x2b], r15b
xor r12b, 0x60
mov byte [rsp + 0x2c], r12b
mov byte [rsp + 0x2d], r13b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x10]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140002220
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x10]
call fcn.140003890
nop
mov byte [rsp + 0x20], 0x68
mov al, 9
mov cl, Ordinal_30
mov dl, 0x1c
mov r8b, 7
mov r9b, reloc.WLDAP32.dll_Ordinal_26
movzx r10d, cl
mov r11b, 6
mov dil, reloc.WLDAP32.dll_Ordinal_27
mov sil, listen
mov r14b, 0x46
mov r15b, reloc.WS2_32.dll_listen
mov r12b, reloc.WS2_32.dll_recv
movzx r13d, r15b
xor ebx, ebx
xor al, 0x68
mov byte [rsp + 0x21], al
xor cl, 0x68
mov byte [rsp + 0x22], cl
xor dl, 0x68
mov byte [rsp + 0x23], dl
xor r8b, 0x68
mov byte [rsp + 0x24], r8b
xor r9b, 0x68
mov byte [rsp + 0x25], r9b
xor r10b, 0x68
mov byte [rsp + 0x26], r10b
xor r11b, 0x68
mov byte [rsp + 0x27], r11b
xor dil, 0x68
mov byte [rsp + 0x28], dil
xor sil, 0x68
mov byte [rsp + 0x29], sil
xor r14b, 0x68
mov byte [rsp + 0x2a], r14b
xor r15b, 0x68
mov byte [rsp + 0x2b], r15b
xor r12b, 0x68
mov byte [rsp + 0x2c], r12b
xor r13b, 0x68
mov byte [rsp + 0x2d], r13b
mov byte [rsp + 0x2e], bl
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x30]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140002300
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x30]
call fcn.140003890
nop
mov byte [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_50
mov al, 0x54
mov cl, 0x5b
mov dl, 0x5e
mov r8b, 0x57
mov r9b, 0x5f
mov r10b, 0x5d
mov r11b, 0x5c
mov dil, Ordinal_30
movzx esi, r8b
mov r14b, 0x4a
movzx r15d, r8b
xor r12d, r12d
xor al, 0x32
mov byte [rsp + 0x21], al
xor cl, 0x32
mov byte [rsp + 0x22], cl
xor dl, 0x32
mov byte [rsp + 0x23], dl
xor r8b, 0x32
mov byte [rsp + 0x24], r8b
xor r9b, 0x32
mov byte [rsp + 0x25], r9b
xor r10b, 0x32
mov byte [rsp + 0x26], r10b
xor r11b, 0x32
mov byte [rsp + 0x27], r11b
xor dil, 0x32
mov byte [rsp + 0x28], dil
xor sil, 0x32
mov byte [rsp + 0x29], sil
xor r14b, 0x32
mov byte [rsp + 0x2a], r14b
xor r15b, 0x32
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x50]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400023c0
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x50]
call fcn.140003890
nop
mov byte [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_60
mov al, 0x4c
mov cl, Ordinal_79
mov dl, 0x53
mov r8b, 0x5f
mov r9b, 0x51
movzx r10d, dl
mov r11b, 0x52
mov dil, reloc.WS2_32.dll_select
mov sil, 0x59
mov r14b, 0x44
movzx r15d, sil
xor r12d, r12d
xor al, 0x3c
mov byte [rsp + 0x21], al
xor cl, 0x3c
mov byte [rsp + 0x22], cl
xor dl, 0x3c
mov byte [rsp + 0x23], dl
xor r8b, 0x3c
mov byte [rsp + 0x24], r8b
xor r9b, 0x3c
mov byte [rsp + 0x25], r9b
xor r10b, 0x3c
mov byte [rsp + 0x26], r10b
xor r11b, 0x3c
mov byte [rsp + 0x27], r11b
xor dil, 0x3c
mov byte [rsp + 0x28], dil
xor sil, 0x3c
mov byte [rsp + 0x29], sil
xor r14b, 0x3c
mov byte [rsp + 0x2a], r14b
xor r15b, 0x3c
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x70]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140002480
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x70]
call fcn.140003890
nop
mov byte [rsp + 0x37], 0x50
mov al, Ordinal_35
mov cl, 0x35
mov dl, 0x37
mov r8b, 0x3d
mov r9b, 0x3f
mov r10b, 0x3e
mov r11b, 0x7e
movzx edi, cl
mov sil, Ordinal_41
movzx r14d, cl
xor r15d, r15d
xor al, 0x50
mov byte [rsp + 0x38], al
xor cl, 0x50
mov byte [rsp + 0x39], cl
xor dl, 0x50
mov byte [rsp + 0x3a], dl
xor r8b, 0x50
mov byte [rsp + 0x3b], r8b
xor r9b, 0x50
mov byte [rsp + 0x3c], r9b
xor r10b, 0x50
mov byte [rsp + 0x3d], r10b
xor r11b, 0x50
mov byte [rsp + 0x3e], r11b
xor dil, 0x50
mov byte [rsp + 0x3f], dil
xor sil, 0x50
mov byte [rsp + 0x40], sil
xor r14b, 0x50
mov byte [rsp + 0x41], r14b
mov byte [rsp + 0x42], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x90]
call fcn.140003870
nop
lea rax, [rsp + 0x38]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140002531
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x90]
call fcn.140003890
nop
mov byte [rsp + 0x20], Ordinal_79
mov al, 0x3e
mov cl, reloc.WLDAP32.dll_Ordinal_60
mov dl, reloc.WLDAP32.dll_Ordinal_33
mov r8b, Ordinal_46
mov r9b, 0x2b
mov r10b, 0x36
movzx r11d, al
mov dil, 0x60
movzx esi, r9b
movzx r14d, r10b
movzx r15d, r9b
xor r12d, r12d
xor al, 0x4e
mov byte [rsp + 0x21], al
xor cl, 0x4e
mov byte [rsp + 0x22], cl
xor dl, 0x4e
mov byte [rsp + 0x23], dl
xor r8b, 0x4e
mov byte [rsp + 0x24], r8b
xor r9b, 0x4e
mov byte [rsp + 0x25], r9b
xor r10b, 0x4e
mov byte [rsp + 0x26], r10b
xor r11b, 0x4e
mov byte [rsp + 0x27], r11b
xor dil, 0x4e
mov byte [rsp + 0x28], dil
xor sil, 0x4e
mov byte [rsp + 0x29], sil
xor r14b, 0x4e
mov byte [rsp + 0x2a], r14b
xor r15b, 0x4e
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0xb0]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400025f4
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0xb0]
call fcn.140003890
nop
mov byte [rsp + 0x37], WSAGetLastError
mov al, 2
mov cl, reloc.WS2_32.dll_ntohs
mov dl, 0xa
mov r8b, reloc.WLDAP32.dll_Ordinal_26
mov r9b, 0x45
mov r10b, reloc.WS2_32.dll_ntohl
mov r11b, reloc.WS2_32.dll_send
movzx edi, r10b
xor esi, esi
xor al, 0x6b
mov byte [rsp + 0x38], al
xor cl, 0x6b
mov byte [rsp + 0x39], cl
xor dl, 0x6b
mov byte [rsp + 0x3a], dl
xor r8b, 0x6b
mov byte [rsp + 0x3b], r8b
xor r9b, 0x6b
mov byte [rsp + 0x3c], r9b
xor r10b, 0x6b
mov byte [rsp + 0x3d], r10b
xor r11b, 0x6b
mov byte [rsp + 0x3e], r11b
xor dil, 0x6b
mov byte [rsp + 0x3f], dil
mov byte [rsp + 0x40], sil
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0xd0]
call fcn.140003870
nop
lea rax, [rsp + 0x38]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140002690
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xd0]
call fcn.140003890
nop
mov byte [rsp + 0x37], Ordinal_50
mov al, 0x59
mov cl, 0x54
mov dl, 0x51
mov r8b, 0x41
mov r9b, 6
mov r10b, 4
mov r11b, reloc.WLDAP32.dll_Ordinal_30
mov dil, 0x55
mov sil, 0x48
movzx r14d, dil
xor r15d, r15d
xor al, 0x30
mov byte [rsp + 0x38], al
xor cl, 0x30
mov byte [rsp + 0x39], cl
xor dl, 0x30
mov byte [rsp + 0x3a], dl
xor r8b, 0x30
mov byte [rsp + 0x3b], r8b
xor r9b, 0x30
mov byte [rsp + 0x3c], r9b
xor r10b, 0x30
mov byte [rsp + 0x3d], r10b
xor r11b, 0x30
mov byte [rsp + 0x3e], r11b
xor dil, 0x30
mov byte [rsp + 0x3f], dil
xor sil, 0x30
mov byte [rsp + 0x40], sil
xor r14b, 0x30
mov byte [rsp + 0x41], r14b
mov byte [rsp + 0x42], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0xf0]
call fcn.140003870
nop
lea rax, [rsp + 0x38]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140002744
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0xf0]
call fcn.140003890
nop
mov byte [rsp + 0x37], Ordinal_32
mov al, 0x75
mov cl, 0x78
mov dl, 0x7d
mov r8b, reloc.WLDAP32.dll_Ordinal_50
mov r9b, 0x79
mov r10b, 0x64
movzx r11d, r9b
xor edi, edi
xor al, 0x1c
mov byte [rsp + 0x38], al
xor cl, 0x1c
mov byte [rsp + 0x39], cl
xor dl, 0x1c
mov byte [rsp + 0x3a], dl
xor r8b, 0x1c
mov byte [rsp + 0x3b], r8b
xor r9b, 0x1c
mov byte [rsp + 0x3c], r9b
xor r10b, 0x1c
mov byte [rsp + 0x3d], r10b
xor r11b, 0x1c
mov byte [rsp + 0x3e], r11b
mov byte [rsp + 0x3f], dil
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x110]
call fcn.140003870
nop
lea rax, [rsp + 0x38]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x1400027d3
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x110]
call fcn.140003890
nop
mov byte [rsp + 0x37], 0x5d
mov al, 0x34
mov cl, reloc.WS2_32.dll_gethostname
mov dl, reloc.WLDAP32.dll_Ordinal_60
mov r8b, 0x6b
mov r9b, 0x69
mov r10b, reloc.WS2_32.dll_WSAStartup
mov r11b, gethostname
mov dil, 0x25
movzx esi, r11b
xor r14d, r14d
xor al, 0x5d
mov byte [rsp + 0x38], al
xor cl, 0x5d
mov byte [rsp + 0x39], cl
xor dl, 0x5d
mov byte [rsp + 0x3a], dl
xor r8b, 0x5d
mov byte [rsp + 0x3b], r8b
xor r9b, 0x5d
mov byte [rsp + 0x3c], r9b
xor r10b, 0x5d
mov byte [rsp + 0x3d], r10b
xor r11b, 0x5d
mov byte [rsp + 0x3e], r11b
xor dil, 0x5d
mov byte [rsp + 0x3f], dil
xor sil, 0x5d
mov byte [rsp + 0x40], sil
mov byte [rsp + 0x41], r14b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x130]
call fcn.140003870
nop
lea rax, [rsp + 0x38]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140002880
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x130]
call fcn.140003890
nop
movdqa xmm1, xmmword [0x14004c820]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, listen
mov r8b, 0x50
mov r9b, reloc.WLDAP32.dll_Ordinal_27
mov r10b, 6
movzx r11d, r9b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
xor r9b, cl
mov byte [rsp + 0x32], r9b
xor r10b, cl
mov byte [rsp + 0x33], r10b
xor r11b, cl
mov byte [rsp + 0x34], r11b
mov byte [rsp + 0x35], 0
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x150]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140002950
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x150]
call fcn.140003890
nop
mov byte [rsp + 0x20], 0x67
mov al, 0x30
mov cl, reloc.WS2_32.dll_ntohl
mov dl, reloc.WS2_32.dll_setsockopt
mov r8b, 2
mov r9b, reloc.WS2_32.dll_sendto
mov r10b, reloc.WS2_32.dll_ntohs
mov r11b, 6
movzx edi, dl
mov sil, ntohl
mov r14b, 0x49
movzx r15d, r8b
mov r12b, Ordinal_32
movzx r13d, r8b
xor ebx, ebx
xor al, 0x67
mov byte [rsp + 0x21], al
xor cl, 0x67
mov byte [rsp + 0x22], cl
xor dl, 0x67
mov byte [rsp + 0x23], dl
xor r8b, 0x67
mov byte [rsp + 0x24], r8b
xor r9b, 0x67
mov byte [rsp + 0x25], r9b
xor r10b, 0x67
mov byte [rsp + 0x26], r10b
xor r11b, 0x67
mov byte [rsp + 0x27], r11b
xor dil, 0x67
mov byte [rsp + 0x28], dil
xor sil, 0x67
mov byte [rsp + 0x29], sil
xor r14b, 0x67
mov byte [rsp + 0x2a], r14b
xor r15b, 0x67
mov byte [rsp + 0x2b], r15b
xor r12b, 0x67
mov byte [rsp + 0x2c], r12b
xor r13b, 0x67
mov byte [rsp + 0x2d], r13b
mov byte [rsp + 0x2e], bl
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x170]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140002a30
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x170]
call fcn.140003890
nop
mov byte [rsp + 0x20], Ordinal_50
mov al, 0x55
mov cl, 0x44
mov dl, 0x5c
mov r8b, 0x41
mov r9b, 0x52
mov r10b, 0x50
movzx r11d, r8b
mov dil, Ordinal_32
mov sil, 0x54
mov r14b, 0x49
movzx r15d, sil
xor r12d, r12d
xor al, 0x31
mov byte [rsp + 0x21], al
xor cl, 0x31
mov byte [rsp + 0x22], cl
xor dl, 0x31
mov byte [rsp + 0x23], dl
xor r8b, 0x31
mov byte [rsp + 0x24], r8b
xor r9b, 0x31
mov byte [rsp + 0x25], r9b
xor r10b, 0x31
mov byte [rsp + 0x26], r10b
xor r11b, 0x31
mov byte [rsp + 0x27], r11b
xor dil, 0x31
mov byte [rsp + 0x28], dil
xor sil, 0x31
mov byte [rsp + 0x29], sil
xor r14b, 0x31
mov byte [rsp + 0x2a], r14b
xor r15b, 0x31
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x190]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140002af1
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x190]
call fcn.140003890
nop
movdqa xmm1, xmmword [0x14004c840]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, reloc.WLDAP32.dll_Ordinal_35
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
mov byte [rsp + 0x31], 0
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x1b0]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140002b93
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x1b0]
call fcn.140003890
nop
mov byte [rsp + reloc.WLDAP32.dll_Ordinal_32], 0x20
mov al, 0x69
mov cl, 0x4d
mov dl, 0x50
mov r8b, reloc.WLDAP32.dll_Ordinal_79
mov r9b, 0x52
mov r10b, 0x54
mov r11b, WSAStartup
mov dil, 0x65
mov sil, 0x63
mov r14b, reloc.WS2_32.dll_ntohl
mov r15b, 0x45
mov r12b, 0x58
movzx r13d, r15b
xor ebx, ebx
xor al, 0x20
mov byte [rsp + 0x21], al
xor cl, 0x20
mov byte [rsp + 0x22], cl
xor dl, 0x20
mov byte [rsp + 0x23], dl
xor r8b, 0x20
mov byte [rsp + 0x24], r8b
xor r9b, 0x20
mov byte [rsp + 0x25], r9b
xor r10b, 0x20
mov byte [rsp + 0x26], r10b
xor r11b, 0x20
mov byte [rsp + 0x27], r11b
xor dil, 0x20
mov byte [rsp + 0x28], dil
xor sil, 0x20
mov byte [rsp + 0x29], sil
xor r14b, 0x20
mov byte [rsp + 0x2a], r14b
xor r15b, 0x20
mov byte [rsp + 0x2b], r15b
xor r12b, 0x20
mov byte [rsp + 0x2c], r12b
xor r13b, 0x20
mov byte [rsp + 0x2d], r13b
mov byte [rsp + 0x2e], bl
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x1d0]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140002c70
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x1d0]
call fcn.140003890
nop
mov byte [rsp + 0x20], reloc.WLDAP32.dll_Ordinal_46
mov al, 0x7e
mov cl, 0x6b
mov dl, 0x7a
mov r8b, 0x41
movzx r9d, r8b
mov r10b, 0x42
mov r11b, 0x5d
xor dil, dil
mov sil, 0x4b
mov r14b, 0x56
movzx r15d, sil
xor r12d, r12d
xor al, 0x2e
mov byte [rsp + 0x21], al
xor cl, 0x2e
mov byte [rsp + 0x22], cl
xor dl, 0x2e
mov byte [rsp + 0x23], dl
xor r8b, 0x2e
mov byte [rsp + 0x24], r8b
xor r9b, 0x2e
mov byte [rsp + 0x25], r9b
xor r10b, 0x2e
mov byte [rsp + 0x26], r10b
xor r11b, 0x2e
mov byte [rsp + 0x27], r11b
xor dil, 0x2e
mov byte [rsp + 0x28], dil
xor sil, 0x2e
mov byte [rsp + 0x29], sil
xor r14b, 0x2e
mov byte [rsp + 0x2a], r14b
xor r15b, 0x2e
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x1f0]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140002d31
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x1f0]
call fcn.140003890
nop
mov byte [rsp + 0x37], WSAGetLastError
mov al, reloc.WLDAP32.dll_Ordinal_32
mov cl, 3
mov dl, reloc.WLDAP32.dll_Ordinal_30
mov r8b, 8
mov r9b, reloc.WLDAP32.dll_Ordinal_60
mov r10b, reloc.WLDAP32.dll_Ordinal_41
mov r11b, 0x42
mov dil, 9
mov sil, reloc.WS2_32.dll_sendto
movzx r14d, dil
xor r15d, r15d
xor al, 0x6c
mov byte [rsp + 0x38], al
xor cl, 0x6c
mov byte [rsp + 0x39], cl
xor dl, 0x6c
mov byte [rsp + 0x3a], dl
xor r8b, 0x6c
mov byte [rsp + 0x3b], r8b
xor r9b, 0x6c
mov byte [rsp + 0x3c], r9b
xor r10b, 0x6c
mov byte [rsp + 0x3d], r10b
xor r11b, 0x6c
mov byte [rsp + 0x3e], r11b
xor dil, 0x6c
mov byte [rsp + 0x3f], dil
xor sil, 0x6c
mov byte [rsp + 0x40], sil
xor r14b, 0x6c
mov byte [rsp + 0x41], r14b
mov byte [rsp + 0x42], r15b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x210]
call fcn.140003870
nop
lea rax, [rsp + 0x38]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140002de5
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x210]
call fcn.140003890
nop
mov byte [rsp + 0x20], WSAGetLastError
mov al, 9
mov cl, 0x18
xor dl, dl
mov r8b, Ordinal_30
mov r9b, reloc.WS2_32.dll_ntohl
mov r10b, ntohl
movzx r11d, r8b
mov dil, 0x43
mov sil, 8
mov r14b, reloc.WS2_32.dll_setsockopt
movzx r15d, sil
xor r12d, r12d
xor al, 0x6d
mov byte [rsp + 0x21], al
xor cl, 0x6d
mov byte [rsp + 0x22], cl
xor dl, 0x6d
mov byte [rsp + 0x23], dl
xor r8b, 0x6d
mov byte [rsp + 0x24], r8b
xor r9b, 0x6d
mov byte [rsp + 0x25], r9b
xor r10b, 0x6d
mov byte [rsp + 0x26], r10b
xor r11b, 0x6d
mov byte [rsp + 0x27], r11b
xor dil, 0x6d
mov byte [rsp + 0x28], dil
xor sil, 0x6d
mov byte [rsp + 0x29], sil
xor r14b, 0x6d
mov byte [rsp + 0x2a], r14b
xor r15b, 0x6d
mov byte [rsp + 0x2b], r15b
mov byte [rsp + 0x2c], r12b
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x230]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140002ea6
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x230]
call fcn.140003890
nop
movdqa xmm1, xmmword [0x14004c800]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, Ordinal_32
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
mov byte [rsp + 0x31], 0
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x250]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140002f50
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x250]
call fcn.140003890
nop
movdqa xmm1, xmmword [0x14004c850]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x51
mov r8b, 0x4c
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
mov byte [rsp + 0x32], 0
movzx edx, byte [rbp + 0x530]
lea rcx, [rbp + 0x270]
call fcn.140003870
nop
lea rax, [rsp + 0x21]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x140003000
mov r8, rbx
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x270]
call fcn.140003890
nop
movdqa xmm1, xmmword [0x14004c870]
movdqu xmmword [rsp + 0x37], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x38], al
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor byte [rsp + 0x40], cl
xor byte [rsp + 0x41], cl
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
mov byte [rsp + 0x47], 0
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x290]
call fcn.140003730
nop
mov byte [rsp + 0x20], 0x5f
mov al, 0x2c
mov cl, Ordinal_50
mov dl, 0x36
mov r8b, reloc.WS2_32.dll_gethostname
movzx r9d, r8b
xor r10b, r10b
mov r11b, gethostname
movzx ebx, dl
mov dil, 0x2b
mov sil, WSAStartup
mov r14b, Ordinal_60
mov r15b, Ordinal_41
movzx r12d, r14b
xor r13d, r13d
xor al, 0x5f
mov byte [rsp + 0x21], al
xor cl, 0x5f
mov byte [rsp + 0x22], cl
xor dl, 0x5f
mov byte [rsp + 0x23], dl
xor r8b, 0x5f
mov byte [rsp + 0x24], r8b
xor r9b, 0x5f
mov byte [rsp + 0x25], r9b
xor r10b, 0x5f
mov byte [rsp + 0x26], r10b
xor r11b, 0x5f
mov byte [rsp + 0x27], r11b
xor bl, 0x5f
mov byte [rsp + 0x28], bl
xor dil, 0x5f
mov byte [rsp + 0x29], dil
xor sil, 0x5f
mov byte [rsp + 0x2a], sil
xor r14b, 0x5f
mov byte [rsp + 0x2b], r14b
xor r15b, 0x5f
mov byte [rsp + 0x2c], r15b
xor r12b, 0x5f
mov byte [rsp + 0x2d], r12b
mov byte [rsp + 0x2e], r13b
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x2b0]
call fcn.140003730
nop
mov byte [rsp + 0x37], 0x5d
mov al, 0x2a
mov cl, 0x34
mov dl, 0x33
mov r8b, reloc.WS2_32.dll_gethostname
mov r9b, 0x3f
mov r10b, Ordinal_60
mov r11b, reloc.WS2_32.dll_WSAStartup
mov bl, gethostname
mov dil, 0x25
movzx esi, bl
xor r14d, r14d
xor al, 0x5d
mov byte [rsp + 0x38], al
xor cl, 0x5d
mov byte [rsp + 0x39], cl
xor dl, 0x5d
mov byte [rsp + 0x3a], dl
xor r8b, 0x5d
mov byte [rsp + 0x3b], r8b
xor r9b, 0x5d
mov byte [rsp + 0x3c], r9b
xor r10b, 0x5d
mov byte [rsp + 0x3d], r10b
xor r11b, 0x5d
mov byte [rsp + 0x3e], r11b
xor bl, 0x5d
mov byte [rsp + 0x3f], bl
xor dil, 0x5d
mov byte [rsp + 0x40], dil
xor sil, 0x5d
mov byte [rsp + 0x41], sil
mov byte [rsp + 0x42], r14b
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x2d0]
call fcn.140003730
nop
movdqa xmm1, xmmword [0x14004c890]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x6a
mov r8b, 0x77
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
mov byte [rsp + 0x32], r14b
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x2f0]
call fcn.140003730
nop
movdqa xmm1, xmmword [0x14004c830]
movdqu xmmword [rsp + 0x37], xmm1
mov dl, Ordinal_41
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x38], al
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor byte [rsp + 0x40], cl
xor byte [rsp + 0x41], cl
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor dl, cl
mov byte [rsp + 0x47], dl
mov byte [rsp + 0x48], r14b
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x310]
call fcn.140003730
nop
mov byte [rsp + 0x20], 0x55
mov al, 0x33
mov cl, reloc.WLDAP32.dll_Ordinal_60
mov dl, Ordinal_50
movzx r8d, dl
mov r9b, reloc.WS2_32.dll_gethostname
mov r10b, Ordinal_50
mov r11b, Ordinal_41
mov bl, 0x7b
movzx edi, r10b
mov sil, Ordinal_46
movzx r14d, r10b
xor r15d, r15d
xor al, 0x55
mov byte [rsp + 0x21], al
xor cl, 0x55
mov byte [rsp + 0x22], cl
xor dl, 0x55
mov byte [rsp + 0x23], dl
xor r8b, 0x55
mov byte [rsp + 0x24], r8b
xor r9b, 0x55
mov byte [rsp + 0x25], r9b
xor r10b, 0x55
mov byte [rsp + 0x26], r10b
xor r11b, 0x55
mov byte [rsp + 0x27], r11b
xor bl, 0x55
mov byte [rsp + 0x28], bl
xor dil, 0x55
mov byte [rsp + 0x29], dil
xor sil, 0x55
mov byte [rsp + 0x2a], sil
xor r14b, 0x55
mov byte [rsp + 0x2b], r14b
mov byte [rsp + 0x2c], r15b
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x330]
call fcn.140003730
nop
mov byte [rsp + 0x37], 1
mov al, 0x75
mov cl, 0x77
mov dl, 0x5e
mov r8b, 0x76
mov r9b, reloc.WLDAP32.dll_Ordinal_50
mov r10b, 0x33
mov r11b, 0x2f
mov bl, 0x64
mov dil, 0x79
movzx esi, bl
xor r14d, r14d
xor al, 1
mov byte [rsp + 0x38], al
xor cl, 1
mov byte [rsp + 0x39], cl
xor dl, 1
mov byte [rsp + 0x3a], dl
xor r8b, 1
mov byte [rsp + 0x3b], r8b
xor r9b, 1
mov byte [rsp + 0x3c], r9b
xor r10b, 1
mov byte [rsp + 0x3d], r10b
xor r11b, 1
mov byte [rsp + 0x3e], r11b
xor bl, 1
mov byte [rsp + 0x3f], bl
xor dil, 1
mov byte [rsp + 0x40], dil
xor sil, 1
mov byte [rsp + 0x41], sil
mov byte [rsp + 0x42], r14b
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x350]
call fcn.140003730
nop
mov byte [rsp + 0x20], WSAGetLastError
mov al, 0x18
mov cl, reloc.WLDAP32.dll_Ordinal_26
mov dl, 0x33
mov r8b, reloc.WS2_32.dll_sendto
mov r9b, 0x5a
mov r10b, 0x58
mov r11b, 0x42
mov bl, 9
movzx edi, r8b
movzx esi, bl
xor al, 0x6c
mov byte [rsp + 0x21], al
xor cl, 0x6c
mov byte [rsp + 0x22], cl
xor dl, 0x6c
mov byte [rsp + 0x23], dl
xor r8b, 0x6c
mov byte [rsp + 0x24], r8b
xor r9b, 0x6c
mov byte [rsp + 0x25], r9b
xor r10b, 0x6c
mov byte [rsp + 0x26], r10b
xor r11b, 0x6c
mov byte [rsp + 0x27], r11b
xor bl, 0x6c
mov byte [rsp + 0x28], bl
xor dil, 0x6c
mov byte [rsp + 0x29], dil
xor sil, 0x6c
mov byte [rsp + 0x2a], sil
mov byte [rsp + 0x2b], r14b
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x370]
call fcn.140003730
nop
mov byte [rsp + 0x37], Ordinal_79
mov al, reloc.WS2_32.dll_ntohl
mov cl, 0x25
mov dl, 0x2c
mov r8b, 0x3f
mov r9b, reloc.WLDAP32.dll_Ordinal_33
mov r10b, Ordinal_41
mov r11b, 0x3e
mov bl, 0x63
movzx edi, r10b
mov sil, 0x35
movzx r14d, r10b
xor al, 0x4d
mov byte [rsp + 0x38], al
xor cl, 0x4d
mov byte [rsp + 0x39], cl
xor dl, 0x4d
mov byte [rsp + 0x3a], dl
xor r8b, 0x4d
mov byte [rsp + 0x3b], r8b
xor r9b, 0x4d
mov byte [rsp + 0x3c], r9b
xor r10b, 0x4d
mov byte [rsp + 0x3d], r10b
xor r11b, 0x4d
mov byte [rsp + 0x3e], r11b
xor bl, 0x4d
mov byte [rsp + 0x3f], bl
xor dil, 0x4d
mov byte [rsp + 0x40], dil
xor sil, 0x4d
mov byte [rsp + 0x41], sil
xor r14b, 0x4d
mov byte [rsp + 0x42], r14b
mov byte [rsp + 0x43], r15b
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x390]
call fcn.140003730
nop
movdqa xmm1, xmmword [0x14004c860]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x5e
mov r8b, reloc.WS2_32.dll_setsockopt
movzx r9d, dl
mov r10b, 0x43
movzx r11d, dl
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
xor r9b, cl
mov byte [rsp + 0x32], r9b
xor r10b, cl
mov byte [rsp + 0x33], r10b
xor r11b, cl
mov byte [rsp + 0x34], r11b
mov byte [rsp + 0x35], r15b
lea rdx, [rsp + 0x21]
lea rcx, [rbp + 0x3b0]
call fcn.140003730
nop
movdqa xmm1, xmmword [0x14004c880]
movdqu xmmword [rsp + 0x37], xmm1
mov dl, 0x47
mov r8b, 0x26
mov r9b, 0x3f
mov r10b, reloc.WS2_32.dll_WSACleanup
mov r11b, 0x69
movzx ebx, r10b
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x38], al
xor byte [rsp + 0x39], cl
xor byte [rsp + 0x3a], cl
xor byte [rsp + 0x3b], cl
xor byte [rsp + 0x3c], cl
xor byte [rsp + 0x3d], cl
xor byte [rsp + 0x3e], cl
xor byte [rsp + 0x3f], cl
xor byte [rsp + 0x40], cl
xor byte [rsp + 0x41], cl
xor byte [rsp + 0x42], cl
xor byte [rsp + 0x43], cl
xor byte [rsp + 0x44], cl
xor byte [rsp + 0x45], cl
xor byte [rsp + 0x46], cl
xor dl, cl
mov byte [rsp + 0x47], dl
xor r8b, cl
mov byte [rsp + 0x48], r8b
xor r9b, cl
mov byte [rsp + 0x49], r9b
xor r10b, cl
mov byte [rsp + 0x4a], r10b
xor r11b, cl
mov byte [rsp + 0x4b], r11b
xor bl, cl
mov byte [rsp + 0x4c], bl
mov byte [rsp + 0x4d], r15b
lea rdx, [rsp + 0x38]
lea rcx, [rbp + 0x3d0]
call fcn.140003730
nop
mov r8d, 0x104
lea rdx, [rbp + 0x3f0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rbx, [rsp + 0x50]
mov rcx, rbx
call fcn.140004410
mov rdx, rax
lea rcx, [rbp + 0x3f0]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x1400036f0
add rbx, 0x20
lea rax, [rbp + 0x3f0]
cmp rbx, rax
jne 0x140003686
lea r9, [0x140004290]
mov edx, reloc.WLDAP32.dll_Ordinal_32
lea r8d, [rdx + 5]
lea rcx, [rsp + 0x50]
call fcn.14003f0f0
xor al, al
lea r11, [rsp + 0x600]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3