Function at 0x1402d2710
Capabilities:
Parse pe header

Disassembly:
mov eax, Ordinal_41
call fcn.1403b2fd0
sub rsp, rax
movsx eax, byte [rcx]
mov rdx, rcx
add eax, 0xffffff9f
cmp eax, 0x17
ja case.0x1402d2a45.51
cdqe
lea r8, [0x140000000]
mov eax, dword [r8 + rax*4 + 0x2d5f98]
add rax, r8
jmp rax
movsx ecx, byte [rcx + 1]
test ecx, ecx
je 0x1402d28a2
sub ecx, 0x63
je 0x1402d2875
sub ecx, 1
je 0x1402d2861
sub ecx, 1
je 0x1402d2830
cmp ecx, 7
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 2]
cmp al, 0x67
je 0x1402d27b6
cmp al, 0x69
jne case.0x1402d2a45.51
mov eax, 0x61
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
mov eax, 0x11b
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x5f
je 0x1402d280e
cmp al, 0x69
je 0x1402d27ec
cmp al, 0x6f
jne case.0x1402d2a45.51
add rdx, 4
lea rcx, str.rithm_id
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x116
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.d_absent
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x47
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.id_param
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, Ordinal_41
add rsp, 0x28
ret
mov eax, 0x61
cmp al, byte [rdx + 2]
jne case.0x1402d2a45.51
mov eax, 0x64
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, Ordinal_33
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0x69
add rsp, 0x28
ret
xor eax, eax
lea r8, str.vp_info
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d2880
mov eax, 0x8a
add rsp, 0x28
ret
mov eax, 0xad
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1402d2a15
cmp al, 0x61
je 0x1402d29f3
cmp al, 0x69
je 0x1402d29c2
cmp al, 0x6c
je 0x1402d2902
cmp al, 0x75
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.ildinfo
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d28e0
mov eax, 0x105
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6f
jne case.0x1402d2a45.51
cmp byte [rcx + 3], 0x63
jne case.0x1402d2a45.51
cmp byte [rcx + 4], 0x6b
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 5]
cmp al, 0x2d
je 0x1402d2992
cmp al, 0x5f
je 0x1402d2963
cmp al, 0x73
jne case.0x1402d2a45.51
lea r8, [rcx + 6]
xor eax, eax
lea rdx, [0x14045233c]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d2941
mov eax, reloc.WLDAP32.dll_Ordinal_41
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1403b83e0]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d2970
mov eax, 0x92
add rsp, 0x28
ret
lea r8, [rcx + 6]
xor eax, eax
lea rdx, str.size
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d29a0
mov eax, 0x9b
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rcx + 2]
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rcx + 3]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rcx + 4]
jne case.0x1402d2a45.51
mov eax, 0xa6
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.sis_type
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0xb4
add rsp, 0x28
ret
mov eax, 0xae
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffffd3
cmp eax, 0x48
ja case.0x1402d2a45.51
cdqe
movzx eax, byte [r8 + rax + 0x2d6014]
mov ecx, dword [r8 + rax*4 + 0x2d5ff8]
add rcx, r8
jmp rcx
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.rounds
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d2a54
mov eax, 0x9d
add rsp, 0x28
ret
xor eax, eax
lea r8, str.kalg
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d2a80
mov eax, WSASetLastError
add rsp, 0x28
ret
xor eax, eax
lea r8, str.pher
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d2ab0
xor eax, eax
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x66
je 0x1402d2b42
cmp al, 0x6e
jne case.0x1402d2a45.51
movsx ecx, byte [rdx + 3]
sub ecx, 0x73
je 0x1402d2b13
cmp ecx, 1
jne case.0x1402d2a45.51
add rdx, 4
lea rcx, str.ext_string
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x117
add rsp, 0x28
ret
xor eax, eax
lea r8, str.tant
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d2b20
mov eax, WSASetLastError
add rsp, 0x28
ret
xor eax, eax
lea r8, str.actor
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d2b50
mov eax, 0xb5
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1402d2bc2
cmp al, 0x5f
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.mode
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d2ba0
mov eax, Ordinal_45
add rsp, 0x28
ret
mov eax, Ordinal_45
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1402d2a45.51
cmp byte [rdx + 3], 0x74
jne case.0x1402d2a45.51
cmp byte [rdx + 4], 0x6f
jne case.0x1402d2a45.51
cmp byte [rdx + 5], 0x6d
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 6]
test al, al
je 0x1402d2c35
cmp al, 0x2d
jne case.0x1402d2a45.51
mov eax, 0x69
cmp al, byte [rdx + 7]
jne case.0x1402d2a45.51
mov eax, 0x76
cmp al, byte [rdx + 8]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 9]
jne case.0x1402d2a45.51
mov eax, Ordinal_45
add rsp, 0x28
ret
mov eax, 0x9c
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x72
ja case.0x1402d2a45.51
movzx eax, byte [r8 + rax + 0x2d6080]
mov ecx, dword [r8 + rax*4 + 0x2d6060]
add rcx, r8
jmp rcx
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.rounds
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d2c70
mov eax, 0xa0
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x74
jne case.0x1402d2a45.51
cmp byte [rdx + 3], 0x61
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1402d2d24
cmp al, 0x2d
jne case.0x1402d2a45.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x73
je 0x1402d2d02
cmp ecx, 1
jne case.0x1402d2a45.51
lea r8, [rdx + 6]
xor eax, eax
lea rdx, [0x140452384]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d2ce0
mov eax, 0xa3
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.tructure
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0xa2
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSAGetLastError
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1402d2d87
cmp al, 0x66
je 0x1402d2d65
cmp al, 0x73
jne case.0x1402d2a45.51
mov eax, 0x63
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, 0xa4
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.ault_digest
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0xa7
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.oded_from_explicit
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0xb6
add rsp, 0x28
ret
xor eax, eax
lea r8, str.kem_ikm
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d2db2
mov eax, 0xa8
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x67
je 0x1402d2e12
cmp al, 0x73
jne case.0x1402d2a45.51
xor eax, eax
lea r8, [0x1404523d0]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d2df0
mov eax, 0xac
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x65
jne case.0x1402d2a45.51
cmp byte [rdx + 4], 0x73
jne case.0x1402d2a45.51
cmp byte [rdx + 5], 0x74
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 6]
test al, al
je 0x1402d2f22
cmp al, 0x2d
jne case.0x1402d2a45.51
movsx ecx, byte [rdx + 7]
sub ecx, 0x6e
je 0x1402d2ef2
sub ecx, 1
je 0x1402d2ec2
sub ecx, 1
je 0x1402d2e93
cmp ecx, 3
jne case.0x1402d2a45.51
lea r8, [rdx + 8]
xor eax, eax
lea rdx, [0x14045233c]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d2e71
mov eax, 0xab
add rsp, 0x28
ret
xor eax, eax
lea r8, str.rops
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d2ea0
mov eax, 6
add rsp, 0x28
ret
xor eax, eax
lea r8, str.neshot
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d2ed0
mov eax, 0x9f
add rsp, 0x28
ret
xor eax, eax
lea r8, str.oinit
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d2f00
mov eax, 0x9e
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.bg_no_trunc_md
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x109
add rsp, 0x28
ret
mov eax, 0xdf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1402d3145
cmp al, 0x61
je 0x1402d3123
cmp al, 0x63
je 0x1402d3101
cmp al, 0x6e
je 0x1402d2fb2
cmp al, 0x78
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.pect
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d2f90
mov eax, 0x11c
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x63
je 0x1402d3062
cmp al, 0x67
je 0x1402d302e
cmp al, 0x74
jne case.0x1402d2a45.51
cmp byte [rcx + 3], 0x72
jne case.0x1402d2a45.51
cmp byte [rcx + 4], 0x6f
jne case.0x1402d2a45.51
cmp byte [rcx + 5], 0x70
jne case.0x1402d2a45.51
cmp byte [rcx + 6], 0x79
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 7]
test al, al
je 0x1402d3024
cmp al, 0x5f
jne case.0x1402d2a45.51
add rdx, 8
lea rcx, str.required
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, Ordinal_79
add rsp, 0x28
ret
mov eax, WSAStartup
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x14045242c]
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d3040
mov eax, 2
add rsp, 0x28
ret
movzx eax, byte [rcx + 3]
cmp al, 0x6f
je 0x1402d3094
cmp al, 0x72
jne case.0x1402d2a45.51
add rdx, 4
lea rcx, str.ypt_level
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x5e
add rsp, 0x28
ret
cmp byte [rcx + 4], 0x64
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 5]
cmp al, 0x65
je 0x1402d30df
cmp al, 0x69
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rcx + 6]
jne case.0x1402d2a45.51
mov eax, 0x67
cmp al, byte [rcx + 7]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rcx + 8]
jne case.0x1402d2a45.51
mov eax, 0xb7
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.d_pub_key
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0xc0
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.dh_cofactor_mode
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x60
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.rly_clean
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSASetLastError
add rsp, 0x28
ret
mov eax, 0xe0
add rsp, 0x28
ret
cmp byte [rcx + 1], 0x69
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 2]
cmp al, 0x65
je 0x1402d318b
cmp al, 0x6e
jne case.0x1402d2a45.51
add rdx, 3
lea rcx, str.gerprint
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x11d
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ld_type
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d3194
mov eax, 0xb8
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1402d32a2
cmp al, 0x65
je 0x1402d3272
cmp al, 0x69
je 0x1402d323d
cmp al, 0x72
jne case.0x1402d2a45.51
cmp byte [rcx + 2], 0x6f
jne case.0x1402d2a45.51
cmp byte [rcx + 3], 0x75
jne case.0x1402d2a45.51
cmp byte [rcx + 4], 0x70
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 5]
test al, al
je 0x1402d3233
cmp al, 0x2d
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.check
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d3211
mov eax, 0xba
add rsp, 0x28
ret
mov eax, 0xcc
add rsp, 0x28
ret
lea r8, [rcx + 2]
xor eax, eax
lea rdx, str.ndex
nop word [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d3250
mov eax, 0xc3
add rsp, 0x28
ret
xor eax, eax
lea r8, str.nerator
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d3280
mov eax, 0xb9
add rsp, 0x28
ret
mov eax, 0xc2
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x1402d32f2
cmp al, 0x69
jne case.0x1402d2a45.51
lea r8, [rcx + 2]
xor eax, eax
lea rdx, str.ndex
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d32d0
mov eax, Ordinal_200
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.s_randkey
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_45
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9c
cmp eax, 0x12
ja case.0x1402d2a45.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x2d60f4]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0x7c
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rdx + 2]
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, 0x90
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.plicit_rejection
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 5
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1402d3435
cmp al, 0x66
je 0x1402d3412
cmp al, 0x70
je 0x1402d33e5
cmp al, 0x73
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.tance
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d33c3
mov eax, 0x118
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ut_type
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d33f0
mov eax, 0x11e
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSAGetLastError
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.lude_public
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0xbb
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x65
jne case.0x1402d2a45.51
cmp byte [rdx + 3], 0x72
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1402d34a6
cmp al, 0x61
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.tion
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d3484
mov eax, 0x67
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
test al, al
je 0x1402d34f1
cmp al, 0x6c
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
mov eax, Ordinal_50
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_46
add rsp, 0x28
ret
cmp byte [rdx + 1], 0
mov eax, 0xc1
mov ecx, 0xffffffff
cmove ecx, eax
mov eax, ecx
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffffcf
cmp eax, 0x34
ja case.0x1402d2a45.51
cdqe
movzx eax, byte [r8 + rax + 0x2d615c]
mov ecx, dword [r8 + rax*4 + 0x2d6140]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0xb0
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0xb1
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0xb2
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 2]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
mov eax, 0x119
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x1402d2a45.51
cmp byte [rdx + 3], 0x2d
jne case.0x1402d2a45.51
movsx ecx, byte [rdx + 4]
sub ecx, 0x64
je 0x1402d3662
sub ecx, 0xb
je 0x1402d3632
sub ecx, 5
je 0x1402d3603
cmp ecx, 1
jne case.0x1402d2a45.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x1402d2a45.51
mov eax, 0x65
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x140452384]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d3610
mov eax, 0x64
add rsp, 0x28
ret
xor eax, eax
lea r8, str.utlen
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d3640
mov eax, 0x63
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x69
jne case.0x1402d2a45.51
cmp byte [rdx + 6], 0x67
jne case.0x1402d2a45.51
cmp byte [rdx + 7], 0x65
jne case.0x1402d2a45.51
cmp byte [rdx + 8], 0x73
jne case.0x1402d2a45.51
cmp byte [rdx + 9], 0x74
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 0xa]
test al, al
je 0x1402d36d2
cmp al, 0x2d
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.props
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xa]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d36b0
mov eax, 0x62
add rsp, 0x28
ret
mov eax, 0x61
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x79
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1402d3762
cmp al, 0x62
je 0x1402d372f
cmp al, 0x6c
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
mov eax, Ordinal_50
add rsp, 0x28
ret
lea r8, [rdx + 4]
xor eax, eax
lea rdx, [0x1404524d8]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d3740
mov eax, getservbyname
add rsp, 0x28
ret
mov eax, 0x78
add rsp, 0x28
ret
cmp byte [rcx + 1], 0x61
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 2]
cmp al, 0x62
je 0x1402d37b7
cmp al, 0x6e
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rcx + 4]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rcx + 5]
jne case.0x1402d2a45.51
mov eax, 0x6a
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rcx + 4]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rcx + 5]
jne case.0x1402d2a45.51
mov eax, 0x79
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x6f
ja case.0x1402d2a45.51
movzx eax, byte [r8 + rax + 0x2d61b0]
mov ecx, dword [r8 + rax*4 + 0x2d6194]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1402d3a34
cmp al, 0x6e
je 0x1402d3a12
cmp al, 0x78
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 3]
cmp al, 0x2d
je 0x1402d39e2
cmp al, 0x5f
je 0x1402d388c
cmp al, 0x69
je 0x1402d386a
cmp al, 0x6d
jne case.0x1402d2a45.51
add rdx, 4
lea rcx, str.em_bytes
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x80
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.um_length
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x51
add rsp, 0x28
ret
movsx eax, byte [rdx + 4]
add eax, 0xffffff9f
cmp eax, 0x11
ja case.0x1402d2a45.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x2d6220]
add rcx, r8
jmp rcx
xor eax, eax
lea r8, str.dinlen
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d38b4
mov eax, reloc.WLDAP32.dll_Ordinal_79
add rsp, 0x28
ret
movzx eax, byte [rdx + 5]
cmp al, 0x61
je 0x1402d3908
cmp al, 0x6e
jne case.0x1402d2a45.51
add rdx, 6
lea rcx, str.tropylen
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x50
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.rly_data
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
xor eax, eax
lea r8, str.rag_len
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d3933
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, str.oncelen
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d3962
mov eax, 0x52
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erslen
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d3990
mov eax, 0x53
add rsp, 0x28
ret
xor eax, eax
lea r8, str.equest
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d39c0
mov eax, 0x111
add rsp, 0x28
ret
lea r8, [rdx + 4]
xor eax, eax
lea rdx, str.size
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d39f0
mov eax, Ordinal_211
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.datory_digest
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0xcd
add rsp, 0x28
ret
movsx ecx, byte [rdx + 3]
test ecx, ecx
je 0x1402d3ab0
sub ecx, 0x6b
je 0x1402d3a7f
cmp ecx, 1
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
mov eax, 0x7a
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, 0x79
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_32
add rsp, 0x28
ret
mov eax, 3
add rsp, 0x28
ret
xor eax, eax
lea r8, str.mcost
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d3ac3
mov eax, WSAGetLastError
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1402d3b72
cmp al, 0x31
jne case.0x1402d2a45.51
cmp byte [rdx + 4], 0x2d
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 5]
cmp al, 0x64
je 0x1402d3b3f
cmp al, 0x70
jne case.0x1402d2a45.51
add rdx, 6
lea rcx, str.roperties
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, Ordinal_211
add rsp, 0x28
ret
xor eax, eax
lea r8, str.igest
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d3b50
mov eax, Ordinal_211
add rsp, 0x28
ret
mov eax, 0xce
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1402d3c24
cmp al, 0x6e
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 3]
cmp al, 0x5f
je 0x1402d3bc2
cmp al, 0x69
jne case.0x1402d2a45.51
add rdx, 4
lea rcx, str.um_length
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x55
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x65
je 0x1402d3c02
cmp al, 0x6e
jne case.0x1402d2a45.51
lea r8, [rdx + 5]
xor eax, eax
lea rdx, str.oncelen
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d3be0
mov eax, 0x56
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ntropylen
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x54
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x140452574]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d3c30
mov eax, 0x48
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x64
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 3]
cmp al, 0x65
je 0x1402d3c8e
cmp al, 0x75
jne case.0x1402d2a45.51
add rdx, 4
lea rcx, str.le_filename
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x106
add rsp, 0x28
ret
cmp byte [rdx + 4], 0
jne case.0x1402d2a45.51
mov eax, Ordinal_50
add rsp, 0x28
ret
mov eax, 0xaf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1402d3d8d
cmp al, 0x61
je 0x1402d3d5c
cmp al, 0x6f
je 0x1402d3cef
cmp al, 0x75
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rcx + 2]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rcx + 3]
jne case.0x1402d2a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_50
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6e
jne case.0x1402d2a45.51
cmp byte [rcx + 3], 0x63
jne case.0x1402d2a45.51
cmp byte [rcx + 4], 0x65
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 5]
test al, al
je 0x1402d3d52
cmp al, 0x2d
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.type
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d3d30
mov eax, 0x11a
add rsp, 0x28
ret
mov eax, WSAStartup
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rcx + 2]
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rcx + 4]
jne case.0x1402d2a45.51
mov eax, 0x10a
add rsp, 0x28
ret
mov eax, 0x81
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x1402d3e84
cmp al, 0x70
je 0x1402d3de2
cmp al, 0x72
jne case.0x1402d2a45.51
xor eax, eax
lea r8, [0x1404525c4]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d3dc0
mov eax, 0xbc
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x65
je 0x1402d3e22
cmp al, 0x74
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.ions
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d3e00
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
movzx eax, byte [rcx + 3]
cmp al, 0x6e
je 0x1402d3e62
cmp al, 0x72
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.ation
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d3e40
mov eax, 0x91
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.ssl_version
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x108
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.ep_label
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 7
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x75
ja case.0x1402d2a45.51
movzx eax, byte [r8 + rax + 0x2d6294]
mov ecx, dword [r8 + rax*4 + 0x2d6268]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0xf9
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0xfa
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
sub ecx, 0x64
je 0x1402d3fb2
sub ecx, 0xe
je 0x1402d3f2e
cmp ecx, 1
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
lea eax, [rcx + 0x7a]
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x1402d2a45.51
cmp byte [rdx + 4], 0x79
jne case.0x1402d2a45.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x75
je 0x1402d3f83
cmp ecx, 1
jne case.0x1402d2a45.51
lea r8, [rdx + 6]
xor eax, eax
lea rdx, str._info
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d3f61
mov eax, Ordinal_143
add rsp, 0x28
ret
lea r8, [rdx + 6]
xor eax, eax
lea rdx, str._info
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d3f90
mov eax, Ordinal_143
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
test al, al
je 0x1402d4062
cmp al, 0x2d
je 0x1402d3ff5
cmp al, 0x64
jne case.0x1402d2a45.51
xor eax, eax
lea r8, [0x1404525cc]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d3fd3
mov eax, reloc.WS2_32.dll_gethostbyaddr
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x6d
je 0x1402d4034
cmp al, 0x74
jne case.0x1402d2a45.51
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x140452384]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d4012
mov eax, 0x49
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1404525c8]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d4040
mov eax, Ordinal_211
add rsp, 0x28
ret
mov eax, 0x66
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, [0x1404524d8]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d4080
mov eax, Ordinal_200
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.ounter
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d40b0
mov eax, Ordinal_200
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1404525e0]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d40e0
mov eax, 0x7d
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x69
je 0x1402d4142
cmp al, 0x74
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.ential
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d4120
mov eax, 0x68
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.nt_format
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0xbd
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x65
je 0x1402d426d
cmp al, 0x69
je 0x1402d41e2
cmp al, 0x6f
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 3]
cmp al, 0x70
je 0x1402d41b2
cmp al, 0x76
jne case.0x1402d2a45.51
add rdx, 4
lea rcx, str.ider_name
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x107
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erties
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d41c0
mov eax, 4
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x6d
je 0x1402d423c
cmp al, 0x76
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1402d4232
cmp al, 0x5f
jne case.0x1402d2a45.51
xor eax, eax
lea r8, [0x140452614]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d4210
mov eax, 0xaa
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_211
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
mov eax, 0xf7
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x64
je 0x1402d42ae
cmp al, 0x66
jne case.0x1402d2a45.51
mov eax, 0x69
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, 0x78
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
mov eax, 0x7e
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.iction_resistance
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x57
add rsp, 0x28
ret
mov eax, 0x62
cmp al, byte [rdx + 2]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
mov eax, 0xd4
add rsp, 0x28
ret
mov eax, 0x82
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x79
ja case.0x1402d2a45.51
movzx eax, byte [r8 + rax + 0x2d6328]
mov ecx, dword [r8 + rax*4 + 0x2d630c]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0xfb
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0xfc
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, [0x1404524d8]
nop word [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d4360
mov eax, reloc.WLDAP32.dll_Ordinal_200
add rsp, 0x28
ret
mov eax, Ordinal_200
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0xbe
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0xbf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1402d4a35
cmp al, 0x61
je 0x1402d49b5
cmp al, 0x65
je 0x1402d47f4
cmp al, 0x6f
je 0x1402d47c9
cmp al, 0x73
jne case.0x1402d2a45.51
cmp byte [rcx + 2], 0x61
jne case.0x1402d2a45.51
cmp byte [rcx + 3], 0x2d
jne case.0x1402d2a45.51
movsx ecx, byte [rcx + 4]
sub ecx, 0x63
je 0x1402d4683
sub ecx, 2
je 0x1402d4541
cmp ecx, 1
jne case.0x1402d2a45.51
cmp byte [rdx + 5], 0x61
jne case.0x1402d2a45.51
cmp byte [rdx + 6], 0x63
jne case.0x1402d2a45.51
cmp byte [rdx + 7], 0x74
jne case.0x1402d2a45.51
cmp byte [rdx + 8], 0x6f
jne case.0x1402d2a45.51
cmp byte [rdx + 9], 0x72
jne case.0x1402d2a45.51
movsx rax, byte [rdx + 0xa]
cmp eax, 0x39
ja case.0x1402d2a45.51
movzx eax, byte [r8 + rax + 0x2d63d0]
mov ecx, dword [r8 + rax*4 + 0x2d63a4]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 0xb]
test al, al
je 0x1402d448d
cmp al, 0x30
jne case.0x1402d2a45.51
cmp byte [rdx + 0xc], 0
jne case.0x1402d2a45.51
mov eax, 0xee
add rsp, 0x28
ret
mov eax, 0xed
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402d2a45.51
mov eax, 0xef
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402d2a45.51
mov eax, 0xf0
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402d2a45.51
mov eax, 0xf1
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402d2a45.51
mov eax, 0xf2
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402d2a45.51
mov eax, 0xf3
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402d2a45.51
mov eax, 0xf4
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402d2a45.51
mov eax, 0xf5
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402d2a45.51
mov eax, 0xf6
add rsp, 0x28
ret
mov eax, 0xec
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x78
jne case.0x1402d2a45.51
cmp byte [rdx + 6], 0x70
jne case.0x1402d2a45.51
cmp byte [rdx + 7], 0x6f
jne case.0x1402d2a45.51
cmp byte [rdx + 8], 0x6e
jne case.0x1402d2a45.51
cmp byte [rdx + 9], 0x65
jne case.0x1402d2a45.51
cmp byte [rdx + 0xa], 0x6e
jne case.0x1402d2a45.51
cmp byte [rdx + 0xb], 0x74
jne case.0x1402d2a45.51
movsx rax, byte [rdx + 0xc]
cmp eax, 0x39
ja case.0x1402d2a45.51
movzx eax, byte [r8 + rax + 0x2d6438]
mov ecx, dword [r8 + rax*4 + 0x2d640c]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 0xd]
test al, al
je 0x1402d45cf
cmp al, 0x30
jne case.0x1402d2a45.51
cmp byte [rdx + 0xe], 0
jne case.0x1402d2a45.51
mov eax, 0xe3
add rsp, 0x28
ret
mov eax, 0xe2
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402d2a45.51
mov eax, 0xe4
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402d2a45.51
mov eax, 0xe5
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402d2a45.51
mov eax, 0xe6
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402d2a45.51
mov eax, 0xe7
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402d2a45.51
mov eax, 0xe8
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402d2a45.51
mov eax, 0xe9
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402d2a45.51
mov eax, 0xea
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402d2a45.51
mov eax, 0xeb
add rsp, 0x28
ret
mov eax, 0xe1
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x6f
jne case.0x1402d2a45.51
cmp byte [rdx + 6], 0x65
jne case.0x1402d2a45.51
cmp byte [rdx + 7], 0x66
jne case.0x1402d2a45.51
cmp byte [rdx + 8], 0x66
jne case.0x1402d2a45.51
cmp byte [rdx + 9], 0x69
jne case.0x1402d2a45.51
cmp byte [rdx + 0xa], 0x63
jne case.0x1402d2a45.51
cmp byte [rdx + 0xb], 0x69
jne case.0x1402d2a45.51
cmp byte [rdx + 0xc], 0x65
jne case.0x1402d2a45.51
cmp byte [rdx + 0xd], 0x6e
jne case.0x1402d2a45.51
cmp byte [rdx + 0xe], 0x74
jne case.0x1402d2a45.51
movsx rax, byte [rdx + 0xf]
cmp eax, 0x39
ja case.0x1402d2a45.51
movzx eax, byte [r8 + rax + 0x2d64a0]
mov ecx, dword [r8 + rax*4 + 0x2d6474]
add rcx, r8
jmp rcx
cmp byte [rdx + 0x10], 0
jne case.0x1402d2a45.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402d2a45.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402d2a45.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402d2a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402d2a45.51
mov eax, 0xda
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402d2a45.51
mov eax, 0xdb
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402d2a45.51
mov eax, 0xdc
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402d2a45.51
mov eax, 0xdd
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402d2a45.51
mov eax, 0xde
add rsp, 0x28
ret
mov eax, Ordinal_217
add rsp, 0x28
ret
xor eax, eax
lea r8, str.unds
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d47d2
mov eax, getservbyname
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x61
je 0x1402d4942
cmp al, 0x66
je 0x1402d4912
cmp al, 0x73
jne case.0x1402d2a45.51
cmp byte [rcx + 3], 0x65
jne case.0x1402d2a45.51
cmp byte [rcx + 4], 0x65
jne case.0x1402d2a45.51
cmp byte [rcx + 5], 0x64
jne case.0x1402d2a45.51
cmp byte [rcx + 6], 0x5f
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 7]
cmp al, 0x63
je 0x1402d48e2
cmp al, 0x72
je 0x1402d48ae
cmp al, 0x74
jne case.0x1402d2a45.51
cmp byte [rcx + 8], 0x69
jne case.0x1402d2a45.51
cmp byte [rcx + 9], 0x6d
jne case.0x1402d2a45.51
cmp byte [rcx + 0xa], 0x65
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 0xb]
test al, al
je 0x1402d48a4
cmp al, 0x5f
jne case.0x1402d2a45.51
add rdx, 0xc
lea rcx, str.interval
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x5c
add rsp, 0x28
ret
mov eax, 0x5b
add rsp, 0x28
ret
xor eax, eax
lea r8, str.equests
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d48c0
mov eax, 0x5a
add rsp, 0x28
ret
lea r8, [rcx + 8]
xor eax, eax
lea rdx, str.ounter
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d48f0
mov eax, 0x59
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erence
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d4920
mov eax, 0xa5
add rsp, 0x28
ret
cmp byte [rcx + 3], 0x64
jne case.0x1402d2a45.51
cmp byte [rcx + 4], 0x5f
jne case.0x1402d2a45.51
movsx ecx, byte [rcx + 5]
sub ecx, 0x61
je 0x1402d498a
cmp ecx, 1
jne case.0x1402d2a45.51
add rdx, 6
lea rcx, str.uffer_len
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x9a
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x140452634]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d4993
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6e
jne case.0x1402d2a45.51
cmp byte [rcx + 3], 0x64
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 4]
cmp al, 0x6b
je 0x1402d4a04
cmp al, 0x6f
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.m_data
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d49e2
mov eax, 0x58
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rcx + 5]
jne case.0x1402d2a45.51
mov eax, 0x79
cmp al, byte [rcx + 6]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rcx + 7]
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_gethostbyname
add rsp, 0x28
ret
mov eax, 0x75
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9f
cmp eax, 0x14
ja case.0x1402d2a45.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x2d64dc]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 2]
cmp al, 0x66
je 0x1402d4aed
cmp al, 0x6c
je 0x1402d4a98
cmp al, 0x76
jne case.0x1402d2a45.51
add rdx, 3
lea rcx, str.e_parameters
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x5f
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1402d4ae3
cmp al, 0x6c
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x1402d2a45.51
mov eax, 0xf8
add rsp, 0x28
ret
mov eax, 0x7f
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.eprime_generator
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0xa9
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
sub ecx, 0x63
je 0x1402d4bb5
sub ecx, 2
je 0x1402d4b92
sub ecx, 0xd
je 0x1402d4b62
cmp ecx, 1
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.sion_id
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d4b40
mov eax, 0x85
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1404526a8]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d4b70
mov eax, 0x11f
add rsp, 0x28
ret
mov eax, 0x64
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, 0x84
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x72
je 0x1402d4c72
cmp al, 0x75
jne case.0x1402d2a45.51
cmp byte [rdx + 4], 0x72
jne case.0x1402d2a45.51
cmp byte [rdx + 5], 0x69
jne case.0x1402d2a45.51
cmp byte [rdx + 6], 0x74
jne case.0x1402d2a45.51
cmp byte [rdx + 7], 0x79
jne case.0x1402d2a45.51
cmp byte [rdx + 8], 0x2d
jne case.0x1402d2a45.51
movsx ecx, byte [rdx + 9]
sub ecx, 0x62
je 0x1402d4c42
cmp ecx, 1
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.hecks
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 9]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d4c20
mov eax, 0x10b
add rsp, 0x28
ret
lea r8, [rdx + 0xa]
xor eax, eax
lea rdx, [0x1404524d8]
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d4c50
mov eax, 0x103
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
mov eax, 0x83
add rsp, 0x28
ret
mov eax, 0x7a
cmp al, byte [rdx + 2]
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, 0x4a
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1404526b8]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d4ce0
mov eax, reloc.WS2_32.dll_getservbyname
add rsp, 0x28
ret
xor eax, eax
lea r8, str.l3_ms
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d4d10
mov eax, Ordinal_79
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x2d
je 0x1402d4e13
cmp al, 0x61
je 0x1402d4dc2
cmp al, 0x72
jne case.0x1402d2a45.51
cmp byte [rdx + 3], 0x65
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 4]
cmp al, 0x61
je 0x1402d4d93
cmp al, 0x6e
jne case.0x1402d2a45.51
xor eax, eax
lea r8, [0x1404526d8]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d4d71
mov eax, 0x113
add rsp, 0x28
ret
xor eax, eax
lea r8, str.m_mac
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d4da0
mov eax, reloc.WS2_32.dll___WSAFDIsSet
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 4]
cmp al, 0x65
je 0x1402d4dff
cmp al, 0x75
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
mov eax, 0x10f
add rsp, 0x28
ret
cmp byte [rdx + 5], 0
jne case.0x1402d2a45.51
mov eax, 0x112
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x64
je 0x1402d4e92
cmp al, 0x70
je 0x1402d4e62
cmp al, 0x74
jne case.0x1402d2a45.51
lea r8, [rdx + 4]
xor eax, eax
lea rdx, [0x140452384]
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d4e40
mov eax, 0x10e
add rsp, 0x28
ret
xor eax, eax
lea r8, str.hase
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d4e70
mov eax, 0x10d
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1404526c4]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d4ea0
mov eax, 0x10c
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x62
je 0x1402d4f62
cmp al, 0x70
jne case.0x1402d2a45.51
cmp byte [rdx + 3], al
jne case.0x1402d2a45.51
cmp byte [rdx + 4], 0x2d
jne case.0x1402d2a45.51
cmp byte [rdx + 5], al
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 6]
cmp al, 0x72
je 0x1402d4f32
cmp al, 0x75
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.binfo
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 6]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d4f10
mov eax, Ordinal_143
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ivinfo
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 6]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d4f40
mov eax, Ordinal_143
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ject
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d4f70
mov eax, 0x120
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9f
cmp eax, 0x18
ja case.0x1402d2a45.51
cdqe
movzx eax, byte [r8 + rax + 0x2d654c]
mov ecx, dword [r8 + rax*4 + 0x2d6530]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0x67
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1402d5005
cmp al, 0x6c
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
mov eax, Ordinal_35
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_33
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1402d2a45.51
cmp byte [rdx + 3], 0x74
jne case.0x1402d2a45.51
cmp byte [rdx + 4], 0x5f
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 5]
cmp al, 0x65
je 0x1402d5072
cmp al, 0x6e
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.once
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d5050
mov eax, 0x115
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ntropy
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d5080
mov eax, 0x114
add rsp, 0x28
ret
xor eax, eax
lea r8, str.reads
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d50b0
mov eax, 0x88
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 3]
cmp al, 0x2d
je 0x1402d545e
cmp al, 0x31
je 0x1402d5243
cmp al, 0x61
je 0x1402d51e4
cmp al, 0x69
je 0x1402d5132
cmp al, 0x74
jne case.0x1402d2a45.51
xor eax, eax
lea r8, [0x1404527dc]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d5110
mov eax, 0x98
add rsp, 0x28
ret
cmp byte [rdx + 4], 0x76
jne case.0x1402d2a45.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x66
je 0x1402d51b9
sub ecx, 1
je 0x1402d5188
cmp ecx, 2
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
mov eax, 0x76
cmp al, byte [rdx + 7]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 8]
jne case.0x1402d2a45.51
mov eax, Ordinal_41
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 7]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 8]
jne case.0x1402d2a45.51
mov eax, Ordinal_41
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ixed
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d51c2
mov eax, Ordinal_41
add rsp, 0x28
ret
cmp byte [rdx + 4], 0x61
jne case.0x1402d2a45.51
cmp byte [rdx + 5], 0x64
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 6]
test al, al
je 0x1402d5239
cmp al, 0x70
jne case.0x1402d2a45.51
mov eax, 0x61
cmp al, byte [rdx + 7]
jne case.0x1402d2a45.51
mov eax, 0x64
cmp al, byte [rdx + 8]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 9]
jne case.0x1402d2a45.51
mov eax, 0x24
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_35
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x2d
je 0x1402d543c
cmp al, 0x6d
jne case.0x1402d2a45.51
cmp byte [rdx + 5], 0x75
jne case.0x1402d2a45.51
cmp byte [rdx + 6], 0x6c
jne case.0x1402d2a45.51
cmp byte [rdx + 7], 0x74
jne case.0x1402d2a45.51
cmp byte [rdx + 8], 0x69
jne case.0x1402d2a45.51
cmp byte [rdx + 9], 0x5f
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 0xa]
cmp al, 0x61
je 0x1402d53da
cmp al, 0x65
je 0x1402d5354
cmp al, 0x69
je 0x1402d5332
cmp al, 0x6d
jne case.0x1402d2a45.51
cmp byte [rdx + 0xb], 0x61
jne case.0x1402d2a45.51
cmp byte [rdx + 0xc], 0x78
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 0xd]
cmp al, 0x62
je 0x1402d5302
cmp al, 0x73
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.ndfrag
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d52e0
mov eax, 0x40
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ufsz
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d5310
mov eax, 0x3f
add rsp, 0x28
ret
add rdx, 0xb
lea rcx, str.nterleave
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x3e
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x6e
jne case.0x1402d2a45.51
cmp byte [rdx + 0xc], 0x63
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 0xd]
test al, al
je 0x1402d53d0
cmp al, 0x69
je 0x1402d53ad
cmp al, 0x6c
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rdx + 0xe]
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 0xf]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 0x10]
jne case.0x1402d2a45.51
mov eax, 0x3d
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rdx + 0xe]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 0xf]
jne case.0x1402d2a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_60
add rsp, 0x28
ret
mov eax, Ordinal_60
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x61
jne case.0x1402d2a45.51
cmp byte [rdx + 0xc], 0x64
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 0xd]
test al, al
je 0x1402d5432
cmp al, 0x70
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.acklen
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d5410
mov eax, Ordinal_60
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_gethostname
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.prf_ems_check
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x110
add rsp, 0x28
ret
movsx eax, byte [rdx + 4]
add eax, 0xffffff9d
cmp eax, 0x13
ja case.0x1402d2a45.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x2d6568]
add rcx, r8
jmp rcx
add rdx, 5
lea rcx, str.lient_version
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 8
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ata_size
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0xa1
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x72
jne case.0x1402d2a45.51
cmp byte [rdx + 6], 0x6f
jne case.0x1402d2a45.51
cmp byte [rdx + 7], 0x75
jne case.0x1402d2a45.51
cmp byte [rdx + 8], 0x70
jne case.0x1402d2a45.51
cmp byte [rdx + 9], 0x2d
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 0xa]
cmp al, 0x61
je 0x1402d55f6
cmp al, 0x69
je 0x1402d559c
cmp al, 0x6e
je 0x1402d5542
cmp al, 0x73
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.ec_bits
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xa]
jne case.0x1402d2a45.51
cmp rax, 8
jne 0x1402d5520
mov eax, reloc.WS2_32.dll_send
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x61
jne case.0x1402d2a45.51
cmp byte [rdx + 0xc], 0x6d
jne case.0x1402d2a45.51
cmp byte [rdx + 0xd], 0x65
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 0xe]
test al, al
je 0x1402d5592
cmp al, 0x2d
jne case.0x1402d2a45.51
add rdx, 0xf
lea rcx, str.internal
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_select
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_recvfrom
add rsp, 0x28
ret
movzx eax, byte [rdx + 0xb]
cmp al, 0x64
je 0x1402d55e2
cmp al, 0x73
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str._kem
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xb]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d55c0
mov eax, reloc.WS2_32.dll_inet_ntoa
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_inet_addr
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rdx + 0xb]
jne case.0x1402d2a45.51
mov eax, 0x67
cmp al, byte [rdx + 0xc]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 0xd]
jne case.0x1402d2a45.51
mov eax, 0xa
add rsp, 0x28
ret
movzx eax, byte [rdx + 5]
cmp al, 0x61
je 0x1402d56f6
cmp al, 0x69
je 0x1402d5672
cmp al, 0x75
jne case.0x1402d2a45.51
xor eax, eax
lea r8, [0x140452754]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d5650
mov eax, reloc.WS2_32.dll_getservbyport
add rsp, 0x28
ret
cmp byte [rdx + 6], 0x6e
jne case.0x1402d2a45.51
cmp byte [rdx + 7], 0x2d
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 8]
cmp al, 0x64
je 0x1402d56c7
cmp al, 0x74
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 9]
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 0xa]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 0xb]
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_recv
add rsp, 0x28
ret
lea r8, [rdx + 9]
xor eax, eax
lea rdx, [0x140452750]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d56d4
mov eax, reloc.WS2_32.dll_ntohs
add rsp, 0x28
ret
movzx eax, byte [rdx + 6]
cmp al, 0x63
je 0x1402d5784
cmp al, 0x78
jne case.0x1402d2a45.51
cmp byte [rdx + 7], 0x2d
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 8]
cmp al, 0x64
je 0x1402d5755
cmp al, 0x74
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 9]
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 0xa]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 0xb]
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_ntohl
add rsp, 0x28
ret
lea r8, [rdx + 9]
xor eax, eax
lea rdx, [0x140452750]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d5762
mov eax, reloc.WS2_32.dll_listen
add rsp, 0x28
ret
movzx eax, byte [rdx + 7]
test al, al
je 0x1402d57c3
cmp al, 0x2d
jne case.0x1402d2a45.51
lea r8, [rdx + 8]
xor eax, eax
lea rdx, str.size
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 5
jne 0x1402d57a1
mov eax, 0x42
add rsp, 0x28
ret
mov eax, 0x41
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.egotiated_version
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 9
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x69
jne case.0x1402d2a45.51
cmp byte [rdx + 6], 0x67
jne case.0x1402d2a45.51
cmp byte [rdx + 7], 0x61
jne case.0x1402d2a45.51
cmp byte [rdx + 8], 0x6c
jne case.0x1402d2a45.51
cmp byte [rdx + 9], 0x67
jne case.0x1402d2a45.51
cmp byte [rdx + 0xa], 0x2d
jne case.0x1402d2a45.51
movsx eax, byte [rdx + 0xb]
add eax, 0xffffff9d
cmp eax, 0x10
ja case.0x1402d2a45.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x2d65b8]
add rcx, r8
jmp rcx
add rdx, 0xc
lea rcx, str.ode_point
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_sendto
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0x61
jne case.0x1402d2a45.51
cmp byte [rdx + 0xd], 0x73
jne case.0x1402d2a45.51
cmp byte [rdx + 0xe], 0x68
jne case.0x1402d2a45.51
cmp byte [rdx + 0xf], 0x2d
jne case.0x1402d2a45.51
movsx ecx, byte [rdx + 0x10]
sub ecx, 0x6e
je 0x1402d58d7
cmp ecx, 1
jne case.0x1402d2a45.51
mov eax, 0x69
cmp al, byte [rdx + 0x11]
jne case.0x1402d2a45.51
mov eax, 0x64
cmp al, byte [rdx + 0x12]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 0x13]
jne case.0x1402d2a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_22
add rsp, 0x28
ret
lea r8, [rdx + 0x11]
xor eax, eax
lea rdx, [0x14045277c]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d58e4
mov eax, reloc.WS2_32.dll_setsockopt
add rsp, 0x28
ret
add rdx, 0xc
lea rcx, str.ana_name
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_socket
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0x65
jne case.0x1402d2a45.51
cmp byte [rdx + 0xd], 0x79
jne case.0x1402d2a45.51
cmp byte [rdx + 0xe], 0x74
jne case.0x1402d2a45.51
cmp byte [rdx + 0xf], 0x79
jne case.0x1402d2a45.51
cmp byte [rdx + 0x10], 0x70
jne case.0x1402d2a45.51
cmp byte [rdx + 0x11], 0x65
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 0x12]
test al, al
je 0x1402d59a2
cmp al, 0x2d
jne case.0x1402d2a45.51
xor eax, eax
lea r8, [0x14045278c]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0x12]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d5980
mov eax, Ordinal_26
add rsp, 0x28
ret
mov eax, Ordinal_26
add rsp, 0x28
ret
lea r8, [rdx + 0xc]
xor eax, eax
lea rdx, [0x14045277c]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d59c0
mov eax, reloc.WLDAP32.dll_Ordinal_26
add rsp, 0x28
ret
mov eax, 0x69
cmp al, byte [rdx + 0xc]
jne case.0x1402d2a45.51
mov eax, 0x64
cmp al, byte [rdx + 0xd]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 0xe]
jne case.0x1402d2a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_27
add rsp, 0x28
ret
movzx eax, byte [rdx + 0xc]
cmp al, 0x65
je 0x1402d5ab2
cmp al, 0x69
jne case.0x1402d2a45.51
cmp byte [rdx + 0xd], 0x67
jne case.0x1402d2a45.51
cmp byte [rdx + 0xe], 0x2d
jne case.0x1402d2a45.51
movsx ecx, byte [rdx + 0xf]
sub ecx, 0x6e
je 0x1402d5a7e
cmp ecx, 1
jne case.0x1402d2a45.51
mov eax, 0x69
cmp al, byte [rdx + 0x10]
jne case.0x1402d2a45.51
mov eax, 0x64
cmp al, byte [rdx + 0x11]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 0x12]
jne case.0x1402d2a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_30
add rsp, 0x28
ret
lea r8, [rdx + 0x10]
xor eax, eax
lea rdx, [0x14045277c]
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d5a90
mov eax, Ordinal_33
add rsp, 0x28
ret
xor eax, eax
lea r8, str.c_bits
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xc]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d5ac0
mov eax, Ordinal_30
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ersion
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d5af0
mov eax, 0x43
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402d2a45.51
mov eax, 0xb3
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSASetLastError
cmp al, byte [rdx + 2]
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, 0x86
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x6b
je 0x1402d5cf5
cmp al, 0x70
je 0x1402d5cd3
cmp al, 0x73
jne case.0x1402d2a45.51
cmp byte [rcx + 2], 0x65
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 3]
cmp al, 0x2d
je 0x1402d5bf6
cmp al, 0x5f
jne case.0x1402d2a45.51
movsx ecx, byte [rcx + 4]
sub ecx, 0x64
je 0x1402d5bd4
cmp ecx, 1
jne case.0x1402d2a45.51
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x1402d2a45.51
mov eax, 0x99
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.erivation_function
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x5d
add rsp, 0x28
ret
movsx ecx, byte [rcx + 4]
sub ecx, 0x62
je 0x1402d5ca4
sub ecx, 1
je 0x1402d5c82
sub ecx, 8
je 0x1402d5c55
sub ecx, 1
je 0x1402d5c41
cmp ecx, 7
jne case.0x1402d2a45.51
add rdx, 5
lea rcx, str.eparator
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x77
add rsp, 0x28
ret
cmp byte [rdx + 5], 0
jne case.0x1402d2a45.51
mov eax, 0x76
add rsp, 0x28
ret
xor eax, eax
lea r8, str.eybits
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402d2a45.51
cmp rax, 7
jne 0x1402d5c60
mov eax, reloc.WLDAP32.dll_Ordinal_143
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ofactor_flag
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x104
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x1404524d8]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402d2a45.51
cmp rax, 4
jne 0x1402d5cb1
mov eax, 0x45
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.dated_iv
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402d2a45.51
mov eax, 0x44
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rcx + 2]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rcx + 3]
jne case.0x1402d2a45.51
mov eax, 0x89
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x1402d5d53
cmp al, 0x65
jne case.0x1402d2a45.51
xor eax, eax
lea r8, str.rsion
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d5d31
mov eax, WSASetLastError
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6c
jne case.0x1402d2a45.51
cmp byte [rcx + 3], 0x69
jne case.0x1402d2a45.51
cmp byte [rcx + 4], 0x64
jne case.0x1402d2a45.51
cmp byte [rcx + 5], 0x61
jne case.0x1402d2a45.51
cmp byte [rcx + 6], 0x74
jne case.0x1402d2a45.51
cmp byte [rcx + 7], 0x65
jne case.0x1402d2a45.51
cmp byte [rcx + 8], 0x2d
jne case.0x1402d2a45.51
movzx eax, byte [rcx + 9]
cmp al, 0x67
je 0x1402d5e02
cmp al, 0x6c
je 0x1402d5dd4
cmp al, 0x70
jne case.0x1402d2a45.51
mov eax, WSAStartup
cmp al, byte [rcx + 0xa]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rcx + 0xb]
jne case.0x1402d2a45.51
mov eax, 0xcb
add rsp, 0x28
ret
xor eax, eax
lea r8, str.egacy
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 9]
jne case.0x1402d2a45.51
cmp rax, 6
jne 0x1402d5de0
mov eax, 0xca
add rsp, 0x28
ret
cmp byte [rcx + 0xa], 0
jne case.0x1402d2a45.51
mov eax, 0xc9
add rsp, 0x28
ret
movsx ecx, byte [rcx + 1]
sub ecx, 0x63
je 0x1402d5f4e
sub ecx, 0xc
je 0x1402d5ef9
sub ecx, 1
je 0x1402d5eb1
sub ecx, 1
je 0x1402d5e69
cmp ecx, 3
jne case.0x1402d2a45.51
add rdx, 2
lea rcx, str.s_standard
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
mov ecx, 0xffffffff
mov edx, 0x46
cmove ecx, edx
mov eax, ecx
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
test ecx, ecx
je 0x1402d5ea7
sub ecx, 0x31
je 0x1402d5e93
cmp ecx, 1
jne case.0x1402d2a45.51
cmp byte [rdx + 3], 0
jne case.0x1402d2a45.51
mov eax, 0x102
add rsp, 0x28
ret
cmp byte [rdx + 3], 0
jne case.0x1402d2a45.51
mov eax, 0x101
add rsp, 0x28
ret
mov eax, 0x100
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
test ecx, ecx
je 0x1402d5eef
sub ecx, 0x31
je 0x1402d5edb
cmp ecx, 1
jne case.0x1402d2a45.51
cmp byte [rdx + 3], 0
jne case.0x1402d2a45.51
mov eax, 0xff
add rsp, 0x28
ret
cmp byte [rdx + 3], 0
jne case.0x1402d2a45.51
mov eax, 0xfe
add rsp, 0x28
ret
mov eax, 0xfd
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x1402d2a45.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1402d5f44
cmp al, 0x6c
jne case.0x1402d2a45.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402d2a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x1402d2a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402d2a45.51
mov eax, Ordinal_79
add rsp, 0x28
ret
mov eax, Ordinal_79
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.ghash
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne 0x1402d5f79
cmp rax, 6
jne 0x1402d5f60
cmp cl, byte [r8 + rax - 1]
mov eax, 0x87
mov ecx, 0xffffffff
cmove ecx, eax
mov eax, ecx
add rsp, 0x28
ret
mov eax, 0xffffffff
add rsp, 0x28
ret