Function at 0x1400055d0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x1560]
mov eax, 0x1660
call fcn.1400820a0
sub rsp, rax
mov rax, qword [0x1400a3080]
xor rax, rsp
mov qword [rbp + 0x1550], rax
xor edx, edx
mov cl, reloc.WS2_32.dll_WSAStartup
call fcn.140002c90
mov byte [rsp + 0x38], al
mov edx, 1
mov cl, 0x75
call fcn.140002c90
mov byte [rsp + 0x39], al
mov edx, 2
mov cl, reloc.WS2_32.dll_WSASetLastError
call fcn.140002c90
mov byte [rsp + 0x3a], al
mov edx, 3
mov cl, 0x65
call fcn.140002c90
mov byte [rsp + 0x3b], al
mov edx, 4
mov cl, WSAStartup
call fcn.140002c90
mov byte [rsp + 0x3c], al
xor eax, eax
mov byte [rsp + 0x3d], al
xor edi, edi
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x38]
add rcx, rax
lea eax, [rdx + 0x13]
xor byte [rcx], al
inc edx
cmp edx, 5
jb 0x140005670
mov byte [rsp + 0x3d], dil
lea rcx, [rsp + 0x38]
call qword [sym.imp.VMProtectSDK64.dll_VMProtectBeginUltra]
mov ecx, 0x58
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x420], ax
mov ecx, 0x65
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x422], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x424], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x426], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x428], ax
mov ecx, 0x33
lea edx, [rcx - 0x2e]
call fcn.140001db0
mov word [rbp + 0x42a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_50
lea edx, [rcx - 0x2c]
call fcn.140001db0
mov word [rbp + 0x42c], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0x42e], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x430], ax
mov ecx, 0x78
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x432], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x434], ax
xor ecx, ecx
lea edx, [rcx + 0xb]
call fcn.140001db0
mov word [rbp + 0x436], ax
mov edx, ntohs
movzx ecx, word [str.Xenos64.exe]
call fcn.140001db0
mov word [rbp + 0x438], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x1400937b2]
call fcn.140001db0
mov word [rbp + 0x43a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x1400937b4]
call fcn.140001db0
mov word [rbp + 0x43c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x43e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x440], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x1400937ba]
call fcn.140001db0
mov word [rbp + 0x442], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x1400937bc]
call fcn.140001db0
mov word [rbp + 0x444], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x446], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x1400937c0]
call fcn.140001db0
mov word [rbp + 0x448], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x1400937c2]
call fcn.140001db0
mov word [rbp + 0x44a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x1400937c4]
call fcn.140001db0
mov word [rbp + 0x44c], ax
xor eax, eax
mov word [rbp + 0x44e], ax
mov edx, edi
mov ebx, 0x133
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x420]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x17
jb 0x1400058a0
mov word [rbp + 0x44e], di
lea rax, [rbp + 0x420]
mov qword [rbp + 0x1320], rax
mov ecx, 0x58
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x450], ax
mov ecx, 0x65
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x452], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x454], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x456], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x458], ax
mov ecx, gethostname
lea edx, [rcx - 0x31]
call fcn.140001db0
mov word [rbp + 0x45a], ax
mov ecx, 0x34
lea edx, [rcx - 0x2e]
call fcn.140001db0
mov word [rbp + 0x45c], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0x45e], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x460], ax
mov ecx, 0x78
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x462], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x464], ax
xor ecx, ecx
lea edx, [rcx + 0xb]
call fcn.140001db0
mov word [rbp + 0x466], ax
mov edx, ntohs
movzx ecx, word [str.ollydbg.exe]
call fcn.140001db0
mov word [rbp + 0x468], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x1400937ca]
call fcn.140001db0
mov word [rbp + 0x46a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x1400937cc]
call fcn.140001db0
mov word [rbp + 0x46c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x1400937ce]
call fcn.140001db0
mov word [rbp + 0x46e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x1400937d0]
call fcn.140001db0
mov word [rbp + 0x470], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x1400937d2]
call fcn.140001db0
mov word [rbp + 0x472], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x1400937d4]
call fcn.140001db0
mov word [rbp + 0x474], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x476], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x1400937d8]
call fcn.140001db0
mov word [rbp + 0x478], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x1400937da]
call fcn.140001db0
mov word [rbp + 0x47a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x1400937dc]
call fcn.140001db0
mov word [rbp + 0x47c], ax
xor eax, eax
mov word [rbp + 0x47e], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x450]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x17
jb 0x140005ad0
mov word [rbp + 0x47e], di
lea rax, [rbp + 0x450]
mov qword [rbp + 0x1328], rax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x2d0], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x2d2], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0x2d4], ax
mov ecx, 0x79
lea edx, [rcx - 0x76]
call fcn.140001db0
mov word [rbp + 0x2d6], ax
mov ecx, 0x64
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x2d8], ax
mov ecx, 0x62
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x2da], ax
mov ecx, 0x67
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x2dc], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0x2de], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x2e0], ax
mov ecx, 0x78
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x2e2], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x2e4], ax
xor ecx, ecx
lea edx, [rcx + 0xb]
call fcn.140001db0
mov word [rbp + 0x2e6], ax
mov edx, ntohs
movzx ecx, word [str.ProcessHacker.exe]
call fcn.140001db0
mov word [rbp + 0x2e8], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x1400937e2]
call fcn.140001db0
mov word [rbp + 0x2ea], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x2ec], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x1400937e6]
call fcn.140001db0
mov word [rbp + 0x2ee], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x1400937e8]
call fcn.140001db0
mov word [rbp + 0x2f0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x2f2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x2f4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x1400937ee]
call fcn.140001db0
mov word [rbp + 0x2f6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x1400937f0]
call fcn.140001db0
mov word [rbp + 0x2f8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x1400937f2]
call fcn.140001db0
mov word [rbp + 0x2fa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x1400937f4]
call fcn.140001db0
mov word [rbp + 0x2fc], ax
xor eax, eax
mov word [rbp + 0x2fe], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x2d0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x17
jb 0x140005d00
mov word [rbp + 0x2fe], di
lea rax, [rbp + 0x2d0]
mov qword [rbp + 0x1330], rax
mov ecx, 0x50
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xd40], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0xd42], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0xd44], ax
mov ecx, 0x63
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xd46], ax
mov ecx, 0x65
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0xd48], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0xd4a], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0xd4c], ax
mov ecx, 0x48
lea edx, [rcx - 0x41]
call fcn.140001db0
mov word [rbp + 0xd4e], ax
mov ecx, 0x61
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0xd50], ax
mov ecx, 0x63
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0xd52], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0xd54], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0xd56], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x66]
call fcn.140001db0
mov word [rbp + 0xd58], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x21]
call fcn.140001db0
mov word [rbp + 0xd5a], ax
mov ecx, 0x65
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0xd5c], ax
mov ecx, 0x78
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0xd5e], ax
mov ecx, 0x65
lea edx, [rcx - 0x55]
call fcn.140001db0
mov word [rbp + 0xd60], ax
xor ecx, ecx
lea edx, [rcx + 0x11]
call fcn.140001db0
mov word [rbp + 0xd62], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093804]
call fcn.140001db0
mov word [rbp + 0xd64], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093806]
call fcn.140001db0
mov word [rbp + 0xd66], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Dump_Fixer.exe]
call fcn.140001db0
mov word [rbp + 0xd68], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x14009380a]
call fcn.140001db0
mov word [rbp + 0xd6a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x14009380c]
call fcn.140001db0
mov word [rbp + 0xd6c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp + 0xd6e], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_45]
call fcn.140001db0
mov word [rbp + 0xd70], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093812]
call fcn.140001db0
mov word [rbp + 0xd72], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093814]
call fcn.140001db0
mov word [rbp + 0xd74], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093816]
call fcn.140001db0
mov word [rbp + 0xd76], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093818]
call fcn.140001db0
mov word [rbp + 0xd78], ax
mov edx, Ordinal_32
movzx ecx, word [0x14009381a]
call fcn.140001db0
mov word [rbp + 0xd7a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0xd7c], ax
mov edx, Ordinal_32
movzx ecx, word [0x14009381e]
call fcn.140001db0
mov word [rbp + 0xd7e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140093820]
call fcn.140001db0
mov word [rbp + 0xd80], ax
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx ecx, word [0x140093822]
call fcn.140001db0
mov word [rbp + 0xd82], ax
mov edx, Ordinal_35
movzx ecx, word [0x140093824]
call fcn.140001db0
mov word [rbp + 0xd84], ax
xor eax, eax
mov word [rbp + 0xd86], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xd40]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x23
jb 0x140006040
mov word [rbp + 0xd86], di
lea rax, [rbp + 0xd40]
mov qword [rbp + 0x1338], rax
mov ecx, 0x44
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x680], ax
mov ecx, 0x75
lea edx, [rcx - 0x74]
call fcn.140001db0
mov word [rbp + 0x682], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x684], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x686], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_45
lea edx, [rcx - 0x29]
call fcn.140001db0
mov word [rbp + 0x688], ax
mov ecx, 0x46
lea edx, [rcx - 0x41]
call fcn.140001db0
mov word [rbp + 0x68a], ax
mov ecx, 0x69
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x68c], ax
mov ecx, 0x78
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x68e], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x690], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0x692], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x24]
call fcn.140001db0
mov word [rbp + 0x694], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x696], ax
mov ecx, 0x78
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x698], ax
mov ecx, 0x65
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0x69a], ax
xor ecx, ecx
lea edx, [rcx + 0xe]
call fcn.140001db0
mov word [rbp + 0x69c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093826]
call fcn.140001db0
mov word [rbp + 0x69e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.kdstinker.exe]
call fcn.140001db0
mov word [rbp + 0x6a0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x14009382a]
call fcn.140001db0
mov word [rbp + 0x6a2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x6a4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x6a6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093830]
call fcn.140001db0
mov word [rbp + 0x6a8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093832]
call fcn.140001db0
mov word [rbp + 0x6aa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093834]
call fcn.140001db0
mov word [rbp + 0x6ac], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093836]
call fcn.140001db0
mov word [rbp + 0x6ae], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093838]
call fcn.140001db0
mov word [rbp + 0x6b0], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x6b2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x14009383c]
call fcn.140001db0
mov word [rbp + 0x6b4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x14009383e]
call fcn.140001db0
mov word [rbp + 0x6b6], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093840]
call fcn.140001db0
mov word [rbp + 0x6b8], ax
xor eax, eax
mov word [rbp + 0x6ba], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x680]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1d
jb 0x140006300
mov word [rbp + 0x6ba], di
lea rax, [rbp + 0x680]
mov qword [rbp + 0x1340], rax
mov ecx, WSAGetLastError
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x598], ax
mov ecx, 0x64
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x59a], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x59c], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x59e], ax
mov ecx, 0x69
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0x5a0], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0x5a2], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0x5a4], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x5a6], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0x5a8], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x25]
call fcn.140001db0
mov word [rbp + 0x5aa], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x5ac], ax
mov ecx, 0x78
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x5ae], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x5b0], ax
xor ecx, ecx
lea edx, [rcx + 0xd]
call fcn.140001db0
mov word [rbp + 0x5b2], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093844]
call fcn.140001db0
mov word [rbp + 0x5b4], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093846]
call fcn.140001db0
mov word [rbp + 0x5b6], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.tcpview.exe]
call fcn.140001db0
mov word [rbp + 0x5b8], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x14009384a]
call fcn.140001db0
mov word [rbp + 0x5ba], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp + 0x5bc], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x14009384e]
call fcn.140001db0
mov word [rbp + 0x5be], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093850]
call fcn.140001db0
mov word [rbp + 0x5c0], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093852]
call fcn.140001db0
mov word [rbp + 0x5c2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093854]
call fcn.140001db0
mov word [rbp + 0x5c4], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x5c6], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093858]
call fcn.140001db0
mov word [rbp + 0x5c8], ax
mov edx, Ordinal_26
movzx ecx, word [0x14009385a]
call fcn.140001db0
mov word [rbp + 0x5ca], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x14009385c]
call fcn.140001db0
mov word [rbp + 0x5cc], ax
xor eax, eax
mov word [rbp + 0x5ce], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x598]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1b
jb 0x140006590
mov word [rbp + 0x5ce], di
lea rax, [rbp + 0x598]
mov qword [rbp + 0x1348], rax
mov ecx, reloc.WS2_32.dll_WSACleanup
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x300], ax
mov ecx, 0x63
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x302], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x304], ax
mov ecx, 0x76
lea edx, [rcx - 0x73]
call fcn.140001db0
mov word [rbp + 0x306], ax
mov ecx, 0x69
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0x308], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x30a], ax
mov ecx, 0x77
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x30c], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0x30e], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x310], ax
mov ecx, 0x78
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x312], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x314], ax
xor ecx, ecx
lea edx, [rcx + 0xb]
call fcn.140001db0
mov word [rbp + 0x316], ax
mov edx, ntohs
movzx ecx, word [str.ImmunityDebugger.exe]
call fcn.140001db0
mov word [rbp + 0x318], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093862]
call fcn.140001db0
mov word [rbp + 0x31a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093864]
call fcn.140001db0
mov word [rbp + 0x31c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093866]
call fcn.140001db0
mov word [rbp + 0x31e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093868]
call fcn.140001db0
mov word [rbp + 0x320], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x14009386a]
call fcn.140001db0
mov word [rbp + 0x322], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x324], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x14009386e]
call fcn.140001db0
mov word [rbp + 0x326], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093870]
call fcn.140001db0
mov word [rbp + 0x328], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093872]
call fcn.140001db0
mov word [rbp + 0x32a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093874]
call fcn.140001db0
mov word [rbp + 0x32c], ax
xor eax, eax
mov word [rbp + 0x32e], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x300]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x17
jb 0x1400067c0
mov word [rbp + 0x32e], di
lea rax, [rbp + 0x300]
mov qword [rbp + 0x1350], rax
mov ecx, 0x49
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xed0], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0xed2], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0xed4], ax
mov ecx, 0x75
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0xed6], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0xed8], ax
mov ecx, 0x69
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xeda], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0xedc], ax
mov ecx, 0x79
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0xede], ax
mov ecx, 0x44
lea edx, [rcx - 0x3c]
call fcn.140001db0
mov word [rbp + 0xee0], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0xee2], ax
mov ecx, 0x62
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0xee4], ax
mov ecx, 0x75
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0xee6], ax
mov ecx, 0x67
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0xee8], ax
mov ecx, 0x67
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0xeea], ax
mov ecx, 0x65
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0xeec], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0xeee], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x1e]
call fcn.140001db0
mov word [rbp + 0xef0], ax
mov ecx, 0x65
lea edx, [rcx - 0x54]
call fcn.140001db0
mov word [rbp + 0xef2], ax
mov ecx, 0x78
lea edx, [rcx - 0x66]
call fcn.140001db0
mov word [rbp + 0xef4], ax
mov ecx, 0x65
lea edx, [rcx - 0x52]
call fcn.140001db0
mov word [rbp + 0xef6], ax
xor ecx, ecx
lea edx, [rcx + 0x14]
call fcn.140001db0
mov word [rbp + 0xef8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x14009388a]
call fcn.140001db0
mov word [rbp + 0xefa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x14009388c]
call fcn.140001db0
mov word [rbp + 0xefc], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x14009388e]
call fcn.140001db0
mov word [rbp + 0xefe], ax
mov edx, Ordinal_26
movzx ecx, word [str.Wireshark.exe]
call fcn.140001db0
mov word [rbp + 0xf00], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093892]
call fcn.140001db0
mov word [rbp + 0xf02], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093894]
call fcn.140001db0
mov word [rbp + 0xf04], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093896]
call fcn.140001db0
mov word [rbp + 0xf06], ax
mov edx, Ordinal_32
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0xf08], ax
mov edx, Ordinal_32
movzx ecx, word [0x14009389a]
call fcn.140001db0
mov word [rbp + 0xf0a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x14009389c]
call fcn.140001db0
mov word [rbp + 0xf0c], ax
mov edx, Ordinal_32
movzx ecx, word [0x14009389e]
call fcn.140001db0
mov word [rbp + 0xf0e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x1400938a0]
call fcn.140001db0
mov word [rbp + 0xf10], ax
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0xf12], ax
mov edx, Ordinal_35
movzx ecx, word [0x1400938a4]
call fcn.140001db0
mov word [rbp + 0xf14], ax
mov edx, reloc.WLDAP32.dll_Ordinal_35
movzx ecx, word [0x1400938a6]
call fcn.140001db0
mov word [rbp + 0xf16], ax
mov edx, 0x24
movzx ecx, word [0x1400938a8]
call fcn.140001db0
mov word [rbp + 0xf18], ax
mov edx, Ordinal_41
movzx ecx, word [0x1400938aa]
call fcn.140001db0
mov word [rbp + 0xf1a], ax
mov edx, Ordinal_41
movzx ecx, word [0x1400938ac]
call fcn.140001db0
mov word [rbp + 0xf1c], ax
mov edx, Ordinal_41
movzx ecx, word [0x1400938ae]
call fcn.140001db0
mov word [rbp + 0xf1e], ax
mov edx, Ordinal_41
movzx ecx, word [str.HookExplorer.exe]
call fcn.140001db0
mov word [rbp + 0xf20], ax
xor eax, eax
mov word [rbp + 0xf22], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xed0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x29
jb 0x140006b80
mov word [rbp + 0xf22], di
lea rax, [rbp + 0xed0]
mov qword [rbp + 0x1358], rax
mov ecx, 0x57
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x5d0], ax
mov ecx, 0x69
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x5d2], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x5d4], ax
mov ecx, 0x65
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x5d6], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x5d8], ax
mov ecx, 0x68
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x5da], ax
mov ecx, 0x61
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x5dc], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x5de], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x5e0], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x25]
call fcn.140001db0
mov word [rbp + 0x5e2], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x5e4], ax
mov ecx, 0x78
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x5e6], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x5e8], ax
xor ecx, ecx
lea edx, [rcx + 0xd]
call fcn.140001db0
mov word [rbp + 0x5ea], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x1400938ac]
call fcn.140001db0
mov word [rbp + 0x5ec], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x1400938ae]
call fcn.140001db0
mov word [rbp + 0x5ee], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.HookExplorer.exe]
call fcn.140001db0
mov word [rbp + 0x5f0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x5f2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x5f4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x1400938b6]
call fcn.140001db0
mov word [rbp + 0x5f6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x1400938b8]
call fcn.140001db0
mov word [rbp + 0x5f8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x1400938ba]
call fcn.140001db0
mov word [rbp + 0x5fa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp + 0x5fc], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x1400938be]
call fcn.140001db0
mov word [rbp + 0x5fe], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x600], ax
mov edx, Ordinal_26
movzx ecx, word [0x1400938c2]
call fcn.140001db0
mov word [rbp + 0x602], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x1400938c4]
call fcn.140001db0
mov word [rbp + 0x604], ax
xor eax, eax
mov word [rbp + 0x606], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x5d0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1b
jb 0x140006e10
mov word [rbp + 0x606], di
lea rax, [rbp + 0x5d0]
mov qword [rbp + 0x1360], rax
mov ecx, 0x48
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xa70], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0xa72], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0xa74], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xa76], ax
mov ecx, 0x45
lea edx, [rcx - 0x41]
call fcn.140001db0
mov word [rbp + 0xa78], ax
mov ecx, 0x78
lea edx, [rcx - 0x73]
call fcn.140001db0
mov word [rbp + 0xa7a], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0xa7c], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0xa7e], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xa80], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0xa82], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0xa84], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xa86], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x22]
call fcn.140001db0
mov word [rbp + 0xa88], ax
mov ecx, 0x65
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0xa8a], ax
mov ecx, 0x78
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0xa8c], ax
mov ecx, 0x65
lea edx, [rcx - 0x56]
call fcn.140001db0
mov word [rbp + 0xa8e], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0xa90], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x1400938d2]
call fcn.140001db0
mov word [rbp + 0xa92], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x1400938d4]
call fcn.140001db0
mov word [rbp + 0xa94], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x1400938d6]
call fcn.140001db0
mov word [rbp + 0xa96], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.PETools.exe]
call fcn.140001db0
mov word [rbp + 0xa98], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x1400938da]
call fcn.140001db0
mov word [rbp + 0xa9a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x1400938dc]
call fcn.140001db0
mov word [rbp + 0xa9c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0xa9e], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0xaa0], ax
mov edx, Ordinal_26
movzx ecx, word [0x1400938e2]
call fcn.140001db0
mov word [rbp + 0xaa2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0xaa4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0xaa6], ax
mov edx, Ordinal_32
movzx ecx, word [0x1400938e8]
call fcn.140001db0
mov word [rbp + 0xaa8], ax
mov edx, Ordinal_32
movzx ecx, word [0x1400938ea]
call fcn.140001db0
mov word [rbp + 0xaaa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x1400938ec]
call fcn.140001db0
mov word [rbp + 0xaac], ax
mov edx, Ordinal_32
movzx ecx, word [0x1400938ee]
call fcn.140001db0
mov word [rbp + 0xaae], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [str.LordPE.exe]
call fcn.140001db0
mov word [rbp + 0xab0], ax
xor eax, eax
mov word [rbp + 0xab2], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xa70]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x140007120
mov word [rbp + 0xab2], di
lea rax, [rbp + 0xa70]
mov qword [rbp + 0x1368], rax
mov ecx, 0x50
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x330], ax
mov ecx, 0x45
lea edx, [rcx - 0x44]
call fcn.140001db0
mov word [rbp + 0x332], ax
mov ecx, 0x54
lea edx, [rcx - 0x52]
call fcn.140001db0
mov word [rbp + 0x334], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x336], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x338], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x33a], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x33c], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0x33e], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x340], ax
mov ecx, 0x78
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x342], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x344], ax
xor ecx, ecx
lea edx, [rcx + 0xb]
call fcn.140001db0
mov word [rbp + 0x346], ax
mov edx, ntohs
movzx ecx, word [str.LordPE.exe]
call fcn.140001db0
mov word [rbp + 0x348], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x34a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x1400938f4]
call fcn.140001db0
mov word [rbp + 0x34c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x1400938f6]
call fcn.140001db0
mov word [rbp + 0x34e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x1400938f8]
call fcn.140001db0
mov word [rbp + 0x350], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x1400938fa]
call fcn.140001db0
mov word [rbp + 0x352], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x354], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x1400938fe]
call fcn.140001db0
mov word [rbp + 0x356], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093900]
call fcn.140001db0
mov word [rbp + 0x358], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093902]
call fcn.140001db0
mov word [rbp + 0x35a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093904]
call fcn.140001db0
mov word [rbp + 0x35c], ax
xor eax, eax
mov word [rbp + 0x35e], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x330]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x17
jb 0x140007350
mov word [rbp + 0x35e], di
lea rax, [rbp + 0x330]
mov qword [rbp + 0x1370], rax
mov ecx, Ordinal_79
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x180], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x182], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x184], ax
mov ecx, 0x64
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x186], ax
mov ecx, 0x50
lea edx, [rcx - 0x4c]
call fcn.140001db0
mov word [rbp + 0x188], ax
mov ecx, 0x45
lea edx, [rcx - 0x40]
call fcn.140001db0
mov word [rbp + 0x18a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x28]
call fcn.140001db0
mov word [rbp + 0x18c], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x18e], ax
mov ecx, 0x78
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x190], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x192], ax
xor ecx, ecx
lea edx, [rcx + 0xa]
call fcn.140001db0
mov word [rbp + 0x194], ax
mov edx, ntohs
movzx ecx, word [0x140093906]
call fcn.140001db0
mov word [rbp + 0x196], ax
mov edx, ntohs
movzx ecx, word [str.SysInspector.exe]
call fcn.140001db0
mov word [rbp + 0x198], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x14009390a]
call fcn.140001db0
mov word [rbp + 0x19a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x19c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x14009390e]
call fcn.140001db0
mov word [rbp + 0x19e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093910]
call fcn.140001db0
mov word [rbp + 0x1a0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x1a2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp + 0x1a4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093916]
call fcn.140001db0
mov word [rbp + 0x1a6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093918]
call fcn.140001db0
mov word [rbp + 0x1a8], ax
xor eax, eax
mov word [rbp + 0x1aa], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x180]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x15
jb 0x140007560
mov word [rbp + 0x1aa], di
lea rax, [rbp + 0x180]
mov qword [rbp + 0x1378], rax
mov ecx, 0x53
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xac0], ax
mov ecx, 0x79
lea edx, [rcx - 0x78]
call fcn.140001db0
mov word [rbp + 0xac2], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0xac4], ax
mov ecx, 0x49
lea edx, [rcx - 0x46]
call fcn.140001db0
mov word [rbp + 0xac6], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0xac8], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0xaca], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0xacc], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0xace], ax
mov ecx, 0x63
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0xad0], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0xad2], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0xad4], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xad6], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x22]
call fcn.140001db0
mov word [rbp + 0xad8], ax
mov ecx, 0x65
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0xada], ax
mov ecx, 0x78
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0xadc], ax
mov ecx, 0x65
lea edx, [rcx - 0x56]
call fcn.140001db0
mov word [rbp + 0xade], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0xae0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x14009392a]
call fcn.140001db0
mov word [rbp + 0xae2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x14009392c]
call fcn.140001db0
mov word [rbp + 0xae4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x14009392e]
call fcn.140001db0
mov word [rbp + 0xae6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.proc_analyzer.exe]
call fcn.140001db0
mov word [rbp + 0xae8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093932]
call fcn.140001db0
mov word [rbp + 0xaea], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0xaec], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093936]
call fcn.140001db0
mov word [rbp + 0xaee], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093938]
call fcn.140001db0
mov word [rbp + 0xaf0], ax
mov edx, Ordinal_26
movzx ecx, word [0x14009393a]
call fcn.140001db0
mov word [rbp + 0xaf2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x14009393c]
call fcn.140001db0
mov word [rbp + 0xaf4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x14009393e]
call fcn.140001db0
mov word [rbp + 0xaf6], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093940]
call fcn.140001db0
mov word [rbp + 0xaf8], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093942]
call fcn.140001db0
mov word [rbp + 0xafa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093944]
call fcn.140001db0
mov word [rbp + 0xafc], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093946]
call fcn.140001db0
mov word [rbp + 0xafe], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140093948]
call fcn.140001db0
mov word [rbp + 0xb00], ax
xor eax, eax
mov word [rbp + 0xb02], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xac0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x140007870
mov word [rbp + 0xb02], di
lea rax, [rbp + 0xac0]
mov qword [rbp + 0x1380], rax
mov ecx, reloc.WS2_32.dll_WSASetLastError
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xd90], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0xd92], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0xd94], ax
mov ecx, 0x63
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xd96], ax
mov ecx, 0x5f
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0xd98], ax
mov ecx, 0x61
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0xd9a], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xd9c], ax
mov ecx, 0x61
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0xd9e], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xda0], ax
mov ecx, 0x79
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0xda2], ax
mov ecx, 0x7a
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0xda4], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0xda6], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x66]
call fcn.140001db0
mov word [rbp + 0xda8], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x21]
call fcn.140001db0
mov word [rbp + 0xdaa], ax
mov ecx, 0x65
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0xdac], ax
mov ecx, 0x78
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0xdae], ax
mov ecx, 0x65
lea edx, [rcx - 0x55]
call fcn.140001db0
mov word [rbp + 0xdb0], ax
xor ecx, ecx
lea edx, [rcx + 0x11]
call fcn.140001db0
mov word [rbp + 0xdb2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093954]
call fcn.140001db0
mov word [rbp + 0xdb4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093956]
call fcn.140001db0
mov word [rbp + 0xdb6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.sysAnalyzer.exe]
call fcn.140001db0
mov word [rbp + 0xdb8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x14009395a]
call fcn.140001db0
mov word [rbp + 0xdba], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0xdbc], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x14009395e]
call fcn.140001db0
mov word [rbp + 0xdbe], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093960]
call fcn.140001db0
mov word [rbp + 0xdc0], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093962]
call fcn.140001db0
mov word [rbp + 0xdc2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093964]
call fcn.140001db0
mov word [rbp + 0xdc4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093966]
call fcn.140001db0
mov word [rbp + 0xdc6], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093968]
call fcn.140001db0
mov word [rbp + 0xdc8], ax
mov edx, Ordinal_32
movzx ecx, word [0x14009396a]
call fcn.140001db0
mov word [rbp + 0xdca], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x14009396c]
call fcn.140001db0
mov word [rbp + 0xdcc], ax
mov edx, Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0xdce], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140093970]
call fcn.140001db0
mov word [rbp + 0xdd0], ax
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx ecx, word [0x140093972]
call fcn.140001db0
mov word [rbp + 0xdd2], ax
mov edx, Ordinal_35
movzx ecx, word [0x140093974]
call fcn.140001db0
mov word [rbp + 0xdd4], ax
xor eax, eax
mov word [rbp + 0xdd6], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xd90]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x23
jb 0x140007bb0
mov word [rbp + 0xdd6], di
lea rax, [rbp + 0xd90]
mov qword [rbp + 0x1388], rax
mov ecx, reloc.WS2_32.dll_WSAStartup
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x800], ax
mov ecx, 0x79
lea edx, [rcx - 0x78]
call fcn.140001db0
mov word [rbp + 0x802], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x804], ax
mov ecx, 0x41
lea edx, [rcx - 0x3e]
call fcn.140001db0
mov word [rbp + 0x806], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0x808], ax
mov ecx, 0x61
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x80a], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x66]
call fcn.140001db0
mov word [rbp + 0x80c], ax
mov ecx, 0x79
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0x80e], ax
mov ecx, 0x7a
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0x810], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x812], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x814], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x23]
call fcn.140001db0
mov word [rbp + 0x816], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x818], ax
mov ecx, 0x78
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x81a], ax
mov ecx, 0x65
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0x81c], ax
xor ecx, ecx
lea edx, [rcx + 0xf]
call fcn.140001db0
mov word [rbp + 0x81e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.sniff_hit.exe]
call fcn.140001db0
mov word [rbp + 0x820], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x14009397a]
call fcn.140001db0
mov word [rbp + 0x822], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x14009397c]
call fcn.140001db0
mov word [rbp + 0x824], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x14009397e]
call fcn.140001db0
mov word [rbp + 0x826], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093980]
call fcn.140001db0
mov word [rbp + 0x828], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093982]
call fcn.140001db0
mov word [rbp + 0x82a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093984]
call fcn.140001db0
mov word [rbp + 0x82c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093986]
call fcn.140001db0
mov word [rbp + 0x82e], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x830], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x832], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x14009398c]
call fcn.140001db0
mov word [rbp + 0x834], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x14009398e]
call fcn.140001db0
mov word [rbp + 0x836], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093990]
call fcn.140001db0
mov word [rbp + 0x838], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093992]
call fcn.140001db0
mov word [rbp + 0x83a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093994]
call fcn.140001db0
mov word [rbp + 0x83c], ax
xor eax, eax
mov word [rbp + 0x83e], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x800]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1f
jb 0x140007e90
mov word [rbp + 0x83e], di
lea rax, [rbp + 0x800]
mov qword [rbp + 0x1390], rax
mov ecx, reloc.WS2_32.dll_WSAStartup
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x608], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x60a], ax
mov ecx, 0x69
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x60c], ax
mov ecx, 0x66
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x60e], ax
mov ecx, 0x66
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x610], ax
mov ecx, 0x5f
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x612], ax
mov ecx, 0x68
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x614], ax
mov ecx, 0x69
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x616], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x618], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x25]
call fcn.140001db0
mov word [rbp + 0x61a], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x61c], ax
mov ecx, 0x78
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x61e], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x620], ax
xor ecx, ecx
lea edx, [rcx + 0xd]
call fcn.140001db0
mov word [rbp + 0x622], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093994]
call fcn.140001db0
mov word [rbp + 0x624], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093996]
call fcn.140001db0
mov word [rbp + 0x626], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.windbg.exe]
call fcn.140001db0
mov word [rbp + 0x628], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x14009399a]
call fcn.140001db0
mov word [rbp + 0x62a], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x14009399c]
call fcn.140001db0
mov word [rbp + 0x62c], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x14009399e]
call fcn.140001db0
mov word [rbp + 0x62e], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x1400939a0]
call fcn.140001db0
mov word [rbp + 0x630], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x1400939a2]
call fcn.140001db0
mov word [rbp + 0x632], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x634], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x1400939a6]
call fcn.140001db0
mov word [rbp + 0x636], ax
mov edx, Ordinal_26
movzx ecx, word [0x1400939a8]
call fcn.140001db0
mov word [rbp + 0x638], ax
mov edx, Ordinal_26
movzx ecx, word [0x1400939aa]
call fcn.140001db0
mov word [rbp + 0x63a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x1400939ac]
call fcn.140001db0
mov word [rbp + 0x63c], ax
xor eax, eax
mov word [rbp + 0x63e], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x608]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1b
jb 0x140008120
mov word [rbp + 0x63e], di
lea rax, [rbp + 0x608]
mov qword [rbp + 0x1398], rax
mov ecx, 0x77
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x1b0], ax
mov ecx, 0x69
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x1b2], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x1b4], ax
mov ecx, 0x64
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x1b6], ax
mov ecx, 0x62
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x1b8], ax
mov ecx, 0x67
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x1ba], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x28]
call fcn.140001db0
mov word [rbp + 0x1bc], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x1be], ax
mov ecx, 0x78
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x1c0], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x1c2], ax
xor ecx, ecx
lea edx, [rcx + 0xa]
call fcn.140001db0
mov word [rbp + 0x1c4], ax
mov edx, ntohs
movzx ecx, word [0x1400939ae]
call fcn.140001db0
mov word [rbp + 0x1c6], ax
mov edx, ntohs
movzx ecx, word [str.Fiddler.exe]
call fcn.140001db0
mov word [rbp + 0x1c8], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x1400939b2]
call fcn.140001db0
mov word [rbp + 0x1ca], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x1400939b4]
call fcn.140001db0
mov word [rbp + 0x1cc], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x1400939b6]
call fcn.140001db0
mov word [rbp + 0x1ce], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x1400939b8]
call fcn.140001db0
mov word [rbp + 0x1d0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x1400939ba]
call fcn.140001db0
mov word [rbp + 0x1d2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x1400939bc]
call fcn.140001db0
mov word [rbp + 0x1d4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x1d6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x1400939c0]
call fcn.140001db0
mov word [rbp + 0x1d8], ax
xor eax, eax
mov word [rbp + 0x1da], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x1b0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x15
jb 0x140008330
mov word [rbp + 0x1da], di
lea rax, [rbp + 0x1b0]
mov qword [rbp + 0x13a0], rax
mov ecx, 0x46
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x360], ax
mov ecx, 0x69
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x362], ax
mov ecx, 0x64
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x364], ax
mov ecx, 0x64
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x366], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x368], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x36a], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x36c], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0x36e], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x370], ax
mov ecx, 0x78
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x372], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x374], ax
xor ecx, ecx
lea edx, [rcx + 0xb]
call fcn.140001db0
mov word [rbp + 0x376], ax
mov edx, ntohs
movzx ecx, word [str.ida64.exe]
call fcn.140001db0
mov word [rbp + 0x378], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x1400939ca]
call fcn.140001db0
mov word [rbp + 0x37a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x1400939cc]
call fcn.140001db0
mov word [rbp + 0x37c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x1400939ce]
call fcn.140001db0
mov word [rbp + 0x37e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x1400939d0]
call fcn.140001db0
mov word [rbp + 0x380], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x382], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x1400939d4]
call fcn.140001db0
mov word [rbp + 0x384], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x1400939d6]
call fcn.140001db0
mov word [rbp + 0x386], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x1400939d8]
call fcn.140001db0
mov word [rbp + 0x388], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x1400939da]
call fcn.140001db0
mov word [rbp + 0x38a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x1400939dc]
call fcn.140001db0
mov word [rbp + 0x38c], ax
xor eax, eax
mov word [rbp + 0x38e], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x360]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x17
jb 0x140008560
mov word [rbp + 0x38e], di
lea rax, [rbp + 0x360]
mov qword [rbp + 0x13a8], rax
mov ecx, 0x69
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xb8], ax
mov ecx, 0x64
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0xba], ax
mov ecx, 0x61
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0xbc], ax
mov ecx, gethostname
lea edx, [rcx - 0x33]
call fcn.140001db0
mov word [rbp + 0xbe], ax
mov ecx, 0x34
lea edx, [rcx - 0x30]
call fcn.140001db0
mov word [rbp + 0xc0], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x29]
call fcn.140001db0
mov word [rbp + 0xc2], ax
mov ecx, 0x65
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0xc4], ax
mov ecx, 0x78
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0xc6], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0xc8], ax
xor ecx, ecx
lea edx, [rcx + 9]
call fcn.140001db0
mov word [rbp + 0xca], ax
mov edx, 0xa
movzx ecx, word [0x1400939dc]
call fcn.140001db0
mov word [rbp + 0xcc], ax
mov edx, ntohs
movzx ecx, word [0x1400939de]
call fcn.140001db0
mov word [rbp + 0xce], ax
mov edx, ntohs
movzx ecx, word [str.ida.exe]
call fcn.140001db0
mov word [rbp + 0xd0], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x1400939e2]
call fcn.140001db0
mov word [rbp + 0xd2], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x1400939e4]
call fcn.140001db0
mov word [rbp + 0xd4], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0xd6], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x1400939e8]
call fcn.140001db0
mov word [rbp + 0xd8], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x1400939ea]
call fcn.140001db0
mov word [rbp + 0xda], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x1400939ec]
call fcn.140001db0
mov word [rbp + 0xdc], ax
xor eax, eax
mov word [rbp + 0xde], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xb8]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x13
jb 0x140008740
mov word [rbp + 0xde], di
lea rax, [rbp + 0xb8]
mov qword [rbp + 0x13b0], rax
mov ecx, 0x69
xor edx, edx
call fcn.140001db0
mov word [rbp - 0x48], ax
mov ecx, 0x64
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp - 0x46], ax
mov ecx, 0x61
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp - 0x44], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x2b]
call fcn.140001db0
mov word [rbp - 0x42], ax
mov ecx, 0x65
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp - 0x40], ax
mov ecx, 0x78
lea edx, [rcx - 0x73]
call fcn.140001db0
mov word [rbp - 0x3e], ax
mov ecx, 0x65
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp - 0x3c], ax
xor ecx, ecx
lea edx, [rcx + 7]
call fcn.140001db0
mov word [rbp - 0x3a], ax
mov edx, 8
movzx ecx, word [str.Xenos.exe]
call fcn.140001db0
mov word [rbp - 0x38], ax
mov edx, 9
movzx ecx, word [0x1400939f2]
call fcn.140001db0
mov word [rbp - 0x36], ax
mov edx, 0xa
movzx ecx, word [0x1400939f4]
call fcn.140001db0
mov word [rbp - 0x34], ax
mov edx, ntohs
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp - 0x32], ax
mov edx, ntohs
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp - 0x30], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp - 0x2e], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x1400939fc]
call fcn.140001db0
mov word [rbp - 0x2c], ax
xor eax, eax
mov word [rbp - 0x2a], ax
mov r8d, edi
movsxd rax, r8d
lea rdx, [rbp - 0x48]
lea rdx, [rdx + rax*2]
lea eax, [rbx + r8]
xor word [rdx], ax
inc r8d
cmp r8d, 0xf
jb 0x140008890
mov word [rbp - 0x2a], di
lea rax, [rbp - 0x48]
mov qword [rbp + 0x13b8], rax
mov ecx, 0x58
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xe0], ax
mov ecx, 0x65
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xe2], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0xe4], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0xe6], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0xe8], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x29]
call fcn.140001db0
mov word [rbp + 0xea], ax
mov ecx, 0x65
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0xec], ax
mov ecx, 0x78
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0xee], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0xf0], ax
xor ecx, ecx
lea edx, [rcx + 9]
call fcn.140001db0
mov word [rbp + 0xf2], ax
mov edx, 0xa
movzx ecx, word [0x140093a04]
call fcn.140001db0
mov word [rbp + 0xf4], ax
mov edx, ntohs
movzx ecx, word [0x140093a06]
call fcn.140001db0
mov word [rbp + 0xf6], ax
mov edx, ntohs
movzx ecx, word [str.ReClass.NET.exe]
call fcn.140001db0
mov word [rbp + 0xf8], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093a0a]
call fcn.140001db0
mov word [rbp + 0xfa], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093a0c]
call fcn.140001db0
mov word [rbp + 0xfc], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093a0e]
call fcn.140001db0
mov word [rbp + 0xfe], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093a10]
call fcn.140001db0
mov word [rbp + 0x100], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x102], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x104], ax
xor eax, eax
mov word [rbp + 0x106], ax
mov edx, edi
movsxd rax, edx
lea rcx, [rbp + 0xe0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x13
jb 0x140008a61
mov word [rbp + 0x106], di
lea rax, [rbp + 0xe0]
mov qword [rbp + 0x13c0], rax
mov ecx, 0x52
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x740], ax
mov ecx, 0x65
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x742], ax
mov ecx, 0x43
lea edx, [rcx - 0x41]
call fcn.140001db0
mov word [rbp + 0x744], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0x746], ax
mov ecx, 0x61
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x748], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x74a], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x74c], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0x74e], ax
mov ecx, Ordinal_79
lea edx, [rcx - 0x46]
call fcn.140001db0
mov word [rbp + 0x750], ax
mov ecx, 0x45
lea edx, [rcx - 0x3c]
call fcn.140001db0
mov word [rbp + 0x752], ax
mov ecx, 0x54
lea edx, [rcx - 0x4a]
call fcn.140001db0
mov word [rbp + 0x754], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x23]
call fcn.140001db0
mov word [rbp + 0x756], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x758], ax
mov ecx, 0x78
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x75a], ax
mov ecx, 0x65
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0x75c], ax
xor ecx, ecx
lea edx, [rcx + 0xf]
call fcn.140001db0
mov word [rbp + 0x75e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.x64dbg.exe]
call fcn.140001db0
mov word [rbp + 0x760], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093a2a]
call fcn.140001db0
mov word [rbp + 0x762], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093a2c]
call fcn.140001db0
mov word [rbp + 0x764], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093a2e]
call fcn.140001db0
mov word [rbp + 0x766], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093a30]
call fcn.140001db0
mov word [rbp + 0x768], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093a32]
call fcn.140001db0
mov word [rbp + 0x76a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x76c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093a36]
call fcn.140001db0
mov word [rbp + 0x76e], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093a38]
call fcn.140001db0
mov word [rbp + 0x770], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093a3a]
call fcn.140001db0
mov word [rbp + 0x772], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093a3c]
call fcn.140001db0
mov word [rbp + 0x774], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093a3e]
call fcn.140001db0
mov word [rbp + 0x776], ax
mov edx, Ordinal_32
movzx ecx, word [str.OLLYDBG.exe]
call fcn.140001db0
mov word [rbp + 0x778], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093a42]
call fcn.140001db0
mov word [rbp + 0x77a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093a44]
call fcn.140001db0
mov word [rbp + 0x77c], ax
xor eax, eax
mov word [rbp + 0x77e], ax
mov edx, edi
movsxd rax, edx
lea rcx, [rbp + 0x740]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1f
jb 0x140008d40
mov word [rbp + 0x77e], di
lea rax, [rbp + 0x740]
mov qword [rbp + 0x13c8], rax
mov ecx, 0x78
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x1e0], ax
mov ecx, gethostname
lea edx, [rcx - 0x35]
call fcn.140001db0
mov word [rbp + 0x1e2], ax
mov ecx, 0x34
lea edx, [rcx - 0x32]
call fcn.140001db0
mov word [rbp + 0x1e4], ax
mov ecx, 0x64
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x1e6], ax
mov ecx, 0x62
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x1e8], ax
mov ecx, 0x67
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x1ea], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x28]
call fcn.140001db0
mov word [rbp + 0x1ec], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x1ee], ax
mov ecx, 0x78
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x1f0], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x1f2], ax
xor ecx, ecx
lea edx, [rcx + 0xa]
call fcn.140001db0
mov word [rbp + 0x1f4], ax
mov edx, ntohs
movzx ecx, word [0x140093a3e]
call fcn.140001db0
mov word [rbp + 0x1f6], ax
mov edx, ntohs
movzx ecx, word [str.OLLYDBG.exe]
call fcn.140001db0
mov word [rbp + 0x1f8], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093a42]
call fcn.140001db0
mov word [rbp + 0x1fa], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093a44]
call fcn.140001db0
mov word [rbp + 0x1fc], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093a46]
call fcn.140001db0
mov word [rbp + 0x1fe], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093a48]
call fcn.140001db0
mov word [rbp + 0x200], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093a4a]
call fcn.140001db0
mov word [rbp + 0x202], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093a4c]
call fcn.140001db0
mov word [rbp + 0x204], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x206], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093a50]
call fcn.140001db0
mov word [rbp + 0x208], ax
xor eax, eax
mov word [rbp + 0x20a], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x1e0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x15
jb 0x140008f50
mov word [rbp + 0x20a], di
lea rax, [rbp + 0x1e0]
mov qword [rbp + 0x13d0], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_79
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x390], ax
mov ecx, Ordinal_79
lea edx, [rcx - 0x4b]
call fcn.140001db0
mov word [rbp + 0x392], ax
mov ecx, Ordinal_79
lea edx, [rcx - 0x4a]
call fcn.140001db0
mov word [rbp + 0x394], ax
mov ecx, 0x59
lea edx, [rcx - 0x56]
call fcn.140001db0
mov word [rbp + 0x396], ax
mov ecx, 0x44
lea edx, [rcx - 0x40]
call fcn.140001db0
mov word [rbp + 0x398], ax
mov ecx, 0x42
lea edx, [rcx - 0x3d]
call fcn.140001db0
mov word [rbp + 0x39a], ax
mov ecx, 0x47
lea edx, [rcx - 0x41]
call fcn.140001db0
mov word [rbp + 0x39c], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0x39e], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x3a0], ax
mov ecx, 0x78
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x3a2], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x3a4], ax
xor ecx, ecx
lea edx, [rcx + 0xb]
call fcn.140001db0
mov word [rbp + 0x3a6], ax
mov edx, ntohs
movzx ecx, word [str.Cheat_Engine.exe]
call fcn.140001db0
mov word [rbp + 0x3a8], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093a5a]
call fcn.140001db0
mov word [rbp + 0x3aa], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093a5c]
call fcn.140001db0
mov word [rbp + 0x3ac], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093a5e]
call fcn.140001db0
mov word [rbp + 0x3ae], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x3b0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x3b2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093a64]
call fcn.140001db0
mov word [rbp + 0x3b4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093a66]
call fcn.140001db0
mov word [rbp + 0x3b6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093a68]
call fcn.140001db0
mov word [rbp + 0x3b8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093a6a]
call fcn.140001db0
mov word [rbp + 0x3ba], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093a6c]
call fcn.140001db0
mov word [rbp + 0x3bc], ax
xor eax, eax
mov word [rbp + 0x3be], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x390]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x17
jb 0x140009180
mov word [rbp + 0x3be], di
lea rax, [rbp + 0x390]
mov qword [rbp + 0x13d8], rax
mov ecx, 0x43
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xb10], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xb12], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0xb14], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0xb16], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0xb18], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1b]
call fcn.140001db0
mov word [rbp + 0xb1a], ax
mov ecx, 0x45
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0xb1c], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xb1e], ax
mov ecx, 0x67
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0xb20], ax
mov ecx, 0x69
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xb22], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xb24], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0xb26], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x22]
call fcn.140001db0
mov word [rbp + 0xb28], ax
mov ecx, 0x65
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0xb2a], ax
mov ecx, 0x78
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0xb2c], ax
mov ecx, 0x65
lea edx, [rcx - 0x56]
call fcn.140001db0
mov word [rbp + 0xb2e], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0xb30], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093a7a]
call fcn.140001db0
mov word [rbp + 0xb32], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093a7c]
call fcn.140001db0
mov word [rbp + 0xb34], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093a7e]
call fcn.140001db0
mov word [rbp + 0xb36], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.KsDumper.exe]
call fcn.140001db0
mov word [rbp + 0xb38], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0xb3a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093a84]
call fcn.140001db0
mov word [rbp + 0xb3c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093a86]
call fcn.140001db0
mov word [rbp + 0xb3e], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093a88]
call fcn.140001db0
mov word [rbp + 0xb40], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp + 0xb42], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093a8c]
call fcn.140001db0
mov word [rbp + 0xb44], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093a8e]
call fcn.140001db0
mov word [rbp + 0xb46], ax
mov edx, Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0xb48], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093a92]
call fcn.140001db0
mov word [rbp + 0xb4a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093a94]
call fcn.140001db0
mov word [rbp + 0xb4c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093a96]
call fcn.140001db0
mov word [rbp + 0xb4e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140093a98]
call fcn.140001db0
mov word [rbp + 0xb50], ax
xor eax, eax
mov word [rbp + 0xb52], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xb10]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x140009490
mov word [rbp + 0xb52], di
lea rax, [rbp + 0xb10]
mov qword [rbp + 0x13e0], rax
mov ecx, Ordinal_79
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x4b8], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0x4ba], ax
mov ecx, 0x44
lea edx, [rcx - 0x42]
call fcn.140001db0
mov word [rbp + 0x4bc], ax
mov ecx, 0x75
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0x4be], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0x4c0], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x4c2], ax
mov ecx, 0x65
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x4c4], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x4c6], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x26]
call fcn.140001db0
mov word [rbp + 0x4c8], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x4ca], ax
mov ecx, 0x78
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x4cc], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x4ce], ax
xor ecx, ecx
lea edx, [rcx + 0xc]
call fcn.140001db0
mov word [rbp + 0x4d0], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093a9a]
call fcn.140001db0
mov word [rbp + 0x4d2], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093a9c]
call fcn.140001db0
mov word [rbp + 0x4d4], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093a9e]
call fcn.140001db0
mov word [rbp + 0x4d6], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.dnSpy.exe]
call fcn.140001db0
mov word [rbp + 0x4d8], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093aa2]
call fcn.140001db0
mov word [rbp + 0x4da], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093aa4]
call fcn.140001db0
mov word [rbp + 0x4dc], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp + 0x4de], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093aa8]
call fcn.140001db0
mov word [rbp + 0x4e0], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x4e2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093aac]
call fcn.140001db0
mov word [rbp + 0x4e4], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093aae]
call fcn.140001db0
mov word [rbp + 0x4e6], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093ab0]
call fcn.140001db0
mov word [rbp + 0x4e8], ax
xor eax, eax
mov word [rbp + 0x4ea], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x4b8]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x19
jb 0x1400096f0
mov word [rbp + 0x4ea], di
lea rax, [rbp + 0x4b8]
mov qword [rbp + 0x13e8], rax
mov ecx, 0x64
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x108], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x10a], ax
mov ecx, 0x53
lea edx, [rcx - 0x51]
call fcn.140001db0
mov word [rbp + 0x10c], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x10e], ax
mov ecx, 0x79
lea edx, [rcx - 0x75]
call fcn.140001db0
mov word [rbp + 0x110], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x29]
call fcn.140001db0
mov word [rbp + 0x112], ax
mov ecx, 0x65
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x114], ax
mov ecx, 0x78
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x116], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x118], ax
xor ecx, ecx
lea edx, [rcx + 9]
call fcn.140001db0
mov word [rbp + 0x11a], ax
mov edx, 0xa
movzx ecx, word [0x140093ab4]
call fcn.140001db0
mov word [rbp + 0x11c], ax
mov edx, ntohs
movzx ecx, word [0x140093ab6]
call fcn.140001db0
mov word [rbp + 0x11e], ax
mov edx, ntohs
movzx ecx, word [str.cheatengine_i386.exe]
call fcn.140001db0
mov word [rbp + 0x120], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093aba]
call fcn.140001db0
mov word [rbp + 0x122], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093abc]
call fcn.140001db0
mov word [rbp + 0x124], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093abe]
call fcn.140001db0
mov word [rbp + 0x126], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x128], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093ac2]
call fcn.140001db0
mov word [rbp + 0x12a], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093ac4]
call fcn.140001db0
mov word [rbp + 0x12c], ax
xor eax, eax
mov word [rbp + 0x12e], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x108]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x13
jb 0x1400098d0
mov word [rbp + 0x12e], di
lea rax, [rbp + 0x108]
mov qword [rbp + 0x13f0], rax
mov ecx, 0x63
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xf30], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xf32], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0xf34], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0xf36], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0xf38], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xf3a], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xf3c], ax
mov ecx, 0x67
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xf3e], ax
mov ecx, 0x69
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0xf40], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0xf42], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0xf44], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_45
lea edx, [rcx - 0x22]
call fcn.140001db0
mov word [rbp + 0xf46], ax
mov ecx, 0x69
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0xf48], ax
mov ecx, 0x33
lea edx, [rcx - 0x26]
call fcn.140001db0
mov word [rbp + 0xf4a], ax
mov ecx, Ordinal_60
lea edx, [rcx - 0x2a]
call fcn.140001db0
mov word [rbp + 0xf4c], ax
mov ecx, gethostname
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0xf4e], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x1e]
call fcn.140001db0
mov word [rbp + 0xf50], ax
mov ecx, 0x65
lea edx, [rcx - 0x54]
call fcn.140001db0
mov word [rbp + 0xf52], ax
mov ecx, 0x78
lea edx, [rcx - 0x66]
call fcn.140001db0
mov word [rbp + 0xf54], ax
mov ecx, 0x65
lea edx, [rcx - 0x52]
call fcn.140001db0
mov word [rbp + 0xf56], ax
xor ecx, ecx
lea edx, [rcx + 0x14]
call fcn.140001db0
mov word [rbp + 0xf58], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093ae2]
call fcn.140001db0
mov word [rbp + 0xf5a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093ae4]
call fcn.140001db0
mov word [rbp + 0xf5c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093ae6]
call fcn.140001db0
mov word [rbp + 0xf5e], ax
mov edx, Ordinal_26
movzx ecx, word [str.cheatengine_x86_64.exe]
call fcn.140001db0
mov word [rbp + 0xf60], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093aea]
call fcn.140001db0
mov word [rbp + 0xf62], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093aec]
call fcn.140001db0
mov word [rbp + 0xf64], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093aee]
call fcn.140001db0
mov word [rbp + 0xf66], ax
mov edx, Ordinal_32
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0xf68], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093af2]
call fcn.140001db0
mov word [rbp + 0xf6a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093af4]
call fcn.140001db0
mov word [rbp + 0xf6c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093af6]
call fcn.140001db0
mov word [rbp + 0xf6e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140093af8]
call fcn.140001db0
mov word [rbp + 0xf70], ax
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx ecx, word [0x140093afa]
call fcn.140001db0
mov word [rbp + 0xf72], ax
mov edx, Ordinal_35
movzx ecx, word [0x140093afc]
call fcn.140001db0
mov word [rbp + 0xf74], ax
mov edx, reloc.WLDAP32.dll_Ordinal_35
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_45]
call fcn.140001db0
mov word [rbp + 0xf76], ax
mov edx, 0x24
movzx ecx, word [0x140093b00]
call fcn.140001db0
mov word [rbp + 0xf78], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093b02]
call fcn.140001db0
mov word [rbp + 0xf7a], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093b04]
call fcn.140001db0
mov word [rbp + 0xf7c], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093b06]
call fcn.140001db0
mov word [rbp + 0xf7e], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093b08]
call fcn.140001db0
mov word [rbp + 0xf80], ax
xor eax, eax
mov word [rbp + 0xf82], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xf30]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x29
jb 0x140009c90
mov word [rbp + 0xf82], di
lea rax, [rbp + 0xf30]
mov qword [rbp + 0x13f8], rax
mov ecx, 0x63
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xf90], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xf92], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0xf94], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0xf96], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0xf98], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xf9a], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xf9c], ax
mov ecx, 0x67
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xf9e], ax
mov ecx, 0x69
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0xfa0], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0xfa2], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0xfa4], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_45
lea edx, [rcx - 0x22]
call fcn.140001db0
mov word [rbp + 0xfa6], ax
mov ecx, 0x78
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0xfa8], ax
mov ecx, Ordinal_60
lea edx, [rcx - 0x2b]
call fcn.140001db0
mov word [rbp + 0xfaa], ax
mov ecx, gethostname
lea edx, [rcx - 0x28]
call fcn.140001db0
mov word [rbp + 0xfac], ax
mov ecx, 0x5f
lea edx, [rcx - 0x50]
call fcn.140001db0
mov word [rbp + 0xfae], ax
mov ecx, gethostname
lea edx, [rcx - 0x26]
call fcn.140001db0
mov word [rbp + 0xfb0], ax
mov ecx, 0x34
lea edx, [rcx - 0x23]
call fcn.140001db0
mov word [rbp + 0xfb2], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x1c]
call fcn.140001db0
mov word [rbp + 0xfb4], ax
mov ecx, 0x65
lea edx, [rcx - 0x52]
call fcn.140001db0
mov word [rbp + 0xfb6], ax
mov ecx, 0x78
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xfb8], ax
mov ecx, 0x65
lea edx, [rcx - 0x50]
call fcn.140001db0
mov word [rbp + 0xfba], ax
xor ecx, ecx
lea edx, [rcx + 0x16]
call fcn.140001db0
mov word [rbp + 0xfbc], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093b16]
call fcn.140001db0
mov word [rbp + 0xfbe], ax
mov edx, Ordinal_26
movzx ecx, word [str.Fiddler_Everywhere.exe]
call fcn.140001db0
mov word [rbp + 0xfc0], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093b1a]
call fcn.140001db0
mov word [rbp + 0xfc2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093b1c]
call fcn.140001db0
mov word [rbp + 0xfc4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093b1e]
call fcn.140001db0
mov word [rbp + 0xfc6], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093b20]
call fcn.140001db0
mov word [rbp + 0xfc8], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093b22]
call fcn.140001db0
mov word [rbp + 0xfca], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093b24]
call fcn.140001db0
mov word [rbp + 0xfcc], ax
mov edx, Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0xfce], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140093b28]
call fcn.140001db0
mov word [rbp + 0xfd0], ax
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx ecx, word [0x140093b2a]
call fcn.140001db0
mov word [rbp + 0xfd2], ax
mov edx, Ordinal_35
movzx ecx, word [0x140093b2c]
call fcn.140001db0
mov word [rbp + 0xfd4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_35
movzx ecx, word [0x140093b2e]
call fcn.140001db0
mov word [rbp + 0xfd6], ax
mov edx, 0x24
movzx ecx, word [0x140093b30]
call fcn.140001db0
mov word [rbp + 0xfd8], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093b32]
call fcn.140001db0
mov word [rbp + 0xfda], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093b34]
call fcn.140001db0
mov word [rbp + 0xfdc], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093b36]
call fcn.140001db0
mov word [rbp + 0xfde], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093b38]
call fcn.140001db0
mov word [rbp + 0xfe0], ax
mov edx, reloc.WLDAP32.dll_Ordinal_41
movzx ecx, word [0x140093b3a]
call fcn.140001db0
mov word [rbp + 0xfe2], ax
mov edx, Ordinal_45
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0xfe4], ax
mov edx, Ordinal_45
movzx ecx, word [0x140093b3e]
call fcn.140001db0
mov word [rbp + 0xfe6], ax
mov edx, Ordinal_45
movzx ecx, word [0x140093b40]
call fcn.140001db0
mov word [rbp + 0xfe8], ax
xor eax, eax
mov word [rbp + 0xfea], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xf90]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x2d
jb 0x14000a0b0
mov word [rbp + 0xfea], di
lea rax, [rbp + 0xf90]
mov qword [rbp + 0x1400], rax
mov ecx, 0x46
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xff0], ax
mov ecx, 0x69
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xff2], ax
mov ecx, 0x64
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0xff4], ax
mov ecx, 0x64
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0xff6], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xff8], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xffa], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0xffc], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x19]
call fcn.140001db0
mov word [rbp + 0xffe], ax
mov ecx, 0x45
lea edx, [rcx - 0x3d]
call fcn.140001db0
mov word [rbp + 0x1000], ax
mov ecx, 0x76
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x1002], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x1004], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x1006], ax
mov ecx, 0x79
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x1008], ax
mov ecx, 0x77
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0x100a], ax
mov ecx, 0x68
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x100c], ax
mov ecx, 0x65
lea edx, [rcx - 0x56]
call fcn.140001db0
mov word [rbp + 0x100e], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x1010], ax
mov ecx, 0x65
lea edx, [rcx - 0x54]
call fcn.140001db0
mov word [rbp + 0x1012], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x1c]
call fcn.140001db0
mov word [rbp + 0x1014], ax
mov ecx, 0x65
lea edx, [rcx - 0x52]
call fcn.140001db0
mov word [rbp + 0x1016], ax
mov ecx, 0x78
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x1018], ax
mov ecx, 0x65
lea edx, [rcx - 0x50]
call fcn.140001db0
mov word [rbp + 0x101a], ax
xor ecx, ecx
lea edx, [rcx + 0x16]
call fcn.140001db0
mov word [rbp + 0x101c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093b46]
call fcn.140001db0
mov word [rbp + 0x101e], ax
mov edx, Ordinal_26
movzx ecx, word [str.Fiddler.WebUi.exe]
call fcn.140001db0
mov word [rbp + 0x1020], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093b4a]
call fcn.140001db0
mov word [rbp + 0x1022], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093b4c]
call fcn.140001db0
mov word [rbp + 0x1024], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093b4e]
call fcn.140001db0
mov word [rbp + 0x1026], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093b50]
call fcn.140001db0
mov word [rbp + 0x1028], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093b52]
call fcn.140001db0
mov word [rbp + 0x102a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093b54]
call fcn.140001db0
mov word [rbp + 0x102c], ax
mov edx, Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x102e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140093b58]
call fcn.140001db0
mov word [rbp + 0x1030], ax
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx ecx, word [0x140093b5a]
call fcn.140001db0
mov word [rbp + 0x1032], ax
mov edx, Ordinal_35
movzx ecx, word [0x140093b5c]
call fcn.140001db0
mov word [rbp + 0x1034], ax
mov edx, reloc.WLDAP32.dll_Ordinal_35
movzx ecx, word [0x140093b5e]
call fcn.140001db0
mov word [rbp + 0x1036], ax
mov edx, 0x24
movzx ecx, word [0x140093b60]
call fcn.140001db0
mov word [rbp + 0x1038], ax
mov edx, Ordinal_41
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x103a], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093b64]
call fcn.140001db0
mov word [rbp + 0x103c], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093b66]
call fcn.140001db0
mov word [rbp + 0x103e], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093b68]
call fcn.140001db0
mov word [rbp + 0x1040], ax
mov edx, reloc.WLDAP32.dll_Ordinal_41
movzx ecx, word [0x140093b6a]
call fcn.140001db0
mov word [rbp + 0x1042], ax
mov edx, Ordinal_45
movzx ecx, word [0x140093b6c]
call fcn.140001db0
mov word [rbp + 0x1044], ax
mov edx, Ordinal_45
movzx ecx, word [0x140093b6e]
call fcn.140001db0
mov word [rbp + 0x1046], ax
mov edx, Ordinal_45
movzx ecx, word [str.Scylla.exe]
call fcn.140001db0
mov word [rbp + 0x1048], ax
xor eax, eax
mov word [rbp + 0x104a], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xff0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x2d
jb 0x14000a4d0
mov word [rbp + 0x104a], di
lea rax, [rbp + 0xff0]
mov qword [rbp + 0x1408], rax
mov ecx, 0x46
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xde0], ax
mov ecx, 0x69
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xde2], ax
mov ecx, 0x64
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0xde4], ax
mov ecx, 0x64
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0xde6], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xde8], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xdea], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0xdec], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0xdee], ax
mov ecx, 0x57
lea edx, [rcx - 0x4f]
call fcn.140001db0
mov word [rbp + 0xdf0], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0xdf2], ax
mov ecx, 0x62
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0xdf4], ax
mov ecx, 0x55
lea edx, [rcx - 0x4a]
call fcn.140001db0
mov word [rbp + 0xdf6], ax
mov ecx, 0x69
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0xdf8], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x21]
call fcn.140001db0
mov word [rbp + 0xdfa], ax
mov ecx, 0x65
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0xdfc], ax
mov ecx, 0x78
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0xdfe], ax
mov ecx, 0x65
lea edx, [rcx - 0x55]
call fcn.140001db0
mov word [rbp + 0xe00], ax
xor ecx, ecx
lea edx, [rcx + 0x11]
call fcn.140001db0
mov word [rbp + 0xe02], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093b6c]
call fcn.140001db0
mov word [rbp + 0xe04], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093b6e]
call fcn.140001db0
mov word [rbp + 0xe06], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Scylla.exe]
call fcn.140001db0
mov word [rbp + 0xe08], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093b72]
call fcn.140001db0
mov word [rbp + 0xe0a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093b74]
call fcn.140001db0
mov word [rbp + 0xe0c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093b76]
call fcn.140001db0
mov word [rbp + 0xe0e], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093b78]
call fcn.140001db0
mov word [rbp + 0xe10], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093b7a]
call fcn.140001db0
mov word [rbp + 0xe12], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0xe14], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093b7e]
call fcn.140001db0
mov word [rbp + 0xe16], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093b80]
call fcn.140001db0
mov word [rbp + 0xe18], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093b82]
call fcn.140001db0
mov word [rbp + 0xe1a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093b84]
call fcn.140001db0
mov word [rbp + 0xe1c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093b86]
call fcn.140001db0
mov word [rbp + 0xe1e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [str.Scylla_x64.exe]
call fcn.140001db0
mov word [rbp + 0xe20], ax
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx ecx, word [0x140093b8a]
call fcn.140001db0
mov word [rbp + 0xe22], ax
mov edx, Ordinal_35
movzx ecx, word [0x140093b8c]
call fcn.140001db0
mov word [rbp + 0xe24], ax
xor eax, eax
mov word [rbp + 0xe26], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xde0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x23
jb 0x14000a810
mov word [rbp + 0xe26], di
lea rax, [rbp + 0xde0]
mov qword [rbp + 0x1410], rax
mov ecx, 0x53
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x210], ax
mov ecx, 0x63
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x212], ax
mov ecx, 0x79
lea edx, [rcx - 0x77]
call fcn.140001db0
mov word [rbp + 0x214], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0x216], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x218], ax
mov ecx, 0x61
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x21a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x28]
call fcn.140001db0
mov word [rbp + 0x21c], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x21e], ax
mov ecx, 0x78
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x220], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x222], ax
xor ecx, ecx
lea edx, [rcx + 0xa]
call fcn.140001db0
mov word [rbp + 0x224], ax
mov edx, ntohs
movzx ecx, word [0x140093b86]
call fcn.140001db0
mov word [rbp + 0x226], ax
mov edx, ntohs
movzx ecx, word [str.Scylla_x64.exe]
call fcn.140001db0
mov word [rbp + 0x228], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093b8a]
call fcn.140001db0
mov word [rbp + 0x22a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093b8c]
call fcn.140001db0
mov word [rbp + 0x22c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093b8e]
call fcn.140001db0
mov word [rbp + 0x22e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093b90]
call fcn.140001db0
mov word [rbp + 0x230], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093b92]
call fcn.140001db0
mov word [rbp + 0x232], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093b94]
call fcn.140001db0
mov word [rbp + 0x234], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093b96]
call fcn.140001db0
mov word [rbp + 0x236], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093b98]
call fcn.140001db0
mov word [rbp + 0x238], ax
xor eax, eax
mov word [rbp + 0x23a], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x210]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x15
jb 0x14000aa20
mov word [rbp + 0x23a], di
lea rax, [rbp + 0x210]
mov qword [rbp + 0x1418], rax
mov ecx, 0x53
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x6c0], ax
mov ecx, 0x63
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x6c2], ax
mov ecx, 0x79
lea edx, [rcx - 0x77]
call fcn.140001db0
mov word [rbp + 0x6c4], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0x6c6], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x6c8], ax
mov ecx, 0x61
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x6ca], ax
mov ecx, 0x5f
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x6cc], ax
mov ecx, 0x78
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x6ce], ax
mov ecx, gethostname
lea edx, [rcx - 0x2e]
call fcn.140001db0
mov word [rbp + 0x6d0], ax
mov ecx, 0x34
lea edx, [rcx - 0x2b]
call fcn.140001db0
mov word [rbp + 0x6d2], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x24]
call fcn.140001db0
mov word [rbp + 0x6d4], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x6d6], ax
mov ecx, 0x78
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x6d8], ax
mov ecx, 0x65
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0x6da], ax
xor ecx, ecx
lea edx, [rcx + 0xe]
call fcn.140001db0
mov word [rbp + 0x6dc], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093ba6]
call fcn.140001db0
mov word [rbp + 0x6de], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.x32dbg.exe]
call fcn.140001db0
mov word [rbp + 0x6e0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093baa]
call fcn.140001db0
mov word [rbp + 0x6e2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_50]
call fcn.140001db0
mov word [rbp + 0x6e4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093bae]
call fcn.140001db0
mov word [rbp + 0x6e6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093bb0]
call fcn.140001db0
mov word [rbp + 0x6e8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093bb2]
call fcn.140001db0
mov word [rbp + 0x6ea], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x6ec], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093bb6]
call fcn.140001db0
mov word [rbp + 0x6ee], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093bb8]
call fcn.140001db0
mov word [rbp + 0x6f0], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093bba]
call fcn.140001db0
mov word [rbp + 0x6f2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093bbc]
call fcn.140001db0
mov word [rbp + 0x6f4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093bbe]
call fcn.140001db0
mov word [rbp + 0x6f6], ax
mov edx, Ordinal_32
movzx ecx, word [str.x96dbg.exe]
call fcn.140001db0
mov word [rbp + 0x6f8], ax
xor eax, eax
mov word [rbp + 0x6fa], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x6c0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1d
jb 0x14000ace0
mov word [rbp + 0x6fa], di
lea rax, [rbp + 0x6c0]
mov qword [rbp + 0x1420], rax
mov ecx, 0x78
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x240], ax
mov ecx, 0x33
lea edx, [rcx - 0x32]
call fcn.140001db0
mov word [rbp + 0x242], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_50
lea edx, [rcx - 0x30]
call fcn.140001db0
mov word [rbp + 0x244], ax
mov ecx, 0x64
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x246], ax
mov ecx, 0x62
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x248], ax
mov ecx, 0x67
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x24a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x28]
call fcn.140001db0
mov word [rbp + 0x24c], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x24e], ax
mov ecx, 0x78
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x250], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x252], ax
xor ecx, ecx
lea edx, [rcx + 0xa]
call fcn.140001db0
mov word [rbp + 0x254], ax
mov edx, ntohs
movzx ecx, word [0x140093bbe]
call fcn.140001db0
mov word [rbp + 0x256], ax
mov edx, ntohs
movzx ecx, word [str.x96dbg.exe]
call fcn.140001db0
mov word [rbp + 0x258], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [reloc.WS2_32.dll_gethostname]
call fcn.140001db0
mov word [rbp + 0x25a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093bc4]
call fcn.140001db0
mov word [rbp + 0x25c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093bc6]
call fcn.140001db0
mov word [rbp + 0x25e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093bc8]
call fcn.140001db0
mov word [rbp + 0x260], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093bca]
call fcn.140001db0
mov word [rbp + 0x262], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x264], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093bce]
call fcn.140001db0
mov word [rbp + 0x266], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093bd0]
call fcn.140001db0
mov word [rbp + 0x268], ax
xor eax, eax
mov word [rbp + 0x26a], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x240]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x15
jb 0x14000aef0
mov word [rbp + 0x26a], di
lea rax, [rbp + 0x240]
mov qword [rbp + 0x1428], rax
mov ecx, 0x78
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x270], ax
mov ecx, reloc.WS2_32.dll_gethostname
lea edx, [rcx - 0x38]
call fcn.140001db0
mov word [rbp + 0x272], ax
mov ecx, gethostname
lea edx, [rcx - 0x34]
call fcn.140001db0
mov word [rbp + 0x274], ax
mov ecx, 0x64
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x276], ax
mov ecx, 0x62
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x278], ax
mov ecx, 0x67
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x27a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x28]
call fcn.140001db0
mov word [rbp + 0x27c], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x27e], ax
mov ecx, 0x78
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x280], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x282], ax
xor ecx, ecx
lea edx, [rcx + 0xa]
call fcn.140001db0
mov word [rbp + 0x284], ax
mov edx, ntohs
movzx ecx, word [0x140093bd6]
call fcn.140001db0
mov word [rbp + 0x286], ax
mov edx, ntohs
movzx ecx, word [str.ILSpy.exe]
call fcn.140001db0
mov word [rbp + 0x288], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093bda]
call fcn.140001db0
mov word [rbp + 0x28a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093bdc]
call fcn.140001db0
mov word [rbp + 0x28c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp + 0x28e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093be0]
call fcn.140001db0
mov word [rbp + 0x290], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x292], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093be4]
call fcn.140001db0
mov word [rbp + 0x294], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093be6]
call fcn.140001db0
mov word [rbp + 0x296], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093be8]
call fcn.140001db0
mov word [rbp + 0x298], ax
xor eax, eax
mov word [rbp + 0x29a], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x270]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x15
jb 0x14000b100
mov word [rbp + 0x29a], di
lea rax, [rbp + 0x270]
mov qword [rbp + 0x1430], rax
mov ecx, 0x49
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x130], ax
mov ecx, Ordinal_79
lea edx, [rcx - 0x4b]
call fcn.140001db0
mov word [rbp + 0x132], ax
mov ecx, 0x53
lea edx, [rcx - 0x51]
call fcn.140001db0
mov word [rbp + 0x134], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x136], ax
mov ecx, 0x79
lea edx, [rcx - 0x75]
call fcn.140001db0
mov word [rbp + 0x138], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x29]
call fcn.140001db0
mov word [rbp + 0x13a], ax
mov ecx, 0x65
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x13c], ax
mov ecx, 0x78
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x13e], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x140], ax
xor ecx, ecx
lea edx, [rcx + 9]
call fcn.140001db0
mov word [rbp + 0x142], ax
mov edx, 0xa
movzx ecx, word [0x140093bec]
call fcn.140001db0
mov word [rbp + 0x144], ax
mov edx, ntohs
movzx ecx, word [0x140093bee]
call fcn.140001db0
mov word [rbp + 0x146], ax
mov edx, ntohs
movzx ecx, word [str.Dbg64.exe]
call fcn.140001db0
mov word [rbp + 0x148], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093bf2]
call fcn.140001db0
mov word [rbp + 0x14a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093bf4]
call fcn.140001db0
mov word [rbp + 0x14c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093bf6]
call fcn.140001db0
mov word [rbp + 0x14e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093bf8]
call fcn.140001db0
mov word [rbp + 0x150], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x152], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093bfc]
call fcn.140001db0
mov word [rbp + 0x154], ax
xor eax, eax
mov word [rbp + 0x156], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x130]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x13
jb 0x14000b2e0
mov word [rbp + 0x156], di
lea rax, [rbp + 0x130]
mov qword [rbp + 0x1438], rax
mov ecx, 0x44
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x158], ax
mov ecx, 0x62
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x15a], ax
mov ecx, 0x67
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0x15c], ax
mov ecx, gethostname
lea edx, [rcx - 0x33]
call fcn.140001db0
mov word [rbp + 0x15e], ax
mov ecx, 0x34
lea edx, [rcx - 0x30]
call fcn.140001db0
mov word [rbp + 0x160], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x29]
call fcn.140001db0
mov word [rbp + 0x162], ax
mov ecx, 0x65
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x164], ax
mov ecx, 0x78
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x166], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x168], ax
xor ecx, ecx
lea edx, [rcx + 9]
call fcn.140001db0
mov word [rbp + 0x16a], ax
mov edx, 0xa
movzx ecx, word [0x140093c04]
call fcn.140001db0
mov word [rbp + 0x16c], ax
mov edx, ntohs
movzx ecx, word [0x140093c06]
call fcn.140001db0
mov word [rbp + 0x16e], ax
mov edx, ntohs
movzx ecx, word [str.createdump.exe]
call fcn.140001db0
mov word [rbp + 0x170], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093c0a]
call fcn.140001db0
mov word [rbp + 0x172], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093c0c]
call fcn.140001db0
mov word [rbp + 0x174], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093c0e]
call fcn.140001db0
mov word [rbp + 0x176], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x178], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093c12]
call fcn.140001db0
mov word [rbp + 0x17a], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093c14]
call fcn.140001db0
mov word [rbp + 0x17c], ax
xor eax, eax
mov word [rbp + 0x17e], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x158]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x13
jb 0x14000b4c0
mov word [rbp + 0x17e], di
lea rax, [rbp + 0x158]
mov qword [rbp + 0x1440], rax
mov ecx, 0x63
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x700], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x702], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x704], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x706], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x708], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x70a], ax
mov ecx, 0x64
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x70c], ax
mov ecx, 0x75
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x70e], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0x710], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x712], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x24]
call fcn.140001db0
mov word [rbp + 0x714], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x716], ax
mov ecx, 0x78
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x718], ax
mov ecx, 0x65
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0x71a], ax
xor ecx, ecx
lea edx, [rcx + 0xe]
call fcn.140001db0
mov word [rbp + 0x71c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093c26]
call fcn.140001db0
mov word [rbp + 0x71e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.ksdumperclient.exe]
call fcn.140001db0
mov word [rbp + 0x720], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x722], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093c2c]
call fcn.140001db0
mov word [rbp + 0x724], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093c2e]
call fcn.140001db0
mov word [rbp + 0x726], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093c30]
call fcn.140001db0
mov word [rbp + 0x728], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp + 0x72a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093c34]
call fcn.140001db0
mov word [rbp + 0x72c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093c36]
call fcn.140001db0
mov word [rbp + 0x72e], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093c38]
call fcn.140001db0
mov word [rbp + 0x730], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093c3a]
call fcn.140001db0
mov word [rbp + 0x732], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093c3c]
call fcn.140001db0
mov word [rbp + 0x734], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093c3e]
call fcn.140001db0
mov word [rbp + 0x736], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093c40]
call fcn.140001db0
mov word [rbp + 0x738], ax
xor eax, eax
mov word [rbp + 0x73a], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x700]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1d
jb 0x14000b780
mov word [rbp + 0x73a], di
lea rax, [rbp + 0x700]
mov qword [rbp + 0x1448], rax
mov ecx, WSAGetLastError
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xe30], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0xe32], ax
mov ecx, 0x64
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0xe34], ax
mov ecx, 0x75
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0xe36], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0xe38], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0xe3a], ax
mov ecx, 0x65
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0xe3c], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0xe3e], ax
mov ecx, 0x63
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0xe40], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0xe42], ax
mov ecx, 0x69
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0xe44], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0xe46], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0xe48], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xe4a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x20]
call fcn.140001db0
mov word [rbp + 0xe4c], ax
mov ecx, 0x65
lea edx, [rcx - 0x56]
call fcn.140001db0
mov word [rbp + 0xe4e], ax
mov ecx, 0x78
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xe50], ax
mov ecx, 0x65
lea edx, [rcx - 0x54]
call fcn.140001db0
mov word [rbp + 0xe52], ax
xor ecx, ecx
lea edx, [rcx + 0x12]
call fcn.140001db0
mov word [rbp + 0xe54], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093c4e]
call fcn.140001db0
mov word [rbp + 0xe56], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.dotPeek64.exe]
call fcn.140001db0
mov word [rbp + 0xe58], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0xe5a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0xe5c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093c56]
call fcn.140001db0
mov word [rbp + 0xe5e], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093c58]
call fcn.140001db0
mov word [rbp + 0xe60], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093c5a]
call fcn.140001db0
mov word [rbp + 0xe62], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093c5c]
call fcn.140001db0
mov word [rbp + 0xe64], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093c5e]
call fcn.140001db0
mov word [rbp + 0xe66], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093c60]
call fcn.140001db0
mov word [rbp + 0xe68], ax
mov edx, Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0xe6a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093c64]
call fcn.140001db0
mov word [rbp + 0xe6c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093c66]
call fcn.140001db0
mov word [rbp + 0xe6e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140093c68]
call fcn.140001db0
mov word [rbp + 0xe70], ax
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx ecx, word [0x140093c6a]
call fcn.140001db0
mov word [rbp + 0xe72], ax
mov edx, Ordinal_35
movzx ecx, word [0x140093c6c]
call fcn.140001db0
mov word [rbp + 0xe74], ax
mov edx, reloc.WLDAP32.dll_Ordinal_35
movzx ecx, word [0x140093c6e]
call fcn.140001db0
mov word [rbp + 0xe76], ax
mov edx, 0x24
movzx ecx, word [str.procmon.exe]
call fcn.140001db0
mov word [rbp + 0xe78], ax
xor eax, eax
mov word [rbp + 0xe7a], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xe30]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x25
jb 0x14000baf0
mov word [rbp + 0xe7a], di
lea rax, [rbp + 0xe30]
mov qword [rbp + 0x1450], rax
mov ecx, 0x64
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x528], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x52a], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0x52c], ax
mov ecx, 0x50
lea edx, [rcx - 0x4d]
call fcn.140001db0
mov word [rbp + 0x52e], ax
mov ecx, 0x65
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x530], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x532], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0x534], ax
mov ecx, gethostname
lea edx, [rcx - 0x2f]
call fcn.140001db0
mov word [rbp + 0x536], ax
mov ecx, 0x34
lea edx, [rcx - 0x2c]
call fcn.140001db0
mov word [rbp + 0x538], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x25]
call fcn.140001db0
mov word [rbp + 0x53a], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x53c], ax
mov ecx, 0x78
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x53e], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x540], ax
xor ecx, ecx
lea edx, [rcx + 0xd]
call fcn.140001db0
mov word [rbp + 0x542], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093c6c]
call fcn.140001db0
mov word [rbp + 0x544], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093c6e]
call fcn.140001db0
mov word [rbp + 0x546], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.procmon.exe]
call fcn.140001db0
mov word [rbp + 0x548], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093c72]
call fcn.140001db0
mov word [rbp + 0x54a], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x54c], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093c76]
call fcn.140001db0
mov word [rbp + 0x54e], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093c78]
call fcn.140001db0
mov word [rbp + 0x550], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x552], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093c7c]
call fcn.140001db0
mov word [rbp + 0x554], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x556], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093c80]
call fcn.140001db0
mov word [rbp + 0x558], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093c82]
call fcn.140001db0
mov word [rbp + 0x55a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093c84]
call fcn.140001db0
mov word [rbp + 0x55c], ax
xor eax, eax
mov word [rbp + 0x55e], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x528]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1b
jb 0x14000bd80
mov word [rbp + 0x55e], di
lea rax, [rbp + 0x528]
mov qword [rbp + 0x1458], rax
mov ecx, reloc.WS2_32.dll_WSASetLastError
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x3c0], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x3c2], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x3c4], ax
mov ecx, 0x63
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x3c6], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0x3c8], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0x3ca], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x3cc], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0x3ce], ax
mov ecx, 0x65
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x3d0], ax
mov ecx, 0x78
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x3d2], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x3d4], ax
xor ecx, ecx
lea edx, [rcx + 0xb]
call fcn.140001db0
mov word [rbp + 0x3d6], ax
mov edx, ntohs
movzx ecx, word [str.idaq.exe]
call fcn.140001db0
mov word [rbp + 0x3d8], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093c8a]
call fcn.140001db0
mov word [rbp + 0x3da], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093c8c]
call fcn.140001db0
mov word [rbp + 0x3dc], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093c8e]
call fcn.140001db0
mov word [rbp + 0x3de], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x3e0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093c92]
call fcn.140001db0
mov word [rbp + 0x3e2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093c94]
call fcn.140001db0
mov word [rbp + 0x3e4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093c96]
call fcn.140001db0
mov word [rbp + 0x3e6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093c98]
call fcn.140001db0
mov word [rbp + 0x3e8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093c9a]
call fcn.140001db0
mov word [rbp + 0x3ea], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093c9c]
call fcn.140001db0
mov word [rbp + 0x3ec], ax
xor eax, eax
mov word [rbp + 0x3ee], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x3c0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x17
jb 0x14000bfb0
mov word [rbp + 0x3ee], di
lea rax, [rbp + 0x3c0]
mov qword [rbp + 0x1460], rax
mov ecx, 0x69
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x68], ax
mov ecx, 0x64
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x6a], ax
mov ecx, 0x61
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x6c], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x6e], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x2a]
call fcn.140001db0
mov word [rbp + 0x70], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x72], ax
mov ecx, 0x78
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0x74], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x76], ax
xor ecx, ecx
lea edx, [rcx + 8]
call fcn.140001db0
mov word [rbp + 0x78], ax
mov edx, 9
movzx ecx, word [0x140093c9a]
call fcn.140001db0
mov word [rbp + 0x7a], ax
mov edx, 0xa
movzx ecx, word [0x140093c9c]
call fcn.140001db0
mov word [rbp + 0x7c], ax
mov edx, ntohs
movzx ecx, word [0x140093c9e]
call fcn.140001db0
mov word [rbp + 0x7e], ax
mov edx, ntohs
movzx ecx, word [str.idaq64.exe]
call fcn.140001db0
mov word [rbp + 0x80], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093ca2]
call fcn.140001db0
mov word [rbp + 0x82], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093ca4]
call fcn.140001db0
mov word [rbp + 0x84], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093ca6]
call fcn.140001db0
mov word [rbp + 0x86], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093ca8]
call fcn.140001db0
mov word [rbp + 0x88], ax
xor eax, eax
mov word [rbp + 0x8a], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x68]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x11
jb 0x14000c140
mov word [rbp + 0x8a], di
lea rax, [rbp + 0x68]
mov qword [rbp + 0x1468], rax
mov ecx, 0x69
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x2a0], ax
mov ecx, 0x64
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x2a2], ax
mov ecx, 0x61
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x2a4], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x2a6], ax
mov ecx, gethostname
lea edx, [rcx - 0x32]
call fcn.140001db0
mov word [rbp + 0x2a8], ax
mov ecx, 0x34
lea edx, [rcx - 0x2f]
call fcn.140001db0
mov word [rbp + 0x2aa], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x28]
call fcn.140001db0
mov word [rbp + 0x2ac], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x2ae], ax
mov ecx, 0x78
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x2b0], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x2b2], ax
xor ecx, ecx
lea edx, [rcx + 0xa]
call fcn.140001db0
mov word [rbp + 0x2b4], ax
mov edx, ntohs
movzx ecx, word [0x140093cb6]
call fcn.140001db0
mov word [rbp + 0x2b6], ax
mov edx, ntohs
movzx ecx, word [str.binaryninja.exe]
call fcn.140001db0
mov word [rbp + 0x2b8], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093cba]
call fcn.140001db0
mov word [rbp + 0x2ba], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093cbc]
call fcn.140001db0
mov word [rbp + 0x2bc], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093cbe]
call fcn.140001db0
mov word [rbp + 0x2be], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093cc0]
call fcn.140001db0
mov word [rbp + 0x2c0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093cc2]
call fcn.140001db0
mov word [rbp + 0x2c2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093cc4]
call fcn.140001db0
mov word [rbp + 0x2c4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093cc6]
call fcn.140001db0
mov word [rbp + 0x2c6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093cc8]
call fcn.140001db0
mov word [rbp + 0x2c8], ax
xor eax, eax
mov word [rbp + 0x2ca], ax
mov edx, edi
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp + 0x2a0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x15
jb 0x14000c340
mov word [rbp + 0x2ca], di
lea rax, [rbp + 0x2a0]
mov qword [rbp + 0x1470], rax
mov ecx, 0x62
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x780], ax
mov ecx, 0x69
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x782], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x784], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x786], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x788], ax
mov ecx, 0x79
lea edx, [rcx - 0x74]
call fcn.140001db0
mov word [rbp + 0x78a], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x78c], ax
mov ecx, 0x69
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x78e], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x66]
call fcn.140001db0
mov word [rbp + 0x790], ax
mov ecx, 0x6a
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x792], ax
mov ecx, 0x61
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0x794], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x23]
call fcn.140001db0
mov word [rbp + 0x796], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x798], ax
mov ecx, 0x78
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x79a], ax
mov ecx, 0x65
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0x79c], ax
xor ecx, ecx
lea edx, [rcx + 0xf]
call fcn.140001db0
mov word [rbp + 0x79e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.HxD.exe]
call fcn.140001db0
mov word [rbp + 0x7a0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093cda]
call fcn.140001db0
mov word [rbp + 0x7a2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093cdc]
call fcn.140001db0
mov word [rbp + 0x7a4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0x7a6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093ce0]
call fcn.140001db0
mov word [rbp + 0x7a8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093ce2]
call fcn.140001db0
mov word [rbp + 0x7aa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093ce4]
call fcn.140001db0
mov word [rbp + 0x7ac], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093ce6]
call fcn.140001db0
mov word [rbp + 0x7ae], ax
mov edx, Ordinal_26
movzx ecx, word [str.SystemInformer.exe]
call fcn.140001db0
mov word [rbp + 0x7b0], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093cea]
call fcn.140001db0
mov word [rbp + 0x7b2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x7b4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x7b6], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093cf0]
call fcn.140001db0
mov word [rbp + 0x7b8], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093cf2]
call fcn.140001db0
mov word [rbp + 0x7ba], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093cf4]
call fcn.140001db0
mov word [rbp + 0x7bc], ax
xor eax, eax
mov word [rbp + 0x7be], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x780]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1f
jb 0x14000c620
mov word [rbp + 0x7be], di
lea rax, [rbp + 0x780]
mov qword [rbp + 0x1478], rax
mov ecx, 0x48
xor edx, edx
call fcn.140001db0
mov word [rbp - 0x28], ax
mov ecx, 0x78
lea edx, [rcx - 0x77]
call fcn.140001db0
mov word [rbp - 0x26], ax
mov ecx, 0x44
lea edx, [rcx - 0x42]
call fcn.140001db0
mov word [rbp - 0x24], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x2b]
call fcn.140001db0
mov word [rbp - 0x22], ax
mov ecx, 0x65
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp - 0x20], ax
mov ecx, 0x78
lea edx, [rcx - 0x73]
call fcn.140001db0
mov word [rbp - 0x1e], ax
mov ecx, 0x65
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp - 0x1c], ax
xor ecx, ecx
lea edx, [rcx + 7]
call fcn.140001db0
mov word [rbp - 0x1a], ax
mov edx, 8
movzx ecx, word [str.SystemInformer.exe]
call fcn.140001db0
mov word [rbp - 0x18], ax
mov edx, 9
movzx ecx, word [0x140093cea]
call fcn.140001db0
mov word [rbp - 0x16], ax
mov edx, 0xa
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp - 0x14], ax
mov edx, ntohs
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp - 0x12], ax
mov edx, ntohs
movzx ecx, word [0x140093cf0]
call fcn.140001db0
mov word [rbp - 0x10], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093cf2]
call fcn.140001db0
mov word [rbp - 0xe], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093cf4]
call fcn.140001db0
mov word [rbp - 0xc], ax
xor eax, eax
mov word [rbp - 0xa], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp - 0x28]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0xf
jb 0x14000c770
mov word [rbp - 0xa], di
lea rax, [rbp - 0x28]
mov qword [rbp + 0x1480], rax
mov ecx, 0x53
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xe80], ax
mov ecx, 0x79
lea edx, [rcx - 0x78]
call fcn.140001db0
mov word [rbp + 0xe82], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0xe84], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0xe86], ax
mov ecx, 0x65
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0xe88], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xe8a], ax
mov ecx, 0x49
lea edx, [rcx - 0x43]
call fcn.140001db0
mov word [rbp + 0xe8c], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xe8e], ax
mov ecx, 0x66
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0xe90], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x66]
call fcn.140001db0
mov word [rbp + 0xe92], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xe94], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0xe96], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0xe98], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0xe9a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x20]
call fcn.140001db0
mov word [rbp + 0xe9c], ax
mov ecx, 0x65
lea edx, [rcx - 0x56]
call fcn.140001db0
mov word [rbp + 0xe9e], ax
mov ecx, 0x78
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xea0], ax
mov ecx, 0x65
lea edx, [rcx - 0x54]
call fcn.140001db0
mov word [rbp + 0xea2], ax
xor ecx, ecx
lea edx, [rcx + 0x12]
call fcn.140001db0
mov word [rbp + 0xea4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093d0e]
call fcn.140001db0
mov word [rbp + 0xea6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.IDA:_Quick_Start]
call fcn.140001db0
mov word [rbp + 0xea8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093d12]
call fcn.140001db0
mov word [rbp + 0xeaa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093d14]
call fcn.140001db0
mov word [rbp + 0xeac], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093d16]
call fcn.140001db0
mov word [rbp + 0xeae], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0xeb0], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093d1a]
call fcn.140001db0
mov word [rbp + 0xeb2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093d1c]
call fcn.140001db0
mov word [rbp + 0xeb4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093d1e]
call fcn.140001db0
mov word [rbp + 0xeb6], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093d20]
call fcn.140001db0
mov word [rbp + 0xeb8], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093d22]
call fcn.140001db0
mov word [rbp + 0xeba], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0xebc], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093d26]
call fcn.140001db0
mov word [rbp + 0xebe], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0xec0], ax
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx ecx, word [0x140093d2a]
call fcn.140001db0
mov word [rbp + 0xec2], ax
mov edx, Ordinal_35
movzx ecx, word [0x140093d2c]
call fcn.140001db0
mov word [rbp + 0xec4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_35
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0xec6], ax
mov edx, 0x24
movzx ecx, word [0x140093d30]
call fcn.140001db0
mov word [rbp + 0xec8], ax
xor eax, eax
mov word [rbp + 0xeca], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xe80]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x25
jb 0x14000cad0
mov word [rbp + 0xeca], di
lea rax, [rbp + 0xe80]
mov qword [rbp + 0x1488], rax
mov ecx, 0x49
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xb60], ax
mov ecx, 0x44
lea edx, [rcx - 0x43]
call fcn.140001db0
mov word [rbp + 0xb62], ax
mov ecx, 0x41
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0xb64], ax
mov ecx, Ordinal_60
lea edx, [rcx - 0x37]
call fcn.140001db0
mov word [rbp + 0xb66], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1c]
call fcn.140001db0
mov word [rbp + 0xb68], ax
mov ecx, 0x51
lea edx, [rcx - 0x4c]
call fcn.140001db0
mov word [rbp + 0xb6a], ax
mov ecx, 0x75
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0xb6c], ax
mov ecx, 0x69
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0xb6e], ax
mov ecx, 0x63
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0xb70], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0xb72], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x16]
call fcn.140001db0
mov word [rbp + 0xb74], ax
mov ecx, 0x53
lea edx, [rcx - 0x48]
call fcn.140001db0
mov word [rbp + 0xb76], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xb78], ax
mov ecx, 0x61
lea edx, [rcx - 0x54]
call fcn.140001db0
mov word [rbp + 0xb7a], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xb7c], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0xb7e], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0xb80], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093d32]
call fcn.140001db0
mov word [rbp + 0xb82], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093d34]
call fcn.140001db0
mov word [rbp + 0xb84], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093d36]
call fcn.140001db0
mov word [rbp + 0xb86], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Resource_Monitor]
call fcn.140001db0
mov word [rbp + 0xb88], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093d3a]
call fcn.140001db0
mov word [rbp + 0xb8a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0xb8c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0xb8e], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093d40]
call fcn.140001db0
mov word [rbp + 0xb90], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093d42]
call fcn.140001db0
mov word [rbp + 0xb92], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093d44]
call fcn.140001db0
mov word [rbp + 0xb94], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093d46]
call fcn.140001db0
mov word [rbp + 0xb96], ax
mov edx, Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0xb98], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093d4a]
call fcn.140001db0
mov word [rbp + 0xb9a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0xb9c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093d4e]
call fcn.140001db0
mov word [rbp + 0xb9e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140093d50]
call fcn.140001db0
mov word [rbp + 0xba0], ax
xor eax, eax
mov word [rbp + 0xba2], ax
mov r8d, edi
nop dword [rax]
movsxd rax, r8d
lea rdx, [rbp + 0xb60]
lea rdx, [rdx + rax*2]
lea eax, [rbx + r8]
xor word [rdx], ax
inc r8d
cmp r8d, 0x21
jb 0x14000cde0
mov word [rbp + 0xba2], di
lea rax, [rbp + 0xb60]
mov qword [rbp + 0x1220], rax
mov ecx, 0x52
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x9d0], ax
mov ecx, 0x65
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x9d2], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x9d4], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x9d6], ax
mov ecx, 0x75
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x9d8], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x9da], ax
mov ecx, 0x63
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x9dc], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x9de], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x18]
call fcn.140001db0
mov word [rbp + 0x9e0], ax
mov ecx, Ordinal_79
lea edx, [rcx - 0x44]
call fcn.140001db0
mov word [rbp + 0x9e2], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0x9e4], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x9e6], ax
mov ecx, 0x69
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x9e8], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x9ea], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x9ec], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x9ee], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0x9f0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093d5a]
call fcn.140001db0
mov word [rbp + 0x9f2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093d5c]
call fcn.140001db0
mov word [rbp + 0x9f4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093d5e]
call fcn.140001db0
mov word [rbp + 0x9f6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.BinaryNinja]
call fcn.140001db0
mov word [rbp + 0x9f8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093d62]
call fcn.140001db0
mov word [rbp + 0x9fa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093d64]
call fcn.140001db0
mov word [rbp + 0x9fc], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093d66]
call fcn.140001db0
mov word [rbp + 0x9fe], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093d68]
call fcn.140001db0
mov word [rbp + 0xa00], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093d6a]
call fcn.140001db0
mov word [rbp + 0xa02], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093d6c]
call fcn.140001db0
mov word [rbp + 0xa04], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093d6e]
call fcn.140001db0
mov word [rbp + 0xa06], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093d70]
call fcn.140001db0
mov word [rbp + 0xa08], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093d72]
call fcn.140001db0
mov word [rbp + 0xa0a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093d74]
call fcn.140001db0
mov word [rbp + 0xa0c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093d76]
call fcn.140001db0
mov word [rbp + 0xa0e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [str.The_Wireshark_Network_Analyzer]
call fcn.140001db0
mov word [rbp + 0xa10], ax
xor eax, eax
mov word [rbp + 0xa12], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x9d0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x14000d0f0
mov word [rbp + 0xa12], di
lea rax, [rbp + 0x9d0]
mov qword [rbp + 0x1228], rax
mov ecx, 0x42
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x3f0], ax
mov ecx, 0x69
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x3f2], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x3f4], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x3f6], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x3f8], ax
mov ecx, 0x79
lea edx, [rcx - 0x74]
call fcn.140001db0
mov word [rbp + 0x3fa], ax
mov ecx, Ordinal_79
lea edx, [rcx - 0x48]
call fcn.140001db0
mov word [rbp + 0x3fc], ax
mov ecx, 0x69
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x3fe], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x66]
call fcn.140001db0
mov word [rbp + 0x400], ax
mov ecx, 0x6a
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x402], ax
mov ecx, 0x61
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0x404], ax
xor ecx, ecx
lea edx, [rcx + 0xb]
call fcn.140001db0
mov word [rbp + 0x406], ax
mov edx, ntohs
movzx ecx, word [str.The_Wireshark_Network_Analyzer]
call fcn.140001db0
mov word [rbp + 0x408], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093d7a]
call fcn.140001db0
mov word [rbp + 0x40a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093d7c]
call fcn.140001db0
mov word [rbp + 0x40c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x40e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093d80]
call fcn.140001db0
mov word [rbp + 0x410], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093d82]
call fcn.140001db0
mov word [rbp + 0x412], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093d84]
call fcn.140001db0
mov word [rbp + 0x414], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093d86]
call fcn.140001db0
mov word [rbp + 0x416], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x418], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093d8a]
call fcn.140001db0
mov word [rbp + 0x41a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093d8c]
call fcn.140001db0
mov word [rbp + 0x41c], ax
xor eax, eax
mov word [rbp + 0x41e], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x3f0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x17
jb 0x14000d320
mov word [rbp + 0x41e], di
lea rax, [rbp + 0x3f0]
mov qword [rbp + 0x1230], rax
mov ecx, 0x54
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x1050], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x1052], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x1054], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1d]
call fcn.140001db0
mov word [rbp + 0x1056], ax
mov ecx, 0x57
lea edx, [rcx - 0x53]
call fcn.140001db0
mov word [rbp + 0x1058], ax
mov ecx, 0x69
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x105a], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x105c], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x105e], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x1060], ax
mov ecx, 0x68
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x1062], ax
mov ecx, 0x61
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0x1064], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x1066], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x1068], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x13]
call fcn.140001db0
mov word [rbp + 0x106a], ax
mov ecx, Ordinal_79
lea edx, [rcx - 0x40]
call fcn.140001db0
mov word [rbp + 0x106c], ax
mov ecx, 0x65
lea edx, [rcx - 0x56]
call fcn.140001db0
mov word [rbp + 0x106e], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x1070], ax
mov ecx, 0x77
lea edx, [rcx - 0x66]
call fcn.140001db0
mov word [rbp + 0x1072], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x1074], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x1076], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0x1078], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0xb]
call fcn.140001db0
mov word [rbp + 0x107a], ax
mov ecx, 0x41
lea edx, [rcx - 0x2b]
call fcn.140001db0
mov word [rbp + 0x107c], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0x107e], ax
mov ecx, 0x61
lea edx, [rcx - 0x49]
call fcn.140001db0
mov word [rbp + 0x1080], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x53]
call fcn.140001db0
mov word [rbp + 0x1082], ax
mov ecx, 0x79
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x1084], ax
mov ecx, 0x7a
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x1086], ax
mov ecx, 0x65
lea edx, [rcx - 0x49]
call fcn.140001db0
mov word [rbp + 0x1088], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x55]
call fcn.140001db0
mov word [rbp + 0x108a], ax
xor ecx, ecx
lea edx, [rcx + 0x1e]
call fcn.140001db0
mov word [rbp + 0x108c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093db6]
call fcn.140001db0
mov word [rbp + 0x108e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [str.Process_Hacker]
call fcn.140001db0
mov word [rbp + 0x1090], ax
mov edx, reloc.WLDAP32.dll_Ordinal_33
movzx ecx, word [0x140093dba]
call fcn.140001db0
mov word [rbp + 0x1092], ax
mov edx, Ordinal_35
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x1094], ax
mov edx, reloc.WLDAP32.dll_Ordinal_35
movzx ecx, word [0x140093dbe]
call fcn.140001db0
mov word [rbp + 0x1096], ax
mov edx, 0x24
movzx ecx, word [0x140093dc0]
call fcn.140001db0
mov word [rbp + 0x1098], ax
mov edx, Ordinal_41
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x109a], ax
mov edx, Ordinal_41
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x109c], ax
mov edx, Ordinal_41
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x109e], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093dc8]
call fcn.140001db0
mov word [rbp + 0x10a0], ax
mov edx, reloc.WLDAP32.dll_Ordinal_41
movzx ecx, word [0x140093dca]
call fcn.140001db0
mov word [rbp + 0x10a2], ax
mov edx, Ordinal_45
movzx ecx, word [0x140093dcc]
call fcn.140001db0
mov word [rbp + 0x10a4], ax
mov edx, Ordinal_45
movzx ecx, word [0x140093dce]
call fcn.140001db0
mov word [rbp + 0x10a6], ax
mov edx, Ordinal_45
movzx ecx, word [0x140093dd0]
call fcn.140001db0
mov word [rbp + 0x10a8], ax
mov edx, reloc.WLDAP32.dll_Ordinal_45
movzx ecx, word [0x140093dd2]
call fcn.140001db0
mov word [rbp + 0x10aa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_46
movzx ecx, word [0x140093dd4]
call fcn.140001db0
mov word [rbp + 0x10ac], ax
mov edx, Ordinal_50
movzx ecx, word [0x140093dd6]
call fcn.140001db0
mov word [rbp + 0x10ae], ax
mov edx, Ordinal_50
movzx ecx, word [0x140093dd8]
call fcn.140001db0
mov word [rbp + 0x10b0], ax
mov edx, Ordinal_50
movzx ecx, word [0x140093dda]
call fcn.140001db0
mov word [rbp + 0x10b2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_50
movzx ecx, word [0x140093ddc]
call fcn.140001db0
mov word [rbp + 0x10b4], ax
mov edx, 0x33
movzx ecx, word [0x140093dde]
call fcn.140001db0
mov word [rbp + 0x10b6], ax
mov edx, 0x34
movzx ecx, word [str.Progress_Telerik_Folder_Web_Debugger]
call fcn.140001db0
mov word [rbp + 0x10b8], ax
mov edx, gethostname
movzx ecx, word [0x140093de2]
call fcn.140001db0
mov word [rbp + 0x10ba], ax
mov edx, gethostname
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x10bc], ax
mov edx, gethostname
movzx ecx, word [0x140093de6]
call fcn.140001db0
mov word [rbp + 0x10be], ax
mov edx, Ordinal_60
movzx ecx, word [0x140093de8]
call fcn.140001db0
mov word [rbp + 0x10c0], ax
mov edx, reloc.WS2_32.dll_gethostname
movzx ecx, word [0x140093dea]
call fcn.140001db0
mov word [rbp + 0x10c2], ax
mov edx, Ordinal_60
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x10c4], ax
mov edx, Ordinal_60
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x10c6], ax
mov edx, reloc.WLDAP32.dll_Ordinal_60
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x10c8], ax
xor eax, eax
mov word [rbp + 0x10ca], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x1050]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x3d
jb 0x14000d8a0
mov word [rbp + 0x10ca], di
lea rax, [rbp + 0x1050]
mov qword [rbp + 0x1238], rax
mov ecx, 0x50
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x640], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x642], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x644], ax
mov ecx, 0x63
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x646], ax
mov ecx, 0x65
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x648], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x64a], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x64c], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x19]
call fcn.140001db0
mov word [rbp + 0x64e], ax
mov ecx, 0x48
lea edx, [rcx - 0x40]
call fcn.140001db0
mov word [rbp + 0x650], ax
mov ecx, 0x61
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0x652], ax
mov ecx, 0x63
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x654], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x656], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x658], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0x65a], ax
xor ecx, ecx
lea edx, [rcx + 0xe]
call fcn.140001db0
mov word [rbp + 0x65c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093dd6]
call fcn.140001db0
mov word [rbp + 0x65e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x140093dd8]
call fcn.140001db0
mov word [rbp + 0x660], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093dda]
call fcn.140001db0
mov word [rbp + 0x662], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093ddc]
call fcn.140001db0
mov word [rbp + 0x664], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093dde]
call fcn.140001db0
mov word [rbp + 0x666], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Progress_Telerik_Folder_Web_Debugger]
call fcn.140001db0
mov word [rbp + 0x668], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093de2]
call fcn.140001db0
mov word [rbp + 0x66a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x66c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093de6]
call fcn.140001db0
mov word [rbp + 0x66e], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093de8]
call fcn.140001db0
mov word [rbp + 0x670], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093dea]
call fcn.140001db0
mov word [rbp + 0x672], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x674], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x676], ax
mov edx, Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x678], ax
xor eax, eax
mov word [rbp + 0x67a], ax
mov edx, edi
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x640]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1d
jb 0x14000db60
mov word [rbp + 0x67a], di
lea rax, [rbp + 0x640]
mov qword [rbp + 0x1240], rax
mov ecx, 0x50
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x10d0], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x10d2], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x10d4], ax
mov ecx, 0x67
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x10d6], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x10d8], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x10da], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x10dc], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x10de], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x18]
call fcn.140001db0
mov word [rbp + 0x10e0], ax
mov ecx, 0x54
lea edx, [rcx - 0x4b]
call fcn.140001db0
mov word [rbp + 0x10e2], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x10e4], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x10e6], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x10e8], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0x10ea], ax
mov ecx, 0x69
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x10ec], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x10ee], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x10]
call fcn.140001db0
mov word [rbp + 0x10f0], ax
mov ecx, 0x46
lea edx, [rcx - 0x35]
call fcn.140001db0
mov word [rbp + 0x10f2], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x10f4], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x10f6], ax
mov ecx, 0x64
lea edx, [rcx - 0x50]
call fcn.140001db0
mov word [rbp + 0x10f8], ax
mov ecx, 0x65
lea edx, [rcx - 0x50]
call fcn.140001db0
mov word [rbp + 0x10fa], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x10fc], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 9]
call fcn.140001db0
mov word [rbp + 0x10fe], ax
mov ecx, 0x57
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0x1100], ax
mov ecx, 0x65
lea edx, [rcx - 0x4c]
call fcn.140001db0
mov word [rbp + 0x1102], ax
mov ecx, 0x62
lea edx, [rcx - 0x48]
call fcn.140001db0
mov word [rbp + 0x1104], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 5]
call fcn.140001db0
mov word [rbp + 0x1106], ax
mov ecx, 0x44
lea edx, [rcx - 0x28]
call fcn.140001db0
mov word [rbp + 0x1108], ax
mov ecx, 0x65
lea edx, [rcx - 0x48]
call fcn.140001db0
mov word [rbp + 0x110a], ax
mov ecx, 0x62
lea edx, [rcx - 0x44]
call fcn.140001db0
mov word [rbp + 0x110c], ax
mov ecx, 0x75
lea edx, [rcx - 0x56]
call fcn.140001db0
mov word [rbp + 0x110e], ax
mov ecx, 0x67
lea edx, [rcx - 0x47]
call fcn.140001db0
mov word [rbp + 0x1110], ax
mov ecx, 0x67
lea edx, [rcx - 0x46]
call fcn.140001db0
mov word [rbp + 0x1112], ax
mov ecx, 0x65
lea edx, [rcx - 0x43]
call fcn.140001db0
mov word [rbp + 0x1114], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x4f]
call fcn.140001db0
mov word [rbp + 0x1116], ax
xor ecx, ecx
lea edx, [rcx + 0x24]
call fcn.140001db0
mov word [rbp + 0x1118], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093e2a]
call fcn.140001db0
mov word [rbp + 0x111a], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093e2c]
call fcn.140001db0
mov word [rbp + 0x111c], ax
mov edx, Ordinal_41
movzx ecx, word [0x140093e2e]
call fcn.140001db0
mov word [rbp + 0x111e], ax
mov edx, Ordinal_41
movzx ecx, word [str.Fiddler]
call fcn.140001db0
mov word [rbp + 0x1120], ax
mov edx, reloc.WLDAP32.dll_Ordinal_41
movzx ecx, word [0x140093e32]
call fcn.140001db0
mov word [rbp + 0x1122], ax
mov edx, Ordinal_45
movzx ecx, word [0x140093e34]
call fcn.140001db0
mov word [rbp + 0x1124], ax
mov edx, Ordinal_45
movzx ecx, word [0x140093e36]
call fcn.140001db0
mov word [rbp + 0x1126], ax
mov edx, Ordinal_45
movzx ecx, word [0x140093e38]
call fcn.140001db0
mov word [rbp + 0x1128], ax
mov edx, reloc.WLDAP32.dll_Ordinal_45
movzx ecx, word [0x140093e3a]
call fcn.140001db0
mov word [rbp + 0x112a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_46
movzx ecx, word [0x140093e3c]
call fcn.140001db0
mov word [rbp + 0x112c], ax
mov edx, Ordinal_50
movzx ecx, word [0x140093e3e]
call fcn.140001db0
mov word [rbp + 0x112e], ax
mov edx, Ordinal_50
movzx ecx, word [str.x64dbg]
call fcn.140001db0
mov word [rbp + 0x1130], ax
mov edx, Ordinal_50
movzx ecx, word [0x140093e42]
call fcn.140001db0
mov word [rbp + 0x1132], ax
mov edx, reloc.WLDAP32.dll_Ordinal_50
movzx ecx, word [0x140093e44]
call fcn.140001db0
mov word [rbp + 0x1134], ax
mov edx, 0x33
movzx ecx, word [0x140093e46]
call fcn.140001db0
mov word [rbp + 0x1136], ax
mov edx, 0x34
movzx ecx, word [0x140093e48]
call fcn.140001db0
mov word [rbp + 0x1138], ax
mov edx, gethostname
movzx ecx, word [0x140093e4a]
call fcn.140001db0
mov word [rbp + 0x113a], ax
mov edx, gethostname
movzx ecx, word [0x140093e4c]
call fcn.140001db0
mov word [rbp + 0x113c], ax
mov edx, gethostname
movzx ecx, word [0x140093e4e]
call fcn.140001db0
mov word [rbp + 0x113e], ax
mov edx, Ordinal_60
movzx ecx, word [str.dnSpy]
call fcn.140001db0
mov word [rbp + 0x1140], ax
mov edx, reloc.WS2_32.dll_gethostname
movzx ecx, word [0x140093e52]
call fcn.140001db0
mov word [rbp + 0x1142], ax
mov edx, Ordinal_60
movzx ecx, word [0x140093e54]
call fcn.140001db0
mov word [rbp + 0x1144], ax
mov edx, Ordinal_60
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp + 0x1146], ax
mov edx, reloc.WLDAP32.dll_Ordinal_60
movzx ecx, word [0x140093e58]
call fcn.140001db0
mov word [rbp + 0x1148], ax
mov edx, 0x3d
movzx ecx, word [0x140093e5a]
call fcn.140001db0
mov word [rbp + 0x114a], ax
mov edx, 0x3e
movzx ecx, word [0x140093e5c]
call fcn.140001db0
mov word [rbp + 0x114c], ax
mov edx, 0x3f
movzx ecx, word [0x140093e5e]
call fcn.140001db0
mov word [rbp + 0x114e], ax
mov edx, 0x40
movzx ecx, word [0x140093e60]
call fcn.140001db0
mov word [rbp + 0x1150], ax
mov edx, 0x41
movzx ecx, word [0x140093e62]
call fcn.140001db0
mov word [rbp + 0x1152], ax
mov edx, 0x42
movzx ecx, word [0x140093e64]
call fcn.140001db0
mov word [rbp + 0x1154], ax
mov edx, 0x43
movzx ecx, word [0x140093e66]
call fcn.140001db0
mov word [rbp + 0x1156], ax
mov edx, 0x44
movzx ecx, word [str.Cheat_Engine_7.5]
call fcn.140001db0
mov word [rbp + 0x1158], ax
mov edx, 0x45
movzx ecx, word [0x140093e6a]
call fcn.140001db0
mov word [rbp + 0x115a], ax
mov edx, 0x46
movzx ecx, word [0x140093e6c]
call fcn.140001db0
mov word [rbp + 0x115c], ax
mov edx, 0x47
movzx ecx, word [0x140093e6e]
call fcn.140001db0
mov word [rbp + 0x115e], ax
mov edx, 0x48
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x1160], ax
xor eax, eax
mov word [rbp + 0x1162], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x10d0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x49
jb 0x14000e1e0
mov word [rbp + 0x1162], di
lea rax, [rbp + 0x10d0]
mov qword [rbp + 0x1248], rax
mov ecx, 0x46
xor edx, edx
call fcn.140001db0
mov word [rbp - 8], ax
mov ecx, 0x69
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp - 6], ax
mov ecx, 0x64
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp - 4], ax
mov ecx, 0x64
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp - 2], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 2], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 4], ax
xor ecx, ecx
lea edx, [rcx + 7]
call fcn.140001db0
mov word [rbp + 6], ax
mov edx, 8
movzx ecx, word [str.x64dbg]
call fcn.140001db0
mov word [rbp + 8], ax
mov edx, 9
movzx ecx, word [0x140093e42]
call fcn.140001db0
mov word [rbp + 0xa], ax
mov edx, 0xa
movzx ecx, word [0x140093e44]
call fcn.140001db0
mov word [rbp + 0xc], ax
mov edx, ntohs
movzx ecx, word [0x140093e46]
call fcn.140001db0
mov word [rbp + 0xe], ax
mov edx, ntohs
movzx ecx, word [0x140093e48]
call fcn.140001db0
mov word [rbp + 0x10], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093e4a]
call fcn.140001db0
mov word [rbp + 0x12], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093e4c]
call fcn.140001db0
mov word [rbp + 0x14], ax
xor eax, eax
mov word [rbp + 0x16], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp - 8]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0xf
jb 0x14000e330
mov word [rbp + 0x16], di
lea rax, [rbp - 8]
mov qword [rbp + 0x1250], rax
mov ecx, 0x78
xor edx, edx
call fcn.140001db0
mov word [rsp + 0x78], ax
mov ecx, gethostname
lea edx, [rcx - 0x35]
call fcn.140001db0
mov word [rsp + 0x7a], ax
mov ecx, 0x34
lea edx, [rcx - 0x32]
call fcn.140001db0
mov word [rsp + 0x7c], ax
mov ecx, 0x64
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rsp + 0x7e], ax
mov ecx, 0x62
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp - 0x80], ax
mov ecx, 0x67
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp - 0x7e], ax
xor ecx, ecx
lea edx, [rcx + 6]
call fcn.140001db0
mov word [rbp - 0x7c], ax
mov edx, 7
movzx ecx, word [0x140093e4e]
call fcn.140001db0
mov word [rbp - 0x7a], ax
mov edx, 8
movzx ecx, word [str.dnSpy]
call fcn.140001db0
mov word [rbp - 0x78], ax
mov edx, 9
movzx ecx, word [0x140093e52]
call fcn.140001db0
mov word [rbp - 0x76], ax
mov edx, 0xa
movzx ecx, word [0x140093e54]
call fcn.140001db0
mov word [rbp - 0x74], ax
mov edx, ntohs
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp - 0x72], ax
mov edx, ntohs
movzx ecx, word [0x140093e58]
call fcn.140001db0
mov word [rbp - 0x70], ax
xor eax, eax
mov word [rbp - 0x6e], ax
mov edx, edi
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x78]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0xd
jb 0x14000e460
mov word [rbp - 0x6e], di
lea rax, [rsp + 0x78]
mov qword [rbp + 0x1258], rax
mov ecx, 0x64
xor edx, edx
call fcn.140001db0
mov word [rsp + 0x60], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rsp + 0x62], ax
mov ecx, 0x53
lea edx, [rcx - 0x51]
call fcn.140001db0
mov word [rsp + 0x64], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rsp + 0x66], ax
mov ecx, 0x79
lea edx, [rcx - 0x75]
call fcn.140001db0
mov word [rsp + 0x68], ax
xor ecx, ecx
lea edx, [rcx + 5]
call fcn.140001db0
mov word [rsp + 0x6a], ax
mov edx, 6
movzx ecx, word [0x140093e5c]
call fcn.140001db0
mov word [rsp + 0x6c], ax
mov edx, 7
movzx ecx, word [0x140093e5e]
call fcn.140001db0
mov word [rsp + 0x6e], ax
mov edx, 8
movzx ecx, word [0x140093e60]
call fcn.140001db0
mov word [rsp + 0x70], ax
mov edx, 9
movzx ecx, word [0x140093e62]
call fcn.140001db0
mov word [rsp + 0x72], ax
mov edx, 0xa
movzx ecx, word [0x140093e64]
call fcn.140001db0
mov word [rsp + 0x74], ax
xor eax, eax
mov word [rsp + 0x76], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x60]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0xb
jb 0x14000e570
mov word [rsp + 0x76], di
lea rax, [rsp + 0x60]
mov qword [rbp + 0x1260], rax
mov ecx, 0x48
xor edx, edx
call fcn.140001db0
mov word [rsp + 0x40], ax
mov ecx, 0x78
lea edx, [rcx - 0x77]
call fcn.140001db0
mov word [rsp + 0x42], ax
mov ecx, 0x44
lea edx, [rcx - 0x42]
call fcn.140001db0
mov word [rsp + 0x44], ax
xor ecx, ecx
lea edx, [rcx + 3]
call fcn.140001db0
mov word [rsp + 0x46], ax
mov edx, 4
movzx ecx, word [str.Cheat_Engine_7.5]
call fcn.140001db0
mov word [rsp + 0x48], ax
mov edx, 5
movzx ecx, word [0x140093e6a]
call fcn.140001db0
mov word [rsp + 0x4a], ax
mov edx, 6
movzx ecx, word [0x140093e6c]
call fcn.140001db0
mov word [rsp + 0x4c], ax
xor eax, eax
mov word [rsp + 0x4e], ax
mov edx, edi
nop dword [rax]
movsxd rax, edx
lea rcx, [rsp + 0x40]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 7
jb 0x14000e630
mov word [rsp + 0x4e], di
lea rax, [rsp + 0x40]
mov qword [rbp + 0x1268], rax
mov ecx, 0x43
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xa20], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xa22], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0xa24], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0xa26], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0xa28], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1b]
call fcn.140001db0
mov word [rbp + 0xa2a], ax
mov ecx, 0x45
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0xa2c], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xa2e], ax
mov ecx, 0x67
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0xa30], ax
mov ecx, 0x69
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xa32], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xa34], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0xa36], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x14]
call fcn.140001db0
mov word [rbp + 0xa38], ax
mov ecx, gethostname
lea edx, [rcx - 0x2a]
call fcn.140001db0
mov word [rbp + 0xa3a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x20]
call fcn.140001db0
mov word [rbp + 0xa3c], ax
mov ecx, gethostname
lea edx, [rcx - 0x26]
call fcn.140001db0
mov word [rbp + 0xa3e], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0xa40], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093e8a]
call fcn.140001db0
mov word [rbp + 0xa42], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093e8c]
call fcn.140001db0
mov word [rbp + 0xa44], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093e8e]
call fcn.140001db0
mov word [rbp + 0xa46], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Cheat_Engine_7.4]
call fcn.140001db0
mov word [rbp + 0xa48], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093e92]
call fcn.140001db0
mov word [rbp + 0xa4a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093e94]
call fcn.140001db0
mov word [rbp + 0xa4c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093e96]
call fcn.140001db0
mov word [rbp + 0xa4e], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0xa50], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0xa52], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093e9c]
call fcn.140001db0
mov word [rbp + 0xa54], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093e9e]
call fcn.140001db0
mov word [rbp + 0xa56], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093ea0]
call fcn.140001db0
mov word [rbp + 0xa58], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093ea2]
call fcn.140001db0
mov word [rbp + 0xa5a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093ea4]
call fcn.140001db0
mov word [rbp + 0xa5c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093ea6]
call fcn.140001db0
mov word [rbp + 0xa5e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0xa60], ax
xor eax, eax
mov word [rbp + 0xa62], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xa20]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x14000e940
mov word [rbp + 0xa62], di
lea rax, [rbp + 0xa20]
mov qword [rbp + 0x1270], rax
mov ecx, 0x43
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x980], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x982], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x984], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x986], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x988], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1b]
call fcn.140001db0
mov word [rbp + 0x98a], ax
mov ecx, 0x45
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0x98c], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x98e], ax
mov ecx, 0x67
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x990], ax
mov ecx, 0x69
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x992], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x994], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x996], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x14]
call fcn.140001db0
mov word [rbp + 0x998], ax
mov ecx, gethostname
lea edx, [rcx - 0x2a]
call fcn.140001db0
mov word [rbp + 0x99a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x20]
call fcn.140001db0
mov word [rbp + 0x99c], ax
mov ecx, 0x34
lea edx, [rcx - 0x25]
call fcn.140001db0
mov word [rbp + 0x99e], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0x9a0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093eb2]
call fcn.140001db0
mov word [rbp + 0x9a2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093eb4]
call fcn.140001db0
mov word [rbp + 0x9a4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093eb6]
call fcn.140001db0
mov word [rbp + 0x9a6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Cheat_Engine_7.3]
call fcn.140001db0
mov word [rbp + 0x9a8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093eba]
call fcn.140001db0
mov word [rbp + 0x9aa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093ebc]
call fcn.140001db0
mov word [rbp + 0x9ac], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093ebe]
call fcn.140001db0
mov word [rbp + 0x9ae], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x9b0], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x9b2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093ec4]
call fcn.140001db0
mov word [rbp + 0x9b4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093ec6]
call fcn.140001db0
mov word [rbp + 0x9b6], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093ec8]
call fcn.140001db0
mov word [rbp + 0x9b8], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093eca]
call fcn.140001db0
mov word [rbp + 0x9ba], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093ecc]
call fcn.140001db0
mov word [rbp + 0x9bc], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093ece]
call fcn.140001db0
mov word [rbp + 0x9be], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x9c0], ax
xor eax, eax
mov word [rbp + 0x9c2], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x980]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x14000ec50
mov word [rbp + 0x9c2], di
lea rax, [rbp + 0x980]
mov qword [rbp + 0x1278], rax
mov ecx, 0x43
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x930], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x932], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x934], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x936], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x938], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1b]
call fcn.140001db0
mov word [rbp + 0x93a], ax
mov ecx, 0x45
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0x93c], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x93e], ax
mov ecx, 0x67
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x940], ax
mov ecx, 0x69
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x942], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x944], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x946], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x14]
call fcn.140001db0
mov word [rbp + 0x948], ax
mov ecx, gethostname
lea edx, [rcx - 0x2a]
call fcn.140001db0
mov word [rbp + 0x94a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x20]
call fcn.140001db0
mov word [rbp + 0x94c], ax
mov ecx, 0x33
lea edx, [rcx - 0x24]
call fcn.140001db0
mov word [rbp + 0x94e], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0x950], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093eda]
call fcn.140001db0
mov word [rbp + 0x952], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093edc]
call fcn.140001db0
mov word [rbp + 0x954], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093ede]
call fcn.140001db0
mov word [rbp + 0x956], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Cheat_Engine_7.2]
call fcn.140001db0
mov word [rbp + 0x958], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093ee2]
call fcn.140001db0
mov word [rbp + 0x95a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093ee4]
call fcn.140001db0
mov word [rbp + 0x95c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093ee6]
call fcn.140001db0
mov word [rbp + 0x95e], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x960], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x962], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093eec]
call fcn.140001db0
mov word [rbp + 0x964], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093eee]
call fcn.140001db0
mov word [rbp + 0x966], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093ef0]
call fcn.140001db0
mov word [rbp + 0x968], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093ef2]
call fcn.140001db0
mov word [rbp + 0x96a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093ef4]
call fcn.140001db0
mov word [rbp + 0x96c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093ef6]
call fcn.140001db0
mov word [rbp + 0x96e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x970], ax
xor eax, eax
mov word [rbp + 0x972], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x930]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x14000ef60
mov word [rbp + 0x972], di
lea rax, [rbp + 0x930]
mov qword [rbp + 0x1280], rax
mov ecx, 0x43
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x8e0], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x8e2], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x8e4], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x8e6], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x8e8], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1b]
call fcn.140001db0
mov word [rbp + 0x8ea], ax
mov ecx, 0x45
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0x8ec], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x8ee], ax
mov ecx, 0x67
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x8f0], ax
mov ecx, 0x69
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x8f2], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x8f4], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x8f6], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x14]
call fcn.140001db0
mov word [rbp + 0x8f8], ax
mov ecx, gethostname
lea edx, [rcx - 0x2a]
call fcn.140001db0
mov word [rbp + 0x8fa], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x20]
call fcn.140001db0
mov word [rbp + 0x8fc], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_50
lea edx, [rcx - 0x23]
call fcn.140001db0
mov word [rbp + 0x8fe], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0x900], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093f02]
call fcn.140001db0
mov word [rbp + 0x902], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093f04]
call fcn.140001db0
mov word [rbp + 0x904], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093f06]
call fcn.140001db0
mov word [rbp + 0x906], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Cheat_Engine_7.1]
call fcn.140001db0
mov word [rbp + 0x908], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093f0a]
call fcn.140001db0
mov word [rbp + 0x90a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093f0c]
call fcn.140001db0
mov word [rbp + 0x90c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093f0e]
call fcn.140001db0
mov word [rbp + 0x90e], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x910], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x912], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093f14]
call fcn.140001db0
mov word [rbp + 0x914], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093f16]
call fcn.140001db0
mov word [rbp + 0x916], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f18]
call fcn.140001db0
mov word [rbp + 0x918], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f1a]
call fcn.140001db0
mov word [rbp + 0x91a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093f1c]
call fcn.140001db0
mov word [rbp + 0x91c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f1e]
call fcn.140001db0
mov word [rbp + 0x91e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x920], ax
xor eax, eax
mov word [rbp + 0x922], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x8e0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x14000f270
mov word [rbp + 0x922], di
lea rax, [rbp + 0x8e0]
mov qword [rbp + 0x1288], rax
mov ecx, 0x43
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x890], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x892], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x894], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x896], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x898], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1b]
call fcn.140001db0
mov word [rbp + 0x89a], ax
mov ecx, 0x45
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0x89c], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x89e], ax
mov ecx, 0x67
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x8a0], ax
mov ecx, 0x69
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x8a2], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x8a4], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x8a6], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x14]
call fcn.140001db0
mov word [rbp + 0x8a8], ax
mov ecx, gethostname
lea edx, [rcx - 0x2a]
call fcn.140001db0
mov word [rbp + 0x8aa], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x20]
call fcn.140001db0
mov word [rbp + 0x8ac], ax
mov ecx, Ordinal_50
lea edx, [rcx - 0x22]
call fcn.140001db0
mov word [rbp + 0x8ae], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0x8b0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093f2a]
call fcn.140001db0
mov word [rbp + 0x8b2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093f2c]
call fcn.140001db0
mov word [rbp + 0x8b4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093f2e]
call fcn.140001db0
mov word [rbp + 0x8b6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Cheat_Engine_7.0]
call fcn.140001db0
mov word [rbp + 0x8b8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093f32]
call fcn.140001db0
mov word [rbp + 0x8ba], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093f34]
call fcn.140001db0
mov word [rbp + 0x8bc], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093f36]
call fcn.140001db0
mov word [rbp + 0x8be], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x8c0], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x8c2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093f3c]
call fcn.140001db0
mov word [rbp + 0x8c4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093f3e]
call fcn.140001db0
mov word [rbp + 0x8c6], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f40]
call fcn.140001db0
mov word [rbp + 0x8c8], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f42]
call fcn.140001db0
mov word [rbp + 0x8ca], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093f44]
call fcn.140001db0
mov word [rbp + 0x8cc], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f46]
call fcn.140001db0
mov word [rbp + 0x8ce], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x8d0], ax
xor eax, eax
mov word [rbp + 0x8d2], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x890]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x14000f580
mov word [rbp + 0x8d2], di
lea rax, [rbp + 0x890]
mov qword [rbp + 0x1290], rax
mov ecx, 0x43
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x840], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x842], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x844], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x846], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0x848], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1b]
call fcn.140001db0
mov word [rbp + 0x84a], ax
mov ecx, 0x45
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0x84c], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0x84e], ax
mov ecx, 0x67
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x850], ax
mov ecx, 0x69
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x852], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x854], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x856], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x14]
call fcn.140001db0
mov word [rbp + 0x858], ax
mov ecx, gethostname
lea edx, [rcx - 0x2a]
call fcn.140001db0
mov word [rbp + 0x85a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x20]
call fcn.140001db0
mov word [rbp + 0x85c], ax
mov ecx, Ordinal_50
lea edx, [rcx - 0x21]
call fcn.140001db0
mov word [rbp + 0x85e], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0x860], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093f52]
call fcn.140001db0
mov word [rbp + 0x862], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093f54]
call fcn.140001db0
mov word [rbp + 0x864], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093f56]
call fcn.140001db0
mov word [rbp + 0x866], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Cheat_Engine_6.9]
call fcn.140001db0
mov word [rbp + 0x868], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093f5a]
call fcn.140001db0
mov word [rbp + 0x86a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093f5c]
call fcn.140001db0
mov word [rbp + 0x86c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093f5e]
call fcn.140001db0
mov word [rbp + 0x86e], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0x870], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x872], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093f64]
call fcn.140001db0
mov word [rbp + 0x874], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093f66]
call fcn.140001db0
mov word [rbp + 0x876], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f68]
call fcn.140001db0
mov word [rbp + 0x878], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f6a]
call fcn.140001db0
mov word [rbp + 0x87a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093f6c]
call fcn.140001db0
mov word [rbp + 0x87c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f6e]
call fcn.140001db0
mov word [rbp + 0x87e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x880], ax
xor eax, eax
mov word [rbp + 0x882], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x840]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x14000f890
mov word [rbp + 0x882], di
lea rax, [rbp + 0x840]
mov qword [rbp + 0x1298], rax
mov ecx, 0x43
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xbb0], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xbb2], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0xbb4], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0xbb6], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0xbb8], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1b]
call fcn.140001db0
mov word [rbp + 0xbba], ax
mov ecx, 0x45
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0xbbc], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xbbe], ax
mov ecx, 0x67
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0xbc0], ax
mov ecx, 0x69
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xbc2], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xbc4], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0xbc6], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x14]
call fcn.140001db0
mov word [rbp + 0xbc8], ax
mov ecx, gethostname
lea edx, [rcx - 0x29]
call fcn.140001db0
mov word [rbp + 0xbca], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x20]
call fcn.140001db0
mov word [rbp + 0xbcc], ax
mov ecx, reloc.WS2_32.dll_gethostname
lea edx, [rcx - 0x2a]
call fcn.140001db0
mov word [rbp + 0xbce], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0xbd0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093f7a]
call fcn.140001db0
mov word [rbp + 0xbd2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093f7c]
call fcn.140001db0
mov word [rbp + 0xbd4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093f7e]
call fcn.140001db0
mov word [rbp + 0xbd6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Cheat_Engine_6.8]
call fcn.140001db0
mov word [rbp + 0xbd8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093f82]
call fcn.140001db0
mov word [rbp + 0xbda], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093f84]
call fcn.140001db0
mov word [rbp + 0xbdc], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093f86]
call fcn.140001db0
mov word [rbp + 0xbde], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSACleanup]
call fcn.140001db0
mov word [rbp + 0xbe0], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0xbe2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093f8c]
call fcn.140001db0
mov word [rbp + 0xbe4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140093f8e]
call fcn.140001db0
mov word [rbp + 0xbe6], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f90]
call fcn.140001db0
mov word [rbp + 0xbe8], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f92]
call fcn.140001db0
mov word [rbp + 0xbea], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093f94]
call fcn.140001db0
mov word [rbp + 0xbec], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093f96]
call fcn.140001db0
mov word [rbp + 0xbee], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0xbf0], ax
xor eax, eax
mov word [rbp + 0xbf2], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xbb0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x14000fba0
mov word [rbp + 0xbf2], di
lea rax, [rbp + 0xbb0]
mov qword [rbp + 0x12a0], rax
mov ecx, 0x43
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xc00], ax
mov ecx, 0x68
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xc02], ax
mov ecx, 0x65
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0xc04], ax
mov ecx, 0x61
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0xc06], ax
mov ecx, reloc.WS2_32.dll_WSACleanup
lea edx, [rcx - 0x70]
call fcn.140001db0
mov word [rbp + 0xc08], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1b]
call fcn.140001db0
mov word [rbp + 0xc0a], ax
mov ecx, 0x45
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0xc0c], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x67]
call fcn.140001db0
mov word [rbp + 0xc0e], ax
mov ecx, 0x67
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0xc10], ax
mov ecx, 0x69
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xc12], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xc14], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0xc16], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x14]
call fcn.140001db0
mov word [rbp + 0xc18], ax
mov ecx, gethostname
lea edx, [rcx - 0x29]
call fcn.140001db0
mov word [rbp + 0xc1a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x20]
call fcn.140001db0
mov word [rbp + 0xc1c], ax
mov ecx, Ordinal_60
lea edx, [rcx - 0x29]
call fcn.140001db0
mov word [rbp + 0xc1e], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0xc20], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093fa2]
call fcn.140001db0
mov word [rbp + 0xc22], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093fa4]
call fcn.140001db0
mov word [rbp + 0xc24], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140093fa6]
call fcn.140001db0
mov word [rbp + 0xc26], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093fa8]
call fcn.140001db0
mov word [rbp + 0xc28], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093faa]
call fcn.140001db0
mov word [rbp + 0xc2a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x140093fac]
call fcn.140001db0
mov word [rbp + 0xc2c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093fae]
call fcn.140001db0
mov word [rbp + 0xc2e], ax
mov edx, Ordinal_26
movzx ecx, word [str.IDA_v7.0.170914]
call fcn.140001db0
mov word [rbp + 0xc30], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093fb2]
call fcn.140001db0
mov word [rbp + 0xc32], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093fb4]
call fcn.140001db0
mov word [rbp + 0xc34], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0xc36], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093fb8]
call fcn.140001db0
mov word [rbp + 0xc38], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093fba]
call fcn.140001db0
mov word [rbp + 0xc3a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0xc3c], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093fbe]
call fcn.140001db0
mov word [rbp + 0xc3e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_46]
call fcn.140001db0
mov word [rbp + 0xc40], ax
xor eax, eax
mov word [rbp + 0xc42], ax
mov edx, edi
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0xc00]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x14000feb0
mov word [rbp + 0xc42], di
lea rax, [rbp + 0xc00]
mov qword [rbp + 0x12a8], rax
mov ecx, 0x49
xor edx, edx
call fcn.140001db0
mov word [rsp + 0x50], ax
mov ecx, 0x64
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rsp + 0x52], ax
mov ecx, 0x61
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rsp + 0x54], ax
xor ecx, ecx
lea edx, [rcx + 3]
call fcn.140001db0
mov word [rsp + 0x56], ax
mov edx, 4
movzx ecx, word [str.IDA_v7.0.170914]
call fcn.140001db0
mov word [rsp + 0x58], ax
mov edx, 5
movzx ecx, word [0x140093fb2]
call fcn.140001db0
mov word [rsp + 0x5a], ax
mov edx, 6
movzx ecx, word [0x140093fb4]
call fcn.140001db0
mov word [rsp + 0x5c], ax
xor eax, eax
mov word [rsp + 0x5e], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rsp + 0x50]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 7
jb 0x14000ff70
mov word [rsp + 0x5e], di
lea rax, [rsp + 0x50]
mov qword [rbp + 0x12b0], rax
mov ecx, 0x49
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x7c0], ax
mov ecx, 0x44
lea edx, [rcx - 0x43]
call fcn.140001db0
mov word [rbp + 0x7c2], ax
mov ecx, 0x41
lea edx, [rcx - 0x3f]
call fcn.140001db0
mov word [rbp + 0x7c4], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1d]
call fcn.140001db0
mov word [rbp + 0x7c6], ax
mov ecx, 0x76
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0x7c8], ax
mov ecx, gethostname
lea edx, [rcx - 0x32]
call fcn.140001db0
mov word [rbp + 0x7ca], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x28]
call fcn.140001db0
mov word [rbp + 0x7cc], ax
mov ecx, Ordinal_50
lea edx, [rcx - 0x29]
call fcn.140001db0
mov word [rbp + 0x7ce], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x26]
call fcn.140001db0
mov word [rbp + 0x7d0], ax
mov ecx, Ordinal_50
lea edx, [rcx - 0x28]
call fcn.140001db0
mov word [rbp + 0x7d2], ax
mov ecx, gethostname
lea edx, [rcx - 0x2d]
call fcn.140001db0
mov word [rbp + 0x7d4], ax
mov ecx, Ordinal_50
lea edx, [rcx - 0x25]
call fcn.140001db0
mov word [rbp + 0x7d6], ax
mov ecx, reloc.WS2_32.dll_gethostname
lea edx, [rcx - 0x2d]
call fcn.140001db0
mov word [rbp + 0x7d8], ax
mov ecx, Ordinal_50
lea edx, [rcx - 0x24]
call fcn.140001db0
mov word [rbp + 0x7da], ax
mov ecx, 0x34
lea edx, [rcx - 0x26]
call fcn.140001db0
mov word [rbp + 0x7dc], ax
xor ecx, ecx
lea edx, [rcx + 0xf]
call fcn.140001db0
mov word [rbp + 0x7de], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.Ida_Pro]
call fcn.140001db0
mov word [rbp + 0x7e0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140093fd2]
call fcn.140001db0
mov word [rbp + 0x7e2], ax
mov dword [rbp + 0x7e2], eax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140093fd4]
call fcn.140001db0
mov word [rbp + 0x7e4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x7e6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140093fd8]
call fcn.140001db0
mov word [rbp + 0x7e8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140093fda]
call fcn.140001db0
mov word [rbp + 0x7ea], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x7ec], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140093fde]
call fcn.140001db0
mov word [rbp + 0x7ee], ax
mov edx, Ordinal_26
movzx ecx, word [str.Ida_Freeware]
call fcn.140001db0
mov word [rbp + 0x7f0], ax
mov edx, Ordinal_26
movzx ecx, word [0x140093fe2]
call fcn.140001db0
mov word [rbp + 0x7f2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140093fe4]
call fcn.140001db0
mov word [rbp + 0x7f4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x7f6], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093fe8]
call fcn.140001db0
mov word [rbp + 0x7f8], ax
mov edx, Ordinal_32
movzx ecx, word [0x140093fea]
call fcn.140001db0
mov word [rbp + 0x7fa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x140093fec]
call fcn.140001db0
mov word [rbp + 0x7fc], ax
xor eax, eax
mov word [rbp + 0x7fe], ax
mov edx, edi
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp + 0x7c0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1f
jb 0x140010250
mov word [rbp + 0x7fe], di
lea rax, [rbp + 0x7c0]
mov qword [rbp + 0x12b8], rax
mov ecx, 0x49
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x18], ax
mov ecx, 0x64
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x1a], ax
mov ecx, 0x61
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x1c], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1d]
call fcn.140001db0
mov word [rbp + 0x1e], ax
mov ecx, 0x50
lea edx, [rcx - 0x4c]
call fcn.140001db0
mov word [rbp + 0x20], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x22], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0x24], ax
xor ecx, ecx
lea edx, [rcx + 7]
call fcn.140001db0
mov word [rbp + 0x26], ax
mov edx, 8
movzx ecx, word [str.Ida_Freeware]
call fcn.140001db0
mov word [rbp + 0x28], ax
mov edx, 9
movzx ecx, word [0x140093fe2]
call fcn.140001db0
mov word [rbp + 0x2a], ax
mov edx, 0xa
movzx ecx, word [0x140093fe4]
call fcn.140001db0
mov word [rbp + 0x2c], ax
mov edx, ntohs
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x2e], ax
mov edx, ntohs
movzx ecx, word [0x140093fe8]
call fcn.140001db0
mov word [rbp + 0x30], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093fea]
call fcn.140001db0
mov word [rbp + 0x32], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093fec]
call fcn.140001db0
mov word [rbp + 0x34], ax
xor eax, eax
mov word [rbp + 0x36], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0x18]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0xf
jb 0x1400103a0
mov word [rbp + 0x36], di
lea rax, [rbp + 0x18]
mov qword [rbp + 0x12c0], rax
mov ecx, 0x49
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x480], ax
mov ecx, 0x64
lea edx, [rcx - 0x63]
call fcn.140001db0
mov word [rbp + 0x482], ax
mov ecx, 0x61
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x484], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x1d]
call fcn.140001db0
mov word [rbp + 0x486], ax
mov ecx, 0x46
lea edx, [rcx - 0x42]
call fcn.140001db0
mov word [rbp + 0x488], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x48a], ax
mov ecx, 0x65
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x48c], ax
mov ecx, 0x65
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0x48e], ax
mov ecx, 0x77
lea edx, [rcx - 0x6f]
call fcn.140001db0
mov word [rbp + 0x490], ax
mov ecx, 0x61
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0x492], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x494], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x496], ax
xor ecx, ecx
lea edx, [rcx + 0xc]
call fcn.140001db0
mov word [rbp + 0x498], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140093ffa]
call fcn.140001db0
mov word [rbp + 0x49a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140093ffc]
call fcn.140001db0
mov word [rbp + 0x49c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140093ffe]
call fcn.140001db0
mov word [rbp + 0x49e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.ProcessHacker]
call fcn.140001db0
mov word [rbp + 0x4a0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140094002]
call fcn.140001db0
mov word [rbp + 0x4a2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x4a4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140094006]
call fcn.140001db0
mov word [rbp + 0x4a6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140094008]
call fcn.140001db0
mov word [rbp + 0x4a8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x4aa], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x4ac], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x14009400e]
call fcn.140001db0
mov word [rbp + 0x4ae], ax
mov edx, Ordinal_26
movzx ecx, word [0x140094010]
call fcn.140001db0
mov word [rbp + 0x4b0], ax
xor eax, eax
mov word [rbp + 0x4b2], ax
mov edx, edi
movsxd rax, edx
lea rcx, [rbp + 0x480]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x19
jb 0x1400105f2
mov word [rbp + 0x4b2], di
lea rax, [rbp + 0x480]
mov qword [rbp + 0x12c8], rax
mov ecx, 0x50
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x560], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x562], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x564], ax
mov ecx, 0x63
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x566], ax
mov ecx, 0x65
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x568], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x56a], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x56c], ax
mov ecx, 0x48
lea edx, [rcx - 0x41]
call fcn.140001db0
mov word [rbp + 0x56e], ax
mov ecx, 0x61
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x570], ax
mov ecx, 0x63
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x572], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x574], ax
mov ecx, 0x65
lea edx, [rcx - 0x5a]
call fcn.140001db0
mov word [rbp + 0x576], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x66]
call fcn.140001db0
mov word [rbp + 0x578], ax
xor ecx, ecx
lea edx, [rcx + 0xd]
call fcn.140001db0
mov word [rbp + 0x57a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x14009401c]
call fcn.140001db0
mov word [rbp + 0x57c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x14009401e]
call fcn.140001db0
mov word [rbp + 0x57e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.Process_Hacker_2]
call fcn.140001db0
mov word [rbp + 0x580], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140094022]
call fcn.140001db0
mov word [rbp + 0x582], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0x584], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140094026]
call fcn.140001db0
mov word [rbp + 0x586], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140094028]
call fcn.140001db0
mov word [rbp + 0x588], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x58a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x58c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x58e], ax
mov edx, Ordinal_26
movzx ecx, word [0x140094030]
call fcn.140001db0
mov word [rbp + 0x590], ax
mov edx, Ordinal_26
movzx ecx, word [0x140094032]
call fcn.140001db0
mov word [rbp + 0x592], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140094034]
call fcn.140001db0
mov word [rbp + 0x594], ax
xor eax, eax
mov word [rbp + 0x596], ax
mov edx, edi
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp + 0x560]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1b
jb 0x140010880
mov word [rbp + 0x596], di
lea rax, [rbp + 0x560]
mov qword [rbp + 0x12d0], rax
mov ecx, 0x50
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xc50], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0xc52], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0xc54], ax
mov ecx, 0x63
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xc56], ax
mov ecx, 0x65
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0xc58], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0xc5a], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0xc5c], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x19]
call fcn.140001db0
mov word [rbp + 0xc5e], ax
mov ecx, 0x48
lea edx, [rcx - 0x40]
call fcn.140001db0
mov word [rbp + 0xc60], ax
mov ecx, 0x61
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0xc62], ax
mov ecx, 0x63
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0xc64], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xc66], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0xc68], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0xc6a], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x12]
call fcn.140001db0
mov word [rbp + 0xc6c], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_50
lea edx, [rcx - 0x23]
call fcn.140001db0
mov word [rbp + 0xc6e], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0xc70], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140094042]
call fcn.140001db0
mov word [rbp + 0xc72], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140094044]
call fcn.140001db0
mov word [rbp + 0xc74], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140094046]
call fcn.140001db0
mov word [rbp + 0xc76], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.OllyDbg]
call fcn.140001db0
mov word [rbp + 0xc78], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x14009404a]
call fcn.140001db0
mov word [rbp + 0xc7a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x14009404c]
call fcn.140001db0
mov word [rbp + 0xc7c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x14009404e]
call fcn.140001db0
mov word [rbp + 0xc7e], ax
mov edx, Ordinal_26
movzx ecx, word [0x140094050]
call fcn.140001db0
mov word [rbp + 0xc80], ax
mov edx, Ordinal_26
movzx ecx, word [0x140094052]
call fcn.140001db0
mov word [rbp + 0xc82], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140094054]
call fcn.140001db0
mov word [rbp + 0xc84], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [0x140094056]
call fcn.140001db0
mov word [rbp + 0xc86], ax
mov edx, Ordinal_32
movzx ecx, word [str.Fiddler.WebUi]
call fcn.140001db0
mov word [rbp + 0xc88], ax
mov edx, Ordinal_32
movzx ecx, word [0x14009405a]
call fcn.140001db0
mov word [rbp + 0xc8a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x14009405c]
call fcn.140001db0
mov word [rbp + 0xc8c], ax
mov edx, Ordinal_32
movzx ecx, word [0x14009405e]
call fcn.140001db0
mov word [rbp + 0xc8e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140094060]
call fcn.140001db0
mov word [rbp + 0xc90], ax
xor eax, eax
mov word [rbp + 0xc92], ax
mov r8d, edi
nop dword [rax]
movsxd rax, r8d
lea rdx, [rbp + 0xc50]
lea rdx, [rdx + rax*2]
lea eax, [rbx + r8]
xor word [rdx], ax
inc r8d
cmp r8d, 0x21
jb 0x140010b90
mov word [rbp + 0xc92], di
lea rax, [rbp + 0xc50]
mov qword [rbp + 0x12d8], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_79
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x38], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x3a], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp + 0x3c], ax
mov ecx, 0x79
lea edx, [rcx - 0x76]
call fcn.140001db0
mov word [rbp + 0x3e], ax
mov ecx, 0x44
lea edx, [rcx - 0x40]
call fcn.140001db0
mov word [rbp + 0x40], ax
mov ecx, 0x62
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x42], ax
mov ecx, 0x67
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x44], ax
xor ecx, ecx
lea edx, [rcx + 7]
call fcn.140001db0
mov word [rbp + 0x46], ax
mov edx, 8
movzx ecx, word [str.Fiddler.WebUi]
call fcn.140001db0
mov word [rbp + 0x48], ax
mov edx, 9
movzx ecx, word [0x14009405a]
call fcn.140001db0
mov word [rbp + 0x4a], ax
mov edx, 0xa
movzx ecx, word [0x14009405c]
call fcn.140001db0
mov word [rbp + 0x4c], ax
mov edx, ntohs
movzx ecx, word [0x14009405e]
call fcn.140001db0
mov word [rbp + 0x4e], ax
mov edx, ntohs
movzx ecx, word [0x140094060]
call fcn.140001db0
mov word [rbp + 0x50], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x140094062]
call fcn.140001db0
mov word [rbp + 0x52], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140094064]
call fcn.140001db0
mov word [rbp + 0x54], ax
xor eax, eax
mov word [rbp + 0x56], ax
mov edx, edi
movsxd rax, edx
lea rcx, [rbp + 0x38]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0xf
jb 0x140010ce2
mov word [rbp + 0x56], di
lea rax, [rbp + 0x38]
mov qword [rbp + 0x12e0], rax
mov ecx, 0x46
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x4f0], ax
mov ecx, 0x69
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x4f2], ax
mov ecx, 0x64
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0x4f4], ax
mov ecx, 0x64
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x4f6], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0x4f8], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x4fa], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x4fc], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0x4fe], ax
mov ecx, 0x57
lea edx, [rcx - 0x4f]
call fcn.140001db0
mov word [rbp + 0x500], ax
mov ecx, 0x65
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x502], ax
mov ecx, 0x62
lea edx, [rcx - 0x58]
call fcn.140001db0
mov word [rbp + 0x504], ax
mov ecx, 0x55
lea edx, [rcx - 0x4a]
call fcn.140001db0
mov word [rbp + 0x506], ax
mov ecx, 0x69
lea edx, [rcx - 0x5d]
call fcn.140001db0
mov word [rbp + 0x508], ax
xor ecx, ecx
lea edx, [rcx + 0xd]
call fcn.140001db0
mov word [rbp + 0x50a], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140094074]
call fcn.140001db0
mov word [rbp + 0x50c], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x140094076]
call fcn.140001db0
mov word [rbp + 0x50e], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [str.Dumpcap]
call fcn.140001db0
mov word [rbp + 0x510], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x14009407a]
call fcn.140001db0
mov word [rbp + 0x512], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x14009407c]
call fcn.140001db0
mov word [rbp + 0x514], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp + 0x516], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [0x140094080]
call fcn.140001db0
mov word [rbp + 0x518], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x140094082]
call fcn.140001db0
mov word [rbp + 0x51a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp + 0x51c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x140094086]
call fcn.140001db0
mov word [rbp + 0x51e], ax
mov edx, Ordinal_26
movzx ecx, word [str.KsDumper]
call fcn.140001db0
mov word [rbp + 0x520], ax
mov edx, Ordinal_26
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x522], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x14009408c]
call fcn.140001db0
mov word [rbp + 0x524], ax
xor eax, eax
mov word [rbp + 0x526], ax
mov edx, edi
movsxd rax, edx
lea rcx, [rbp + 0x4f0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x1b
jb 0x140010f60
mov word [rbp + 0x526], di
lea rax, [rbp + 0x4f0]
mov qword [rbp + 0x12e8], rax
mov ecx, 0x44
xor edx, edx
call fcn.140001db0
mov word [rbp - 0x68], ax
mov ecx, 0x75
lea edx, [rcx - 0x74]
call fcn.140001db0
mov word [rbp - 0x66], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp - 0x64], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp - 0x62], ax
mov ecx, 0x63
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp - 0x60], ax
mov ecx, 0x61
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp - 0x5e], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6a]
call fcn.140001db0
mov word [rbp - 0x5c], ax
xor ecx, ecx
lea edx, [rcx + 7]
call fcn.140001db0
mov word [rbp - 0x5a], ax
mov edx, 8
movzx ecx, word [str.KsDumper]
call fcn.140001db0
mov word [rbp - 0x58], ax
mov edx, 9
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp - 0x56], ax
mov edx, 0xa
movzx ecx, word [0x14009408c]
call fcn.140001db0
mov word [rbp - 0x54], ax
mov edx, ntohs
movzx ecx, word [0x14009408e]
call fcn.140001db0
mov word [rbp - 0x52], ax
mov edx, ntohs
movzx ecx, word [0x140094090]
call fcn.140001db0
mov word [rbp - 0x50], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [reloc.WS2_32.dll_WSASetLastError]
call fcn.140001db0
mov word [rbp - 0x4e], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [0x140094094]
call fcn.140001db0
mov word [rbp - 0x4c], ax
xor eax, eax
mov word [rbp - 0x4a], ax
mov r8d, edi
movsxd rax, r8d
lea rdx, [rbp - 0x68]
lea rdx, [rdx + rax*2]
lea eax, [rbx + r8]
xor word [rdx], ax
inc r8d
cmp r8d, 0xf
jb 0x1400110b0
mov word [rbp - 0x4a], di
lea rax, [rbp - 0x68]
mov qword [rbp + 0x12f0], rax
mov ecx, Ordinal_79
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x90], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0x92], ax
mov ecx, 0x44
lea edx, [rcx - 0x42]
call fcn.140001db0
mov word [rbp + 0x94], ax
mov ecx, 0x75
lea edx, [rcx - 0x72]
call fcn.140001db0
mov word [rbp + 0x96], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x69]
call fcn.140001db0
mov word [rbp + 0x98], ax
mov ecx, reloc.WS2_32.dll_WSASetLastError
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x9a], ax
mov ecx, 0x65
lea edx, [rcx - 0x5f]
call fcn.140001db0
mov word [rbp + 0x9c], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0x9e], ax
xor ecx, ecx
lea edx, [rcx + 8]
call fcn.140001db0
mov word [rbp + 0xa0], ax
mov edx, 9
movzx ecx, word [0x14009409a]
call fcn.140001db0
mov word [rbp + 0xa2], ax
mov edx, 0xa
movzx ecx, word [0x14009409c]
call fcn.140001db0
mov word [rbp + 0xa4], ax
mov edx, ntohs
movzx ecx, word [0x14009409e]
call fcn.140001db0
mov word [rbp + 0xa6], ax
mov edx, ntohs
movzx ecx, word [str.Progress_Telerik_Fiddler_Web_Debugger]
call fcn.140001db0
mov word [rbp + 0xa8], ax
mov edx, reloc.WS2_32.dll_listen
movzx ecx, word [0x1400940a2]
call fcn.140001db0
mov word [rbp + 0xaa], ax
mov edx, reloc.WS2_32.dll_ntohl
movzx ecx, word [reloc.WS2_32.dll_WSAGetLastError]
call fcn.140001db0
mov word [rbp + 0xac], ax
mov edx, reloc.WS2_32.dll_ntohs
movzx ecx, word [0x1400940a6]
call fcn.140001db0
mov word [rbp + 0xae], ax
mov edx, reloc.WS2_32.dll_recv
movzx ecx, word [0x1400940a8]
call fcn.140001db0
mov word [rbp + 0xb0], ax
xor eax, eax
mov word [rbp + 0xb2], ax
mov r8d, edi
nop word [rax + rax]
movsxd rax, r8d
lea rdx, [rbp + 0x90]
lea rdx, [rdx + rax*2]
lea eax, [rbx + r8]
xor word [rdx], ax
inc r8d
cmp r8d, 0x11
jb 0x140011260
mov word [rbp + 0xb2], di
lea rax, [rbp + 0x90]
mov qword [rbp + 0x12f8], rax
mov ecx, 0x50
xor edx, edx
call fcn.140001db0
mov word [rbp + 0x1170], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x71]
call fcn.140001db0
mov word [rbp + 0x1172], ax
mov ecx, reloc.WS2_32.dll_WSAGetLastError
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x1174], ax
mov ecx, 0x67
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0x1176], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6e]
call fcn.140001db0
mov word [rbp + 0x1178], ax
mov ecx, 0x65
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0x117a], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6d]
call fcn.140001db0
mov word [rbp + 0x117c], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0x117e], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x18]
call fcn.140001db0
mov word [rbp + 0x1180], ax
mov ecx, 0x54
lea edx, [rcx - 0x4b]
call fcn.140001db0
mov word [rbp + 0x1182], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x1184], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x61]
call fcn.140001db0
mov word [rbp + 0x1186], ax
mov ecx, 0x65
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0x1188], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0x118a], ax
mov ecx, 0x69
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x118c], ax
mov ecx, WSAGetLastError
lea edx, [rcx - 0x5c]
call fcn.140001db0
mov word [rbp + 0x118e], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 0x10]
call fcn.140001db0
mov word [rbp + 0x1190], ax
mov ecx, 0x46
lea edx, [rcx - 0x35]
call fcn.140001db0
mov word [rbp + 0x1192], ax
mov ecx, 0x69
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0x1194], ax
mov ecx, 0x64
lea edx, [rcx - 0x51]
call fcn.140001db0
mov word [rbp + 0x1196], ax
mov ecx, 0x64
lea edx, [rcx - 0x50]
call fcn.140001db0
mov word [rbp + 0x1198], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x57]
call fcn.140001db0
mov word [rbp + 0x119a], ax
mov ecx, 0x65
lea edx, [rcx - 0x4f]
call fcn.140001db0
mov word [rbp + 0x119c], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0x119e], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 8]
call fcn.140001db0
mov word [rbp + 0x11a0], ax
mov ecx, 0x57
lea edx, [rcx - 0x3e]
call fcn.140001db0
mov word [rbp + 0x11a2], ax
mov ecx, 0x65
lea edx, [rcx - 0x4b]
call fcn.140001db0
mov word [rbp + 0x11a4], ax
mov ecx, 0x62
lea edx, [rcx - 0x47]
call fcn.140001db0
mov word [rbp + 0x11a6], ax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea edx, [rcx - 4]
call fcn.140001db0
mov word [rbp + 0x11a8], ax
mov ecx, 0x44
lea edx, [rcx - 0x27]
call fcn.140001db0
mov word [rbp + 0x11aa], ax
mov ecx, 0x65
lea edx, [rcx - 0x47]
call fcn.140001db0
mov word [rbp + 0x11ac], ax
mov ecx, 0x62
lea edx, [rcx - 0x43]
call fcn.140001db0
mov word [rbp + 0x11ae], ax
mov ecx, 0x75
lea edx, [rcx - 0x55]
call fcn.140001db0
mov word [rbp + 0x11b0], ax
mov ecx, 0x67
lea edx, [rcx - 0x46]
call fcn.140001db0
mov word [rbp + 0x11b2], ax
mov ecx, 0x67
lea edx, [rcx - 0x45]
call fcn.140001db0
mov word [rbp + 0x11b4], ax
mov ecx, 0x65
lea edx, [rcx - 0x42]
call fcn.140001db0
mov word [rbp + 0x11b6], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x4e]
call fcn.140001db0
mov word [rbp + 0x11b8], ax
xor ecx, ecx
lea edx, [rcx + 0x25]
call fcn.140001db0
mov word [rbp + 0x11ba], ax
mov edx, Ordinal_41
movzx ecx, word [0x1400940ec]
call fcn.140001db0
mov word [rbp + 0x11bc], ax
mov edx, Ordinal_41
movzx ecx, word [0x1400940ee]
call fcn.140001db0
mov word [rbp + 0x11be], ax
mov edx, Ordinal_41
movzx ecx, word [str.WinDbgFrameClass]
call fcn.140001db0
mov word [rbp + 0x11c0], ax
mov edx, reloc.WLDAP32.dll_Ordinal_41
movzx ecx, word [0x1400940f2]
call fcn.140001db0
mov word [rbp + 0x11c2], ax
mov edx, Ordinal_45
movzx ecx, word [0x1400940f4]
call fcn.140001db0
mov word [rbp + 0x11c4], ax
mov edx, Ordinal_45
movzx ecx, word [0x1400940f6]
call fcn.140001db0
mov word [rbp + 0x11c6], ax
mov edx, Ordinal_45
movzx ecx, word [0x1400940f8]
call fcn.140001db0
mov word [rbp + 0x11c8], ax
mov edx, reloc.WLDAP32.dll_Ordinal_45
movzx ecx, word [0x1400940fa]
call fcn.140001db0
mov word [rbp + 0x11ca], ax
mov edx, reloc.WLDAP32.dll_Ordinal_46
movzx ecx, word [0x1400940fc]
call fcn.140001db0
mov word [rbp + 0x11cc], ax
mov edx, Ordinal_50
movzx ecx, word [0x1400940fe]
call fcn.140001db0
mov word [rbp + 0x11ce], ax
mov edx, Ordinal_50
movzx ecx, word [0x140094100]
call fcn.140001db0
mov word [rbp + 0x11d0], ax
mov edx, Ordinal_50
movzx ecx, word [0x140094102]
call fcn.140001db0
mov word [rbp + 0x11d2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_50
movzx ecx, word [0x140094104]
call fcn.140001db0
mov word [rbp + 0x11d4], ax
mov edx, 0x33
movzx ecx, word [0x140094106]
call fcn.140001db0
mov word [rbp + 0x11d6], ax
mov edx, 0x34
movzx ecx, word [0x140094108]
call fcn.140001db0
mov word [rbp + 0x11d8], ax
mov edx, gethostname
movzx ecx, word [0x14009410a]
call fcn.140001db0
mov word [rbp + 0x11da], ax
mov edx, gethostname
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x11dc], ax
mov edx, gethostname
movzx ecx, word [reloc.WS2_32.dll_WSAStartup]
call fcn.140001db0
mov word [rbp + 0x11de], ax
mov edx, Ordinal_60
movzx ecx, word [0x140094110]
call fcn.140001db0
mov word [rbp + 0x11e0], ax
mov edx, reloc.WS2_32.dll_gethostname
movzx ecx, word [0x140094112]
call fcn.140001db0
mov word [rbp + 0x11e2], ax
mov edx, Ordinal_60
movzx ecx, word [0x140094114]
call fcn.140001db0
mov word [rbp + 0x11e4], ax
mov edx, Ordinal_60
movzx ecx, word [0x140094116]
call fcn.140001db0
mov word [rbp + 0x11e6], ax
mov edx, reloc.WLDAP32.dll_Ordinal_60
movzx ecx, word [str.Flaged_Window:]
call fcn.140001db0
mov word [rbp + 0x11e8], ax
mov edx, 0x3d
movzx ecx, word [0x14009411a]
call fcn.140001db0
mov word [rbp + 0x11ea], ax
mov edx, 0x3e
movzx ecx, word [0x14009411c]
call fcn.140001db0
mov word [rbp + 0x11ec], ax
mov edx, 0x3f
movzx ecx, word [0x14009411e]
call fcn.140001db0
mov word [rbp + 0x11ee], ax
mov edx, 0x40
movzx ecx, word [0x140094120]
call fcn.140001db0
mov word [rbp + 0x11f0], ax
mov edx, 0x41
movzx ecx, word [0x140094122]
call fcn.140001db0
mov word [rbp + 0x11f2], ax
mov edx, 0x42
movzx ecx, word [0x140094124]
call fcn.140001db0
mov word [rbp + 0x11f4], ax
mov edx, 0x43
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0x11f6], ax
mov edx, 0x44
movzx ecx, word [str.Flaged_processes:]
call fcn.140001db0
mov word [rbp + 0x11f8], ax
mov edx, 0x45
movzx ecx, word [0x14009412a]
call fcn.140001db0
mov word [rbp + 0x11fa], ax
mov edx, 0x46
movzx ecx, word [0x14009412c]
call fcn.140001db0
mov word [rbp + 0x11fc], ax
mov edx, 0x47
movzx ecx, word [0x14009412e]
call fcn.140001db0
mov word [rbp + 0x11fe], ax
mov edx, 0x48
movzx ecx, word [0x140094130]
call fcn.140001db0
mov word [rbp + 0x1200], ax
mov edx, 0x49
movzx ecx, word [0x140094132]
call fcn.140001db0
mov word [rbp + 0x1202], ax
mov edx, 0x4a
movzx ecx, word [0x140094134]
call fcn.140001db0
mov word [rbp + 0x1204], ax
xor eax, eax
mov word [rbp + 0x1206], ax
mov edx, edi
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x1170]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x4b
jb 0x140011910
mov word [rbp + 0x1206], di
lea rax, [rbp + 0x1170]
mov qword [rbp + 0x1300], rax
mov ecx, 0x57
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xca0], ax
mov ecx, 0x69
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xca2], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0xca4], ax
mov ecx, 0x44
lea edx, [rcx - 0x41]
call fcn.140001db0
mov word [rbp + 0xca6], ax
mov ecx, 0x62
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0xca8], ax
mov ecx, 0x67
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0xcaa], ax
mov ecx, 0x46
lea edx, [rcx - 0x40]
call fcn.140001db0
mov word [rbp + 0xcac], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0xcae], ax
mov ecx, 0x61
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0xcb0], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xcb2], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0xcb4], ax
mov ecx, 0x43
lea edx, [rcx - 0x38]
call fcn.140001db0
mov word [rbp + 0xcb6], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xcb8], ax
mov ecx, 0x61
lea edx, [rcx - 0x54]
call fcn.140001db0
mov word [rbp + 0xcba], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0xcbc], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xcbe], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0xcc0], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140094112]
call fcn.140001db0
mov word [rbp + 0xcc2], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140094114]
call fcn.140001db0
mov word [rbp + 0xcc4], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140094116]
call fcn.140001db0
mov word [rbp + 0xcc6], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Flaged_Window:]
call fcn.140001db0
mov word [rbp + 0xcc8], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x14009411a]
call fcn.140001db0
mov word [rbp + 0xcca], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x14009411c]
call fcn.140001db0
mov word [rbp + 0xccc], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x14009411e]
call fcn.140001db0
mov word [rbp + 0xcce], ax
mov edx, Ordinal_26
movzx ecx, word [0x140094120]
call fcn.140001db0
mov word [rbp + 0xcd0], ax
mov edx, Ordinal_26
movzx ecx, word [0x140094122]
call fcn.140001db0
mov word [rbp + 0xcd2], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140094124]
call fcn.140001db0
mov word [rbp + 0xcd4], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0xcd6], ax
mov edx, Ordinal_32
movzx ecx, word [str.Flaged_processes:]
call fcn.140001db0
mov word [rbp + 0xcd8], ax
mov edx, Ordinal_32
movzx ecx, word [0x14009412a]
call fcn.140001db0
mov word [rbp + 0xcda], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x14009412c]
call fcn.140001db0
mov word [rbp + 0xcdc], ax
mov edx, Ordinal_32
movzx ecx, word [0x14009412e]
call fcn.140001db0
mov word [rbp + 0xcde], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140094130]
call fcn.140001db0
mov word [rbp + 0xce0], ax
xor eax, eax
mov word [rbp + 0xce2], ax
mov r8d, edi
nop dword [rax]
movsxd rax, r8d
lea rdx, [rbp + 0xca0]
lea rdx, [rdx + rax*2]
lea eax, [rbx + r8]
xor word [rdx], ax
inc r8d
cmp r8d, 0x21
jb 0x140011c20
mov word [rbp + 0xce2], di
lea rax, [rbp + 0xca0]
mov qword [rbp + 0x1308], rax
mov ecx, 0x57
xor edx, edx
call fcn.140001db0
mov word [rbp + 0xcf0], ax
mov ecx, 0x69
lea edx, [rcx - 0x68]
call fcn.140001db0
mov word [rbp + 0xcf2], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x6c]
call fcn.140001db0
mov word [rbp + 0xcf4], ax
mov ecx, 0x44
lea edx, [rcx - 0x41]
call fcn.140001db0
mov word [rbp + 0xcf6], ax
mov ecx, 0x62
lea edx, [rcx - 0x5e]
call fcn.140001db0
mov word [rbp + 0xcf8], ax
mov ecx, 0x67
lea edx, [rcx - 0x62]
call fcn.140001db0
mov word [rbp + 0xcfa], ax
mov ecx, 0x46
lea edx, [rcx - 0x40]
call fcn.140001db0
mov word [rbp + 0xcfc], ax
mov ecx, WSAStartup
lea edx, [rcx - 0x6b]
call fcn.140001db0
mov word [rbp + 0xcfe], ax
mov ecx, 0x61
lea edx, [rcx - 0x59]
call fcn.140001db0
mov word [rbp + 0xd00], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xd02], ax
mov ecx, 0x65
lea edx, [rcx - 0x5b]
call fcn.140001db0
mov word [rbp + 0xd04], ax
mov ecx, 0x43
lea edx, [rcx - 0x38]
call fcn.140001db0
mov word [rbp + 0xd06], ax
mov ecx, WSASetLastError
lea edx, [rcx - 0x60]
call fcn.140001db0
mov word [rbp + 0xd08], ax
mov ecx, 0x61
lea edx, [rcx - 0x54]
call fcn.140001db0
mov word [rbp + 0xd0a], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x65]
call fcn.140001db0
mov word [rbp + 0xd0c], ax
mov ecx, reloc.WS2_32.dll_WSAStartup
lea edx, [rcx - 0x64]
call fcn.140001db0
mov word [rbp + 0xd0e], ax
xor ecx, ecx
lea edx, [rcx + 0x10]
call fcn.140001db0
mov word [rbp + 0xd10], ax
mov edx, reloc.WS2_32.dll_recvfrom
movzx ecx, word [0x140094112]
call fcn.140001db0
mov word [rbp + 0xd12], ax
mov edx, reloc.WS2_32.dll_select
movzx ecx, word [0x140094114]
call fcn.140001db0
mov word [rbp + 0xd14], ax
mov edx, reloc.WS2_32.dll_send
movzx ecx, word [0x140094116]
call fcn.140001db0
mov word [rbp + 0xd16], ax
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, word [str.Flaged_Window:]
call fcn.140001db0
mov word [rbp + 0xd18], ax
mov edx, reloc.WS2_32.dll_setsockopt
movzx ecx, word [0x14009411a]
call fcn.140001db0
mov word [rbp + 0xd1a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, word [0x14009411c]
call fcn.140001db0
mov word [rbp + 0xd1c], ax
mov edx, reloc.WS2_32.dll_socket
movzx ecx, word [0x14009411e]
call fcn.140001db0
mov word [rbp + 0xd1e], ax
mov edx, Ordinal_26
movzx ecx, word [0x140094120]
call fcn.140001db0
mov word [rbp + 0xd20], ax
mov edx, Ordinal_26
movzx ecx, word [0x140094122]
call fcn.140001db0
mov word [rbp + 0xd22], ax
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, word [0x140094124]
call fcn.140001db0
mov word [rbp + 0xd24], ax
mov edx, reloc.WLDAP32.dll_Ordinal_27
movzx ecx, word [reloc.WLDAP32.dll_Ordinal_32]
call fcn.140001db0
mov word [rbp + 0xd26], ax
mov edx, Ordinal_32
movzx ecx, word [str.Flaged_processes:]
call fcn.140001db0
mov word [rbp + 0xd28], ax
mov edx, Ordinal_32
movzx ecx, word [0x14009412a]
call fcn.140001db0
mov word [rbp + 0xd2a], ax
mov edx, reloc.WLDAP32.dll_Ordinal_30
movzx ecx, word [0x14009412c]
call fcn.140001db0
mov word [rbp + 0xd2c], ax
mov edx, Ordinal_32
movzx ecx, word [0x14009412e]
call fcn.140001db0
mov word [rbp + 0xd2e], ax
mov edx, reloc.WLDAP32.dll_Ordinal_32
movzx ecx, word [0x140094130]
call fcn.140001db0
mov word [rbp + 0xd30], ax
xor eax, eax
mov word [rbp + 0xd32], ax
mov edx, edi
nop
movsxd rax, edx
lea rcx, [rbp + 0xcf0]
lea rcx, [rcx + rax*2]
lea eax, [rbx + rdx]
xor word [rcx], ax
inc edx
cmp edx, 0x21
jb 0x140011f30
mov word [rbp + 0xd32], di
lea rax, [rbp + 0xcf0]
mov qword [rbp + 0x1310], rax
movsd xmm0, qword [0x140095ab8]
movsd qword [rsp + 0x28], xmm0
movzx ecx, word [0x140095ac0]
mov word [rsp + 0x30], cx
movzx eax, byte [0x140095ac2]
mov byte [rsp + 0x28], 0x75
xor byte [rsp + 0x29], 0x39
xor byte [rsp + 0x2a], 0x3a
xor byte [rsp + 0x2b], 0x3b
xor byte [rsp + 0x2c], 0x3c
xor byte [rsp + 0x2d], 0x3d
xor byte [rsp + 0x2e], 0x3e
xor byte [rsp + 0x2f], 0x3f
xor cl, 0x40
mov byte [rsp + 0x30], cl
xor byte [rsp + 0x31], 0x41
xor al, 0x42
mov byte [rsp + 0x32], al
xor edx, edx
mov r8d, 0x800
lea rcx, [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r12, rax
movsd xmm0, qword [str.PT_kTP__6]
movsd qword [rbp + 0x58], xmm0
mov ecx, dword [0x140095798]
mov dword [rbp + 0x60], ecx
cmp byte [0x14009579b], dil
je 0x140012145
mov r8d, edi
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x140012105
movdqa xmm4, xmmword [0x140095b80]
movdqa xmm2, xmmword [0x140095b30]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140095b50]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140095b60]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, dword [str.PT_kTP__6]
xorps xmm2, xmm0
movd dword [rbp + 0x58], xmm2
movdqa xmm3, xmmword [0x140095b40]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140095b50]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140095b60]
packuswb xmm2, xmm2
paddb xmm2, xmmword [str.8888888888888888]
movd xmm0, dword [rbp + 0x5c]
xorps xmm2, xmm0
movd dword [rbp + 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp + 0x58]
add r9, rax
nop
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x38
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x140012110
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov esi, dword [rcx + r10 + 0x88]
add rsi, r10
cmp rsi, r10
je 0x1400121d6
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x1400121d6
mov ebx, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400121d1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400121b0
cmp r8d, 0xf8f45725
je 0x1400121db
test r9d, r9d
jne 0x140012190
mov rax, qword [rax]
jmp 0x140012160
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov eax, dword [rsi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
lea rdx, [rbp + 0x58]
mov rcx, r12
call r8
mov r15, rax
mov rsi, rdi
movzx ebx, byte [rsp + 0x20]
nop dword [rax + rax]
mov r14, qword [rbp + rsi*8 + 0x1220]
mov rdx, r14
xor ecx, ecx
call r15
test rax, rax
je 0x1400122c0
mov rcx, r14
call fcn.140004fb0
movzx edx, bl
lea rcx, [rbp + 0x1530]
call fcn.14001d8f0
nop
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.Flaged_Window:
lea rcx, [rbp + 0x1530]
call fcn.14001d910
nop
mov rdx, r14
lea rcx, [rbp + 0x1530]
call fcn.140004e20
lea rdx, [rbp + 0x1530]
lea rcx, [rbp + 0x14d0]
call fcn.14001bdc0
mov rdx, rax
lea rcx, [0x1400f3710]
call fcn.14002e600
lea rdx, [rbp + 0x1530]
lea rcx, [rbp + 0x14b0]
call fcn.14001bdc0
mov rdx, rax
lea rcx, [0x1400f3710]
call fcn.1400273d0
call fcn.1400042b0
nop
lea rcx, [rbp + 0x1530]
call fcn.14001bc80
inc rsi
cmp rsi, 0x1f
jb 0x140012210
movzx ebx, byte [rsp + 0x20]
nop dword [rax]
nop word [rax + rax]
mov rsi, qword [rbp + rdi*8 + 0x1320]
mov rcx, rsi
call fcn.140004130
test eax, eax
je 0x140012387
movzx edx, bl
lea rcx, [rbp + 0x1510]
call fcn.14001d8f0
nop
mov r8d, reloc.WS2_32.dll_select
lea rdx, str.Flaged_processes:
lea rcx, [rbp + 0x1510]
call fcn.14001d910
nop
mov rdx, rsi
lea rcx, [rbp + 0x1510]
call fcn.140004e20
lea rdx, [rbp + 0x1510]
lea rcx, [rbp + 0x1490]
call fcn.14001bdc0
mov rdx, rax
lea rcx, [0x1400f3710]
call fcn.14002e600
lea rdx, [rbp + 0x1510]
lea rcx, [rbp + 0x14f0]
call fcn.14001bdc0
mov rdx, rax
lea rcx, [0x1400f3710]
call fcn.1400273d0
call fcn.1400042b0
nop
lea rcx, [rbp + 0x1510]
call fcn.14001bc80
inc rdi
cmp rdi, 0x2e
jb 0x1400122e0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140012426
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140012426
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140012421
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140012400
cmp r8d, 0xab45c5ee
je 0x14001242b
test r9d, r9d
jne 0x1400123e0
mov rax, qword [rax]
jmp 0x1400123b0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov rcx, r12
call rax
call qword [sym.imp.VMProtectSDK64.dll_VMProtectEnd]
mov rcx, qword [rbp + 0x1550]
xor rcx, rsp
call fcn.140081800
lea r11, [rsp + 0x1660]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret