Function at 0x140323c60
Capabilities:
Parse pe header

Disassembly:
mov eax, Ordinal_41
call fcn.140382db0
sub rsp, rax
movsx eax, byte [rcx]
mov rdx, rcx
add eax, 0xffffff9f
cmp eax, 0x17
ja case.0x140323f95.51
cdqe
lea r8, [0x140000000]
mov eax, dword [r8 + rax*4 + 0x327558]
add rax, r8
jmp rax
movsx ecx, byte [rcx + 1]
test ecx, ecx
je 0x140323df2
sub ecx, 0x63
je 0x140323dc5
sub ecx, 1
je 0x140323db1
sub ecx, 1
je 0x140323d80
cmp ecx, 7
jne case.0x140323f95.51
movzx eax, byte [rdx + 2]
cmp al, 0x67
je 0x140323d06
cmp al, 0x69
jne case.0x140323f95.51
mov eax, 0x61
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
mov eax, 0x11d
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x5f
je 0x140323d5e
cmp al, 0x69
je 0x140323d3c
cmp al, 0x6f
jne case.0x140323f95.51
add rdx, 4
lea rcx, str.rithm_id
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x118
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.d_absent
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x47
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.id_param
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, Ordinal_41
add rsp, 0x28
ret
mov eax, 0x61
cmp al, byte [rdx + 2]
jne case.0x140323f95.51
mov eax, 0x64
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, Ordinal_32
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0x69
add rsp, 0x28
ret
xor eax, eax
lea r8, str.vp_info
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 8
jne 0x140323dd0
mov eax, 0x8a
add rsp, 0x28
ret
mov eax, 0xad
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x140323f65
cmp al, 0x61
je 0x140323f43
cmp al, 0x69
je 0x140323f12
cmp al, 0x6c
je 0x140323e52
cmp al, 0x75
jne case.0x140323f95.51
xor eax, eax
lea r8, str.ildinfo
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 8
jne 0x140323e30
mov eax, 0x106
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6f
jne case.0x140323f95.51
cmp byte [rcx + 3], 0x63
jne case.0x140323f95.51
cmp byte [rcx + 4], 0x6b
jne case.0x140323f95.51
movzx eax, byte [rcx + 5]
cmp al, 0x2d
je 0x140323ee2
cmp al, 0x5f
je 0x140323eb3
cmp al, 0x73
jne case.0x140323f95.51
lea r8, [rcx + 6]
xor eax, eax
lea rdx, [0x14042922c]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140323e91
mov eax, reloc.WLDAP32.dll_Ordinal_41
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1403ac298]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x140323f95.51
cmp rax, 8
jne 0x140323ec0
mov eax, 0x92
add rsp, 0x28
ret
lea r8, [rcx + 6]
xor eax, eax
lea rdx, str.size
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140323ef0
mov eax, 0x9b
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rcx + 2]
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rcx + 3]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rcx + 4]
jne case.0x140323f95.51
mov eax, 0xa6
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.sis_type
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0xb4
add rsp, 0x28
ret
mov eax, 0xae
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffffd3
cmp eax, 0x48
ja case.0x140323f95.51
cdqe
movzx eax, byte [r8 + rax + 0x3275d4]
mov ecx, dword [r8 + rax*4 + 0x3275b8]
add rcx, r8
jmp rcx
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.rounds
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140323fa4
mov eax, 0x9d
add rsp, 0x28
ret
xor eax, eax
lea r8, str.kalg
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140323fd0
mov eax, WSASetLastError
add rsp, 0x28
ret
xor eax, eax
lea r8, str.pher
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140324000
xor eax, eax
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x66
je 0x140324092
cmp al, 0x6e
jne case.0x140323f95.51
movsx ecx, byte [rdx + 3]
sub ecx, 0x73
je 0x140324063
cmp ecx, 1
jne case.0x140323f95.51
add rdx, 4
lea rcx, str.ext_string
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x119
add rsp, 0x28
ret
xor eax, eax
lea r8, str.tant
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140324070
mov eax, WSASetLastError
add rsp, 0x28
ret
xor eax, eax
lea r8, str.actor
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 6
jne 0x1403240a0
mov eax, 0xb5
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x140323f95.51
movzx eax, byte [rdx + 3]
test al, al
je 0x140324112
cmp al, 0x5f
jne case.0x140323f95.51
xor eax, eax
lea r8, str.mode
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x140323f95.51
cmp rax, 5
jne 0x1403240f0
mov eax, Ordinal_45
add rsp, 0x28
ret
mov eax, Ordinal_45
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x140323f95.51
cmp byte [rdx + 3], 0x74
jne case.0x140323f95.51
cmp byte [rdx + 4], 0x6f
jne case.0x140323f95.51
cmp byte [rdx + 5], 0x6d
jne case.0x140323f95.51
movzx eax, byte [rdx + 6]
test al, al
je 0x140324185
cmp al, 0x2d
jne case.0x140323f95.51
mov eax, 0x69
cmp al, byte [rdx + 7]
jne case.0x140323f95.51
mov eax, 0x76
cmp al, byte [rdx + 8]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 9]
jne case.0x140323f95.51
mov eax, Ordinal_45
add rsp, 0x28
ret
mov eax, 0x9c
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x72
ja case.0x140323f95.51
movzx eax, byte [r8 + rax + 0x327640]
mov ecx, dword [r8 + rax*4 + 0x327620]
add rcx, r8
jmp rcx
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.rounds
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 7
jne 0x1403241c0
mov eax, 0xa0
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x74
jne case.0x140323f95.51
cmp byte [rdx + 3], 0x61
jne case.0x140323f95.51
movzx eax, byte [rdx + 4]
test al, al
je 0x140324274
cmp al, 0x2d
jne case.0x140323f95.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x73
je 0x140324252
cmp ecx, 1
jne case.0x140323f95.51
lea r8, [rdx + 6]
xor eax, eax
lea rdx, [0x140429274]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140324230
mov eax, 0xa3
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.tructure
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0xa2
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSAGetLastError
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1403242d7
cmp al, 0x66
je 0x1403242b5
cmp al, 0x73
jne case.0x140323f95.51
mov eax, 0x63
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, 0xa4
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.ault_digest
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0xa7
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.oded_from_explicit
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0xb6
add rsp, 0x28
ret
xor eax, eax
lea r8, str.kem_ikm
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 8
jne 0x140324302
mov eax, 0xa8
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x67
je 0x140324362
cmp al, 0x73
jne case.0x140323f95.51
xor eax, eax
lea r8, [0x1404292c0]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140324340
mov eax, 0xac
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x65
jne case.0x140323f95.51
cmp byte [rdx + 4], 0x73
jne case.0x140323f95.51
cmp byte [rdx + 5], 0x74
jne case.0x140323f95.51
movzx eax, byte [rdx + 6]
test al, al
je 0x140324472
cmp al, 0x2d
jne case.0x140323f95.51
movsx ecx, byte [rdx + 7]
sub ecx, 0x6e
je 0x140324442
sub ecx, 1
je 0x140324412
sub ecx, 1
je 0x1403243e3
cmp ecx, 3
jne case.0x140323f95.51
lea r8, [rdx + 8]
xor eax, eax
lea rdx, [0x14042922c]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x1403243c1
mov eax, 0xab
add rsp, 0x28
ret
xor eax, eax
lea r8, str.rops
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x140323f95.51
cmp rax, 5
jne 0x1403243f0
mov eax, 6
add rsp, 0x28
ret
xor eax, eax
lea r8, str.neshot
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140324420
mov eax, 0x9f
add rsp, 0x28
ret
xor eax, eax
lea r8, str.oinit
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x140323f95.51
cmp rax, 6
jne 0x140324450
mov eax, 0x9e
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.bg_no_trunc_md
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x10a
add rsp, 0x28
ret
mov eax, 0xdf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x140324695
cmp al, 0x61
je 0x140324673
cmp al, 0x63
je 0x140324651
cmp al, 0x6e
je 0x140324502
cmp al, 0x78
jne case.0x140323f95.51
xor eax, eax
lea r8, str.pect
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 5
jne 0x1403244e0
mov eax, 0x11e
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x63
je 0x1403245b2
cmp al, 0x67
je 0x14032457e
cmp al, 0x74
jne case.0x140323f95.51
cmp byte [rcx + 3], 0x72
jne case.0x140323f95.51
cmp byte [rcx + 4], 0x6f
jne case.0x140323f95.51
cmp byte [rcx + 5], 0x70
jne case.0x140323f95.51
cmp byte [rcx + 6], 0x79
jne case.0x140323f95.51
movzx eax, byte [rcx + 7]
test al, al
je 0x140324574
cmp al, 0x5f
jne case.0x140323f95.51
add rdx, 8
lea rcx, str.required
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, Ordinal_79
add rsp, 0x28
ret
mov eax, WSACleanup
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x14042931c]
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140324590
mov eax, 2
add rsp, 0x28
ret
movzx eax, byte [rcx + 3]
cmp al, 0x6f
je 0x1403245e4
cmp al, 0x72
jne case.0x140323f95.51
add rdx, 4
lea rcx, str.ypt_level
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x5e
add rsp, 0x28
ret
cmp byte [rcx + 4], 0x64
jne case.0x140323f95.51
movzx eax, byte [rcx + 5]
cmp al, 0x65
je 0x14032462f
cmp al, 0x69
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rcx + 6]
jne case.0x140323f95.51
mov eax, 0x67
cmp al, byte [rcx + 7]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rcx + 8]
jne case.0x140323f95.51
mov eax, 0xb7
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.d_pub_key
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0xc0
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.dh_cofactor_mode
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x60
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.rly_clean
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSASetLastError
add rsp, 0x28
ret
mov eax, 0xe1
add rsp, 0x28
ret
cmp byte [rcx + 1], 0x69
jne case.0x140323f95.51
movzx eax, byte [rcx + 2]
cmp al, 0x65
je 0x1403246db
cmp al, 0x6e
jne case.0x140323f95.51
add rdx, 3
lea rcx, str.gerprint
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x11f
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ld_type
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 8
jne 0x1403246e4
mov eax, 0xb8
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x14032483b
cmp al, 0x65
je 0x1403247c2
cmp al, 0x69
je 0x14032478d
cmp al, 0x72
jne case.0x140323f95.51
cmp byte [rcx + 2], 0x6f
jne case.0x140323f95.51
cmp byte [rcx + 3], 0x75
jne case.0x140323f95.51
cmp byte [rcx + 4], 0x70
jne case.0x140323f95.51
movzx eax, byte [rcx + 5]
test al, al
je 0x140324783
cmp al, 0x2d
jne case.0x140323f95.51
xor eax, eax
lea r8, str.check
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x140323f95.51
cmp rax, 6
jne 0x140324761
mov eax, 0xba
add rsp, 0x28
ret
mov eax, 0xcc
add rsp, 0x28
ret
lea r8, [rcx + 2]
xor eax, eax
lea rdx, str.ndex
nop word [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 5
jne 0x1403247a0
mov eax, 0xc3
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6e
jne case.0x140323f95.51
cmp byte [rcx + 3], 0x65
jne case.0x140323f95.51
cmp byte [rcx + 4], 0x72
jne case.0x140323f95.51
cmp byte [rcx + 5], 0x61
jne case.0x140323f95.51
cmp byte [rcx + 6], 0x74
jne case.0x140323f95.51
movzx eax, byte [rcx + 7]
cmp al, 0x65
je 0x140324827
cmp al, 0x6f
jne case.0x140323f95.51
mov eax, WSACleanup
cmp al, byte [rcx + 8]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rcx + 9]
jne case.0x140323f95.51
mov eax, 0xb9
add rsp, 0x28
ret
cmp byte [rcx + 8], 0
jne case.0x140323f95.51
mov eax, 0x112
add rsp, 0x28
ret
mov eax, 0xc2
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x140324884
cmp al, 0x69
jne case.0x140323f95.51
lea r8, [rcx + 2]
xor eax, eax
lea rdx, str.ndex
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140324862
mov eax, Ordinal_200
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.s_randkey
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, reloc.WLDAP32.dll_Ordinal_45
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9c
cmp eax, 0x12
ja case.0x140323f95.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x3276b4]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0x7c
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rdx + 2]
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, 0x90
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.plicit_rejection
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 5
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1403249d5
cmp al, 0x66
je 0x1403249b2
cmp al, 0x70
je 0x140324982
cmp al, 0x73
jne case.0x140323f95.51
xor eax, eax
lea r8, str.tance
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 6
jne 0x140324960
mov eax, 0x11a
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ut_type
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 8
jne 0x140324990
mov eax, 0x120
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSAGetLastError
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSAStartup
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.lude_public
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0xbb
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x65
jne case.0x140323f95.51
cmp byte [rdx + 3], 0x72
jne case.0x140323f95.51
movzx eax, byte [rdx + 4]
test al, al
je 0x140324a46
cmp al, 0x61
jne case.0x140323f95.51
xor eax, eax
lea r8, str.tion
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140324a24
mov eax, 0x67
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
test al, al
je 0x140324a91
cmp al, 0x6c
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
mov eax, Ordinal_50
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_46
add rsp, 0x28
ret
cmp byte [rdx + 1], 0
mov eax, 0xc1
mov ecx, 0xffffffff
cmove ecx, eax
mov eax, ecx
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffffcf
cmp eax, 0x34
ja case.0x140323f95.51
cdqe
movzx eax, byte [r8 + rax + 0x32771c]
mov ecx, dword [r8 + rax*4 + 0x327700]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0xb0
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0xb1
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0xb2
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 2]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
mov eax, 0x11b
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x140323f95.51
cmp byte [rdx + 3], 0x2d
jne case.0x140323f95.51
movsx ecx, byte [rdx + 4]
sub ecx, 0x64
je 0x140324c02
sub ecx, 0xb
je 0x140324bd2
sub ecx, 5
je 0x140324ba3
cmp ecx, 1
jne case.0x140323f95.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x140323f95.51
mov eax, 0x65
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x140429274]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140324bb0
mov eax, 0x64
add rsp, 0x28
ret
xor eax, eax
lea r8, str.utlen
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 6
jne 0x140324be0
mov eax, 0x63
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x69
jne case.0x140323f95.51
cmp byte [rdx + 6], 0x67
jne case.0x140323f95.51
cmp byte [rdx + 7], 0x65
jne case.0x140323f95.51
cmp byte [rdx + 8], 0x73
jne case.0x140323f95.51
cmp byte [rdx + 9], 0x74
jne case.0x140323f95.51
movzx eax, byte [rdx + 0xa]
test al, al
je 0x140324c72
cmp al, 0x2d
jne case.0x140323f95.51
xor eax, eax
lea r8, str.props
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xa]
jne case.0x140323f95.51
cmp rax, 6
jne 0x140324c50
mov eax, 0x62
add rsp, 0x28
ret
mov eax, 0x61
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x79
jne case.0x140323f95.51
movzx eax, byte [rdx + 3]
test al, al
je 0x140324d02
cmp al, 0x62
je 0x140324ccf
cmp al, 0x6c
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
mov eax, Ordinal_50
add rsp, 0x28
ret
lea r8, [rdx + 4]
xor eax, eax
lea rdx, [0x1404293c0]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140324ce0
mov eax, getservbyport
add rsp, 0x28
ret
mov eax, 0x78
add rsp, 0x28
ret
cmp byte [rcx + 1], 0x61
jne case.0x140323f95.51
movzx eax, byte [rcx + 2]
cmp al, 0x62
je 0x140324d57
cmp al, 0x6e
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rcx + 4]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rcx + 5]
jne case.0x140323f95.51
mov eax, 0x6a
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rcx + 4]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rcx + 5]
jne case.0x140323f95.51
mov eax, 0x79
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x6f
ja case.0x140323f95.51
movzx eax, byte [r8 + rax + 0x327770]
mov ecx, dword [r8 + rax*4 + 0x327754]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x140324fd4
cmp al, 0x6e
je 0x140324fb2
cmp al, 0x78
jne case.0x140323f95.51
movzx eax, byte [rdx + 3]
cmp al, 0x2d
je 0x140324f82
cmp al, 0x5f
je 0x140324e28
cmp al, 0x69
je 0x140324e06
cmp al, 0x6d
jne case.0x140323f95.51
add rdx, 4
lea rcx, str.em_bytes
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x80
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.um_length
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x51
add rsp, 0x28
ret
movsx eax, byte [rdx + 4]
add eax, 0xffffff9f
cmp eax, 0x11
ja case.0x140323f95.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x3277e0]
add rcx, r8
jmp rcx
xor eax, eax
lea r8, str.dinlen
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140324e50
mov eax, reloc.WLDAP32.dll_Ordinal_79
add rsp, 0x28
ret
movzx eax, byte [rdx + 5]
cmp al, 0x61
je 0x140324ea4
cmp al, 0x6e
jne case.0x140323f95.51
add rdx, 6
lea rcx, str.tropylen
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x50
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.rly_data
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
xor eax, eax
lea r8, str.rag_len
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 8
jne 0x140324ed0
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, str.oncelen
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 8
jne 0x140324f00
mov eax, 0x52
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erslen
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140324f30
mov eax, 0x53
add rsp, 0x28
ret
xor eax, eax
lea r8, str.equest
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140324f60
mov eax, 0x113
add rsp, 0x28
ret
lea r8, [rdx + 4]
xor eax, eax
lea rdx, str.size
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140324f90
mov eax, Ordinal_211
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.datory_digest
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0xcd
add rsp, 0x28
ret
movsx ecx, byte [rdx + 3]
test ecx, ecx
je 0x140325050
sub ecx, 0x6b
je 0x14032501f
cmp ecx, 1
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
mov eax, 0x7a
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, 0x79
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
mov eax, reloc.WLDAP32.dll_Ordinal_32
add rsp, 0x28
ret
mov eax, 3
add rsp, 0x28
ret
xor eax, eax
lea r8, str.mcost
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 6
jne 0x140325063
mov eax, WSAGetLastError
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x140323f95.51
movzx eax, byte [rdx + 3]
test al, al
je 0x140325112
cmp al, 0x31
jne case.0x140323f95.51
cmp byte [rdx + 4], 0x2d
jne case.0x140323f95.51
movzx eax, byte [rdx + 5]
cmp al, 0x64
je 0x1403250df
cmp al, 0x70
jne case.0x140323f95.51
add rdx, 6
lea rcx, str.roperties
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, Ordinal_211
add rsp, 0x28
ret
xor eax, eax
lea r8, str.igest
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x140323f95.51
cmp rax, 6
jne 0x1403250f0
mov eax, Ordinal_211
add rsp, 0x28
ret
mov eax, 0xce
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1403251c4
cmp al, 0x6e
jne case.0x140323f95.51
movzx eax, byte [rdx + 3]
cmp al, 0x5f
je 0x140325162
cmp al, 0x69
jne case.0x140323f95.51
add rdx, 4
lea rcx, str.um_length
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x55
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x65
je 0x1403251a2
cmp al, 0x6e
jne case.0x140323f95.51
lea r8, [rdx + 5]
xor eax, eax
lea rdx, str.oncelen
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 8
jne 0x140325180
mov eax, 0x56
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ntropylen
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x54
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x14042945c]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 4
jne 0x1403251d0
mov eax, 0x48
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x64
jne case.0x140323f95.51
movzx eax, byte [rdx + 3]
cmp al, 0x65
je 0x14032522e
cmp al, 0x75
jne case.0x140323f95.51
add rdx, 4
lea rcx, str.le_filename
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x107
add rsp, 0x28
ret
cmp byte [rdx + 4], 0
jne case.0x140323f95.51
mov eax, Ordinal_50
add rsp, 0x28
ret
mov eax, 0xaf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x14032532d
cmp al, 0x61
je 0x1403252fc
cmp al, 0x6f
je 0x14032528f
cmp al, 0x75
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rcx + 2]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rcx + 3]
jne case.0x140323f95.51
mov eax, reloc.WLDAP32.dll_Ordinal_50
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6e
jne case.0x140323f95.51
cmp byte [rcx + 3], 0x63
jne case.0x140323f95.51
cmp byte [rcx + 4], 0x65
jne case.0x140323f95.51
movzx eax, byte [rcx + 5]
test al, al
je 0x1403252f2
cmp al, 0x2d
jne case.0x140323f95.51
xor eax, eax
lea r8, str.type
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x140323f95.51
cmp rax, 5
jne 0x1403252d0
mov eax, 0x11c
add rsp, 0x28
ret
mov eax, WSACleanup
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rcx + 2]
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rcx + 4]
jne case.0x140323f95.51
mov eax, 0x10b
add rsp, 0x28
ret
mov eax, 0x81
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x140325424
cmp al, 0x70
je 0x140325382
cmp al, 0x72
jne case.0x140323f95.51
xor eax, eax
lea r8, [0x1404294ac]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140325360
mov eax, 0xbc
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x65
je 0x1403253c2
cmp al, 0x74
jne case.0x140323f95.51
xor eax, eax
lea r8, str.ions
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 5
jne 0x1403253a0
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
movzx eax, byte [rcx + 3]
cmp al, 0x6e
je 0x140325402
cmp al, 0x72
jne case.0x140323f95.51
xor eax, eax
lea r8, str.ation
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x140323f95.51
cmp rax, 6
jne 0x1403253e0
mov eax, 0x91
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.ssl_version
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x109
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.ep_label
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 7
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x75
ja case.0x140323f95.51
movzx eax, byte [r8 + rax + 0x327854]
mov ecx, dword [r8 + rax*4 + 0x327828]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0xfa
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0xfb
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
sub ecx, 0x64
je 0x140325552
sub ecx, 0xe
je 0x1403254ce
cmp ecx, 1
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
lea eax, [rcx + 0x7a]
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x140323f95.51
cmp byte [rdx + 4], 0x79
jne case.0x140323f95.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x75
je 0x140325523
cmp ecx, 1
jne case.0x140323f95.51
lea r8, [rdx + 6]
xor eax, eax
lea rdx, str._info
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 6
jne 0x140325501
mov eax, Ordinal_143
add rsp, 0x28
ret
lea r8, [rdx + 6]
xor eax, eax
lea rdx, str._info
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 6
jne 0x140325530
mov eax, Ordinal_143
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
test al, al
je 0x140325602
cmp al, 0x2d
je 0x140325595
cmp al, 0x64
jne case.0x140323f95.51
xor eax, eax
lea r8, [0x1404294b4]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140325573
mov eax, reloc.WS2_32.dll_gethostbyaddr
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x6d
je 0x1403255d4
cmp al, 0x74
jne case.0x140323f95.51
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x140429274]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x1403255b2
mov eax, 0x49
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1404294b0]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 4
jne 0x1403255e0
mov eax, Ordinal_211
add rsp, 0x28
ret
mov eax, 0x66
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, [0x1404293c0]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140325620
mov eax, Ordinal_200
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.ounter
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140325650
mov eax, Ordinal_200
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1404294c8]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140325680
mov eax, 0x7d
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x69
je 0x1403256e2
cmp al, 0x74
jne case.0x140323f95.51
xor eax, eax
lea r8, str.ential
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 7
jne 0x1403256c0
mov eax, 0x68
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.nt_format
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0xbd
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x65
je 0x14032580d
cmp al, 0x69
je 0x140325782
cmp al, 0x6f
jne case.0x140323f95.51
movzx eax, byte [rdx + 3]
cmp al, 0x70
je 0x14032574e
cmp al, 0x76
jne case.0x140323f95.51
add rdx, 4
lea rcx, str.ider_name
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x108
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erties
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140325760
mov eax, 4
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x6d
je 0x1403257dc
cmp al, 0x76
jne case.0x140323f95.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1403257d2
cmp al, 0x5f
jne case.0x140323f95.51
xor eax, eax
lea r8, [0x1404294fc]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 4
jne 0x1403257b0
mov eax, 0xaa
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_211
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
mov eax, 0xf8
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x64
je 0x14032584e
cmp al, 0x66
jne case.0x140323f95.51
mov eax, 0x69
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, 0x78
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
mov eax, 0x7e
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.iction_resistance
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x57
add rsp, 0x28
ret
mov eax, 0x62
cmp al, byte [rdx + 2]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
mov eax, 0xd4
add rsp, 0x28
ret
mov eax, 0x82
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x79
ja case.0x140323f95.51
movzx eax, byte [r8 + rax + 0x3278e8]
mov ecx, dword [r8 + rax*4 + 0x3278cc]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0xfc
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0xfd
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, [0x1404293c0]
nop word [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140325900
mov eax, reloc.WLDAP32.dll_Ordinal_200
add rsp, 0x28
ret
mov eax, Ordinal_200
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0xbe
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0xbf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x140325ff5
cmp al, 0x61
je 0x140325f75
cmp al, 0x65
je 0x140325dc2
cmp al, 0x6f
je 0x140325d94
cmp al, 0x73
jne case.0x140323f95.51
cmp byte [rcx + 2], 0x61
jne case.0x140323f95.51
cmp byte [rcx + 3], 0x2d
jne case.0x140323f95.51
movsx ecx, byte [rcx + 4]
sub ecx, 0x63
je 0x140325c4e
sub ecx, 1
je 0x140325c2c
sub ecx, 1
je 0x140325aea
cmp ecx, 1
jne case.0x140323f95.51
cmp byte [rdx + 5], 0x61
jne case.0x140323f95.51
cmp byte [rdx + 6], 0x63
jne case.0x140323f95.51
cmp byte [rdx + 7], 0x74
jne case.0x140323f95.51
cmp byte [rdx + 8], 0x6f
jne case.0x140323f95.51
cmp byte [rdx + 9], 0x72
jne case.0x140323f95.51
movsx rax, byte [rdx + 0xa]
cmp eax, 0x39
ja case.0x140323f95.51
movzx eax, byte [r8 + rax + 0x327990]
mov ecx, dword [r8 + rax*4 + 0x327964]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 0xb]
test al, al
je 0x140325a36
cmp al, 0x30
jne case.0x140323f95.51
cmp byte [rdx + 0xc], 0
jne case.0x140323f95.51
mov eax, 0xef
add rsp, 0x28
ret
mov eax, 0xee
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x140323f95.51
mov eax, 0xf0
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x140323f95.51
mov eax, 0xf1
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x140323f95.51
mov eax, 0xf2
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x140323f95.51
mov eax, 0xf3
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x140323f95.51
mov eax, 0xf4
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x140323f95.51
mov eax, 0xf5
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x140323f95.51
mov eax, 0xf6
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x140323f95.51
mov eax, 0xf7
add rsp, 0x28
ret
mov eax, 0xed
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x78
jne case.0x140323f95.51
cmp byte [rdx + 6], 0x70
jne case.0x140323f95.51
cmp byte [rdx + 7], 0x6f
jne case.0x140323f95.51
cmp byte [rdx + 8], 0x6e
jne case.0x140323f95.51
cmp byte [rdx + 9], 0x65
jne case.0x140323f95.51
cmp byte [rdx + 0xa], 0x6e
jne case.0x140323f95.51
cmp byte [rdx + 0xb], 0x74
jne case.0x140323f95.51
movsx rax, byte [rdx + 0xc]
cmp eax, 0x39
ja case.0x140323f95.51
movzx eax, byte [r8 + rax + 0x3279f8]
mov ecx, dword [r8 + rax*4 + 0x3279cc]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 0xd]
test al, al
je 0x140325b78
cmp al, 0x30
jne case.0x140323f95.51
cmp byte [rdx + 0xe], 0
jne case.0x140323f95.51
mov eax, 0xe4
add rsp, 0x28
ret
mov eax, 0xe3
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x140323f95.51
mov eax, 0xe5
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x140323f95.51
mov eax, 0xe6
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x140323f95.51
mov eax, 0xe7
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x140323f95.51
mov eax, 0xe8
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x140323f95.51
mov eax, 0xe9
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x140323f95.51
mov eax, 0xea
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x140323f95.51
mov eax, 0xeb
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x140323f95.51
mov eax, 0xec
add rsp, 0x28
ret
mov eax, 0xe2
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.erive_from_pq
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0xe0
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x6f
jne case.0x140323f95.51
cmp byte [rdx + 6], 0x65
jne case.0x140323f95.51
cmp byte [rdx + 7], 0x66
jne case.0x140323f95.51
cmp byte [rdx + 8], 0x66
jne case.0x140323f95.51
cmp byte [rdx + 9], 0x69
jne case.0x140323f95.51
cmp byte [rdx + 0xa], 0x63
jne case.0x140323f95.51
cmp byte [rdx + 0xb], 0x69
jne case.0x140323f95.51
cmp byte [rdx + 0xc], 0x65
jne case.0x140323f95.51
cmp byte [rdx + 0xd], 0x6e
jne case.0x140323f95.51
cmp byte [rdx + 0xe], 0x74
jne case.0x140323f95.51
movsx rax, byte [rdx + 0xf]
cmp eax, 0x39
ja case.0x140323f95.51
movzx eax, byte [r8 + rax + 0x327a60]
mov ecx, dword [r8 + rax*4 + 0x327a34]
add rcx, r8
jmp rcx
cmp byte [rdx + 0x10], 0
jne case.0x140323f95.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x140323f95.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x140323f95.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x140323f95.51
mov eax, reloc.WLDAP32.dll_Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x140323f95.51
mov eax, 0xda
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x140323f95.51
mov eax, 0xdb
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x140323f95.51
mov eax, 0xdc
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x140323f95.51
mov eax, 0xdd
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x140323f95.51
mov eax, 0xde
add rsp, 0x28
ret
mov eax, Ordinal_217
add rsp, 0x28
ret
xor eax, eax
lea r8, str.unds
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140325da0
mov eax, getservbyport
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x61
je 0x140325f02
cmp al, 0x66
je 0x140325ed2
cmp al, 0x73
jne case.0x140323f95.51
cmp byte [rcx + 3], 0x65
jne case.0x140323f95.51
cmp byte [rcx + 4], 0x65
jne case.0x140323f95.51
cmp byte [rcx + 5], 0x64
jne case.0x140323f95.51
cmp byte [rcx + 6], 0x5f
jne case.0x140323f95.51
movzx eax, byte [rcx + 7]
cmp al, 0x63
je 0x140325ea3
cmp al, 0x72
je 0x140325e78
cmp al, 0x74
jne case.0x140323f95.51
cmp byte [rcx + 8], 0x69
jne case.0x140323f95.51
cmp byte [rcx + 9], 0x6d
jne case.0x140323f95.51
cmp byte [rcx + 0xa], 0x65
jne case.0x140323f95.51
movzx eax, byte [rcx + 0xb]
test al, al
je 0x140325e6e
cmp al, 0x5f
jne case.0x140323f95.51
add rdx, 0xc
lea rcx, str.interval
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x5c
add rsp, 0x28
ret
mov eax, 0x5b
add rsp, 0x28
ret
xor eax, eax
lea r8, str.equests
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x140323f95.51
cmp rax, 8
jne 0x140325e81
mov eax, 0x5a
add rsp, 0x28
ret
lea r8, [rcx + 8]
xor eax, eax
lea rdx, str.ounter
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140325eb0
mov eax, 0x59
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erence
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140325ee0
mov eax, 0xa5
add rsp, 0x28
ret
cmp byte [rcx + 3], 0x64
jne case.0x140323f95.51
cmp byte [rcx + 4], 0x5f
jne case.0x140323f95.51
movsx ecx, byte [rcx + 5]
sub ecx, 0x61
je 0x140325f4a
cmp ecx, 1
jne case.0x140323f95.51
add rdx, 6
lea rcx, str.uffer_len
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x9a
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x140444ab8]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140325f53
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6e
jne case.0x140323f95.51
cmp byte [rcx + 3], 0x64
jne case.0x140323f95.51
movzx eax, byte [rcx + 4]
cmp al, 0x6b
je 0x140325fc4
cmp al, 0x6f
jne case.0x140323f95.51
xor eax, eax
lea r8, str.m_data
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140325fa2
mov eax, 0x58
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rcx + 5]
jne case.0x140323f95.51
mov eax, 0x79
cmp al, byte [rcx + 6]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rcx + 7]
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_gethostbyname
add rsp, 0x28
ret
mov eax, 0x75
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9f
cmp eax, 0x14
ja case.0x140323f95.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x327a9c]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 2]
cmp al, 0x66
je 0x1403260ad
cmp al, 0x6c
je 0x140326058
cmp al, 0x76
jne case.0x140323f95.51
add rdx, 3
lea rcx, str.e_parameters
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x5f
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x140323f95.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1403260a3
cmp al, 0x6c
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x140323f95.51
mov eax, 0xf9
add rsp, 0x28
ret
mov eax, 0x7f
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.eprime_generator
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0xa9
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
sub ecx, 0x63
je 0x140326175
sub ecx, 2
je 0x140326152
sub ecx, 0xd
je 0x140326122
cmp ecx, 1
jne case.0x140323f95.51
xor eax, eax
lea r8, str.sion_id
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 8
jne 0x140326100
mov eax, 0x85
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x140429598]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140326130
mov eax, 0x121
add rsp, 0x28
ret
mov eax, 0x64
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, 0x84
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x72
je 0x140326232
cmp al, 0x75
jne case.0x140323f95.51
cmp byte [rdx + 4], 0x72
jne case.0x140323f95.51
cmp byte [rdx + 5], 0x69
jne case.0x140323f95.51
cmp byte [rdx + 6], 0x74
jne case.0x140323f95.51
cmp byte [rdx + 7], 0x79
jne case.0x140323f95.51
cmp byte [rdx + 8], 0x2d
jne case.0x140323f95.51
movsx ecx, byte [rdx + 9]
sub ecx, 0x62
je 0x140326202
cmp ecx, 1
jne case.0x140323f95.51
xor eax, eax
lea r8, str.hecks
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 9]
jne case.0x140323f95.51
cmp rax, 6
jne 0x1403261e0
mov eax, 0x10c
add rsp, 0x28
ret
lea r8, [rdx + 0xa]
xor eax, eax
lea rdx, [0x1404293c0]
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140326210
mov eax, 0x104
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
mov eax, 0x83
add rsp, 0x28
ret
mov eax, 0x7a
cmp al, byte [rdx + 2]
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, 0x4a
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1404295a8]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x1403262a0
mov eax, reloc.WS2_32.dll_getservbyname
add rsp, 0x28
ret
xor eax, eax
lea r8, str.l3_ms
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 6
jne 0x1403262d0
mov eax, Ordinal_79
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x2d
je 0x1403263d3
cmp al, 0x61
je 0x140326382
cmp al, 0x72
jne case.0x140323f95.51
cmp byte [rdx + 3], 0x65
jne case.0x140323f95.51
movzx eax, byte [rdx + 4]
cmp al, 0x61
je 0x140326353
cmp al, 0x6e
jne case.0x140323f95.51
xor eax, eax
lea r8, [0x1404295c8]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140326331
mov eax, 0x115
add rsp, 0x28
ret
xor eax, eax
lea r8, str.m_mac
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 6
jne 0x140326360
mov eax, reloc.WS2_32.dll___WSAFDIsSet
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x140323f95.51
movzx eax, byte [rdx + 4]
cmp al, 0x65
je 0x1403263bf
cmp al, 0x75
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
mov eax, 0x110
add rsp, 0x28
ret
cmp byte [rdx + 5], 0
jne case.0x140323f95.51
mov eax, 0x114
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x64
je 0x140326452
cmp al, 0x70
je 0x140326422
cmp al, 0x74
jne case.0x140323f95.51
lea r8, [rdx + 4]
xor eax, eax
lea rdx, [0x140429274]
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140326400
mov eax, 0x10f
add rsp, 0x28
ret
xor eax, eax
lea r8, str.hase
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140326430
mov eax, 0x10e
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1404295b4]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140326460
mov eax, 0x10d
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x62
je 0x140326522
cmp al, 0x70
jne case.0x140323f95.51
cmp byte [rdx + 3], al
jne case.0x140323f95.51
cmp byte [rdx + 4], 0x2d
jne case.0x140323f95.51
cmp byte [rdx + 5], al
jne case.0x140323f95.51
movzx eax, byte [rdx + 6]
cmp al, 0x72
je 0x1403264f2
cmp al, 0x75
jne case.0x140323f95.51
xor eax, eax
lea r8, str.binfo
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 6]
jne case.0x140323f95.51
cmp rax, 6
jne 0x1403264d0
mov eax, Ordinal_143
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ivinfo
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 6]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140326500
mov eax, Ordinal_143
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ject
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140326530
mov eax, 0x122
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9f
cmp eax, 0x18
ja case.0x140323f95.51
cdqe
movzx eax, byte [r8 + rax + 0x327b0c]
mov ecx, dword [r8 + rax*4 + 0x327af0]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0x67
jne case.0x140323f95.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1403265c5
cmp al, 0x6c
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
mov eax, Ordinal_35
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_33
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x140323f95.51
cmp byte [rdx + 3], 0x74
jne case.0x140323f95.51
cmp byte [rdx + 4], 0x5f
jne case.0x140323f95.51
movzx eax, byte [rdx + 5]
cmp al, 0x65
je 0x140326632
cmp al, 0x6e
jne case.0x140323f95.51
xor eax, eax
lea r8, str.once
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140326610
mov eax, 0x117
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ntropy
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140326640
mov eax, 0x116
add rsp, 0x28
ret
xor eax, eax
lea r8, str.reads
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 6
jne 0x140326670
mov eax, 0x88
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x140323f95.51
movzx eax, byte [rdx + 3]
cmp al, 0x2d
je 0x140326a1e
cmp al, 0x31
je 0x140326803
cmp al, 0x61
je 0x1403267a4
cmp al, 0x69
je 0x1403266f2
cmp al, 0x74
jne case.0x140323f95.51
xor eax, eax
lea r8, [0x1404296cc]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x140323f95.51
cmp rax, 4
jne 0x1403266d0
mov eax, 0x98
add rsp, 0x28
ret
cmp byte [rdx + 4], 0x76
jne case.0x140323f95.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x66
je 0x140326779
sub ecx, 1
je 0x140326748
cmp ecx, 2
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
mov eax, 0x76
cmp al, byte [rdx + 7]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 8]
jne case.0x140323f95.51
mov eax, Ordinal_41
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 7]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 8]
jne case.0x140323f95.51
mov eax, Ordinal_41
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ixed
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140326782
mov eax, Ordinal_41
add rsp, 0x28
ret
cmp byte [rdx + 4], 0x61
jne case.0x140323f95.51
cmp byte [rdx + 5], 0x64
jne case.0x140323f95.51
movzx eax, byte [rdx + 6]
test al, al
je 0x1403267f9
cmp al, 0x70
jne case.0x140323f95.51
mov eax, 0x61
cmp al, byte [rdx + 7]
jne case.0x140323f95.51
mov eax, 0x64
cmp al, byte [rdx + 8]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 9]
jne case.0x140323f95.51
mov eax, 0x24
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_35
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x2d
je 0x1403269fc
cmp al, 0x6d
jne case.0x140323f95.51
cmp byte [rdx + 5], 0x75
jne case.0x140323f95.51
cmp byte [rdx + 6], 0x6c
jne case.0x140323f95.51
cmp byte [rdx + 7], 0x74
jne case.0x140323f95.51
cmp byte [rdx + 8], 0x69
jne case.0x140323f95.51
cmp byte [rdx + 9], 0x5f
jne case.0x140323f95.51
movzx eax, byte [rdx + 0xa]
cmp al, 0x61
je 0x14032699a
cmp al, 0x65
je 0x140326914
cmp al, 0x69
je 0x1403268f2
cmp al, 0x6d
jne case.0x140323f95.51
cmp byte [rdx + 0xb], 0x61
jne case.0x140323f95.51
cmp byte [rdx + 0xc], 0x78
jne case.0x140323f95.51
movzx eax, byte [rdx + 0xd]
cmp al, 0x62
je 0x1403268c2
cmp al, 0x73
jne case.0x140323f95.51
xor eax, eax
lea r8, str.ndfrag
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x140323f95.51
cmp rax, 7
jne 0x1403268a0
mov eax, 0x40
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ufsz
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x140323f95.51
cmp rax, 5
jne 0x1403268d0
mov eax, 0x3f
add rsp, 0x28
ret
add rdx, 0xb
lea rcx, str.nterleave
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x3e
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x6e
jne case.0x140323f95.51
cmp byte [rdx + 0xc], 0x63
jne case.0x140323f95.51
movzx eax, byte [rdx + 0xd]
test al, al
je 0x140326990
cmp al, 0x69
je 0x14032696d
cmp al, 0x6c
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rdx + 0xe]
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 0xf]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 0x10]
jne case.0x140323f95.51
mov eax, 0x3d
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rdx + 0xe]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 0xf]
jne case.0x140323f95.51
mov eax, reloc.WLDAP32.dll_Ordinal_60
add rsp, 0x28
ret
mov eax, Ordinal_60
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x61
jne case.0x140323f95.51
cmp byte [rdx + 0xc], 0x64
jne case.0x140323f95.51
movzx eax, byte [rdx + 0xd]
test al, al
je 0x1403269f2
cmp al, 0x70
jne case.0x140323f95.51
xor eax, eax
lea r8, str.acklen
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x140323f95.51
cmp rax, 7
jne 0x1403269d0
mov eax, Ordinal_60
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_gethostname
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.prf_ems_check
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x111
add rsp, 0x28
ret
movsx eax, byte [rdx + 4]
add eax, 0xffffff9d
cmp eax, 0x13
ja case.0x140323f95.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x327b28]
add rcx, r8
jmp rcx
add rdx, 5
lea rcx, str.lient_version
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 8
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ata_size
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0xa1
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x72
jne case.0x140323f95.51
cmp byte [rdx + 6], 0x6f
jne case.0x140323f95.51
cmp byte [rdx + 7], 0x75
jne case.0x140323f95.51
cmp byte [rdx + 8], 0x70
jne case.0x140323f95.51
cmp byte [rdx + 9], 0x2d
jne case.0x140323f95.51
movzx eax, byte [rdx + 0xa]
cmp al, 0x61
je 0x140326bb6
cmp al, 0x69
je 0x140326b5c
cmp al, 0x6e
je 0x140326b02
cmp al, 0x73
jne case.0x140323f95.51
xor eax, eax
lea r8, str.ec_bits
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xa]
jne case.0x140323f95.51
cmp rax, 8
jne 0x140326ae0
mov eax, reloc.WS2_32.dll_send
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x61
jne case.0x140323f95.51
cmp byte [rdx + 0xc], 0x6d
jne case.0x140323f95.51
cmp byte [rdx + 0xd], 0x65
jne case.0x140323f95.51
movzx eax, byte [rdx + 0xe]
test al, al
je 0x140326b52
cmp al, 0x2d
jne case.0x140323f95.51
add rdx, 0xf
lea rcx, str.internal
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_select
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_recvfrom
add rsp, 0x28
ret
movzx eax, byte [rdx + 0xb]
cmp al, 0x64
je 0x140326ba2
cmp al, 0x73
jne case.0x140323f95.51
xor eax, eax
lea r8, str._kem
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xb]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140326b80
mov eax, reloc.WS2_32.dll_inet_ntoa
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_inet_addr
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rdx + 0xb]
jne case.0x140323f95.51
mov eax, 0x67
cmp al, byte [rdx + 0xc]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 0xd]
jne case.0x140323f95.51
mov eax, 0xa
add rsp, 0x28
ret
movzx eax, byte [rdx + 5]
cmp al, 0x61
je 0x140326cb6
cmp al, 0x69
je 0x140326c32
cmp al, 0x75
jne case.0x140323f95.51
xor eax, eax
lea r8, [0x140429644]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140326c10
mov eax, reloc.WS2_32.dll_getservbyport
add rsp, 0x28
ret
cmp byte [rdx + 6], 0x6e
jne case.0x140323f95.51
cmp byte [rdx + 7], 0x2d
jne case.0x140323f95.51
movzx eax, byte [rdx + 8]
cmp al, 0x64
je 0x140326c87
cmp al, 0x74
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 9]
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 0xa]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 0xb]
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_recv
add rsp, 0x28
ret
lea r8, [rdx + 9]
xor eax, eax
lea rdx, [0x140429640]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140326c94
mov eax, reloc.WS2_32.dll_ntohs
add rsp, 0x28
ret
movzx eax, byte [rdx + 6]
cmp al, 0x63
je 0x140326d44
cmp al, 0x78
jne case.0x140323f95.51
cmp byte [rdx + 7], 0x2d
jne case.0x140323f95.51
movzx eax, byte [rdx + 8]
cmp al, 0x64
je 0x140326d15
cmp al, 0x74
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 9]
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 0xa]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 0xb]
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_ntohl
add rsp, 0x28
ret
lea r8, [rdx + 9]
xor eax, eax
lea rdx, [0x140429640]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140326d22
mov eax, reloc.WS2_32.dll_listen
add rsp, 0x28
ret
movzx eax, byte [rdx + 7]
test al, al
je 0x140326d83
cmp al, 0x2d
jne case.0x140323f95.51
lea r8, [rdx + 8]
xor eax, eax
lea rdx, str.size
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 5
jne 0x140326d61
mov eax, 0x42
add rsp, 0x28
ret
mov eax, 0x41
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.egotiated_version
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 9
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x69
jne case.0x140323f95.51
cmp byte [rdx + 6], 0x67
jne case.0x140323f95.51
cmp byte [rdx + 7], 0x61
jne case.0x140323f95.51
cmp byte [rdx + 8], 0x6c
jne case.0x140323f95.51
cmp byte [rdx + 9], 0x67
jne case.0x140323f95.51
cmp byte [rdx + 0xa], 0x2d
jne case.0x140323f95.51
movsx eax, byte [rdx + 0xb]
add eax, 0xffffff9d
cmp eax, 0x10
ja case.0x140323f95.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x327b78]
add rcx, r8
jmp rcx
add rdx, 0xc
lea rcx, str.ode_point
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_sendto
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0x61
jne case.0x140323f95.51
cmp byte [rdx + 0xd], 0x73
jne case.0x140323f95.51
cmp byte [rdx + 0xe], 0x68
jne case.0x140323f95.51
cmp byte [rdx + 0xf], 0x2d
jne case.0x140323f95.51
movsx ecx, byte [rdx + 0x10]
sub ecx, 0x6e
je 0x140326e97
cmp ecx, 1
jne case.0x140323f95.51
mov eax, 0x69
cmp al, byte [rdx + 0x11]
jne case.0x140323f95.51
mov eax, 0x64
cmp al, byte [rdx + 0x12]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 0x13]
jne case.0x140323f95.51
mov eax, reloc.WLDAP32.dll_Ordinal_22
add rsp, 0x28
ret
lea r8, [rdx + 0x11]
xor eax, eax
lea rdx, [0x14042966c]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140326ea4
mov eax, reloc.WS2_32.dll_setsockopt
add rsp, 0x28
ret
add rdx, 0xc
lea rcx, str.ana_name
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_socket
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0x65
jne case.0x140323f95.51
cmp byte [rdx + 0xd], 0x79
jne case.0x140323f95.51
cmp byte [rdx + 0xe], 0x74
jne case.0x140323f95.51
cmp byte [rdx + 0xf], 0x79
jne case.0x140323f95.51
cmp byte [rdx + 0x10], 0x70
jne case.0x140323f95.51
cmp byte [rdx + 0x11], 0x65
jne case.0x140323f95.51
movzx eax, byte [rdx + 0x12]
test al, al
je 0x140326f62
cmp al, 0x2d
jne case.0x140323f95.51
xor eax, eax
lea r8, [0x14042967c]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0x12]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140326f40
mov eax, Ordinal_26
add rsp, 0x28
ret
mov eax, Ordinal_26
add rsp, 0x28
ret
lea r8, [rdx + 0xc]
xor eax, eax
lea rdx, [0x14042966c]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140326f80
mov eax, reloc.WLDAP32.dll_Ordinal_26
add rsp, 0x28
ret
mov eax, 0x69
cmp al, byte [rdx + 0xc]
jne case.0x140323f95.51
mov eax, 0x64
cmp al, byte [rdx + 0xd]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 0xe]
jne case.0x140323f95.51
mov eax, reloc.WLDAP32.dll_Ordinal_27
add rsp, 0x28
ret
movzx eax, byte [rdx + 0xc]
cmp al, 0x65
je 0x140327072
cmp al, 0x69
jne case.0x140323f95.51
cmp byte [rdx + 0xd], 0x67
jne case.0x140323f95.51
cmp byte [rdx + 0xe], 0x2d
jne case.0x140323f95.51
movsx ecx, byte [rdx + 0xf]
sub ecx, 0x6e
je 0x14032703e
cmp ecx, 1
jne case.0x140323f95.51
mov eax, 0x69
cmp al, byte [rdx + 0x10]
jne case.0x140323f95.51
mov eax, 0x64
cmp al, byte [rdx + 0x11]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 0x12]
jne case.0x140323f95.51
mov eax, reloc.WLDAP32.dll_Ordinal_30
add rsp, 0x28
ret
lea r8, [rdx + 0x10]
xor eax, eax
lea rdx, [0x14042966c]
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140327050
mov eax, Ordinal_32
add rsp, 0x28
ret
xor eax, eax
lea r8, str.c_bits
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xc]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140327080
mov eax, Ordinal_32
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ersion
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 7
jne 0x1403270b0
mov eax, 0x43
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x140323f95.51
mov eax, 0xb3
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSASetLastError
cmp al, byte [rdx + 2]
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, 0x86
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x6b
je 0x1403272b5
cmp al, 0x70
je 0x140327293
cmp al, 0x73
jne case.0x140323f95.51
cmp byte [rcx + 2], 0x65
jne case.0x140323f95.51
movzx eax, byte [rcx + 3]
cmp al, 0x2d
je 0x1403271b6
cmp al, 0x5f
jne case.0x140323f95.51
movsx ecx, byte [rcx + 4]
sub ecx, 0x64
je 0x140327194
cmp ecx, 1
jne case.0x140323f95.51
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x140323f95.51
mov eax, 0x99
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.erivation_function
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x5d
add rsp, 0x28
ret
movsx ecx, byte [rcx + 4]
sub ecx, 0x62
je 0x140327264
sub ecx, 1
je 0x140327242
sub ecx, 8
je 0x140327215
sub ecx, 1
je 0x140327201
cmp ecx, 7
jne case.0x140323f95.51
add rdx, 5
lea rcx, str.eparator
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x77
add rsp, 0x28
ret
cmp byte [rdx + 5], 0
jne case.0x140323f95.51
mov eax, 0x76
add rsp, 0x28
ret
xor eax, eax
lea r8, str.eybits
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x140323f95.51
cmp rax, 7
jne 0x140327220
mov eax, reloc.WLDAP32.dll_Ordinal_143
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ofactor_flag
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x105
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x1404293c0]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x140323f95.51
cmp rax, 4
jne 0x140327271
mov eax, 0x45
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.dated_iv
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x140323f95.51
mov eax, 0x44
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rcx + 2]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rcx + 3]
jne case.0x140323f95.51
mov eax, 0x89
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x140327313
cmp al, 0x65
jne case.0x140323f95.51
xor eax, eax
lea r8, str.rsion
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x140323f95.51
cmp rax, 6
jne 0x1403272f1
mov eax, WSASetLastError
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6c
jne case.0x140323f95.51
cmp byte [rcx + 3], 0x69
jne case.0x140323f95.51
cmp byte [rcx + 4], 0x64
jne case.0x140323f95.51
cmp byte [rcx + 5], 0x61
jne case.0x140323f95.51
cmp byte [rcx + 6], 0x74
jne case.0x140323f95.51
cmp byte [rcx + 7], 0x65
jne case.0x140323f95.51
cmp byte [rcx + 8], 0x2d
jne case.0x140323f95.51
movzx eax, byte [rcx + 9]
cmp al, 0x67
je 0x1403273c2
cmp al, 0x6c
je 0x140327394
cmp al, 0x70
jne case.0x140323f95.51
mov eax, WSACleanup
cmp al, byte [rcx + 0xa]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rcx + 0xb]
jne case.0x140323f95.51
mov eax, 0xcb
add rsp, 0x28
ret
xor eax, eax
lea r8, str.egacy
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 9]
jne case.0x140323f95.51
cmp rax, 6
jne 0x1403273a0
mov eax, 0xca
add rsp, 0x28
ret
cmp byte [rcx + 0xa], 0
jne case.0x140323f95.51
mov eax, 0xc9
add rsp, 0x28
ret
movsx ecx, byte [rcx + 1]
sub ecx, 0x63
je 0x14032750e
sub ecx, 0xc
je 0x1403274b9
sub ecx, 1
je 0x140327471
sub ecx, 1
je 0x140327429
cmp ecx, 3
jne case.0x140323f95.51
add rdx, 2
lea rcx, str.s_standard
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
mov ecx, 0xffffffff
mov edx, 0x46
cmove ecx, edx
mov eax, ecx
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
test ecx, ecx
je 0x140327467
sub ecx, 0x31
je 0x140327453
cmp ecx, 1
jne case.0x140323f95.51
cmp byte [rdx + 3], 0
jne case.0x140323f95.51
mov eax, 0x103
add rsp, 0x28
ret
cmp byte [rdx + 3], 0
jne case.0x140323f95.51
mov eax, 0x102
add rsp, 0x28
ret
mov eax, 0x101
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
test ecx, ecx
je 0x1403274af
sub ecx, 0x31
je 0x14032749b
cmp ecx, 1
jne case.0x140323f95.51
cmp byte [rdx + 3], 0
jne case.0x140323f95.51
mov eax, 0x100
add rsp, 0x28
ret
cmp byte [rdx + 3], 0
jne case.0x140323f95.51
mov eax, 0xff
add rsp, 0x28
ret
mov eax, 0xfe
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x140323f95.51
movzx eax, byte [rdx + 3]
test al, al
je 0x140327504
cmp al, 0x6c
jne case.0x140323f95.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x140323f95.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x140323f95.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x140323f95.51
mov eax, Ordinal_79
add rsp, 0x28
ret
mov eax, Ordinal_79
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.ghash
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne 0x140327539
cmp rax, 6
jne 0x140327520
cmp cl, byte [r8 + rax - 1]
mov eax, 0x87
mov ecx, 0xffffffff
cmove ecx, eax
mov eax, ecx
add rsp, 0x28
ret
mov eax, 0xffffffff
add rsp, 0x28
ret