Function at 0x140053910
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov r15, r8
mov r12, rdx
mov r13, rcx
mov ecx, 4
mov rax, qword gs:[0x58]
mov r9, qword [rax]
mov eax, dword [rcx + r9]
cmp dword [0x14023d160], eax
jle 0x1400551c3
lea rcx, [0x14023d160]
call fcn.140198ef0
cmp dword [0x14023d160], 0xffffffff
jne 0x1400551c3
mov dword [rbp - 0x50], 0x75485170
mov dword [rbp - 0x4c], 0x7c595f41
mov dword [rbp - 0x48], 0x455d5e45
mov word [rbp - 0x44], 0x314d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x42], xmm0
mov dword [rbp - 0x32], eax
mov byte [rbp - 0x2e], al
movabs rdi, 0x8a688e24093de909
mov rsi, qword [0x14023d100]
mov r14, qword [0x14023d108]
movzx edx, byte [rbp + 0x48]
mov r8, r14
mov r9, rsi
nop
xor ebx, ebx
movabs rcx, 0x69743b892b9ce25
cmp rbx, 0x23
jae 0x140054565
movzx r11d, byte [rbp + rbx - 0x50]
movzx r10d, r11b
cmp r8, rbx
ja 0x14005455c
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140053a0a
add rcx, rbx
mov rax, r11
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, r11
add rdx, rcx
sub dl, 3
jmp 0x140053a44
je 0x1400544ef
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400544ba
lea rax, [r9 + 5]
cmp r8, rax
je 0x140054471
lea rax, [r9 + 4]
cmp r8, rax
je 0x140054449
lea rax, [r9 + 6]
cmp r8, rax
je 0x140054403
movzx r10d, r11b
nop dword [rax + rax]
cmp r9, rbx
ja 0x140054553
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x140053a7c
lea rcx, [rbx + rdi]
movzx eax, r11b
and al, cl
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x3f
jmp 0x140053ac0
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400543e4
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400543bc
lea rax, [r9 + 6]
cmp r8, rax
je 0x14005439a
lea rax, [r9 + 7]
cmp r8, rax
je 0x14005430f
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400542df
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x140054011
nop dword [rax]
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x140053ff8
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x140053fd6
lea rax, [r9 + 5]
cmp r8, rax
je 0x140053fb7
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x140053f99
lea rax, [r9 + 2]
cmp r8, rax
je 0x140053f7d
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x140053f64
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x140053f44
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140053f29
lea rax, [r9 + 3]
cmp r8, rax
je 0x140053f01
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x140053ad0
lea r8, [r9 + 0x400]
lea r9, [r8 + 0x80]
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x140054539
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14005451f
lea rax, [r9 + 1]
cmp r8, rax
jb 0x140053cce
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x140053cab
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x140053c88
lea rax, [r9 + 9]
cmp r8, rax
jb 0x140053eba
lea rax, [r9 + 2]
cmp r8, rax
jb 0x140053e76
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x140053e38
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x140053e17
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x140053ad0
lea r8, [r9 + 6]
lea r9, [r8 + 3]
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x140053ded
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x140053dd1
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x140053db5
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x140053d99
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x140053d7a
lea rax, [r9 + 4]
cmp r8, rax
ja 0x140053d5e
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x140053d3c
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x140053d17
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x140053cfb
lea rax, [r9 + 5]
cmp r8, rax
ja 0x140053ad0
lea r8, [r9 + 2]
lea r9, [r8 + 0x5a]
jmp 0x140053ad0
movabs rcx, 0x9421c537aae2ee17
add rcx, rbx
movzx eax, r11b
and al, cl
add al, al
sub cl, al
lea edx, [r10 + rcx]
add dl, 0x5f
jmp 0x140053ac0
movabs rcx, 0x86f33dc6856f51cd
add rcx, rbx
movzx eax, r11b
and al, cl
add al, al
sub cl, al
lea edx, [r10 + rcx]
add dl, 0x65
jmp 0x140053a50
movabs rcx, 0x79c4b6555ffbb583
add rcx, rbx
movzx eax, r11b
and al, cl
add al, al
sub cl, al
lea edx, [r10 + rcx]
add dl, 0x6b
movabs rcx, 0x69743b892b9ce25
jmp 0x1400539e0
lea edx, [rbx + 0x48]
movzx eax, r11b
and al, dl
mov ecx, 4
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x140054424
lea edx, [rbx - 2]
movzx eax, r11b
and al, dl
mov ecx, 7
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
inc r9
dec rbx
inc rbx
jmp 0x1400539c2
lea edx, [rbx - 0x4c]
movzx eax, r11b
and al, dl
mov ecx, 0xa
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
dec rbx
inc rbx
jmp 0x1400539c2
lea edx, [rbx + 0x6a]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x140054492
lea edx, [rbx + 0x20]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
add r8, r9
jmp 0x1400544d7
lea edx, [rbx - 0x2a]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_send
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x1400544d7
lea edx, [rbx - 0x74]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x140054330
lea edx, [rbx + 0x42]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_26
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x14005435d
lea edx, [rbx - 8]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400539c2
lea ecx, [rbx + 0x3f]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
add dl, 0x47
mov byte [rbp + rbx - 0x50], dl
inc rbx
jmp 0x1400539c2
lea edx, [rbx - 0xb]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add dl, 0x4d
add dl, cl
cmp r9, 0x80
jb 0x140053e2c
lea edx, [rbx - 0x42]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, dl
lea edx, [rcx*2 - 0x64]
jmp 0x140054424
lea edx, [rbx - 0x55]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add dl, 0x53
add dl, cl
cmp r8, 4
jae 0x1400542a5
lea rax, [r9 + 1]
cmp r8, rax
jbe 0x1400541dc
lea edx, [rbx - 0x26]
movzx eax, r11b
and al, dl
mov ecx, 5
sub cl, al
add cl, cl
add cl, r11b
jmp 0x140053e4c
lea edx, [rbx + 0x61]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add dl, 0x59
add dl, cl
lea rax, [r9 + r8]
cmp rax, 9
je 0x1400542c8
lea rcx, [r9 + 5]
cmp r8, rcx
jbe 0x140054113
lea edx, [rbx - 0x2f]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add dl, 0x49
jmp 0x140053e8a
lea ecx, [rbx + 0x36]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0x7a
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400539c2
lea edx, [rbx - 0x14]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x74
add dl, cl
jmp 0x14005435d
movzx r10d, bl
lea edx, [r10 - 0x5e]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x6e
add dl, cl
jmp 0x140054334
lea ecx, [rbx + 0x58]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x68
jmp 0x1400544d7
lea ecx, [rbx + 0xe]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x62
add r8, r9
jmp 0x1400544d7
movzx r10d, bl
lea ecx, [r10 - 0x3c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x5c
jmp 0x140054496
lea ecx, [rbx + 0x7a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x56
dec rbx
inc rbx
jmp 0x1400539c2
lea ecx, [rbx + 0x30]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x50
inc r9
dec rbx
inc rbx
jmp 0x1400539c2
lea ecx, [rbx - 0x1a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x4a
jmp 0x140054424
lea rax, [r9 + 0x64]
cmp r8, rax
jae 0x14005403d
movabs rcx, 0x69743b892b9ce25
add rcx, rbx
movzx eax, r11b
and al, cl
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 3
jmp 0x140053ed0
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14005406d
lea ecx, [rbx + 0x12]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x7e
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400539c2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140054095
lea edx, [rbx + 0x3a]
movzx eax, dl
and al, r11b
mov ecx, gethostname
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
add r8, r9
jmp 0x1400544d7
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400540bf
movzx r10d, bl
lea edx, [r10 - 0x7c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140054496
lea rax, [rcx + 1]
cmp r8, rax
jne 0x1400540ea
lea edx, [rbx - 0x32]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
dec rbx
inc rbx
jmp 0x1400539c2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140053ed0
lea edx, [rbx + 0x62]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140054424
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140054137
lea edx, [rbx + 0x1b]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add dl, 0x43
add dl, cl
jmp 0x140054424
inc rax
cmp r8, rax
jne 0x14005415f
lea ecx, [rbx - 0x51]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
add dl, 0x37
dec rbx
inc rbx
jmp 0x1400539c2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140054188
movzx r10d, bl
lea edx, [r10 - 7]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add dl, 0x31
add dl, cl
jmp 0x140054496
cmp r8, rcx
jne 0x1400541a7
lea ecx, [rbx - 0x73]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
add dl, 0x25
jmp 0x1400544d7
lea rax, [r9 + 8]
cmp r8, rax
jne 0x140053e8c
lea ecx, [rbx + 0x6b]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
add dl, 0x13
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400539c2
jne 0x140054208
lea edx, [rbx + 0x24]
movzx eax, r11b
and al, dl
mov ecx, 2
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400539c2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14005422b
lea ecx, [rbx + 2]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0xe
jmp 0x1400544d7
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140054254
movzx r10d, bl
lea edx, [r10 - 0x6a]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x1a
add dl, cl
jmp 0x140054496
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14005427d
lea ecx, [rbx - 0x20]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0x20
dec rbx
inc rbx
jmp 0x1400539c2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140053e4e
lea edx, [rbx + 0x74]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x2c
add dl, cl
jmp 0x140054424
movzx r10d, bl
lea edx, [r10 + 8]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, r11b
sub dl, 0x38
add dl, cl
jmp 0x140054496
movzx r10d, bl
lea ecx, [r10 + 0x52]
movzx eax, r11b
and al, cl
add al, al
sub cl, al
lea edx, [rcx - 0x3e]
jmp 0x140054334
movabs rax, 0x10b511e5a4e67a3
add rax, rbx
and r11b, al
add r11b, r11b
sub al, r11b
lea edx, [r10 + rax]
sub dl, 0x75
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400539c2
movabs rax, 0xe6ae423c0f672f0f
add rax, rbx
and r11b, al
add r11b, r11b
sub al, r11b
lea edx, [r10 + rax]
sub dl, 0x69
movzx r11d, r10b
movzx r10d, bl
add r10b, 0x77
movzx eax, r11b
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x41
add cl, r10b
movzx eax, cl
mov byte [rbp + rbx - 0x50], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx - 0x64]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
sub r11b, 0x44
add r11b, cl
mov byte [rbp + rbx - 0x50], r11b
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400539c2
movabs rax, 0xd97fbacae9f392c5
add rax, rbx
and r11b, al
add r11b, r11b
sub al, r11b
lea edx, [r10 + rax]
sub dl, 0x63
jmp 0x1400544d7
movabs rax, 0xb1f424777998bde7
add rax, rbx
and r11b, al
add r11b, r11b
sub al, r11b
lea edx, [r10 + rax]
sub dl, 0x51
dec rbx
inc rbx
jmp 0x1400539c2
movabs rax, 0x979715952eb18553
add rax, rbx
and r11b, al
add r11b, r11b
sub al, r11b
lea edx, [r10 + rax]
sub dl, 0x45
jmp 0x140054420
movabs rax, 0x7d3a06b2e3ca4cbf
add rax, rbx
and r11b, al
add r11b, r11b
sub al, r11b
lea edx, [r10 + rax]
sub dl, 0x39
movzx r11d, r10b
lea ecx, [rbx - 0x1d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x35
add cl, r11b
mov byte [rbp + rbx - 0x50], cl
inc r9
dec rbx
inc rbx
jmp 0x1400539c2
movabs rax, 0x62dcf7d098e3142b
add rax, rbx
and r11b, al
add r11b, r11b
sub al, r11b
lea edx, [r10 + rax]
sub dl, 0x2d
dec rbx
inc rbx
jmp 0x1400539c2
movabs rax, 0x55ae705f736f77e1
add rax, rbx
and r11b, al
add r11b, r11b
sub al, r11b
lea edx, [r10 + rax]
sub dl, 0x27
movzx r11d, r10b
movzx r10d, bl
add r10b, 0x2d
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x3b
add r11b, r10b
add r11b, dl
mov byte [rbp + rbx - 0x50], r11b
add r8, r9
jmp 0x1400544d7
movabs rax, 0x3b51617d28883f4d
add rax, rbx
and r11b, al
add r11b, r11b
sub al, r11b
lea edx, [r10 + rax]
sub dl, 0x1b
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1400539c2
movabs rax, 0x13c5cb29b82d6a6f
add rax, rbx
and r11b, al
add r11b, r11b
sub al, r11b
lea edx, [r10 + rax]
sub dl, 9
movzx eax, byte [rbp + rbx - 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x1400539c2
add bl, 0x39
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea edx, [rbx + r11]
add dl, 0x71
jmp 0x1400539be
sub bl, 0x11
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea edx, [rbx + r11]
add dl, 0x77
jmp 0x1400539b8
lea rdi, [rbp + 0x156808c]
jmp 0x140054569
lea rdi, [rbp + 0x1504eb1]
jmp 0x140054569
lea rdi, [rbp - 0x50]
mov dword [rbp - 0x28], 0xded5d1d4
mov dword [rbp - 0x24], 0xe3dadfe7
mov dword [rbp - 0x20], 0x98d4e69c
mov byte [rbp - 0x1c], reloc.WLDAP32.dll_Ordinal_50
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x1b], xmm0
mov dword [rbp - 0xb], eax
mov word [rbp - 7], ax
movzx r10d, byte [rbp + 0x48]
mov rax, r14
mov r9, rsi
nop dword [rax]
xor ebx, ebx
movabs rdx, 0x74c45b4634969535
cmp rbx, 0x23
jae 0x1400551a1
movzx r11d, byte [rbp + rbx - 0x28]
mov r8d, r11d
nop
cmp rax, rbx
ja 0x140055198
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x1400545eb
add rdx, rbx
mov rcx, rdx
and rcx, r8
imul r10, rcx, 0xfffffffffffffffe
add r10, rdx
add r10, r8
sub r10b, 0x73
jmp 0x140054631
je 0x140055128
inc rcx
cmp rax, rcx
je 0x1400550c6
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14005508f
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x140055075
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x140055055
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140055011
cmp r9, rbx
ja 0x14005518f
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jae 0x14005465a
lea edx, [rbx + 0x59]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x6f
jmp 0x1400546a0
lea rdx, [r9 + 1]
cmp rax, rdx
je 0x140054ff6
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140054fd6
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x140054fb9
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x140054f9f
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x140054f77
nop dword [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, rbx
jbe 0x140054c11
nop dword [rax]
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x140054bf3
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x140054bd0
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x140054bb0
lea rdx, [r9 + 0x5a]
cmp rax, rdx
je 0x140054b96
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x140054b79
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x140054b58
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140054b37
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x140054b16
lea rcx, [r9 + 0x42]
cmp rax, rcx
je 0x140054ae7
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x1400546b0
mov rax, rdx
lea r9, [rdx + 0x80]
lea rcx, [r9 + 0x200]
cmp rdx, rcx
jb 0x140055174
lea rcx, [r9 + 0x10]
cmp rdx, rcx
jb 0x140055159
lea rcx, [r9 + 3]
cmp rdx, rcx
jb 0x14005489c
lea rcx, [r9 + 0x61]
cmp rdx, rcx
jb 0x140054882
lea rcx, [r9 + 5]
cmp rdx, rcx
jb 0x140054868
lea rcx, [r9 + 0x41]
cmp rdx, rcx
jb 0x140054aa0
lea rcx, [r9 + 0x80]
cmp rdx, rcx
jb 0x140054a56
lea rcx, [r9 + 0xa]
cmp rdx, rcx
jb 0x140054a13
lea rcx, [r9 + 2]
cmp rdx, rcx
jb 0x1400549f1
lea rcx, [r9 + 0x1000]
cmp rdx, rcx
jb 0x1400546b0
lea rax, [r9 + 0x28]
lea r9, [rax + 0x40]
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x1400549c9
lea rcx, [r9 + 0x41]
cmp rax, rcx
ja 0x1400549af
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x140054995
lea rdx, [r9 + 0xa]
cmp rax, rdx
ja 0x140054974
lea rcx, [r9 + 2]
cmp rax, rcx
ja 0x140054950
lea rcx, [r9 + 0x1000]
cmp rax, rcx
ja 0x14005492f
lea rcx, [r9 + 0x40]
cmp rax, rcx
ja 0x140054908
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x1400548de
lea rcx, [r9 + 0x5a]
cmp rax, rcx
ja 0x1400548c0
lea rcx, [r9 + 0x200]
cmp rax, rcx
ja 0x1400546b0
mov rax, rdx
lea r9, [rdx + 1]
jmp 0x1400546b0
lea edx, [rbx - 0x39]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x71
jmp 0x1400546a0
lea edx, [rbx + 0x5d]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x75
jmp 0x140054631
lea edx, [rbx - 0xd]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x5b
movabs rdx, 0x74c45b4634969535
jmp 0x1400545c0
lea edx, [rbx - 0x38]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x78
movzx r8d, bl
jmp 0x14005502b
lea r8d, [rbx + 0x5e]
movzx ecx, r8b
and cl, r11b
mov edx, gethostname
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
inc r9
dec rbx
inc rbx
jmp 0x1400545a2
lea r8d, [rbx - 0xc]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_45
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
dec rbx
inc rbx
jmp 0x1400545a2
lea r8d, [rbx - 0x76]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_30
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140054f14
lea r8d, [rbx + 0x20]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WS2_32.dll_recv
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
add rax, r9
jmp 0x1400550ad
lea r8d, [rbx - 0x4a]
movzx ecx, r8b
and cl, r11b
mov edx, 3
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400550ad
lea edx, [rbx + 0x4c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x14
jmp 0x140054f4f
lea edx, [rbx - 0x1e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x2e
jmp 0x1400550e7
lea edx, [rbx + 0x78]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x48
movzx ecx, byte [rbp + rbx - 0x28]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400545a2
lea edx, [rbx + 0x6f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 9
mov byte [rbp + rbx - 0x28], r10b
inc rbx
jmp 0x1400545a2
lea edx, [rbx + 5]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x23
cmp r9, 8
jb 0x140054a06
lea edx, [rbx + 0x1e]
movzx ecx, dl
and cl, r11b
mov r8d, reloc.WS2_32.dll_socket
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, r11b
lea r10d, [r8 + r8]
movzx r8d, bl
jmp 0x14005502b
lea edx, [rbx - 0x65]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x3d
cmp rax, 0x10
jae 0x140054ef9
lea rdx, [r9 + 2]
cmp rax, rdx
jbe 0x140054e29
lea r8d, [rbx - 6]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WS2_32.dll_setsockopt
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140054a28
lea edx, [rbx + 0x31]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x57
lea rcx, [r9 + rax]
cmp rcx, 0x40
je 0x140054f36
lea rcx, [r9 + 0x42]
cmp rax, rcx
jbe 0x140054d3c
lea edx, [rbx - 0x5f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x67
jmp 0x140054a6b
lea r8d, [rbx + 0x16]
movzx ecx, r8b
and cl, r11b
mov edx, 0x33
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
movzx ecx, byte [rbp + rbx - 0x28]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400545a2
lea r8d, [rbx - 0x54]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_41
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400550e7
lea r8d, [rbx + 0x42]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_26
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x140054f4f
lea r8d, [rbx - 0x28]
movzx ecx, r8b
and cl, r11b
mov edx, recv
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400550ad
lea edx, [rbx + 0x6e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 2
add rax, r9
jmp 0x1400550ad
lea edx, [rbx + 4]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x1c
jmp 0x140054f14
lea edx, [rbx - 0x66]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x36
dec rbx
inc rbx
jmp 0x1400545a2
lea edx, [rbx + 0x30]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x50
inc r9
dec rbx
inc rbx
jmp 0x1400545a2
lea edx, [rbx - 0x3a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x6a
movzx r8d, bl
jmp 0x14005502b
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jae 0x140054c37
lea edx, [rbx + 0x35]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x73
jmp 0x140054ab5
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140054c6f
lea r8d, [rbx - 0x4e]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WS2_32.dll_recvfrom
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
movzx ecx, byte [rbp + rbx - 0x28]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400545a2
inc rcx
cmp rax, rcx
jne 0x140054c98
lea r8d, [rbx + 0x1c]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_30
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400550e7
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140054cc2
lea r8d, [rbx - 0x10]
movzx ecx, r8b
and cl, r11b
mov edx, gethostname
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
jmp 0x1400550ad
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x140054ce8
lea edx, [rbx + 0x5a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x76
add rax, r9
jmp 0x1400550ad
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x140054d11
lea edx, [rbx + 0x2e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x42
dec rbx
inc rbx
jmp 0x1400545a2
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x140054ab5
lea edx, [rbx + 2]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0xe
movzx r8d, bl
jmp 0x14005502b
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140054d63
lea edx, [rbx + 0xb]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x4d
movzx r8d, bl
jmp 0x14005502b
inc rcx
cmp rax, rcx
jne 0x140054d8b
lea edx, [rbx - 0x21]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x19
dec rbx
inc rbx
jmp 0x1400545a2
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140054dae
lea edx, [rbx + 0x1d]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x35
jmp 0x1400550ad
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x140054dd1
lea edx, [rbx - 0x79]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x4f
jmp 0x140054f4f
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140054df4
lea edx, [rbx - 0xf]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x69
jmp 0x1400550e7
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x140054a6b
lea edx, [rbx + 0x5b]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x7d
movzx ecx, byte [rbp + rbx - 0x28]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400545a2
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140054e61
lea r8d, [rbx + 0x64]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_35
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
add r10b, r11b
movzx ecx, byte [rbp + rbx - 0x28]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400545a2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140054e84
lea edx, [rbx - 0x5e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x6e
jmp 0x1400550ad
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140054ea4
lea edx, [rbx + 0x76]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x3a
jmp 0x140054f14
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x140054ecd
lea edx, [rbx - 0x20]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x20
dec rbx
inc rbx
jmp 0x1400545a2
cmp rax, rdx
jne 0x140054a28
lea edx, [rbx + 0x4a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 6
inc r9
dec rbx
inc rbx
jmp 0x1400545a2
lea r8d, [rbx - 0x78]
movzx ecx, r8b
and cl, r11b
movzx edx, r11b
sub dl, cl
add dl, 0x24
lea r10d, [rdx + rdx]
add r10b, r8b
lea edx, [rbx - 0x43]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
sub dl, 0x2b
add dl, r11b
add dl, r10b
mov byte [rbp + rbx - 0x28], dl
add rax, r9
jmp 0x1400550ad
lea r8d, [rbx - 0xe]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_50
sub dl, cl
lea r10d, [rdx + rdx]
add r10b, r8b
lea edx, [rbx + 0x27]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
sub dl, 0x11
add dl, r11b
movzx ecx, dl
mov byte [rbp + rbx - 0x28], cl
inc r9
add rcx, r9
sub rbx, rcx
jmp 0x1400550e7
lea edx, [rbx + 0x13]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x7b
movzx ecx, byte [rbp + rbx - 0x28]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400545a2
lea edx, [rbx - 0x2b]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x2d
jmp 0x1400550ad
lea edx, [rbx + 0x6b]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x13
add rax, r9
jmp 0x1400550ad
lea edx, [rbx - 0x69]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x21
dec rbx
inc rbx
jmp 0x1400545a2
lea edx, [rbx - 0x3d]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
sub r10b, 0x55
movzx r8d, bl
jmp 0x14005502b
movzx r8d, bl
lea edx, [r8 - 0x11]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x77
add r8b, 0x53
movzx ecx, r11b
and cl, r8b
add cl, cl
sub r11b, cl
sub r11b, 0x45
add r11b, r8b
mov byte [rbp + rbx - 0x28], r11b
inc r9
dec rbx
inc rbx
jmp 0x1400545a2
lea edx, [rbx + 0x1b]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0x43
dec rbx
inc rbx
jmp 0x1400545a2
lea edx, [rbx + 0x47]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r10d, [r11 + rdx]
add r10b, 0xf
add rax, r9
jmp 0x1400550ad
movabs rcx, 0x1ae73577d94b3edd
add rcx, rbx
and r8b, cl
add r8b, r8b
sub r11b, r8b
lea r10d, [rcx + r11]
sub r10b, 0xb
movzx ecx, r10b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x1400545a2
movabs rdx, 0x47d5c85f06f0ea09
add rdx, rbx
and r8b, dl
add r8b, r8b
movzx r10d, r11b
sub r10b, r8b
sub r10b, 0x3f
add r10b, dl
lea r8d, [rbx + 0x5c]
movzx ecx, r8b
and cl, r11b
mov edx, 0x3e
sub dl, cl
add dl, dl
add dl, r8b
add dl, r11b
mov byte [rbp + rbx - 0x28], dl
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x28]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400545a2
movabs rcx, 0x5e4d11d29dc3bf9f
add rcx, rbx
and r8b, cl
add r8b, r8b
sub r11b, r8b
lea r10d, [rcx + r11]
sub r10b, 0x59
movzx ecx, byte [rbp + rbx - 0x28]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x1400545a2
sub bl, 0x77
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r10d, [rbx + r11]
add r10b, 0x41
jmp 0x14005459d
add bl, 0x1f
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r10d, [rbx + r11]
add r10b, 0x27
jmp 0x140054597
lea rcx, [rbp + 0x16c3f74]
jmp 0x1400551a5
lea rcx, [rbp + 0x42d4a9]
jmp 0x1400551a5
lea rcx, [rbp - 0x28]
xor r8d, r8d
mov rdx, rdi
call fcn.14004c7c0
mov qword [0x14023d148], rax
lea rcx, [0x14023d160]
call fcn.140198e84
mov r9, r15
mov r8, r12
mov rdx, qword [0x14023d148]
mov rcx, r13
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
jmp 0x140058c70
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rax, qword gs:[0x58]
mov rbx, r9
mov rsi, qword [0x14023d148]
mov rdi, r8
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14023d1f0], eax
jle 0x140058ced
lea rcx, [0x14023d1f0]
call fcn.140198ef0
cmp dword [0x14023d1f0], 0xffffffff
jne 0x140058ced
lea rcx, [0x140218198]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, str.NtShutdownSystem
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, [0x14023d1f0]
mov qword [0x14023d150], rax
call fcn.140198e84
mov rcx, qword [0x14023d0e0]
mov rdx, rsi
call fcn.14004ef10
mov rax, qword [0x14023d150]
mov rdx, rbx
mov rcx, rdi
call rax
mov rcx, qword [0x14023d0e0]
mov rbx, rax
call fcn.14004f110
mov rsi, qword [rsp + 0x38]
mov rax, rbx
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
ret