Function at 0x1400a9690
Capabilities:
Contain obfuscated stackstrings
Terminate process

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x58]
sub rsp, 0x130
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1401a9600]
xor rax, rsp
mov qword [rbp + 0x18], rax
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
lea rcx, [rbp + 0x58]
movabs rdx, 0xff00ff00ff00ff07
mov qword [rbp + 8], rdx
mov qword [rbp + 0x10], rcx
mov rax, qword [rcx]
xor rax, rdx
mov qword [rbp], rax
xor edi, edi
mov qword [rcx], rdi
mov dword [rsp + 0x30], 0xdff8ce2f
mov dword [rsp + 0x34], 0x22f5ccf5
mov dword [rsp + 0x38], 0xf7fef6ff
mov word [rsp + 0x3c], 0x3530
mov byte [rsp + 0x3e], 0x68
xor eax, eax
mov qword [rsp + 0x3f], rax
mov dword [rsp + 0x47], eax
mov byte [rsp + 0x4b], al
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
lea r15d, [rdi + 1]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
movabs rax, 0xdd228f97f74862d1
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x49
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x1c
jb 0x1400a9732
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rax, [rsp + 0x30]
or rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1400a979f
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.1400380e0
nop
mov dword [rsp + 0x30], 0xb9b4c0bb
mov dword [rsp + 0x34], 0x909bdc5
mov dword [rsp + 0x38], 0x47463906
mov byte [rsp + 0x3c], Ordinal_211
xor eax, eax
mov qword [rsp + 0x3d], rax
mov word [rsp + 0x45], ax
mov byte [rsp + 0x47], al
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
movabs rax, 0xe3e5318cc6d2e57a
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x56
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x18
jb 0x1400a97ee
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
lea rax, [rsp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1400a9857
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x48]
call fcn.1400380e0
nop
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 0x48]
call fcn.140080a98
call rax
mov qword [rbp - 0x50], rax
mov esi, 0x1000
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x1400a98c1
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, rsi
jb 0x1400a98bc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a98bc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqa xmm6, xmmword [0x140172ff0]
movdqu xmmword [rbp - 0x38], xmm6
mov byte [rbp - 0x48], dil
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1400a990c
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x1400a9907
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a9907
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqu xmmword [rbp - 0x18], xmm6
mov byte [rbp - 0x28], dil
mov dword [rsp + 0x60], 0x722e2542
mov dword [rsp + 0x64], 0x24232f50
mov dword [rsp + 0x68], 0x3238593c
mov dword [rsp + 0x6c], 0x4a32343a
mov word [rsp + 0x70], 0x4447
mov byte [rsp + 0x72], 0xa2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x73], xmm0
mov dword [rbp - 0x7d], eax
mov word [rbp - 0x79], ax
mov byte [rbp - 0x77], al
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x60]
movabs rax, 0xac6fcf6548d169e8
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x58
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x60], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x2a
jb 0x1400a995f
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
lea rax, [rsp + 0x60]
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1400a99c8
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x48]
call fcn.1400380e0
nop
mov dword [rsp + 0x30], 0x9f96595e
mov dword [rsp + 0x34], 0x9b92a39c
mov word [rsp + 0x38], 0xf598
xor eax, eax
mov qword [rsp + 0x3a], rax
mov dword [rsp + 0x42], eax
mov word [rsp + 0x46], ax
mov byte [rsp + 0x48], al
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
movabs rax, 0xb9e59834842c68de
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x12
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x19
jb 0x1400a9a15
xorps xmm0, xmm0
movups xmmword [rbp - 0x28], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x18], xmm1
lea rax, [rsp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1400a9a7e
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x28]
call fcn.1400380e0
nop
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x28]
call fcn.140065030
mov r13, rax
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x1400a9ae0
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x1400a9adb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a9adb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqu xmmword [rbp - 0x18], xmm6
mov byte [rbp - 0x28], dil
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x1400a9b23
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, rsi
jb 0x1400a9b1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a9b1e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqu xmmword [rbp - 0x38], xmm6
mov byte [rbp - 0x48], dil
mov dword [rsp + 0x30], 0x98c6b497
mov dword [rsp + 0x34], 0xaad4d7d9
mov dword [rsp + 0x38], 0xd1b2ddd6
mov dword [rsp + 0x3c], 0xdca3aedb
mov dword [rsp + 0x40], 0x4ba680db
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x44], xmm0
mov qword [rsp + 0x54], rax
mov word [rsp + 0x5c], ax
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
movabs rax, 0x29c031a5ebd3bd8c
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x2c
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x2e
jb 0x1400a9b72
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rax, [rsp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1400a9bdd
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.1400380e0
nop
mov dword [rsp + 0x30], 0xd083433
mov dword [rsp + 0x34], 0x55551129
mov dword [rsp + 0x38], 0x17162d56
mov byte [rsp + 0x3c], Ordinal_143
xor eax, eax
mov qword [rsp + 0x3d], rax
mov word [rsp + 0x45], ax
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
movabs rax, 0x1fc4b3b29eae676c
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0xc
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x17
jb 0x1400a9c29
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rsp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1400a9c92
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.1400380e0
nop
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x70]
call fcn.14006b280
call rax
mov r12d, eax
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400a9cf7
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, rsi
jb 0x1400a9cf2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a9cf2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], dil
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400a9d3c
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, rsi
jb 0x1400a9d37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a9d37
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], dil
mov dword [rsp + 0x30], 0xce10eecf
mov dword [rsp + 0x34], 0xe41e1f11
mov dword [rsp + 0x38], 0xdbf8191c
mov dword [rsp + 0x3c], 0xd3d7da24
mov word [rsp + 0x40], 0xd1f9
mov byte [rsp + 0x42], 0xb4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x43], xmm0
mov qword [rsp + 0x53], rax
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
movabs rax, 0xa1c1a718a34f4a95
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x13
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x2b
jb 0x1400a9d8c
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rsp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1400a9df5
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.1400380e0
nop
mov dword [rsp + 0x30], 0x59524e4b
mov dword [rsp + 0x34], 0x191d4541
mov dword [rsp + 0x38], 0x5f40491c
mov byte [rsp + 0x3c], reloc.WLDAP32.dll_Ordinal_50
xor eax, eax
mov dword [rsp + 0x3d], eax
mov byte [rsp + 0x41], al
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
movabs rax, 0xa89c0f10ab225
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 3
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x12
jb 0x1400a9e3e
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rax, [rsp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1400a9ea9
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.1400380e0
nop
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x60]
call fcn.14006b280
call rax
mov r14d, eax
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400a9f11
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, rsi
jb 0x1400a9f0c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a9f0c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], dil
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400a9f56
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, rsi
jb 0x1400a9f51
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a9f51
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], dil
mov dword [rsp + 0x30], 0xafccdebf
mov dword [rsp + 0x34], 0xbac1d8c1
mov dword [rsp + 0x38], 0xc7cec6cf
mov byte [rsp + 0x3c], WSAStartup
xor eax, eax
mov qword [rsp + 0x3d], rax
mov dword [rsp + 0x45], eax
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
movabs rax, 0xf156f4667248f20f
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x69
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x19
jb 0x1400a9f91
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rsp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1400a9ffa
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.1400380e0
nop
mov dword [rsp + 0x30], 0x2d283433
mov dword [rsp + 0x34], 0xd5d51109
mov dword [rsp + 0x38], 0x17160dd6
mov byte [rsp + 0x3c], 0xec
xor eax, eax
mov qword [rsp + 0x3d], rax
mov dword [rsp + 0x45], eax
mov word [rsp + 0x49], ax
mov byte [rsp + 0x4b], al
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
movabs rax, 0x4d20c6a19b49d49c
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x44
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x1c
jb 0x1400aa04d
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rax, [rsp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1400aa0b8
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.1400380e0
nop
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x60]
call fcn.14006b280
call rax
mov esi, eax
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400aa123
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa11e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aa11e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], dil
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400aa16c
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa167
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aa167
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], dil
mov dword [rsp + 0x30], 0x8fac9e7f
mov dword [rsp + 0x34], 0x7a919891
mov dword [rsp + 0x38], 0xb78eb6af
mov word [rsp + 0x3c], 0x7174
mov byte [rsp + 0x3e], 0x24
xor eax, eax
mov word [rsp + 0x3f], ax
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
movabs rax, 0xcfa6320d566d3c07
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x31
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x11
jb 0x1400aa1aa
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x60], xmm1
lea rax, [rsp + 0x30]
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1400aa213
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.1400380e0
nop
mov dword [rsp + 0x30], 0x50a1e1b
mov edi, 0xa
mov dword [rsp + 0x34], 0x4d49011d
mov dword [rsp + 0x38], 0xf0c1540
mov byte [rsp + 0x3c], WSAStartup
xor eax, eax
mov qword [rsp + 0x3d], rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
movabs rax, 0x1c02c29da54acbef
add rcx, rax
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x77
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
add rax, r15
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x15
jb 0x1400aa25e
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x70], xmm1
lea rax, [rsp + 0x30]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400aa2c6
mov r8, rbx
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.1400380e0
nop
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x60]
call fcn.140080a98
call rax
mov rbx, rax
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x1400aa335
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa330
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aa330
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqu xmmword [rsp + 0x70], xmm6
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0xf
jbe 0x1400aa37e
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aa379
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400aa379
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140123c04
movdqu xmmword [rbp - 0x60], xmm6
mov byte [rbp - 0x70], 0
lea r9, [rbp - 8]
xor r8d, r8d
mov dl, r15b
lea ecx, [r8 + 0x13]
call r13
mov r11d, eax
call fcn.1400a4578
movsx r9d, al
call fcn.1400a4574
movsx ecx, al
imul r9d, ecx
call fcn.1400a4584
movsx r10d, al
movsx ecx, byte [reloc.WS2_32.dll_htons]
add ecx, r10d
lea eax, [rcx + r9*4]
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x1400aa55a
test r12d, r12d
je 0x1400aa416
test r14d, r14d
je 0x1400aa416
test esi, esi
je 0x1400aa416
test rbx, rbx
je 0x1400aa416
test r11d, r11d
jne 0x1400aa416
test r13, r13
je 0x1400aa416
mov rax, qword [rbp - 0x50]
test rax, rax
je 0x1400aa416
sub rbx, rax
cmp rbx, 0x7d0
ja 0x1400aa416
xor r15d, r15d
movsx eax, byte [reloc.WS2_32.dll_getsockopt]
movd xmm1, eax
cvtdq2pd xmm1, xmm1
movsx eax, byte [reloc.WS2_32.dll_closesocket]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, r15
mulsd xmm1, xmm0
movsd qword [rbp - 0x50], xmm1
lea eax, [r9 + r9*2]
lea r11d, [r10 + rax*2]
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r11d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x1400aa4ad
call fcn.1400a457c
movsx edx, al
movsx eax, byte [0x14022ead4]
imul edx, eax
lea r8d, [rdx + rdx*4]
call fcn.1400a4588
movsx ecx, al
sub r8d, ecx
call fcn.1400a4580
movsx ecx, al
add r8d, ecx
movsx ecx, byte [reloc.WS2_32.dll_closesocket]
add ecx, r8d
jne 0x1400aa506
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r10d
lea eax, [rax + r9*2]
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
cmp eax, ecx
je 0x1400aa502
movsx eax, byte [reloc.WS2_32.dll_htons]
add eax, r11d
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x50]
cvttsd2si edi, xmm0
jmp 0x1400aa506
mov edi, dword [rsp + 0x20]
lea ecx, [r9 + r10]
movsx eax, byte [reloc.WS2_32.dll_htons]
lea ecx, [rcx + r9*8]
add eax, ecx
movsx ecx, byte [reloc.WS2_32.dll_htonl]
xor edx, edx
div ecx
movsx ecx, byte [reloc.WS2_32.dll_accept]
sub eax, ecx
imul eax, edi
test eax, eax
je 0x1400aa55a
mov edx, Ordinal_27
lea rcx, [rbp]
call fcn.1400a458c
lea rdx, [rbp + 0x58]
lea rcx, [rbp]
call fcn.14008454c
nop
mov ecx, 0x99
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov rax, qword [rbp]
movabs rcx, 0xff00ff00ff00ff07
xor rax, rcx
lea rcx, [rbp + 0x58]
mov qword [rcx], rax
mov rcx, qword [rbp + 0x18]
xor rcx, rsp
call fcn.140123840
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret