Function at 0x140043f50
Capabilities:
Check os version
Encode data using xor
Execute command
Set console window title
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1968]
mov eax, 0x1a68
call fcn.140094280
sub rsp, rax
mov qword [rbp + 0x550], 0xfffffffffffffffe
lea rcx, [rbp + 0x1d0]
call fcn.140035ab0
mov r8, rax
cmp qword [rax + 0x18], 0x10
jb 0x140043f96
mov r8, qword [rax]
xor edx, edx
movzx ecx, byte [r8]
call fcn.140034500
mov byte [rbp + 0x41], al
mov edx, 1
movzx ecx, byte [r8 + 1]
call fcn.140034500
mov byte [rbp + 0x42], al
mov edx, 2
movzx ecx, byte [r8 + 2]
call fcn.140034500
mov byte [rbp + 0x43], al
mov edx, 3
movzx ecx, byte [r8 + 3]
call fcn.140034500
mov byte [rbp + 0x44], al
mov edx, 4
movzx ecx, byte [r8 + 4]
call fcn.140034500
mov byte [rbp + 0x45], al
mov edx, 5
movzx ecx, byte [r8 + 5]
call fcn.140034500
mov byte [rbp + 0x46], al
mov edx, 6
movzx ecx, byte [r8 + 6]
call fcn.140034500
mov byte [rbp + 0x47], al
xor eax, eax
mov byte [rbp + 0x48], al
xor ebx, ebx
mov ecx, ebx
mov edx, ebx
nop dword [rax + rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x41], al
inc ecx
movsxd rdx, ecx
cmp rdx, 7
jb 0x140044020
mov byte [rbp + 0x48], bl
lea rcx, [rbp + 0x41]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov rax, qword [rbp + 0x1e8]
cmp rax, 0x10
jb 0x14004409f
inc rax
mov rcx, qword [rbp + 0x1d0]
cmp rax, 0x1000
jb 0x14004409a
test cl, 0x1f
je 0x14004406a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14004407a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x14004408a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x140044097
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140054a50
mov qword [rbp + 0x1e8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1e0], rbx
mov byte [rbp + 0x1d0], bl
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
mov ecx, 0xfffffff6
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rdi, rax
lea rdx, [rbp + 0x188]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetConsoleMode]
mov edx, dword [rbp + 0x188]
and edx, 0x80
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SetConsoleMode]
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov rcx, rax
call fcn.14003b5c0
mov ecx, 1
call fcn.14005476c
lea rcx, [rbp + 0x998]
call fcn.1400390f0
lea rcx, [rbp + 0x998]
call fcn.140034a90
call fcn.140039530
mov ecx, Ordinal_50
call fcn.14005476c
mov qword [rax], rbx
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbx
mov qword [rax + 0x28], rbx
mov qword [0x140100c80], rax
lea rcx, [rbp + 0x9e0]
call fcn.1400390f0
lea rcx, [rbp + 0x9e0]
call fcn.140034a90
call fcn.140039530
lea rcx, [rbp + 0xa28]
call fcn.1400390f0
lea rcx, [rbp + 0xa28]
call fcn.140034a90
call fcn.140039530
call fcn.14003b4a0
test al, al
jne 0x1400441d6
mov qword [0], 1
lea rcx, [rbp + 0xa70]
call fcn.1400390f0
lea rcx, [rbp + 0xa70]
call fcn.140034a90
call fcn.140039530
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
int3
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov qword [rbp + 0x558], rax
imul rcx, rax, 0x64
mov qword [rbp + 0x560], rcx
mov qword [rbp + 0x568], rcx
mov qword [rbp + 0x570], 0x1dcd6500
mov qword [rbp + 0x578], 0x1dcd6500
add rcx, 0x1dcd6500
movabs rax, 0x112e0be826d694b3
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x580], rdx
mov qword [rbp + 0x588], rdx
mov qword [rbp + 0x590], rdx
mov qword [rsp + 0x60], rdx
imul rax, rdx, 0x3b9aca00
mov qword [rbp + 0x598], rax
mov qword [rbp + 0x5a0], rax
sub rcx, rax
mov dword [rsp + 0x68], ecx
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x680], xmm0
lea rcx, [rbp + 0x680]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
call fcn.140053dc0
xor edx, edx
mov cl, 0x64
call fcn.140034500
mov byte [rsp + 0x57], al
mov byte [rbp - 0xf], al
mov edx, 1
mov cl, 0x65
call fcn.140034500
movzx r13d, al
mov byte [rbp + 0x19c0], al
mov byte [rbp - 0xe], al
mov edx, 2
mov cl, 0x6c
call fcn.140034500
mov byte [rsp + 0x33], al
mov byte [rbp - 0xd], al
mov edx, 3
mov cl, 0x66
call fcn.140034500
mov byte [rbp - 0xc], al
mov edx, 4
mov cl, 0x69
call fcn.140034500
movzx r12d, al
mov byte [rbp - 0xb], al
mov edx, 5
mov cl, 0x6c
call fcn.140034500
mov byte [rsp + 0x3f], al
mov byte [rbp - 0xa], al
mov edx, 6
mov cl, 0x65
call fcn.140034500
mov byte [rsp + 0x4b], al
mov byte [rbp - 9], al
mov edx, 7
mov cl, 0x61
call fcn.140034500
mov byte [rsp + 0x59], al
mov byte [rbp - 8], al
xor eax, eax
mov byte [rbp - 7], al
mov edx, ebx
mov r8, rbx
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 0xf], cl
inc edx
movsxd r8, edx
cmp r8, 8
jb 0x140044323
mov byte [rbp - 7], al
mov qword [rbp + 0x448], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x440], rbx
mov byte [rbp + 0x430], al
or rdi, 0xffffffffffffffff
cmp byte [rbp - 0xf], al
jne 0x14004435f
mov r8, rbx
jmp 0x14004436f
lea rax, [rbp - 0xf]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x140044366
lea rdx, [rbp - 0xf]
lea rcx, [rbp + 0x430]
call fcn.140034cf0
lea rax, [rbp + 0x430]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_DeleteFileA]
call fcn.1400398f0
lea rcx, [rbp + 0xab8]
call fcn.1400390f0
lea rcx, [rbp + 0xab8]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x69
call fcn.140034500
mov byte [rbp - 0x72], al
mov edx, 1
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140034500
mov byte [rsp + 0x53], al
mov byte [rbp - 0x71], al
mov edx, 2
mov cl, 0x64
call fcn.140034500
mov byte [rsp + 0x54], al
mov byte [rbp - 0x70], al
mov edx, 3
mov cl, 0x65
call fcn.140034500
mov byte [rsp + 0x30], al
mov byte [rbp - 0x6f], al
mov edx, 4
mov cl, 0x62
call fcn.140034500
mov byte [rbp - 0x6e], al
xor eax, eax
mov byte [rbp - 0x6d], al
mov edx, ebx
mov r8, rbx
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 0x72], cl
inc edx
movsxd r8, edx
cmp r8, 5
jb 0x140044412
mov byte [rbp - 0x6d], al
mov qword [rbp + 0x468], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x460], rbx
mov byte [rbp + 0x450], al
cmp byte [rbp - 0x72], al
jne 0x14004444a
mov r8, rbx
jmp 0x14004445a
lea rax, [rbp - 0x72]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x140044451
lea rdx, [rbp - 0x72]
lea rcx, [rbp + 0x450]
call fcn.140034cf0
lea rax, [rbp + 0x450]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
call fcn.1400398f0
lea rcx, [rbp + 0xb00]
call fcn.1400390f0
lea rcx, [rbp + 0xb00]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x6c
call fcn.140034500
mov byte [rsp + 0x55], al
mov byte [rsp + 0x75], al
mov edx, 1
call fcn.140034500
movzx esi, al
mov byte [rsp + 0x76], al
mov edx, 2
mov cl, 0x69
call fcn.140034500
movzx r14d, al
mov byte [rsp + 0x77], al
mov edx, 3
mov cl, 0x62
call fcn.140034500
movzx r15d, al
mov byte [rsp + 0x78], al
xor eax, eax
mov byte [rsp + 0x79], al
mov edx, ebx
mov r8, rbx
nop dword [rax]
nop dword [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rsp + r8 + 0x75], cl
inc edx
movsxd r8, edx
cmp r8, 4
jb 0x140044500
mov byte [rsp + 0x79], al
mov qword [rbp + 0x488], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x480], rbx
mov byte [rbp + 0x470], al
cmp byte [rsp + 0x75], al
jne 0x14004453a
mov r8, rbx
jmp 0x14004454b
lea rax, [rsp + 0x75]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x140044542
lea rdx, [rsp + 0x75]
lea rcx, [rbp + 0x470]
call fcn.140034cf0
lea rax, [rbp + 0x470]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call fcn.1400398f0
lea rcx, [rbp + 0xb48]
call fcn.1400390f0
lea rcx, [rbp + 0xb48]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rsp + 0x55]
mov byte [rbp - 0x59], al
mov byte [rbp - 0x58], sil
mov byte [rbp - 0x57], r14b
mov byte [rbp - 0x56], r15b
mov edx, 4
mov cl, 0x65
call fcn.140034500
mov byte [rsp + 0x34], al
mov byte [rbp - 0x55], al
mov edx, 5
mov cl, 0x78
call fcn.140034500
mov byte [rbp + 0x19c8], al
mov byte [rbp - 0x54], al
xor eax, eax
mov byte [rbp - 0x53], al
mov edx, ebx
mov r8, rbx
nop word [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 0x59], cl
inc edx
movsxd r8, edx
cmp r8, 6
jb 0x1400445e0
mov byte [rbp - 0x53], al
mov qword [rbp + 0x4a8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x4a0], rbx
mov byte [rbp + 0x490], al
cmp byte [rbp - 0x59], al
jne 0x140044618
mov r8, rbx
jmp 0x140044629
lea rax, [rbp - 0x59]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140044620
lea rdx, [rbp - 0x59]
lea rcx, [rbp + 0x490]
call fcn.140034cf0
lea rax, [rbp + 0x490]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
call fcn.1400398f0
lea rcx, [rbp + 0xb90]
call fcn.1400390f0
lea rcx, [rbp + 0xb90]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140034500
mov byte [rbp + 0x19b8], al
mov byte [rbp + 0x2e], al
mov byte [rbp + 0x2f], r13b
mov edx, 2
mov cl, WSAGetLastError
call fcn.140034500
movzx esi, al
mov byte [rbp + 0x30], al
mov edx, 3
mov cl, 0x77
call fcn.140034500
movzx r13d, al
mov byte [rsp + 0x4a], al
mov byte [rbp + 0x31], al
mov byte [rbp + 0x32], r12b
mov edx, 5
mov cl, WSAGetLastError
call fcn.140034500
mov byte [rbp + 0x19b0], al
mov byte [rbp + 0x33], al
mov edx, 6
mov cl, 0x68
call fcn.140034500
mov byte [rsp + 0x38], al
mov byte [rbp + 0x34], al
mov edx, 7
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.140034500
mov byte [rsp + 0x39], al
mov byte [rbp + 0x35], al
mov edx, 8
call fcn.140034500
movzx r14d, al
mov byte [rbp + 0x36], al
mov edx, 9
mov cl, 0x6b
call fcn.140034500
movzx r15d, al
mov byte [rbp + 0x37], al
xor eax, eax
mov byte [rbp + 0x38], al
mov edx, ebx
mov r8, rbx
nop word [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0x2e], cl
inc edx
movsxd r8, edx
cmp r8, 0xa
jb 0x140044720
mov byte [rbp + 0x38], al
mov qword [rbp + 0x408], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x400], rbx
mov byte [rbp + 0x3f0], al
cmp byte [rbp + 0x2e], al
jne 0x140044758
mov r8, rbx
jmp 0x140044769
lea rax, [rbp + 0x2e]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140044760
lea rdx, [rbp + 0x2e]
lea rcx, [rbp + 0x3f0]
call fcn.140034cf0
lea rax, [rbp + 0x3f0]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_SetWindowsHookA]
call fcn.1400398f0
lea rcx, [rbp + 0xbd8]
call fcn.1400390f0
lea rcx, [rbp + 0xbd8]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rbp + 0x19b8]
mov byte [rbp + 0x61], al
movzx eax, byte [rbp + 0x19c0]
mov byte [rbp + 0x62], al
mov byte [rbp + 0x63], sil
mov byte [rbp + 0x64], r13b
mov byte [rbp + 0x65], r12b
movzx eax, byte [rbp + 0x19b0]
mov byte [rbp + 0x66], al
movzx eax, byte [rsp + 0x38]
mov byte [rbp + 0x67], al
movzx eax, byte [rsp + 0x39]
mov byte [rbp + 0x68], al
mov byte [rbp + 0x69], r14b
mov byte [rbp + 0x6a], r15b
mov edx, 0xa
mov cl, 0x77
call fcn.140034500
mov byte [rbp + 0x6b], al
xor eax, eax
mov byte [rbp + 0x6c], al
mov ecx, ebx
mov rdx, rbx
nop dword [rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x61], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xb
jb 0x140044810
mov byte [rbp + 0x6c], bl
mov qword [rbp + 0x4c8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x4c0], rbx
mov byte [rbp + 0x4b0], bl
cmp byte [rbp + 0x61], bl
jne 0x140044847
mov r8, rbx
jmp 0x140044859
lea rax, [rbp + 0x61]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140044850
lea rdx, [rbp + 0x61]
lea rcx, [rbp + 0x4b0]
call fcn.140034cf0
lea rax, [rbp + 0x4b0]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_SetWindowsHookW]
call fcn.1400398f0
lea rcx, [rbp + 0xc20]
call fcn.1400390f0
lea rcx, [rbp + 0xc20]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rbp + 0x19b8]
mov byte [rbp + 0x9f], al
movzx eax, byte [rbp + 0x19c0]
mov byte [rbp + 0xa0], al
mov byte [rbp + 0xa1], sil
mov byte [rbp + 0xa2], r13b
mov byte [rbp + 0xa3], r12b
movzx eax, byte [rbp + 0x19b0]
mov byte [rbp + 0xa4], al
movzx eax, byte [rsp + 0x38]
mov byte [rbp + 0xa5], al
movzx eax, byte [rsp + 0x39]
mov byte [rbp + 0xa6], al
mov byte [rbp + 0xa7], r14b
mov byte [rbp + 0xa8], r15b
mov edx, 0xa
mov cl, 0x65
call fcn.140034500
mov byte [rsp + 0x3d], al
mov byte [rbp + 0xa9], al
mov edx, ntohl
mov cl, 0x78
call fcn.140034500
mov byte [rsp + 0x50], al
mov byte [rbp + 0xaa], al
mov edx, ntohl
mov cl, 0x61
call fcn.140034500
mov byte [rbp + 0xab], al
xor eax, eax
mov byte [rbp + 0xac], al
mov ecx, ebx
mov rdx, rbx
nop dword [rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x9f], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xd
jb 0x140044950
mov byte [rbp + 0xac], bl
mov qword [rbp + 0x4e8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x4e0], rbx
mov byte [rbp + 0x4d0], bl
cmp byte [rbp + 0x9f], bl
jne 0x140044990
mov r8, rbx
jmp 0x1400449a9
lea rax, [rbp + 0x9f]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], bl
jne 0x1400449a0
lea rdx, [rbp + 0x9f]
lea rcx, [rbp + 0x4d0]
call fcn.140034cf0
lea rax, [rbp + 0x4d0]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_SetWindowsHookExA]
call fcn.1400398f0
lea rcx, [rbp + 0xc68]
call fcn.1400390f0
lea rcx, [rbp + 0xc68]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rbp + 0x19b8]
mov byte [rbp + 0x91], al
movzx eax, byte [rbp + 0x19c0]
mov byte [rbp + 0x92], al
mov byte [rbp + 0x93], sil
mov byte [rbp + 0x94], r13b
mov byte [rbp + 0x95], r12b
movzx eax, byte [rbp + 0x19b0]
mov byte [rbp + 0x96], al
movzx eax, byte [rsp + 0x38]
mov byte [rbp + 0x97], al
movzx eax, byte [rsp + 0x39]
mov byte [rbp + 0x98], al
mov byte [rbp + 0x99], r14b
mov byte [rbp + 0x9a], r15b
movzx eax, byte [rsp + 0x3d]
mov byte [rbp + 0x9b], al
movzx eax, byte [rsp + 0x50]
mov byte [rbp + 0x9c], al
mov edx, ntohl
mov cl, 0x77
call fcn.140034500
mov byte [rbp + 0x9d], al
xor eax, eax
mov byte [rbp + 0x9e], al
mov ecx, ebx
mov rdx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x91], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xd
jb 0x140044a90
mov byte [rbp + 0x9e], bl
mov qword [rbp + 0x508], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x500], rbx
mov byte [rbp + 0x4f0], bl
cmp byte [rbp + 0x91], bl
jne 0x140044ad0
mov r8, rbx
jmp 0x140044ae9
lea rax, [rbp + 0x91]
mov r8, rdi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], bl
jne 0x140044ae0
lea rdx, [rbp + 0x91]
lea rcx, [rbp + 0x4f0]
call fcn.140034cf0
lea rax, [rbp + 0x4f0]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_SetWindowsHookExW]
call fcn.1400398f0
lea rcx, [rbp + 0xcb0]
call fcn.1400390f0
lea rcx, [rbp + 0xcb0]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x76
call fcn.140034500
mov byte [rsp + 0x3b], al
mov byte [rbp - 0x52], al
mov edx, 1
mov cl, reloc.WS2_32.dll_WSASetLastError
call fcn.140034500
movzx esi, al
mov byte [rbp - 0x79], al
mov byte [rbp - 0x51], al
mov edx, 2
mov cl, WSAStartup
call fcn.140034500
movzx r12d, al
mov byte [rsp + 0x4e], al
mov byte [rbp - 0x50], al
mov edx, 3
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.140034500
mov byte [rbp - 0x4f], al
movzx eax, byte [rsp + 0x34]
mov byte [rbp - 0x4e], al
movzx eax, byte [rbp + 0x19c8]
mov byte [rbp - 0x4d], al
xor eax, eax
mov byte [rbp - 0x4c], al
mov ecx, ebx
mov rdx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx - 0x52], al
inc ecx
movsxd rdx, ecx
cmp rdx, 6
jb 0x140044ba0
mov byte [rbp - 0x4c], bl
mov qword [rbp + 0x528], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x520], rbx
mov byte [rbp + 0x510], bl
cmp byte [rbp - 0x52], bl
jne 0x140044bd7
mov r8, rbx
jmp 0x140044be9
lea rax, [rbp - 0x52]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140044be0
lea rdx, [rbp - 0x52]
lea rcx, [rbp + 0x510]
call fcn.140034cf0
lea rax, [rbp + 0x510]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
call fcn.1400398f0
lea rcx, [rbp + 0xcf8]
call fcn.1400390f0
lea rcx, [rbp + 0xcf8]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.140034500
mov byte [rbp - 0x4b], al
mov byte [rbp - 0x4a], sil
mov edx, 2
mov cl, 0x65
call fcn.140034500
mov byte [rsp + 0x4d], al
mov byte [rbp - 0x49], al
mov edx, 3
mov cl, WSAGetLastError
call fcn.140034500
mov byte [rsp + 0x40], al
mov byte [rbp - 0x48], al
mov edx, 4
mov cl, reloc.WS2_32.dll_WSASetLastError
call fcn.140034500
mov byte [rbp - 0x47], al
mov edx, 5
mov cl, WSAStartup
call fcn.140034500
movzx r13d, al
mov byte [rsp + 0x51], al
mov byte [rbp - 0x46], al
xor eax, eax
mov byte [rbp - 0x45], al
mov edx, ebx
mov r8, rbx
nop dword [rax]
nop dword [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 0x4b], cl
inc edx
movsxd r8, edx
cmp r8, 6
jb 0x140044ca0
mov byte [rbp - 0x45], al
mov qword [rbp + 0x548], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x540], rbx
mov byte [rbp + 0x530], al
cmp byte [rbp - 0x4b], al
jne 0x140044cd8
mov r8, rbx
jmp 0x140044ce9
lea rax, [rbp - 0x4b]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140044ce0
lea rdx, [rbp - 0x4b]
lea rcx, [rbp + 0x530]
call fcn.140034cf0
lea rax, [rbp + 0x530]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_OpenProcess]
call fcn.1400398f0
lea rcx, [rbp + 0xd40]
call fcn.1400390f0
lea rcx, [rbp + 0xd40]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x65
call fcn.140034500
movzx esi, al
mov byte [rbp - 0x6c], al
mov edx, 1
mov cl, 0x78
call fcn.140034500
movzx r14d, al
mov byte [rsp + 0x58], al
mov byte [rbp - 0x6b], al
mov edx, 2
mov cl, reloc.WS2_32.dll_WSASetLastError
call fcn.140034500
mov byte [rbp - 0x78], al
mov byte [rbp - 0x6a], al
mov edx, 3
mov cl, WSAStartup
call fcn.140034500
mov byte [rsp + 0x3c], al
mov byte [rbp - 0x69], al
mov edx, 4
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.140034500
mov byte [rbp - 0x77], al
mov byte [rbp - 0x68], al
xor eax, eax
mov byte [rbp - 0x67], al
mov edx, ebx
mov r8, rbx
nop word [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 0x6c], cl
inc edx
movsxd r8, edx
cmp r8, 5
jb 0x140044da0
mov byte [rbp - 0x67], al
mov qword [rbp + 0x208], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x200], rbx
mov byte [rbp + 0x1f0], al
cmp byte [rbp - 0x6c], al
jne 0x140044dd8
mov r8, rbx
jmp 0x140044de9
lea rax, [rbp - 0x6c]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140044de0
lea rdx, [rbp - 0x6c]
lea rcx, [rbp + 0x1f0]
call fcn.140034cf0
lea rax, [rbp + 0x1f0]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.1400398f0
lea rcx, [rbp + 0xd88]
call fcn.1400390f0
lea rcx, [rbp + 0xd88]
call fcn.140034a90
call fcn.140039530
mov byte [rsp + 0x5a], sil
mov byte [rsp + 0x5b], r14b
mov edx, 2
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140034500
mov byte [rsp + 0x5c], al
xor eax, eax
mov byte [rsp + 0x5d], al
mov ecx, ebx
mov rdx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x13]
xor byte [rsp + rdx + 0x5a], al
inc ecx
movsxd rdx, ecx
cmp rdx, 3
jb 0x140044e60
mov byte [rsp + 0x5d], bl
mov qword [rbp + 0x228], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x220], rbx
mov byte [rbp + 0x210], bl
cmp byte [rsp + 0x5a], bl
jne 0x140044e99
mov r8, rbx
jmp 0x140044eaa
lea rax, [rsp + 0x5a]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x140044ea1
lea rdx, [rsp + 0x5a]
lea rcx, [rbp + 0x210]
call fcn.140034cf0
lea rax, [rbp + 0x210]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.1400398f0
lea rcx, [rbp + 0xdd0]
call fcn.1400390f0
lea rcx, [rbp + 0xdd0]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x61
call fcn.140034500
mov byte [rsp + 0x7a], al
mov edx, 1
mov cl, 0x62
call fcn.140034500
mov byte [rsp + 0x52], al
mov byte [rsp + 0x7b], al
mov byte [rsp + 0x7c], r12b
mov edx, 3
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140034500
movzx r14d, al
mov byte [rsp + 0x4c], al
mov byte [rsp + 0x7d], al
xor eax, eax
mov byte [rsp + 0x7e], al
mov edx, ebx
mov r8, rbx
nop dword [rax]
lea ecx, [rdx + 0x13]
xor byte [rsp + r8 + 0x7a], cl
inc edx
movsxd r8, edx
cmp r8, 4
jb 0x140044f40
mov byte [rsp + 0x7e], al
mov qword [rbp + 0x248], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x240], rbx
mov byte [rbp + 0x230], al
cmp byte [rsp + 0x7a], al
jne 0x140044f7a
mov r8, rbx
jmp 0x140044f8b
lea rax, [rsp + 0x7a]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x140044f82
lea rdx, [rsp + 0x7a]
lea rcx, [rbp + 0x230]
call fcn.140034cf0
lea rax, [rbp + 0x230]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_abort]
call fcn.1400398f0
lea rcx, [rbp + 0xe18]
call fcn.1400390f0
lea rcx, [rbp + 0xe18]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x63
call fcn.140034500
movzx r15d, al
mov byte [rsp + 0x4f], al
mov byte [rbp - 0x66], al
mov edx, 1
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140034500
mov byte [rsp + 0x56], al
mov byte [rbp - 0x65], al
mov edx, 2
mov cl, 0x68
call fcn.140034500
mov byte [rsp + 0x3e], al
mov byte [rbp - 0x64], al
movzx eax, byte [rsp + 0x3c]
mov byte [rbp - 0x63], al
mov edx, 4
mov cl, 0x64
call fcn.140034500
mov byte [rsp + 0x32], al
mov byte [rbp - 0x62], al
xor eax, eax
mov byte [rbp - 0x61], al
mov edx, ebx
mov r8, rbx
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 0x66], cl
inc edx
movsxd r8, edx
cmp r8, 5
jb 0x140045030
mov byte [rbp - 0x61], al
mov qword [rbp + 0x268], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x260], rbx
mov byte [rbp + 0x250], al
cmp byte [rbp - 0x66], al
jne 0x140045068
mov r8, rbx
jmp 0x140045079
lea rax, [rbp - 0x66]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140045070
lea rdx, [rbp - 0x66]
lea rcx, [rbp + 0x250]
call fcn.140034cf0
lea rax, [rbp + 0x250]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.1400398f0
lea rcx, [rbp + 0xe60]
call fcn.1400390f0
lea rcx, [rbp + 0xe60]
call fcn.140034a90
call fcn.140039530
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov qword [rbp + 0x5a8], rax
imul rcx, rax, 0x64
mov qword [rbp + 0x5b0], rcx
mov qword [rbp + 0x5b8], rcx
mov qword [rbp + 0x5f8], 0x3b9aca00
mov qword [rbp + 0x5c0], 0x3b9aca00
add rcx, 0x3b9aca00
movabs rax, 0x112e0be826d694b3
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x5c8], rdx
mov qword [rbp + 0x6d0], rdx
mov qword [rbp + 0x6c8], rdx
mov qword [rsp + 0x60], rdx
imul rax, rdx, 0x3b9aca00
mov qword [rbp + 0x5d0], rax
mov qword [rbp + 0x6c0], rax
sub rcx, rax
mov dword [rsp + 0x68], ecx
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x690], xmm0
lea rcx, [rbp + 0x690]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
lea rcx, [rbp + 0xea8]
call fcn.1400390f0
lea rcx, [rbp + 0xea8]
call fcn.140034a90
call fcn.140039530
mov ecx, 4
mov rsi, qword gs:[0x58]
mov rax, qword [rsi]
mov eax, dword [rcx + rax]
cmp dword [0x140100fc8], eax
jle 0x1400451d2
lea rcx, [0x140100fc8]
call fcn.140054610
cmp dword [0x140100fc8], 0xffffffff
jne 0x1400451d2
mov qword [0x140100fd8], rdi
lea rcx, [0x1400954a0]
call fcn.140054a38
lea rcx, [0x140100fc8]
call fcn.1400545b0
lea rcx, [0x140100fd0]
call fcn.1400348e0
mov rax, qword [rsi]
mov ecx, 4
mov ecx, dword [rcx + rax]
cmp dword [0x140100fc8], ecx
jle 0x140045225
lea rcx, [0x140100fc8]
call fcn.140054610
cmp dword [0x140100fc8], 0xffffffff
jne 0x140045225
mov qword [0x140100fd8], rdi
lea rcx, [0x1400954a0]
call fcn.140054a38
lea rcx, [0x140100fc8]
call fcn.1400545b0
cmp qword [0x140100fd8], 0xffffffffffffffff
jne 0x14004523b
mov byte [0x140100d10], 1
call fcn.140037330
mov rax, qword [rsi]
mov ecx, 4
mov ecx, dword [rcx + rax]
cmp dword [0x140100fc8], ecx
jle 0x140045282
lea rcx, [0x140100fc8]
call fcn.140054610
cmp dword [0x140100fc8], 0xffffffff
jne 0x140045282
mov qword [0x140100fd8], rdi
lea rcx, [0x1400954a0]
call fcn.140054a38
lea rcx, [0x140100fc8]
call fcn.1400545b0
lea rcx, [0x140100fd0]
call fcn.1400348e0
mov rax, qword [rsi]
mov ecx, 4
mov edx, dword [rcx + rax]
cmp dword [0x140100fc8], edx
jle 0x1400452d5
lea rcx, [0x140100fc8]
call fcn.140054610
cmp dword [0x140100fc8], 0xffffffff
jne 0x1400452d5
mov qword [0x140100fd8], rdi
lea rcx, [0x1400954a0]
call fcn.140054a38
lea rcx, [0x140100fc8]
call fcn.1400545b0
cmp qword [0x140100fd8], 0xffffffffffffffff
je 0x140045816
cmp byte [0x140100d10], 1
jne 0x140045770
xor edx, edx
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140034500
movzx esi, al
mov byte [rbp + 0x164], al
mov edx, 1
mov cl, 0x61
call fcn.140034500
movzx r14d, al
mov byte [rbp + 0x165], al
mov edx, 2
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140034500
movzx r15d, al
mov byte [rbp + 0x166], al
mov edx, 3
mov cl, 0x6b
call fcn.140034500
movzx r12d, al
mov byte [rbp + 0x167], al
mov edx, 4
call fcn.140034500
movzx r13d, al
mov byte [rbp + 0x168], al
mov edx, 5
mov cl, 0x69
call fcn.140034500
mov byte [rsp + 0x3a], al
mov byte [rbp + 0x169], al
mov edx, 6
mov cl, 0x6c
call fcn.140034500
mov byte [rsp + 0x35], al
mov byte [rbp + 0x16a], al
mov edx, 7
call fcn.140034500
mov byte [rsp + 0x31], al
mov byte [rbp + 0x16b], al
mov edx, 8
mov cl, reloc.WLDAP32.dll_Ordinal_32
call fcn.140034500
mov byte [rbp - 0x76], al
mov byte [rbp + 0x16c], al
mov edx, 9
mov cl, 0x2f
call fcn.140034500
mov byte [rbp - 0x75], al
mov byte [rbp + 0x16d], al
mov edx, 0xa
mov cl, 0x46
call fcn.140034500
mov byte [rbp - 0x74], al
mov byte [rbp + 0x16e], al
mov edx, ntohl
mov cl, reloc.WLDAP32.dll_Ordinal_32
call fcn.140034500
mov byte [rbp - 0x7b], al
mov byte [rbp + 0x16f], al
mov edx, ntohl
mov cl, 0x2f
call fcn.140034500
mov byte [rbp - 0x5a], al
mov byte [rbp + 0x170], al
mov edx, reloc.WS2_32.dll_listen
mov cl, 0x54
call fcn.140034500
mov byte [rsp + 0x7f], al
mov byte [rbp + 0x171], al
mov edx, reloc.WS2_32.dll_ntohl
mov cl, reloc.WLDAP32.dll_Ordinal_32
call fcn.140034500
mov byte [rbp - 0x7a], al
mov byte [rbp + 0x172], al
mov edx, reloc.WS2_32.dll_ntohs
mov cl, 0x2f
call fcn.140034500
mov byte [rbp - 0x80], al
mov byte [rbp + 0x173], al
mov edx, reloc.WS2_32.dll_recv
mov cl, 0x49
call fcn.140034500
mov byte [rbp - 0x7f], al
mov byte [rbp + 0x174], al
mov edx, reloc.WS2_32.dll_recvfrom
mov cl, 0x4d
call fcn.140034500
mov byte [rbp - 0x7e], al
mov byte [rbp + 0x175], al
mov edx, reloc.WS2_32.dll_select
mov cl, reloc.WLDAP32.dll_Ordinal_32
call fcn.140034500
mov byte [rbp - 0x7d], al
mov byte [rbp + 0x176], al
mov edx, reloc.WS2_32.dll_send
mov cl, 0x63
call fcn.140034500
mov byte [rbp - 0x7c], al
mov byte [rbp + 0x177], al
mov edx, reloc.WS2_32.dll_sendto
mov cl, WSAStartup
call fcn.140034500
mov byte [rbp - 0x73], al
mov byte [rbp + 0x178], al
mov edx, reloc.WS2_32.dll_setsockopt
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.140034500
mov byte [rsp + 0x41], al
mov byte [rbp + 0x179], al
mov edx, reloc.WLDAP32.dll_Ordinal_22
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140034500
mov byte [rsp + 0x42], al
mov byte [rbp + 0x17a], al
mov edx, reloc.WS2_32.dll_socket
call fcn.140034500
mov byte [rsp + 0x43], al
mov byte [rbp + 0x17b], al
mov edx, Ordinal_27
mov cl, 0x66
call fcn.140034500
mov byte [rsp + 0x44], al
mov byte [rbp + 0x17c], al
mov edx, Ordinal_27
mov cl, 0x69
call fcn.140034500
mov byte [rsp + 0x45], al
mov byte [rbp + 0x17d], al
mov edx, reloc.WLDAP32.dll_Ordinal_26
mov cl, WSAStartup
call fcn.140034500
mov byte [rsp + 0x46], al
mov byte [rbp + 0x17e], al
mov edx, reloc.WLDAP32.dll_Ordinal_27
mov cl, 0x65
call fcn.140034500
mov byte [rsp + 0x47], al
mov byte [rbp + 0x17f], al
mov edx, Ordinal_32
mov cl, reloc.WLDAP32.dll_Ordinal_46
call fcn.140034500
mov byte [rsp + 0x48], al
mov byte [rbp + 0x180], al
mov edx, Ordinal_32
mov cl, 0x65
call fcn.140034500
mov byte [rsp + 0x49], al
mov byte [rbp + 0x181], al
mov edx, reloc.WLDAP32.dll_Ordinal_30
mov cl, 0x78
call fcn.140034500
mov byte [rsp + 0x36], al
mov byte [rbp + 0x182], al
mov edx, Ordinal_32
mov cl, 0x65
call fcn.140034500
mov byte [rsp + 0x37], al
mov byte [rbp + 0x183], al
xor eax, eax
mov byte [rbp + 0x184], al
mov edx, ebx
mov r8, rbx
nop word [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0x164], cl
inc edx
movsxd r8, edx
cmp r8, 0x20
jb 0x1400455b0
mov byte [rbp + 0x184], al
lea rcx, [rbp + 0x164]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov byte [rbp + 0x143], sil
mov byte [rbp + 0x144], r14b
mov byte [rbp + 0x145], r15b
mov byte [rbp + 0x146], r12b
mov byte [rbp + 0x147], r13b
movzx eax, byte [rsp + 0x3a]
mov byte [rbp + 0x148], al
movzx eax, byte [rsp + 0x35]
mov byte [rbp + 0x149], al
movzx eax, byte [rsp + 0x31]
mov byte [rbp + 0x14a], al
movzx eax, byte [rbp - 0x76]
mov byte [rbp + 0x14b], al
movzx eax, byte [rbp - 0x75]
mov byte [rbp + 0x14c], al
movzx eax, byte [rbp - 0x74]
mov byte [rbp + 0x14d], al
movzx eax, byte [rbp - 0x7b]
mov byte [rbp + 0x14e], al
movzx eax, byte [rbp - 0x5a]
mov byte [rbp + 0x14f], al
movzx eax, byte [rsp + 0x7f]
mov byte [rbp + 0x150], al
movzx eax, byte [rbp - 0x7a]
mov byte [rbp + 0x151], al
movzx eax, byte [rbp - 0x80]
mov byte [rbp + 0x152], al
movzx eax, byte [rbp - 0x7f]
mov byte [rbp + 0x153], al
movzx eax, byte [rbp - 0x7e]
mov byte [rbp + 0x154], al
movzx eax, byte [rbp - 0x7d]
mov byte [rbp + 0x155], al
movzx eax, byte [rbp - 0x7c]
mov byte [rbp + 0x156], al
movzx eax, byte [rbp - 0x73]
mov byte [rbp + 0x157], al
movzx eax, byte [rsp + 0x41]
mov byte [rbp + 0x158], al
movzx eax, byte [rsp + 0x42]
mov byte [rbp + 0x159], al
movzx eax, byte [rsp + 0x43]
mov byte [rbp + 0x15a], al
movzx eax, byte [rsp + 0x44]
mov byte [rbp + 0x15b], al
movzx eax, byte [rsp + 0x45]
mov byte [rbp + 0x15c], al
movzx eax, byte [rsp + 0x46]
mov byte [rbp + 0x15d], al
movzx eax, byte [rsp + 0x47]
mov byte [rbp + 0x15e], al
movzx eax, byte [rsp + 0x48]
mov byte [rbp + 0x15f], al
movzx eax, byte [rsp + 0x49]
mov byte [rbp + 0x160], al
movzx eax, byte [rsp + 0x36]
mov byte [rbp + 0x161], al
movzx eax, byte [rsp + 0x37]
mov byte [rbp + 0x162], al
xor eax, eax
mov byte [rbp + 0x163], al
mov ecx, ebx
mov rdx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x143], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0x20
jb 0x140045730
mov byte [rbp + 0x163], bl
lea rcx, [rbp + 0x143]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movzx r14d, byte [rsp + 0x4c]
movzx r15d, byte [rsp + 0x4f]
movzx r12d, byte [rsp + 0x4e]
movzx r13d, byte [rsp + 0x51]
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov qword [rbp + 0x668], rax
imul rcx, rax, 0x64
mov qword [rbp + 0x660], rcx
mov qword [rbp + 0x658], rcx
mov qword [rbp + 0x650], 0x3b9aca00
mov qword [rbp + 0x648], 0x3b9aca00
add rcx, 0x3b9aca00
movabs rax, 0x112e0be826d694b3
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x640], rdx
mov qword [rbp + 0x638], rdx
mov qword [rbp + 0x630], rdx
mov qword [rsp + 0x60], rdx
imul rax, rdx, 0x3b9aca00
mov qword [rbp + 0x628], rax
mov qword [rbp + 0x620], rax
sub rcx, rax
mov dword [rsp + 0x68], ecx
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x6a0], xmm0
lea rcx, [rbp + 0x6a0]
jmp 0x1400458c7
call fcn.140037a30
cmp qword [rax + 8], 0xffffffffffffffff
jne 0x1400458cd
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
mov qword [rbp + 0x618], rax
imul rcx, rax, 0x64
mov qword [rbp + 0x610], rcx
mov qword [rbp + 0x608], rcx
mov qword [rbp + 0x600], 0x3b9aca00
mov qword [rbp + 0x5f0], 0x3b9aca00
add rcx, 0x3b9aca00
movabs rax, 0x112e0be826d694b3
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp + 0x5e8], rdx
mov qword [rbp + 0x5e0], rdx
mov qword [rbp + 0x5d8], rdx
mov qword [rsp + 0x60], rdx
imul rax, rdx, 0x3b9aca00
mov qword [rbp + 0x678], rax
mov qword [rbp + 0x670], rax
sub rcx, rax
mov dword [rsp + 0x68], ecx
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp + 0x6b0], xmm0
lea rcx, [rbp + 0x6b0]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
lea rcx, [rbp + 0xef0]
call fcn.1400390f0
lea rcx, [rbp + 0xef0]
call fcn.140034a90
call fcn.140039530
mov byte [rbp], r15b
mov edx, 1
mov cl, WSAStartup
call fcn.140034500
movzx esi, al
mov byte [rsp + 0x37], al
mov byte [rbp + 1], al
mov byte [rbp + 2], r12b
movzx eax, byte [rsp + 0x30]
mov byte [rbp + 3], al
mov edx, 4
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140034500
mov byte [rsp + 0x3a], al
mov byte [rbp + 4], al
mov edx, 5
mov cl, 0x68
call fcn.140034500
mov byte [rsp + 0x35], al
mov byte [rbp + 5], al
mov edx, 6
mov cl, WSAStartup
call fcn.140034500
mov byte [rsp + 0x41], al
mov byte [rbp + 6], al
mov edx, 7
mov cl, 0x64
call fcn.140034500
mov byte [rsp + 0x45], al
mov byte [rbp + 7], al
xor eax, eax
mov byte [rbp + 8], al
mov edx, ebx
mov r8, rbx
nop word [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8], cl
inc edx
movsxd r8, edx
cmp r8, 8
jb 0x140045970
mov byte [rbp + 8], al
mov qword [rbp + 0x288], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x280], rbx
mov byte [rbp + 0x270], al
cmp byte [rbp], al
jne 0x1400459a8
mov r8, rbx
jmp 0x1400459b9
lea rax, [rbp]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x1400459b0
lea rdx, [rbp]
lea rcx, [rbp + 0x270]
call fcn.140034cf0
lea rax, [rbp + 0x270]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_CreateRemoteThread]
call fcn.1400398f0
lea rcx, [rbp + 0xf38]
call fcn.1400390f0
lea rcx, [rbp + 0xf38]
call fcn.140034a90
call fcn.140039530
mov byte [rbp + 0x1d], r15b
mov byte [rbp + 0x1e], sil
mov byte [rbp + 0x1f], r12b
mov byte [rbp + 0x20], r14b
mov edx, 4
mov cl, 0x68
call fcn.140034500
mov byte [rbp + 0x21], al
mov byte [rbp + 0x22], r13b
mov edx, 6
mov cl, 0x64
call fcn.140034500
movzx r13d, al
mov byte [rbp + 0x23], al
mov edx, 7
mov cl, 0x65
call fcn.140034500
mov byte [rsp + 0x48], al
mov byte [rbp + 0x24], al
mov edx, 8
mov cl, 0x78
call fcn.140034500
mov byte [rbp + 0x25], al
xor eax, eax
mov byte [rbp + 0x26], al
mov edx, ebx
mov r8, rbx
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0x1d], cl
inc edx
movsxd r8, edx
cmp r8, 9
jb 0x140045a60
mov byte [rbp + 0x26], al
mov qword [rbp + 0x2a8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x2a0], rbx
mov byte [rbp + 0x290], al
cmp byte [rbp + 0x1d], al
jne 0x140045a98
mov r8, rbx
jmp 0x140045aa9
lea rax, [rbp + 0x1d]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140045aa0
lea rdx, [rbp + 0x1d]
lea rcx, [rbp + 0x290]
call fcn.140034cf0
lea rax, [rbp + 0x290]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_CreateRemoteThreadEx]
call fcn.1400398f0
lea rcx, [rbp + 0xf80]
call fcn.1400390f0
lea rcx, [rbp + 0xf80]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x66
call fcn.140034500
movzx esi, al
mov byte [rbp - 0x3d], al
mov edx, 1
mov cl, WSAGetLastError
call fcn.140034500
movzx r14d, al
mov byte [rbp - 0x3c], al
mov edx, 2
mov cl, 0x78
call fcn.140034500
movzx r12d, al
mov byte [rbp - 0x3b], al
movzx r15d, byte [rsp + 0x4a]
mov byte [rbp - 0x3a], r15b
movzx eax, byte [rsp + 0x32]
mov byte [rbp - 0x39], al
movzx eax, byte [rbp + 0x19b0]
mov byte [rbp - 0x38], al
mov edx, 6
mov cl, 0x61
call fcn.140034500
mov byte [rsp + 0x31], al
mov byte [rbp - 0x37], al
xor eax, eax
mov byte [rbp - 0x36], al
mov edx, ebx
mov r8, rbx
nop dword [rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 0x3d], cl
inc edx
movsxd r8, edx
cmp r8, 7
jb 0x140045b60
mov byte [rbp - 0x36], al
mov qword [rbp + 0x2c8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x2c0], rbx
mov byte [rbp + 0x2b0], al
cmp byte [rbp - 0x3d], al
jne 0x140045b98
mov r8, rbx
jmp 0x140045ba9
lea rax, [rbp - 0x3d]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140045ba0
lea rdx, [rbp - 0x3d]
lea rcx, [rbp + 0x2b0]
call fcn.140034cf0
lea rax, [rbp + 0x2b0]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_FindWindowA]
call fcn.1400398f0
lea rcx, [rbp + 0xfc8]
call fcn.1400390f0
lea rcx, [rbp + 0xfc8]
call fcn.140034a90
call fcn.140039530
mov byte [rbp - 0x35], sil
mov byte [rbp - 0x34], r14b
mov byte [rbp - 0x33], r12b
mov byte [rbp - 0x32], r15b
movzx eax, byte [rsp + 0x32]
mov byte [rbp - 0x31], al
movzx eax, byte [rbp + 0x19b0]
mov byte [rbp - 0x30], al
mov edx, 6
mov cl, 0x77
call fcn.140034500
mov byte [rsp + 0x49], al
mov byte [rbp - 0x2f], al
xor eax, eax
mov byte [rbp - 0x2e], al
mov edx, ebx
mov r8, rbx
nop dword [rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 0x35], cl
inc edx
movsxd r8, edx
cmp r8, 7
jb 0x140045c30
mov byte [rbp - 0x2e], al
mov qword [rbp + 0x2e8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x2e0], rbx
mov byte [rbp + 0x2d0], al
cmp byte [rbp - 0x35], al
jne 0x140045c68
mov r8, rbx
jmp 0x140045c79
lea rax, [rbp - 0x35]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140045c70
lea rdx, [rbp - 0x35]
lea rcx, [rbp + 0x2d0]
call fcn.140034cf0
lea rax, [rbp + 0x2d0]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_FindWindowW]
call fcn.1400398f0
lea rcx, [rbp + 0x1010]
call fcn.1400390f0
lea rcx, [rbp + 0x1010]
call fcn.140034a90
call fcn.140039530
mov byte [rbp + 0x13], sil
mov byte [rbp + 0x14], r14b
mov byte [rbp + 0x15], r12b
mov byte [rbp + 0x16], r15b
movzx eax, byte [rsp + 0x32]
mov byte [rbp + 0x17], al
movzx eax, byte [rbp + 0x19b0]
mov byte [rbp + 0x18], al
movzx eax, byte [rsp + 0x4b]
mov byte [rbp + 0x19], al
mov edx, 7
mov cl, 0x78
call fcn.140034500
movzx r15d, al
mov byte [rsp + 0x36], al
mov byte [rbp + 0x1a], al
mov edx, 8
mov cl, 0x61
call fcn.140034500
mov byte [rsp + 0x47], al
mov byte [rbp + 0x1b], al
xor eax, eax
mov byte [rbp + 0x1c], al
mov edx, ebx
mov r8, rbx
nop dword [rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0x13], cl
inc edx
movsxd r8, edx
cmp r8, 9
jb 0x140045d20
mov byte [rbp + 0x1c], al
mov qword [rbp + 0x308], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x300], rbx
mov byte [rbp + 0x2f0], al
cmp byte [rbp + 0x13], al
jne 0x140045d58
mov r8, rbx
jmp 0x140045d69
lea rax, [rbp + 0x13]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140045d60
lea rdx, [rbp + 0x13]
lea rcx, [rbp + 0x2f0]
call fcn.140034cf0
lea rax, [rbp + 0x2f0]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_FindWindowExA]
call fcn.1400398f0
lea rcx, [rbp + 0x1058]
call fcn.1400390f0
lea rcx, [rbp + 0x1058]
call fcn.140034a90
call fcn.140039530
mov byte [rbp + 9], sil
mov byte [rbp + 0xa], r14b
mov byte [rbp + 0xb], r12b
movzx eax, byte [rsp + 0x4a]
mov byte [rbp + 0xc], al
movzx eax, byte [rsp + 0x32]
mov byte [rbp + 0xd], al
movzx eax, byte [rbp + 0x19b0]
mov byte [rbp + 0xe], al
movzx eax, byte [rsp + 0x4b]
mov byte [rbp + 0xf], al
mov byte [rbp + 0x10], r15b
mov edx, 8
mov cl, 0x77
call fcn.140034500
mov byte [rsp + 0x46], al
mov byte [rbp + 0x11], al
xor eax, eax
mov byte [rbp + 0x12], al
mov edx, ebx
mov r8, rbx
nop dword [rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 9], cl
inc edx
movsxd r8, edx
cmp r8, 9
jb 0x140045e00
mov byte [rbp + 0x12], al
mov qword [rbp + 0x328], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x320], rbx
mov byte [rbp + 0x310], al
cmp byte [rbp + 9], al
jne 0x140045e38
mov r8, rbx
jmp 0x140045e49
lea rax, [rbp + 9]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140045e40
lea rdx, [rbp + 9]
lea rcx, [rbp + 0x310]
call fcn.140034cf0
lea rax, [rbp + 0x310]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_FindWindowExW]
call fcn.1400398f0
lea rcx, [rbp + 0x10a0]
call fcn.1400390f0
lea rcx, [rbp + 0x10a0]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rsp + 0x3b]
mov byte [rbp - 0x2d], al
mov edx, 1
mov cl, 0x77
call fcn.140034500
movzx r15d, al
mov byte [rbp - 0x2c], al
movzx eax, byte [rsp + 0x4d]
mov byte [rbp - 0x2b], al
movzx eax, byte [rsp + 0x3c]
mov byte [rbp - 0x2a], al
mov edx, 4
mov cl, 0x63
call fcn.140034500
mov byte [rsp + 0x43], al
mov byte [rbp - 0x29], al
mov edx, 5
mov cl, 0x61
call fcn.140034500
movzx esi, al
mov byte [rbp - 0x28], al
mov byte [rbp - 0x27], r13b
xor eax, eax
mov byte [rbp - 0x26], al
mov edx, ebx
mov r8, rbx
nop dword [rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 0x2d], cl
inc edx
movsxd r8, edx
cmp r8, 7
jb 0x140045ef0
mov byte [rbp - 0x26], al
mov qword [rbp + 0x348], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x340], rbx
mov byte [rbp + 0x330], al
cmp byte [rbp - 0x2d], al
jne 0x140045f28
mov r8, rbx
jmp 0x140045f39
lea rax, [rbp - 0x2d]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140045f30
lea rdx, [rbp - 0x2d]
lea rcx, [rbp + 0x330]
call fcn.140034cf0
lea rax, [rbp + 0x330]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call fcn.1400398f0
lea rcx, [rbp + 0x10e8]
call fcn.1400390f0
lea rcx, [rbp + 0x10e8]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x77
call fcn.140034500
mov byte [rbp - 0x25], al
movzx eax, byte [rbp + 0x19c0]
mov byte [rbp - 0x24], al
mov edx, 2
mov cl, 0x71
call fcn.140034500
mov byte [rbp - 0x23], al
movzx eax, byte [rsp + 0x4c]
mov byte [rbp - 0x22], al
mov edx, 4
mov cl, 0x77
call fcn.140034500
movzx r13d, al
mov byte [rbp - 0x21], al
mov byte [rbp - 0x20], sil
mov edx, 6
mov cl, 0x78
call fcn.140034500
mov byte [rbp + 0x19b0], al
mov byte [rbp - 0x1f], al
xor eax, eax
mov byte [rbp - 0x1e], al
mov edx, ebx
mov r8, rbx
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 0x25], cl
inc edx
movsxd r8, edx
cmp r8, 7
jb 0x140045fe1
mov byte [rbp - 0x1e], al
mov qword [rbp + 0x368], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x360], rbx
mov byte [rbp + 0x350], al
cmp byte [rbp - 0x25], al
jne 0x140046019
mov r8, rbx
jmp 0x140046029
lea rax, [rbp - 0x25]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x140046020
lea rdx, [rbp - 0x25]
lea rcx, [rbp + 0x350]
call fcn.140034cf0
lea rax, [rbp + 0x350]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
call fcn.1400398f0
lea rcx, [rbp + 0x1130]
call fcn.1400390f0
lea rcx, [rbp + 0x1130]
call fcn.140034a90
call fcn.140039530
movzx esi, byte [rsp + 0x3b]
mov byte [rsp + 0x70], sil
mov edx, 1
mov cl, 0x79
call fcn.140034500
mov byte [rsp + 0x71], al
mov byte [rsp + 0x72], r12b
mov edx, 3
mov cl, 0x71
call fcn.140034500
movzx r14d, al
mov byte [rsp + 0x73], al
xor eax, eax
mov byte [rsp + 0x74], al
mov edx, ebx
mov r8, rbx
nop dword [rax]
lea ecx, [rdx + 0x13]
xor byte [rsp + r8 + 0x70], cl
inc edx
movsxd r8, edx
cmp r8, 4
jb 0x1400460b0
mov byte [rsp + 0x74], al
mov qword [rbp + 0x388], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x380], rbx
mov byte [rbp + 0x370], al
cmp byte [rsp + 0x70], al
jne 0x1400460ea
mov r8, rbx
jmp 0x1400460fb
lea rax, [rsp + 0x70]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x1400460f2
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x370]
call fcn.140034cf0
lea rax, [rbp + 0x370]
mov qword [rsp + 0x20], rax
lea rdx, [0x140035760]
call fcn.1400398f0
lea rcx, [rbp + 0x1178]
call fcn.1400390f0
lea rcx, [rbp + 0x1178]
call fcn.140034a90
call fcn.140039530
mov byte [rbp - 0x44], sil
mov byte [rbp - 0x43], r15b
movzx r12d, byte [rsp + 0x4d]
mov byte [rbp - 0x42], r12b
mov byte [rbp - 0x41], r14b
mov edx, 4
mov cl, 0x78
call fcn.140034500
movzx esi, al
mov byte [rbp - 0x40], al
mov edx, 5
mov cl, 0x71
call fcn.140034500
mov byte [rbp - 0x3f], al
xor eax, eax
mov byte [rbp - 0x3e], al
mov edx, ebx
mov r8, rbx
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 0x44], cl
inc edx
movsxd r8, edx
cmp r8, 6
jb 0x140046182
mov byte [rbp - 0x3e], al
mov qword [rbp + 0x3a8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x3a0], rbx
mov byte [rbp + 0x390], al
cmp byte [rbp - 0x44], al
jne 0x1400461ba
mov r8, rbx
jmp 0x1400461ca
lea rax, [rbp - 0x44]
mov r8, rdi
inc r8
cmp byte [rax + r8], bl
jne 0x1400461c1
lea rdx, [rbp - 0x44]
lea rcx, [rbp + 0x390]
call fcn.140034cf0
lea rax, [rbp + 0x390]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_VirtualProtect]
call fcn.1400398f0
lea rcx, [rbp + 0x11c0]
call fcn.1400390f0
lea rcx, [rbp + 0x11c0]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x71
call fcn.140034500
mov byte [rbp - 0x60], al
mov byte [rbp - 0x5f], r15b
mov byte [rbp - 0x5e], r12b
mov byte [rbp - 0x5d], r14b
mov byte [rbp - 0x5c], sil
xor eax, eax
mov byte [rbp - 0x5b], al
mov ecx, ebx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx - 0x60], al
inc ecx
movsxd rdx, ecx
cmp rdx, 5
jb 0x140046240
mov byte [rbp - 0x5b], bl
mov qword [rbp + 0x3c8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x3c0], rbx
mov byte [rbp + 0x3b0], bl
cmp byte [rbp - 0x60], bl
jne 0x140046277
mov r8, rbx
jmp 0x140046289
lea rax, [rbp - 0x60]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140046280
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x3b0]
call fcn.140034cf0
lea rax, [rbp + 0x3b0]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_VirtualFree]
call fcn.1400398f0
lea rcx, [rbp + 0x1208]
call fcn.1400390f0
lea rcx, [rbp + 0x1208]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rsp + 0x3b]
mov byte [rbp - 0x1d], al
movzx eax, byte [rsp + 0x52]
mov byte [rbp - 0x1c], al
movzx eax, byte [rsp + 0x4e]
mov byte [rbp - 0x1b], al
mov byte [rbp - 0x1a], r14b
mov byte [rbp - 0x19], r13b
movzx eax, byte [rbp + 0x19c8]
mov byte [rbp - 0x18], al
movzx eax, byte [rbp + 0x19b0]
mov byte [rbp - 0x17], al
xor eax, eax
mov byte [rbp - 0x16], al
mov ecx, ebx
mov rdx, rbx
nop dword [rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx - 0x1d], al
inc ecx
movsxd rdx, ecx
cmp rdx, 7
jb 0x140046310
mov byte [rbp - 0x16], bl
mov qword [rbp + 0x3e8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x3e0], rbx
mov byte [rbp + 0x3d0], bl
cmp byte [rbp - 0x1d], bl
jne 0x140046347
mov r8, rbx
jmp 0x140046359
lea rax, [rbp - 0x1d]
mov r8, rdi
nop
inc r8
cmp byte [rax + r8], bl
jne 0x140046350
lea rdx, [rbp - 0x1d]
lea rcx, [rbp + 0x3d0]
call fcn.140034cf0
lea rax, [rbp + 0x3d0]
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.1400398f0
lea rcx, [rbp + 0x1250]
call fcn.1400390f0
lea rcx, [rbp + 0x1250]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rsp + 0x4f]
mov byte [rbp + 0x126], al
movzx eax, byte [rsp + 0x37]
mov byte [rbp + 0x127], al
mov edx, 2
mov cl, reloc.WS2_32.dll_WSAGetLastError
call fcn.140034500
mov byte [rbp + 0x128], al
mov edx, 3
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140034500
movzx r12d, al
mov byte [rsp + 0x44], al
mov byte [rbp + 0x129], al
mov edx, 4
call fcn.140034500
mov byte [rsp + 0x37], al
mov byte [rbp + 0x12a], al
mov edx, 5
mov cl, 0x66
call fcn.140034500
mov byte [rbp + 0x12b], al
mov edx, 6
mov cl, 0x69
call fcn.140034500
mov byte [rbp + 0x12c], al
mov edx, 7
mov cl, WSAStartup
call fcn.140034500
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_301], al
mov edx, 8
mov cl, 0x65
call fcn.140034500
movzx esi, al
mov byte [rbp + 0x12e], al
mov edx, 9
mov cl, reloc.WLDAP32.dll_Ordinal_46
call fcn.140034500
mov byte [rbp + 0x12f], al
movzx eax, byte [rsp + 0x3d]
mov byte [rbp + 0x130], al
movzx eax, byte [rsp + 0x50]
mov byte [rbp + 0x131], al
mov edx, ntohl
mov cl, 0x65
call fcn.140034500
mov byte [rbp + 0x132], al
xor eax, eax
mov byte [rbp + 0x133], al
mov ecx, ebx
mov rdx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x126], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xd
jb 0x140046490
mov byte [rbp + 0x133], bl
call fcn.140037a30
mov rcx, rax
lea rdx, [rbp + 0x126]
call fcn.140034650
test al, al
je 0x140047999
xor edx, edx
mov cl, 0x43
call fcn.140034500
mov byte [rbp + 0xf3], al
mov edx, 1
mov cl, 0x53
call fcn.140034500
mov byte [rbp + 0xf4], al
movzx eax, byte [rsp + 0x3e]
mov byte [rbp + 0xf5], al
movzx eax, byte [rsp + 0x30]
mov byte [rbp + 0xf6], al
mov edx, 4
mov cl, 0x6c
call fcn.140034500
mov byte [rbp + 0xf7], al
movzx eax, byte [rsp + 0x3f]
mov byte [rbp + 0xf8], al
mov edx, 6
mov cl, 0x5f
call fcn.140034500
mov byte [rbp + 0xf9], al
movzx eax, byte [rsp + 0x36]
mov byte [rbp + 0xfa], al
mov edx, 8
mov cl, 0x36
call fcn.140034500
mov byte [rbp + 0xfb], al
mov edx, 9
mov cl, 0x34
call fcn.140034500
mov byte [rbp + 0xfc], al
mov edx, 0xa
mov cl, reloc.WLDAP32.dll_Ordinal_46
call fcn.140034500
mov byte [rbp + 0xfd], al
mov edx, ntohl
mov cl, 0x64
call fcn.140034500
mov byte [rbp + 0xfe], al
mov edx, ntohl
mov cl, 0x6c
call fcn.140034500
mov byte [rbp + 0xff], al
mov edx, reloc.WS2_32.dll_listen
call fcn.140034500
mov byte [rbp + 0x100], al
xor eax, eax
mov byte [rbp + 0x101], al
mov ecx, ebx
mov rdx, rbx
nop
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0xf3], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xe
jb 0x1400465b0
mov byte [rbp + 0x101], bl
mov qword [rbp + 0x1b8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1b0], rbx
mov byte [rbp + 0x1a0], bl
cmp byte [rbp + 0xf3], bl
jne 0x1400465f0
mov rdi, rbx
jmp 0x1400465ff
lea rax, [rbp + 0xf3]
inc rdi
cmp byte [rax + rdi], bl
jne 0x1400465f7
mov r8, rdi
lea rdx, [rbp + 0xf3]
lea rcx, [rbp + 0x1a0]
call fcn.140034cf0
nop
call fcn.140037a30
mov rcx, rax
lea rdx, [rbp + 0x1a0]
call fcn.140034720
mov qword [0x140100f68], rax
mov rcx, qword [rbp + 0x1b8]
cmp rcx, 0x10
jb 0x140046699
lea rax, [rcx + 1]
mov rcx, qword [rbp + 0x1a0]
cmp rax, 0x1000
jb 0x14004668d
test cl, 0x1f
je 0x14004665d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14004666d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x14004667d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x14004668a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140054a50
mov rax, qword [0x140100f68]
mov qword [rbp + 0x1b8], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1b0], rbx
mov byte [rbp + 0x1a0], 0
add rax, 0x296a020
mov qword [0x140100c88], rax
call fcn.140037a30
mov rcx, rax
mov rdx, qword [0x140100c88]
call fcn.14004ae20
test rax, rax
je 0x140047981
lea rdx, [0x140043f30]
lea rcx, [rbp + 0x1c8]
call fcn.14004b5a0
nop
mov rdx, rax
lea rcx, [rbp + 0x190]
call fcn.14004b5e0
nop
mov rcx, qword [rbp + 0x1c8]
test rcx, rcx
je 0x140046717
mov edx, 8
call fcn.1400543c0
nop
cmp dword [rbp + 0x198], 0
setne al
test al, al
jne 0x140046730
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
movaps xmm0, xmmword [rbp + 0x190]
movdqa xmmword [rsp + 0x60], xmm0
lea rcx, [rsp + 0x60]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
je 0x140046754
mov ecx, eax
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
mov qword [rbp + 0x190], rbx
mov dword [rbp + 0x198], ebx
lea rdx, [0x140043ec0]
lea rcx, [rbp + 0x1c0]
call fcn.14004b5a0
nop
mov rdx, rax
lea rcx, [rbp + 0x420]
call fcn.14004b5e0
nop
mov rcx, qword [rbp + 0x1c0]
test rcx, rcx
je 0x14004679c
mov edx, 8
call fcn.1400543c0
nop
lea rcx, [rbp + 0x420]
call fcn.1400359d0
lea rdx, [0x140043cd0]
lea rcx, [rbp + 0x410]
call fcn.14004aea0
nop
lea rcx, [rbp + 0x410]
call fcn.140035a20
nop
lea rcx, [rbp + 0x410]
call fcn.1400359b0
nop
lea rcx, [rbp + 0x420]
call fcn.1400359b0
nop
lea rcx, [rbp + 0x190]
call fcn.1400359b0
movzx eax, byte [rbp + 0x19b8]
mov byte [rbp + 0x49], al
movzx eax, byte [rsp + 0x56]
mov byte [rbp + 0x4a], al
mov edx, 2
mov cl, 0x77
call fcn.140034500
movzx r14d, al
mov byte [rbp + 0x4b], al
movzx eax, byte [rsp + 0x40]
mov byte [rbp + 0x4c], al
movzx eax, byte [rsp + 0x32]
mov byte [rbp + 0x4d], al
mov edx, 5
mov cl, reloc.WS2_32.dll_WSASetLastError
call fcn.140034500
mov byte [rsp + 0x42], al
mov byte [rbp + 0x4e], al
mov edx, 6
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140034500
movzx edi, al
mov byte [rbp + 0x4f], al
xor eax, eax
mov byte [rbp + 0x50], al
mov edx, ebx
mov r8, rbx
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0x49], cl
inc edx
movsxd r8, edx
cmp r8, 7
jb 0x140046853
mov byte [rbp + 0x50], al
lea rdx, [rbp + 0x49]
lea rcx, [rbp + 0x958]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_SetWindowPos]
call fcn.1400398f0
lea rcx, [rbp + 0x1298]
call fcn.1400390f0
lea rcx, [rbp + 0x1298]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x67
call fcn.140034500
movzx r15d, al
mov byte [rsp + 0x3f], al
mov byte [rbp + 0xe9], al
movzx r13d, byte [rbp + 0x19c0]
mov byte [rbp + 0xea], r13b
mov edx, 2
mov cl, 0x61
call fcn.140034500
mov byte [rbp + 0xeb], al
mov byte [rbp + 0xec], r12b
mov edx, 4
mov cl, 0x6b
call fcn.140034500
mov byte [rbp + 0xed], al
mov edx, 5
mov cl, 0x65
call fcn.140034500
mov byte [rbp + 0xee], al
mov byte [rbp + 0xef], dil
mov edx, 7
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140034500
movzx edi, al
mov byte [rbp + 0xf0], al
mov byte [rbp + 0xf1], sil
xor eax, eax
mov byte [rbp + 0xf2], al
mov edx, ebx
mov r8, rbx
nop word [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0xe9], cl
inc edx
movsxd r8, edx
cmp r8, 9
jb 0x140046940
mov byte [rbp + 0xf2], al
lea rdx, [rbp + 0xe9]
lea rcx, [rbp + 0x978]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_GetAsyncKeyState]
call fcn.1400398f0
lea rcx, [rbp + 0x12e0]
call fcn.1400390f0
lea rcx, [rbp + 0x12e0]
call fcn.140034a90
call fcn.140039530
mov byte [rbp + 0x7f], r15b
mov byte [rbp + 0x80], r13b
movzx eax, byte [rsp + 0x33]
mov byte [rbp + 0x81], al
mov edx, 3
mov cl, 0x69
call fcn.140034500
movzx r12d, al
mov byte [rbp + 0x82], al
movzx eax, byte [rsp + 0x3a]
mov byte [rbp + 0x83], al
movzx r13d, byte [rsp + 0x51]
mov byte [rbp + 0x84], r13b
mov edx, 6
mov cl, 0x63
call fcn.140034500
movzx esi, al
mov byte [rbp + 0x85], al
mov byte [rbp + 0x86], dil
xor eax, eax
mov byte [rbp + 0x87], al
mov edx, ebx
mov r8, rbx
nop word [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0x7f], cl
inc edx
movsxd r8, edx
cmp r8, 8
jb 0x140046a10
mov byte [rbp + 0x87], al
lea rdx, [rbp + 0x7f]
lea rcx, [rbp + 0x6d8]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_GetClientRect]
call fcn.1400398f0
lea rcx, [rbp + 0x1328]
call fcn.1400390f0
lea rcx, [rbp + 0x1328]
call fcn.140034a90
call fcn.140039530
mov byte [rbp + 0x88], r15b
movzx eax, byte [rbp + 0x19c0]
mov byte [rbp + 0x89], al
mov byte [rbp + 0x8a], r14b
mov byte [rbp + 0x8b], r12b
mov edx, 4
mov cl, WSAGetLastError
call fcn.140034500
movzx r15d, al
mov byte [rbp + 0x8c], al
mov byte [rbp + 0x8d], r13b
mov byte [rbp + 0x8e], sil
mov byte [rbp + 0x8f], dil
xor eax, eax
mov byte [rbp + 0x90], al
mov edx, ebx
mov r8, rbx
nop dword [rax]
nop word [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0x88], cl
inc edx
movsxd r8, edx
cmp r8, 8
jb 0x140046ad0
mov byte [rbp + 0x90], al
lea rdx, [rbp + 0x88]
lea rcx, [rbp + 0x6f8]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.USER32.dll_GetWindowRect]
call fcn.1400398f0
lea rcx, [rbp + 0x1370]
call fcn.1400390f0
lea rcx, [rbp + 0x1370]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, WSAStartup
call fcn.140034500
mov byte [rsp + 0x36], al
mov byte [rbp + 0x76], al
movzx eax, byte [rsp + 0x52]
mov byte [rbp + 0x77], al
mov edx, 2
mov cl, 0x67
call fcn.140034500
mov byte [rbp + 0x78], al
movzx eax, byte [rsp + 0x30]
mov byte [rbp + 0x79], al
mov edx, 4
mov cl, WSAStartup
call fcn.140034500
mov byte [rbp + 0x7a], al
mov edx, 5
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140034500
movzx r13d, al
mov byte [rbp + 0x7b], al
movzx eax, byte [rsp + 0x31]
mov byte [rbp + 0x7c], al
mov edx, 7
mov cl, 0x77
call fcn.140034500
mov byte [rbp + 0x7d], al
xor eax, eax
mov byte [rbp + 0x7e], al
mov ecx, ebx
mov rdx, rbx
nop
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x76], al
inc ecx
movsxd rdx, ecx
cmp rdx, 8
jb 0x140046ba0
mov byte [rbp + 0x7e], 0
lea rdx, [rbp + 0x76]
lea rcx, [rbp + 0x718]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call fcn.1400398f0
lea rcx, [rbp + 0x13b8]
call fcn.1400390f0
lea rcx, [rbp + 0x13b8]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x68
call fcn.140034500
movzx esi, al
mov byte [rbp + 0xdf], al
mov edx, 1
mov cl, 0x61
call fcn.140034500
movzx edi, al
mov byte [rbp + 0xe0], al
mov edx, 2
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140034500
mov byte [rbp + 0x19b0], al
mov byte [rbp + 0xe1], al
mov edx, 3
mov cl, 0x64
call fcn.140034500
movzx r14d, al
mov byte [rbp + 0xe2], al
mov edx, 4
mov cl, 0x61
call fcn.140034500
mov byte [rbp + 0xe3], al
movzx eax, byte [rsp + 0x35]
mov byte [rbp + 0xe4], al
movzx eax, byte [rsp + 0x31]
mov byte [rbp + 0xe5], al
mov edx, 7
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140034500
mov byte [rsp + 0x40], al
mov byte [rbp + 0xe6], al
mov edx, 8
mov cl, 0x64
call fcn.140034500
mov byte [rsp + 0x3e], al
mov byte [rbp + 0xe7], al
xor eax, eax
mov byte [rbp + 0xe8], al
mov edx, ebx
mov r8, rbx
nop word [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0xdf], cl
inc edx
movsxd r8, edx
cmp r8, 9
jb 0x140046cb0
mov byte [rbp + 0xe8], al
lea rdx, [rbp + 0xdf]
lea rcx, [rbp + 0x738]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
call fcn.1400398f0
lea rcx, [rbp + 0x1400]
call fcn.1400390f0
lea rcx, [rbp + 0x1400]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x79
call fcn.140034500
mov byte [rbp + 0x51], al
mov byte [rbp + 0x52], dil
movzx eax, byte [rbp + 0x19b0]
mov byte [rbp + 0x53], al
mov byte [rbp + 0x54], r14b
mov byte [rbp + 0x55], r15b
mov byte [rbp + 0x56], r13b
movzx eax, byte [rsp + 0x31]
mov byte [rbp + 0x57], al
xor eax, eax
mov byte [rbp + 0x58], al
mov ecx, ebx
mov rdx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x51], al
inc ecx
movsxd rdx, ecx
cmp rdx, 7
jb 0x140046d50
mov byte [rbp + 0x58], 0
lea rdx, [rbp + 0x51]
lea rcx, [rbp + 0x758]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_CheckTokenMembershipEx]
call fcn.1400398f0
lea rcx, [rbp + 0x1448]
call fcn.1400390f0
lea rcx, [rbp + 0x1448]
call fcn.140034a90
call fcn.140039530
mov byte [rbp + 0x59], sil
movzx eax, byte [rsp + 0x53]
mov byte [rbp + 0x5a], al
movzx eax, byte [rsp + 0x54]
mov byte [rbp + 0x5b], al
mov edx, 3
mov cl, 0x61
call fcn.140034500
movzx edi, al
mov byte [rbp + 0x5c], al
movzx r14d, byte [rsp + 0x37]
mov byte [rbp + 0x5d], r14b
movzx eax, byte [rsp + 0x35]
mov byte [rbp + 0x5e], al
movzx r15d, byte [rsp + 0x49]
mov byte [rbp + 0x5f], r15b
xor eax, eax
mov byte [rbp + 0x60], al
mov edx, ebx
mov r8, rbx
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0x59], cl
inc edx
movsxd r8, edx
cmp r8, 7
jb 0x140046df0
mov byte [rbp + 0x60], al
lea rdx, [rbp + 0x59]
lea rcx, [rbp + 0x778]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.1400398f0
lea rcx, [rbp + 0x1490]
call fcn.1400390f0
lea rcx, [rbp + 0x1490]
call fcn.140034a90
call fcn.140039530
mov byte [rbp + 0x39], sil
movzx eax, byte [rsp + 0x53]
mov byte [rbp + 0x3a], al
movzx eax, byte [rsp + 0x54]
mov byte [rbp + 0x3b], al
mov byte [rbp + 0x3c], dil
mov byte [rbp + 0x3d], r14b
movzx eax, byte [rsp + 0x35]
mov byte [rbp + 0x3e], al
mov byte [rbp + 0x3f], r15b
xor eax, eax
mov byte [rbp + 0x40], al
mov ecx, ebx
mov rdx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x39], al
inc ecx
movsxd rdx, ecx
cmp rdx, 7
jb 0x140046e80
mov byte [rbp + 0x40], 0
lea rdx, [rbp + 0x39]
lea rcx, [rbp + 0x798]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_GetExitCodeThread]
call fcn.1400398f0
lea rcx, [rbp + 0x14d8]
call fcn.1400390f0
lea rcx, [rbp + 0x14d8]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rsp + 0x55]
mov byte [rbp + 0x6d], al
movzx eax, byte [rbp - 0x79]
mov byte [rbp + 0x6e], al
mov edx, 2
mov cl, 0x79
call fcn.140034500
mov byte [rbp + 0x6f], al
mov byte [rbp + 0x70], r12b
mov edx, 4
mov cl, 0x66
call fcn.140034500
mov byte [rbp + 0x71], al
mov edx, 5
mov cl, 0x79
call fcn.140034500
mov byte [rbp + 0x72], al
movzx eax, byte [rsp + 0x38]
mov byte [rbp + 0x73], al
movzx eax, byte [rsp + 0x40]
mov byte [rbp + 0x74], al
xor eax, eax
mov byte [rbp + 0x75], al
mov ecx, ebx
mov rdx, rbx
nop
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x6d], al
inc ecx
movsxd rdx, ecx
cmp rdx, 8
jb 0x140046f30
mov byte [rbp + 0x75], 0
lea rdx, [rbp + 0x6d]
lea rcx, [rbp + 0x7b8]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
call fcn.1400398f0
lea rcx, [rbp + 0x1520]
call fcn.1400390f0
lea rcx, [rbp + 0x1520]
call fcn.140034a90
call fcn.140039530
xor edx, edx
mov cl, 0x6d
call fcn.140034500
movzx edi, al
mov byte [rbp - 6], al
mov edx, 1
call fcn.140034500
movzx esi, al
mov byte [rbp - 5], al
mov edx, 2
mov cl, 0x63
call fcn.140034500
movzx r14d, al
mov byte [rbp - 4], al
mov edx, 3
mov cl, reloc.WS2_32.dll_WSASetLastError
call fcn.140034500
movzx r15d, al
mov byte [rbp - 3], al
mov edx, 4
mov cl, 0x79
call fcn.140034500
movzx r12d, al
mov byte [rbp - 2], al
xor eax, eax
mov byte [rbp - 1], al
mov edx, ebx
mov r8, rbx
nop word [rax + rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 - 6], cl
inc edx
movsxd r8, edx
cmp r8, 5
jb 0x140046ff0
mov byte [rbp - 1], al
lea rdx, [rbp - 6]
lea rcx, [rbp + 0x7d8]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.VCRUNTIME140.dll_memcpy]
call fcn.1400398f0
lea rcx, [rbp + 0x1568]
call fcn.1400390f0
lea rcx, [rbp + 0x1568]
call fcn.140034a90
call fcn.140039530
mov byte [rbp + 0x27], dil
mov byte [rbp + 0x28], sil
mov byte [rbp + 0x29], r14b
mov byte [rbp + 0x2a], r15b
mov byte [rbp + 0x2b], r12b
mov byte [rbp + 0x2c], r13b
xor eax, eax
mov byte [rbp + 0x2d], al
mov ecx, ebx
mov rdx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x27], al
inc ecx
movsxd rdx, ecx
cmp rdx, 6
jb 0x140047070
mov byte [rbp + 0x2d], 0
lea rdx, [rbp + 0x27]
lea rcx, [rbp + 0x7f8]
call fcn.140034b20
mov qword [rsp + 0x20], rax
lea rdx, [0x1400356b0]
call fcn.1400398f0
lea rcx, [rbp + 0x15b0]
call fcn.1400390f0
lea rcx, [rbp + 0x15b0]
call fcn.140034a90
call fcn.140039530
mov byte [rbp - 0x15], dil
mov byte [rbp - 0x14], sil
movzx eax, byte [rbp + 0x19b0]
mov byte [rbp - 0x13], al
movzx eax, byte [rsp + 0x30]
mov byte [rbp - 0x12], al
movzx eax, byte [rsp + 0x3a]
mov byte [rbp - 0x11], al
xor eax, eax
mov byte [rbp - 0x10], al
mov ecx, ebx
mov rdx, rbx
lea eax, [rcx + 0x13]
xor byte [rbp + rdx - 0x15], al
inc ecx
movsxd rdx, ecx
cmp rdx, 5
jb 0x1400470f0
mov byte [rbp - 0x10], 0
lea rdx, [rbp - 0x15]
lea rcx, [rbp + 0x818]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.VCRUNTIME140.dll_memset]
call fcn.1400398f0
lea rcx, [rbp + 0x15f8]
call fcn.1400390f0
lea rcx, [rbp + 0x15f8]
call fcn.140034a90
call fcn.140039530
movzx r15d, byte [rbp + 0x19b8]
mov byte [rbp + 0xd5], r15b
mov edx, 1
mov cl, 0x68
call fcn.140034500
movzx edi, al
mov byte [rbp + 0xd6], al
movzx eax, byte [rsp + 0x33]
mov byte [rbp + 0xd7], al
mov edx, 3
mov cl, 0x6c
call fcn.140034500
movzx esi, al
mov byte [rbp + 0xd8], al
movzx eax, byte [rsp + 0x34]
mov byte [rbp + 0xd9], al
movzx eax, byte [rbp + 0x19c8]
mov byte [rbp + 0xda], al
mov edx, 6
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140034500
movzx r14d, al
mov byte [rbp + 0xdb], al
movzx r13d, byte [rsp + 0x48]
mov byte [rbp + 0xdc], r13b
movzx r12d, byte [rsp + 0x47]
mov byte [rbp + 0xdd], r12b
xor eax, eax
mov byte [rbp + 0xde], al
mov edx, ebx
mov r8, rbx
nop dword [rax]
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0xd5], cl
inc edx
movsxd r8, edx
cmp r8, 9
jb 0x1400471e0
mov byte [rbp + 0xde], al
lea rdx, [rbp + 0xd5]
lea rcx, [rbp + 0x838]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.SHELL32.dll_ShellExecuteA]
call fcn.1400398f0
lea rcx, [rbp + 0x1640]
call fcn.1400390f0
lea rcx, [rbp + 0x1640]
call fcn.140034a90
call fcn.140039530
mov byte [rbp + 0xcb], r15b
mov byte [rbp + 0xcc], dil
movzx eax, byte [rsp + 0x33]
mov byte [rbp + 0xcd], al
mov byte [rbp + 0xce], sil
movzx eax, byte [rsp + 0x34]
mov byte [rbp + 0xcf], al
movzx eax, byte [rbp + 0x19c8]
mov byte [rbp + 0xd0], al
mov byte [rbp + 0xd1], r14b
mov byte [rbp + 0xd2], r13b
movzx r15d, byte [rsp + 0x46]
mov byte [rbp + 0xd3], r15b
xor eax, eax
mov byte [rbp + 0xd4], al
mov ecx, ebx
mov rdx, rbx
nop dword [rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0xcb], al
inc ecx
movsxd rdx, ecx
cmp rdx, 9
jb 0x1400472a0
mov byte [rbp + 0xd4], 0
lea rdx, [rbp + 0xcb]
lea rcx, [rbp + 0x858]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.SHELL32.dll_ShellExecuteW]
call fcn.1400398f0
lea rcx, [rbp + 0x1688]
call fcn.1400390f0
lea rcx, [rbp + 0x1688]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rbp + 0x19b8]
mov byte [rbp + 0xad], al
mov byte [rbp + 0xae], dil
movzx eax, byte [rsp + 0x33]
mov byte [rbp + 0xaf], al
mov byte [rbp + 0xb0], sil
movzx eax, byte [rsp + 0x34]
mov byte [rbp + 0xb1], al
movzx eax, byte [rbp + 0x19c8]
mov byte [rbp + 0xb2], al
mov byte [rbp + 0xb3], r14b
mov byte [rbp + 0xb4], r13b
mov byte [rbp + 0xb5], r12b
xor eax, eax
mov byte [rbp + 0xb6], al
mov ecx, ebx
mov rdx, rbx
nop dword [rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0xad], al
inc ecx
movsxd rdx, ecx
cmp rdx, 9
jb 0x140047360
mov byte [rbp + 0xb6], 0
lea rdx, [rbp + 0xad]
lea rcx, [rbp + 0x878]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.SHELL32.dll_ShellExecuteExA]
call fcn.1400398f0
lea rcx, [rbp + 0x16d0]
call fcn.1400390f0
lea rcx, [rbp + 0x16d0]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rbp + 0x19b8]
mov byte [rbp + 0xc1], al
mov byte [rbp + 0xc2], dil
movzx r12d, byte [rsp + 0x33]
mov byte [rbp + 0xc3], r12b
mov byte [rbp + 0xc4], sil
movzx esi, byte [rsp + 0x34]
mov byte [rbp + 0xc5], sil
movzx eax, byte [rbp + 0x19c8]
mov byte [rbp + 0xc6], al
mov byte [rbp + 0xc7], r14b
mov byte [rbp + 0xc8], r13b
mov byte [rbp + 0xc9], r15b
xor eax, eax
mov byte [rbp + 0xca], al
mov ecx, ebx
mov rdx, rbx
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0xc1], al
inc ecx
movsxd rdx, ecx
cmp rdx, 9
jb 0x140047420
mov byte [rbp + 0xca], 0
lea rdx, [rbp + 0xc1]
lea rcx, [rbp + 0x898]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.SHELL32.dll_ShellExecuteExW]
call fcn.1400398f0
lea rcx, [rbp + 0x1718]
call fcn.1400390f0
lea rcx, [rbp + 0x1718]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rsp + 0x3f]
mov byte [rbp + 0x102], al
movzx eax, byte [rbp + 0x19c0]
mov byte [rbp + 0x103], al
movzx eax, byte [rbp - 0x78]
mov byte [rbp + 0x104], al
movzx eax, byte [rsp + 0x3c]
mov byte [rbp + 0x105], al
movzx eax, byte [rbp - 0x77]
mov byte [rbp + 0x106], al
mov edx, 5
mov cl, 0x63
call fcn.140034500
movzx edi, al
mov byte [rbp + 0x107], al
movzx eax, byte [rsp + 0x31]
mov byte [rbp + 0x108], al
movzx eax, byte [rsp + 0x45]
mov byte [rbp + 0x109], al
movzx eax, byte [rsp + 0x3e]
mov byte [rbp + 0x10a], al
mov edx, 9
mov cl, WSAStartup
call fcn.140034500
mov byte [rbp + 0x10b], al
xor eax, eax
mov byte [rbp + 0x10c], al
mov ecx, ebx
mov rdx, rbx
nop dword [rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0x102], al
inc ecx
movsxd rdx, ecx
cmp rdx, 0xa
jb 0x140047510
mov byte [rbp + 0x10c], 0
lea rdx, [rbp + 0x102]
lea rcx, [rbp + 0x8b8]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call fcn.1400398f0
lea rcx, [rbp + 0x1760]
call fcn.1400390f0
lea rcx, [rbp + 0x1760]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rsp + 0x36]
mov byte [rbp + 0x134], al
movzx eax, byte [rsp + 0x56]
mov byte [rbp + 0x135], al
mov byte [rbp + 0x136], r12b
movzx eax, byte [rsp + 0x44]
mov byte [rbp + 0x137], al
mov byte [rbp + 0x138], sil
mov byte [rbp + 0x139], dil
mov edx, 6
mov cl, 0x7a
call fcn.140034500
mov byte [rbp + 0x13a], al
mov byte [rbp + 0x13b], r13b
mov edx, 8
mov cl, WSAStartup
call fcn.140034500
mov byte [rbp + 0x13c], al
mov edx, 9
mov cl, 0x6d
call fcn.140034500
mov byte [rbp + 0x13d], al
movzx eax, byte [rsp + 0x3d]
mov byte [rbp + 0x13e], al
mov edx, ntohl
call fcn.140034500
mov byte [rbp + 0x13f], al
mov edx, ntohl
mov cl, WSAStartup
call fcn.140034500
mov byte [rbp + 0x140], al
mov edx, reloc.WS2_32.dll_listen
mov cl, 0x79
call fcn.140034500
mov byte [rbp + 0x141], al
xor eax, eax
mov byte [rbp + 0x142], al
mov ecx, ebx
mov r8, rbx
nop dword [rax]
lea eax, [rcx + 0x13]
xor byte [rbp + r8 + 0x134], al
inc ecx
movsxd r8, ecx
cmp r8, 0xe
jb 0x140047630
mov byte [rbp + 0x142], 0
lea rdx, [rbp + 0x134]
lea rcx, [rbp + 0x8d8]
call fcn.140034b20
mov qword [rsp + 0x20], rax
lea rdx, [0x140035760]
call fcn.1400398f0
lea rcx, [rbp + 0x17a8]
call fcn.1400390f0
lea rcx, [rbp + 0x17a8]
call fcn.140034a90
call fcn.140039530
movzx r15d, byte [rsp + 0x57]
mov byte [rbp + 0xb7], r15b
movzx esi, byte [rsp + 0x58]
mov byte [rbp + 0xb8], sil
mov edx, 2
mov cl, 0x76
call fcn.140034500
movzx edi, al
mov byte [rbp + 0xb9], al
movzx r14d, byte [rsp + 0x30]
mov byte [rbp + 0xba], r14b
movzx r12d, byte [rsp + 0x43]
mov byte [rbp + 0xbb], r12b
movzx eax, byte [rsp + 0x42]
mov byte [rbp + 0xbc], al
movzx r13d, byte [rsp + 0x41]
mov byte [rbp + 0xbd], r13b
movzx eax, byte [rsp + 0x39]
mov byte [rbp + 0xbe], al
mov edx, 8
mov cl, 0x6a
call fcn.140034500
mov byte [rbp + 0xbf], al
xor eax, eax
mov byte [rbp + 0xc0], al
mov ecx, ebx
mov rdx, rbx
nop dword [rax + rax]
lea eax, [rcx + 0x13]
xor byte [rbp + rdx + 0xb7], al
inc ecx
movsxd rdx, ecx
cmp rdx, 9
jb 0x140047720
mov byte [rbp + 0xc0], 0
lea rdx, [rbp + 0xb7]
lea rcx, [rbp + 0x8f8]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.d3dx9_43.dll_D3DXVec3Project]
call fcn.1400398f0
lea rcx, [rbp + 0x17f0]
call fcn.1400390f0
lea rcx, [rbp + 0x17f0]
call fcn.140034a90
call fcn.140039530
mov byte [rbp + 0x10d], r15b
mov byte [rbp + 0x10e], sil
mov byte [rbp + 0x10f], dil
mov byte [rbp + 0x110], r14b
mov byte [rbp + 0x111], r12b
mov edx, 5
mov cl, reloc.WS2_32.dll_WSACleanup
call fcn.140034500
movzx esi, al
mov byte [rbp + 0x112], al
mov byte [rbp + 0x113], r13b
movzx eax, byte [rsp + 0x59]
mov byte [rbp + 0x114], al
mov edx, 8
mov cl, WSAGetLastError
call fcn.140034500
movzx r14d, al
mov byte [rbp + 0x115], al
mov edx, 9
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140034500
movzx r15d, al
mov byte [rbp + 0x116], al
xor eax, eax
mov byte [rbp + 0x117], al
mov edx, ebx
mov r8, rbx
lea ecx, [rdx + 0x13]
xor byte [rbp + r8 + 0x10d], cl
inc edx
movsxd r8, edx
cmp r8, 0xa
jb 0x140047800
mov byte [rbp + 0x117], al
lea rdx, [rbp + 0x10d]
lea rcx, [rbp + 0x918]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.d3dx9_43.dll_D3DXVec2Transform]
call fcn.1400398f0
lea rcx, [rbp + 0x1838]
call fcn.1400390f0
lea rcx, [rbp + 0x1838]
call fcn.140034a90
call fcn.140039530
movzx eax, byte [rsp + 0x57]
mov byte [rbp + 0x118], al
movzx eax, byte [rsp + 0x58]
mov byte [rbp + 0x119], al
mov byte [rbp + 0x11a], dil
movzx eax, byte [rsp + 0x30]
mov byte [rbp + 0x11b], al
mov byte [rbp + 0x11c], r12b
mov byte [rbp + 0x11d], sil
mov byte [rbp + 0x11e], r13b
movzx eax, byte [rsp + 0x59]
mov byte [rbp + 0x11f], al
mov byte [rbp + 0x120], r14b
mov byte [rbp + 0x121], r15b
mov edx, 0xa
mov cl, 0x63
call fcn.140034500
mov byte [rbp + 0x122], al
mov edx, ntohl
mov cl, WSAStartup
call fcn.140034500
mov byte [rbp + 0x123], al
mov edx, ntohl
mov cl, 0x64
call fcn.140034500
mov byte [rbp + 0x124], al
xor eax, eax
mov byte [rbp + 0x125], al
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rbx + 0x13]
xor byte [rbp + rcx + 0x118], al
inc ebx
movsxd rcx, ebx
cmp rcx, 0xd
jb 0x140047900
mov byte [rbp + 0x125], 0
lea rdx, [rbp + 0x118]
lea rcx, [rbp + 0x938]
call fcn.140034b20
mov qword [rsp + 0x20], rax
mov rdx, qword [sym.imp.d3dx9_43.dll_D3DXVec2TransformCoord]
call fcn.1400398f0
lea rcx, [rbp + 0x1880]
call fcn.1400390f0
lea rcx, [rbp + 0x1880]
call fcn.140034a90
call fcn.140039530
call fcn.140039de0
lea rcx, [rbp + 0x18c8]
call fcn.1400390f0
lea rcx, [rbp + 0x18c8]
call fcn.140034a90
call fcn.140039530
jmp 0x1400479ce
mov qword [0], 1
mov ecx, 9
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov qword [0], 1
lea rcx, [rbp + 0x1910]
call fcn.1400390f0
lea rcx, [rbp + 0x1910]
call fcn.140034a90
call fcn.140039530
mov ecx, 9
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
add rsp, 0x1a68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret