Function at 0x14010db50
Capabilities:
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x300]
sub rsp, 0x400
mov rax, qword [0x1401dc800]
xor rax, rsp
mov qword [rbp + 0x2f0], rax
mov r15, rdx
mov r14, qword [0x140230208]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.14010cec0
mov rcx, r14
call fcn.14010dae0
test al, al
jne 0x140112de6
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], rax
lea rcx, [rbp + 0x150]
call fcn.14004a570
nop
mov edx, 0x26e0
lea rcx, [rbp + 0x150]
call fcn.140116840
lea r9, [rbp + 0x150]
lea r8, str.NtShutdownSystem
lea rdx, [0x1401baca0]
lea rcx, [rbp + 0xe8]
call fcn.140126370
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
mov qword [rbp + 0x1b0], rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0xf0]
call fcn.1400fcaf0
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140044d70
nop
call fcn.14010c540
test al, al
jne 0x14010e87f
mov dword [rbp - 0x58], 0xd9dbc7d1
mov dword [rbp - 0x54], 0xcb9cdac6
mov dword [rbp - 0x50], 0xc2cc91cf
mov dword [rbp - 0x4c], 0xd394d1d1
mov dword [rbp - 0x48], 0xecfef2c4
mov dword [rbp - 0x44], 0xb1b2b3f8
mov word [rbp - 0x40], 0x5bb0
mov byte [rbp - 0x3e], 0x40
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x3d], xmm0
mov qword [rbp - 0x2d], rax
movabs rsi, 0xd3ea7249091051bb
movabs r12, 0xd9544e95c37aae8f
movabs r14, 0xc6ab51239cc7a5
movabs r15, 0x4e1e0e259ca76a87
movabs r13, 0x9b7570fa15b20d69
movzx r11d, byte [rbp + 0x148]
nop word [rax + rax]
mov r8, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x14010e876
movzx r10d, byte [rbp + rbx - 0x58]
movzx edi, r10b
cmp r8, rbx
ja 0x14010e86a
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010dd32
lea rcx, [rbx + r12]
mov rax, r10
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, r10
add r11, rcx
add r11b, 0x17
jmp 0x14010dd5f
je 0x14010e7f5
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010e7bc
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010e773
lea rax, [r9 + 9]
cmp r8, rax
je 0x14010e727
movzx edi, r10b
cmp r9, rbx
ja 0x14010e85e
lea rax, [r9 + 0x10]
cmp r8, rax
jae 0x14010dd91
lea rdx, [rbx + rsi]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, dil
sub r11b, al
sub r11b, 0x1d
add r11b, dl
jmp 0x14010dde0
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010e706
inc rax
cmp r8, rax
je 0x14010e6dc
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010e6b8
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010e694
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010e610
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010e5de
nop
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x14010e35b
nop dword [rax]
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010e340
lea rcx, [r9 + 0x42]
cmp r8, rcx
je 0x14010e318
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14010e2f3
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010e2d7
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010e2b9
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010e29e
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010e27d
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14010e25e
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010e231
lea rax, [r9 + 9]
cmp r8, rax
je 0x14010ddf0
mov r8, rcx
lea r9, [rcx + 0x1000]
lea rax, [r9 + 1]
cmp rcx, rax
jb 0x14010e843
lea rcx, [r9 + 0x40]
cmp r8, rcx
jb 0x14010e828
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x14010dff2
lea rax, [r9 + 3]
cmp r8, rax
jb 0x14010dfd3
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14010dfb4
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14010e1e2
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14010e196
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14010e157
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x14010e134
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14010ddf0
mov r8, rcx
lea r9, [rcx + 0x400]
lea rax, [r9 + 0x2a]
cmp rcx, rax
ja 0x14010e10b
lea rax, [r9 + 3]
cmp rcx, rax
ja 0x14010e0ed
lea rax, [r9 + 0x64]
cmp rcx, rax
ja 0x14010e0ce
lea rax, [r9 + 2]
cmp rcx, rax
ja 0x14010e0af
lea rax, [r9 + 5]
cmp rcx, rax
ja 0x14010e08d
lea rax, [r9 + 0x200]
cmp rcx, rax
ja 0x14010e072
lea rax, [r9 + 4]
cmp rcx, rax
ja 0x14010e051
lea rax, [r9 + 0x80]
cmp rcx, rax
ja 0x14010e02d
lea rax, [r9 + 0x400]
cmp rcx, rax
ja 0x14010e011
lea rax, [r9 + 6]
cmp rcx, rax
ja 0x14010ddf0
lea r8, [r9 + 0x28]
lea r9, [r8 + 0x3e8]
jmp 0x14010ddf0
lea rdx, [rbx + r14]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, dil
sub r11b, al
add r11b, 0x7d
add r11b, dl
jmp 0x14010dde0
lea rdx, [rbx + r15]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, dil
sub r11b, al
add r11b, 0x4f
add r11b, dl
jmp 0x14010dd63
lea rdx, [rbx + r13]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, dil
sub r11b, al
add r11b, 0x21
add r11b, dl
jmp 0x14010dd06
lea edx, [rbx - 0x28]
movzx eax, r10b
and al, dl
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010e74b
lea ecx, [rbx - 0x46]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x16
inc r9
dec rbx
inc rbx
jmp 0x14010dcf2
lea ecx, [rbx - 0x64]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x44
dec rbx
inc rbx
jmp 0x14010dcf2
lea edx, [rbx + 0x7e]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x72
jmp 0x14010e797
lea edx, [rbx + 0x60]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
add r8, r9
jmp 0x14010e7dc
lea edx, [rbx + 0x42]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_26
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010e7dc
lea edx, [rbx + 0x24]
movzx eax, r10b
and al, dl
mov ecx, 2
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010e62f
lea edx, [rbx + 6]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x2a
add r11b, dl
jmp 0x14010e65a
lea ecx, [rbx - 0x18]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x58
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010dcf2
lea ecx, [rbx + 0x1d]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x35
mov byte [rbp + rbx - 0x58], r11b
inc rbx
jmp 0x14010dcf2
lea edx, [rbx - 1]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 7
add r11b, dl
cmp r9, 0x40
jb 0x14010e14a
lea edx, [rbx - 6]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
lea r11d, [rcx + rcx]
jmp 0x14010e74e
lea edx, [rbx - 0x1f]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x27
add r11b, dl
cmp r8, 0x42
jae 0x14010e5a2
lea rax, [r9 + 0x1000]
cmp r8, rax
jbe 0x14010e4c7
lea edx, [rbx - 0x32]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010e16d
lea edx, [rbx - 0x3d]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x55
add r11b, dl
lea rax, [r8 + r9]
cmp rax, 0x5a
je 0x14010e5bd
lea rax, [r9 + 0x61]
cmp r8, rax
jbe 0x14010e427
lea edx, [rbx + 0x13]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
add r11b, 0x7b
jmp 0x14010e1ac
lea edx, [rbx + 0x62]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010dcf2
lea edx, [rbx + 0x44]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x14010e65a
movzx edi, bl
lea edx, [rdi + 0x26]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0xa
add r11b, dl
jmp 0x14010e632
lea ecx, [rbx + 8]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x38
jmp 0x14010e7dc
lea ecx, [rbx - 0x16]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x66
add r8, r9
jmp 0x14010e7dc
lea edx, [rbx - 0x34]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
jmp 0x14010e797
lea edx, [rbx - 0x52]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_35
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
dec rbx
inc rbx
jmp 0x14010dcf2
lea edx, [rbx - 0x70]
movzx eax, r10b
and al, dl
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc r9
dec rbx
inc rbx
jmp 0x14010dcf2
lea edx, [rbx + 0x72]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x1e
jmp 0x14010e74b
lea rcx, [r9 + 3]
cmp r8, rcx
jae 0x14010e37f
lea rcx, [rbx + r12]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [rdi + rcx]
add r11b, 0x17
jmp 0x14010e1fb
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010e3b0
lea ecx, [rbx + 0x76]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x3a
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010dcf2
inc rax
cmp r8, rax
jne 0x14010e3d2
lea ecx, [rbx - 0x6c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0xc
jmp 0x14010e65a
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010e3f6
lea edx, [rbx + 0xc]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x54
jmp 0x14010e797
cmp r8, rcx
jne 0x14010e1fb
lea edx, [rbx + 0x48]
movzx eax, r10b
and al, dl
mov ecx, 4
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
inc r9
dec rbx
inc rbx
jmp 0x14010dcf2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010e44b
lea edx, [rbx + 0x31]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x57
jmp 0x14010e74b
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010e475
lea ecx, [rbx + 0x6d]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 5
dec rbx
inc rbx
jmp 0x14010dcf2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010e499
lea ecx, [rbx - 0x39]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x71
jmp 0x14010e7dc
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010e1af
movzx edi, bl
lea edx, [rdi - 0x1b]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x43
add r11b, dl
jmp 0x14010e632
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010e4f9
lea ecx, [rbx - 0x14]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x74
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010dcf2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010e523
movzx edi, bl
lea edx, [rdi + 0x28]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x18
add r11b, dl
jmp 0x14010e632
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010e54d
lea ecx, [rbx - 0x60]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x60
dec rbx
inc rbx
jmp 0x14010dcf2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010e57a
lea ecx, [rbx - 0x42]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x32
inc r9
dec rbx
inc rbx
jmp 0x14010dcf2
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14010e170
lea edx, [rbx - 0x24]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 4
jmp 0x14010e74b
lea edx, [rbx + 0x18]
movzx eax, r10b
and al, dl
movzx ecx, r10b
sub cl, al
add cl, 0x2c
lea r11d, [rcx + rcx]
jmp 0x14010e797
movzx edi, bl
lea edx, [rdi + 0x36]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, r10b
sub r11b, 0x7a
add r11b, dl
jmp 0x14010e632
movabs rcx, 0x1bd7f8d0c7b097c9
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x7f
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010dcf2
movabs rcx, 0xb686be79b9c5dd8d
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [rdi + rcx]
add r11b, 0x25
movzx edi, bl
sub dil, 0x3b
movzx eax, dil
and al, r10b
add al, al
sub dil, al
sub dil, 0x63
add dil, r10b
movzx eax, dil
mov byte [rbp + rbx - 0x58], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx + 0x54]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
sub cl, 0x4c
add cl, r10b
mov byte [rbp + rbx - 0x58], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010dcf2
movabs rcx, 0x3de214e32d0806f
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 9
jmp 0x14010e7dc
movabs rcx, 0x9e8ce6f724e5c633
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x65
jmp 0x14010e79a
movabs rcx, 0xebe449cb9df06915
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [rdi + rcx]
add r11b, 0x6d
dec rbx
inc rbx
jmp 0x14010dcf2
movabs rcx, 0x86930f749005aed9
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [rdi + rcx]
add r11b, 0x11
jmp 0x14010e74e
movabs rdx, 0x2141d51d821af49d
add rdx, rbx
movzx eax, dl
and al, r10b
add al, al
movzx r11d, dil
sub r11b, al
sub r11b, 0x4b
movzx r10d, dil
add r11b, dl
lea ecx, [rbx - 0x77]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, 0x41
add cl, r10b
mov byte [rbp + rbx - 0x58], cl
inc r9
dec rbx
inc rbx
jmp 0x14010dcf2
movabs rdx, 0x947fd9aed3add43
add rdx, rbx
movzx eax, dl
and al, r10b
add al, al
movzx r11d, dil
sub r11b, al
add r11b, 0x2b
movzx r10d, dil
add r11b, dl
lea edx, [rbx - 0x59]
movzx eax, dl
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
add cl, 0x6f
add cl, dl
add cl, r10b
mov byte [rbp + rbx - 0x58], cl
add r8, r9
jmp 0x14010e7dc
movabs rcx, 0xa3f6c343df502307
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub dil, al
lea r11d, [rcx + rdi]
sub r11b, 0x31
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010dcf2
movabs rcx, 0x8bfcebc14a700bad
add rcx, rbx
movzx eax, cl
and al, r10b
add al, al
sub dil, al
lea r11d, [rcx + rdi]
add r11b, 0x45
movzx eax, byte [rbp + rbx - 0x58]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010dcf2
add bl, 0x4b
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0xd
jmp 0x14010dcf0
add bl, 0x2d
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
sub r11b, 0x3b
jmp 0x14010dce0
lea rdx, [rbp + 0x16d47bc]
jmp 0x140112d5d
lea rdx, [rbp + 0x127f64b]
jmp 0x140112d5d
lea rdx, [rbp - 0x58]
jmp 0x140112d5d
lea rcx, [rbp + 0x149]
call fcn.14004fad0
mov dword [rbp - 0x20], 0x514b5342
mov dword [rbp - 0x1c], 0x47885f41
mov dword [rbp - 0x18], 0x558c5849
mov dword [rbp - 0x14], 0x97425a59
mov dword [rbp - 0x10], 0x5f53445a
mov dword [rbp - 0xc], 0x8d8a5d51
mov word [rbp - 8], 0xb38c
mov byte [rbp - 6], 0xbc
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 5], xmm0
mov qword [rbp + 0xb], rax
movabs rsi, 0x127fd3546fc22465
movabs r13, 0x817ec74f0e4efec3
movabs r12, 0x377f79fd4f466d2f
movzx r8d, byte [rbp + 0x148]
nop dword [rax]
nop word [rax + rax]
mov rax, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x14010f4c3
movzx r11d, byte [rbp + rbx - 0x20]
mov edi, r11d
cmp rax, rbx
ja 0x14010f4ba
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14010e951
lea rdx, [rbx + rsi]
mov rcx, rdi
and rcx, rdx
imul r8, rcx, 0xfffffffffffffffe
add r8, rdi
add r8, rdx
add r8b, 0x3d
jmp 0x14010e98b
je 0x14010f44f
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14010f3cd
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14010f378
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14010f358
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14010f314
movzx r10d, bl
nop
cmp r9, rbx
ja 0x14010f4b1
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jae 0x14010e9b9
lea edx, [r10 + 0x49]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
inc r8b
jmp 0x14010ea10
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14010f2fc
inc rcx
cmp rax, rcx
je 0x14010f2d6
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14010f2b3
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14010f296
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14010f279
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x14010f24e
nop word [rax + rax]
lea rcx, [rax + r9]
cmp rcx, rbx
jbe 0x14010ef69
nop dword [rax]
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x14010ef4a
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14010ef24
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14010eefd
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14010eee2
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14010eec1
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14010eea4
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x14010ee85
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x14010ee68
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x14010ee39
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x14010ea20
lea rax, [r9 + 0x3e8]
lea r9, [rax + 5]
lea rcx, [r9 + 0x200]
cmp rax, rcx
jb 0x14010f494
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x14010f477
lea rcx, [r9 + 0x64]
cmp rax, rcx
jb 0x14010ebf9
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x14010ebde
lea rcx, [r9 + 0x40]
cmp rax, rcx
jb 0x14010ebc3
lea rcx, [r9 + 0x61]
cmp rax, rcx
jb 0x14010eded
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jb 0x14010eda5
lea rcx, [r9 + 0x400]
cmp rax, rcx
jb 0x14010ed6b
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x14010ed47
lea rax, [r9 + 4]
lea r9, [rax + 0x80]
lea rcx, [r9 + 3]
cmp rax, rcx
ja 0x14010ed18
lea rcx, [r9 + 0x20]
cmp rax, rcx
ja 0x14010ecfb
lea rcx, [r9 + 0x10]
cmp rax, rcx
ja 0x14010ecdf
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x14010ecc2
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x14010eca1
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x14010ec82
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x14010ec5b
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x14010ec35
lea rcx, [r9 + 0x40]
cmp rax, rcx
ja 0x14010ec16
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x14010ea20
lea rax, [r9 + 0x5a]
lea r9, [rax + 0x20]
jmp 0x14010ea20
lea edx, [r10 - 0x29]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x1f
jmp 0x14010ea10
lea edx, [r10 + 0xd]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x5b
jmp 0x14010e990
add r10b, 0x43
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x2b
jmp 0x14010e925
lea r8d, [r10 + 0x48]
movzx ecx, r11b
and cl, r8b
mov edx, 4
sub dl, cl
add dl, dl
add dl, r11b
add r8b, dl
jmp 0x14010f32e
add r10b, 0x7e
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x72
inc r9
dec rbx
inc rbx
jmp 0x14010e912
sub r10b, 0x4c
movzx ecx, r11b
and cl, r10b
mov edx, 0xa
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
dec rbx
inc rbx
jmp 0x14010e912
lea r8d, [r10 - 0x16]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx edx, r11b
sub dl, cl
sub r8b, 0x66
add r8b, dl
jmp 0x14010f392
add r10b, 0x20
movzx ecx, r11b
and cl, r10b
mov edx, reloc.WS2_32.dll_recv
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
jmp 0x14010f3b1
add r10b, 0x56
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x5a
jmp 0x14010f3b4
lea r8d, [r10 - 0x74]
movzx ecx, r11b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_22
sub dl, cl
add dl, dl
add dl, r11b
jmp 0x14010f3e6
sub r10b, 0x3e
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x4e
jmp 0x14010f412
sub r10b, 8
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_30
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010e912
dec r10b
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 7
mov byte [rbp + rbx - 0x20], r8b
inc rbx
jmp 0x14010e912
lea edx, [r10 + 0x35]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x73
cmp r9, 1
jb 0x14010ed5e
lea edx, [r10 + 0x3e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
add dl, r11b
lea r8d, [rdx*2 - 0x64]
jmp 0x14010f32e
lea edx, [r10 + 0x6b]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x13
cmp rax, 6
jae 0x14010f217
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jbe 0x14010f159
lea edx, [r10 + 0x5a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x76
jmp 0x14010ed81
lea edx, [r10 - 0x5f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x67
lea rcx, [rax + r9]
cmp rcx, 0x1000
je 0x14010f235
lea rcx, [r9 + 8]
cmp rax, rcx
jbe 0x14010f05f
lea edx, [r10 + 0x11]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x77
jmp 0x14010edbb
sub r10b, 0x4a
movzx ecx, r10b
and cl, r11b
mov edx, 3
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010e912
sub r10b, 0x14
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x74
jmp 0x14010f412
lea r8d, [r10 + 0x22]
movzx ecx, r8b
and cl, r11b
mov edx, 9
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x14010f3e9
add r10b, 0x58
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x68
jmp 0x14010f3b4
sub r10b, 0x72
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WS2_32.dll_ntohs
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x14010f3b1
lea edx, [r10 - 0x3c]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x5c
jmp 0x14010f392
sub r10b, 6
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WS2_32.dll_setsockopt
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
dec rbx
inc rbx
jmp 0x14010e912
add r10b, 0x30
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x50
inc r9
dec rbx
inc rbx
jmp 0x14010e912
lea r8d, [r10 + 0x66]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_27
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x14010f32e
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jae 0x14010ef8d
lea edx, [r10 + 0x65]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x3d
jmp 0x14010ee03
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010efc5
sub r10b, 0x6e
movzx ecx, r10b
and cl, r11b
mov edx, 1
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010e912
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14010efe9
lea edx, [r10 + 0x26]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0xa
jmp 0x14010f3e9
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14010f00f
sub r10b, 0x46
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x16
jmp 0x14010f3b1
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14010f037
lea r8d, [r10 - 0x7c]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_50
sub dl, cl
add dl, dl
add r8b, dl
add r8b, r11b
jmp 0x14010f392
lea rcx, [r9 + 8]
cmp rax, rcx
jne 0x14010ee03
lea edx, [r10 - 0x1e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x2e
jmp 0x14010f32e
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010f083
lea edx, [r10 - 0x25]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 3
jmp 0x14010f32e
inc rcx
cmp rax, rcx
jne 0x14010f0b1
sub r10b, 0x5b
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x7d
inc r9
dec rbx
inc rbx
jmp 0x14010e912
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14010f0d5
lea edx, [r10 + 0x39]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x71
jmp 0x14010f392
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14010f0fb
add r10b, 3
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x15
jmp 0x14010f3b1
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14010f121
sub r10b, 0x33
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x65
jmp 0x14010f3b4
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x14010edbb
add r10b, 0x2b
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x2d
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010e912
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010f191
add r10b, 0x24
movzx ecx, r10b
and cl, r11b
mov edx, 2
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010e912
inc rcx
cmp rax, rcx
jne 0x14010f1ba
sub r10b, 0x7e
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WS2_32.dll_gethostname
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x14010f3b4
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14010f1e0
add r10b, 0x4c
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x14
jmp 0x14010f3b1
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14010ed81
sub r10b, 0x56
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_45
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
inc r9
dec rbx
inc rbx
jmp 0x14010e912
lea edx, [r10 + 8]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x38
add r8b, r11b
jmp 0x14010f392
lea r8d, [r10 - 0x2e]
movzx ecx, r8b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_33
sub dl, cl
add dl, dl
jmp 0x14010f3e6
add r10b, 0x63
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x4b
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010e912
add r10b, 5
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x23
jmp 0x14010f3b4
add r10b, 0x3b
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x63
jmp 0x14010f3b1
sub r10b, 0x59
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x6f
dec rbx
inc rbx
jmp 0x14010e912
sub r10b, 0x23
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0xb
inc r9
dec rbx
inc rbx
jmp 0x14010e912
lea edx, [r10 + 0x13]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x7b
jmp 0x14010f32e
movzx r10d, bl
lea edx, [r10 + 0x7f]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x79
sub r10b, 0x5d
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
sub r11b, 0x75
add r11b, r10b
mov byte [rbp + rbx - 0x20], r11b
inc r9
dec rbx
inc rbx
jmp 0x14010e912
lea edx, [rbx - 0x15]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x6d
dec rbx
inc rbx
jmp 0x14010e912
movzx r10d, bl
lea edx, [r10 + 0x21]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x19
add r10b, 0x6d
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
add r11b, 5
add r11b, r8b
add r11b, r10b
mov byte [rbp + rbx - 0x20], r11b
add rax, r9
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x14010e912
lea rdx, [rbx + r13]
and dil, dl
add dil, dil
movzx r8d, r11b
sub r8b, dil
sub r8b, 0x55
movzx r10d, bl
add r8b, dl
add r10b, 0x37
movzx ecx, r11b
and cl, r10b
add cl, cl
movzx edx, r11b
sub dl, cl
add dl, 0x7f
add dl, r10b
movzx ecx, dl
mov byte [rbp + rbx - 0x20], cl
inc r9
add rcx, r9
sub rbx, rcx
lea edx, [rbx - 0x64]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
sub r11b, 0x44
add r11b, dl
mov byte [rbp + rbx - 0x20], r11b
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010e912
lea rcx, [rbx + r12]
and dil, cl
add dil, dil
sub r11b, dil
lea r8d, [rcx + r11]
sub r8b, 0x49
movzx ecx, byte [rbp + rbx - 0x20]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010e912
add r10b, 0x79
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x4f
jmp 0x14010e910
sub r10b, 0x51
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r8d, [r10 + r11]
add r8b, 0x37
jmp 0x14010e900
lea rdx, [rbp + 0x17073bc]
jmp 0x14010f4c7
lea rdx, [rbp + 0x1329821]
jmp 0x14010f4c7
lea rdx, [rbp - 0x20]
mov rcx, qword [0x140230168]
call fcn.1400cdc00
mov rsi, qword [0x140230490]
mov dword [rbp + 0x90], 0x2efa2af5
mov dword [rbp + 0x94], 0x4a565545
mov dword [rbp + 0x98], 0x4b52814c
mov dword [rbp + 0x9c], 0x4c475e55
mov dword [rbp + 0xa0], 0x5b8a5d49
mov dword [rbp + 0xa4], 0x975b5a55
mov dword [rbp + 0xa8], 0x8392b785
mov dword [rbp + 0xac], 0xf54e9044
mov byte [rbp + 0xb0], 0xf8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xb1], xmm0
movups xmmword [rbp + 0xc1], xmm0
mov word [rbp + 0xd1], ax
movabs r12, 0xf07e9c20c27b93bc
movabs r13, 0xd17bd4624772bb34
movzx edx, byte [rbp + 0x148]
nop word [rax + rax]
mov r8, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor ebx, ebx
cmp rbx, 0x43
jae 0x14010fffa
movzx r11d, byte [rbp + rbx + 0x90]
mov edi, r11d
nop dword [rax + rax]
cmp r8, rbx
ja 0x14010fff1
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x14010f5cb
lea rcx, [rbx + r12]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
sub dl, 0x24
jmp 0x14010f605
je 0x14010ff82
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010fef3
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010fe99
lea rax, [rcx + 1]
cmp r8, rax
je 0x14010fe7a
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010fe31
movzx r10d, bl
nop dword [rax]
cmp r9, rbx
ja 0x14010ffe8
lea rax, [r9 + 9]
cmp r8, rax
jae 0x14010f63c
lea edx, [r10 + 0x6c]
movzx eax, dl
and al, r11b
mov ecx, 6
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010f680
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010fe1a
inc rax
cmp r8, rax
je 0x14010fdf1
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010fdd5
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010fdb5
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010fd99
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14010fad2
nop dword [rax]
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010fab8
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x14010fa8f
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14010fa6d
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14010fa53
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14010fa33
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14010fa13
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x14010f9f9
lea rcx, [r9 + 0xa]
cmp r8, rcx
je 0x14010f9dd
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010f9ac
mov r8, rcx
lea r9, [rcx + 0x400]
lea rax, [r9 + 4]
cmp rcx, rax
jb 0x14010ffcc
lea rax, [r9 + 0x5a]
cmp rcx, rax
jb 0x14010ffac
lea rax, [r9 + 0x10]
cmp rcx, rax
jb 0x14010f81c
lea rax, [r9 + 5]
cmp rcx, rax
jb 0x14010f802
lea rax, [r9 + 0x2a]
cmp rcx, rax
jb 0x14010f7e5
lea rax, [r9 + 0x1000]
cmp rcx, rax
jb 0x14010f95c
lea rax, [r9 + 0x64]
cmp rcx, rax
jb 0x14010f8ec
lea r8, [r9 + 1]
lea r9, [r8 + 0x20]
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x14010f8bf
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010f89f
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x14010f882
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14010f866
lea rax, [r9 + 1]
cmp r8, rax
ja 0x14010f84a
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010f83c
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x14010f690
lea r8, [r9 + 2]
lea r9, [r8 + 0x28]
jmp 0x14010f690
lea edx, [r10 + 0x14]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010f680
lea ecx, [r10 - 0x64]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x44
jmp 0x14010f610
add r10b, 0x24
movzx eax, r10b
and al, r11b
mov ecx, 2
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010f5a0
lea edx, [r10 + 0x60]
mov ecx, Ordinal_50
jmp 0x14010fe3e
add r10b, 0x80
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x80
jmp 0x14010fed8
add r10b, 8
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x38
jmp 0x14010fedb
lea edx, [r10 - 0x70]
movzx eax, dl
and al, r11b
mov ecx, 8
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010ff17
add r10b, 0x18
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010ff42
sub r10b, 0x60
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x60
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f582
lea ecx, [r10 + 4]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x1c
cmp r8, 6
jae 0x14010fd65
lea rax, [r9 + 0x80]
cmp r8, rax
jbe 0x14010fca9
lea edx, [r10 + 0x38]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
cmp r9, 0x41
jb 0x14010fd56
lea ecx, [r10 - 0x18]
movzx eax, cl
and al, r11b
mov edx, reloc.WS2_32.dll_sendto
sub dl, al
add dl, dl
add dl, cl
add dl, r11b
add dl, dl
jmp 0x14010fe4d
lea edx, [r10 - 0x74]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
lea rax, [r9 + r8]
cmp rax, 5
je 0x14010fd81
lea rax, [r9 + 0x64]
cmp r8, rax
jbe 0x14010fbdc
lea edx, [r10 - 0x34]
movzx eax, dl
and al, r11b
mov ecx, gethostname
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010f901
sub r10b, 0x78
movzx eax, r10b
and al, r11b
mov ecx, 0x24
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f582
add r10b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x70
jmp 0x14010ff42
lea ecx, [r10 - 0x68]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x28
jmp 0x14010ff17
add r10b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010fedb
sub r10b, 0x58
movzx eax, r10b
and al, r11b
mov ecx, 0x34
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010fed8
lea ecx, [r10 + 0x30]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x50
jmp 0x14010feb5
sub r10b, 0x48
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 8
dec rbx
inc rbx
jmp 0x14010f582
add r10b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x14010f582
lea ecx, [r10 - 0x38]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x78
jmp 0x14010fe4d
lea rax, [r9 + 0x5a]
cmp r8, rax
jae 0x14010faf5
lea ecx, [r10 - 0x44]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x24
jmp 0x14010f974
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010fb2f
sub r10b, 0x28
movzx eax, r10b
and al, r11b
mov ecx, recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f582
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010fb54
sub r10b, 0x48
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 8
jmp 0x14010fed8
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010fb83
sub r10b, 0x58
movzx eax, r10b
and al, r11b
mov ecx, 0x34
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010f582
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010fbb5
add r10b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x14010f582
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14010f974
lea ecx, [r10 - 0x68]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x28
jmp 0x14010fe4d
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010fbf3
lea edx, [r10 + 0x44]
mov ecx, reloc.WS2_32.dll_select
jmp 0x14010fe3e
inc rax
cmp r8, rax
jne 0x14010fc20
sub r10b, 0x44
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x24
inc r9
dec rbx
inc rbx
jmp 0x14010f582
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010fc49
add r10b, 0x24
movzx eax, r10b
and al, r11b
mov ecx, 2
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010fed8
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010fc6f
lea edx, [r10 + 0x14]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010ff17
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010f901
add r10b, 4
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x1c
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f582
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010fce3
sub r10b, 0x50
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_26
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f582
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010fd06
lea ecx, [r10 - 0x60]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x60
jmp 0x14010ff17
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010fd2f
sub r10b, 0x70
movzx eax, r10b
and al, r11b
mov ecx, 8
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010fed8
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010f933
lea ecx, [r10 + 0x70]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x10
jmp 0x14010fe4d
mov byte [rbp + rbx + 0x90], dl
inc rbx
jmp 0x14010f582
lea edx, [r10 + 0x60]
movzx eax, dl
and al, r11b
movzx ecx, r11b
sub cl, al
add cl, 0x30
add cl, cl
add dl, cl
jmp 0x14010feb5
lea edx, [r10 - 0x28]
movzx eax, dl
and al, r11b
mov ecx, recv
sub cl, al
add cl, cl
jmp 0x14010ff15
add r10b, 0x2c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x34
jmp 0x14010ff42
add r10b, 0x3c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010fedb
sub r10b, 0x3c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x5c
jmp 0x14010fed8
add r10b, 0x5c
movzx eax, r10b
and al, r11b
mov ecx, 0x3e
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x14010f582
lea ecx, [r10 - 0x1c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x3c
jmp 0x14010fe4d
movzx r10d, bl
lea edx, [r10 - 0xc]
mov ecx, Ordinal_45
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
sub r10b, 0x5c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x7c
add r11b, r10b
mov byte [rbp + rbx + 0x90], r11b
inc r9
dec rbx
inc rbx
jmp 0x14010f582
lea ecx, [rbx + 4]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x1c
dec rbx
inc rbx
jmp 0x14010f582
movzx r10d, bl
lea edx, [r10 - 0x74]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
add r10b, 0x1c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
add cl, dl
mov byte [rbp + rbx + 0x90], cl
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010f582
movabs rcx, 0x937644e551610a24
add rcx, rbx
and dil, cl
mov eax, 2
sub al, dil
lea edx, [rax + rax]
add dl, r11b
movzx r10d, bl
add dl, cl
sub r10b, 0x6c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0xc
add r10b, r11b
movzx eax, r10b
mov byte [rbp + rbx + 0x90], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx + 0x50]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x30
add cl, r11b
mov byte [rbp + rbx + 0x90], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f582
lea rax, [rbx + r13]
and dil, al
add dil, dil
sub r11b, dil
lea edx, [rax + r11]
sub dl, 0x6c
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010f582
sub r10b, 0x54
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010f580
add r10b, 0x34
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x6c
jmp 0x14010f570
lea rdx, [rbp + 0x14742e0]
jmp 0x140110001
lea rdx, [rbp + 0xc2d69c]
jmp 0x140110001
lea rdx, [rbp + 0x90]
mov r9, rsi
lea r8, str.NtShutdownSystem
mov rcx, qword [0x140230168]
call fcn.140118a60
movzx esi, word [0x140230498]
mov dword [rbp + 0x18], 0xebbaeaa5
mov dword [rbp + 0x1c], 0xb7ebeaf5
mov dword [rbp + 0x20], 0xe0ecefe7
mov dword [rbp + 0x24], 0x9a8e21d1
mov dword [rbp + 0x28], 0x239a89ee
mov dword [rbp + 0x2c], 0xa7bc2d99
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
mov word [rbp + 0x48], ax
mov byte [rbp + 0x4a], al
movabs r12, 0x13199ae95c8bfe14
movabs r13, 0x394cd0bc15a3fa3c
movzx edx, byte [rbp + 0x148]
nop word [rax + rax]
mov r8, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x140110b89
movzx r10d, byte [rbp + rbx + 0x18]
mov edi, r10d
cmp r8, rbx
ja 0x140110b80
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1401100d0
lea rcx, [rbx + r12]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
add dl, 0x74
jmp 0x140110116
je 0x140110b0d
inc rax
cmp r8, rax
je 0x140110ab0
lea rax, [r9 + 3]
cmp r8, rax
je 0x140110a60
lea rax, [r9 + 5]
cmp r8, rax
je 0x140110a0b
lea rax, [r9 + 7]
cmp r8, rax
je 0x1401109eb
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401109a6
movzx r11d, bl
nop word [rax + rax]
cmp r9, rbx
ja 0x140110b77
lea rax, [r9 + 5]
cmp r8, rax
jae 0x140110149
lea ecx, [r11 - 0x5c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 0x7c
jmp 0x1401101a0
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x14011098e
lea rax, [r9 + 3]
cmp r8, rax
je 0x140110968
lea rax, [rcx + 1]
cmp r8, rax
je 0x14011094c
lea rax, [r9 + 4]
cmp r8, rax
je 0x140110932
lea rax, [r9 + 6]
cmp r8, rax
je 0x140110914
lea rax, [r9 + 9]
cmp r8, rax
je 0x1401108ea
nop word [rax + rax]
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x14011062f
nop dword [rax]
lea rax, [r9 + 8]
cmp r8, rax
je 0x14011061d
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x1401105f8
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1401105d6
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1401106dc
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x1401105b6
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x140110596
lea rax, [r9 + 3]
cmp r8, rax
je 0x14011057b
lea rax, [r9 + 5]
cmp r8, rax
je 0x14011055b
lea r8, [r9 + 0x10]
lea r9, [r8 + 0x20]
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x140110b57
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x140110b37
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x14011034e
lea rax, [r9 + 2]
cmp r8, rax
jb 0x140110331
lea rax, [r9 + 4]
cmp r8, rax
jb 0x140110317
lea rax, [r9 + 6]
cmp r8, rax
jb 0x14011050f
lea rax, [r9 + 9]
cmp r8, rax
jb 0x1401104b3
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x140110472
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x1401101b0
lea r8, [r9 + 0x5a]
lea r9, [r8 + 0x2a]
lea rax, [r9 + 1]
cmp r8, rax
ja 0x140110448
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14011042a
lea rax, [r9 + 5]
cmp r8, rax
ja 0x140110410
lea rax, [r9 + 8]
cmp r8, rax
ja 0x1401103f4
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x1401103d8
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x1401103bd
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x140110397
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14011036e
lea r8, [r9 + 4]
lea r9, [r8 + 5]
jmp 0x1401101b0
lea ecx, [r11 - 0x24]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edx, [r10 + rcx]
sub dl, 4
jmp 0x1401101a0
lea edx, [r11 - 0x4c]
movzx eax, dl
and al, r10b
mov ecx, 0xa
sub cl, al
add cl, cl
add dl, cl
add dl, r10b
jmp 0x140110120
sub r11b, 0x74
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x1401100a5
sub r11b, 8
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_30
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x140110092
sub r11b, 0x30
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x140110092
lea edx, [r11 - 0x58]
movzx eax, r10b
and al, dl
mov ecx, 0x34
sub cl, al
add cl, cl
add cl, r10b
jmp 0x140110a24
add r11b, 0x80
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x80
jmp 0x140110a45
add r11b, 0x58
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x68
jmp 0x140110a48
lea edx, [r11 + 0x30]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x50
jmp 0x140110a82
add r11b, 8
movzx eax, r10b
and al, r11b
add al, al
movzx edx, r10b
sub dl, al
sub dl, 0x38
add dl, r11b
jmp 0x140110ad0
sub r11b, 0x20
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x20
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110092
lea edx, [r11 + 0x54]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x4c
add dl, cl
cmp r9, 0x64
jb 0x1401108ac
lea edx, [r11 - 8]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
lea edx, [rcx + rcx]
jmp 0x1401109c1
lea edx, [r11 + 0x2c]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x34
add dl, cl
cmp r8, 1
jae 0x1401108b8
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140110813
sub r11b, 0x70
movzx eax, r10b
and al, r11b
mov ecx, 8
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110092
lea edx, [r11 + 4]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x1c
add dl, cl
lea rax, [r8 + r9]
cmp rax, 0x61
je 0x1401108d2
lea rax, [r9 + 0x7a]
cmp r8, rax
jbe 0x14011074d
lea edx, [r11 - 0x3c]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x5c
jmp 0x1401104c8
sub r11b, 0x50
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_26
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140110ad0
lea edx, [r11 - 0x78]
movzx eax, r10b
and al, dl
mov ecx, 0x24
sub cl, al
add cl, cl
add cl, r10b
jmp 0x140110a82
add r11b, 0x60
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140110a48
add r11b, 0x38
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140110a45
sub r11b, 0x18
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x58
dec rbx
inc rbx
jmp 0x140110092
sub r11b, 0x40
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x40
inc r9
dec rbx
inc rbx
jmp 0x140110092
lea edx, [r11 - 0x68]
movzx eax, r10b
and al, dl
sub dl, 0x28
jmp 0x1401109b7
lea rax, [r9 + 0xa]
cmp r8, rax
jae 0x140110653
lea edx, [r11 + 0x14]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add cl, r10b
jmp 0x140110524
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14011068a
add r11b, 0x48
movzx eax, r10b
and al, r11b
mov ecx, 4
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110092
inc rax
cmp r8, rax
jne 0x1401106b0
add r11b, 0x70
movzx eax, r10b
and al, r11b
add al, al
movzx edx, r10b
sub dl, al
sub dl, 0x10
add dl, r11b
jmp 0x140110ad0
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401106d3
lea edx, [r11 - 0x68]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x28
jmp 0x140110a82
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401106f6
lea edx, [r11 + 0x10]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x70
jmp 0x140110a24
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140110725
add r11b, 0x38
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x140110092
lea rax, [r9 + 8]
cmp r8, rax
jne 0x140110526
lea edx, [r11 - 0x78]
movzx eax, r10b
and al, dl
mov ecx, 0x24
sub cl, al
add cl, cl
add cl, r10b
jmp 0x1401109bf
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140110768
lea edx, [r11 - 0x14]
movzx eax, r10b
and al, dl
sub dl, 0x74
jmp 0x1401109b7
inc rax
cmp r8, rax
jne 0x140110799
add r11b, 0x14
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_60
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x140110092
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401107bd
lea edx, [r11 + 0x64]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_35
sub cl, al
add cl, cl
add cl, r10b
jmp 0x140110a24
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401107e6
sub r11b, 0x74
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x140110a45
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401104ca
sub r11b, 0x4c
movzx eax, r11b
and al, r10b
mov ecx, 0xa
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
jmp 0x140110a48
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140110836
lea edx, [r11 - 0x20]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x20
jmp 0x140110a82
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140110859
lea edx, [r11 + 0x58]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x68
jmp 0x140110a24
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140110884
add r11b, 0x80
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x80
dec rbx
inc rbx
jmp 0x140110092
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140110489
lea edx, [r11 - 0x30]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
jmp 0x1401109bf
mov byte [rbp + rbx + 0x18], dl
inc rbx
jmp 0x140110092
lea edx, [r11 + 0x20]
movzx eax, r10b
and al, dl
movzx ecx, r10b
sub cl, al
add cl, 0x10
add cl, cl
jmp 0x140110a24
lea edx, [r11 + 0x48]
movzx eax, r10b
and al, dl
mov ecx, 4
sub cl, al
add cl, cl
jmp 0x140110a82
add r11b, 0xc
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x54
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110092
sub r11b, 0x1c
movzx eax, r10b
and al, r11b
add al, al
movzx edx, r10b
sub dl, al
sub dl, 0x3c
add dl, r11b
jmp 0x140110ad0
lea edx, [r11 - 0x44]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x24
jmp 0x140110a82
sub r11b, 0x6c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0xc
jmp 0x140110a48
add r11b, 0x1c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x140110092
lea edx, [r11 - 0x34]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r10b
jmp 0x1401109bf
movzx r11d, bl
lea edx, [r11 + 0x7c]
movzx eax, r10b
and al, dl
sub dl, 0x64
add al, al
movzx ecx, r10b
sub cl, al
add dl, cl
add r11b, 0xc
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x54
add r10b, r11b
mov byte [rbp + rbx + 0x18], r10b
inc r9
dec rbx
inc rbx
jmp 0x140110092
lea ecx, [rbx + 0x2c]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea edx, [rcx + r10]
sub dl, 0x34
dec rbx
inc rbx
jmp 0x140110092
movzx r11d, bl
lea edx, [r11 + 4]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
sub dl, 0x1c
add dl, cl
add r11b, 0x34
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x6c
add r10b, r11b
add r10b, dl
mov byte [rbp + rbx + 0x18], r10b
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x140110092
movabs rcx, 0x85b33c6187d3f28c
add rcx, rbx
and dil, cl
mov eax, reloc.WLDAP32.dll_Ordinal_22
sub al, dil
lea edx, [rax + rax]
add dl, r10b
movzx r11d, bl
add dl, cl
add r11b, 0x5c
movzx eax, r11b
and al, r10b
mov ecx, 0x3e
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
movzx eax, cl
mov byte [rbp + rbx + 0x18], al
inc r9
add rax, r9
sub rbx, rax
jmp 0x140110ad0
movabs rcx, 0x5f80068ecebbf664
add rcx, rbx
and dil, cl
mov eax, Ordinal_35
sub al, dil
lea edx, [rax + rax]
add dl, r10b
add dl, cl
lea ecx, [rbx + 0x70]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
sub r10b, 0x10
add r10b, cl
mov byte [rbp + rbx + 0x18], r10b
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110092
lea rcx, [rbx + r13]
and dil, cl
mov eax, reloc.WLDAP32.dll_Ordinal_46
sub al, dil
lea edx, [rax + rax]
add dl, r10b
add dl, cl
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110092
add r11b, 0x64
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_35
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140110090
add r11b, 0x3c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140110080
lea rdx, [rbp + 0x14eb588]
jmp 0x140110b8d
lea rdx, [rbp + 0x9ab39c]
jmp 0x140110b8d
lea rdx, [rbp + 0x18]
movzx r9d, si
lea r8, str.NtShutdownSystem
mov rcx, qword [0x140230168]
call fcn.14011d220
xor eax, eax
mov byte [rbp + 0x148], al
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x108]
call fcn.1401219e0
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140045bb0
lea rcx, [rbp + 0x170]
call fcn.140044df0
mov rax, qword [rbp + 0x1a8]
mov edx, dword [rax + 0x50]
xor r8d, r8d
lea rcx, [rbp + 0x149]
call fcn.140051820
mov rdi, rax
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140045a30
mov rcx, qword [rbp + 0x1a8]
mov r9d, dword [rcx + 0x50]
mov r8, qword [rbp + 0x188]
mov rdx, rdi
lea rcx, [rbp + 0x149]
call fcn.1400530c0
mov rcx, qword [rbp + 0x1a8]
mov edx, dword [rcx + 0x28]
add rdx, rdi
mov r9d, dword [rcx + 0x50]
mov r8, rdi
lea rcx, [rbp + 0x149]
call fcn.140121a00
mov esi, eax
mov dword [rsp + 0x70], 0xd030b02
mov dword [rsp + 0x74], 0x185c0f1d
mov dword [rsp + 0x78], 0xf8020500
mov dword [rsp + 0x7c], 0x3130752
mov dword [rbp - 0x80], 0xecf6fb01
mov dword [rbp - 0x7c], 0xbfacc7ee
mov dword [rbp - 0x78], 0x99f0a606
mov byte [rbp - 0x74], 0x82
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x73], xmm0
mov dword [rbp - 0x63], eax
mov word [rbp - 0x5f], ax
movabs r13, 0x79491dbf42b61f2b
movabs r12, 0xaf2bdea5f4d3ac4d
movzx r11d, byte [rbp + 0x148]
nop dword [rax]
mov r8, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor ebx, ebx
movabs rcx, 0xe50e9f8ca6f1396f
cmp rbx, 0x33
jae 0x1401115c8
movzx r10d, byte [rsp + rbx + 0x70]
mov edx, r10d
nop
cmp r8, rbx
ja 0x1401115bf
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140110d0a
add rcx, rbx
mov eax, edx
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, rdx
add r11, rcx
sub r11b, 9
jmp 0x140110d50
je 0x14011155b
inc rax
cmp r8, rax
je 0x14011150b
lea rax, [r9 + 2]
cmp r8, rax
je 0x1401114c5
lea rax, [r9 + 5]
cmp r8, rax
je 0x140111474
lea rax, [r9 + 3]
cmp r8, rax
je 0x140111454
lea rax, [r9 + 6]
cmp r8, rax
je 0x140111414
cmp r9, rbx
ja 0x1401115b6
lea rax, [r9 + 0x400]
cmp r8, rax
jae 0x140110d7e
lea r11d, [rbx + 0x1b]
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
add r11b, 0x43
add r11b, r10b
jmp 0x140110db1
lea rax, [r9 + 1]
cmp r8, rax
je 0x1401113fa
inc rax
cmp r8, rax
je 0x1401113d7
lea rax, [r9 + 2]
cmp r8, rax
je 0x1401113b7
lea rax, [r9 + 5]
cmp r8, rax
je 0x14011139d
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x140111132
nop
lea rax, [r9 + 8]
cmp r8, rax
je 0x140111110
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x1401110e8
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x1401110c8
lea rax, [r9 + 9]
cmp r8, rax
je 0x1401110ae
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x140111094
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14011107a
lea r8, [r9 + 0x40]
lea r9, [r8 + 0xa]
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14011159b
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x140111580
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x140110ed5
lea rax, [r9 + 6]
cmp r8, rax
jb 0x140111030
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x140110fb9
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x140110dc0
lea r8, [r9 + 0x20]
lea r9, [r8 + 8]
lea rax, [r9 + 3]
cmp r8, rax
ja 0x140110f90
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x140110f72
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x140110f53
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x140110f34
lea rax, [r9 + 4]
cmp r8, rax
ja 0x140110f12
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x140110eef
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x140110dc0
lea r8, [r9 + 0xa]
lea r9, [r8 + 5]
jmp 0x140110dc0
lea ecx, [rbx + 0x45]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x1d
jmp 0x140110db1
lea ecx, [rbx - 0x28]
movzx eax, r10b
and al, cl
mov r11d, recv
sub r11b, al
add r11b, r11b
add r11b, r10b
add r11b, cl
movzx edx, bl
jmp 0x14011142c
lea edx, [rbx + 0x3e]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx edx, bl
jmp 0x14011148c
lea edx, [rbx + 0x60]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x1401114a9
lea edx, [rbx - 0x7e]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
jmp 0x1401114ac
lea edx, [rbx - 0x3a]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 0x6a
add r11b, dl
jmp 0x14011151d
lea ecx, [rbx - 0x18]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x58
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110cc2
lea edx, [rbx + 1]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 7
add r11b, dl
cmp r8, 0x2a
jae 0x140111360
lea rax, [r9 + 0x61]
cmp r8, rax
jbe 0x14011127f
lea edx, [rbx - 0x72]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
cmp r9, 0x41
jb 0x140111353
lea edx, [rbx + 0x3a]
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x2c]
movzx edx, bl
jmp 0x14011142c
lea ecx, [rbx + 0x23]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0xb
lea rax, [r9 + r8]
cmp rax, 2
je 0x140111381
lea rax, [r9 + 0x41]
cmp r8, rax
jbe 0x140111231
lea ecx, [rbx + 0x73]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x25
jmp 0x140110fd2
lea ecx, [rbx - 0x3c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x5c
jmp 0x14011151d
lea ecx, [rbx - 0x1a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x4a
jmp 0x1401114e0
lea ecx, [rbx + 8]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x38
jmp 0x1401114ac
lea ecx, [rbx + 0x6e]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 2
dec rbx
inc rbx
jmp 0x140110cc2
lea edx, [rbx - 0x70]
movzx eax, dl
and al, r10b
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc r9
dec rbx
inc rbx
jmp 0x140110cc2
lea edx, [rbx - 0x4e]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
movzx edx, bl
jmp 0x14011142c
lea rax, [r9 + 0x61]
cmp r8, rax
jae 0x140111155
lea ecx, [rbx + 0x6f]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 9
jmp 0x140111045
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111186
lea ecx, [rbx + 0x36]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x7a
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110cc2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401111ae
lea edx, [rbx - 0xe]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x1401114e0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401111d9
lea edx, [rbx - 0x74]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
movzx edx, bl
jmp 0x14011148c
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140111207
lea edx, [rbx + 0x6a]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
dec rbx
inc rbx
jmp 0x140110cc2
lea rax, [r9 + 8]
cmp r8, rax
jne 0x140111045
lea ecx, [rbx + 0x26]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0xa
movzx edx, bl
jmp 0x14011142c
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111257
lea ecx, [rbx + 0x51]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x37
movzx edx, bl
jmp 0x14011142c
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140110fd2
lea ecx, [rbx - 0x59]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
add r11b, 0x6f
jmp 0x1401114ac
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401112b5
lea edx, [rbx + 0x6c]
movzx eax, r10b
and al, dl
mov ecx, 6
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110cc2
inc rax
cmp r8, rax
jne 0x1401112db
lea edx, [rbx + 0x4a]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub r11b, 6
add r11b, dl
jmp 0x14011151d
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140111301
lea edx, [rbx + 0x28]
movzx eax, r10b
and al, dl
add al, al
movzx r11d, r10b
sub r11b, al
sub dl, 0x18
add r11b, dl
jmp 0x1401114e0
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140111325
lea ecx, [rbx - 0x1c]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x3c
jmp 0x1401114a9
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140111003
lea ecx, [rbx - 0x60]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x60
dec rbx
inc rbx
jmp 0x140110cc2
mov byte [rsp + rbx + 0x70], r11b
inc rbx
jmp 0x140110cc2
lea edx, [rbx + 0x18]
movzx eax, r10b
and al, dl
movzx ecx, r10b
sub cl, al
add cl, 0x2c
lea r11d, [rcx + rcx]
add r11b, dl
movzx edx, bl
jmp 0x14011148c
lea edx, [rbx - 0xa]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x1401114e0
lea ecx, [rbx + 0x4f]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x29
jmp 0x1401114ac
lea ecx, [rbx - 0x4b]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0xd
dec rbx
inc rbx
jmp 0x140110cc2
lea ecx, [rbx - 0x29]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x1f
inc r9
dec rbx
inc rbx
jmp 0x140110cc2
lea ecx, [rbx - 7]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x31
movzx edx, bl
jmp 0x14011142c
movzx edx, bl
lea ecx, [rdx + 0x3d]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x55
sub dl, 0x57
movzx eax, r10b
and al, dl
add al, al
sub r10b, al
add r10b, 0x61
add r10b, dl
mov byte [rsp + rbx + 0x70], r10b
inc r9
dec rbx
inc rbx
jmp 0x140110cc2
lea ecx, [rbx - 0x7f]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
add r11b, 0x79
dec rbx
inc rbx
jmp 0x140110cc2
movzx edx, bl
lea ecx, [rdx - 0x5d]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x75
sub dl, 0x79
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, 0x4f
add cl, r10b
add cl, dl
mov byte [rsp + rbx + 0x70], cl
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x140110cc2
movabs rax, 0x43665cd890989209
add rax, rbx
and dl, al
add dl, dl
sub al, dl
lea r11d, [r10 + rax]
sub r11b, 0x3f
movzx edx, bl
add dl, 0x65
movzx eax, r10b
and al, dl
add al, al
movzx ecx, r10b
sub cl, al
add cl, 0x3d
add cl, dl
movzx eax, cl
mov byte [rsp + rbx + 0x70], al
inc r9
add rax, r9
sub rbx, rax
jmp 0x14011151d
lea rax, [rbx + r13]
and dl, al
add dl, dl
sub al, dl
lea r11d, [r10 + rax]
sub r11b, 0x2d
lea edx, [rbx - 0x2c]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
mov byte [rsp + rbx + 0x70], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110cc2
lea rax, [rbx + r12]
and dl, al
add dl, dl
sub al, dl
lea r11d, [r10 + rax]
sub r11b, 0x1b
movzx eax, byte [rsp + rbx + 0x70]
add rax, r9
add rbx, rax
inc rbx
jmp 0x140110cc2
sub bl, 0x55
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
add r11b, 0x53
jmp 0x140110cbe
sub bl, 0x33
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
add r11b, 0x65
jmp 0x140110cad
lea rdx, [rbp + 0x1529604]
jmp 0x1401115cd
lea rdx, [rbp + 0xc3cf73]
jmp 0x1401115cd
lea rdx, [rsp + 0x70]
mov r8d, esi
mov rcx, qword [0x140230168]
call fcn.140121ac0
mov rax, qword [rbp + 0x1a8]
mov r8d, dword [rax + 0x54]
mov rdx, rdi
lea rcx, [rbp + 0x149]
call fcn.1400549e0
call fcn.14010ce80
test al, al
jne 0x1401121f1
mov dword [rsp + 0x20], 0xa5abbfb1
mov dword [rsp + 0x24], 0xab76a4bc
mov dword [rsp + 0x28], 0xa1af75a7
mov dword [rsp + 0x2c], 0xb3bfa2a4
mov dword [rsp + 0x30], 0xb2a4b17c
mov dword [rsp + 0x34], 0x5598b4a2
mov dword [rsp + 0x38], 0x82425756
mov dword [rsp + 0x3c], 0x874e9594
mov dword [rsp + 0x40], 0x9f869f8d
mov dword [rsp + 0x44], 0x98569685
mov dword [rsp + 0x48], 0x9e8d8680
mov dword [rsp + 0x4c], 0x7f68b29c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x60], ax
mov byte [rsp + 0x62], al
movabs r14, 0x8bfe527e83e0220a
movabs r15, 0xebf0e672a2e1325a
movabs r12, 0xa3faf77b8ba0661e
movzx ebx, byte [rbp + 0x148]
nop dword [rax + rax]
mov r8, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor edi, edi
cmp rdi, 0x43
jae 0x1401121e7
movzx r11d, byte [rsp + rdi + 0x20]
mov esi, r11d
cmp r8, rdi
ja 0x1401121db
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1401116f0
lea rcx, [rdi + r14]
mov rax, rsi
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rsi
add rbx, rcx
sub bl, 0x46
jmp 0x14011172a
je 0x140112169
lea rax, [r9 + 3]
cmp r8, rax
je 0x14011213d
lea rax, [r9 + 5]
cmp r8, rax
je 0x1401120fb
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401120dc
lea rax, [r9 + 6]
cmp r8, rax
je 0x140112099
movzx r10d, dil
nop
cmp r9, rdi
ja 0x1401121cf
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x140111760
lea edx, [r10 - 0x2e]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x1401117a0
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x140112082
lea rax, [r9 + 3]
cmp r8, rax
je 0x140112060
lea rax, [rcx + 1]
cmp r8, rax
je 0x140112052
lea rax, [r9 + 8]
cmp r8, rax
je 0x140112024
nop dword [rax]
nop dword [rax + rax]
lea rax, [r8 + r9]
cmp rax, rdi
jbe 0x140111cec
nop dword [rax]
lea rax, [r9 + 2]
cmp r8, rax
je 0x140111cd2
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x140111ca9
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x140111c87
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140111c79
lea rax, [r9 + 3]
cmp r8, rax
je 0x140111c5a
lea rax, [r9 + 6]
cmp r8, rax
je 0x140111c3a
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x140111c20
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x140111c00
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x140111bd6
lea rax, [r9 + 8]
cmp r8, rax
je 0x1401117b0
lea r8, [r9 + 0x28]
lea r9, [r8 + 1]
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x1401121af
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x140112193
lea rax, [r9 + 3]
cmp r8, rax
jb 0x140111998
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14011197e
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x140111964
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x140111b87
lea rax, [r9 + 4]
cmp r8, rax
jb 0x140111b44
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x140111b05
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x140111ae2
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x1401117b0
lea r8, [r9 + 0x2a]
lea r9, [r8 + 0x42]
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x140111ab4
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x140111a98
lea rax, [r9 + 8]
cmp r8, rax
ja 0x140111a7a
lea rax, [r9 + 1]
cmp r8, rax
ja 0x140111a5e
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x140111a3b
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x140111a21
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x1401119fb
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x1401119d6
lea rax, [r9 + 5]
cmp r8, rax
ja 0x1401119b8
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x1401117b0
lea r8, [r9 + 4]
lea r9, [r8 + 0x3e8]
jmp 0x1401117b0
lea ecx, [r10 + 0x6e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 2
jmp 0x1401117a0
lea ecx, [r10 + 0x5a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x76
jmp 0x140111730
add r10b, 0x46
movzx eax, r10b
and al, r11b
mov ecx, listen
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x1401116c5
lea edx, [r10 - 0x70]
movzx eax, dl
and al, r11b
mov ecx, 8
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x1401120b2
add r10b, 0x7c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x64
inc r9
dec rdi
inc rdi
jmp 0x1401116b2
add r10b, 0x68
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x1401116b2
lea ecx, [r10 + 0x54]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x4c
jmp 0x140112118
add r10b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
add r8, r9
jmp 0x140112151
add r10b, 0x2c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x34
jmp 0x140112151
lea edx, [r10 + 0x18]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x140111fbe
add r10b, 4
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x1c
jmp 0x140111fe6
sub r10b, 0x10
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401116b2
sub r10b, 0x42
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x32
mov byte [rsp + rdi + 0x20], bl
inc rdi
jmp 0x1401116b2
lea edx, [r10 - 0x56]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
cmp r9, 1
jb 0x140111af9
lea ecx, [r10 - 4]
movzx eax, cl
and al, r11b
mov edx, recv
sub dl, al
add dl, dl
add dl, cl
add dl, r11b
lea ebx, [rdx + rdx]
jmp 0x1401120b2
lea ecx, [r10 - 0x6a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x1a
cmp r8, 0x40
jae 0x140111f8e
lea rcx, [r9 + 2]
cmp r8, rcx
jbe 0x140111ec0
lea ecx, [r10 + 0x34]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x6c
jmp 0x140111b1e
lea edx, [r10 - 0x7e]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
lea rax, [r8 + r9]
cmp rax, 0xa
je 0x140111fa8
lea rax, [r9 + 0x42]
cmp r8, rax
jbe 0x140111de7
lea edx, [r10 + 0x62]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x140111b59
sub r10b, 0x14
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x74
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401116b2
sub r10b, 0x28
movzx eax, r10b
and al, r11b
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140111fe6
lea ecx, [r10 - 0x3c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x5c
jmp 0x140111fbe
sub r10b, 0x50
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140112151
sub r10b, 0x64
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x44
add r8, r9
jmp 0x140112151
lea edx, [r10 - 0x78]
mov ecx, 0x24
jmp 0x140112108
add r10b, 0x74
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x2c
dec rdi
inc rdi
jmp 0x1401116b2
add r10b, 0x60
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x1401116b2
lea ecx, [r10 + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x14
jmp 0x1401120b2
lea rax, [r9 + 0x64]
cmp r8, rax
jae 0x140111d0f
lea ecx, [r10 + 0xa]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x46
jmp 0x140111ba0
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111d42
sub r10b, 0x5c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x7c
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401116b2
inc rax
cmp r8, rax
jne 0x140111d66
sub r10b, 0x48
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 8
jmp 0x140111fe6
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140111d8d
lea edx, [r10 - 0x34]
movzx eax, dl
and al, r11b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x140111fbe
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140111dbc
add r10b, 0x1c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x1401116b2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140111ba0
lea edx, [r10 + 0x44]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x1401120b2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111e0a
lea ecx, [r10 + 0x76]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x3a
jmp 0x1401120b2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140111e35
sub r10b, 0x62
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x52
dec rdi
inc rdi
jmp 0x1401116b2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140111e5e
sub r10b, 0x26
movzx eax, r10b
and al, r11b
mov ecx, 5
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140112151
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140111e85
lea edx, [r10 - 0x12]
movzx eax, dl
and al, r11b
mov ecx, 0x3f
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x140111fbe
lea rax, [r9 + 8]
cmp r8, rax
jne 0x140111b59
add r10b, 0x16
movzx eax, r10b
and al, r11b
mov ecx, 0x33
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401116b2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111ef7
add r10b, 0x48
movzx eax, r10b
and al, r11b
mov ecx, 4
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401116b2
cmp r8, rcx
jne 0x140111f16
lea ecx, [r10 + 0x70]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x10
jmp 0x140111fbe
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140111f3f
sub r10b, 0x7c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140112151
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140111f67
sub r10b, 0x68
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x28
add r8, r9
jmp 0x140112151
lea rax, [r9 + 9]
cmp r8, rax
jne 0x140111b1e
lea ecx, [r10 - 0x18]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x58
jmp 0x1401120b2
lea edx, [r10 + 0x10]
movzx eax, dl
and al, r11b
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x70
jmp 0x140112113
lea edx, [r10 + 0x24]
movzx eax, dl
and al, r11b
mov ecx, 2
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add r10b, 0x2e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x42
add r10b, r11b
movzx eax, r10b
mov byte [rsp + rdi + 0x20], al
inc r9
add rax, r9
sub rdi, rax
lea edx, [rdi + 0x38]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
mov byte [rsp + rdi + 0x20], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401116b2
sub r10b, 0x7a
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401116b2
lea edx, [r10 + 0x22]
mov ecx, 9
jmp 0x140112108
add r10b, 0xe
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x62
dec rdi
inc rdi
jmp 0x1401116b2
lea ecx, [r10 - 0x1a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x4a
jmp 0x1401120b2
movzx r10d, dil
lea ecx, [r10 - 0x42]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x32
add r10b, 6
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
sub r10b, 0x2a
add r10b, r11b
mov byte [rsp + rdi + 0x20], r10b
inc r9
dec rdi
inc rdi
jmp 0x1401116b2
lea ecx, [rdi - 0x6a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x1a
dec rdi
inc rdi
jmp 0x1401116b2
movzx r10d, dil
lea edx, [r10 - 0x7e]
mov ecx, reloc.WS2_32.dll_gethostname
movzx eax, dl
and al, r11b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
add r10b, 0x1a
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
add cl, bl
add cl, r11b
mov byte [rsp + rdi + 0x20], cl
add r8, r9
jmp 0x140112151
lea rax, [rdi + r15]
and sil, al
add sil, sil
sub r11b, sil
lea ebx, [rax + r11]
sub bl, 0x76
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x1401116b2
lea rcx, [rdi + r12]
and sil, cl
mov eax, reloc.WS2_32.dll_socket
sub al, sil
lea ebx, [rax + rax]
add bl, r11b
add bl, cl
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x1401116b2
add r10b, 0x32
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x5e
jmp 0x1401116b0
add r10b, 0x1e
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x1401116a0
lea rdx, [rbp + 0x156ddd8]
jmp 0x140112d5d
lea rdx, [rbp + 0x136ffe2]
jmp 0x140112d5d
lea rdx, [rsp + 0x20]
jmp 0x140112d5d
mov rcx, r14
call fcn.14010dae0
test al, al
jne 0x140112dc1
mov dword [rbp + 0x50], 0x1f1b2c06
mov dword [rbp + 0x54], 0x63d61515
mov dword [rbp + 0x58], 0x1210d567
mov dword [rbp + 0x5c], 0x1bde1d6a
mov dword [rbp + 0x60], 0x678146a
mov dword [rbp + 0x64], 0xe7e8c076
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], rax
mov word [rbp + 0x80], ax
mov byte [rbp + 0x82], al
movabs rsi, 0xe468d63195b8e31e
movabs r14, 0x7af87be437ffc0e
movabs r12, 0x760c2ef7ec9c6f96
movabs r15, 0xad3a8294c12aa95a
movzx ebx, byte [rbp + 0x148]
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [0x1402304a8]
mov r9, qword [0x1402304a0]
nop
xor edi, edi
cmp rdi, 0x33
jae 0x140112d59
movzx r11d, byte [rbp + rdi + 0x50]
mov edx, r11d
cmp r8, rdi
ja 0x140112d50
lea rax, [r9 + 1]
cmp r8, rax
jae 0x1401122d0
lea rcx, [rdi + rsi]
mov rax, rdx
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rdx
add rbx, rcx
add bl, 0x2e
jmp 0x140112309
je 0x140112cea
inc rax
cmp r8, rax
je 0x140112c99
lea rax, [r9 + 3]
cmp r8, rax
je 0x140112c6f
lea rax, [r9 + 4]
cmp r8, rax
je 0x140112c50
lea rax, [r9 + 2]
cmp r8, rax
je 0x140112c09
movzx r10d, dil
nop dword [rax]
cmp r9, rdi
ja 0x140112d47
lea rcx, [r9 + 4]
cmp r8, rcx
jae 0x140112339
lea ecx, [r10 + 0x76]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x3a
jmp 0x140112380
lea rax, [r9 + 1]
cmp r8, rax
je 0x140112bfe
inc rax
cmp r8, rax
je 0x140112bdf
cmp r8, rcx
je 0x140112bc3
lea rax, [r9 + 7]
cmp r8, rax
je 0x140112b7b
lea rax, [r9 + 3]
cmp r8, rax
je 0x140112b5f
nop word [rax + rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x1401128c1
nop dword [rax]
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x1401128a7
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14011287e
lea rax, [r9 + 1]
cmp r8, rax
je 0x140112858
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14011283e
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14011281b
lea rax, [r9 + 5]
cmp r8, rax
je 0x1401127ff
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x1401127e5
lea rax, [r9 + 8]
cmp r8, rax
je 0x1401127c5
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14011279b
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x140112390
lea r8, [r9 + 2]
lea r9, [r8 + 0x20]
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x140112d2b
lea rax, [r9 + 4]
cmp r8, rax
jb 0x140112d0f
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14011257a
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x140112560
lea rax, [r9 + 9]
cmp r8, rax
jb 0x140112546
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14011274e
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14011270b
lea rax, [r9 + 3]
cmp r8, rax
jb 0x1401126cf
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1401126a8
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x140112390
mov r8, rax
lea r9, [rax + 0x41]
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14011267a
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x14011265e
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x140112650
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x140112630
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x140112611
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x1401125f3
lea rax, [r9 + 6]
cmp r8, rax
ja 0x1401125cd
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x1401125a8
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x14011259a
lea rax, [r9 + 1]
cmp r8, rax
ja 0x140112390
lea r8, [r9 + 0x10]
lea r9, [r8 + 0x400]
jmp 0x140112390
lea ecx, [r10 + 0x4a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 6
jmp 0x140112380
lea ecx, [r10 + 0xe]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x62
jmp 0x140112310
sub r10b, 0x2e
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x1401122a5
lea edx, [r10 - 0x50]
mov ecx, Ordinal_26
jmp 0x140112c16
add r10b, 0x74
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x2c
inc r9
dec rdi
inc rdi
jmp 0x140112292
add r10b, 0x38
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x140112292
lea edx, [r10 - 4]
movzx eax, dl
and al, r11b
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x140112b20
sub r10b, 0x40
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x40
add r8, r9
jmp 0x140112c81
sub r10b, 0x7c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140112c81
lea edx, [r10 + 0x48]
mov ecx, 4
jmp 0x140112b84
add r10b, 0xc
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x54
jmp 0x140112cac
sub r10b, 0x30
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140112292
add r10b, 0x3a
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
mov byte [rbp + rdi + 0x50], bl
inc rdi
jmp 0x140112292
lea edx, [r10 - 2]
movzx eax, dl
and al, r11b
mov ecx, 7
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
cmp r9, 0x20
jb 0x1401126c3
lea ecx, [r10 - 0xc]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, r11b
lea ebx, [rcx*2 - 0x58]
jmp 0x140112c26
lea ecx, [r10 - 0x3e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x4e
cmp r8, 0x64
jae 0x140112b06
lea rax, [r9 + 0x5a]
cmp r8, rax
jbe 0x140112a52
lea ecx, [r10 - 0x64]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x44
jmp 0x1401126e8
lea edx, [r10 - 0x7a]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
lea rax, [r9 + r8]
cmp rax, 0x400
je 0x140112b47
lea rax, [r9 + 3]
cmp r8, rax
jbe 0x140112999
lea ecx, [r10 + 0x26]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0xa
jmp 0x140112720
sub r10b, 0x3c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x5c
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140112292
sub r10b, 0x78
movzx eax, r10b
and al, r11b
mov ecx, 0x24
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140112cac
lea ecx, [r10 + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x14
jmp 0x140112b94
add r10b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x70
jmp 0x140112c81
sub r10b, 0x2c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
add r8, r9
jmp 0x140112c81
lea ecx, [r10 - 0x68]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x28
jmp 0x140112b20
add r10b, 0x5c
movzx eax, r10b
and al, r11b
mov ecx, 0x3e
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x140112292
add r10b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x140112292
lea ecx, [r10 - 0x1c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x3c
jmp 0x140112c26
lea rax, [r9 + 0x80]
cmp r8, rax
jae 0x1401128e1
lea edx, [r10 + 0x1e]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_socket
jmp 0x14011275d
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140112914
sub r10b, 0x14
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x74
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140112292
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14011292b
lea edx, [r10 + 0x64]
mov ecx, Ordinal_35
jmp 0x140112b84
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140112953
sub r10b, 0x24
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 4
add r8, r9
jmp 0x140112c81
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14011297e
add r10b, 0x54
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x4c
dec rdi
inc rdi
jmp 0x140112292
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140112767
lea edx, [r10 - 0x34]
mov ecx, gethostname
jmp 0x140112c16
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1401129b0
lea edx, [r10 + 0x62]
mov ecx, reloc.WLDAP32.dll_Ordinal_41
jmp 0x140112c16
cmp r8, rax
jne 0x1401129db
sub r10b, 0x26
movzx eax, r10b
and al, r11b
mov ecx, 5
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x140112292
lea rax, [rcx + 1]
cmp r8, rax
jne 0x1401129f2
lea edx, [r10 - 0x36]
mov ecx, 0x3d
jmp 0x140112b84
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140112a17
add r10b, 6
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x2a
jmp 0x140112cac
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140112720
add r10b, 0x42
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140112292
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140112a89
sub r10b, 0x28
movzx eax, r10b
and al, r11b
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140112292
inc rax
cmp r8, rax
jne 0x140112ab1
add r10b, 0x14
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x140112cac
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140112ad4
lea ecx, [r10 + 0x50]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x30
jmp 0x140112b94
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401126e8
add r10b, 0x7c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x64
inc r9
dec rdi
inc rdi
jmp 0x140112292
lea edx, [r10 + 0x30]
movzx eax, dl
and al, r11b
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x50
add bl, r11b
add bl, dl
add r10b, 0x4e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x22
add r11b, r10b
add r11b, bl
mov byte [rbp + rdi + 0x50], r11b
add r8, r9
jmp 0x140112c81
lea edx, [r10 + 0x6c]
movzx eax, dl
and al, r11b
mov ecx, 6
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x140112b94
add r10b, 0x56
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x5a
jmp 0x140112cac
lea edx, [r10 + 0x1a]
mov ecx, Ordinal_41
movzx eax, dl
and al, r11b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
sub r10b, 0x76
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
movzx eax, cl
mov byte [rbp + rdi + 0x50], al
inc r9
add rax, r9
sub rdi, rax
jmp 0x140112cac
sub r10b, 0x22
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x12
jmp 0x140112c81
sub r10b, 0x5e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x6e
add r8, r9
jmp 0x140112c81
lea edx, [r10 - 0x4e]
mov ecx, reloc.WS2_32.dll_recvfrom
jmp 0x140112c16
movzx r10d, dil
lea edx, [r10 + 0x3a]
mov ecx, gethostname
movzx eax, dl
and al, r11b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
add r10b, 0x12
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x7e
add r11b, r10b
mov byte [rbp + rdi + 0x50], r11b
inc r9
dec rdi
inc rdi
jmp 0x140112292
lea ecx, [rdi - 0x3e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x4e
dec rdi
inc rdi
jmp 0x140112292
lea rax, [rdi + r14]
and dl, al
add dl, dl
sub r11b, dl
lea ebx, [rax + r11]
sub bl, 0x62
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x140112292
lea rcx, [rdi + r12]
and dl, cl
add dl, dl
movzx ebx, r11b
sub bl, dl
sub bl, 0x1a
add bl, cl
lea edx, [rdi - 0x58]
movzx eax, dl
and al, r11b
mov ecx, 0x34
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
mov byte [rbp + rdi + 0x50], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140112292
lea rax, [rdi + r15]
and dl, al
add dl, dl
sub r11b, dl
lea ebx, [rax + r11]
sub bl, 0x76
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140112292
sub r10b, 0x6a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x1a
jmp 0x140112290
add r10b, 0x5a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x76
jmp 0x140112280
lea rdx, [rbp + 0x1789878]
jmp 0x140112d5d
lea rdx, [rbp + 0xb17b96]
jmp 0x140112d5d
lea rdx, [rbp + 0x50]
mov rcx, qword [0x140230168]
call fcn.1400650b0
nop
lea rcx, [rbp + 0x188]
call fcn.140045d20
lea rcx, [rbp + 0x170]
call fcn.140045d20
nop
lea rcx, [rbp + 0x150]
call fcn.140045d20
xor al, al
mov rcx, qword [rbp + 0x2f0]
xor rcx, rsp
call fcn.14019b1d0
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0x188]
call fcn.140045d20
lea rcx, [rbp + 0x170]
call fcn.140045d20
nop
lea rcx, [rbp + 0x150]
call fcn.140045d20
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140112e80
mov dword [rbp + 0x1c0], 0x130
xor edx, edx
mov r8d, Ordinal_301
lea rcx, [rbp + 0x1c4]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x1c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x140112e77
lea rax, [rbp + 0x1ec]
mov r8, r15
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140112e53
inc rax
test ecx, ecx
jne 0x140112e40
test edx, edx
je 0x140112e6d
lea rdx, [rbp + 0x1c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140112e30
jmp 0x140112e77
mov eax, dword [rbp + 0x1c8]
mov qword [r14 + 0x18], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [r14 + 0x18], 0
je 0x140112d8f
mov rdx, r15
mov rcx, r14
call fcn.140112ee0
mov qword [r14], rax
mov rdx, r15
mov rcx, r14
call fcn.140112fe0
mov qword [r14 + 8], rax
cmp qword [r14 + 0x10], 0xffffffffffffffff
je 0x140112d8f
mov al, 1
jmp 0x140112d91