Function at 0x180294120
Capabilities:
Contain obfuscated stackstrings
Encode data using base64
Parse pe header

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x160
lea rdi, [rsp + 0x20]
mov ecx, 0x50
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x170]
mov rax, qword [0x18045c280]
xor rax, rsp
mov qword [rsp + 0x158], rax
lea rcx, [0x1804b8018]
call fcn.1801a9330
mov dword [rsp + 0x58], 0
mov dword [rsp + 0x5c], 0
mov rcx, qword [rsp + 0x170]
call fcn.180296310
mov rcx, rax
call fcn.180296500
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x170]
mov byte [rax + 2], 1
mov rax, qword [rsp + 0x170]
mov dword [rax + 0x18], 1
mov byte [rsp + 0xc8], 0x44
lea rdx, [rsp + 0xc8]
mov rcx, qword [rsp + 0x68]
call fcn.180295eb0
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x28]
call fcn.180293e50
mov eax, dword [rsp + 0x28]
mov dword [rsp + 0x70], eax
mov dword [rsp + 0x74], 0
mov r9d, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov edx, dword [rsp + 0x2c]
mov rcx, qword [rsp + 0x170]
call fcn.180293f10
cmp dword [rsp + 0x70], 1
jb 0x18029482d
xor r8d, r8d
mov edx, 1
lea rcx, [rsp + 0x28]
call fcn.180293e50
mov eax, dword [rsp + 0x28]
shr eax, 4
and eax, 0xf
mov dword [rsp + 0x78], eax
mov eax, dword [rsp + 0x28]
shr eax, 8
and eax, 0xf
mov dword [rsp + 0x7c], eax
cmp dword [rsp + 0x7c], 6
je 0x180294244
cmp dword [rsp + 0x7c], 0xf
jne 0x18029425d
mov eax, dword [rsp + 0x28]
shr eax, 0x10
and eax, 0xf
shl eax, 4
mov ecx, dword [rsp + 0x78]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x78], eax
cmp dword [rsp + 0x7c], 0xf
jne 0x18029427c
mov eax, dword [rsp + 0x28]
shr eax, 0x14
and eax, 0xff
mov ecx, dword [rsp + 0x7c]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x7c], eax
mov rax, qword [rsp + 0x170]
mov ecx, dword [rsp + 0x78]
mov dword [rax + 8], ecx
mov rax, qword [rsp + 0x170]
mov ecx, dword [rsp + 0x7c]
mov dword [rax + 4], ecx
mov eax, dword [rsp + 0x2c]
and eax, 0xff
mov rcx, qword [rsp + 0x170]
mov dword [rcx + 0xc], eax
mov eax, dword [rsp + 0x28]
shr eax, 0xc
and eax, 3
mov rcx, qword [rsp + 0x170]
mov dword [rcx + 0x14], eax
mov eax, dword [rsp + 0x2c]
shr eax, 0x10
and eax, 0xff
mov rcx, qword [rsp + 0x170]
mov dword [rcx + 0x18], eax
mov eax, dword [rsp + 0x28]
and eax, 0xf
mov rcx, qword [rsp + 0x170]
mov dword [rcx + 0x10], eax
mov eax, dword [rsp + 0x2c]
shr eax, 8
and eax, 0xff
shl eax, 3
mov rcx, qword [rsp + 0x170]
mov dword [rcx + 0x1c], eax
mov byte [rsp + 0xc9], WSASetLastError
xor edx, edx
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xc9]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xca], 0x57
mov edx, 1
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xca]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xcb], 0x4c
mov edx, 3
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xcb]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xcc], 0x7a
mov edx, 5
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xcc]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xcd], WSASetLastError
mov edx, 6
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xcd]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xce], 0x73
mov edx, 9
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xce]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xcf], gethostbyname
mov edx, recvfrom
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xcf]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xd0], reloc.WS2_32.dll_WSASetLastError
mov edx, reloc.WS2_32.dll_send
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xd0]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xd1], 0x71
mov edx, reloc.WS2_32.dll_sendto
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xd1]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xd2], 0x4e
mov edx, 0x16
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xd2]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xd3], 0x59
mov edx, 0x17
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xd3]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xd4], 6
mov edx, 0x19
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xd4]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xd5], 0x80
mov edx, 0x1a
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xd5]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xd6], 0x55
mov edx, 0x1b
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xd6]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xd7], 0x61
mov edx, 0x1e
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xd7]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xd8], 0x38
xor edx, edx
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0xd8]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xd9], 0x63
mov edx, 4
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0xd9]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xda], 0x52
mov edx, 5
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0xda]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xdb], gethostbyname
mov edx, 8
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0xdb]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xdc], gethostbyname
mov edx, send
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0xdc]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xdd], 0x2a
mov edx, reloc.WS2_32.dll_send
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0xdd]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xde], 0x4a
mov edx, 0x17
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0xde]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xdf], 0x3d
mov edx, 0x18
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0xdf]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xe0], WSASetLastError
mov edx, 0x19
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0xe0]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xe1], WSASetLastError
mov byte [rsp + 0xe2], WSASetLastError
mov edx, 0x19
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r9, [rsp + 0xe1]
lea r8, [rsp + 0xe2]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180296090
mov byte [rsp + 0xe3], 1
mov edx, 0x1c
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0xe3]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov rcx, qword [rsp + 0x68]
call fcn.180296460
movzx eax, al
test eax, eax
je 0x18029479c
mov rcx, qword [rsp + 0x68]
call fcn.180296400
movzx eax, al
test eax, eax
je 0x18029479c
xor edx, edx
lea rcx, [rsp + 0x58]
call fcn.180293ea0
mov edx, 0x1c
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
movzx eax, al
test eax, eax
je 0x18029482d
mov eax, dword [rsp + 0x58]
and eax, 6
cmp eax, 6
jne 0x18029482d
mov byte [rsp + 0xe4], send
lea rdx, [rsp + 0xe4]
mov rcx, qword [rsp + 0x68]
call fcn.180295eb0
mov byte [rsp + 0xe5], 0x36
mov edx, recv
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xe5]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xe6], 0x35
mov edx, 0x1d
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xe6]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov dword [rsp + 0x80], 0x60000
mov eax, dword [rsp + 0x58]
and eax, 0x60000
cmp eax, 0x60000
jne 0x180294855
mov dword [rsp + 0x14c], 1
jmp 0x180294860
mov dword [rsp + 0x14c], 0
movzx eax, byte [rsp + 0x14c]
mov byte [rsp + 0x84], al
mov dword [rsp + 0x88], 0xe6
mov eax, dword [rsp + 0x58]
and eax, 0xe6
cmp eax, 0xe6
jne 0x180294897
mov dword [rsp + 0x150], 1
jmp 0x1802948a2
mov dword [rsp + 0x150], 0
movzx eax, byte [rsp + 0x150]
mov byte [rsp + 0x8c], al
mov byte [rsp + 0x8d], 0
cmp dword [rsp + 0x70], 7
jb 0x180295222
xor r8d, r8d
mov edx, 7
lea rcx, [rsp + 0x28]
call fcn.180293e50
mov edx, recvfrom
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
mov byte [rsp + 0x8d], al
mov eax, dword [rsp + 0x28]
mov dword [rsp + 0x74], eax
mov byte [rsp + 0xe7], 0x39
xor edx, edx
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xe7]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xe8], 0x24
mov edx, 3
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xe8]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xe9], 0x42
mov edx, 4
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xe9]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xea], WSASetLastError
mov edx, 7
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xea]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xeb], 0x25
mov edx, 8
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xeb]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xec], reloc.WS2_32.dll_gethostbyname
mov edx, 9
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xec]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xed], 0x65
mov edx, 0xb
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xed]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xee], 0x62
mov edx, reloc.WS2_32.dll_select
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xee]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xef], 5
mov edx, reloc.WS2_32.dll_send
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xef]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xf0], WSASetLastError
mov edx, reloc.WS2_32.dll_sendto
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xf0]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xf1], 0x2b
mov edx, 0x17
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xf1]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xf2], 0x2c
mov edx, 0x18
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xf2]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xf3], 0x67
mov edx, 0x1d
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0xf3]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xf4], 0x5c
xor edx, edx
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xf4]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xf5], 0x56
mov edx, 4
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xf5]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xf6], 0x7c
mov edx, 5
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xf6]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xf7], 0x27
mov edx, 7
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xf7]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xf8], 0x41
mov edx, 8
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xf8]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xf9], 0x79
mov edx, 9
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xf9]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xfa], 0x7b
mov edx, 0xa
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xfa]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xfb], 0x5f
mov edx, 0x16
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xfb]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xfc], 0x29
mov edx, 0x19
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xfc]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xfd], 0x50
mov edx, 0x1b
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xfd]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xfe], 0x4f
mov edx, 0x1c
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xfe]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0xff], gethostbyname
mov edx, 0x1d
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0xff]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x100], 0x3a
mov edx, 4
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x100]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x101], 0x78
mov edx, 5
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x101]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x102], 0x66
mov edx, recvfrom
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x102]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x103], 0x77
mov edx, reloc.WS2_32.dll_recv
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x103]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x104], 0x58
mov edx, reloc.WS2_32.dll_select
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x104]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x105], 0x26
mov edx, reloc.WS2_32.dll_sendto
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x105]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov rcx, qword [rsp + 0x68]
call fcn.1802963d0
movzx eax, al
test eax, eax
jne 0x180294e44
mov rcx, qword [rsp + 0x68]
call fcn.180296430
movzx eax, al
test eax, eax
je 0x180294e5e
mov byte [rsp + 0x106], 0x76
lea rdx, [rsp + 0x106]
mov rcx, qword [rsp + 0x68]
call fcn.180295eb0
mov edx, 5
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
movzx eax, al
test eax, eax
je 0x180294e9e
mov rcx, qword [rsp + 0x68]
call fcn.1802963a0
movzx eax, al
test eax, eax
je 0x180294e9e
mov byte [rsp + 0x107], send
lea rdx, [rsp + 0x107]
mov rcx, qword [rsp + 0x68]
call fcn.180295eb0
movzx eax, byte [rsp + 0x8c]
test eax, eax
je 0x180295191
mov edx, reloc.WS2_32.dll_recv
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
movzx eax, al
test eax, eax
je 0x180295191
mov byte [rsp + 0x108], 0x16
lea rdx, [rsp + 0x108]
mov rcx, qword [rsp + 0x68]
call fcn.180295eb0
mov byte [rsp + 0x109], reloc.WS2_32.dll_sendto
mov edx, reloc.WS2_32.dll_recvfrom
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x109]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x10a], 0x18
mov edx, 0x15
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x10a]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x10b], 0x19
mov edx, 0x1a
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x10b]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x10c], 0x15
mov edx, 0x1b
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x10c]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x10d], reloc.WS2_32.dll_send
mov edx, 0x1c
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x10d]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x10e], reloc.WS2_32.dll_select
mov edx, 0x1e
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x10e]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x10f], 0x1c
mov edx, 0x1f
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x10f]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x110], 0x1a
mov edx, 1
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x110]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x111], 0x1b
mov edx, 6
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x111]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x112], 0x1d
mov edx, 0xb
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x112]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + reloc.WS2_32.dll_recvfrom3], 0x11
mov edx, recv
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x113]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x114], 0x1f
mov edx, recvfrom
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x114]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x115], send
mov edx, 2
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x115]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x116], send
mov edx, 3
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x116]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x117], 0x1e
mov edx, 8
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x117]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x118], 0x17
mov edx, 0x17
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x118]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
movzx eax, byte [rsp + 0x84]
test eax, eax
je 0x180295222
mov byte [rsp + 0x119], 8
mov edx, 0x16
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x119]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x11a], recvfrom
mov edx, 0x18
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x11a]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x11b], 0xa
mov edx, 0x19
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x11b]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
cmp dword [rsp + 0x74], 1
jb 0x18029554f
mov r8d, 1
mov edx, 7
lea rcx, [rsp + 0x28]
call fcn.180293e50
mov byte [rsp + 0x11c], 0x5e
mov edx, 3
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x11c]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x11d], gethostbyname
mov edx, 7
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x11d]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x11e], 0x3f
mov edx, 0xa
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x11e]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x11f], 0x3c
mov edx, 0xb
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x11f]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x120], 0x3b
mov edx, recv
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x120]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x121], 0x7e
mov edx, reloc.WS2_32.dll_send
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x121]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x122], 0x43
mov edx, 0x16
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x122]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x123], 0x46
mov edx, 0x1a
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x123]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x124], 0x53
mov edx, 0x1b
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x124]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x125], 0x5a
mov edx, recvfrom
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x125]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x126], 0x28
mov edx, reloc.WS2_32.dll_select
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x126]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov rcx, qword [rsp + 0x68]
call fcn.180296340
movzx eax, al
test eax, eax
je 0x1802954dc
mov byte [rsp + 0x127], 0x22
mov edx, 4
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x127]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x128], 0x20
mov edx, 0x17
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x128]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x129], 0x23
mov edx, 4
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x129]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x12a], 0x21
mov edx, 5
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x12a]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov rcx, qword [rsp + 0x68]
call fcn.180296370
movzx eax, al
test eax, eax
je 0x180295518
mov byte [rsp + 0x12b], reloc.WS2_32.dll_recv
mov edx, 5
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x12b]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
movzx eax, byte [rsp + 0x84]
test eax, eax
je 0x18029554f
mov byte [rsp + 0x12c], 9
mov edx, 0x15
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x12c]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
cmp dword [rsp + 0x70], 0xd
jb 0x180295639
xor r8d, r8d
mov edx, recvfrom
lea rcx, [rsp + 0x28]
call fcn.180293e50
mov eax, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x28]
and ecx, eax
mov eax, ecx
and eax, 0x18
cmp eax, 0x18
jne 0x1802955a6
movzx eax, byte [rsp + 0x8d]
test eax, eax
je 0x1802955a6
mov byte [rsp + 0x12d], 0x51
lea rdx, [rsp + 0x12d]
mov rcx, qword [rsp + 0x68]
call fcn.180295eb0
mov r8d, 1
mov edx, recvfrom
lea rcx, [rsp + 0x28]
call fcn.180293e50
mov byte [rsp + 0x12e], 0x82
xor edx, edx
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x12e]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x12f], 0x81
mov edx, 1
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x12f]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x130], 0x83
mov edx, 3
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x130]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
cmp dword [rsp + 0x70], 0xe
jb 0x18029567d
xor r8d, r8d
mov edx, recvfrom
lea rcx, [rsp + 0x28]
call fcn.180293e50
mov byte [rsp + 0x131], 0x5d
mov edx, 4
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x131]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov dword [rsp + 0x70], 0x80000000
mov eax, dword [rsp + 0x70]
mov dword [rsp + 0x90], eax
mov dword [rsp + 0xa4], 0x8000001f
mov rax, qword [rsp + 0x170]
add rax, 0x34
mov qword [rsp + 0xb8], rax
xor r8d, r8d
mov edx, dword [rsp + 0x90]
lea rcx, [rsp + 0x28]
call fcn.180293e50
mov eax, dword [rsp + 0x90]
mov dword [rsp + 0x154], eax
mov eax, dword [rsp + 0x154]
sub eax, 0x80000000
mov dword [rsp + 0x154], eax
cmp dword [rsp + 0x154], 0x1f
ja case.0x180295712.2147483643
mov eax, dword [rsp + 0x154]
lea rcx, [0x180000000]
movzx eax, byte [rcx + rax + 0x295cc4]
mov eax, dword [rcx + rax*4 + 0x295cac]
add rax, rcx
jmp rax
lea rdx, [rsp + 0xa4]
lea rcx, [rsp + 0x28]
call fcn.180295d60
mov dword [rsp + 0x70], eax
jmp case.0x180295712.2147483643
mov byte [rsp + 0x132], 0x45
xor edx, edx
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x132]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x133], 0x74
mov edx, 2
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x133]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x134], 0x48
mov edx, 5
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x134]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x135], 0x72
mov edx, 6
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x135]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x136], 0x54
mov edx, 7
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x136]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x137], 0x5b
mov edx, 8
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x137]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x138], 0x68
mov edx, recv
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x138]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x139], 0x47
mov edx, send
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x139]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x13a], 0x75
mov edx, 0x15
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x13a]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x13b], 0x4d
mov edx, 0x1d
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x13b]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x13c], 2
mov edx, reloc.WS2_32.dll_sendto
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x13c]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x13d], 0x3e
mov edx, 0x15
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x13d]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x13e], 0x4b
mov edx, 0x16
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x13e]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x13f], 0x64
mov edx, 0x1b
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x13f]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x140], 0x5b
mov edx, 0x1d
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x140]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x141], 0x4b
mov byte [rsp + 0x142], 4
mov edx, 0x1e
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r9, [rsp + 0x141]
lea r8, [rsp + 0x142]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180296090
mov byte [rsp + 0x143], 0x5b
mov edx, 0x1f
mov ecx, dword [rsp + 0x34]
call fcn.180295cf0
lea r8, [rsp + 0x143]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov rcx, qword [rsp + 0x68]
call fcn.1802963a0
movzx eax, al
test eax, eax
je 0x180295a7e
mov byte [rsp + 0x144], 0x7f
mov edx, 0xb
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x144]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x145], 0x37
mov edx, reloc.WS2_32.dll_recv
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x145]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
lea rdx, [0x1803e22f0]
mov rcx, qword [rsp + 0x170]
call fcn.180296490
movzx eax, al
test eax, eax
je 0x180295ac4
mov byte [rsp + 0x146], 7
mov edx, 4
mov ecx, dword [rsp + 0x30]
call fcn.180295cf0
lea r8, [rsp + 0x146]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
jmp case.0x180295712.2147483643
mov rax, qword [rsp + 0xb8]
mov ecx, dword [rsp + 0x28]
mov dword [rax], ecx
mov rax, qword [rsp + 0xb8]
add rax, 4
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xb8]
mov ecx, dword [rsp + 0x2c]
mov dword [rax], ecx
mov rax, qword [rsp + 0xb8]
add rax, 4
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xb8]
mov ecx, dword [rsp + 0x30]
mov dword [rax], ecx
mov rax, qword [rsp + 0xb8]
add rax, 4
mov qword [rsp + 0xb8], rax
mov rax, qword [rsp + 0xb8]
mov ecx, dword [rsp + 0x34]
mov dword [rax], ecx
mov rax, qword [rsp + 0xb8]
add rax, 4
mov qword [rsp + 0xb8], rax
cmp dword [rsp + 0x90], 0x80000004
jne 0x180295b69
mov dword [rsp + 0x90], 0x80000007
jmp case.0x180295712.2147483643
mov byte [rsp + 0x147], gethostbyname
xor edx, edx
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x147]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x148], 0x60
xor edx, edx
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x148]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x149], 0x49
mov edx, 8
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x149]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov byte [rsp + 0x14a], 0x7d
mov edx, 9
mov ecx, dword [rsp + 0x2c]
call fcn.180295cf0
lea r8, [rsp + 0x14a]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov dword [rsp + 0x90], 0x8000001e
jmp case.0x180295712.2147483643
mov byte [rsp + 0x14b], WSASetLastError
mov edx, 4
mov ecx, dword [rsp + 0x28]
call fcn.180295cf0
lea r8, [rsp + 0x14b]
movzx edx, al
mov rcx, qword [rsp + 0x68]
call fcn.180295fa0
mov eax, dword [rsp + 0x90]
inc eax
mov dword [rsp + 0x90], eax
mov eax, dword [rsp + 0x70]
cmp dword [rsp + 0x90], eax
jbe 0x1802956af
mov rax, qword [rsp + 0x170]
add rax, 0x34
mov rcx, rax
call fcn.180294010
mov rcx, rsp
lea rdx, reloc.WS2_32.dll_closesocket
call fcn.1801a9100
mov rcx, qword [rsp + 0x158]
xor rcx, rsp
call fcn.1801a9570
add rsp, 0x160
pop rdi
ret