Function at 0x140111c30
Capabilities:
Contain obfuscated stackstrings
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x1401da800]
xor rax, rsp
mov qword [rbp + 0x250], rax
mov r15, rdx
mov qword [rbp + 0xa0], rdx
xor ebx, ebx
mov dword [rsp + 0x60], ebx
mov qword [rbp + 0x90], rbx
lea r9, [rbp + 0x90]
xor r8d, r8d
mov edx, 0x8000
lea rcx, [0x1401b2880]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
jne 0x140111cbe
mov r8d, 0x104
mov rdx, qword [rbp + 0x90]
lea rcx, [rbp + 0x140]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstombs]
jmp 0x1401128d8
mov dword [rsp + 0x28], 0x8a8a8b81
mov dword [rsp + 0x2c], 0x98855d88
mov dword [rsp + 0x30], 0x8d8b858a
mov dword [rsp + 0x34], 0x8797558b
mov dword [rsp + 0x38], 0xffebed86
mov dword [rsp + 0x3c], 0xecfc2de9
mov dword [rsp + 0x40], 0x31af9fa
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x44], xmm0
mov dword [rsp + 0x54], eax
mov word [rsp + 0x58], ax
mov byte [rsp + 0x5a], al
movabs r10, 0x1f35fca4e97aa6af
movabs r14, 0x8f6db987270fac5b
movabs r12, 0xf2502d8ac5988105
movabs r13, 0xb3e43440f2a333a7
movzx r11d, byte [rsp + 0x20]
nop dword [rax + rax]
mov r8, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
mov rsi, rbx
cmp rsi, 0x33
jae 0x1401128c7
movzx edi, byte [rsp + rsi + 0x28]
movzx edx, dil
cmp r8, rsi
ja 0x1401128be
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x140111d92
lea rcx, [rsi + r10]
mov rax, rdi
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, rdi
add r11, rcx
add r11b, 0x37
jmp 0x140111dcc
je 0x140112849
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401127b3
lea rax, [rcx + 1]
cmp r8, rax
je 0x140112778
lea rax, [r9 + 5]
cmp r8, rax
je 0x140112727
lea rax, [r9 + 6]
cmp r8, rax
je 0x1401126dd
movzx edx, dil
cmp r9, rsi
ja 0x1401128b5
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x140111dfa
lea rcx, [rsi + r14]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
sub r11b, 0x7d
jmp 0x140111e30
lea rax, [r9 + 1]
cmp r8, rax
je 0x1401126bc
inc rax
cmp r8, rax
je 0x14011268f
lea rax, [r9 + 5]
cmp r8, rax
je 0x14011266b
lea rax, [r9 + 8]
cmp r8, rax
je 0x140112639
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rsi
jbe 0x140112382
nop dword [rax]
lea rax, [r9 + 8]
cmp r8, rax
je 0x140112368
lea rcx, [r9 + 0x5a]
cmp r8, rcx
je 0x140112340
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14011231b
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x1401122fc
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x1401122dd
lea rax, [r9 + 1]
cmp r8, rax
je 0x1401122c3
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14011229f
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x140112285
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x140112258
lea rax, [r9 + 3]
cmp r8, rax
je 0x140111e40
mov r8, rcx
lea r9, [rcx + 0x1000]
lea rax, [r9 + 0x80]
cmp rcx, rax
jb 0x140112898
lea rcx, [r9 + 0x200]
cmp r8, rcx
jb 0x14011287b
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x140112036
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14011201b
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x140112000
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x140112211
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x1401121ce
lea rax, [r9 + 3]
cmp r8, rax
jb 0x140112196
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x140112174
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x140111e40
mov r8, rcx
lea r9, [rcx + 0x40]
lea rax, [r9 + 0xa]
cmp rcx, rax
ja 0x14011214c
lea rcx, [r9 + 1]
cmp r8, rcx
ja 0x14011212d
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x140112113
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x1401120f9
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x1401120da
lea rax, [r9 + 3]
cmp r8, rax
ja 0x1401120c0
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x14011209b
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x140112078
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x140112059
lea rax, [r9 + 5]
cmp r8, rax
ja 0x140111e40
mov r8, rcx
lea r9, [rcx + 0x7a]
jmp 0x140111e40
lea rcx, [rsi + r12]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
sub r11b, 0x23
jmp 0x140111e30
lea rcx, [rsi + r13]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
add r11b, 0x6f
jmp 0x140111dd0
movabs rcx, 0x75783af71fade649
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
inc r11b
jmp 0x140111d66
lea edx, [rsi - 0x28]
movzx eax, dil
and al, dl
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x1401126ff
lea ecx, [rsi + 0x7a]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x56
inc r9
dec rsi
inc rsi
jmp 0x140111d53
lea edx, [rsi + 0x1c]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
dec rsi
inc rsi
jmp 0x140111d53
lea ecx, [rsi - 0x42]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x32
jmp 0x140112749
lea edx, [rsi + 0x60]
movzx eax, dl
and al, dil
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140112797
lea ecx, [rsi + 2]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0xe
jmp 0x14011279a
lea ecx, [rsi - 0x5c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x7c
jmp 0x1401127d5
lea edx, [rsi + 0x46]
movzx eax, dl
and al, dil
mov ecx, listen
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14011280b
lea ecx, [rsi - 0x18]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x58
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140111d53
lea ecx, [rsi + 0x7d]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x6b
mov byte [rsp + rsi + 0x28], r11b
inc rsi
jmp 0x140111d53
lea ecx, [rsi + 0x1f]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
add r11b, 0x27
cmp r9, 5
jb 0x140112189
lea ecx, [rsi - 0x46]
movzx eax, cl
and al, dil
add al, al
sub cl, al
add cl, dil
lea r11d, [rcx*2 - 0x2c]
jmp 0x1401126ff
lea ecx, [rsi - 0x3f]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x47
cmp r8, 0x28
jae 0x1401125fb
lea rax, [r9 + 9]
cmp r8, rax
jbe 0x140112522
lea ecx, [rsi + 0xe]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x62
jmp 0x1401121ab
lea ecx, [rsi + 0x63]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
add r11b, 0x4b
lea rax, [r9 + r8]
cmp rax, 3
je 0x14011261e
lea rax, [r9 + 0x5a]
cmp r8, rax
jbe 0x140112459
lea ecx, [rsi - 0x4d]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
add r11b, 0x1b
jmp 0x1401121e3
lea edx, [rsi + 0x22]
movzx eax, dl
and al, dil
mov ecx, 9
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140111d53
lea ecx, [rsi - 0x3c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x5c
jmp 0x14011280b
movzx r10d, sil
lea edx, [r10 + 0x66]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1401127d9
lea ecx, [rsi + 8]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x38
jmp 0x14011279a
lea edx, [rsi - 0x56]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140112797
movzx r10d, sil
lea ecx, [r10 + 0x4c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x14
jmp 0x14011274d
lea edx, [rsi - 0x12]
movzx eax, dl
and al, dil
mov ecx, 0x3f
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
dec rsi
inc rsi
jmp 0x140111d53
lea edx, [rsi - 0x70]
movzx eax, dl
and al, dil
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc r9
dec rsi
inc rsi
jmp 0x140111d53
lea ecx, [rsi + 0x32]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x5e
jmp 0x1401126ff
lea rax, [r9 + 2]
cmp r8, rax
jae 0x1401123a6
lea rcx, [rsi + r10]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
add r11b, 0x37
jmp 0x140112226
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1401123dc
lea edx, [rsi - 0x4a]
movzx eax, dl
and al, dil
mov ecx, 3
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140111d53
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140112404
movzx r10d, sil
lea ecx, [r10 + 0x72]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x1e
jmp 0x1401127d9
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14011242c
lea edx, [rsi - 0x30]
movzx eax, dl
and al, dil
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14011279a
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140112226
lea ecx, [rsi - 0x16]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x66
dec rsi
inc rsi
jmp 0x140111d53
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14011247c
lea ecx, [rsi + 0x11]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x77
jmp 0x1401126ff
inc rax
cmp r8, rax
jne 0x1401124a7
lea ecx, [rsi + 0x6f]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 9
inc r9
dec rsi
inc rsi
jmp 0x140111d53
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401124ca
lea ecx, [rsi - 0x19]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x51
jmp 0x14011279a
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401124ed
lea ecx, [rsi - 0x5d]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x75
jmp 0x14011280b
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401121e3
lea ecx, [rsi + 1]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 7
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140111d53
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140112558
lea edx, [rsi + 0x6c]
movzx eax, dl
and al, dil
mov ecx, 6
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140111d53
inc rax
cmp r8, rax
jne 0x14011257f
lea edx, [rsi - 0x36]
movzx eax, dl
and al, dil
mov ecx, 0x3d
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14011280b
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401125a2
lea ecx, [rsi - 0x1c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x3c
jmp 0x140112797
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401125cf
movzx r10d, sil
lea edx, [r10 + 0x42]
movzx eax, dl
and al, dil
mov ecx, Ordinal_26
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14011274d
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401121ab
lea edx, [rsi + 0x5c]
movzx eax, dl
and al, dil
mov ecx, 0x3e
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1401126ff
movzx r10d, sil
lea edx, [r10 + 0x18]
movzx eax, dl
and al, dil
movzx ecx, dil
sub cl, al
add cl, 0x2c
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x14011274d
movzx r10d, sil
lea ecx, [r10 + 0x76]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rcx - 0x3a]
jmp 0x1401127d9
movabs rcx, 0xc1397d1f91af64a9
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
add r11b, 0x61
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140111d53
movabs rcx, 0xc78997f845da2f31
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
sub r11b, 0x57
jmp 0x140112797
movabs rcx, 0xc45ac1accfa4717
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
add r11b, 0x5f
inc r9
dec rsi
inc rsi
jmp 0x140111d53
movabs rcx, 0xcdd9b2d0fa04f9b9
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
sub r11b, 0xf
jmp 0x1401126ff
movabs rcx, 0x5101c03d541a5efd
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
add r11b, 0x15
movzx edi, dl
lea ecx, [rsi + 0x69]
movzx eax, dil
and al, cl
add al, al
sub dil, al
add dil, 0x21
add dil, cl
mov byte [rsp + rsi + 0x28], dil
inc r9
dec rsi
inc rsi
jmp 0x140111d53
movabs rcx, 0x95bdd45fdb3a76e3
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
sub r11b, 0x35
movzx edi, dl
movzx r10d, sil
sub r10b, 0x39
movzx eax, dil
and al, r10b
add al, al
sub dil, al
sub r10b, 0x71
add dil, r10b
add dil, r11b
mov byte [rsp + rsi + 0x28], dil
movabs r10, 0x1f35fca4e97aa6af
jmp 0x140112797
movabs rcx, 0x5751db1608452985
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
add r11b, 0x5d
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x140111d53
movabs rcx, 0xda79e882625a8ec9
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
sub r11b, 0x7f
movzx edi, dl
movzx r10d, sil
add r10b, 0x25
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
sub r10b, 3
add r10b, dil
movzx eax, r10b
mov byte [rsp + rsi + 0x28], al
inc r9
add rax, r9
sub rsi, rax
movabs r10, 0x1f35fca4e97aa6af
lea edx, [rsi - 0x2c]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add cl, dl
add cl, dil
mov byte [rsp + rsi + 0x28], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rsi, rax
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140111d53
movabs rcx, 0x5da1f5eebc6ff40d
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdx + rcx]
sub r11b, 0x5b
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140111d53
sub sil, 0x15
movzx eax, dil
and al, sil
add al, al
sub dil, al
lea r11d, [rsi + rdi]
sub r11b, 0x6d
jmp 0x140111d50
sub sil, 0x73
movzx eax, dil
and al, sil
add al, al
sub dil, al
lea r11d, [rsi + rdi]
add r11b, 0x25
jmp 0x140111d40
lea rdx, [rbp + 0x167fcbc]
jmp 0x1401128cc
lea rdx, [rbp + 0x122a36b]
jmp 0x1401128cc
lea rdx, [rsp + 0x28]
mov rcx, qword [0x14022e168]
call fcn.1400651a0
mov dword [rsp + 0x68], 0x616d535c
mov dword [rsp + 0x6c], 0x5b7e6a68
mov dword [rsp + 0x70], 0x786d6664
mov byte [rsp + 0x74], recv
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x75], xmm0
mov dword [rbp - 0x7b], eax
mov word [rbp - 0x77], ax
movabs rsi, 0x552158b5bc820500
movabs r14, 0xfe2c1e63a0922d00
movabs r12, 0xff640a2135860f00
movzx r11d, byte [rsp + 0x20]
nop word [rax + rax]
mov rax, qword [0x14022e4a8]
mov r8, qword [0x14022e4a0]
nop
mov r9, rbx
cmp r9, 0x23
jae 0x140112f7d
movzx r10d, byte [rsp + r9 + 0x68]
mov edi, r10d
cmp rax, r9
ja 0x140112f74
lea rcx, [r8 + 1]
cmp rax, rcx
jae 0x14011297e
lea rdx, [r9 + rsi]
mov rcx, rdx
and rcx, rdi
imul r11, rcx, 0xfffffffffffffffe
add r11, rdx
add r11, rdi
jmp 0x1401129a0
je 0x140112f1c
lea rcx, [r8 + 3]
cmp rax, rcx
je 0x140112ef2
lea rcx, [r8 + 4]
cmp rax, rcx
je 0x140112eda
nop
cmp r8, r9
ja 0x140112f6b
lea rdx, [r8 + 5]
cmp rax, rdx
jae 0x1401129c7
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
jmp 0x140112a03
lea rcx, [r8 + 1]
cmp rax, rcx
je 0x140112ea5
inc rcx
cmp rax, rcx
je 0x140112cc0
lea rcx, [r8 + 3]
cmp rax, rcx
je 0x140112e76
lea rcx, [r8 + 4]
cmp rax, rcx
je 0x140112eda
cmp rax, rdx
je 0x140112e2b
lea rcx, [r8 + rax]
cmp rcx, r9
jbe 0x140112c35
lea rcx, [r8 + 0x10]
cmp rax, rcx
je 0x140112ea5
lea rcx, [r8 + 0x64]
cmp rax, rcx
je 0x140112c14
lea rcx, [r8 + 4]
cmp rax, rcx
je 0x140112cc0
lea rcx, [r8 + 0x3e8]
cmp rax, rcx
je 0x140112e76
lea rcx, [r8 + 0x41]
cmp rax, rcx
je 0x140112eda
lea rcx, [r8 + 0x28]
cmp rax, rcx
je 0x140112d91
lea rcx, [r8 + 1]
cmp rax, rcx
je 0x140112c92
lea rcx, [r8 + 6]
cmp rax, rcx
je 0x140112e2b
lea rcx, [r8 + 0x1000]
cmp rax, rcx
je 0x140112c62
lea rcx, [r8 + 0xa]
cmp rax, rcx
je 0x140112a10
lea rax, [r8 + 0x5a]
lea r8, [rax + 0x42]
lea rcx, [r8 + 0x40]
cmp rax, rcx
jb 0x140112f56
lea rcx, [r8 + 0x3e8]
cmp rax, rcx
jb 0x140112f41
lea rcx, [r8 + 8]
cmp rax, rcx
jb 0x140112bdc
lea rcx, [r8 + 0x61]
cmp rax, rcx
jb 0x140112bc4
lea rcx, [r8 + 1]
cmp rax, rcx
jb 0x1401129b2
lea rcx, [r8 + 0x64]
cmp rax, rcx
jb 0x140112c41
lea rcx, [r8 + 4]
cmp rax, rcx
jb 0x140112d02
lea rcx, [r8 + 0xa]
cmp rax, rcx
jb 0x140112d5a
lea rcx, [r8 + 0x41]
cmp rax, rcx
jb 0x140112bf4
lea rcx, [r8 + 0x28]
cmp rax, rcx
jb 0x140112a10
lea rax, [r8 + 2]
lea r8, [rax + 0x200]
lea rcx, [r8 + 0x80]
cmp rax, rcx
ja 0x140112c62
lea rcx, [r8 + 0x61]
cmp rax, rcx
ja 0x140112e2b
lea rcx, [r8 + 0x10]
cmp rax, rcx
ja 0x140112c92
lea rcx, [r8 + 0x5a]
cmp rax, rcx
ja 0x140112d91
lea rcx, [r8 + 4]
cmp rax, rcx
ja 0x140112eda
lea rcx, [r8 + 0x3e8]
cmp rax, rcx
ja 0x140112e76
lea rcx, [r8 + 8]
cmp rax, rcx
ja 0x140112cc0
lea rcx, [r8 + 0x28]
cmp rax, rcx
ja 0x140112c14
lea rcx, [r8 + 1]
cmp rax, rcx
ja 0x140112ea5
lea rcx, [r8 + 0x64]
cmp rax, rcx
ja 0x140112a10
lea rax, [r8 + 5]
lea r8, [rax + 0x1000]
jmp 0x140112a10
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
jmp 0x1401129a0
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
jmp 0x140112956
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
mov byte [rsp + r9 + 0x68], r11b
inc r9
jmp 0x140112943
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
inc r8
dec r9
inc r9
jmp 0x140112943
lea rcx, [r8 + 0x3e8]
cmp rax, rcx
jae 0x140112c59
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
jmp 0x140112ceb
lea rcx, [r8 + 1]
cmp rax, rcx
jne 0x140112c89
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
movzx ecx, byte [rsp + r9 + 0x68]
add rcx, r8
add r9, rcx
inc r9
jmp 0x140112943
lea rcx, [r8 + 3]
cmp rax, rcx
jne 0x140112caa
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
jmp 0x140112e06
lea rcx, [r8 + 5]
cmp rax, rcx
je 0x140112e76
lea rcx, [r8 + 7]
cmp rax, rcx
jne 0x140112cde
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
dec r9
inc r9
jmp 0x140112943
lea rcx, [r8 + 2]
cmp rax, rcx
je 0x140112ea5
lea rcx, [r8 + rax]
cmp rcx, 8
je 0x140112df6
lea rcx, [r8 + 0x7a]
cmp rax, rcx
jbe 0x140112d17
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
jmp 0x140112d47
lea rcx, [r8 + 1]
cmp rax, rcx
je 0x140112ea5
lea rcx, [r8 + 3]
cmp rax, rcx
je 0x140112cc0
lea rcx, [r8 + 5]
cmp rax, rcx
je 0x140112eda
lea rcx, [r8 + 8]
cmp rax, rcx
je 0x140112c62
cmp rax, 0x10
jae 0x140112ddb
lea rcx, [r8 + 0x2a]
cmp rax, rcx
jbe 0x140112d6f
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
jmp 0x140112db6
lea rcx, [r8 + 1]
cmp rax, rcx
je 0x140112c62
inc rcx
cmp rax, rcx
je 0x140112e2b
lea rcx, [r8 + 3]
cmp rax, rcx
jne 0x140112da9
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
jmp 0x140112f03
lea rcx, [r8 + 6]
cmp rax, rcx
je 0x140112cc0
cmp r8, 0x40
jb 0x140112c07
movzx ecx, r9b
and cl, r10b
add cl, cl
movzx edx, r9b
sub dl, cl
add dl, r10b
lea r11d, [rdx + rdx]
jmp 0x140112eb8
movzx ecx, r9b
and cl, r10b
add cl, cl
movzx r11d, r10b
sub r11b, cl
add r11b, r10b
add r11b, r9b
jmp 0x140112e89
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
movzx edx, r10b
and dl, r9b
add dl, dl
movzx ecx, r10b
sub cl, dl
add cl, r9b
movzx edx, cl
mov byte [rsp + r9 + 0x68], dl
inc r8
add rdx, r8
sub r9, rdx
jmp 0x140112e3e
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
movzx ecx, r10b
and cl, r9b
add cl, cl
sub r10b, cl
add r10b, r9b
mov byte [rsp + r9 + 0x68], r10b
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r9, rcx
movzx ecx, byte [rsp + r9 + 0x68]
add rcx, r8
add r9, rcx
inc r9
jmp 0x140112943
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
movzx ecx, r10b
and cl, r9b
add cl, cl
sub r10b, cl
add r10b, r11b
add r10b, r9b
mov byte [rsp + r9 + 0x68], r10b
add rax, r8
jmp 0x140112f03
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
movzx ecx, r10b
and cl, r9b
add cl, cl
sub r10b, cl
add r10b, r9b
mov byte [rsp + r9 + 0x68], r10b
inc r8
dec r9
inc r9
jmp 0x140112943
movzx edx, r9b
and dl, r10b
add dl, dl
movzx r11d, r9b
sub r11b, dl
add r11b, r10b
add rax, r8
jmp 0x140112f03
lea rcx, [r9 + r14]
and dil, cl
add dil, dil
sub cl, dil
lea r11d, [r10 + rcx]
movzx ecx, r11b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r9, rdx
inc r9
jmp 0x140112943
lea rcx, [r9 + r12]
and dil, cl
add dil, dil
sub cl, dil
lea r11d, [r10 + rcx]
movzx ecx, byte [rsp + r9 + 0x68]
add rcx, r8
add r9, rcx
inc r9
jmp 0x140112943
movzx ecx, r9b
and cl, r10b
add cl, cl
sub r9b, cl
lea r11d, [r10 + r9]
jmp 0x140112940
movzx eax, r9b
and al, r10b
add al, al
sub r9b, al
lea r11d, [r10 + r9]
jmp 0x140112930
lea rdi, [rbp + 0x15b5b68]
jmp 0x140112f82
lea rdi, [rbp + 0x11d6068]
jmp 0x140112f82
lea rdi, [rsp + 0x68]
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x118]
call fcn.1400029f0
nop
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x140112fa0
mov rdx, rdi
lea rcx, [rbp + 0x118]
call fcn.140004460
nop
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x70]
call fcn.1400042d0
nop
lea r8, [rbp + 0x118]
mov rdx, rax
lea rcx, [rbp + 0xd8]
call fcn.1400031a0
nop
lea rcx, [rbp + 0x70]
call fcn.140002820
xor r8d, r8d
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x30]
call fcn.1400d87e0
nop
mov edi, 1
mov dword [rsp + 0x60], edi
lea rcx, [rbp + 0x30]
call fcn.1400d2900
test al, al
je 0x140113048
xor r8d, r8d
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x10]
call fcn.1400d87e0
nop
mov edi, 3
mov dword [rsp + 0x60], edi
lea rdx, [rbp + 0x10]
lea rcx, [rbp]
call fcn.1400d2ad0
cmp dword [rax], edi
jne 0x140113048
xor sil, sil
jmp 0x14011304b
mov sil, 1
test dil, 2
je 0x14011305e
and edi, 0xfffffffd
lea rcx, [rbp + 0x10]
call fcn.140058bf0
nop
test dil, 1
je 0x14011306d
lea rcx, [rbp + 0x30]
call fcn.140058bf0
test sil, sil
je 0x140113cd2
mov dword [rbp - 0x70], 0x12242f09
mov dword [rbp - 0x6c], 0x57122c28
mov dword [rbp - 0x68], 0xf36360e
mov dword [rbp - 0x64], 0x3f4e3f09
mov dword [rbp - 0x60], 0x593a3501
mov byte [rbp - 0x5c], 0xa4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x5b], xmm0
mov qword [rbp - 0x4b], rax
mov dword [rbp - 0x43], eax
mov word [rbp - 0x3f], ax
movabs r12, 0xd908530a0f28248
movabs r13, 0x7a14aeb5a8869488
movzx r11d, byte [rsp + 0x20]
nop dword [rax + rax]
mov r8, qword [0x14022e4a8]
mov r9, qword [0x14022e4a0]
nop
mov rsi, rbx
cmp rsi, 0x33
jae 0x140113cab
movzx edi, byte [rbp + rsi - 0x70]
mov r14d, edi
cmp r8, rsi
ja 0x140113ca2
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140113121
lea rcx, [rsi + r12]
mov rax, rcx
and rax, r14
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, r14
add r11b, 8
jmp 0x14011315b
je 0x140113c22
lea rax, [r9 + 3]
cmp r8, rax
je 0x140113bf0
lea rax, [r9 + 5]
cmp r8, rax
je 0x140113bab
lea rax, [r9 + 4]
cmp r8, rax
je 0x140113b86
lea rax, [r9 + 6]
cmp r8, rax
je 0x140113b40
movzx r10d, sil
nop
cmp r9, rsi
ja 0x140113c99
lea rax, [r9 + 0x2a]
cmp r8, rax
jae 0x14011318a
lea ecx, [r10 - 0x18]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x58
jmp 0x1401131c0
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x140113b28
lea rax, [r9 + 3]
cmp r8, rax
je 0x140113b05
lea rax, [rcx + 1]
cmp r8, rax
je 0x140113aea
lea rax, [r9 + 6]
cmp r8, rax
je 0x140113abb
nop
lea rax, [r8 + r9]
cmp rax, rsi
jbe 0x14011373f
nop dword [rax]
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14011371f
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1401136f9
lea rax, [r9 + 8]
cmp r8, rax
je 0x1401136d6
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x1401136bb
lea rax, [r9 + 4]
cmp r8, rax
je 0x14011369b
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x14011367e
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x140113663
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x140113646
lea rax, [r9 + 5]
cmp r8, rax
je 0x14011361b
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x1401131d0
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x3e8]
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x140113c78
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x140113c57
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x1401133cd
lea rax, [r9 + 6]
cmp r8, rax
jb 0x1401133ad
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14011338d
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x1401135cd
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x140113580
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14011353c
lea rax, [r9 + 1]
cmp r8, rax
jb 0x140113517
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x1401131d0
lea r8, [r9 + 0x200]
lea r9, [r8 + 0x42]
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x1401134ec
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x1401134cf
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1401134b4
lea rax, [r9 + 2]
cmp r8, rax
ja 0x140113497
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x14011347f
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14011345f
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x140113438
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14011340e
lea rcx, [r9 + 0x7a]
cmp r8, rcx
ja 0x1401133ee
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x1401131d0
mov r8, rcx
lea r9, [rcx + 0x400]
jmp 0x1401131d0
lea edx, [r10 + 0x18]
movzx eax, dl
and al, dil
mov ecx, Ordinal_45
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x1401131c0
lea edx, [r10 - 0x78]
movzx eax, dl
and al, dil
mov ecx, 0x24
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140113160
sub r10b, 8
movzx eax, r10b
and al, dil
mov ecx, Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dil
jmp 0x1401130f5
lea edx, [r10 + 0x40]
movzx eax, dil
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x140113b5a
sub r10b, 0x50
movzx eax, dil
and al, r10b
mov ecx, Ordinal_26
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, r10b
inc r9
dec rsi
inc rsi
jmp 0x1401130e3
add r10b, 0x20
movzx eax, dil
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, r10b
dec rsi
inc rsi
jmp 0x1401130e3
lea edx, [r10 - 0x70]
movzx eax, dil
and al, dl
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x140113bca
movzx eax, dil
and al, r10b
add al, al
sub dil, al
lea r11d, [r10 + rdi]
add r8, r9
jmp 0x140113c09
add r10b, 0x70
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x10
jmp 0x140113c09
lea ecx, [r10 - 0x20]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x20
jmp 0x140113a53
add r10b, 0x50
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x30
jmp 0x140113a7d
sub r10b, 0x40
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x40
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401130e3
add r10b, 0x58
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x68
mov byte [rbp + rsi - 0x70], r11b
inc rsi
jmp 0x1401130e3
lea edx, [r10 - 0x38]
movzx eax, dil
and al, dl
add al, al
movzx r11d, dil
sub r11b, al
sub r11b, 0x78
add r11b, dl
cmp r9, 0x3e8
jb 0x14011352f
lea edx, [r10 - 0x50]
movzx eax, dil
and al, dl
mov ecx, Ordinal_26
sub cl, al
add cl, cl
add cl, dil
add cl, dl
lea r11d, [rcx + rcx]
jmp 0x140113b5a
lea edx, [r10 + 0x38]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
cmp r8, 0x7a
jae 0x140113a1c
lea rax, [r9 + 0x400]
cmp r8, rax
jbe 0x140113946
lea ecx, [r10 + 0x10]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x70
jmp 0x140113556
lea edx, [r10 - 0x58]
movzx eax, dl
and al, dil
mov ecx, 0x34
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
lea rax, [r8 + r9]
cmp rax, 1
je 0x140113a3b
lea rax, [r9 + 0x41]
cmp r8, rax
jbe 0x140113863
lea ecx, [r10 + 0x28]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x18
jmp 0x14011359b
add r10b, 0x70
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x10
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401130e3
sub r10b, 0x20
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x20
jmp 0x140113a7d
lea ecx, [r10 + 0x50]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x30
jmp 0x140113a53
sub r10b, 0x40
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x40
jmp 0x140113c09
add r10b, 0x30
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x50
add r8, r9
jmp 0x140113c09
lea ecx, [r10 - 0x60]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x60
jmp 0x140113bca
add r10b, 0x10
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x70
dec rsi
inc rsi
jmp 0x1401130e3
add r10b, 0x80
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
add r11b, 0x80
inc r9
dec rsi
inc rsi
jmp 0x1401130e3
lea edx, [r10 - 0x10]
movzx eax, dl
and al, dil
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140113b5a
lea rax, [r9 + 0x5a]
cmp r8, rax
jae 0x14011375c
lea edx, [r10 + 0x48]
movzx eax, dl
and al, dil
mov ecx, 4
jmp 0x1401135dc
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140113794
sub r10b, 0x30
movzx eax, r10b
and al, dil
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dil
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401130e3
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401137bd
lea edx, [r10 - 0x10]
movzx eax, dl
and al, dil
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140113a53
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401137e3
add r10b, 0x80
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
add r11b, 0x80
jmp 0x140113c09
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14011380c
add r10b, 0x10
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x70
add r8, r9
jmp 0x140113c09
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14011383b
sub r10b, 0x40
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x40
inc r9
dec rsi
inc rsi
jmp 0x1401130e3
lea rax, [r9 + 9]
cmp r8, rax
jne 0x1401135e8
lea ecx, [r10 + 0x50]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x30
jmp 0x140113b5a
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140113887
lea ecx, [r10 - 0x48]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 8
jmp 0x140113b5a
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401138b7
sub r10b, 0x28
movzx eax, r10b
and al, dil
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dil
dec rsi
inc rsi
jmp 0x1401130e3
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401138e1
sub r10b, 0x78
movzx eax, r10b
and al, dil
mov ecx, 0x24
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dil
jmp 0x140113c09
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14011390a
lea edx, [r10 + 0x18]
movzx eax, dl
and al, dil
mov ecx, Ordinal_45
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140113a53
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14011359b
add r10b, 0x38
movzx eax, r10b
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dil
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401130e3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14011397a
sub r10b, 0x60
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x60
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401130e3
inc rax
cmp r8, rax
jne 0x14011399d
lea ecx, [r10 - 0x40]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x40
jmp 0x140113a53
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401139c1
lea ecx, [r10 + 0x70]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x10
jmp 0x140113bca
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401139e5
movzx eax, dil
and al, r10b
add al, al
sub dil, al
lea r11d, [r10 + rdi]
dec rsi
inc rsi
jmp 0x1401130e3
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140113556
sub r10b, 0x70
movzx eax, dil
and al, r10b
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, r10b
inc r9
dec rsi
inc rsi
jmp 0x1401130e3
lea edx, [r10 + 0x40]
movzx eax, dil
and al, dl
movzx ecx, dil
sub cl, al
add cl, 0x20
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x140113bca
lea edx, [r10 - 0x30]
movzx eax, dl
and al, dil
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r10b, 0x18
movzx eax, r10b
and al, dil
mov ecx, Ordinal_45
sub cl, al
add cl, cl
add cl, r10b
add cl, dil
movzx eax, cl
mov byte [rbp + rsi - 0x70], al
inc r9
add rax, r9
sub rsi, rax
lea edx, [rsi + 0x60]
movzx eax, dil
and al, dl
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add cl, dil
add cl, dl
mov byte [rbp + rsi - 0x70], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rsi, rax
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401130e3
sub r10b, 8
movzx eax, r10b
and al, dil
mov ecx, Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dil
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401130e3
lea ecx, [r10 + 0x28]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x18
jmp 0x140113bca
sub r10b, 0x68
movzx eax, r10b
and al, dil
add al, al
sub r10b, al
lea r11d, [rdi + r10]
sub r11b, 0x28
dec rsi
inc rsi
jmp 0x1401130e3
lea ecx, [r10 + 0x78]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x48
jmp 0x140113b5a
movzx r10d, sil
lea ecx, [r10 + 0x58]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x68
sub r10b, 8
movzx eax, r10b
and al, dil
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add cl, r10b
add cl, dil
mov byte [rbp + rsi - 0x70], cl
inc r9
dec rsi
inc rsi
jmp 0x1401130e3
lea edx, [rsi + 0x38]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
dec rsi
inc rsi
jmp 0x1401130e3
movzx r10d, sil
lea edx, [r10 - 0x58]
movzx eax, dl
and al, dil
mov ecx, 0x34
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
sub r10b, 0x78
movzx eax, r10b
and al, dil
mov ecx, 0x24
sub cl, al
add cl, cl
add cl, r10b
add cl, dil
add cl, r11b
mov byte [rbp + rsi - 0x70], cl
add r8, r9
jmp 0x140113c09
lea rcx, [rsi + r13]
and r14b, cl
mov eax, 0x24
sub al, r14b
lea r11d, [rax + rax]
add r11b, dil
add r11b, cl
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x1401130e3
movabs rcx, 0x28b18f91e2d786d8
add rcx, rsi
and r14b, cl
mov eax, recv
sub al, r14b
lea r11d, [rax + rax]
add r11b, dil
add r11b, cl
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401130e3
add r10b, 0x68
movzx eax, dil
and al, r10b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, r10b
jmp 0x1401130e0
sub r10b, 0x28
movzx eax, r10b
and al, dil
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dil
jmp 0x1401130d0
lea rdx, [rbp + 0x16f87f0]
jmp 0x140113caf
lea rdx, [rbp + 0x620a38]
jmp 0x140113caf
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14022e168]
call fcn.1400651a0
xor r8d, r8d
lea rdx, [0x1401b2b3f]
mov rcx, r15
call fcn.140123ab0
jmp 0x140113e62
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0xf8]
call fcn.1400029f0
lea rcx, [rbp + 0xf8]
call fcn.140058c60
nop
xor r8d, r8d
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x50]
call fcn.1400d87e0
nop
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xc8]
call fcn.1400d9b30
nop
lea rcx, [rbp + 0x50]
call fcn.140058bf0
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
lea rdx, [rbp + 0xc8]
lea rcx, [rbp - 0x20]
call fcn.1400e5820
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xa8]
call fcn.1400e57f0
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x140113d57
call fcn.1400d93e0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
movdqu xmmword [rbp - 0x10], xmm0
lea rdx, [rbp + 0xc8]
lea rcx, [rbp - 0x10]
call fcn.1400f0960
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xb8]
call fcn.1400d9cb0
nop
nop word [rax + rax]
mov rdi, qword [rbp + 0xa8]
cmp rdi, qword [rbp + 0xb8]
je 0x140113e10
add rdi, 0x20
mov rdx, rdi
lea rcx, [rbp + 8]
call fcn.1400d2ad0
cmp dword [rax], 2
jne 0x140113dfa
mov rdx, rdi
lea rcx, [rbp + 0x98]
call fcn.1400fbfe0
mov qword [rbp - 0x38], rbx
mov rax, qword [rbp + 0x98]
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140113ec0
test al, al
jle 0x140113dfa
mov rbx, qword [rbp + 0x98]
mov rdx, rdi
lea rcx, [rbp + 0xf8]
call fcn.1400d7da0
lea rcx, [rbp + 0xa8]
call fcn.1400d9690
test eax, eax
jne 0x140113eae
jmp 0x140113d90
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x140113e22
call fcn.1400d93e0
nop
mov rcx, qword [rbp + 0xb0]
test rcx, rcx
je 0x140113e34
call fcn.1400d93e0
nop
mov rcx, qword [rbp + 0xd0]
test rcx, rcx
je 0x140113e45
call fcn.1400d93e0
lea rdx, [rbp + 0xf8]
mov rcx, r15
call fcn.1400d7dd0
nop
lea rcx, [rbp + 0xf8]
call fcn.140058bf0
nop
lea rcx, [rbp + 0xd8]
call fcn.140002820
nop
lea rcx, [rbp + 0x118]
call fcn.140002820
mov rax, r15
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.140198890
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov edx, eax
lea rcx, str.directory_iterator::operator
call fcn.1400d9630
int3