Function at 0x1401594c0
Capabilities:
Encode data using xor
Execute anti-debugging instructions

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov word [rsp + 0x38], ax
mov byte [rsp + 0x3a], al
mov rsi, qword [0x1404e9cf8]
movabs r14, 0xda1b0b19624ca428
mov rbp, qword [0x1404e9d00]
movabs r15, 0xaaf363e474b1c568
movzx r10d, byte [rsp + 0x70]
movabs r13, 0xf6bd4db1b0187d18
mov dword [rsp + 0x20], 0x152dfdd1
movabs r12, 0x8e51214c26e5ec78
mov qword [rsp + 0x24], rax
mov dword [rsp + 0x2c], eax
mov word [rsp + 0x30], ax
nop word [rax + rax]
mov rax, rbp
mov r9, rsi
nop word [rax + rax]
xor ebx, ebx
cmp rbx, 0x12
jae 0x140159443
movzx r11d, byte [rsp + rbx + 0x20]
mov edi, r11d
cmp rax, rbx
ja 0x14015943a
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x140158990
lea r10, [rbx + r14]
movzx ecx, dil
and cl, r10b
add cl, cl
sub r10b, cl
sub r10b, 0x18
add r10b, r11b
jmp 0x1401589c0
je 0x1401593d5
inc rcx
cmp rax, rcx
je 0x140159359
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140159327
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14015930d
nop dword [rax]
cmp r9, rbx
ja 0x140159431
lea rcx, [r9 + 0xa]
cmp rax, rcx
jae 0x1401589f0
lea r8d, [rbx + 0x48]
mov edx, 4
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140158a30
lea rdx, [r9 + 1]
cmp rax, rdx
je 0x1401592cc
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1401592a5
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x14015925e
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140159244
nop dword [rax]
nop dword [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, rbx
jbe 0x140158f83
nop dword [rax]
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x140158f69
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x140158f43
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x140158f1c
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x14015900d
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x140158eff
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x140158ee5
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x140158ecb
lea rcx, [r9 + 0x42]
cmp rax, rcx
je 0x140158eaa
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140158e7b
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x140158a40
lea rax, [r9 + 4]
lea r9, [rax + 3]
lea rdx, [r9 + 0x20]
cmp rax, rdx
jb 0x140159417
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x1401593fd
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x140158c30
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x140158c0f
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x140158bf5
lea rcx, [r9 + 8]
cmp rax, rcx
jb 0x140158e2a
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x140158de3
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x140158d9e
lea rcx, [r9 + 0x61]
cmp rax, rcx
jb 0x140158d75
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x140158a40
mov rax, rdx
lea r9, [rdx + 0x400]
lea rdx, [r9 + 2]
cmp rax, rdx
ja 0x140158d4d
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x140158d33
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x140158d15
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x140158cf7
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x140158cdd
lea rcx, [r9 + 0x41]
cmp rax, rcx
ja 0x140158cbd
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x140158c9c
lea rcx, [r9 + 0x61]
cmp rax, rcx
ja 0x140158c72
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x140158c51
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x140158a40
mov rax, rdx
lea r9, [rdx + 0x10]
jmp 0x140158a40
lea edx, [rbx - 0x48]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 8
jmp 0x140158a30
lea r8d, [rbx + 0x68]
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1401589c0
lea r8d, [rbx + 0x18]
mov edx, 0x2c
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140158965
lea r8d, [rbx + 0x40]
mov edx, 0x20
movzx ecx, r11b
and cl, r8b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
jmp 0x1401592e1
lea r8d, [rbx - 0x10]
mov edx, reloc.WS2_32.dll_getservbyport
movzx ecx, r11b
inc r9
and cl, r8b
dec rbx
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r11b
add r10b, r8b
inc rbx
jmp 0x140158952
lea edx, [rbx - 0x60]
movzx ecx, r11b
and cl, dl
dec rbx
add cl, cl
sub r11b, cl
lea r10d, [rdx + r11]
sub r10b, 0x60
inc rbx
jmp 0x140158952
lea r8d, [rbx + 0x50]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x30
add r10b, r8b
jmp 0x14015927a
movzx edx, bl
movzx r10d, bl
and dl, r11b
add dl, dl
sub r10b, dl
add r10b, r11b
add rax, r9
jmp 0x140159340
lea r8d, [rbx - 0x50]
mov edx, 0x18
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
jmp 0x14015933d
lea r8d, [rbx + 0x60]
mov edx, gethostbyaddr
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
jmp 0x14015936f
lea edx, [rbx + 0x10]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x70
jmp 0x140159398
lea edx, [rbx - 0x40]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
movzx ecx, byte [rsp + rbx + 0x20]
add rcx, r9
add rbx, rcx
lea r10d, [r11 + rdx]
sub r10b, 0x40
inc rbx
jmp 0x140158952
lea r8d, [rbx - 8]
mov edx, 0x1c
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
mov byte [rsp + rbx + 0x20], r10b
inc rbx
jmp 0x140158952
lea r8d, [rbx - 0x58]
mov edx, reloc.WS2_32.dll_gethostbyname
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
cmp r9, 0x5a
jb 0x140158d91
lea r8d, [rbx - 0x10]
movzx edx, r11b
movzx ecx, r11b
and cl, r8b
add cl, cl
sub dl, cl
add dl, r8b
lea r10d, [rdx*2 - 0x20]
jmp 0x1401592e1
lea r8d, [rbx + 0x58]
movzx ecx, r11b
and cl, r8b
movzx r10d, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x68
add r10b, r8b
cmp rax, 9
jae 0x140159209
lea rcx, [r9 + 0x80]
cmp rax, rcx
jbe 0x140159140
lea r8d, [rbx - 0x30]
mov edx, 0x28
movzx ecx, r8b
and cl, r11b
jmp 0x140158dae
lea edx, [rbx + 8]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x38
lea rcx, [r9 + rax]
cmp rcx, 0x200
je 0x140159226
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jbe 0x14015906b
lea r8d, [rbx - 0x78]
mov edx, 0x24
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140158dfe
lea r8d, [rbx - 0x50]
mov edx, 0x18
movzx ecx, r8b
and cl, r11b
sub dl, cl
movzx ecx, byte [rsp + rbx + 0x20]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rbx
jmp 0x140158952
lea r8d, [rbx + 0x60]
mov edx, gethostbyaddr
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140159398
lea edx, [rbx + 0x10]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x70
jmp 0x140159372
lea edx, [rbx - 0x40]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x40
jmp 0x140159340
lea edx, [rbx + 0x70]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x10
add rax, r9
jmp 0x140159340
lea r8d, [rbx - 0x30]
mov edx, 0x28
movzx ecx, r8b
dec rbx
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rbx
jmp 0x140158952
lea edx, [rbx + 0x80]
inc r9
movzx ecx, dl
dec rbx
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x80
inc rbx
jmp 0x140158952
lea edx, [rbx + 0x30]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x50
jmp 0x1401592e1
lea rcx, [r9 + 0x200]
cmp rax, rcx
jae 0x140158fa9
lea edx, [rbx + 0x28]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x18
jmp 0x140158e3f
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140158fe1
lea r8d, [rbx - 0x70]
mov edx, 8
movzx ecx, r8b
and cl, r11b
sub dl, cl
movzx ecx, byte [rsp + rbx + 0x20]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rbx
jmp 0x140158952
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140159004
lea edx, [rbx + 0x30]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x50
jmp 0x140159372
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14015901b
lea r8d, [rbx + 0x20]
mov edx, reloc.WS2_32.dll_recv
jmp 0x140159267
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x140159044
lea edx, [rbx + 0x70]
dec rbx
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x10
inc rbx
jmp 0x140158952
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140158e3f
lea edx, [rbx + 0x10]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x70
jmp 0x1401592e1
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140159095
lea r8d, [rbx - 0x28]
mov edx, reloc.WS2_32.dll_inet_ntoa
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1401592e1
inc rcx
cmp rax, rcx
jne 0x1401590c0
lea edx, [rbx + 0x28]
inc r9
movzx ecx, dl
dec rbx
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x18
inc rbx
jmp 0x140158952
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1401590e7
lea r8d, [rbx + 0x68]
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
jmp 0x14015933d
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14015910a
lea edx, [rbx - 0x48]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 8
jmp 0x140159372
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x140158dfe
lea edx, [rbx + 0x58]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rsp + rbx + 0x20]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + r11]
sub r10b, 0x68
inc rbx
jmp 0x140158952
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140159178
lea r8d, [rbx + 0x20]
mov edx, reloc.WS2_32.dll_recv
movzx ecx, r8b
and cl, r11b
sub dl, cl
movzx ecx, byte [rsp + rbx + 0x20]
add rcx, r9
add rbx, rcx
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rbx
jmp 0x140158952
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14015919b
lea edx, [rbx - 0x40]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x40
jmp 0x140159372
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1401591c8
lea r8d, [rbx + 0x60]
mov edx, gethostbyaddr
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
add rax, r9
jmp 0x140159340
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1401591df
lea r8d, [rbx - 0x50]
mov edx, 0x18
jmp 0x140159267
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140158dba
movzx edx, bl
movzx r10d, bl
and dl, r11b
dec rbx
add dl, dl
sub r10b, dl
add r10b, r11b
inc rbx
jmp 0x140158952
lea r8d, [rbx + 0x40]
movzx edx, r11b
movzx ecx, r11b
and cl, r8b
sub dl, cl
add dl, 0x20
lea r10d, [rdx + rdx]
add r10b, r8b
jmp 0x14015927a
lea r8d, [rbx - 0x70]
mov edx, 8
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
jmp 0x140159372
lea edx, [rbx + 0x28]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x18
jmp 0x140159340
lea r8d, [rbx - 0x78]
mov edx, 0x24
movzx ecx, r8b
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
lea edx, [rbx + 0x68]
mov r8d, reloc.WS2_32.dll_sendto
movzx ecx, dl
and cl, r11b
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, r10b
add r8b, r11b
mov byte [rsp + rbx + 0x20], r8b
add rax, r9
jmp 0x140159340
lea r8d, [rbx + 0x38]
mov edx, 0x3c
movzx ecx, r8b
dec rbx
and cl, r11b
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc rbx
jmp 0x140158952
lea edx, [rbx - 0x68]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x28
lea r8d, [rbx + 0x18]
mov edx, 0x2c
movzx ecx, r8b
and cl, r11b
sub dl, cl
add dl, dl
add dl, r8b
add dl, r11b
mov byte [rsp + rbx + 0x20], dl
inc r9
dec rbx
inc rbx
jmp 0x140158952
lea edx, [rbx - 0x48]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 8
add rax, r9
jmp 0x140159340
lea rcx, [rbx + r15]
mov edx, reloc.WS2_32.dll_sendto
and dil, cl
sub dl, dil
lea r10d, [rdx + rdx]
add r10b, cl
add r10b, r11b
movzx ecx, r10b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x140158952
lea rcx, [rbx + r13]
mov edx, 0x2c
and dil, cl
sub dl, dil
lea r10d, [rdx + rdx]
add r10b, cl
add r10b, r11b
movzx edx, bl
sub dl, 0x48
inc r9
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
sub dl, 8
add dl, r11b
movzx ecx, dl
mov byte [rsp + rbx + 0x20], cl
add rcx, r9
sub rbx, rcx
lea edx, [rbx - 0x20]
movzx ecx, r11b
and cl, dl
inc rax
add cl, cl
sub r11b, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub r11b, 0x20
add r11b, dl
mov byte [rsp + rbx + 0x20], r11b
add rbx, rcx
movzx ecx, byte [rsp + rbx + 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x140158952
lea rcx, [rbx + r12]
and dil, cl
add dil, dil
sub cl, dil
lea r10d, [r11 + rcx]
sub r10b, 0x48
movzx ecx, byte [rsp + rbx + 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x140158952
sub bl, 0x38
movzx ecx, bl
and cl, r11b
add cl, cl
sub bl, cl
lea r10d, [r11 + rbx]
sub r10b, 0x78
jmp 0x140158950
add bl, 0x78
movzx eax, bl
and al, r11b
add al, al
sub bl, al
lea r10d, [r11 + rbx]
sub r10b, 0x48
jmp 0x140158940
mov eax, dword [rsp + 0x17e4b00]
jmp 0x140159447
mov eax, dword [rsp + 0xcaef28]
jmp 0x140159447
mov eax, dword [rsp + 0x20]
movsxd rcx, eax
mov qword [0x1404e9d28], rcx
rdtsc
shl rdx, 0x20
lea rdi, [rsp + 0x70]
or rax, rdx
xor bl, bl
lea rcx, [rcx + rax*8]
mov qword [0x1404e9d30], rcx
nop dword [rax]
mov ecx, 0x186a0
inc bl
call fcn.140157c70
movzx ecx, bl
movzx eax, al
xor cl, 0x61
lea rdi, [rdi + 1]
movzx edx, cl
imul eax, edx
xor byte [rdi - 1], al
cmp bl, 8
jb 0x140159470
mov rax, qword [rsp + 0x70]
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor eax, eax
mov rsi, rcx
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], eax
mov word [rsp + 0x34], ax
mov byte [rsp + 0x36], al
mov rbp, qword [0x1404e9cf8]
movabs r15, 0x88df5db1e4437c9d
mov r14, qword [0x1404e9d00]
movabs r12, 0xcfda4b41065f6185
movzx r11d, byte [rsp + 0x70]
movabs r13, 0x9a9e1915acca75d7
mov dword [rsp + 0x20], 0xd1a599b1
mov qword [rsp + 0x24], rax
mov dword [rsp + 0x2c], eax
mov word [rsp + 0x30], ax
nop dword [rax + rax]
mov rax, r14
mov r9, rbp
nop word [rax + rax]
xor edi, edi
cmp rdi, 0x12
jae 0x14015a04a
movzx ebx, byte [rsp + rdi + 0x20]
mov r8, rbx
cmp rax, rdi
ja 0x14015a041
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14015958f
lea r11, [rdi + r15]
movzx ecx, r11b
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x4b
add r11b, r8b
jmp 0x1401595d0
je 0x140159fd9
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140159faa
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140159f6e
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x140159f4f
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x140159f0d
nop dword [rax]
cmp r9, rdi
ja 0x14015a038
lea rcx, [r9 + 0x80]
cmp rax, rcx
jae 0x1401595fb
lea edx, [rdi - 0x1f]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x27
jmp 0x140159630
lea rdx, [r9 + 1]
cmp rax, rdx
je 0x140159ef2
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140159ed3
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x140159eb7
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x140159e90
nop
lea rcx, [r9 + rax]
cmp rcx, rdi
jbe 0x140159ba2
nop dword [rax]
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x140159b84
lea rcx, [r9 + 0x28]
cmp rax, rcx
je 0x140159b5b
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x140159b3c
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x140159b18
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x140159af5
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x140159adc
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x140159ab8
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x140159a9f
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x140159a71
lea rcx, [r9 + 0x42]
cmp rax, rcx
je 0x140159640
lea rax, [r9 + 3]
lea r9, [rax + 9]
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x14015a01d
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x14015a002
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x140159825
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x14015980c
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x1401597f3
lea rcx, [r9 + 0x200]
cmp rax, rcx
jb 0x140159a2c
lea rcx, [r9 + 0x20]
cmp rax, rcx
jb 0x1401599df
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x140159997
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x140159976
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x140159640
lea rax, [r9 + 8]
lea r9, [rax + 0x61]
lea rcx, [r9 + 1]
cmp rax, rcx
ja 0x140159948
lea rcx, [r9 + 0x1000]
cmp rax, rcx
ja 0x140159929
lea rcx, [r9 + 0x42]
cmp rax, rcx
ja 0x140159908
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x1401598ef
lea rdx, [r9 + 0x20]
cmp rax, rdx
ja 0x1401598cc
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x1401598a9
lea rcx, [r9 + 0x5a]
cmp rax, rcx
ja 0x14015988a
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x140159861
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x14015983e
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x140159640
mov rax, rdx
lea r9, [rdx + 0x2a]
jmp 0x140159640
lea edx, [rdi + 0x3f]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x47
jmp 0x140159630
lea edx, [rdi + 5]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x23
jmp 0x1401595d0
lea edx, [rdi - 0x35]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x73
jmp 0x140159561
lea r8d, [rdi + 8]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
movzx r10d, dil
sub r11b, cl
sub r11b, 0x38
add r11b, r8b
jmp 0x140159f26
lea r8d, [rdi - 0x32]
mov edx, gethostbyaddr
movzx ecx, bl
inc r9
and cl, r8b
dec rdi
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
inc rdi
jmp 0x140159552
lea edx, [rdi - 0x6c]
movzx ecx, bl
and cl, dl
dec rdi
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0xc
inc rdi
jmp 0x140159552
lea r8d, [rdi + 0x5a]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
movzx r10d, dil
sub r11b, cl
sub r11b, 0x76
add r11b, r8b
jmp 0x140159f87
lea r8d, [rdi + 0x20]
mov edx, reloc.WS2_32.dll_recv
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
add rax, r9
jmp 0x140159fc0
lea edx, [rdi - 0x1a]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x4a
jmp 0x140159fc0
mov edx, 0x26
lea r8d, [rdi - 0x54]
movzx ecx, bl
movzx r10d, dil
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
jmp 0x140159e27
lea r8d, [rdi + 0x72]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
sub r11b, 0x1e
add r11b, r8b
jmp 0x140159e51
lea r8d, [rdi + 0x38]
movzx ecx, bl
and cl, r8b
mov edx, 0x3c
sub dl, cl
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
inc rdi
jmp 0x140159552
lea edx, [rdi + 0x27]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x11
mov byte [rsp + rdi + 0x20], r11b
inc rdi
jmp 0x140159552
lea r8d, [rdi - 0x13]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
sub r11b, 0x7b
add r11b, r8b
cmp r9, 0x200
jb 0x14015998a
mov edx, reloc.WS2_32.dll_ntohs
movzx r10d, dil
movzx ecx, bl
lea r8d, [r10 - 0x72]
and cl, r8b
sub dl, cl
add dl, dl
add dl, bl
add dl, r8b
lea r11d, [rdx + rdx]
jmp 0x140159f26
lea r8d, [rdi - 0x4d]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
add r11b, 0x1b
add r11b, r8b
cmp rax, 4
jae 0x140159ddf
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jbe 0x140159cf7
lea r8d, [rdi + 0x4a]
movzx ecx, bl
and cl, r8b
movzx r11d, bl
add cl, cl
sub r11b, cl
sub r11b, 6
jmp 0x1401599ae
lea edx, [rdi + 0x79]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x4f
lea rcx, [r9 + rax]
cmp rcx, 0x2a
je 0x140159e07
lea rcx, [r9 + 0x42]
cmp rax, rcx
jbe 0x140159c4e
lea edx, [rdi + 0x69]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x21
jmp 0x1401599f9
lea r8d, [rdi + 0x46]
mov edx, reloc.WS2_32.dll_inet_addr
movzx ecx, r8b
and cl, bl
sub dl, cl
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
inc rdi
jmp 0x140159552
lea edx, [rdi + 0xc]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x54
jmp 0x140159e51
mov edx, 0x21
movzx r10d, dil
lea r8d, [r10 - 0x2e]
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140159e2a
lea edx, [rdi - 0x68]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x28
jmp 0x140159fc0
lea r8d, [rdi + 0x5e]
mov edx, reloc.WS2_32.dll_getservbyname
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
add rax, r9
jmp 0x140159fc0
mov edx, 2
movzx r10d, dil
lea r8d, [r10 + 0x24]
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140159f87
lea edx, [rdi - 0x16]
dec rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x66
inc rdi
jmp 0x140159552
lea r8d, [rdi - 0x50]
mov edx, 0x18
movzx ecx, r8b
inc r9
and cl, bl
dec rdi
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
inc rdi
jmp 0x140159552
movzx r10d, dil
lea edx, [r10 + 0x76]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x3a
jmp 0x140159f26
lea rcx, [r9 + 0x64]
cmp rax, rcx
jae 0x140159bc4
lea edx, [rdi - 0x63]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x4b
jmp 0x140159a40
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140159bf4
lea edx, [rdi - 0x3e]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rbx + rdx]
sub r11b, 0x4e
inc rdi
jmp 0x140159552
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140159c1b
movzx r10d, dil
lea edx, [r10 + 0x36]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x7a
jmp 0x140159e2a
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x140159a40
lea r8d, [rdi + 0x1e]
mov edx, reloc.WS2_32.dll_socket
movzx ecx, r8b
dec rdi
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
inc rdi
jmp 0x140159552
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140159c7a
movzx r10d, dil
movzx ecx, bl
movzx r11d, bl
lea r8d, [r10 - 0x5d]
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x75
add r11b, r8b
jmp 0x140159f26
inc rcx
cmp rax, rcx
jne 0x140159ca1
lea edx, [rdi + 0x17]
movzx ecx, bl
and cl, dl
dec rdi
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
add r11b, 0x5f
inc rdi
jmp 0x140159552
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x140159cc3
lea edx, [rdi - 0x3b]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x63
jmp 0x140159fc0
lea rcx, [r9 + 8]
cmp rax, rcx
jne 0x1401599f9
lea edx, [rdi + 0x73]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rdx + rbx]
sub r11b, 0x25
inc rdi
jmp 0x140159552
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140159d2e
lea r8d, [rdi - 0x7c]
movzx ecx, bl
and cl, r8b
mov edx, gethostbyaddr
sub dl, cl
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
inc rdi
jmp 0x140159552
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140159d5a
lea r8d, [rdi + 0x6c]
mov edx, 6
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
add rax, r9
jmp 0x140159fc0
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140159d87
mov edx, 0x3b
movzx r10d, dil
movzx ecx, bl
lea r8d, [r10 - 0x5a]
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x140159f87
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140159daf
lea edx, [rdi - 0x20]
movzx ecx, bl
and cl, dl
dec rdi
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x20
inc rdi
jmp 0x140159552
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1401599b1
movzx r10d, dil
movzx ecx, bl
movzx r11d, bl
lea r8d, [r10 + 0x54]
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x4c
add r11b, r8b
jmp 0x140159f26
movzx r11d, byte [rsp + rdi + 0x20]
movzx r10d, dil
movzx ecx, bl
lea r8d, [r10 - 0x38]
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x78
add r11b, bl
add r11b, r8b
jmp 0x140159f87
movzx r10d, dil
movzx ecx, bl
movzx r11d, bl
lea r8d, [r10 + 2]
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, byte [rsp + rdi + 0x20]
sub r11b, 0xe
add r11b, r8b
sub r10b, 0x61
movzx ecx, bl
and cl, r10b
inc r9
add cl, cl
movzx edx, bl
sub dl, cl
sub dl, 0x59
add dl, r10b
movzx ecx, dl
mov byte [rsp + rdi + 0x20], cl
add rcx, r9
sub rdi, rcx
lea r8d, [rdi + 0x3c]
movzx ecx, bl
and cl, r8b
inc rax
mov edx, 0x2e
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add dl, dl
add dl, bl
add dl, r8b
mov byte [rsp + rdi + 0x20], dl
add rdi, rcx
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x140159552
lea edx, [rdi - 0x15]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
lea r11d, [rbx + rdx]
sub r11b, 0x6d
inc rdi
jmp 0x140159552
lea edx, [rdi + 3]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x15
add rax, r9
jmp 0x140159fc0
lea edx, [rdi - 0x71]
dec rdi
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x17
inc rdi
jmp 0x140159552
movzx r10d, dil
lea edx, [r10 + 0x1b]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x43
jmp 0x140159f26
movzx r10d, dil
lea edx, [r10 - 0x59]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x6f
add r10b, 0x2b
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
sub r10b, 0x2d
add r10b, bl
mov byte [rsp + rdi + 0x20], r10b
inc r9
dec rdi
inc rdi
jmp 0x140159552
lea edx, [rdi + 0x33]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x65
dec rdi
inc rdi
jmp 0x140159552
movzx r10d, dil
lea edx, [r10 - 7]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x31
add r10b, 0x65
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
add r10b, 0x3d
add r10b, bl
add r10b, r11b
mov byte [rsp + rdi + 0x20], r10b
add rax, r9
jmp 0x140159fc0
lea rdx, [rdi + r12]
movzx ecx, dl
and cl, r8b
add cl, cl
sub dl, cl
lea r11d, [r8 + rdx]
add r11b, 0x5d
movzx ecx, r11b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x140159552
lea rdx, [rdi + r13]
movzx ecx, dl
and cl, r8b
add cl, cl
sub dl, cl
lea r11d, [r8 + rdx]
add r11b, 0x1f
movzx ecx, byte [rsp + rdi + 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x140159552
sub dil, 0x6f
movzx ecx, bl
and cl, dil
add cl, cl
sub bl, cl
lea r11d, [rdi + rbx]
add r11b, 9
jmp 0x140159550
add dil, 0x57
movzx eax, bl
and al, dil
add al, al
sub bl, al
lea r11d, [rdi + rbx]
sub r11b, 0x61
jmp 0x140159540
mov eax, dword [rsp + 0x157b99c]
jmp 0x14015a04e
mov eax, dword [rsp + 0x11b3639]
jmp 0x14015a04e
mov eax, dword [rsp + 0x20]
movsxd rcx, eax
mov qword [0x1404e9d28], rcx
rdtsc
shl rdx, 0x20
xor rsi, 0x186a0
or rax, rdx
lea rcx, [rcx + rax*8]
mov qword [0x1404e9d30], rcx
mov rcx, rsi
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
jmp 0x1401588b0