Function at 0x14010c4e0
Capabilities:
Enumerate processes
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x300]
sub rsp, 0x400
mov rax, qword [0x1401da800]
xor rax, rsp
mov qword [rbp + 0x2f0], rax
mov r12, rdx
mov r15, qword [0x14022e208]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.14010b6b0
mov rcx, r15
call fcn.14010c470
test al, al
jne 0x140111743
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], rax
lea rcx, [rbp + 0x150]
call fcn.14004a090
nop
mov edx, 0x26e0
lea rcx, [rbp + 0x150]
call fcn.1401151c0
lea r9, [rbp + 0x150]
lea r8, str.NtShutdownSystem
lea rdx, [0x1401b8ca0]
lea rcx, [rbp + 0xe8]
call fcn.140123a30
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
mov qword [rbp + 0x1b0], rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0xf0]
call fcn.1400fac70
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140044d70
nop
call fcn.14010a8e0
test al, al
jne 0x14010d122
mov dword [rbp - 0x58], 0x61636f75
mov dword [rbp - 0x54], 0x73a66068
mov dword [rbp - 0x50], 0x6466a967
mov dword [rbp - 0x4c], 0x6bae696d
mov dword [rbp - 0x48], 0x76647862
mov dword [rbp - 0x44], 0xb9b8bb66
mov word [rbp - 0x40], 0x93b6
mov byte [rbp - 0x3e], 0x9a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x3d], xmm0
mov qword [rbp - 0x2d], rax
movabs rsi, 0x9cec42719de8eb40
movabs r12, 0xca8527bc4478ce40
movabs r14, 0xf64c93392d97fcc0
movabs r15, 0x614243c0a4a66040
movabs r13, 0xcc37f4481bb4c3c0
movzx ebx, byte [rbp + 0x148]
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor r11d, r11d
cmp r11, 0x33
jae 0x14010d119
movzx r10d, byte [rbp + r11 - 0x58]
movzx edi, r10b
cmp rax, r11
ja 0x14010d10d
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14010c6c2
lea rdx, [r11 + r12]
mov rcx, r10
and rcx, rdx
imul rbx, rcx, 0xfffffffffffffffe
add rbx, r10
add rbx, rdx
add bl, 0x40
jmp 0x14010c6fc
je 0x14010d094
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14010d00f
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14010cfd8
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14010cf8d
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x14010cf43
movzx edi, r10b
cmp r9, r11
ja 0x14010d101
lea rcx, [r9 + 0x20]
cmp rax, rcx
jae 0x14010c72f
lea r8, [r11 + rsi]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, dil
add bl, r8b
jmp 0x14010c770
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14010cf37
inc rcx
cmp rax, rcx
je 0x14010cf09
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14010cefa
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14010ceeb
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14010cecd
nop
lea rcx, [rax + r9]
cmp rcx, r11
jbe 0x14010cbe9
nop dword [rax]
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x14010ccc0
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x14010cbc9
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x14010cba6
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x14010cb8f
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x14010cc76
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x14010cb7a
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x14010cc50
lea rcx, [r9 + 0x400]
cmp rax, rcx
je 0x14010cb63
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x14010cc1b
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x14010c780
lea rax, [r9 + 5]
lea r9, [rax + 4]
lea rcx, [r9 + 0x400]
cmp rax, rcx
jb 0x14010d0e5
lea rcx, [r9 + 0x200]
cmp rax, rcx
jb 0x14010d0c5
lea rcx, [r9 + 0x64]
cmp rax, rcx
jb 0x14010c96b
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x14010c94b
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x14010c92d
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x14010cb09
lea rdx, [r9 + 0x42]
cmp rax, rdx
jb 0x14010caec
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x14010caac
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x14010ca8a
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x14010c780
mov rax, rdx
lea r9, [rdx + 0x40]
lea rcx, [r9 + 0x28]
cmp rdx, rcx
ja 0x14010ca64
lea rcx, [r9 + 0x10]
cmp rdx, rcx
ja 0x14010ca47
lea rcx, [r9 + 0x5a]
cmp rdx, rcx
ja 0x14010ca30
lea rcx, [r9 + 0x7a]
cmp rdx, rcx
ja 0x14010ca13
lea rcx, [r9 + 0x20]
cmp rdx, rcx
ja 0x14010c9fe
lea rcx, [r9 + 0xa]
cmp rdx, rcx
ja 0x14010c9e1
lea rcx, [r9 + 0x41]
cmp rdx, rcx
ja 0x14010c9c6
lea rcx, [r9 + 0x61]
cmp rdx, rcx
ja 0x14010c9a0
lea rcx, [r9 + 0x400]
cmp rdx, rcx
ja 0x14010c989
lea rcx, [r9 + 9]
cmp rdx, rcx
ja 0x14010c780
lea rax, [r9 + 8]
lea r9, [rax + 6]
jmp 0x14010c780
lea r8, [r11 + r14]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, dil
sub bl, cl
sub bl, 0x40
add bl, r8b
jmp 0x14010c770
lea r8, [r11 + r15]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, dil
add bl, r8b
jmp 0x14010c700
lea r8, [r11 + r13]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx ebx, dil
sub bl, cl
sub bl, 0x40
add bl, r8b
jmp 0x14010c697
movzx edx, r10b
and dl, r11b
add dl, dl
movzx ebx, r10b
sub bl, dl
add bl, r11b
jmp 0x14010cf66
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x80
inc r9
dec r11
inc r11
jmp 0x14010c683
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
dec r11
inc r11
jmp 0x14010c683
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x80
jmp 0x14010cfb1
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
jmp 0x14010cff4
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x80
jmp 0x14010cff7
movzx edx, r11b
and dl, r10b
add dl, dl
movzx ebx, r11b
sub bl, dl
add bl, r10b
jmp 0x14010d032
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x80
jmp 0x14010d05c
movzx edx, r11b
and dl, r10b
add dl, dl
movzx ebx, r11b
sub bl, dl
add bl, r10b
movzx ecx, byte [rbp + r11 - 0x58]
add rcx, r9
add r11, rcx
inc r11
jmp 0x14010c683
lea edx, [r11 - 0x40]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x40
mov byte [rbp + r11 - 0x58], bl
inc r11
jmp 0x14010c683
lea r8d, [r11 + 0x40]
movzx ecx, r8b
and cl, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
movzx edi, r11b
cmp r9, 2
jb 0x14010ca9f
add dil, 0x80
movzx ecx, dil
and cl, r10b
add cl, cl
sub dil, cl
add dil, r10b
lea ebx, [rdi + rdi]
jmp 0x14010cf66
movzx edi, r11b
lea edx, [rdi - 0x40]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x40
jmp 0x14010cd9e
lea r8d, [r11 + 0x40]
movzx ecx, r8b
and cl, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
lea rcx, [rax + r9]
cmp rcx, 0x2a
je 0x14010ceb1
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jbe 0x14010ccdd
movzx edi, r11b
lea r8d, [rdi + 0x40]
movzx ecx, r8b
and cl, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x14010cd9e
movzx edx, r11b
and dl, r10b
add dl, dl
movzx ebx, r11b
sub bl, dl
add bl, r10b
jmp 0x14010d05c
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea ebx, [r11 + r10]
jmp 0x14010cff7
movzx edx, r10b
and dl, r11b
add dl, dl
movzx ebx, r10b
sub bl, dl
add bl, r11b
jmp 0x14010cfb1
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x80
dec r11
inc r11
jmp 0x14010c683
movzx edx, r11b
and dl, r10b
add dl, dl
movzx ebx, r11b
sub bl, dl
add bl, r10b
inc r9
dec r11
inc r11
jmp 0x14010c683
lea rcx, [r9 + 5]
cmp rax, rcx
jae 0x14010cc12
lea r8, [r11 + r12]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, dil
add bl, r8b
jmp 0x14010cb24
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010cc47
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x80
movzx ecx, byte [rbp + r11 - 0x58]
add rcx, r9
add r11, rcx
inc r11
jmp 0x14010c683
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14010cc6d
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x80
jmp 0x14010d032
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14010cc93
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x80
jmp 0x14010cff4
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14010ccb3
movzx edx, r11b
and dl, r10b
add dl, dl
movzx ebx, r11b
sub bl, dl
add bl, r10b
jmp 0x14010cfb1
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14010cb24
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x80
jmp 0x14010cf66
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010cd00
lea edx, [r11 - 0x40]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x40
jmp 0x14010cf66
inc rcx
cmp rax, rcx
jne 0x14010cd28
lea edx, [r11 - 0x40]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
sub bl, 0x40
dec r11
inc r11
jmp 0x14010c683
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14010cd48
lea edx, [r11 - 0x40]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
jmp 0x14010cff1
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14010cd71
lea r8d, [r11 + 0x40]
movzx ecx, r8b
and cl, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x14010cff7
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x14010cd9a
lea r8d, [r11 + 0x40]
movzx ecx, r8b
and cl, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r8b
add bl, r10b
jmp 0x14010d05c
movzx edi, r11b
cmp rax, 0x3e8
jae 0x14010ce97
lea rcx, [r9 + 0x200]
cmp rax, rcx
jbe 0x14010cdd2
lea edx, [rdi + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x80
jmp 0x14010cacb
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010cdff
movzx ecx, dil
and cl, r10b
add cl, cl
sub dil, cl
lea ebx, [r10 + rdi]
movzx ecx, byte [rbp + r11 - 0x58]
add rcx, r9
add r11, rcx
inc r11
jmp 0x14010c683
inc rcx
cmp rax, rcx
jne 0x14010ce1c
movzx ecx, dil
and cl, r10b
add cl, cl
sub dil, cl
lea ebx, [r10 + rdi]
jmp 0x14010d032
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14010ce41
lea edx, [rdi + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [r10 + rdx]
add bl, 0x80
jmp 0x14010cfb5
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14010ce65
movzx ecx, dil
and cl, r10b
add cl, cl
sub dil, cl
lea ebx, [r10 + rdi]
dec r11
inc r11
jmp 0x14010c683
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14010cacb
add dil, 0x80
movzx ecx, dil
and cl, r10b
add cl, cl
sub dil, cl
lea ebx, [r10 + rdi]
add bl, 0x80
inc r9
dec r11
inc r11
jmp 0x14010c683
movzx ecx, dil
and cl, r10b
add cl, cl
movzx ebx, r10b
sub bl, cl
add bl, dil
add bl, r10b
jmp 0x14010cfb5
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [rdx + 0x80]
jmp 0x14010d032
movabs rcx, 0xda490dae6e676bc0
add rcx, r11
and r10b, cl
add r10b, r10b
sub dil, r10b
lea ebx, [rcx + rdi]
jmp 0x14010d0ae
movabs rdx, 0xb0346ebd5c8432c0
jmp 0x14010d019
movabs rcx, 0x861fcfcc4aa0f9c0
jmp 0x14010cfe2
movabs rdx, 0xc700e162afcc2440
add rdx, r11
and r10b, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, r10b
lea ebx, [rcx + rcx]
add bl, dil
add bl, dl
inc r9
dec r11
inc r11
jmp 0x14010c683
movabs rdx, 0x31f691ea26da87c0
jmp 0x14010cf4d
movabs rdx, 0x7e1f2f914f74ec0
add rdx, r11
and r10b, dl
add r10b, r10b
movzx ebx, dil
sub bl, r10b
sub bl, 0x40
movzx r10d, dil
add bl, dl
lea edx, [r11 - 0x40]
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
sub dl, 0x40
add dl, r10b
mov byte [rbp + r11 - 0x58], dl
inc r9
dec r11
inc r11
jmp 0x14010c683
movabs rdx, 0x48c3048f7a227940
add rdx, r11
and r10b, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, r10b
lea ebx, [rcx + rcx]
add bl, dil
add bl, dl
movzx r10d, dil
movzx edi, r11b
add dil, 0x40
movzx ecx, r10b
and cl, dil
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
add dl, dl
add dl, r10b
add dl, dil
add dl, bl
mov byte [rbp + r11 - 0x58], dl
jmp 0x14010cff4
movabs rcx, 0xb3b8b516f130dcc0
add rcx, r11
and r10b, cl
add r10b, r10b
sub dil, r10b
lea ebx, [rcx + rdi]
sub bl, 0x40
add rax, r9
movzx ecx, bl
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r11, rdx
inc r11
jmp 0x14010c683
movabs rdx, 0x89a41625df4da3c0
add rdx, r11
and r10b, dl
add r10b, r10b
movzx ebx, dil
sub bl, r10b
sub bl, 0x40
movzx r10d, dil
add bl, dl
lea r8d, [r11 - 0x40]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
sub dl, 0x40
add dl, r8b
movzx ecx, dl
mov byte [rbp + r11 - 0x58], cl
inc r9
add rcx, r9
sub r11, rcx
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
add r10b, r11b
mov byte [rbp + r11 - 0x58], r10b
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
movzx ecx, byte [rbp + r11 - 0x58]
add rcx, r9
add r11, rcx
inc r11
jmp 0x14010c683
movabs rdx, 0x5f8f7734cd6a6ac0
add rdx, r11
movzx ecx, dl
and cl, r10b
add cl, cl
sub dl, cl
lea ebx, [rdi + rdx]
sub bl, 0x40
movzx ecx, byte [rbp + r11 - 0x58]
add rcx, r9
add r11, rcx
inc r11
jmp 0x14010c683
add r11b, 0x40
movzx ecx, r11b
and cl, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea ebx, [rdx + rdx]
add bl, r11b
add bl, r10b
jmp 0x14010c680
sub r11b, 0x40
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x40
jmp 0x14010c670
lea rdx, [rbp + 0x16a92a8]
jmp 0x1401116ba
lea rdx, [rbp + 0xe360e8]
jmp 0x1401116ba
lea rdx, [rbp - 0x58]
jmp 0x1401116ba
lea rcx, [rbp + 0x149]
call fcn.14004f3a0
mov dword [rbp - 0x20], 0xd1ebd3e2
mov dword [rbp - 0x1c], 0xe7a8dfe1
mov dword [rbp - 0x18], 0x95acd8e9
mov dword [rbp - 0x14], 0xd7a29a99
mov dword [rbp - 0x10], 0x9f93a49a
mov dword [rbp - 0xc], 0xedea9d91
mov word [rbp - 8], 0x33ec
mov byte [rbp - 6], reloc.WLDAP32.dll_Ordinal_60
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 5], xmm0
mov qword [rbp + 0xb], rax
movabs rsi, 0x38e258e7dfdd3ab5
movabs r14, 0xfff52026dec7105d
movabs r13, 0xaaa70ab79f97b01f
movzx ebx, byte [rbp + 0x148]
nop dword [rax]
nop dword [rax + rax]
mov r9, qword [0x14022e4a8]
mov r8, qword [0x14022e4a0]
nop
xor edi, edi
cmp rdi, 0x33
jae 0x14010dd87
movzx r10d, byte [rbp + rdi - 0x20]
mov edx, r10d
cmp r9, rdi
ja 0x14010dd7e
lea rax, [r8 + 1]
cmp r9, rax
jae 0x14010d1f0
lea rcx, [rdi + rsi]
mov rax, rdx
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rdx
add rbx, rcx
add bl, 0xd
jmp 0x14010d237
je 0x14010dd19
lea rax, [r8 + 2]
cmp r9, rax
je 0x14010dc95
lea rax, [r8 + 3]
cmp r9, rax
je 0x14010dc6c
lea rax, [r8 + 5]
cmp r9, rax
je 0x14010dc2d
lea rax, [r8 + 7]
cmp r9, rax
je 0x14010dc0d
lea rax, [r8 + 6]
cmp r9, rax
je 0x14010dbc8
movzx r11d, dil
nop dword [rax + rax]
cmp r8, rdi
ja 0x14010dd75
lea rax, [r8 + 0x200]
cmp r9, rax
jae 0x14010d26c
lea ecx, [r11 - 0x27]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
add bl, 0x11
jmp 0x14010d2b0
lea rax, [r8 + 1]
cmp r9, rax
je 0x14010dbb1
lea rax, [r8 + 2]
cmp r9, rax
je 0x14010db8f
lea rax, [r8 + 3]
cmp r9, rax
je 0x14010db75
lea rax, [r8 + 5]
cmp r9, rax
je 0x14010db59
lea rax, [r8 + 6]
cmp r9, rax
je 0x14010db2f
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x14010d808
nop dword [rax]
lea rax, [r8 + 0x3e8]
cmp r9, rax
je 0x14010d7ee
lea rax, [r8 + 0x61]
cmp r9, rax
je 0x14010d7c9
lea rax, [r8 + 9]
cmp r9, rax
je 0x14010d7a7
lea rax, [r8 + 0x20]
cmp r9, rax
je 0x14010d78d
lea rax, [r8 + 0x42]
cmp r9, rax
je 0x14010d76e
lea rax, [r8 + 1]
cmp r9, rax
je 0x14010d74e
lea rax, [r8 + 4]
cmp r9, rax
je 0x14010d730
lea rax, [r8 + 0x80]
cmp r9, rax
je 0x14010d710
lea rax, [r8 + 0x400]
cmp r9, rax
je 0x14010d6e2
lea rax, [r8 + 6]
cmp r9, rax
je 0x14010d2c0
lea r9, [r8 + 0x1000]
lea r8, [r9 + 0xa]
lea rax, [r8 + 0x41]
cmp r9, rax
jb 0x14010dd59
lea rax, [r8 + 0x10]
cmp r9, rax
jb 0x14010dd3d
lea rax, [r8 + 0x40]
cmp r9, rax
jb 0x14010d4a8
lea rax, [r8 + 0x2a]
cmp r9, rax
jb 0x14010d48e
lea rax, [r8 + 3]
cmp r9, rax
jb 0x14010d474
lea rax, [r8 + 0x64]
cmp r9, rax
jb 0x14010d697
lea rax, [r8 + 0x3e8]
cmp r9, rax
jb 0x14010d650
lea rax, [r8 + 0x61]
cmp r9, rax
jb 0x14010d613
lea rax, [r8 + 9]
cmp r9, rax
jb 0x14010d5f0
lea rax, [r8 + 0x20]
cmp r9, rax
jb 0x14010d2c0
lea r9, [r8 + 0xa]
lea r8, [r9 + 0x41]
lea rax, [r8 + 0x28]
cmp r9, rax
ja 0x14010d5c6
lea rax, [r8 + 0x64]
cmp r9, rax
ja 0x14010d5a8
lea rax, [r8 + 2]
cmp r9, rax
ja 0x14010d58c
lea rax, [r8 + 5]
cmp r9, rax
ja 0x14010d56c
lea rax, [r8 + 0x200]
cmp r9, rax
ja 0x14010d549
lea rax, [r8 + 0x1000]
cmp r9, rax
ja 0x14010d52d
lea rax, [r8 + 8]
cmp r9, rax
ja 0x14010d507
lea rax, [r8 + 0x10]
cmp r9, rax
ja 0x14010d4de
lea rax, [r8 + 0x7a]
cmp r9, rax
ja 0x14010d4c4
lea rax, [r8 + 0x2a]
cmp r9, rax
ja 0x14010d2c0
lea r9, [r8 + 0x42]
lea r8, [r9 + 3]
jmp 0x14010d2c0
lea ecx, [r11 + 0x47]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
add bl, 0xf
jmp 0x14010d2b0
lea ecx, [r11 - 0x23]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea ebx, [r10 + rcx]
sub bl, 0xb
jmp 0x14010d240
add r11b, 0x73
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x25
jmp 0x14010d1c5
lea edx, [r11 - 0x38]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x78
jmp 0x14010dbe1
add r11b, 0x5e
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r8
dec rdi
inc rdi
jmp 0x14010d1b2
sub r11b, 0xc
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010d1b2
lea edx, [r11 - 0x76]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
jmp 0x14010dc46
add r11b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
add r9, r8
jmp 0x14010dc7d
sub r11b, 0x4a
movzx eax, r10b
and al, r11b
mov ecx, 3
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010dc7d
lea edx, [r11 + 0x4c]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x14
add bl, dl
jmp 0x14010dcb3
sub r11b, 0x1e
movzx eax, r10b
and al, r11b
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x2e
add bl, r11b
jmp 0x14010dcdb
add r11b, 0x78
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x48
movzx eax, byte [rbp + rdi - 0x20]
add rax, r8
add rdi, rax
inc rdi
jmp 0x14010d1b2
sub r11b, 0x11
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x77
mov byte [rbp + rdi - 0x20], bl
inc rdi
jmp 0x14010d1b2
lea edx, [r11 - 0x7b]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
add bl, 0x5d
add bl, dl
cmp r8, 0x40
jb 0x14010d607
lea edx, [r11 + 0x1e]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
lea ebx, [rcx + rcx]
jmp 0x14010dbe3
lea edx, [r11 + 0x1b]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
add bl, 0x43
add bl, dl
cmp r9, 0x5a
jae 0x14010daf9
lea rax, [r8 + 0x40]
cmp r9, rax
jbe 0x14010da4e
lea edx, [r11 - 6]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
jmp 0x14010d628
lea edx, [r11 - 0x4f]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
add bl, 0x29
add bl, dl
lea rax, [r9 + r8]
cmp rax, 0x400
je 0x14010db14
lea rax, [r8 + 9]
cmp r9, rax
jbe 0x14010d92e
lea edx, [r11 + 0x21]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
add bl, 0x19
jmp 0x14010d665
add r11b, 0x16
movzx eax, r10b
and al, r11b
mov ecx, 0x33
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rbp + rdi - 0x20]
add rax, r8
add rdi, rax
inc rdi
jmp 0x14010d1b2
sub r11b, 0x54
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010dcdb
lea edx, [r11 + 0x42]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
jmp 0x14010dcb3
sub r11b, 0x28
movzx eax, r10b
and al, r11b
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010dc7d
add r11b, 0x6e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 2
add r9, r8
jmp 0x14010dc7d
lea edx, [r11 + 4]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x1c
jmp 0x14010dc46
sub r11b, 0x66
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x36
dec rdi
inc rdi
jmp 0x14010d1b2
add r11b, 0x30
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x50
inc r8
dec rdi
inc rdi
jmp 0x14010d1b2
lea edx, [r11 - 0x3a]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x6a
jmp 0x14010dbe1
lea rdx, [r8 + 9]
cmp r9, rdx
jae 0x14010d82b
lea edx, [r11 - 0x4b]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
add bl, 0xd
jmp 0x14010d6ac
lea rcx, [r8 + 1]
cmp r9, rcx
jne 0x14010d862
sub r11b, 0x4e
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rbp + rdi - 0x20]
add rax, r8
add rdi, rax
inc rdi
jmp 0x14010d1b2
lea rax, [r8 + 2]
cmp r9, rax
jne 0x14010d889
lea edx, [r11 - 0x7a]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
jmp 0x14010dcb3
lea rax, [r8 + 3]
cmp r9, rax
jne 0x14010d8b2
sub r11b, 0x10
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010dc7d
lea rax, [rcx + 1]
cmp r9, rax
jne 0x14010d8dd
add r11b, 0x2e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x42
dec rdi
inc rdi
jmp 0x14010d1b2
lea rax, [r8 + 5]
cmp r9, rax
jne 0x14010d90b
sub r11b, 0x68
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x28
inc r8
dec rdi
inc rdi
jmp 0x14010d1b2
cmp r9, rdx
jne 0x14010d6ae
lea edx, [r11 + 2]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0xe
jmp 0x14010dbe1
lea rax, [r8 + 1]
cmp r9, rax
jne 0x14010d951
lea edx, [r11 - 0x75]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
add bl, 0x33
jmp 0x14010dbe1
inc rax
cmp r9, rax
jne 0x14010d97e
sub r11b, 0xb
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x4d
inc r8
dec rdi
inc rdi
jmp 0x14010d1b2
lea rax, [r8 + 4]
cmp r9, rax
jne 0x14010d9a6
add r11b, 0x33
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x65
add r9, r8
jmp 0x14010dc7d
lea rax, [r8 + 5]
cmp r9, rax
jne 0x14010d9cb
sub r11b, 0x63
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x4b
jmp 0x14010dc7d
lea rax, [r8 + 7]
cmp r9, rax
jne 0x14010d9f0
lea edx, [r11 + 7]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x31
add bl, dl
jmp 0x14010dcb3
lea rax, [r8 + 3]
cmp r9, rax
jne 0x14010da17
add r11b, 0x71
movzx eax, r10b
and al, r11b
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x17
add bl, r11b
jmp 0x14010dcdb
lea rax, [r8 + 8]
cmp r9, rax
jne 0x14010d667
sub r11b, 0x25
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 3
movzx eax, byte [rbp + rdi - 0x20]
add rax, r8
add rdi, rax
inc rdi
jmp 0x14010d1b2
lea rax, [r8 + 1]
cmp r9, rax
jne 0x14010da85
add r11b, 0x64
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_35
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rbp + rdi - 0x20]
add rax, r8
add rdi, rax
inc rdi
jmp 0x14010d1b2
inc rax
cmp r9, rax
jne 0x14010daad
sub r11b, 0x32
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010dcdb
lea rax, [r8 + 4]
cmp r9, rax
jne 0x14010dad0
lea edx, [r11 + 0x76]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x3a
jmp 0x14010dc46
lea rax, [r8 + 2]
cmp r9, rax
jne 0x14010d62a
lea edx, [r11 - 0x4c]
movzx eax, r10b
and al, dl
mov ecx, 0xa
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
jmp 0x14010dbe1
lea edx, [r11 - 0x78]
movzx eax, r10b
and al, dl
movzx ecx, r10b
sub cl, al
add cl, 0x24
lea ebx, [rcx + rcx]
jmp 0x14010dc46
lea edx, [r11 - 0xe]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x14010dcb3
sub r11b, 0x6d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 5
movzx eax, byte [rbp + rdi - 0x20]
add rax, r8
add rdi, rax
inc rdi
jmp 0x14010d1b2
add r11b, 0x55
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x53
jmp 0x14010dc7d
lea edx, [r11 - 0x7f]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
add bl, 0x79
jmp 0x14010dc46
add r11b, 0x17
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x5f
dec rdi
inc rdi
jmp 0x14010d1b2
lea edx, [r11 + 0x43]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
add bl, 0x2b
jmp 0x14010dbe1
movzx r11d, dil
lea edx, [r11 + 0x6f]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 9
add bl, dl
sub r11b, 0x2d
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
add r11b, 0x3b
add r11b, r10b
mov byte [rbp + rdi - 0x20], r11b
inc r8
dec rdi
inc rdi
jmp 0x14010d1b2
lea ecx, [rdi - 0x65]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea ebx, [rcx + r10]
sub bl, 0x3d
dec rdi
inc rdi
jmp 0x14010d1b2
movzx r11d, dil
lea edx, [r11 + 0x31]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x57
add bl, dl
add r11b, 0x3d
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
add r11b, 0x55
add r11b, r10b
add r11b, bl
mov byte [rbp + rdi - 0x20], r11b
add r9, r8
jmp 0x14010dc7d
lea rax, [rdi + r14]
and dl, al
add dl, dl
sub al, dl
lea ebx, [r10 + rax]
add bl, 0x75
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x14010d1b2
movabs rax, 0x8e306e571f0c9af3
add rax, rdi
and dl, al
add dl, dl
sub al, dl
lea ebx, [r10 + rax]
add bl, 0x5b
movzx r11d, dil
sub r11b, 0x59
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
add r11b, 0x6f
add r11b, r10b
movzx eax, r11b
mov byte [rbp + rdi - 0x20], al
inc r8
add rax, r8
sub rdi, rax
lea edx, [rdi + 0x5c]
movzx eax, dl
and al, r10b
mov ecx, 0x3e
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
mov byte [rbp + rdi - 0x20], cl
inc r9
mov rax, 0xffffffffffffffff
sub rax, r9
add rdi, rax
movzx eax, byte [rbp + rdi - 0x20]
add rax, r8
add rdi, rax
inc rdi
jmp 0x14010d1b2
lea rax, [rdi + r13]
and dl, al
add dl, dl
sub al, dl
lea ebx, [r10 + rax]
add bl, 0x27
movzx eax, byte [rbp + rdi - 0x20]
add rax, r8
add rdi, rax
inc rdi
jmp 0x14010d1b2
add r11b, 9
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x3f
jmp 0x14010d1b0
sub r11b, 0x61
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x59
jmp 0x14010d1a0
lea rdx, [rbp + 0x163717c]
jmp 0x14010dd8b
lea rdx, [rbp + 0x140ac31]
jmp 0x14010dd8b
lea rdx, [rbp - 0x20]
mov rcx, qword [0x14022e168]
call fcn.1400cd3b0
mov rsi, qword [0x14022e480]
mov dword [rbp + 0x90], 0xc014b80d
mov dword [rbp + 0x94], 0x34c0c1cd
mov dword [rbp + 0x98], 0x333ced32
mov dword [rbp + 0x9c], 0x3a3f444d
mov dword [rbp + 0xa0], 0x33e43139
mov dword [rbp + 0xa4], 0xff3b383d
mov dword [rbp + 0xa8], 0xebfc1fed
mov dword [rbp + 0xac], 0xc128e252
mov byte [rbp + 0xb0], Ordinal_217
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xb1], xmm0
movups xmmword [rbp + 0xc1], xmm0
mov word [rbp + 0xd1], ax
movabs r14, 0x7b6e2dd9b1748179
movabs r13, 0x724a898d145d846b
movzx edx, byte [rbp + 0x148]
nop word [rax + rax]
mov r8, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor ebx, ebx
cmp rbx, 0x43
jae 0x14010e7e1
movzx r11d, byte [rbp + rbx + 0x90]
mov edi, r11d
nop dword [rax + rax]
cmp r8, rbx
ja 0x14010e7d8
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x14010de8b
lea rcx, [rbx + r14]
mov rax, rcx
and rax, rdi
imul rdx, rax, 0xfffffffffffffffe
add rdx, rcx
add rdx, rdi
sub dl, 0x4f
jmp 0x14010dec5
je 0x14010e76d
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010e6db
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010e685
lea rax, [rcx + 1]
cmp r8, rax
je 0x14010e666
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010e620
movzx r10d, bl
nop dword [rax]
cmp r9, rbx
ja 0x14010e7cf
lea rax, [r9 + 0x200]
cmp r8, rax
jae 0x14010defc
lea ecx, [r10 - 0x13]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x7b
jmp 0x14010df40
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x14010e609
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010e5e7
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010e5cb
lea rax, [rcx + 1]
cmp r8, rax
je 0x14010e5b1
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010e584
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14010e1c8
nop dword [rax]
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010e1ab
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010e182
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x14010e160
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010e143
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x14010e127
lea r8, [r9 + 4]
lea r9, [r8 + 6]
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14010e7b3
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14010e797
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x14010e064
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14010e04a
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14010e030
lea r8, [r9 + 0x7a]
lea r9, [r8 + 0x5a]
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x14010e0f6
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x14010e0d6
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14010e0bc
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14010e09c
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010e080
lea r8, [r9 + 0x64]
lea r9, [r8 + 0x200]
jmp 0x14010df50
lea ecx, [r10 - 0x4d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x1b
jmp 0x14010df40
lea ecx, [r10 - 0x3f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x47
jmp 0x14010ded0
sub r10b, 0x31
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x57
jmp 0x14010de60
sub r10b, 0x60
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x60
jmp 0x14010e6c0
sub r10b, 0x52
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_35
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x14010e6c3
lea edx, [r10 - 0x44]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x24
jmp 0x14010e6fc
sub r10b, 0x36
movzx eax, r11b
and al, r10b
mov ecx, 0x3d
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x14010e72a
sub r10b, 0x28
movzx eax, r11b
and al, r10b
mov ecx, recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010de42
sub r10b, 0x3a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x6a
jmp 0x14010e6c0
lea edx, [r10 - 0x2c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010e69e
sub r10b, 0x1e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x2e
dec rbx
inc rbx
jmp 0x14010de42
sub r10b, 0x10
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x14010de42
lea edx, [r10 - 2]
movzx eax, dl
and al, r11b
mov ecx, 7
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010e639
lea rax, [r9 + 0x200]
cmp r8, rax
jae 0x14010e275
lea ecx, [r10 + 0x79]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x4f
lea rax, [r9 + r8]
cmp rax, 0x64
je 0x14010e56c
lea rax, [r9 + 9]
cmp r8, rax
jbe 0x14010e381
lea ecx, [r10 - 0x2b]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x2d
cmp r8, 9
jae 0x14010e54d
lea rax, [r9 + 0x10]
cmp r8, rax
jbe 0x14010e46d
lea edx, [r10 - 0x3e]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x4e
add dl, cl
cmp r9, 1
jb 0x14010e53e
lea edx, [r10 + 0x36]
movzx eax, r11b
and al, dl
mov ecx, 3
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
lea edx, [rcx + rcx]
jmp 0x14010e639
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010e2af
sub r10b, 0x26
movzx eax, r10b
and al, r11b
mov ecx, 5
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010de42
inc rax
cmp r8, rax
jne 0x14010e2d7
sub r10b, 0x34
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010e72a
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010e2fa
lea ecx, [r10 - 0x6c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0xc
jmp 0x14010e69e
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010e329
sub r10b, 0x7a
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010de42
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010e357
add r10b, 0x78
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x48
inc r9
dec rbx
inc rbx
jmp 0x14010de42
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010e1ed
lea edx, [r10 + 0x6a]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010e639
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010e3a4
lea ecx, [r10 - 0x39]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x71
jmp 0x14010e639
inc rax
cmp r8, rax
jne 0x14010e3d1
sub r10b, 0x47
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0xf
inc r9
dec rbx
inc rbx
jmp 0x14010de42
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010e3fc
sub r10b, 0x55
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x53
dec rbx
inc rbx
jmp 0x14010de42
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010e421
sub r10b, 0x71
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x17
jmp 0x14010e6c0
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010e446
sub r10b, 0x7f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x79
jmp 0x14010e6c3
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010e21d
lea ecx, [r10 + 0x73]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x25
jmp 0x14010e6fe
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010e4a7
sub r10b, 0x4c
movzx eax, r11b
and al, r10b
mov ecx, 0xa
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010de42
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010e4ca
lea edx, [r10 - 0x68]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x28
jmp 0x14010e6fc
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010e4ef
add r10b, 0x7c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x64
jmp 0x14010e6c0
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010e514
lea edx, [r10 + 0x6e]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 2
add dl, cl
jmp 0x14010e69e
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010e24b
lea edx, [r10 + 0x44]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_select
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x14010e639
mov byte [rbp + rbx + 0x90], dl
inc rbx
jmp 0x14010de42
lea edx, [r10 + 0x28]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x18
add dl, cl
add dl, r11b
jmp 0x14010e69e
lea edx, [r10 + 0x1a]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
jmp 0x14010e6fc
add r10b, 0x6f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 9
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010de42
lea ecx, [r10 - 0x75]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x33
jmp 0x14010e6fe
sub r10b, 0x67
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x2f
jmp 0x14010e6c3
sub r10b, 0x3d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x55
dec rbx
inc rbx
jmp 0x14010de42
lea ecx, [r10 - 0x21]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x19
jmp 0x14010e639
movzx r10d, bl
lea ecx, [r10 - 5]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x23
sub r10b, 0x51
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
add r11b, 0x37
add r11b, r10b
mov byte [rbp + rbx + 0x90], r11b
inc r9
dec rbx
inc rbx
jmp 0x14010de42
lea ecx, [rbx + 0x17]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
add dl, 0x5f
dec rbx
inc rbx
jmp 0x14010de42
movzx r10d, bl
lea ecx, [r10 + 0x25]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 3
sub r10b, 0x5f
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x67
add r11b, dl
add r11b, r10b
mov byte [rbp + rbx + 0x90], r11b
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010de42
movabs rcx, 0x600340f3da2f8a4f
add rcx, rbx
and dil, cl
add dil, dil
movzx edx, r11b
sub dl, dil
sub dl, 0x29
movzx r10d, bl
add dl, cl
sub r10b, 0x6d
movzx eax, r11b
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 5
add cl, r10b
movzx eax, cl
mov byte [rbp + rbx + 0x90], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx + 0xc]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
sub r11b, 0x54
add r11b, cl
mov byte [rbp + rbx + 0x90], r11b
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010de42
lea rax, [rbx + r13]
and dil, al
add dil, dil
sub r11b, dil
lea edx, [rax + r11]
add dl, 0x13
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010de42
sub r10b, 0x23
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0xb
jmp 0x14010de40
sub r10b, 0x15
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x6d
jmp 0x14010de30
lea rdx, [rbp + 0x146fddc]
jmp 0x14010e7e8
lea rdx, [rbp + 0xbb7f55]
jmp 0x14010e7e8
lea rdx, [rbp + 0x90]
mov r9, rsi
lea r8, str.NtShutdownSystem
mov rcx, qword [0x14022e168]
call fcn.140117280
movzx esi, word [0x14022e488]
mov dword [rbp + 0x18], 0xdb24d02d
mov dword [rbp + 0x1c], 0x2fe3e0ed
mov dword [rbp + 0x20], 0x26e6e7df
mov dword [rbp + 0x24], 0xe4d02519
mov dword [rbp + 0x28], 0x23e4d5f4
mov dword [rbp + 0x2c], 0xbfb621d1
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
mov word [rbp + 0x48], ax
mov byte [rbp + 0x4a], al
movabs r14, 0xb87a5b638ea18a75
movabs r13, 0x296f122aabe49f5f
movzx ebx, byte [rbp + 0x148]
nop
mov r8, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor edi, edi
cmp rdi, 0x33
jae 0x14010f3a7
movzx r11d, byte [rbp + rdi + 0x18]
mov edx, r11d
cmp r8, rdi
ja 0x14010f39e
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010e8b0
lea rcx, [rdi + r14]
mov rax, rdx
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rdx
add rbx, rcx
sub bl, 0x33
jmp 0x14010e8e9
je 0x14010f338
inc rax
cmp r8, rax
je 0x14010f2b2
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010f283
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010f249
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010f22a
movzx r10d, dil
nop dword [rax]
cmp r9, rdi
ja 0x14010f395
lea rax, [r9 + 8]
cmp r8, rax
jae 0x14010e919
lea ecx, [r10 - 0x67]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x2f
jmp 0x14010e960
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x14010f1eb
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010f1c9
lea rax, [rcx + 1]
cmp r8, rax
je 0x14010f1af
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010f195
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010f179
nop word [rax + rax]
lea rax, [r8 + r9]
cmp rax, rdi
jbe 0x14010eea2
nop dword [rax]
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010ee84
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010ee5f
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010ee39
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14010ee1f
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14010edff
lea rax, [r9 + 8]
cmp r8, rax
je 0x14010eddf
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010edc5
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14010eda5
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x14010ed7b
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x14010e970
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x10]
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14010f379
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14010f35d
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x14010eb58
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x14010eb3e
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14010eb24
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14010ed34
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14010ecf1
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14010ecb6
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14010ec93
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14010e970
lea r8, [r9 + 0x2a]
lea r9, [r8 + 0x41]
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x14010ec69
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14010ec49
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x14010ec2f
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010ec13
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14010ebf3
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14010ebd9
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x14010ebb3
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14010eb8e
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x14010eb74
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14010e970
lea r8, [r9 + 4]
lea r9, [r8 + 2]
jmp 0x14010e970
lea ecx, [r10 - 0x79]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x4f
jmp 0x14010e960
lea ecx, [r10 - 0x63]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x4b
jmp 0x14010e8f0
sub r10b, 0x4d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x1b
jmp 0x14010e885
lea ecx, [r10 - 0x38]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x78
jmp 0x14010f200
sub r10b, 0x22
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x12
inc r9
dec rdi
inc rdi
jmp 0x14010e872
sub r10b, 0xc
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010e872
lea ecx, [r10 + 0xa]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x46
jmp 0x14010f262
add r10b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f297
add r10b, 0x36
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x7a
jmp 0x14010f29a
lea ecx, [r10 + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x14
jmp 0x14010f2d2
add r10b, 0x62
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f2fa
add r10b, 0x78
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x48
movzx eax, byte [rbp + rdi + 0x18]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e872
add r10b, 0x2f
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x49
mov byte [rbp + rdi + 0x18], bl
inc rdi
jmp 0x14010e872
lea ecx, [r10 + 0x45]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x1d
cmp r9, 0x40
jb 0x14010ecaa
lea ecx, [r10 - 0x62]
movzx eax, cl
and al, r11b
mov edx, reloc.WS2_32.dll_socket
sub dl, al
add dl, dl
add dl, cl
add dl, r11b
lea ebx, [rdx + rdx]
jmp 0x14010f200
lea ecx, [r10 + 0x5b]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x7d
cmp r8, 0xa
jae 0x14010f146
lea rax, [r9 + 8]
cmp r8, rax
jbe 0x14010f05e
lea ecx, [r10 + 0x7a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x56
jmp 0x14010eccb
lea ecx, [r10 + 0x71]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x17
lea rax, [r8 + r9]
cmp rax, 5
je 0x14010f163
lea rax, [r9 + 3]
cmp r8, rax
jbe 0x14010ef70
lea ecx, [r10 - 0x1f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x27
jmp 0x14010ed06
sub r10b, 0x6a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x1a
movzx eax, byte [rbp + rdi + 0x18]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e872
sub r10b, 0x54
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f2fa
lea ecx, [r10 - 0x3e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x4e
jmp 0x14010f2d2
sub r10b, 0x28
movzx eax, r10b
and al, r11b
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f29a
sub r10b, 0x12
movzx eax, r10b
and al, r11b
mov ecx, 0x3f
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f297
lea ecx, [r10 + 4]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x1c
jmp 0x14010f262
add r10b, 0x1a
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010e872
add r10b, 0x30
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x50
inc r9
dec rdi
inc rdi
jmp 0x14010e872
lea edx, [r10 + 0x46]
movzx eax, dl
and al, r11b
mov ecx, listen
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010f200
lea rax, [r9 + 0x40]
cmp r8, rax
jae 0x14010eec5
lea ecx, [r10 + 0x75]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x33
jmp 0x14010ed49
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010eef8
add r10b, 0x32
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x5e
movzx eax, byte [rbp + rdi + 0x18]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e872
inc rax
cmp r8, rax
jne 0x14010ef20
add r10b, 0x1c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f2fa
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010ef43
lea ecx, [r10 + 6]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x2a
jmp 0x14010f2d2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010ed49
sub r10b, 0x10
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f29a
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010ef93
lea ecx, [r10 - 0x35]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x73
jmp 0x14010f200
cmp r8, rax
jne 0x14010efba
sub r10b, 0x61
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x59
dec rdi
inc rdi
jmp 0x14010e872
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010efdf
add r10b, 0x73
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x25
jmp 0x14010f297
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010f004
add r10b, 0x5d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x75
jmp 0x14010f29a
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010f027
lea ecx, [r10 + 0x47]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0xf
jmp 0x14010f2d2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010ed06
add r10b, 0x1b
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x43
movzx eax, byte [rbp + rdi + 0x18]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e872
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010f095
add r10b, 0x64
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_35
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rbp + rdi + 0x18]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e872
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010f0bc
lea edx, [r10 + 0x38]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010f2d2
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010f0e5
add r10b, 0x22
movzx eax, r10b
and al, r11b
mov ecx, 9
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f29a
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010f110
sub r10b, 0x20
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x20
dec rdi
inc rdi
jmp 0x14010e872
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010eccb
sub r10b, 0x36
movzx eax, r10b
and al, r11b
mov ecx, 0x3d
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x14010e872
lea edx, [r10 - 0x78]
movzx eax, dl
and al, r11b
movzx ecx, r11b
sub cl, al
add cl, 0x24
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x14010f262
lea ecx, [r10 + 0x72]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [rcx - 0x1e]
jmp 0x14010f2d2
sub r10b, 0x17
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x5f
jmp 0x14010f2fa
lea ecx, [r10 - 1]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 7
jmp 0x14010f2d2
lea ecx, [r10 + 0x41]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x39
jmp 0x14010f262
add r10b, 0x57
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x61
dec rdi
inc rdi
jmp 0x14010e872
lea ecx, [r10 - 0x7d]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x6b
add r10b, 0x13
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
add r10b, 0x7b
add r10b, r11b
mov byte [rbp + rdi + 0x18], r10b
inc r9
dec rdi
inc rdi
jmp 0x14010e872
lea ecx, [rdi - 0x25]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 3
dec rdi
inc rdi
jmp 0x14010e872
movzx r10d, dil
lea ecx, [r10 - 0xf]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x69
sub r10b, 3
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
add r10b, 0x15
add r10b, r11b
add r10b, bl
mov byte [rbp + rdi + 0x18], r10b
jmp 0x14010f297
lea ecx, [rdi + 7]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x31
add r8, r9
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x14010e872
movabs rcx, 0xb587fb8e66ac933
add rcx, rdi
and dl, cl
add dl, dl
movzx ebx, r11b
sub bl, dl
sub bl, 0x65
add bl, cl
movzx r10d, dil
sub r10b, 0x19
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x51
add r10b, r11b
movzx eax, r10b
mov byte [rbp + rdi + 0x18], al
inc r9
add rax, r9
sub rdi, rax
lea edx, [rdi + 0x5c]
movzx eax, dl
and al, r11b
mov ecx, 0x3e
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
mov byte [rbp + rdi + 0x18], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi + 0x18]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e872
lea rax, [rdi + r13]
and dl, al
add dl, dl
sub r11b, dl
lea ebx, [rax + r11]
add bl, 0x67
movzx eax, byte [rbp + rdi + 0x18]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010e872
sub r10b, 0x37
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x7f
jmp 0x14010e870
sub r10b, 0x21
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x19
jmp 0x14010e860
lea rdx, [rbp + 0x14906b4]
jmp 0x14010f3ab
lea rdx, [rbp + 0xaa9129]
jmp 0x14010f3ab
lea rdx, [rbp + 0x18]
movzx r9d, si
lea r8, str.NtShutdownSystem
mov rcx, qword [0x14022e168]
call fcn.14011b480
xor eax, eax
mov byte [rbp + 0x148], al
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x108]
call fcn.14011f680
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140045cb0
lea rcx, [rbp + 0x170]
call fcn.140044df0
mov rax, qword [rbp + 0x1a8]
mov edx, dword [rax + 0x50]
xor r8d, r8d
lea rcx, [rbp + 0x149]
call fcn.140050f80
mov rsi, rax
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140045b30
mov rcx, qword [rbp + 0x1a8]
mov r9d, dword [rcx + 0x50]
mov r8, qword [rbp + 0x188]
mov rdx, rsi
lea rcx, [rbp + 0x149]
call fcn.140052840
mov rcx, qword [rbp + 0x1a8]
mov edx, dword [rcx + 0x28]
add rdx, rsi
mov r9d, dword [rcx + 0x50]
mov r8, rsi
lea rcx, [rbp + 0x149]
call fcn.14011f6a0
mov r14d, eax
mov dword [rsp + 0x70], 0xc9dbdbc8
mov dword [rsp + 0x74], 0xd296c7d5
mov dword [rsp + 0x78], 0xc2ccc1c6
mov dword [rsp + 0x7c], 0xcbdbcf98
mov dword [rbp - 0x80], 0xe6f0cbc9
mov dword [rbp - 0x7c], 0xb7a6bfe4
mov dword [rbp - 0x78], 0x45faa0fc
mov byte [rbp - 0x74], 0x48
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x73], xmm0
mov dword [rbp - 0x63], eax
mov word [rbp - 0x5f], ax
movabs r13, 0xc07b74e02fd4d60e
movzx edx, byte [rbp + 0x148]
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x14010ff64
movzx r10d, byte [rsp + rbx + 0x70]
mov edi, r10d
cmp r8, rbx
ja 0x14010ff5b
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010f520
lea rcx, [rbx + r13]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
sub dl, 0x62
jmp 0x14010f54c
je 0x14010fee6
inc rax
cmp r8, rax
je 0x14010feb1
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010fe8f
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010fe4a
movzx r11d, bl
cmp r9, rbx
ja 0x14010ff52
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010f579
lea ecx, [r11 + 0x26]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0xa
jmp 0x14010f5b0
je 0x14010fe32
inc rax
cmp r8, rax
je 0x14010fdf4
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010fd79
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010fd4b
nop word [rax + rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14010fafb
nop dword [rax]
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x14010fae9
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14010fac0
lea rax, [r9 + 9]
cmp r8, rax
je 0x14010fa9a
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010fa88
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14010fa69
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14010fa49
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010fa2e
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14010fa10
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14010f9e6
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14010f5c0
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x41]
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14010ff36
lea rax, [r9 + 6]
cmp r8, rax
jb 0x14010ff16
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14010f7ac
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x14010f790
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14010f774
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14010f999
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x14010f940
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14010f902
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14010f8df
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14010f5c0
lea r8, [r9 + 8]
lea r9, [r8 + 0xa]
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x14010f8b5
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x14010f895
lea rax, [r9 + 5]
cmp r8, rax
ja 0x14010f87a
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14010f85e
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14010f83f
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x14010f82d
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x14010f807
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010f7de
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x14010f7cc
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14010f5c0
lea r8, [r9 + 0xa]
lea r9, [r8 + 0x1000]
jmp 0x14010f5c0
lea edx, [r11 - 0x66]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x36
add dl, cl
jmp 0x14010f5b0
lea edx, [r11 + 0x7e]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x72
add dl, cl
jmp 0x14010f550
add r11b, 0x62
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010f4f5
lea edx, [r11 + 0x30]
movzx eax, r10b
and al, dl
sub dl, 0x50
jmp 0x14010fe5b
add r11b, 0x14
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_60
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x14010f4e2
sub r11b, 8
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_30
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010f4e2
lea edx, [r11 - 0x24]
movzx eax, r10b
and al, dl
sub dl, 4
jmp 0x14010fe01
sub r11b, 0x40
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x40
add r8, r9
jmp 0x14010fece
sub r11b, 0x5c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x7c
jmp 0x14010fece
lea edx, [r11 - 0x78]
movzx eax, r10b
and al, dl
mov ecx, 0x24
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010fd8e
add r11b, 0x6c
movzx eax, r10b
and al, r11b
mov ecx, 6
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010fdba
add r11b, 0x50
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x30
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f4e2
add r11b, 0xa
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x46
mov byte [rsp + rbx + 0x70], dl
inc rbx
jmp 0x14010f4e2
lea edx, [r11 - 0x12]
movzx eax, r10b
and al, dl
mov ecx, 0x3f
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
cmp r9, 3
jb 0x14010f8f6
lea edx, [r11 - 0x6c]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, dl
lea edx, [rcx*2 - 0x18]
jmp 0x14010fe65
lea edx, [r11 - 0x2e]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
cmp r8, 1
jae 0x14010fd1c
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010fc7c
sub r11b, 0x68
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x28
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f4e2
lea edx, [r11 - 0x4a]
movzx eax, r10b
and al, dl
mov ecx, 3
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
lea rax, [r9 + r8]
cmp rax, 0x64
je 0x14010fd36
lea rax, [r9 + 1]
cmp r8, rax
jbe 0x14010fbf3
lea edx, [r11 + 0x56]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x5a
jmp 0x14010f956
sub r11b, 0x1c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x3c
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f4e2
sub r11b, 0x38
movzx eax, r10b
and al, r11b
add al, al
movzx edx, r10b
sub dl, al
sub dl, 0x78
add dl, r11b
jmp 0x14010fdba
lea edx, [r11 - 0x54]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010fd8e
sub r11b, 0x70
movzx eax, r10b
and al, r11b
mov ecx, 8
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010fece
add r11b, 0x74
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x2c
add r8, r9
jmp 0x14010fece
lea edx, [r11 + 0x58]
movzx eax, r10b
and al, dl
sub dl, 0x68
jmp 0x14010fe01
add r11b, 0x3c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010f4e2
add r11b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x14010f4e2
lea edx, [r11 + 4]
movzx eax, r10b
and al, dl
sub dl, 0x1c
jmp 0x14010fe5b
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010fb1e
lea edx, [r11 + 0xe]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x62
jmp 0x14010f9af
jne 0x14010fb4a
add r11b, 0x4c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x14
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f4e2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010fb6e
lea edx, [r11 - 0x7c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010fd8e
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010fb92
lea edx, [r11 - 0x28]
movzx eax, r10b
and al, dl
mov ecx, recv
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010fe09
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010fbc1
sub r11b, 0xc
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010f4e2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010f9b1
add r11b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x70
inc r9
dec rbx
inc rbx
jmp 0x14010f4e2
jne 0x14010fc07
lea edx, [r11 + 0x72]
movzx eax, r10b
and al, dl
sub dl, 0x1e
jmp 0x14010fe5b
inc rax
cmp r8, rax
jne 0x14010fc21
lea edx, [r11 - 0x3a]
movzx eax, r10b
and al, dl
sub dl, 0x6a
jmp 0x14010fe01
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010fc45
lea edx, [r11 + 0x1a]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010fd8e
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010f958
add r11b, 0x52
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x3e
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f4e2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010fca0
lea edx, [r11 - 0x30]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010fd8e
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010fcc5
sub r11b, 0x14
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x74
jmp 0x14010fece
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010fce9
lea edx, [r11 + 0x24]
movzx eax, r10b
and al, dl
mov ecx, 2
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010fe09
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010f91a
add r11b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010f4e2
lea edx, [r11 - 0x50]
movzx eax, r10b
and al, dl
movzx ecx, r10b
sub cl, al
add cl, 0x18
add cl, cl
jmp 0x14010fe09
lea edx, [r11 - 0x34]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
add cl, cl
jmp 0x14010fd8e
add r11b, 0x22
movzx eax, r10b
and al, r11b
mov ecx, 9
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f4e2
lea edx, [r11 - 0x16]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x66
add dl, cl
sub r11b, 0x26
movzx eax, r11b
and al, r10b
mov ecx, 5
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
movzx eax, cl
mov byte [rsp + rbx + 0x70], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx - 0x18]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x58
add cl, r10b
mov byte [rsp + rbx + 0x70], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f4e2
lea edx, [r11 - 0x6a]
movzx eax, r10b
and al, dl
sub dl, 0x1a
add al, al
movzx ecx, r10b
sub cl, al
add dl, cl
sub r11b, 0x42
movzx eax, r10b
and al, r11b
add al, al
movzx ecx, dl
sub cl, al
sub cl, 0x32
add cl, r10b
add cl, r11b
mov byte [rsp + rbx + 0x70], cl
add r8, r9
jmp 0x14010fece
lea edx, [r11 + 0x42]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_26
sub cl, al
add cl, cl
add cl, r10b
jmp 0x14010fe63
movzx r11d, bl
lea edx, [r11 + 0xa]
movzx eax, r10b
and al, dl
sub dl, 0x46
add al, al
movzx ecx, r10b
sub cl, al
add dl, cl
sub r11b, 0x5e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x6e
add r10b, r11b
mov byte [rsp + rbx + 0x70], r10b
inc r9
dec rbx
inc rbx
jmp 0x14010f4e2
lea edx, [rbx - 0x2e]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
add cl, cl
add cl, r10b
add dl, cl
dec rbx
inc rbx
jmp 0x14010f4e2
movabs rax, 0xc4571be1ae7b867e
add rax, rbx
and dil, al
add dil, dil
sub al, dil
lea edx, [r10 + rax]
sub dl, 0x72
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010f4e2
movabs rax, 0x41725ea08f7e822a
add rax, rbx
and dil, al
add dil, dil
sub al, dil
lea edx, [r10 + rax]
sub dl, 0x26
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f4e2
add r11b, 0x46
movzx eax, r10b
and al, r11b
mov ecx, listen
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010f4e0
add r11b, 0x2a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x26
jmp 0x14010f4d0
lea rdx, [rbp + 0x17fd0d8]
jmp 0x14010ff69
lea rdx, [rbp + 0x154a6e6]
jmp 0x14010ff69
lea rdx, [rsp + 0x70]
mov r8d, r14d
mov rcx, qword [0x14022e168]
call fcn.14011f760
mov rax, qword [rbp + 0x1a8]
mov r8d, dword [rax + 0x54]
mov rdx, rsi
lea rcx, [rbp + 0x149]
call fcn.140054090
call fcn.14010b670
test al, al
jne 0x140110b6d
mov dword [rsp + 0x20], 0xd33275d
mov dword [rsp + 0x24], 0x1bc81216
mov dword [rsp + 0x28], 0x1167cd1f
mov dword [rsp + 0x2c], 0x307101e
mov dword [rsp + 0x30], 0x41201c6
mov dword [rsp + 0x34], 0xcd0e0270
mov dword [rsp + 0x38], 0x14dccfcc
mov dword [rsp + 0x3c], 0xfd00d0e
mov dword [rsp + 0x40], 0x77100711
mov dword [rsp + 0x44], 0x6aa87c71
mov dword [rsp + 0x48], 0x78797c72
mov dword [rsp + 0x4c], 0x879e4066
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x60], ax
mov byte [rsp + 0x62], al
movabs rsi, 0xf8ce6a767ca8039d
movabs r15, 0xdc0814506f481211
movabs r14, 0xea6b3f6375f80ad7
movzx ebx, byte [rbp + 0x148]
nop word [rax + rax]
mov r8, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor edi, edi
cmp rdi, 0x43
jae 0x140110b63
movzx r11d, byte [rsp + rdi + 0x20]
mov edx, r11d
cmp r8, rdi
ja 0x140110b57
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140110090
lea rcx, [rdi + rsi]
mov rax, rdx
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rdx
add rbx, rcx
sub bl, 0x4b
jmp 0x1401100c9
je 0x140110aee
inc rax
cmp r8, rax
je 0x140110a9d
lea rax, [r9 + 4]
cmp r8, rax
je 0x140110a6e
lea rax, [r9 + 5]
cmp r8, rax
je 0x140110a34
lea rax, [r9 + 8]
cmp r8, rax
je 0x1401109f1
movzx r10d, dil
nop dword [rax]
cmp r9, rdi
ja 0x140110b4b
lea rax, [r9 + 0x7a]
cmp r8, rax
jae 0x1401100f9
lea ecx, [r10 - 0x1f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x27
jmp 0x140110150
lea rax, [r9 + 1]
cmp r8, rax
je 0x1401109da
inc rax
cmp r8, rax
je 0x1401109b5
lea rax, [r9 + 3]
cmp r8, rax
je 0x14011099b
lea rax, [r9 + 5]
cmp r8, rax
je 0x14011097f
lea rax, [r9 + 7]
cmp r8, rax
je 0x14011093c
lea rax, [r9 + 2]
cmp r8, rax
je 0x140110912
nop word [rax + rax]
lea rax, [r8 + r9]
cmp rax, rdi
jbe 0x140110655
nop dword [rax]
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x140110639
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x140110610
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1401105ee
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x1401105d0
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401105b0
lea rax, [r9 + 6]
cmp r8, rax
je 0x140110594
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140110576
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x140110558
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14011052a
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x140110160
lea r8, [r9 + 8]
lea r9, [r8 + 0x61]
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x140110b2f
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x140110b13
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x140110327
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14011030d
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x1401102f3
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1401104de
lea rax, [r9 + 3]
cmp r8, rax
jb 0x14011046c
lea r8, [r9 + 0x200]
lea r9, [r8 + 6]
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x14011043e
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x140110420
lea rax, [r9 + 1]
cmp r8, rax
ja 0x140110402
lea rax, [r9 + 4]
cmp r8, rax
ja 0x1401103e6
lea rax, [r9 + 8]
cmp r8, rax
ja 0x1401103c6
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x1401103aa
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x140110388
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14011035f
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x140110343
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x140110160
lea r8, [r9 + 0x20]
lea r9, [r8 + 0x2a]
jmp 0x140110160
lea ecx, [r10 + 0x3f]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x47
jmp 0x140110150
lea ecx, [r10 + 5]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x23
jmp 0x1401100d0
sub r10b, 0x35
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x73
jmp 0x140110065
lea edx, [r10 + 8]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x38
add bl, dl
jmp 0x140110a0a
sub r10b, 0x32
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
inc r9
dec rdi
inc rdi
jmp 0x140110052
sub r10b, 0x6c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0xc
dec rdi
inc rdi
jmp 0x140110052
lea edx, [r10 + 0x5a]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x76
add bl, dl
jmp 0x140110a4d
add r10b, 0x20
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x140110a82
sub r10b, 0x1a
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x4a
jmp 0x140110a85
lea edx, [r10 - 0x54]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x140110951
add r10b, 0x72
movzx eax, r11b
and al, r10b
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x1e
add bl, r10b
jmp 0x140110ab0
add r10b, 0x38
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110052
lea edx, [r10 - 0x4d]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
add bl, 0x1b
add bl, dl
cmp r8, 0x400
jae 0x1401108d7
lea rax, [r9 + 9]
cmp r8, rax
jbe 0x1401107f2
lea edx, [r10 + 0x4a]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 6
add bl, dl
cmp r9, 0x40
jb 0x1401108cb
lea edx, [r10 - 0x72]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
lea ebx, [rcx + rcx]
jmp 0x140110a0a
lea edx, [r10 + 0x79]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x4f
add bl, dl
lea rax, [r8 + r9]
cmp rax, 0xa
je 0x1401108f6
lea rax, [r9 + 0x41]
cmp r8, rax
jbe 0x140110779
lea edx, [r10 + 0x69]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
add bl, 0x21
jmp 0x140110481
add r10b, 0x46
movzx eax, r11b
and al, r10b
mov ecx, listen
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110052
add r10b, 0xc
movzx eax, r11b
and al, r10b
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x54
add bl, r10b
jmp 0x140110ab0
lea edx, [r10 - 0x2e]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x140110951
sub r10b, 0x68
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x28
jmp 0x140110a85
add r10b, 0x5e
movzx eax, r11b
and al, r10b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x140110a82
lea edx, [r10 + 0x24]
movzx eax, r11b
and al, dl
mov ecx, 2
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x140110a4d
sub r10b, 0x16
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x66
dec rdi
inc rdi
jmp 0x140110052
sub r10b, 0x50
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
inc r9
dec rdi
inc rdi
jmp 0x140110052
lea edx, [r10 + 0x76]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x3a
add bl, dl
jmp 0x140110a0a
lea rax, [r9 + 0x3e8]
cmp r8, rax
jae 0x14011067b
lea edx, [r10 - 0x63]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x4b
jmp 0x1401104f3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401106ae
sub r10b, 0x3e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x4e
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110052
inc rax
cmp r8, rax
jne 0x1401106d2
lea edx, [r10 + 0x36]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x7a
add bl, dl
jmp 0x140110951
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401106fb
sub r10b, 0x56
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x140110a82
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140110720
lea edx, [r10 - 0x1c]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x3c
add bl, dl
jmp 0x140110a4d
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14011074e
add r10b, 0x58
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x68
inc r9
dec rdi
inc rdi
jmp 0x140110052
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1401104f5
lea edx, [r10 - 0x6e]
movzx eax, r11b
and al, dl
mov ecx, 1
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x140110a0a
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14011079e
lea edx, [r10 - 0x5d]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x75
add bl, dl
jmp 0x140110a0a
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401107c9
add r10b, 0x17
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
add bl, 0x5f
dec rdi
inc rdi
jmp 0x140110052
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140110483
sub r10b, 0x75
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
add bl, 0x33
jmp 0x140110a82
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x140110829
sub r10b, 0x7c
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110052
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140110850
lea edx, [r10 - 8]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x140110951
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140110877
lea edx, [r10 - 0x5a]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x140110a4d
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401108a2
sub r10b, 0x20
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x20
dec rdi
inc rdi
jmp 0x140110052
lea rax, [r9 + 8]
cmp r8, rax
jne 0x1401104b4
lea edx, [r10 + 0x54]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x4c
add bl, dl
jmp 0x140110a0a
mov byte [rsp + rdi + 0x20], bl
inc rdi
jmp 0x140110052
lea edx, [r10 - 0x38]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x78
add bl, dl
add bl, r11b
jmp 0x140110a4d
lea edx, [r10 + 2]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, r11b
sub bl, 0xe
add bl, dl
jmp 0x140110951
sub r10b, 0x15
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x6d
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110052
lea ecx, [r10 + 0x77]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x41
sub r10b, 0x61
movzx eax, r11b
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x59
add cl, r10b
movzx eax, cl
mov byte [rsp + rdi + 0x20], al
inc r9
add rax, r9
sub rdi, rax
jmp 0x140110ab0
add r10b, 0x3d
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x55
jmp 0x140110a85
lea ecx, [r10 - 0x37]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x7f
jmp 0x140110a4d
add r10b, 0x55
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x53
inc r9
dec rdi
inc rdi
jmp 0x140110052
lea ecx, [r10 + 0x1b]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x43
jmp 0x140110a0a
movzx r10d, dil
lea ecx, [r10 - 0x59]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x6f
add r10b, 0x2b
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x2d
add r11b, r10b
mov byte [rsp + rdi + 0x20], r11b
inc r9
dec rdi
inc rdi
jmp 0x140110052
movzx r10d, dil
lea ecx, [r10 - 7]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
add bl, 0x31
add r10b, 0x65
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
add r11b, 0x3d
add r11b, bl
add r11b, r10b
mov byte [rsp + rdi + 0x20], r11b
jmp 0x140110a82
lea ecx, [rdi - 0x41]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x39
add r8, r9
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x140110052
lea rcx, [rdi + r15]
and dl, cl
add dl, dl
movzx ebx, r11b
sub bl, dl
sub bl, 0x77
add bl, cl
lea edx, [rdi + 0x3c]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
mov byte [rsp + rdi + 0x20], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110052
lea rax, [rdi + r14]
and dl, al
add dl, dl
sub r11b, dl
lea ebx, [rax + r11]
add bl, 0x1f
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110052
sub r10b, 0x6f
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
add bl, 9
jmp 0x140110050
add r10b, 0x57
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x61
jmp 0x140110040
lea rdx, [rbp + 0x1626c9c]
jmp 0x1401116ba
lea rdx, [rbp + 0x8a7039]
jmp 0x1401116ba
lea rdx, [rsp + 0x20]
jmp 0x1401116ba
mov rcx, r15
call fcn.14010c470
test al, al
jne 0x14011171e
mov dword [rbp + 0x50], 0xdfdbcc26
mov dword [rbp + 0x54], 0xc316d5d5
mov dword [rbp + 0x58], 0xd2d015c7
mov dword [rbp + 0x5c], 0xdb1eddca
mov dword [rbp + 0x60], 0xe6f8d4ca
mov dword [rbp + 0x64], 0x474820f6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], rax
mov word [rbp + 0x80], ax
mov byte [rbp + 0x82], al
movabs rsi, 0x40e377647ea866ce
movabs r15, 0x447154f6794a0206
movabs r14, 0xc2aa662d7bf9346a
movzx edx, byte [rbp + 0x148]
nop word [rax + rax]
mov r8, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x1401116b6
movzx r11d, byte [rbp + rbx + 0x50]
mov edi, r11d
cmp r8, rbx
ja 0x1401116ad
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140110c40
lea rcx, [rbx + rsi]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
add dl, 0x5e
jmp 0x140110c6c
je 0x14011163e
inc rax
cmp r8, rax
je 0x1401115ed
lea rax, [r9 + 3]
cmp r8, rax
je 0x14011159a
lea rax, [r9 + 2]
cmp r8, rax
je 0x140111557
movzx r10d, bl
cmp r9, rbx
ja 0x1401116a4
lea rax, [r9 + 0x20]
cmp r8, rax
jae 0x140110c99
lea ecx, [r10 - 0x1a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x4a
jmp 0x140110cd0
lea rax, [r9 + 1]
cmp r8, rax
je 0x14011153d
lea rax, [r9 + 3]
cmp r8, rax
je 0x14011151b
lea rax, [r9 + 2]
cmp r8, rax
je 0x1401114d7
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401114ba
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x140111222
nop dword [rax]
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x140111205
lea rcx, [r9 + 0x64]
cmp r8, rcx
je 0x1401111dc
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x1401111ba
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1401111a0
lea rax, [r9 + 1]
cmp r8, rax
je 0x140111180
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x140111160
lea rax, [r9 + 3]
cmp r8, rax
je 0x140111146
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x14011112a
lea rax, [r9 + 5]
cmp r8, rax
je 0x14011110d
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x140110ce0
mov r8, rcx
lea r9, [rcx + 8]
lea rax, [r9 + 0x5a]
cmp rcx, rax
jb 0x140111684
lea rcx, [r9 + 0x200]
cmp r8, rcx
jb 0x140111668
lea rax, [r9 + 1]
cmp r8, rax
jb 0x140110ed5
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x140110eb8
lea rax, [r9 + 3]
cmp r8, rax
jb 0x140110e9b
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1401110c3
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14011107a
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x140111039
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x140111016
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x140110ce0
mov r8, rcx
lea r9, [rcx + 0x3e8]
lea rax, [r9 + 0x10]
cmp rcx, rax
ja 0x140110fec
lea rax, [r9 + 0x400]
cmp rcx, rax
ja 0x140110fce
lea rax, [r9 + 0x28]
cmp rcx, rax
ja 0x140110fb1
lea rax, [r9 + 0x61]
cmp rcx, rax
ja 0x140110f91
lea rax, [r9 + 0x42]
cmp rcx, rax
ja 0x140110f75
lea rax, [r9 + 0x41]
cmp rcx, rax
ja 0x140110f58
lea rax, [r9 + 0x80]
cmp rcx, rax
ja 0x140110f32
lea rax, [r9 + 0x2a]
cmp rcx, rax
ja 0x140110f0d
lea rax, [r9 + 0x3e8]
cmp rcx, rax
ja 0x140110ef1
lea rax, [r9 + 2]
cmp rcx, rax
ja 0x140110ce0
lea r8, [r9 + 3]
lea r9, [r8 + 0x1000]
jmp 0x140110ce0
lea edx, [r10 - 0x26]
movzx eax, dl
and al, r11b
mov ecx, 5
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140110cd0
lea edx, [r10 + 0x3e]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140110c70
sub r10b, 0x5e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x6e
jmp 0x140110c15
lea edx, [r10 + 0x30]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x50
add dl, cl
jmp 0x140111570
sub r10b, 0x6c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0xc
inc r9
dec rbx
inc rbx
jmp 0x140110c02
sub r10b, 8
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_30
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
dec rbx
inc rbx
jmp 0x140110c02
lea edx, [r10 + 0x5c]
movzx eax, r11b
and al, dl
mov ecx, 0x3e
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x1401115b3
sub r10b, 0x40
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x40
jmp 0x1401115d2
add r10b, 0x24
movzx eax, r11b
and al, r10b
mov ecx, 2
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401115d5
lea edx, [r10 - 0x78]
movzx eax, r11b
and al, dl
mov ecx, 0x24
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x1401114ec
sub r10b, 0x14
movzx eax, r11b
and al, r10b
add al, al
movzx edx, r11b
sub dl, al
sub dl, 0x74
add dl, r10b
jmp 0x140111601
add r10b, 0x50
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x30
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110c02
add r10b, 0x4a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 6
mov byte [rbp + rbx + 0x50], dl
inc rbx
jmp 0x140110c02
lea edx, [r10 - 0x52]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_35
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
cmp r9, 0x3e8
jb 0x14011102d
lea edx, [r10 + 0x14]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, dl
lea edx, [rcx*2 - 0x18]
jmp 0x140111570
lea ecx, [r10 + 0x12]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x7e
cmp r8, 0x80
jae 0x14011148b
lea rax, [r9 + 9]
cmp r8, rax
jbe 0x140111401
lea edx, [r10 - 4]
movzx eax, dl
and al, r11b
mov ecx, recv
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140111051
lea ecx, [r10 + 0x76]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x3a
lea rax, [r9 + r8]
cmp rax, 5
je 0x1401114a7
lea rax, [r9 + 6]
cmp r8, rax
jbe 0x140111333
lea edx, [r10 + 0x16]
movzx eax, dl
and al, r11b
mov ecx, 0x33
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14011108f
add r10b, 0x64
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_35
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
jmp 0x140111652
sub r10b, 0x38
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x78
jmp 0x140111601
lea ecx, [r10 + 0x2c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x34
jmp 0x1401114ec
sub r10b, 0x70
movzx eax, r10b
and al, r11b
mov ecx, 8
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x1401115d5
sub r10b, 0xc
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x1401115d2
lea ecx, [r10 + 0x58]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x68
jmp 0x1401115b3
sub r10b, 0x44
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x24
dec rbx
inc rbx
jmp 0x140110c02
add r10b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x140110c02
lea edx, [r10 - 0x7c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140111570
lea rax, [r9 + 0x61]
cmp r8, rax
jae 0x140111248
lea edx, [r10 - 0x32]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401110d8
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14011126e
sub r10b, 0x34
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
jmp 0x140111652
inc rax
cmp r8, rax
jne 0x140111290
lea ecx, [r10 + 4]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x1c
jmp 0x1401114ec
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401112b5
sub r10b, 0x60
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x60
jmp 0x1401115d5
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401112db
lea edx, [r10 - 0x28]
movzx eax, dl
and al, r11b
mov ecx, recv
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401115b3
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140111309
add r10b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x70
inc r9
dec rbx
inc rbx
jmp 0x140110c02
lea rax, [r9 + 8]
cmp r8, rax
jne 0x1401110d8
lea edx, [r10 - 0x54]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140111570
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111359
lea edx, [r10 - 0x4e]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140111570
inc rax
cmp r8, rax
jne 0x140111386
add r10b, 0x4e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x22
inc r9
dec rbx
inc rbx
jmp 0x140110c02
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401113b1
sub r10b, 0x16
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x66
dec rbx
inc rbx
jmp 0x140110c02
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401113da
add r10b, 0x22
movzx eax, r10b
and al, r11b
mov ecx, 9
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x1401115d2
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14011108f
lea ecx, [r10 + 0x5a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x76
jmp 0x1401114ec
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111434
sub r10b, 0x68
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x28
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110c02
inc rax
cmp r8, rax
jne 0x140111462
add r10b, 0x40
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
dec rbx
inc rbx
jmp 0x140110c02
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140111051
lea edx, [r10 + 0x78]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x48
add dl, cl
jmp 0x140111570
lea edx, [r10 - 0x50]
movzx eax, r11b
and al, dl
movzx ecx, r11b
sub cl, al
add cl, 0x18
add cl, cl
add dl, cl
jmp 0x1401115b3
lea ecx, [r10 + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [rcx - 0x14]
jmp 0x1401114ec
add r10b, 0x62
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
jmp 0x140111652
lea ecx, [r10 + 0x2a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x26
add r10b, 0x1a
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
movzx eax, cl
mov byte [rbp + rbx + 0x50], al
inc r9
add rax, r9
sub rbx, rax
jmp 0x140111601
sub r10b, 0x46
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x16
dec rbx
inc rbx
jmp 0x140110c02
lea edx, [r10 - 0x7e]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140111570
movzx r10d, bl
lea ecx, [r10 + 0x4a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 6
sub r10b, 0x1e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x2e
add r11b, r10b
mov byte [rbp + rbx + 0x50], r11b
inc r9
dec rbx
inc rbx
jmp 0x140110c02
movzx r10d, bl
lea ecx, [r10 + 0x76]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x3a
add r10b, 0x7e
movzx eax, r11b
and al, r10b
add al, al
movzx ecx, dl
sub cl, al
sub cl, 0x72
add cl, r11b
add cl, r10b
mov byte [rbp + rbx + 0x50], cl
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x140110c02
lea rax, [rbx + r15]
and dil, al
add dil, dil
sub al, dil
lea edx, [r11 + rax]
sub dl, 0x2a
lea ecx, [rbx - 0x18]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
sub r11b, 0x58
add r11b, cl
mov byte [rbp + rbx + 0x50], r11b
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110c02
lea rax, [rbx + r14]
and dil, al
mov ecx, reloc.WS2_32.dll_listen
sub cl, dil
lea edx, [rcx + rcx]
add dl, al
add dl, r11b
movzx eax, byte [rbp + rbx + 0x50]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110c02
add r10b, 6
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x2a
jmp 0x140110c00
add r10b, 0x6a
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x140110bf0
lea rdx, [rbp + 0x16512b8]
jmp 0x1401116ba
lea rdx, [rbp + 0x4d7986]
jmp 0x1401116ba
lea rdx, [rbp + 0x50]
mov rcx, qword [0x14022e168]
call fcn.1400651a0
nop
lea rcx, [rbp + 0x188]
call fcn.140045e20
lea rcx, [rbp + 0x170]
call fcn.140045e20
nop
lea rcx, [rbp + 0x150]
call fcn.140045e20
xor al, al
mov rcx, qword [rbp + 0x2f0]
xor rcx, rsp
call fcn.140198890
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0x188]
call fcn.140045e20
lea rcx, [rbp + 0x170]
call fcn.140045e20
nop
lea rcx, [rbp + 0x150]
call fcn.140045e20
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1401117e0
mov dword [rbp + 0x1c0], 0x130
xor edx, edx
mov r8d, Ordinal_301
lea rcx, [rbp + 0x1c4]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x1c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1401117d7
nop dword [rax]
lea rax, [rbp + 0x1ec]
mov r8, r12
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401117b3
inc rax
test ecx, ecx
jne 0x1401117a0
test edx, edx
je 0x1401117cd
lea rdx, [rbp + 0x1c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140111790
jmp 0x1401117d7
mov eax, dword [rbp + 0x1c8]
mov qword [r15 + 0x18], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [r15 + 0x18], 0
je 0x1401116ec
mov rdx, r12
mov rcx, r15
call fcn.140111840
mov qword [r15], rax
mov rdx, r12
mov rcx, r15
call fcn.140111940
mov qword [r15 + 8], rax
cmp qword [r15 + 0x10], 0xffffffffffffffff
je 0x1401116ec
mov al, 1
jmp 0x1401116ee