Function at 0x1402a3480
Capabilities:
Parse pe header

Disassembly:
mov eax, Ordinal_41
call fcn.140319f40
sub rsp, rax
movsx eax, byte [rcx]
mov rdx, rcx
add eax, 0xffffff9f
cmp eax, 0x17
ja case.0x1402a37b5.51
cdqe
lea r8, [0x140000000]
mov eax, dword [r8 + rax*4 + 0x2a6d08]
add rax, r8
jmp rax
movsx ecx, byte [rcx + 1]
test ecx, ecx
je 0x1402a3612
sub ecx, 0x63
je 0x1402a35e5
sub ecx, 1
je 0x1402a35d1
sub ecx, 1
je 0x1402a35a0
cmp ecx, 7
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 2]
cmp al, 0x67
je 0x1402a3526
cmp al, 0x69
jne case.0x1402a37b5.51
mov eax, 0x61
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
mov eax, 0x11b
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x5f
je 0x1402a357e
cmp al, 0x69
je 0x1402a355c
cmp al, 0x6f
jne case.0x1402a37b5.51
add rdx, 4
lea rcx, str.rithm_id
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x116
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.d_absent
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x47
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.id_param
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, Ordinal_41
add rsp, 0x28
ret
mov eax, 0x61
cmp al, byte [rdx + 2]
jne case.0x1402a37b5.51
mov eax, 0x64
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, Ordinal_33
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0x69
add rsp, 0x28
ret
xor eax, eax
lea r8, str.vp_info
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a35f0
mov eax, 0x8a
add rsp, 0x28
ret
mov eax, 0xad
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1402a3785
cmp al, 0x61
je 0x1402a3763
cmp al, 0x69
je 0x1402a3732
cmp al, 0x6c
je 0x1402a3672
cmp al, 0x75
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.ildinfo
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a3650
mov eax, 0x105
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6f
jne case.0x1402a37b5.51
cmp byte [rcx + 3], 0x63
jne case.0x1402a37b5.51
cmp byte [rcx + 4], 0x6b
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 5]
cmp al, 0x2d
je 0x1402a3702
cmp al, 0x5f
je 0x1402a36d3
cmp al, 0x73
jne case.0x1402a37b5.51
lea r8, [rcx + 6]
xor eax, eax
lea rdx, [0x1403b814c]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a36b1
mov eax, reloc.WLDAP32.dll_Ordinal_41
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x14031e120]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a36e0
mov eax, 0x92
add rsp, 0x28
ret
lea r8, [rcx + 6]
xor eax, eax
lea rdx, str.size
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a3710
mov eax, 0x9b
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rcx + 2]
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rcx + 3]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rcx + 4]
jne case.0x1402a37b5.51
mov eax, 0xa6
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.sis_type
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0xb4
add rsp, 0x28
ret
mov eax, 0xae
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffffd3
cmp eax, 0x48
ja case.0x1402a37b5.51
cdqe
movzx eax, byte [r8 + rax + 0x2a6d84]
mov ecx, dword [r8 + rax*4 + 0x2a6d68]
add rcx, r8
jmp rcx
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.rounds
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a37c4
mov eax, 0x9d
add rsp, 0x28
ret
xor eax, eax
lea r8, str.kalg
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a37f0
mov eax, WSAGetLastError
add rsp, 0x28
ret
xor eax, eax
lea r8, str.pher
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a3820
xor eax, eax
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x66
je 0x1402a38b2
cmp al, 0x6e
jne case.0x1402a37b5.51
movsx ecx, byte [rdx + 3]
sub ecx, 0x73
je 0x1402a3883
cmp ecx, 1
jne case.0x1402a37b5.51
add rdx, 4
lea rcx, str.ext_string
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x117
add rsp, 0x28
ret
xor eax, eax
lea r8, str.tant
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a3890
mov eax, WSAGetLastError
add rsp, 0x28
ret
xor eax, eax
lea r8, str.actor
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a38c0
mov eax, 0xb5
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1402a3932
cmp al, 0x5f
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.mode
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a3910
mov eax, Ordinal_46
add rsp, 0x28
ret
mov eax, Ordinal_46
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1402a37b5.51
cmp byte [rdx + 3], 0x74
jne case.0x1402a37b5.51
cmp byte [rdx + 4], 0x6f
jne case.0x1402a37b5.51
cmp byte [rdx + 5], 0x6d
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 6]
test al, al
je 0x1402a39a5
cmp al, 0x2d
jne case.0x1402a37b5.51
mov eax, 0x69
cmp al, byte [rdx + 7]
jne case.0x1402a37b5.51
mov eax, 0x76
cmp al, byte [rdx + 8]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 9]
jne case.0x1402a37b5.51
mov eax, Ordinal_46
add rsp, 0x28
ret
mov eax, 0x9c
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x72
ja case.0x1402a37b5.51
movzx eax, byte [r8 + rax + 0x2a6df0]
mov ecx, dword [r8 + rax*4 + 0x2a6dd0]
add rcx, r8
jmp rcx
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.rounds
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a39e0
mov eax, 0xa0
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x74
jne case.0x1402a37b5.51
cmp byte [rdx + 3], 0x61
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1402a3a94
cmp al, 0x2d
jne case.0x1402a37b5.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x73
je 0x1402a3a72
cmp ecx, 1
jne case.0x1402a37b5.51
lea r8, [rdx + 6]
xor eax, eax
lea rdx, [0x1403b8194]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a3a50
mov eax, 0xa3
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.tructure
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0xa2
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSAGetLastError
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1402a3af7
cmp al, 0x66
je 0x1402a3ad5
cmp al, 0x73
jne case.0x1402a37b5.51
mov eax, 0x63
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, 0xa4
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.ault_digest
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0xa7
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.oded_from_explicit
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0xb6
add rsp, 0x28
ret
xor eax, eax
lea r8, str.kem_ikm
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a3b22
mov eax, 0xa8
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x67
je 0x1402a3b82
cmp al, 0x73
jne case.0x1402a37b5.51
xor eax, eax
lea r8, [0x1403b81e0]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a3b60
mov eax, 0xac
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x65
jne case.0x1402a37b5.51
cmp byte [rdx + 4], 0x73
jne case.0x1402a37b5.51
cmp byte [rdx + 5], 0x74
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 6]
test al, al
je 0x1402a3c92
cmp al, 0x2d
jne case.0x1402a37b5.51
movsx ecx, byte [rdx + 7]
sub ecx, 0x6e
je 0x1402a3c62
sub ecx, 1
je 0x1402a3c32
sub ecx, 1
je 0x1402a3c03
cmp ecx, 3
jne case.0x1402a37b5.51
lea r8, [rdx + 8]
xor eax, eax
lea rdx, [0x1403b814c]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a3be1
mov eax, 0xab
add rsp, 0x28
ret
xor eax, eax
lea r8, str.rops
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a3c10
mov eax, 6
add rsp, 0x28
ret
xor eax, eax
lea r8, str.neshot
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a3c40
mov eax, 0x9f
add rsp, 0x28
ret
xor eax, eax
lea r8, str.oinit
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a3c70
mov eax, 0x9e
add rsp, 0x28
ret
mov eax, 1
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.bg_no_trunc_md
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x109
add rsp, 0x28
ret
mov eax, 0xdf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1402a3eb5
cmp al, 0x61
je 0x1402a3e93
cmp al, 0x63
je 0x1402a3e71
cmp al, 0x6e
je 0x1402a3d22
cmp al, 0x78
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.pect
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a3d00
mov eax, 0x11c
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x63
je 0x1402a3dd2
cmp al, 0x67
je 0x1402a3d9e
cmp al, 0x74
jne case.0x1402a37b5.51
cmp byte [rcx + 3], 0x72
jne case.0x1402a37b5.51
cmp byte [rcx + 4], 0x6f
jne case.0x1402a37b5.51
cmp byte [rcx + 5], 0x70
jne case.0x1402a37b5.51
cmp byte [rcx + 6], 0x79
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 7]
test al, al
je 0x1402a3d94
cmp al, 0x5f
jne case.0x1402a37b5.51
add rdx, 8
lea rcx, str.required
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, Ordinal_79
add rsp, 0x28
ret
mov eax, WSAStartup
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1403b823c]
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a3db0
mov eax, 2
add rsp, 0x28
ret
movzx eax, byte [rcx + 3]
cmp al, 0x6f
je 0x1402a3e04
cmp al, 0x72
jne case.0x1402a37b5.51
add rdx, 4
lea rcx, str.ypt_level
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x5e
add rsp, 0x28
ret
cmp byte [rcx + 4], 0x64
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 5]
cmp al, 0x65
je 0x1402a3e4f
cmp al, 0x69
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rcx + 6]
jne case.0x1402a37b5.51
mov eax, 0x67
cmp al, byte [rcx + 7]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rcx + 8]
jne case.0x1402a37b5.51
mov eax, 0xb7
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.d_pub_key
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0xc0
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.dh_cofactor_mode
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x60
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.rly_clean
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSASetLastError
add rsp, 0x28
ret
mov eax, 0xe0
add rsp, 0x28
ret
cmp byte [rcx + 1], 0x69
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 2]
cmp al, 0x65
je 0x1402a3efb
cmp al, 0x6e
jne case.0x1402a37b5.51
add rdx, 3
lea rcx, str.gerprint
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x11d
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ld_type
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a3f04
mov eax, 0xb8
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1402a4012
cmp al, 0x65
je 0x1402a3fe2
cmp al, 0x69
je 0x1402a3fad
cmp al, 0x72
jne case.0x1402a37b5.51
cmp byte [rcx + 2], 0x6f
jne case.0x1402a37b5.51
cmp byte [rcx + 3], 0x75
jne case.0x1402a37b5.51
cmp byte [rcx + 4], 0x70
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 5]
test al, al
je 0x1402a3fa3
cmp al, 0x2d
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.check
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a3f81
mov eax, 0xba
add rsp, 0x28
ret
mov eax, 0xcc
add rsp, 0x28
ret
lea r8, [rcx + 2]
xor eax, eax
lea rdx, str.ndex
nop word [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a3fc0
mov eax, 0xc3
add rsp, 0x28
ret
xor eax, eax
lea r8, str.nerator
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a3ff0
mov eax, 0xb9
add rsp, 0x28
ret
mov eax, 0xc2
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x1402a4062
cmp al, 0x69
jne case.0x1402a37b5.51
lea r8, [rcx + 2]
xor eax, eax
lea rdx, str.ndex
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a4040
mov eax, Ordinal_200
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.s_randkey
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, reloc.WLDAP32.dll_Ordinal_45
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9c
cmp eax, 0x12
ja case.0x1402a37b5.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x2a6e64]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0x7c
add rsp, 0x28
ret
mov eax, WSAGetLastError
cmp al, byte [rdx + 2]
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, 0x90
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.plicit_rejection
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 5
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1402a41a5
cmp al, 0x66
je 0x1402a4182
cmp al, 0x70
je 0x1402a4155
cmp al, 0x73
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.tance
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a4133
mov eax, 0x118
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ut_type
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a4160
mov eax, 0x11e
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSAGetLastError
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSAStartup
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.lude_public
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0xbb
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x65
jne case.0x1402a37b5.51
cmp byte [rdx + 3], 0x72
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1402a4216
cmp al, 0x61
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.tion
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a41f4
mov eax, 0x67
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
test al, al
je 0x1402a4261
cmp al, 0x6c
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
mov eax, gethostbyaddr
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_46
add rsp, 0x28
ret
cmp byte [rdx + 1], 0
mov eax, 0xc1
mov ecx, 0xffffffff
cmove ecx, eax
mov eax, ecx
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffffcf
cmp eax, 0x34
ja case.0x1402a37b5.51
cdqe
movzx eax, byte [r8 + rax + 0x2a6ecc]
mov ecx, dword [r8 + rax*4 + 0x2a6eb0]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0xb0
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0xb1
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0xb2
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 2]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
mov eax, 0x119
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x1402a37b5.51
cmp byte [rdx + 3], 0x2d
jne case.0x1402a37b5.51
movsx ecx, byte [rdx + 4]
sub ecx, 0x64
je 0x1402a43d2
sub ecx, 0xb
je 0x1402a43a2
sub ecx, 5
je 0x1402a4373
cmp ecx, 1
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x1402a37b5.51
mov eax, 0x65
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x1403b8194]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a4380
mov eax, 0x64
add rsp, 0x28
ret
xor eax, eax
lea r8, str.utlen
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a43b0
mov eax, 0x63
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x69
jne case.0x1402a37b5.51
cmp byte [rdx + 6], 0x67
jne case.0x1402a37b5.51
cmp byte [rdx + 7], 0x65
jne case.0x1402a37b5.51
cmp byte [rdx + 8], 0x73
jne case.0x1402a37b5.51
cmp byte [rdx + 9], 0x74
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 0xa]
test al, al
je 0x1402a4442
cmp al, 0x2d
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.props
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xa]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a4420
mov eax, 0x62
add rsp, 0x28
ret
mov eax, 0x61
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x79
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1402a44d2
cmp al, 0x62
je 0x1402a449f
cmp al, 0x6c
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
mov eax, gethostbyaddr
add rsp, 0x28
ret
lea r8, [rdx + 4]
xor eax, eax
lea rdx, [0x1403b82e8]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a44b0
mov eax, getservbyname
add rsp, 0x28
ret
mov eax, 0x78
add rsp, 0x28
ret
cmp byte [rcx + 1], 0x61
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 2]
cmp al, 0x62
je 0x1402a4527
cmp al, 0x6e
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rcx + 4]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rcx + 5]
jne case.0x1402a37b5.51
mov eax, 0x6a
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rcx + 4]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rcx + 5]
jne case.0x1402a37b5.51
mov eax, 0x79
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x6f
ja case.0x1402a37b5.51
movzx eax, byte [r8 + rax + 0x2a6f20]
mov ecx, dword [r8 + rax*4 + 0x2a6f04]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1402a47a4
cmp al, 0x6e
je 0x1402a4782
cmp al, 0x78
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 3]
cmp al, 0x2d
je 0x1402a4752
cmp al, 0x5f
je 0x1402a45fc
cmp al, 0x69
je 0x1402a45da
cmp al, 0x6d
jne case.0x1402a37b5.51
add rdx, 4
lea rcx, str.em_bytes
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x80
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.um_length
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x51
add rsp, 0x28
ret
movsx eax, byte [rdx + 4]
add eax, 0xffffff9f
cmp eax, 0x11
ja case.0x1402a37b5.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x2a6f90]
add rcx, r8
jmp rcx
xor eax, eax
lea r8, str.dinlen
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a4624
mov eax, reloc.WLDAP32.dll_Ordinal_79
add rsp, 0x28
ret
movzx eax, byte [rdx + 5]
cmp al, 0x61
je 0x1402a4678
cmp al, 0x6e
jne case.0x1402a37b5.51
add rdx, 6
lea rcx, str.tropylen
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x50
add rsp, 0x28
ret
add rdx, 6
lea rcx, str.rly_data
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
xor eax, eax
lea r8, str.rag_len
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a46a3
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, str.oncelen
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a46d2
mov eax, 0x52
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erslen
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a4700
mov eax, 0x53
add rsp, 0x28
ret
xor eax, eax
lea r8, str.equest
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a4730
mov eax, 0x111
add rsp, 0x28
ret
lea r8, [rdx + 4]
xor eax, eax
lea rdx, str.size
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a4760
mov eax, Ordinal_211
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.datory_digest
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0xcd
add rsp, 0x28
ret
movsx ecx, byte [rdx + 3]
test ecx, ecx
je 0x1402a4820
sub ecx, 0x6b
je 0x1402a47ef
cmp ecx, 1
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
mov eax, 0x7a
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, 0x79
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
mov eax, reloc.WLDAP32.dll_Ordinal_32
add rsp, 0x28
ret
mov eax, 3
add rsp, 0x28
ret
xor eax, eax
lea r8, str.mcost
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a4833
mov eax, WSAGetLastError
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1402a48e2
cmp al, 0x31
jne case.0x1402a37b5.51
cmp byte [rdx + 4], 0x2d
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 5]
cmp al, 0x64
je 0x1402a48af
cmp al, 0x70
jne case.0x1402a37b5.51
add rdx, 6
lea rcx, str.roperties
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, Ordinal_211
add rsp, 0x28
ret
xor eax, eax
lea r8, str.igest
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a48c0
mov eax, Ordinal_211
add rsp, 0x28
ret
mov eax, 0xce
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x63
je 0x1402a4994
cmp al, 0x6e
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 3]
cmp al, 0x5f
je 0x1402a4932
cmp al, 0x69
jne case.0x1402a37b5.51
add rdx, 4
lea rcx, str.um_length
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x55
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x65
je 0x1402a4972
cmp al, 0x6e
jne case.0x1402a37b5.51
lea r8, [rdx + 5]
xor eax, eax
lea rdx, str.oncelen
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a4950
mov eax, 0x56
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ntropylen
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x54
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1403b8384]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a49a0
mov eax, 0x48
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x64
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 3]
cmp al, 0x65
je 0x1402a49fe
cmp al, 0x75
jne case.0x1402a37b5.51
add rdx, 4
lea rcx, str.le_filename
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x106
add rsp, 0x28
ret
cmp byte [rdx + 4], 0
jne case.0x1402a37b5.51
mov eax, gethostbyaddr
add rsp, 0x28
ret
mov eax, 0xaf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1402a4afd
cmp al, 0x61
je 0x1402a4acc
cmp al, 0x6f
je 0x1402a4a5f
cmp al, 0x75
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rcx + 2]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rcx + 3]
jne case.0x1402a37b5.51
mov eax, reloc.WLDAP32.dll_Ordinal_50
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6e
jne case.0x1402a37b5.51
cmp byte [rcx + 3], 0x63
jne case.0x1402a37b5.51
cmp byte [rcx + 4], 0x65
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 5]
test al, al
je 0x1402a4ac2
cmp al, 0x2d
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.type
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a4aa0
mov eax, 0x11a
add rsp, 0x28
ret
mov eax, WSAStartup
add rsp, 0x28
ret
mov eax, WSAGetLastError
cmp al, byte [rcx + 2]
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rcx + 3]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rcx + 4]
jne case.0x1402a37b5.51
mov eax, 0x10a
add rsp, 0x28
ret
mov eax, 0x81
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x1402a4bf4
cmp al, 0x70
je 0x1402a4b52
cmp al, 0x72
jne case.0x1402a37b5.51
xor eax, eax
lea r8, [0x1403b83d4]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a4b30
mov eax, 0xbc
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x65
je 0x1402a4b92
cmp al, 0x74
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.ions
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a4b70
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
movzx eax, byte [rcx + 3]
cmp al, 0x6e
je 0x1402a4bd2
cmp al, 0x72
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.ation
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a4bb0
mov eax, 0x91
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.ssl_version
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x108
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.ep_label
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 7
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x75
ja case.0x1402a37b5.51
movzx eax, byte [r8 + rax + 0x2a7004]
mov ecx, dword [r8 + rax*4 + 0x2a6fd8]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0xf9
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0xfa
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
sub ecx, 0x64
je 0x1402a4d22
sub ecx, 0xe
je 0x1402a4c9e
cmp ecx, 1
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
lea eax, [rcx + 0x7a]
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x1402a37b5.51
cmp byte [rdx + 4], 0x79
jne case.0x1402a37b5.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x75
je 0x1402a4cf3
cmp ecx, 1
jne case.0x1402a37b5.51
lea r8, [rdx + 6]
xor eax, eax
lea rdx, str._info
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a4cd1
mov eax, Ordinal_143
add rsp, 0x28
ret
lea r8, [rdx + 6]
xor eax, eax
lea rdx, str._info
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a4d00
mov eax, Ordinal_143
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
test al, al
je 0x1402a4dd2
cmp al, 0x2d
je 0x1402a4d65
cmp al, 0x64
jne case.0x1402a37b5.51
xor eax, eax
lea r8, [0x1403b83dc]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a4d43
mov eax, reloc.WS2_32.dll_gethostbyaddr
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x6d
je 0x1402a4da4
cmp al, 0x74
jne case.0x1402a37b5.51
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x1403b8194]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a4d82
mov eax, 0x49
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1403b83d8]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a4db0
mov eax, Ordinal_211
add rsp, 0x28
ret
mov eax, 0x66
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, [0x1403b82e8]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a4df0
mov eax, Ordinal_200
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.ounter
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a4e20
mov eax, Ordinal_200
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1403b83f0]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a4e50
mov eax, 0x7d
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x69
je 0x1402a4eb2
cmp al, 0x74
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.ential
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a4e90
mov eax, 0x68
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.nt_format
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0xbd
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x65
je 0x1402a4fdd
cmp al, 0x69
je 0x1402a4f52
cmp al, 0x6f
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 3]
cmp al, 0x70
je 0x1402a4f22
cmp al, 0x76
jne case.0x1402a37b5.51
add rdx, 4
lea rcx, str.ider_name
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x107
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erties
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a4f30
mov eax, 4
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x6d
je 0x1402a4fac
cmp al, 0x76
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1402a4fa2
cmp al, 0x5f
jne case.0x1402a37b5.51
xor eax, eax
lea r8, [0x1403b8424]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a4f80
mov eax, 0xaa
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_211
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
mov eax, 0xf7
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x64
je 0x1402a501e
cmp al, 0x66
jne case.0x1402a37b5.51
mov eax, 0x69
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, 0x78
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
mov eax, 0x7e
add rsp, 0x28
ret
add rdx, 4
lea rcx, str.iction_resistance
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x57
add rsp, 0x28
ret
mov eax, 0x62
cmp al, byte [rdx + 2]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
mov eax, 0xd4
add rsp, 0x28
ret
mov eax, 0x82
add rsp, 0x28
ret
movsx rax, byte [rcx + 1]
cmp eax, 0x79
ja case.0x1402a37b5.51
movzx eax, byte [r8 + rax + 0x2a7098]
mov ecx, dword [r8 + rax*4 + 0x2a707c]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0xfb
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0xfc
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, [0x1403b82e8]
nop word [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a50d0
mov eax, reloc.WLDAP32.dll_Ordinal_200
add rsp, 0x28
ret
mov eax, Ordinal_200
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0xbe
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0xbf
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
test al, al
je 0x1402a57a5
cmp al, 0x61
je 0x1402a5725
cmp al, 0x65
je 0x1402a5564
cmp al, 0x6f
je 0x1402a5539
cmp al, 0x73
jne case.0x1402a37b5.51
cmp byte [rcx + 2], 0x61
jne case.0x1402a37b5.51
cmp byte [rcx + 3], 0x2d
jne case.0x1402a37b5.51
movsx ecx, byte [rcx + 4]
sub ecx, 0x63
je 0x1402a53f3
sub ecx, 2
je 0x1402a52b1
cmp ecx, 1
jne case.0x1402a37b5.51
cmp byte [rdx + 5], 0x61
jne case.0x1402a37b5.51
cmp byte [rdx + 6], 0x63
jne case.0x1402a37b5.51
cmp byte [rdx + 7], 0x74
jne case.0x1402a37b5.51
cmp byte [rdx + 8], 0x6f
jne case.0x1402a37b5.51
cmp byte [rdx + 9], 0x72
jne case.0x1402a37b5.51
movsx rax, byte [rdx + 0xa]
cmp eax, 0x39
ja case.0x1402a37b5.51
movzx eax, byte [r8 + rax + 0x2a7140]
mov ecx, dword [r8 + rax*4 + 0x2a7114]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 0xb]
test al, al
je 0x1402a51fd
cmp al, 0x30
jne case.0x1402a37b5.51
cmp byte [rdx + 0xc], 0
jne case.0x1402a37b5.51
mov eax, 0xee
add rsp, 0x28
ret
mov eax, 0xed
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402a37b5.51
mov eax, 0xef
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402a37b5.51
mov eax, 0xf0
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402a37b5.51
mov eax, 0xf1
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402a37b5.51
mov eax, 0xf2
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402a37b5.51
mov eax, 0xf3
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402a37b5.51
mov eax, 0xf4
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402a37b5.51
mov eax, 0xf5
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0
jne case.0x1402a37b5.51
mov eax, 0xf6
add rsp, 0x28
ret
mov eax, 0xec
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x78
jne case.0x1402a37b5.51
cmp byte [rdx + 6], 0x70
jne case.0x1402a37b5.51
cmp byte [rdx + 7], 0x6f
jne case.0x1402a37b5.51
cmp byte [rdx + 8], 0x6e
jne case.0x1402a37b5.51
cmp byte [rdx + 9], 0x65
jne case.0x1402a37b5.51
cmp byte [rdx + 0xa], 0x6e
jne case.0x1402a37b5.51
cmp byte [rdx + 0xb], 0x74
jne case.0x1402a37b5.51
movsx rax, byte [rdx + 0xc]
cmp eax, 0x39
ja case.0x1402a37b5.51
movzx eax, byte [r8 + rax + 0x2a71a8]
mov ecx, dword [r8 + rax*4 + 0x2a717c]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 0xd]
test al, al
je 0x1402a533f
cmp al, 0x30
jne case.0x1402a37b5.51
cmp byte [rdx + 0xe], 0
jne case.0x1402a37b5.51
mov eax, 0xe3
add rsp, 0x28
ret
mov eax, 0xe2
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402a37b5.51
mov eax, 0xe4
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402a37b5.51
mov eax, 0xe5
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402a37b5.51
mov eax, 0xe6
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402a37b5.51
mov eax, 0xe7
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402a37b5.51
mov eax, 0xe8
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402a37b5.51
mov eax, 0xe9
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402a37b5.51
mov eax, 0xea
add rsp, 0x28
ret
cmp byte [rdx + 0xd], 0
jne case.0x1402a37b5.51
mov eax, 0xeb
add rsp, 0x28
ret
mov eax, 0xe1
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x6f
jne case.0x1402a37b5.51
cmp byte [rdx + 6], 0x65
jne case.0x1402a37b5.51
cmp byte [rdx + 7], 0x66
jne case.0x1402a37b5.51
cmp byte [rdx + 8], 0x66
jne case.0x1402a37b5.51
cmp byte [rdx + 9], 0x69
jne case.0x1402a37b5.51
cmp byte [rdx + 0xa], 0x63
jne case.0x1402a37b5.51
cmp byte [rdx + 0xb], 0x69
jne case.0x1402a37b5.51
cmp byte [rdx + 0xc], 0x65
jne case.0x1402a37b5.51
cmp byte [rdx + 0xd], 0x6e
jne case.0x1402a37b5.51
cmp byte [rdx + 0xe], 0x74
jne case.0x1402a37b5.51
movsx rax, byte [rdx + 0xf]
cmp eax, 0x39
ja case.0x1402a37b5.51
movzx eax, byte [r8 + rax + 0x2a7210]
mov ecx, dword [r8 + rax*4 + 0x2a71e4]
add rcx, r8
jmp rcx
cmp byte [rdx + 0x10], 0
jne case.0x1402a37b5.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402a37b5.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402a37b5.51
mov eax, Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402a37b5.51
mov eax, reloc.WLDAP32.dll_Ordinal_217
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402a37b5.51
mov eax, 0xda
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402a37b5.51
mov eax, 0xdb
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402a37b5.51
mov eax, 0xdc
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402a37b5.51
mov eax, 0xdd
add rsp, 0x28
ret
cmp byte [rdx + 0x10], 0
jne case.0x1402a37b5.51
mov eax, 0xde
add rsp, 0x28
ret
mov eax, Ordinal_217
add rsp, 0x28
ret
xor eax, eax
lea r8, str.unds
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a5542
mov eax, getservbyname
add rsp, 0x28
ret
movzx eax, byte [rcx + 2]
cmp al, 0x61
je 0x1402a56b2
cmp al, 0x66
je 0x1402a5682
cmp al, 0x73
jne case.0x1402a37b5.51
cmp byte [rcx + 3], 0x65
jne case.0x1402a37b5.51
cmp byte [rcx + 4], 0x65
jne case.0x1402a37b5.51
cmp byte [rcx + 5], 0x64
jne case.0x1402a37b5.51
cmp byte [rcx + 6], 0x5f
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 7]
cmp al, 0x63
je 0x1402a5652
cmp al, 0x72
je 0x1402a561e
cmp al, 0x74
jne case.0x1402a37b5.51
cmp byte [rcx + 8], 0x69
jne case.0x1402a37b5.51
cmp byte [rcx + 9], 0x6d
jne case.0x1402a37b5.51
cmp byte [rcx + 0xa], 0x65
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 0xb]
test al, al
je 0x1402a5614
cmp al, 0x5f
jne case.0x1402a37b5.51
add rdx, 0xc
lea rcx, str.interval
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x5c
add rsp, 0x28
ret
mov eax, 0x5b
add rsp, 0x28
ret
xor eax, eax
lea r8, str.equests
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 7]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a5630
mov eax, 0x5a
add rsp, 0x28
ret
lea r8, [rcx + 8]
xor eax, eax
lea rdx, str.ounter
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a5660
mov eax, 0x59
add rsp, 0x28
ret
xor eax, eax
lea r8, str.erence
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a5690
mov eax, 0xa5
add rsp, 0x28
ret
cmp byte [rcx + 3], 0x64
jne case.0x1402a37b5.51
cmp byte [rcx + 4], 0x5f
jne case.0x1402a37b5.51
movsx ecx, byte [rcx + 5]
sub ecx, 0x61
je 0x1402a56fa
cmp ecx, 1
jne case.0x1402a37b5.51
add rdx, 6
lea rcx, str.uffer_len
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x9a
add rsp, 0x28
ret
xor eax, eax
lea r8, str.head
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a5703
mov eax, __WSAFDIsSet
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6e
jne case.0x1402a37b5.51
cmp byte [rcx + 3], 0x64
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 4]
cmp al, 0x6b
je 0x1402a5774
cmp al, 0x6f
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.m_data
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a5752
mov eax, 0x58
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rcx + 5]
jne case.0x1402a37b5.51
mov eax, 0x79
cmp al, byte [rcx + 6]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rcx + 7]
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_gethostbyname
add rsp, 0x28
ret
mov eax, 0x75
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9f
cmp eax, 0x14
ja case.0x1402a37b5.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x2a724c]
add rcx, r8
jmp rcx
movzx eax, byte [rdx + 2]
cmp al, 0x66
je 0x1402a585d
cmp al, 0x6c
je 0x1402a5808
cmp al, 0x76
jne case.0x1402a37b5.51
add rdx, 3
lea rcx, str.e_parameters
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x5f
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 4]
test al, al
je 0x1402a5853
cmp al, 0x6c
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x1402a37b5.51
mov eax, 0xf8
add rsp, 0x28
ret
mov eax, 0x7f
add rsp, 0x28
ret
add rdx, 3
lea rcx, str.eprime_generator
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0xa9
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
sub ecx, 0x63
je 0x1402a5925
sub ecx, 2
je 0x1402a5902
sub ecx, 0xd
je 0x1402a58d2
cmp ecx, 1
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.sion_id
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a58b0
mov eax, 0x85
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1403b84b8]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a58e0
mov eax, 0x11f
add rsp, 0x28
ret
mov eax, 0x64
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, 0x84
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x72
je 0x1402a59e2
cmp al, 0x75
jne case.0x1402a37b5.51
cmp byte [rdx + 4], 0x72
jne case.0x1402a37b5.51
cmp byte [rdx + 5], 0x69
jne case.0x1402a37b5.51
cmp byte [rdx + 6], 0x74
jne case.0x1402a37b5.51
cmp byte [rdx + 7], 0x79
jne case.0x1402a37b5.51
cmp byte [rdx + 8], 0x2d
jne case.0x1402a37b5.51
movsx ecx, byte [rdx + 9]
sub ecx, 0x62
je 0x1402a59b2
cmp ecx, 1
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.hecks
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 9]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a5990
mov eax, 0x10b
add rsp, 0x28
ret
lea r8, [rdx + 0xa]
xor eax, eax
lea rdx, [0x1403b82e8]
nop
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a59c0
mov eax, 0x103
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
mov eax, 0x83
add rsp, 0x28
ret
mov eax, 0x7a
cmp al, byte [rdx + 2]
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, 0x4a
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1403b84c8]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a5a50
mov eax, reloc.WS2_32.dll_getservbyname
add rsp, 0x28
ret
xor eax, eax
lea r8, str.l3_ms
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a5a80
mov eax, Ordinal_79
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x2d
je 0x1402a5b83
cmp al, 0x61
je 0x1402a5b32
cmp al, 0x72
jne case.0x1402a37b5.51
cmp byte [rdx + 3], 0x65
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 4]
cmp al, 0x61
je 0x1402a5b03
cmp al, 0x6e
jne case.0x1402a37b5.51
xor eax, eax
lea r8, [0x1403b84e8]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a5ae1
mov eax, 0x113
add rsp, 0x28
ret
xor eax, eax
lea r8, str.m_mac
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a5b10
mov eax, reloc.WS2_32.dll___WSAFDIsSet
add rsp, 0x28
ret
cmp byte [rdx + 3], 0x74
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 4]
cmp al, 0x65
je 0x1402a5b6f
cmp al, 0x75
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
mov eax, 0x10f
add rsp, 0x28
ret
cmp byte [rdx + 5], 0
jne case.0x1402a37b5.51
mov eax, 0x112
add rsp, 0x28
ret
movzx eax, byte [rdx + 3]
cmp al, 0x64
je 0x1402a5c02
cmp al, 0x70
je 0x1402a5bd2
cmp al, 0x74
jne case.0x1402a37b5.51
lea r8, [rdx + 4]
xor eax, eax
lea rdx, [0x1403b8194]
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a5bb0
mov eax, 0x10e
add rsp, 0x28
ret
xor eax, eax
lea r8, str.hase
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a5be0
mov eax, 0x10d
add rsp, 0x28
ret
xor eax, eax
lea r8, [0x1403b84d4]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a5c10
mov eax, 0x10c
add rsp, 0x28
ret
movzx eax, byte [rdx + 2]
cmp al, 0x62
je 0x1402a5cd2
cmp al, 0x70
jne case.0x1402a37b5.51
cmp byte [rdx + 3], al
jne case.0x1402a37b5.51
cmp byte [rdx + 4], 0x2d
jne case.0x1402a37b5.51
cmp byte [rdx + 5], al
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 6]
cmp al, 0x72
je 0x1402a5ca2
cmp al, 0x75
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.binfo
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 6]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a5c80
mov eax, Ordinal_143
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ivinfo
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 6]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a5cb0
mov eax, Ordinal_143
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ject
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 2]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a5ce0
mov eax, pe_nt_image_headers64
add rsp, 0x28
ret
movsx eax, byte [rcx + 1]
add eax, 0xffffff9f
cmp eax, 0x18
ja case.0x1402a37b5.51
cdqe
movzx eax, byte [r8 + rax + 0x2a72bc]
mov ecx, dword [r8 + rax*4 + 0x2a72a0]
add rcx, r8
jmp rcx
cmp byte [rdx + 2], 0x67
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1402a5d75
cmp al, 0x6c
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
mov eax, Ordinal_35
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_33
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1402a37b5.51
cmp byte [rdx + 3], 0x74
jne case.0x1402a37b5.51
cmp byte [rdx + 4], 0x5f
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 5]
cmp al, 0x65
je 0x1402a5de2
cmp al, 0x6e
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.once
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a5dc0
mov eax, 0x115
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ntropy
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a5df0
mov eax, 0x114
add rsp, 0x28
ret
xor eax, eax
lea r8, str.reads
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a5e20
mov eax, 0x88
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x73
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 3]
cmp al, 0x2d
je 0x1402a61ce
cmp al, 0x31
je 0x1402a5fb3
cmp al, 0x61
je 0x1402a5f54
cmp al, 0x69
je 0x1402a5ea2
cmp al, 0x74
jne case.0x1402a37b5.51
xor eax, eax
lea r8, [0x1403b85ec]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 3]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a5e80
mov eax, 0x98
add rsp, 0x28
ret
cmp byte [rdx + 4], 0x76
jne case.0x1402a37b5.51
movsx ecx, byte [rdx + 5]
sub ecx, 0x66
je 0x1402a5f29
sub ecx, 1
je 0x1402a5ef8
cmp ecx, 2
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
mov eax, 0x76
cmp al, byte [rdx + 7]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 8]
jne case.0x1402a37b5.51
mov eax, Ordinal_41
add rsp, 0x28
ret
mov eax, 0x65
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 7]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 8]
jne case.0x1402a37b5.51
mov eax, Ordinal_41
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ixed
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a5f32
mov eax, Ordinal_41
add rsp, 0x28
ret
cmp byte [rdx + 4], 0x61
jne case.0x1402a37b5.51
cmp byte [rdx + 5], 0x64
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 6]
test al, al
je 0x1402a5fa9
cmp al, 0x70
jne case.0x1402a37b5.51
mov eax, 0x61
cmp al, byte [rdx + 7]
jne case.0x1402a37b5.51
mov eax, 0x64
cmp al, byte [rdx + 8]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 9]
jne case.0x1402a37b5.51
mov eax, 0x24
add rsp, 0x28
ret
mov eax, reloc.WLDAP32.dll_Ordinal_35
add rsp, 0x28
ret
movzx eax, byte [rdx + 4]
cmp al, 0x2d
je 0x1402a61ac
cmp al, 0x6d
jne case.0x1402a37b5.51
cmp byte [rdx + 5], 0x75
jne case.0x1402a37b5.51
cmp byte [rdx + 6], 0x6c
jne case.0x1402a37b5.51
cmp byte [rdx + 7], 0x74
jne case.0x1402a37b5.51
cmp byte [rdx + 8], 0x69
jne case.0x1402a37b5.51
cmp byte [rdx + 9], 0x5f
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 0xa]
cmp al, 0x61
je 0x1402a614a
cmp al, 0x65
je 0x1402a60c4
cmp al, 0x69
je 0x1402a60a2
cmp al, 0x6d
jne case.0x1402a37b5.51
cmp byte [rdx + 0xb], 0x61
jne case.0x1402a37b5.51
cmp byte [rdx + 0xc], 0x78
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 0xd]
cmp al, 0x62
je 0x1402a6072
cmp al, 0x73
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.ndfrag
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a6050
mov eax, 0x40
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ufsz
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a6080
mov eax, 0x3f
add rsp, 0x28
ret
add rdx, 0xb
lea rcx, str.nterleave
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x3e
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x6e
jne case.0x1402a37b5.51
cmp byte [rdx + 0xc], 0x63
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 0xd]
test al, al
je 0x1402a6140
cmp al, 0x69
je 0x1402a611d
cmp al, 0x6c
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rdx + 0xe]
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 0xf]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 0x10]
jne case.0x1402a37b5.51
mov eax, 0x3d
add rsp, 0x28
ret
mov eax, WSAGetLastError
cmp al, byte [rdx + 0xe]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 0xf]
jne case.0x1402a37b5.51
mov eax, reloc.WLDAP32.dll_Ordinal_60
add rsp, 0x28
ret
mov eax, Ordinal_60
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x61
jne case.0x1402a37b5.51
cmp byte [rdx + 0xc], 0x64
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 0xd]
test al, al
je 0x1402a61a2
cmp al, 0x70
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.acklen
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xd]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a6180
mov eax, Ordinal_60
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_gethostname
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.prf_ems_check
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x110
add rsp, 0x28
ret
movsx eax, byte [rdx + 4]
add eax, 0xffffff9d
cmp eax, 0x13
ja case.0x1402a37b5.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x2a72d8]
add rcx, r8
jmp rcx
add rdx, 5
lea rcx, str.lient_version
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 8
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ata_size
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0xa1
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x72
jne case.0x1402a37b5.51
cmp byte [rdx + 6], 0x6f
jne case.0x1402a37b5.51
cmp byte [rdx + 7], 0x75
jne case.0x1402a37b5.51
cmp byte [rdx + 8], 0x70
jne case.0x1402a37b5.51
cmp byte [rdx + 9], 0x2d
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 0xa]
cmp al, 0x61
je 0x1402a6366
cmp al, 0x69
je 0x1402a630c
cmp al, 0x6e
je 0x1402a62b2
cmp al, 0x73
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.ec_bits
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xa]
jne case.0x1402a37b5.51
cmp rax, 8
jne 0x1402a6290
mov eax, reloc.WS2_32.dll_send
add rsp, 0x28
ret
cmp byte [rdx + 0xb], 0x61
jne case.0x1402a37b5.51
cmp byte [rdx + 0xc], 0x6d
jne case.0x1402a37b5.51
cmp byte [rdx + 0xd], 0x65
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 0xe]
test al, al
je 0x1402a6302
cmp al, 0x2d
jne case.0x1402a37b5.51
add rdx, 0xf
lea rcx, str.internal
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_select
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_recvfrom
add rsp, 0x28
ret
movzx eax, byte [rdx + 0xb]
cmp al, 0x64
je 0x1402a6352
cmp al, 0x73
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str._kem
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xb]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a6330
mov eax, reloc.WS2_32.dll_inet_ntoa
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_inet_addr
add rsp, 0x28
ret
mov eax, WSAGetLastError
cmp al, byte [rdx + 0xb]
jne case.0x1402a37b5.51
mov eax, 0x67
cmp al, byte [rdx + 0xc]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 0xd]
jne case.0x1402a37b5.51
mov eax, 0xa
add rsp, 0x28
ret
movzx eax, byte [rdx + 5]
cmp al, 0x61
je 0x1402a6466
cmp al, 0x69
je 0x1402a63e2
cmp al, 0x75
jne case.0x1402a37b5.51
xor eax, eax
lea r8, [0x1403b8564]
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 5]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a63c0
mov eax, reloc.WS2_32.dll_getservbyport
add rsp, 0x28
ret
cmp byte [rdx + 6], 0x6e
jne case.0x1402a37b5.51
cmp byte [rdx + 7], 0x2d
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 8]
cmp al, 0x64
je 0x1402a6437
cmp al, 0x74
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 9]
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 0xa]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 0xb]
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_recv
add rsp, 0x28
ret
lea r8, [rdx + 9]
xor eax, eax
lea rdx, [0x1403b8560]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a6444
mov eax, reloc.WS2_32.dll_ntohs
add rsp, 0x28
ret
movzx eax, byte [rdx + 6]
cmp al, 0x63
je 0x1402a64f4
cmp al, 0x78
jne case.0x1402a37b5.51
cmp byte [rdx + 7], 0x2d
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 8]
cmp al, 0x64
je 0x1402a64c5
cmp al, 0x74
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 9]
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSAStartup
cmp al, byte [rdx + 0xa]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 0xb]
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_ntohl
add rsp, 0x28
ret
lea r8, [rdx + 9]
xor eax, eax
lea rdx, [0x1403b8560]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a64d2
mov eax, reloc.WS2_32.dll_listen
add rsp, 0x28
ret
movzx eax, byte [rdx + 7]
test al, al
je 0x1402a6533
cmp al, 0x2d
jne case.0x1402a37b5.51
lea r8, [rdx + 8]
xor eax, eax
lea rdx, str.size
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 5
jne 0x1402a6511
mov eax, 0x42
add rsp, 0x28
ret
mov eax, 0x41
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.egotiated_version
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 9
add rsp, 0x28
ret
cmp byte [rdx + 5], 0x69
jne case.0x1402a37b5.51
cmp byte [rdx + 6], 0x67
jne case.0x1402a37b5.51
cmp byte [rdx + 7], 0x61
jne case.0x1402a37b5.51
cmp byte [rdx + 8], 0x6c
jne case.0x1402a37b5.51
cmp byte [rdx + 9], 0x67
jne case.0x1402a37b5.51
cmp byte [rdx + 0xa], 0x2d
jne case.0x1402a37b5.51
movsx eax, byte [rdx + 0xb]
add eax, 0xffffff9d
cmp eax, 0x10
ja case.0x1402a37b5.51
cdqe
mov ecx, dword [r8 + rax*4 + 0x2a7328]
add rcx, r8
jmp rcx
add rdx, 0xc
lea rcx, str.ode_point
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_sendto
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0x61
jne case.0x1402a37b5.51
cmp byte [rdx + 0xd], 0x73
jne case.0x1402a37b5.51
cmp byte [rdx + 0xe], 0x68
jne case.0x1402a37b5.51
cmp byte [rdx + 0xf], 0x2d
jne case.0x1402a37b5.51
movsx ecx, byte [rdx + 0x10]
sub ecx, 0x6e
je 0x1402a6647
cmp ecx, 1
jne case.0x1402a37b5.51
mov eax, 0x69
cmp al, byte [rdx + 0x11]
jne case.0x1402a37b5.51
mov eax, 0x64
cmp al, byte [rdx + 0x12]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 0x13]
jne case.0x1402a37b5.51
mov eax, reloc.WLDAP32.dll_Ordinal_22
add rsp, 0x28
ret
lea r8, [rdx + 0x11]
xor eax, eax
lea rdx, [0x1403b858c]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a6654
mov eax, reloc.WS2_32.dll_setsockopt
add rsp, 0x28
ret
add rdx, 0xc
lea rcx, str.ana_name
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_socket
add rsp, 0x28
ret
cmp byte [rdx + 0xc], 0x65
jne case.0x1402a37b5.51
cmp byte [rdx + 0xd], 0x79
jne case.0x1402a37b5.51
cmp byte [rdx + 0xe], 0x74
jne case.0x1402a37b5.51
cmp byte [rdx + 0xf], 0x79
jne case.0x1402a37b5.51
cmp byte [rdx + 0x10], 0x70
jne case.0x1402a37b5.51
cmp byte [rdx + 0x11], 0x65
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 0x12]
test al, al
je 0x1402a6712
cmp al, 0x2d
jne case.0x1402a37b5.51
xor eax, eax
lea r8, [0x1403b859c]
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0x12]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a66f0
mov eax, Ordinal_27
add rsp, 0x28
ret
mov eax, Ordinal_27
add rsp, 0x28
ret
lea r8, [rdx + 0xc]
xor eax, eax
lea rdx, [0x1403b858c]
nop dword [rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a6730
mov eax, reloc.WLDAP32.dll_Ordinal_26
add rsp, 0x28
ret
mov eax, 0x69
cmp al, byte [rdx + 0xc]
jne case.0x1402a37b5.51
mov eax, 0x64
cmp al, byte [rdx + 0xd]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 0xe]
jne case.0x1402a37b5.51
mov eax, reloc.WLDAP32.dll_Ordinal_27
add rsp, 0x28
ret
movzx eax, byte [rdx + 0xc]
cmp al, 0x65
je 0x1402a6822
cmp al, 0x69
jne case.0x1402a37b5.51
cmp byte [rdx + 0xd], 0x67
jne case.0x1402a37b5.51
cmp byte [rdx + 0xe], 0x2d
jne case.0x1402a37b5.51
movsx ecx, byte [rdx + 0xf]
sub ecx, 0x6e
je 0x1402a67ee
cmp ecx, 1
jne case.0x1402a37b5.51
mov eax, 0x69
cmp al, byte [rdx + 0x10]
jne case.0x1402a37b5.51
mov eax, 0x64
cmp al, byte [rdx + 0x11]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 0x12]
jne case.0x1402a37b5.51
mov eax, reloc.WLDAP32.dll_Ordinal_30
add rsp, 0x28
ret
lea r8, [rdx + 0x10]
xor eax, eax
lea rdx, [0x1403b858c]
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a6800
mov eax, Ordinal_33
add rsp, 0x28
ret
xor eax, eax
lea r8, str.c_bits
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 0xc]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a6830
mov eax, Ordinal_32
add rsp, 0x28
ret
xor eax, eax
lea r8, str.ersion
nop dword [rax + rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a6860
mov eax, 0x43
add rsp, 0x28
ret
cmp byte [rdx + 2], 0
jne case.0x1402a37b5.51
mov eax, 0xb3
add rsp, 0x28
ret
mov eax, reloc.WS2_32.dll_WSASetLastError
cmp al, byte [rdx + 2]
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rdx + 3]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, 0x86
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x6b
je 0x1402a6a65
cmp al, 0x70
je 0x1402a6a43
cmp al, 0x73
jne case.0x1402a37b5.51
cmp byte [rcx + 2], 0x65
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 3]
cmp al, 0x2d
je 0x1402a6966
cmp al, 0x5f
jne case.0x1402a37b5.51
movsx ecx, byte [rcx + 4]
sub ecx, 0x64
je 0x1402a6944
cmp ecx, 1
jne case.0x1402a37b5.51
mov eax, reloc.WS2_32.dll_WSACleanup
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 7]
jne case.0x1402a37b5.51
mov eax, 0x99
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.erivation_function
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x5d
add rsp, 0x28
ret
movsx ecx, byte [rcx + 4]
sub ecx, 0x62
je 0x1402a6a14
sub ecx, 1
je 0x1402a69f2
sub ecx, 8
je 0x1402a69c5
sub ecx, 1
je 0x1402a69b1
cmp ecx, 7
jne case.0x1402a37b5.51
add rdx, 5
lea rcx, str.eparator
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x77
add rsp, 0x28
ret
cmp byte [rdx + 5], 0
jne case.0x1402a37b5.51
mov eax, 0x76
add rsp, 0x28
ret
xor eax, eax
lea r8, str.eybits
nop
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 4]
jne case.0x1402a37b5.51
cmp rax, 7
jne 0x1402a69d0
mov eax, reloc.WLDAP32.dll_Ordinal_143
add rsp, 0x28
ret
add rdx, 5
lea rcx, str.ofactor_flag
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x104
add rsp, 0x28
ret
lea r8, [rdx + 5]
xor eax, eax
lea rdx, [0x1403b82e8]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne case.0x1402a37b5.51
cmp rax, 4
jne 0x1402a6a21
mov eax, 0x45
add rsp, 0x28
ret
add rdx, 2
lea rcx, str.dated_iv
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
jne case.0x1402a37b5.51
mov eax, 0x44
add rsp, 0x28
ret
mov eax, WSAGetLastError
cmp al, byte [rcx + 2]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rcx + 3]
jne case.0x1402a37b5.51
mov eax, 0x89
add rsp, 0x28
ret
movzx eax, byte [rcx + 1]
cmp al, 0x61
je 0x1402a6ac3
cmp al, 0x65
jne case.0x1402a37b5.51
xor eax, eax
lea r8, str.rsion
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 1]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a6aa1
mov eax, WSAGetLastError
add rsp, 0x28
ret
cmp byte [rcx + 2], 0x6c
jne case.0x1402a37b5.51
cmp byte [rcx + 3], 0x69
jne case.0x1402a37b5.51
cmp byte [rcx + 4], 0x64
jne case.0x1402a37b5.51
cmp byte [rcx + 5], 0x61
jne case.0x1402a37b5.51
cmp byte [rcx + 6], 0x74
jne case.0x1402a37b5.51
cmp byte [rcx + 7], 0x65
jne case.0x1402a37b5.51
cmp byte [rcx + 8], 0x2d
jne case.0x1402a37b5.51
movzx eax, byte [rcx + 9]
cmp al, 0x67
je 0x1402a6b72
cmp al, 0x6c
je 0x1402a6b44
cmp al, 0x70
jne case.0x1402a37b5.51
mov eax, WSAStartup
cmp al, byte [rcx + 0xa]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rcx + 0xb]
jne case.0x1402a37b5.51
mov eax, 0xcb
add rsp, 0x28
ret
xor eax, eax
lea r8, str.egacy
nop dword [rax]
movzx ecx, byte [r8 + rax]
inc rax
cmp cl, byte [rdx + rax + 9]
jne case.0x1402a37b5.51
cmp rax, 6
jne 0x1402a6b50
mov eax, 0xca
add rsp, 0x28
ret
cmp byte [rcx + 0xa], 0
jne case.0x1402a37b5.51
mov eax, 0xc9
add rsp, 0x28
ret
movsx ecx, byte [rcx + 1]
sub ecx, 0x63
je 0x1402a6cbe
sub ecx, 0xc
je 0x1402a6c69
sub ecx, 1
je 0x1402a6c21
sub ecx, 1
je 0x1402a6bd9
cmp ecx, 3
jne case.0x1402a37b5.51
add rdx, 2
lea rcx, str.s_standard
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
mov ecx, 0xffffffff
mov edx, 0x46
cmove ecx, edx
mov eax, ecx
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
test ecx, ecx
je 0x1402a6c17
sub ecx, 0x31
je 0x1402a6c03
cmp ecx, 1
jne case.0x1402a37b5.51
cmp byte [rdx + 3], 0
jne case.0x1402a37b5.51
mov eax, 0x102
add rsp, 0x28
ret
cmp byte [rdx + 3], 0
jne case.0x1402a37b5.51
mov eax, 0x101
add rsp, 0x28
ret
mov eax, 0x100
add rsp, 0x28
ret
movsx ecx, byte [rdx + 2]
test ecx, ecx
je 0x1402a6c5f
sub ecx, 0x31
je 0x1402a6c4b
cmp ecx, 1
jne case.0x1402a37b5.51
cmp byte [rdx + 3], 0
jne case.0x1402a37b5.51
mov eax, 0xff
add rsp, 0x28
ret
cmp byte [rdx + 3], 0
jne case.0x1402a37b5.51
mov eax, 0xfe
add rsp, 0x28
ret
mov eax, 0xfd
add rsp, 0x28
ret
cmp byte [rdx + 2], 0x66
jne case.0x1402a37b5.51
movzx eax, byte [rdx + 3]
test al, al
je 0x1402a6cb4
cmp al, 0x6c
jne case.0x1402a37b5.51
mov eax, 0x65
cmp al, byte [rdx + 4]
jne case.0x1402a37b5.51
mov eax, WSAGetLastError
cmp al, byte [rdx + 5]
jne case.0x1402a37b5.51
xor eax, eax
cmp al, byte [rdx + 6]
jne case.0x1402a37b5.51
mov eax, Ordinal_79
add rsp, 0x28
ret
mov eax, Ordinal_79
add rsp, 0x28
ret
lea r8, [rdx + 2]
xor eax, eax
lea rdx, str.ghash
nop dword [rax + rax]
movzx ecx, byte [rdx + rax]
inc rax
cmp cl, byte [r8 + rax - 1]
jne 0x1402a6ce9
cmp rax, 6
jne 0x1402a6cd0
cmp cl, byte [r8 + rax - 1]
mov eax, 0x87
mov ecx, 0xffffffff
cmove ecx, eax
mov eax, ecx
add rsp, 0x28
ret
mov eax, 0xffffffff
add rsp, 0x28
ret