Function at 0x1403a6710
Capabilities:
Parse pe header

Disassembly:
mov eax, Ordinal_41
call fcn.1404881b0
sub rsp, rax
movsx eax, byte [rcx]
mov rdx, rcx
add eax, 0xffffff9f
cmp eax, 0x17
ja case.0x1403a6a45.51
cdqe
lea r8, [0x140000000]
mov eax, dword [r8 + rax*4 + 0x3aa008]
add rax, r8
jmp rax
movsx ecx, byte [rcx + 1]
test ecx, ecx
je 0x1403a68a2
sub ecx, 0x63
je 0x1403a6875
sub ecx, 1
je 0x1403a6861
sub ecx, 1
je 0x1403a6830
cmp ecx, 7
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 2]
cmp al, 0x67
je 0x1403a67b6
cmp al, 0x69
jne case.0x1403a6a45.51
mov eax, 0x61
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
mov eax, 0x11d
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x5f
je 0x1403a680e
cmp al, 0x69
je 0x1403a67ec
cmp al, 0x6f
jne case.0x1403a6a45.51
add rdx, 4
lea rcx, str.rithm_id
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x118
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.d_absent
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x47
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.id_param
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, Ordinal_41
add rsp, 0x28
ret
mov eax, 0x61
cmp al, byte [rdx + 2]
jne case.0x1403a6a45.51
mov eax, 0x64
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, Ordinal_35
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0x69
add rsp, 0x28
ret
xor eax, eax
lea r8, str.vp_info
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a6880
mov eax, 0x8a
add rsp, 0x28
ret
mov eax, 0xad
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1403a6a15
cmp al, 0x61
je 0x1403a69f3
cmp al, 0x69
je 0x1403a69c2
cmp al, 0x6c
je 0x1403a6902
cmp al, 0x75
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.ildinfo
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a68e0
mov eax, 0x106
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6f
jne case.0x1403a6a45.51
cmp byte [rcx + 3], 0x63
jne case.0x1403a6a45.51
cmp byte [rcx + 4], 0x6b
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 5]
cmp al, 0x2d
je 0x1403a6992
cmp al, 0x5f
je 0x1403a6963
cmp al, 0x73
jne case.0x1403a6a45.51
lea r8, [rcx + 6]
xor eax, eax
lea rdx, [0x140572ebc]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a6941
mov eax, reloc.WLDAP32.dll_Ordinal_41
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1404f2aa8]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a6970
mov eax, 0x92
add rsp, 0x28
ret
lea r8, [rcx + 6]
xor eax, eax
lea rdx, str.size
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a69a0
mov eax, 0x9b
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rcx + 2]
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rcx + 3]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rcx + 4]
jne case.0x1403a6a45.51
mov eax, 0xa6
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.sis_type
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0xb4
add rsp, 0x28
ret
mov eax, 0xae
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffffd3
cmp eax, 0x48
ja case.0x1403a6a45.51
cdqe
movzx eax, byte [r8 + rax + 0x3aa084]
mov ecx, dword [r8 + rax*4 + 0x3aa068]
add rcx, r8
jmp rcx
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.rounds
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a6a54
mov eax, 0x9d
add rsp, 0x28
ret
xor eax, eax
lea r8, str.kalg
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a6a80
mov eax, WSASetLastError
add rsp, 0x28
ret
xor eax, eax
lea r8, str.pher
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a6ab0
xor eax, eax
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x66
je 0x1403a6b42
cmp al, 0x6e
jne case.0x1403a6a45.51
movsx ecx, byte [rdx + 3]
sub ecx, 0x73
je 0x1403a6b13
cmp ecx, 1
jne case.0x1403a6a45.51
add rdx, 4
lea rcx, str.ext_string
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x119
add rsp, 0x28
ret
xor eax, eax
lea r8, str.tant
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a6b20
mov eax, WSASetLastError
add rsp, 0x28
ret
xor eax, eax
lea r8, str.actor
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a6b50
mov eax, 0xb5
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1403a6bc2
cmp al, 0x5f
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.mode
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a6ba0
mov eax, Ordinal_46
add rsp, 0x28
ret
mov eax, Ordinal_46
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1403a6a45.51
cmp byte [rdx + 3], 0x74
jne case.0x1403a6a45.51
cmp byte [rdx + 4], 0x6f
jne case.0x1403a6a45.51
cmp byte [rdx + 5], 0x6d
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 6]
test al, al
je 0x1403a6c35
cmp al, 0x2d
jne case.0x1403a6a45.51
mov eax, 0x69
cmp al, byte [rdx + 7]
jne case.0x1403a6a45.51
mov eax, 0x76
cmp al, byte [rdx + 8]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 9]
jne case.0x1403a6a45.51
mov eax, Ordinal_46
add rsp, 0x28
ret
mov eax, 0x9c
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x72
ja case.0x1403a6a45.51
movzx eax, byte [r8 + rax + 0x3aa0f0]
mov ecx, dword [r8 + rax*4 + 0x3aa0d0]
add rcx, r8
jmp rcx
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.rounds
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a6c70
mov eax, 0xa0
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x74
jne case.0x1403a6a45.51
cmp byte [rdx + 3], 0x61
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1403a6d24
cmp al, 0x2d
jne case.0x1403a6a45.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x73
je 0x1403a6d02
cmp ecx, 1
jne case.0x1403a6a45.51
lea r8, [rdx + 6]
xor eax, eax
lea rdx, [0x140572f04]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a6ce0
mov eax, 0xa3
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.tructure
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0xa2
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSAGetLastError
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1403a6d87
cmp al, 0x66
je 0x1403a6d65
cmp al, 0x73
jne case.0x1403a6a45.51
mov eax, 0x63
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, 0xa4
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.ault_digest
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0xa7
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.oded_from_explicit
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0xb6
add rsp, 0x28
ret
xor eax, eax
lea r8, str.kem_ikm
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a6db2
mov eax, 0xa8
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x67
je 0x1403a6e12
cmp al, 0x73
jne case.0x1403a6a45.51
xor eax, eax
lea r8, [0x140572f50]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a6df0
mov eax, 0xac
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x65
jne case.0x1403a6a45.51
cmp byte [rdx + 4], 0x73
jne case.0x1403a6a45.51
cmp byte [rdx + 5], 0x74
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 6]
test al, al
je 0x1403a6f22
cmp al, 0x2d
jne case.0x1403a6a45.51
movsx ecx, byte [rdx + 7]
sub ecx, 0x6e
je 0x1403a6ef2
sub ecx, 1
je 0x1403a6ec2
sub ecx, 1
je 0x1403a6e93
cmp ecx, 3
jne case.0x1403a6a45.51
lea r8, [rdx + 8]
xor eax, eax
lea rdx, [0x140572ebc]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a6e71
mov eax, 0xab
add rsp, 0x28
ret
xor eax, eax
lea r8, str.rops
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a6ea0
mov eax, 6
add rsp, 0x28
ret
xor eax, eax
lea r8, str.neshot
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a6ed0
mov eax, 0x9f
add rsp, 0x28
ret
xor eax, eax
lea r8, str.oinit
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a6f00
mov eax, 0x9e
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.bg_no_trunc_md
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x10a
add rsp, 0x28
ret
mov eax, 0xdf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1403a7145
cmp al, 0x61
je 0x1403a7123
cmp al, 0x63
je 0x1403a7101
cmp al, 0x6e
je 0x1403a6fb2
cmp al, 0x78
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.pect
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a6f90
mov eax, 0x11e
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x63
je 0x1403a7062
cmp al, 0x67
je 0x1403a702e
cmp al, 0x74
jne case.0x1403a6a45.51
cmp byte [rcx + 3], 0x72
jne case.0x1403a6a45.51
cmp byte [rcx + 4], 0x6f
jne case.0x1403a6a45.51
cmp byte [rcx + 5], 0x70
jne case.0x1403a6a45.51
cmp byte [rcx + 6], 0x79
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 7]
test al, al
je 0x1403a7024
cmp al, 0x5f
jne case.0x1403a6a45.51
add rdx, 8
lea rcx, str.required
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, Ordinal_79
add rsp, 0x28
ret
mov eax, WSACleanup
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x140572fac]
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a7040
mov eax, 2
add rsp, 0x28
ret
movzx eax, byte [rcx + 3]
cmp al, 0x6f
je 0x1403a7094
cmp al, 0x72
jne case.0x1403a6a45.51
add rdx, 4
lea rcx, str.ypt_level
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x5e
add rsp, 0x28
ret
cmp byte [rcx + 4], 0x64
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 5]
cmp al, 0x65
je 0x1403a70df
cmp al, 0x69
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rcx + 6]
jne case.0x1403a6a45.51
mov eax, 0x67
cmp al, byte [rcx + 7]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rcx + 8]
jne case.0x1403a6a45.51
mov eax, 0xb7
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.d_pub_key
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0xc0
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.dh_cofactor_mode
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x60
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.rly_clean
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSASetLastError
add rsp, 0x28
ret
mov eax, 0xe1
add rsp, 0x28
ret
cmp byte [rcx + 1], 0x69
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 2]
cmp al, 0x65
je 0x1403a718b
cmp al, 0x6e
jne case.0x1403a6a45.51
add rdx, 3
lea rcx, str.gerprint
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x11f
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ld_type
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a7194
mov eax, 0xb8
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1403a72eb
cmp al, 0x65
je 0x1403a7272
cmp al, 0x69
je 0x1403a723d
cmp al, 0x72
jne case.0x1403a6a45.51
cmp byte [rcx + 2], 0x6f
jne case.0x1403a6a45.51
cmp byte [rcx + 3], 0x75
jne case.0x1403a6a45.51
cmp byte [rcx + 4], 0x70
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 5]
test al, al
je 0x1403a7233
cmp al, 0x2d
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.check
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a7211
mov eax, 0xba
add rsp, 0x28
ret
mov eax, 0xcc
add rsp, 0x28
ret
lea r8, [rcx + 2]
xor eax, eax
lea rdx, str.ndex
nop word [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a7250
mov eax, 0xc3
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6e
jne case.0x1403a6a45.51
cmp byte [rcx + 3], 0x65
jne case.0x1403a6a45.51
cmp byte [rcx + 4], 0x72
jne case.0x1403a6a45.51
cmp byte [rcx + 5], 0x61
jne case.0x1403a6a45.51
cmp byte [rcx + 6], 0x74
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 7]
cmp al, 0x65
je 0x1403a72d7
cmp al, 0x6f
jne case.0x1403a6a45.51
mov eax, WSACleanup
cmp al, byte [rcx + 8]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rcx + 9]
jne case.0x1403a6a45.51
mov eax, 0xb9
add rsp, 0x28
ret
cmp byte [rcx + 8], 0
jne case.0x1403a6a45.51
mov eax, 0x112
add rsp, 0x28
ret
mov eax, 0xc2
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x1403a7334
cmp al, 0x69
jne case.0x1403a6a45.51
lea r8, [rcx + 2]
xor eax, eax
lea rdx, str.ndex
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a7312
mov eax, Ordinal_200
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.s_randkey
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_45
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9c
cmp eax, 0x12
ja case.0x1403a6a45.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x3aa164]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0x7c
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rdx + 2]
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, 0x90
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.plicit_rejection
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 5
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1403a7485
cmp al, 0x66
je 0x1403a7462
cmp al, 0x70
je 0x1403a7432
cmp al, 0x73
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.tance
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a7410
mov eax, 0x11a
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ut_type
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a7440
mov eax, 0x120
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSAGetLastError
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.lude_public
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0xbb
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x65
jne case.0x1403a6a45.51
cmp byte [rdx + 3], 0x72
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1403a74f6
cmp al, 0x61
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.tion
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a74d4
mov eax, 0x67
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
test al, al
je 0x1403a7541
cmp al, 0x6c
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
mov eax, gethostbyaddr
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_46
add rsp, 0x28
ret
cmp byte [rdx + 1], 0
mov eax, 0xc1
mov ecx, 0xffffffff
cmove ecx, eax
mov eax, ecx
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffffcf
cmp eax, 0x34
ja case.0x1403a6a45.51
cdqe
movzx eax, byte [r8 + rax + 0x3aa1cc]
mov ecx, dword [r8 + rax*4 + 0x3aa1b0]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0xb0
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0xb1
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0xb2
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 2]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
mov eax, 0x11b
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x1403a6a45.51
cmp byte [rdx + 3], 0x2d
jne case.0x1403a6a45.51
movsx ecx, byte [rdx + 4]
sub ecx, 0x64
je 0x1403a76b2
sub ecx, 0xb
je 0x1403a7682
sub ecx, 5
je 0x1403a7653
cmp ecx, 1
jne case.0x1403a6a45.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x1403a6a45.51
mov eax, 0x65
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x140572f04]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a7660
mov eax, 0x64
add rsp, 0x28
ret
xor eax, eax
lea r8, str.utlen
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a7690
mov eax, 0x63
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x69
jne case.0x1403a6a45.51
cmp byte [rdx + 6], 0x67
jne case.0x1403a6a45.51
cmp byte [rdx + 7], 0x65
jne case.0x1403a6a45.51
cmp byte [rdx + 8], 0x73
jne case.0x1403a6a45.51
cmp byte [rdx + 9], 0x74
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 0xa]
test al, al
je 0x1403a7722
cmp al, 0x2d
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.props
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xa]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a7700
mov eax, 0x62
add rsp, 0x28
ret
mov eax, 0x61
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x79
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1403a77b2
cmp al, 0x62
je 0x1403a777f
cmp al, 0x6c
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
mov eax, gethostbyaddr
add rsp, 0x28
ret
lea r8, [rdx + 4]
xor eax, eax
lea rdx, [0x140573050]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a7790
mov eax, getservbyname
add rsp, 0x28
ret
mov eax, 0x78
add rsp, 0x28
ret
cmp byte [rcx + 1], 0x61
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 2]
cmp al, 0x62
je 0x1403a7807
cmp al, 0x6e
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rcx + 4]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rcx + 5]
jne case.0x1403a6a45.51
mov eax, 0x6a
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rcx + 4]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rcx + 5]
jne case.0x1403a6a45.51
mov eax, 0x79
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x6f
ja case.0x1403a6a45.51
movzx eax, byte [r8 + rax + 0x3aa220]
mov ecx, dword [r8 + rax*4 + 0x3aa204]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1403a7a84
cmp al, 0x6e
je 0x1403a7a62
cmp al, 0x78
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 3]
cmp al, 0x2d
je 0x1403a7a32
cmp al, 0x5f
je 0x1403a78d8
cmp al, 0x69
je 0x1403a78b6
cmp al, 0x6d
jne case.0x1403a6a45.51
add rdx, 4
lea rcx, str.em_bytes
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x80
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.um_length
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x51
add rsp, 0x28
ret
movsx eax, byte [rdx + 4]
add eax, 0xffffff9f
cmp eax, 0x11
ja case.0x1403a6a45.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x3aa290]
add rcx, r8
jmp rcx
xor eax, eax
lea r8, str.dinlen
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a7900
mov eax, reloc.WLDAP32.dll_Ordinal_79
add rsp, 0x28
ret
movzx eax, byte [rdx + 5]
cmp al, 0x61
je 0x1403a7954
cmp al, 0x6e
jne case.0x1403a6a45.51
add rdx, 6
lea rcx, str.tropylen
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x50
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.rly_data
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
xor eax, eax
lea r8, str.rag_len
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a7980
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, str.oncelen
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a79b0
mov eax, 0x52
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erslen
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a79e0
mov eax, 0x53
add rsp, 0x28
ret
xor eax, eax
lea r8, str.equest
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a7a10
mov eax, 0x113
add rsp, 0x28
ret
lea r8, [rdx + 4]
xor eax, eax
lea rdx, str.size
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a7a40
mov eax, Ordinal_211
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.datory_digest
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0xcd
add rsp, 0x28
ret
movsx ecx, byte [rdx + 3]
test ecx, ecx
je 0x1403a7b00
sub ecx, 0x6b
je 0x1403a7acf
cmp ecx, 1
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
mov eax, 0x7a
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, 0x79
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_32
add rsp, 0x28
ret
mov eax, 3
add rsp, 0x28
ret
xor eax, eax
lea r8, str.mcost
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a7b13
mov eax, WSAGetLastError
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1403a7bc2
cmp al, 0x31
jne case.0x1403a6a45.51
cmp byte [rdx + 4], 0x2d
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 5]
cmp al, 0x64
je 0x1403a7b8f
cmp al, 0x70
jne case.0x1403a6a45.51
add rdx, 6
lea rcx, str.roperties
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, Ordinal_211
add rsp, 0x28
ret
xor eax, eax
lea r8, str.igest
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a7ba0
mov eax, Ordinal_211
add rsp, 0x28
ret
mov eax, 0xce
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1403a7c74
cmp al, 0x6e
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 3]
cmp al, 0x5f
je 0x1403a7c12
cmp al, 0x69
jne case.0x1403a6a45.51
add rdx, 4
lea rcx, str.um_length
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x55
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x65
je 0x1403a7c52
cmp al, 0x6e
jne case.0x1403a6a45.51
lea r8, [rdx + 5]
xor eax, eax
lea rdx, str.oncelen
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a7c30
mov eax, 0x56
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ntropylen
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x54
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1405730ec]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a7c80
mov eax, 0x48
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x64
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 3]
cmp al, 0x65
je 0x1403a7cde
cmp al, 0x75
jne case.0x1403a6a45.51
add rdx, 4
lea rcx, str.le_filename
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x107
add rsp, 0x28
ret
cmp byte [rdx + 4], 0
jne case.0x1403a6a45.51
mov eax, gethostbyaddr
add rsp, 0x28
ret
mov eax, 0xaf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1403a7ddd
cmp al, 0x61
je 0x1403a7dac
cmp al, 0x6f
je 0x1403a7d3f
cmp al, 0x75
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rcx + 2]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rcx + 3]
jne case.0x1403a6a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_50
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6e
jne case.0x1403a6a45.51
cmp byte [rcx + 3], 0x63
jne case.0x1403a6a45.51
cmp byte [rcx + 4], 0x65
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 5]
test al, al
je 0x1403a7da2
cmp al, 0x2d
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.type
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a7d80
mov eax, 0x11c
add rsp, 0x28
ret
mov eax, WSACleanup
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rcx + 2]
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rcx + 4]
jne case.0x1403a6a45.51
mov eax, 0x10b
add rsp, 0x28
ret
mov eax, 0x81
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x1403a7ed4
cmp al, 0x70
je 0x1403a7e32
cmp al, 0x72
jne case.0x1403a6a45.51
xor eax, eax
lea r8, [0x14057313c]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a7e10
mov eax, 0xbc
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x65
je 0x1403a7e72
cmp al, 0x74
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.ions
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a7e50
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
movzx eax, byte [rcx + 3]
cmp al, 0x6e
je 0x1403a7eb2
cmp al, 0x72
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.ation
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a7e90
mov eax, 0x91
add rsp, 0x28
ret
add rdx, 4
lea rcx, [0x140573120]
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x109
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.ep_label
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 7
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x75
ja case.0x1403a6a45.51
movzx eax, byte [r8 + rax + 0x3aa304]
mov ecx, dword [r8 + rax*4 + 0x3aa2d8]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0xfa
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0xfb
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
sub ecx, 0x64
je 0x1403a8002
sub ecx, 0xe
je 0x1403a7f7e
cmp ecx, 1
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
lea eax, [rcx + 0x7a]
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x1403a6a45.51
cmp byte [rdx + 4], 0x79
jne case.0x1403a6a45.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x75
je 0x1403a7fd3
cmp ecx, 1
jne case.0x1403a6a45.51
lea r8, [rdx + 6]
xor eax, eax
lea rdx, str._info
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a7fb1
mov eax, Ordinal_143
add rsp, 0x28
ret
lea r8, [rdx + 6]
xor eax, eax
lea rdx, str._info
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a7fe0
mov eax, Ordinal_143
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
test al, al
je 0x1403a80b2
cmp al, 0x2d
je 0x1403a8045
cmp al, 0x64
jne case.0x1403a6a45.51
xor eax, eax
lea r8, [0x140573144]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a8023
mov eax, reloc.WS2_32.dll_gethostbyaddr
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x6d
je 0x1403a8084
cmp al, 0x74
jne case.0x1403a6a45.51
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x140572f04]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a8062
mov eax, 0x49
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x140573140]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a8090
mov eax, Ordinal_211
add rsp, 0x28
ret
mov eax, 0x66
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, [0x140573050]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a80d0
mov eax, Ordinal_200
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.ounter
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a8100
mov eax, Ordinal_200
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x140573158]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a8130
mov eax, 0x7d
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x69
je 0x1403a8192
cmp al, 0x74
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.ential
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a8170
mov eax, 0x68
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.nt_format
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0xbd
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x65
je 0x1403a82bd
cmp al, 0x69
je 0x1403a8232
cmp al, 0x6f
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 3]
cmp al, 0x70
je 0x1403a81fe
cmp al, 0x76
jne case.0x1403a6a45.51
add rdx, 4
lea rcx, str.ider_name
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x108
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erties
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a8210
mov eax, 4
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x6d
je 0x1403a828c
cmp al, 0x76
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1403a8282
cmp al, 0x5f
jne case.0x1403a6a45.51
xor eax, eax
lea r8, [0x14057318c]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a8260
mov eax, 0xaa
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_211
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
mov eax, 0xf8
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x64
je 0x1403a82fe
cmp al, 0x66
jne case.0x1403a6a45.51
mov eax, 0x69
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, 0x78
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
mov eax, 0x7e
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.iction_resistance
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x57
add rsp, 0x28
ret
mov eax, 0x62
cmp al, byte [rdx + 2]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
mov eax, 0xd4
add rsp, 0x28
ret
mov eax, 0x82
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x79
ja case.0x1403a6a45.51
movzx eax, byte [r8 + rax + 0x3aa398]
mov ecx, dword [r8 + rax*4 + 0x3aa37c]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0xfc
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0xfd
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, [0x140573050]
nop word [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a83b0
mov eax, reloc.WLDAP32.dll_Ordinal_200
add rsp, 0x28
ret
mov eax, Ordinal_200
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0xbe
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0xbf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1403a8aa5
cmp al, 0x61
je 0x1403a8a25
cmp al, 0x65
je 0x1403a8872
cmp al, 0x6f
je 0x1403a8844
cmp al, 0x73
jne case.0x1403a6a45.51
cmp byte [rcx + 2], 0x61
jne case.0x1403a6a45.51
cmp byte [rcx + 3], 0x2d
jne case.0x1403a6a45.51
movsx ecx, byte [rcx + 4]
sub ecx, 0x63
je 0x1403a86fe
sub ecx, 1
je 0x1403a86dc
sub ecx, 1
je 0x1403a859a
cmp ecx, 1
jne case.0x1403a6a45.51
cmp byte [rdx + 5], 0x61
jne case.0x1403a6a45.51
cmp byte [rdx + 6], 0x63
jne case.0x1403a6a45.51
cmp byte [rdx + 7], 0x74
jne case.0x1403a6a45.51
cmp byte [rdx + 8], 0x6f
jne case.0x1403a6a45.51
cmp byte [rdx + 9], 0x72
jne case.0x1403a6a45.51
movsx rax, byte [rdx + 0xa]
cmp eax, 0x39
ja case.0x1403a6a45.51
movzx eax, byte [r8 + rax + 0x3aa440]
mov ecx, dword [r8 + rax*4 + 0x3aa414]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 0xb]
test al, al
je 0x1403a84e6
cmp al, 0x30
jne case.0x1403a6a45.51
cmp byte [rdx + 0xc], 0
jne case.0x1403a6a45.51
mov eax, 0xef
add rsp, 0x28
ret
mov eax, 0xee
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1403a6a45.51
mov eax, 0xf0
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1403a6a45.51
mov eax, 0xf1
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1403a6a45.51
mov eax, 0xf2
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1403a6a45.51
mov eax, 0xf3
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1403a6a45.51
mov eax, 0xf4
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1403a6a45.51
mov eax, 0xf5
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1403a6a45.51
mov eax, 0xf6
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1403a6a45.51
mov eax, 0xf7
add rsp, 0x28
ret
mov eax, 0xed
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x78
jne case.0x1403a6a45.51
cmp byte [rdx + 6], 0x70
jne case.0x1403a6a45.51
cmp byte [rdx + 7], 0x6f
jne case.0x1403a6a45.51
cmp byte [rdx + 8], 0x6e
jne case.0x1403a6a45.51
cmp byte [rdx + 9], 0x65
jne case.0x1403a6a45.51
cmp byte [rdx + 0xa], 0x6e
jne case.0x1403a6a45.51
cmp byte [rdx + 0xb], 0x74
jne case.0x1403a6a45.51
movsx rax, byte [rdx + 0xc]
cmp eax, 0x39
ja case.0x1403a6a45.51
movzx eax, byte [r8 + rax + 0x3aa4a8]
mov ecx, dword [r8 + rax*4 + 0x3aa47c]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 0xd]
test al, al
je 0x1403a8628
cmp al, 0x30
jne case.0x1403a6a45.51
cmp byte [rdx + 0xe], 0
jne case.0x1403a6a45.51
mov eax, 0xe4
add rsp, 0x28
ret
mov eax, 0xe3
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1403a6a45.51
mov eax, 0xe5
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1403a6a45.51
mov eax, 0xe6
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1403a6a45.51
mov eax, 0xe7
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1403a6a45.51
mov eax, 0xe8
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1403a6a45.51
mov eax, 0xe9
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1403a6a45.51
mov eax, 0xea
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1403a6a45.51
mov eax, 0xeb
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1403a6a45.51
mov eax, 0xec
add rsp, 0x28
ret
mov eax, 0xe2
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.erive_from_pq
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0xe0
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x6f
jne case.0x1403a6a45.51
cmp byte [rdx + 6], 0x65
jne case.0x1403a6a45.51
cmp byte [rdx + 7], 0x66
jne case.0x1403a6a45.51
cmp byte [rdx + 8], 0x66
jne case.0x1403a6a45.51
cmp byte [rdx + 9], 0x69
jne case.0x1403a6a45.51
cmp byte [rdx + 0xa], 0x63
jne case.0x1403a6a45.51
cmp byte [rdx + 0xb], 0x69
jne case.0x1403a6a45.51
cmp byte [rdx + 0xc], 0x65
jne case.0x1403a6a45.51
cmp byte [rdx + 0xd], 0x6e
jne case.0x1403a6a45.51
cmp byte [rdx + 0xe], 0x74
jne case.0x1403a6a45.51
movsx rax, byte [rdx + 0xf]
cmp eax, 0x39
ja case.0x1403a6a45.51
movzx eax, byte [r8 + rax + 0x3aa510]
mov ecx, dword [r8 + rax*4 + 0x3aa4e4]
add rcx, r8
jmp rcx
cmp byte [rdx + 0x10], 0
jne case.0x1403a6a45.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1403a6a45.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1403a6a45.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1403a6a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1403a6a45.51
mov eax, 0xda
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1403a6a45.51
mov eax, 0xdb
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1403a6a45.51
mov eax, 0xdc
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1403a6a45.51
mov eax, 0xdd
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1403a6a45.51
mov eax, 0xde
add rsp, 0x28
ret
mov eax, Ordinal_217
add rsp, 0x28
ret
xor eax, eax
lea r8, str.unds
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a8850
mov eax, getservbyname
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x61
je 0x1403a89b2
cmp al, 0x66
je 0x1403a8982
cmp al, 0x73
jne case.0x1403a6a45.51
cmp byte [rcx + 3], 0x65
jne case.0x1403a6a45.51
cmp byte [rcx + 4], 0x65
jne case.0x1403a6a45.51
cmp byte [rcx + 5], 0x64
jne case.0x1403a6a45.51
cmp byte [rcx + 6], 0x5f
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 7]
cmp al, 0x63
je 0x1403a8953
cmp al, 0x72
je 0x1403a8928
cmp al, 0x74
jne case.0x1403a6a45.51
cmp byte [rcx + 8], 0x69
jne case.0x1403a6a45.51
cmp byte [rcx + 9], 0x6d
jne case.0x1403a6a45.51
cmp byte [rcx + 0xa], 0x65
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 0xb]
test al, al
je 0x1403a891e
cmp al, 0x5f
jne case.0x1403a6a45.51
add rdx, 0xc
lea rcx, str.interval
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x5c
add rsp, 0x28
ret
mov eax, 0x5b
add rsp, 0x28
ret
xor eax, eax
lea r8, str.equests
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a8931
mov eax, 0x5a
add rsp, 0x28
ret
lea r8, [rcx + 8]
xor eax, eax
lea rdx, str.ounter
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a8960
mov eax, 0x59
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erence
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a8990
mov eax, 0xa5
add rsp, 0x28
ret
cmp byte [rcx + 3], 0x64
jne case.0x1403a6a45.51
cmp byte [rcx + 4], 0x5f
jne case.0x1403a6a45.51
movsx ecx, byte [rcx + 5]
sub ecx, 0x61
je 0x1403a89fa
cmp ecx, 1
jne case.0x1403a6a45.51
add rdx, 6
lea rcx, str.uffer_len
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x9a
add rsp, 0x28
ret
xor eax, eax
lea r8, str.head
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a8a03
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6e
jne case.0x1403a6a45.51
cmp byte [rcx + 3], 0x64
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 4]
cmp al, 0x6b
je 0x1403a8a74
cmp al, 0x6f
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.m_data
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a8a52
mov eax, 0x58
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rcx + 5]
jne case.0x1403a6a45.51
mov eax, 0x79
cmp al, byte [rcx + 6]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rcx + 7]
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_gethostbyname
add rsp, 0x28
ret
mov eax, 0x75
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9f
cmp eax, 0x14
ja case.0x1403a6a45.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x3aa54c]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 2]
cmp al, 0x66
je 0x1403a8b5d
cmp al, 0x6c
je 0x1403a8b08
cmp al, 0x76
jne case.0x1403a6a45.51
add rdx, 3
lea rcx, str.e_parameters
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x5f
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1403a8b53
cmp al, 0x6c
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x1403a6a45.51
mov eax, 0xf9
add rsp, 0x28
ret
mov eax, 0x7f
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.eprime_generator
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0xa9
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
sub ecx, 0x63
je 0x1403a8c25
sub ecx, 2
je 0x1403a8c02
sub ecx, 0xd
je 0x1403a8bd2
cmp ecx, 1
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.sion_id
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a8bb0
mov eax, 0x85
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x140573230]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a8be0
mov eax, 0x121
add rsp, 0x28
ret
mov eax, 0x64
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, 0x84
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x72
je 0x1403a8ce2
cmp al, 0x75
jne case.0x1403a6a45.51
cmp byte [rdx + 4], 0x72
jne case.0x1403a6a45.51
cmp byte [rdx + 5], 0x69
jne case.0x1403a6a45.51
cmp byte [rdx + 6], 0x74
jne case.0x1403a6a45.51
cmp byte [rdx + 7], 0x79
jne case.0x1403a6a45.51
cmp byte [rdx + 8], 0x2d
jne case.0x1403a6a45.51
movsx ecx, byte [rdx + 9]
sub ecx, 0x62
je 0x1403a8cb2
cmp ecx, 1
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.hecks
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 9]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a8c90
mov eax, 0x10c
add rsp, 0x28
ret
lea r8, [rdx + 0xa]
xor eax, eax
lea rdx, [0x140573050]
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a8cc0
mov eax, 0x104
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
mov eax, 0x83
add rsp, 0x28
ret
mov eax, 0x7a
cmp al, byte [rdx + 2]
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, 0x4a
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x140573240]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a8d50
mov eax, reloc.WS2_32.dll_getservbyname
add rsp, 0x28
ret
xor eax, eax
lea r8, str.l3_ms
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a8d80
mov eax, Ordinal_79
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x2d
je 0x1403a8e83
cmp al, 0x61
je 0x1403a8e32
cmp al, 0x72
jne case.0x1403a6a45.51
cmp byte [rdx + 3], 0x65
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 4]
cmp al, 0x61
je 0x1403a8e03
cmp al, 0x6e
jne case.0x1403a6a45.51
xor eax, eax
lea r8, [0x140573260]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a8de1
mov eax, 0x115
add rsp, 0x28
ret
xor eax, eax
lea r8, str.m_mac
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a8e10
mov eax, reloc.WS2_32.dll___WSAFDIsSet
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 4]
cmp al, 0x65
je 0x1403a8e6f
cmp al, 0x75
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
mov eax, 0x110
add rsp, 0x28
ret
cmp byte [rdx + 5], 0
jne case.0x1403a6a45.51
mov eax, 0x114
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x64
je 0x1403a8f02
cmp al, 0x70
je 0x1403a8ed2
cmp al, 0x74
jne case.0x1403a6a45.51
lea r8, [rdx + 4]
xor eax, eax
lea rdx, [0x140572f04]
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a8eb0
mov eax, 0x10f
add rsp, 0x28
ret
xor eax, eax
lea r8, str.hase
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a8ee0
mov eax, 0x10e
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x14057324c]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a8f10
mov eax, 0x10d
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x62
je 0x1403a8fd2
cmp al, 0x70
jne case.0x1403a6a45.51
cmp byte [rdx + 3], al
jne case.0x1403a6a45.51
cmp byte [rdx + 4], 0x2d
jne case.0x1403a6a45.51
cmp byte [rdx + 5], al
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 6]
cmp al, 0x72
je 0x1403a8fa2
cmp al, 0x75
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.binfo
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 6]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a8f80
mov eax, Ordinal_143
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ivinfo
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 6]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a8fb0
mov eax, Ordinal_143
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ject
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a8fe0
mov eax, 0x122
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9f
cmp eax, 0x18
ja case.0x1403a6a45.51
cdqe
movzx eax, byte [r8 + rax + 0x3aa5bc]
mov ecx, dword [r8 + rax*4 + 0x3aa5a0]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0x67
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1403a9075
cmp al, 0x6c
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
mov eax, Ordinal_35
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_33
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1403a6a45.51
cmp byte [rdx + 3], 0x74
jne case.0x1403a6a45.51
cmp byte [rdx + 4], 0x5f
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 5]
cmp al, 0x65
je 0x1403a90e2
cmp al, 0x6e
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.once
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a90c0
mov eax, 0x117
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ntropy
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a90f0
mov eax, 0x116
add rsp, 0x28
ret
xor eax, eax
lea r8, str.reads
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a9120
mov eax, 0x88
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 3]
cmp al, 0x2d
je 0x1403a94ce
cmp al, 0x31
je 0x1403a92b3
cmp al, 0x61
je 0x1403a9254
cmp al, 0x69
je 0x1403a91a2
cmp al, 0x74
jne case.0x1403a6a45.51
xor eax, eax
lea r8, [0x140573364]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a9180
mov eax, 0x98
add rsp, 0x28
ret
cmp byte [rdx + 4], 0x76
jne case.0x1403a6a45.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x66
je 0x1403a9229
sub ecx, 1
je 0x1403a91f8
cmp ecx, 2
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
mov eax, 0x76
cmp al, byte [rdx + 7]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 8]
jne case.0x1403a6a45.51
mov eax, Ordinal_41
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 7]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 8]
jne case.0x1403a6a45.51
mov eax, Ordinal_41
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ixed
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a9232
mov eax, Ordinal_41
add rsp, 0x28
ret
cmp byte [rdx + 4], 0x61
jne case.0x1403a6a45.51
cmp byte [rdx + 5], 0x64
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 6]
test al, al
je 0x1403a92a9
cmp al, 0x70
jne case.0x1403a6a45.51
mov eax, 0x61
cmp al, byte [rdx + 7]
jne case.0x1403a6a45.51
mov eax, 0x64
cmp al, byte [rdx + 8]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 9]
jne case.0x1403a6a45.51
mov eax, 0x24
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_35
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x2d
je 0x1403a94ac
cmp al, 0x6d
jne case.0x1403a6a45.51
cmp byte [rdx + 5], 0x75
jne case.0x1403a6a45.51
cmp byte [rdx + 6], 0x6c
jne case.0x1403a6a45.51
cmp byte [rdx + 7], 0x74
jne case.0x1403a6a45.51
cmp byte [rdx + 8], 0x69
jne case.0x1403a6a45.51
cmp byte [rdx + 9], 0x5f
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 0xa]
cmp al, 0x61
je 0x1403a944a
cmp al, 0x65
je 0x1403a93c4
cmp al, 0x69
je 0x1403a93a2
cmp al, 0x6d
jne case.0x1403a6a45.51
cmp byte [rdx + 0xb], 0x61
jne case.0x1403a6a45.51
cmp byte [rdx + 0xc], 0x78
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 0xd]
cmp al, 0x62
je 0x1403a9372
cmp al, 0x73
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.ndfrag
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a9350
mov eax, 0x40
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ufsz
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a9380
mov eax, 0x3f
add rsp, 0x28
ret
add rdx, 0xb
lea rcx, str.nterleave
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x3e
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x6e
jne case.0x1403a6a45.51
cmp byte [rdx + 0xc], 0x63
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 0xd]
test al, al
je 0x1403a9440
cmp al, 0x69
je 0x1403a941d
cmp al, 0x6c
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rdx + 0xe]
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 0xf]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 0x10]
jne case.0x1403a6a45.51
mov eax, 0x3d
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rdx + 0xe]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 0xf]
jne case.0x1403a6a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_60
add rsp, 0x28
ret
mov eax, Ordinal_60
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x61
jne case.0x1403a6a45.51
cmp byte [rdx + 0xc], 0x64
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 0xd]
test al, al
je 0x1403a94a2
cmp al, 0x70
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.acklen
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a9480
mov eax, Ordinal_60
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_gethostname
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.prf_ems_check
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x111
add rsp, 0x28
ret
movsx eax, byte [rdx + 4]
add eax, 0xffffff9d
cmp eax, 0x13
ja case.0x1403a6a45.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x3aa5d8]
add rcx, r8
jmp rcx
add rdx, 5
lea rcx, str.lient_version
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 8
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ata_size
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0xa1
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x72
jne case.0x1403a6a45.51
cmp byte [rdx + 6], 0x6f
jne case.0x1403a6a45.51
cmp byte [rdx + 7], 0x75
jne case.0x1403a6a45.51
cmp byte [rdx + 8], 0x70
jne case.0x1403a6a45.51
cmp byte [rdx + 9], 0x2d
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 0xa]
cmp al, 0x61
je 0x1403a9666
cmp al, 0x69
je 0x1403a960c
cmp al, 0x6e
je 0x1403a95b2
cmp al, 0x73
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.ec_bits
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xa]
jne case.0x1403a6a45.51
cmp rax, 8
jne 0x1403a9590
mov eax, reloc.WS2_32.dll_send
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x61
jne case.0x1403a6a45.51
cmp byte [rdx + 0xc], 0x6d
jne case.0x1403a6a45.51
cmp byte [rdx + 0xd], 0x65
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 0xe]
test al, al
je 0x1403a9602
cmp al, 0x2d
jne case.0x1403a6a45.51
add rdx, 0xf
lea rcx, str.internal
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_select
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_recvfrom
add rsp, 0x28
ret
movzx eax, byte [rdx + 0xb]
cmp al, 0x64
je 0x1403a9652
cmp al, 0x73
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str._kem
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xb]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a9630
mov eax, reloc.WS2_32.dll_inet_ntoa
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_inet_addr
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rdx + 0xb]
jne case.0x1403a6a45.51
mov eax, 0x67
cmp al, byte [rdx + 0xc]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 0xd]
jne case.0x1403a6a45.51
mov eax, 0xa
add rsp, 0x28
ret
movzx eax, byte [rdx + 5]
cmp al, 0x61
je 0x1403a9766
cmp al, 0x69
je 0x1403a96e2
cmp al, 0x75
jne case.0x1403a6a45.51
xor eax, eax
lea r8, [0x1405732dc]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a96c0
mov eax, reloc.WS2_32.dll_getservbyport
add rsp, 0x28
ret
cmp byte [rdx + 6], 0x6e
jne case.0x1403a6a45.51
cmp byte [rdx + 7], 0x2d
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 8]
cmp al, 0x64
je 0x1403a9737
cmp al, 0x74
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 9]
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 0xa]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 0xb]
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_recv
add rsp, 0x28
ret
lea r8, [rdx + 9]
xor eax, eax
lea rdx, [0x1405732d8]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a9744
mov eax, reloc.WS2_32.dll_ntohs
add rsp, 0x28
ret
movzx eax, byte [rdx + 6]
cmp al, 0x63
je 0x1403a97f4
cmp al, 0x78
jne case.0x1403a6a45.51
cmp byte [rdx + 7], 0x2d
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 8]
cmp al, 0x64
je 0x1403a97c5
cmp al, 0x74
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 9]
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 0xa]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 0xb]
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_ntohl
add rsp, 0x28
ret
lea r8, [rdx + 9]
xor eax, eax
lea rdx, [0x1405732d8]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a97d2
mov eax, reloc.WS2_32.dll_listen
add rsp, 0x28
ret
movzx eax, byte [rdx + 7]
test al, al
je 0x1403a9833
cmp al, 0x2d
jne case.0x1403a6a45.51
lea r8, [rdx + 8]
xor eax, eax
lea rdx, str.size
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 5
jne 0x1403a9811
mov eax, 0x42
add rsp, 0x28
ret
mov eax, 0x41
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.egotiated_version
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 9
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x69
jne case.0x1403a6a45.51
cmp byte [rdx + 6], 0x67
jne case.0x1403a6a45.51
cmp byte [rdx + 7], 0x61
jne case.0x1403a6a45.51
cmp byte [rdx + 8], 0x6c
jne case.0x1403a6a45.51
cmp byte [rdx + 9], 0x67
jne case.0x1403a6a45.51
cmp byte [rdx + 0xa], 0x2d
jne case.0x1403a6a45.51
movsx eax, byte [rdx + 0xb]
add eax, 0xffffff9d
cmp eax, 0x10
ja case.0x1403a6a45.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x3aa628]
add rcx, r8
jmp rcx
add rdx, 0xc
lea rcx, str.ode_point
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_sendto
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0x61
jne case.0x1403a6a45.51
cmp byte [rdx + 0xd], 0x73
jne case.0x1403a6a45.51
cmp byte [rdx + 0xe], 0x68
jne case.0x1403a6a45.51
cmp byte [rdx + 0xf], 0x2d
jne case.0x1403a6a45.51
movsx ecx, byte [rdx + 0x10]
sub ecx, 0x6e
je 0x1403a9947
cmp ecx, 1
jne case.0x1403a6a45.51
mov eax, 0x69
cmp al, byte [rdx + 0x11]
jne case.0x1403a6a45.51
mov eax, 0x64
cmp al, byte [rdx + 0x12]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 0x13]
jne case.0x1403a6a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_22
add rsp, 0x28
ret
lea r8, [rdx + 0x11]
xor eax, eax
lea rdx, [0x140573304]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a9954
mov eax, reloc.WS2_32.dll_setsockopt
add rsp, 0x28
ret
add rdx, 0xc
lea rcx, str.ana_name
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_socket
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0x65
jne case.0x1403a6a45.51
cmp byte [rdx + 0xd], 0x79
jne case.0x1403a6a45.51
cmp byte [rdx + 0xe], 0x74
jne case.0x1403a6a45.51
cmp byte [rdx + 0xf], 0x79
jne case.0x1403a6a45.51
cmp byte [rdx + 0x10], 0x70
jne case.0x1403a6a45.51
cmp byte [rdx + 0x11], 0x65
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 0x12]
test al, al
je 0x1403a9a12
cmp al, 0x2d
jne case.0x1403a6a45.51
xor eax, eax
lea r8, [0x140573314]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0x12]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a99f0
mov eax, Ordinal_26
add rsp, 0x28
ret
mov eax, Ordinal_26
add rsp, 0x28
ret
lea r8, [rdx + 0xc]
xor eax, eax
lea rdx, [0x140573304]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a9a30
mov eax, reloc.WLDAP32.dll_Ordinal_26
add rsp, 0x28
ret
mov eax, 0x69
cmp al, byte [rdx + 0xc]
jne case.0x1403a6a45.51
mov eax, 0x64
cmp al, byte [rdx + 0xd]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 0xe]
jne case.0x1403a6a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_27
add rsp, 0x28
ret
movzx eax, byte [rdx + 0xc]
cmp al, 0x65
je 0x1403a9b22
cmp al, 0x69
jne case.0x1403a6a45.51
cmp byte [rdx + 0xd], 0x67
jne case.0x1403a6a45.51
cmp byte [rdx + 0xe], 0x2d
jne case.0x1403a6a45.51
movsx ecx, byte [rdx + 0xf]
sub ecx, 0x6e
je 0x1403a9aee
cmp ecx, 1
jne case.0x1403a6a45.51
mov eax, 0x69
cmp al, byte [rdx + 0x10]
jne case.0x1403a6a45.51
mov eax, 0x64
cmp al, byte [rdx + 0x11]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 0x12]
jne case.0x1403a6a45.51
mov eax, reloc.WLDAP32.dll_Ordinal_30
add rsp, 0x28
ret
lea r8, [rdx + 0x10]
xor eax, eax
lea rdx, [0x140573304]
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a9b00
mov eax, Ordinal_30
add rsp, 0x28
ret
xor eax, eax
lea r8, str.c_bits
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xc]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a9b30
mov eax, Ordinal_30
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ersion
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a9b60
mov eax, 0x43
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1403a6a45.51
mov eax, 0xb3
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSASetLastError
cmp al, byte [rdx + 2]
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, 0x86
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x6b
je 0x1403a9d65
cmp al, 0x70
je 0x1403a9d43
cmp al, 0x73
jne case.0x1403a6a45.51
cmp byte [rcx + 2], 0x65
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 3]
cmp al, 0x2d
je 0x1403a9c66
cmp al, 0x5f
jne case.0x1403a6a45.51
movsx ecx, byte [rcx + 4]
sub ecx, 0x64
je 0x1403a9c44
cmp ecx, 1
jne case.0x1403a6a45.51
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x1403a6a45.51
mov eax, 0x99
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.erivation_function
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x5d
add rsp, 0x28
ret
movsx ecx, byte [rcx + 4]
sub ecx, 0x62
je 0x1403a9d14
sub ecx, 1
je 0x1403a9cf2
sub ecx, 8
je 0x1403a9cc5
sub ecx, 1
je 0x1403a9cb1
cmp ecx, 7
jne case.0x1403a6a45.51
add rdx, 5
lea rcx, str.eparator
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x77
add rsp, 0x28
ret
cmp byte [rdx + 5], 0
jne case.0x1403a6a45.51
mov eax, 0x76
add rsp, 0x28
ret
xor eax, eax
lea r8, str.eybits
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1403a6a45.51
cmp rax, 7
jne 0x1403a9cd0
mov eax, reloc.WLDAP32.dll_Ordinal_143
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ofactor_flag
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x105
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x140573050]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1403a6a45.51
cmp rax, 4
jne 0x1403a9d21
mov eax, 0x45
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.dated_iv
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1403a6a45.51
mov eax, 0x44
add rsp, 0x28
ret
mov eax, WSASetLastError
cmp al, byte [rcx + 2]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rcx + 3]
jne case.0x1403a6a45.51
mov eax, 0x89
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x1403a9dc3
cmp al, 0x65
jne case.0x1403a6a45.51
xor eax, eax
lea r8, str.rsion
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a9da1
mov eax, WSASetLastError
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6c
jne case.0x1403a6a45.51
cmp byte [rcx + 3], 0x69
jne case.0x1403a6a45.51
cmp byte [rcx + 4], 0x64
jne case.0x1403a6a45.51
cmp byte [rcx + 5], 0x61
jne case.0x1403a6a45.51
cmp byte [rcx + 6], 0x74
jne case.0x1403a6a45.51
cmp byte [rcx + 7], 0x65
jne case.0x1403a6a45.51
cmp byte [rcx + 8], 0x2d
jne case.0x1403a6a45.51
movzx eax, byte [rcx + 9]
cmp al, 0x67
je 0x1403a9e72
cmp al, 0x6c
je 0x1403a9e44
cmp al, 0x70
jne case.0x1403a6a45.51
mov eax, WSACleanup
cmp al, byte [rcx + 0xa]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rcx + 0xb]
jne case.0x1403a6a45.51
mov eax, 0xcb
add rsp, 0x28
ret
xor eax, eax
lea r8, str.egacy
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 9]
jne case.0x1403a6a45.51
cmp rax, 6
jne 0x1403a9e50
mov eax, 0xca
add rsp, 0x28
ret
cmp byte [rcx + 0xa], 0
jne case.0x1403a6a45.51
mov eax, 0xc9
add rsp, 0x28
ret
movsx ecx, byte [rcx + 1]
sub ecx, 0x63
je 0x1403a9fbe
sub ecx, 0xc
je 0x1403a9f69
sub ecx, 1
je 0x1403a9f21
sub ecx, 1
je 0x1403a9ed9
cmp ecx, 3
jne case.0x1403a6a45.51
add rdx, 2
lea rcx, str.s_standard
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
mov ecx, 0xffffffff
mov edx, 0x46
cmove ecx, edx
mov eax, ecx
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
test ecx, ecx
je 0x1403a9f17
sub ecx, 0x31
je 0x1403a9f03
cmp ecx, 1
jne case.0x1403a6a45.51
cmp byte [rdx + 3], 0
jne case.0x1403a6a45.51
mov eax, 0x103
add rsp, 0x28
ret
cmp byte [rdx + 3], 0
jne case.0x1403a6a45.51
mov eax, 0x102
add rsp, 0x28
ret
mov eax, 0x101
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
test ecx, ecx
je 0x1403a9f5f
sub ecx, 0x31
je 0x1403a9f4b
cmp ecx, 1
jne case.0x1403a6a45.51
cmp byte [rdx + 3], 0
jne case.0x1403a6a45.51
mov eax, 0x100
add rsp, 0x28
ret
cmp byte [rdx + 3], 0
jne case.0x1403a6a45.51
mov eax, 0xff
add rsp, 0x28
ret
mov eax, 0xfe
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x1403a6a45.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1403a9fb4
cmp al, 0x6c
jne case.0x1403a6a45.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1403a6a45.51
mov eax, WSASetLastError
cmp al, byte [rdx + 5]
jne case.0x1403a6a45.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1403a6a45.51
mov eax, Ordinal_79
add rsp, 0x28
ret
mov eax, Ordinal_79
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.ghash
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne 0x1403a9fe9
cmp rax, 6
jne 0x1403a9fd0
cmp cl, byte [r8 + rax - 1]
mov eax, 0x87
mov ecx, 0xffffffff
cmove ecx, eax
mov eax, ecx
add rsp, 0x28
ret
mov eax, 0xffffffff
add rsp, 0x28
ret