Function at 0x14004abd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
mov rax, qword [0x140278800]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r12d, edx
mov r13, rcx
test edx, edx
jne 0x14004ac0b
xor eax, eax
jmp 0x14004c351
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1402ce0c0], eax
jle 0x14004c337
lea rcx, [0x1402ce0c0]
call fcn.140212fd0
cmp dword [0x1402ce0c0], 0xffffffff
jne 0x14004c337
mov dword [rbp - 0x51], 0x38de32dc
mov dword [rbp - 0x4d], 0x474b3e3b
mov dword [rbp - 0x49], 0xbc414ba4
mov dword [rbp - 0x45], 0x91414ebd
mov dword [rbp - 0x41], 0x4844ad45
mov dword [rbp - 0x3d], 0x5859b4b7
mov word [rbp - 0x39], 0xa98d
mov byte [rbp - 0x37], 0xc2
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x36], xmm0
mov qword [rbp - 0x26], rax
movabs rsi, 0xbbdf49b776b36042
movabs rdx, 0x6dd224e2ed1d33fe
mov r14, qword [0x1402cdf18]
mov r15, qword [0x1402cdf20]
movzx r11d, byte [rbp - 0x59]
nop dword [rax]
mov r8, r15
mov r9, r14
nop word [rax + rax]
xor edi, edi
movabs rcx, 0x76a91be42a394dba
cmp rdi, 0x33
jae 0x14004b810
movzx ebx, byte [rbp + rdi - 0x51]
movzx r10d, bl
nop
cmp r8, rdi
ja 0x14004b807
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14004ad0b
add rcx, rdi
mov rax, rcx
and rax, rbx
imul r11, rax, 0xfffffffffffffffe
add r11, rcx
add r11, rbx
sub r11b, 0x16
jmp 0x14004ad44
je 0x14004b78d
inc rax
cmp r8, rax
je 0x14004b717
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004b6d1
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004b694
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004b63f
movzx r10d, bl
nop dword [rax + rax]
cmp r9, rdi
ja 0x14004b7fe
lea rax, [r9 + 0x28]
cmp r8, rax
jae 0x14004ad70
lea rdx, [rdi + rsi]
mov ecx, Ordinal_27
jmp 0x14004af73
lea rax, [r9 + 1]
cmp r8, rax
je 0x14004b62e
inc rax
cmp r8, rax
je 0x14004b5fa
lea rax, [r9 + 3]
cmp r8, rax
je 0x14004b5d9
lea rax, [r9 + 5]
cmp r8, rax
je 0x14004b5c5
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x14004b324
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x14004b30b
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14004b2da
lea rax, [r9 + 6]
cmp r8, rax
je 0x14004b2ac
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14004b28e
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14004b275
lea rax, [r9 + 2]
cmp r8, rax
je 0x14004b25c
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x14004b23e
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14004b220
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x14004b202
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x14004adb0
lea r8, [r9 + 4]
lea r9, [r8 + 3]
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14004b7e2
lea rax, [r9 + 0x3e8]
cmp r8, rax
jb 0x14004b7c6
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14004afc5
lea rax, [r9 + 8]
cmp r8, rax
jb 0x14004af93
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14004af6b
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x14004b1bd
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14004b17c
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14004b144
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14004b114
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14004adb0
lea r8, [r9 + 0x41]
lea r9, [r8 + 0x7a]
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x14004b0fb
lea rax, [r9 + 3]
cmp r8, rax
ja 0x14004b0e2
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x14004b0c9
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x14004b0ab
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14004b08d
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14004b06f
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x14004b046
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x14004b01a
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14004b001
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14004adb0
lea r8, [r9 + 9]
lea r9, [r8 + 0x80]
jmp 0x14004adb0
add rdx, rdi
mov ecx, 7
movzx eax, bl
and al, dl
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004ada3
movabs rdx, 0x807fed1a98aa988a
add rdx, rdi
movzx eax, bl
and al, dl
mov ecx, Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004ad50
movabs rdx, 0x932db5524437fd16
add rdx, rdi
movzx eax, bl
and al, dl
mov ecx, 0x33
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movabs rdx, 0x6dd224e2ed1d33fe
movabs rcx, 0x76a91be42a394dba
jmp 0x14004ace0
lea ecx, [rdi + 0x10]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x70
jmp 0x14004b663
lea ecx, [rdi - 0x64]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x44
inc r9
dec rdi
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
lea ecx, [rdi + 0x28]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x18
dec rdi
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
lea edx, [rdi - 0x4c]
movzx eax, dl
and al, bl
mov ecx, 0xa
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b6b7
lea edx, [rdi + 0x40]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b6f1
lea edx, [rdi - 0x34]
movzx eax, dl
and al, bl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b6f4
lea ecx, [rdi + 0x58]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x68
jmp 0x14004b73b
lea ecx, [rdi - 0x1c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x3c
jmp 0x14004b766
lea ecx, [rdi + 0x70]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x10
jmp 0x14004b7a9
lea edx, [rdi - 0x32]
movzx eax, dl
and al, bl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
mov byte [rbp + rdi - 0x51], r11b
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
lea ecx, [rdi + 0x5a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x76
cmp r9, 0x42
jb 0x14004b12d
lea ecx, [rdi + 0x1c]
movzx eax, cl
and al, bl
mov edx, reloc.WLDAP32.dll_Ordinal_30
sub dl, al
add dl, dl
add dl, cl
add dl, bl
lea r11d, [rdx + rdx]
jmp 0x14004b663
lea ecx, [rdi - 0x1a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x4a
cmp r8, 4
jae 0x14004b58f
lea rcx, [r9 + 3]
cmp r8, rcx
jbe 0x14004b4f8
lea ecx, [rdi - 0x6c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0xc
jmp 0x14004b158
lea ecx, [rdi + 0x72]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x1e
lea rax, [r9 + r8]
cmp rax, 0x10
je 0x14004b5ab
lea rax, [r9 + 0xa]
cmp r8, rax
jbe 0x14004b419
lea ecx, [rdi + 0x52]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x3e
jmp 0x14004b190
lea edx, [rdi - 0x74]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b7a9
lea edx, [rdi + 0x18]
movzx eax, dl
and al, bl
mov ecx, Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b766
movzx r10d, dil
lea ecx, [r10 - 0x5c]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x7c
jmp 0x14004b73f
lea ecx, [rdi + 0x30]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x50
jmp 0x14004b6f4
lea ecx, [rdi - 0x44]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x24
jmp 0x14004b6f1
lea edx, [rdi + 0x48]
movzx eax, dl
and al, bl
mov ecx, 4
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b6b7
lea edx, [rdi - 0x2c]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
dec rdi
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
lea edx, [rdi + 0x60]
movzx eax, dl
and al, bl
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc r9
dec rdi
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
lea ecx, [rdi - 0x14]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x74
jmp 0x14004b663
lea rax, [r9 + 0x41]
cmp r8, rax
jae 0x14004b351
movabs rcx, 0x76a91be42a394dba
add rcx, rdi
movzx eax, bl
and al, cl
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x16
jmp 0x14004b1d1
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004b378
lea edx, [rdi - 0x7c]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b7a9
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004b3a4
movzx r10d, dil
lea edx, [r10 + 0x6c]
movzx eax, dl
and al, bl
mov ecx, 6
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b73f
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14004b3db
lea edx, [rdi + 0x3c]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
dec rdi
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14004b1d1
lea edx, [rdi - 0x50]
movzx eax, dl
and al, bl
mov ecx, Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc r9
dec rdi
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004b43b
lea ecx, [rdi - 0x3a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x6a
jmp 0x14004b663
inc rax
cmp r8, rax
jne 0x14004b474
lea edx, [rdi + 0x3a]
movzx eax, dl
and al, bl
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
inc r9
dec rdi
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14004b4ab
lea edx, [rdi - 0x52]
movzx eax, dl
and al, bl
mov ecx, Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
dec rdi
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004b4cd
lea ecx, [rdi - 0x6a]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x1a
jmp 0x14004b6f1
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14004b190
lea edx, [rdi + 0x66]
movzx eax, dl
and al, bl
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b7a9
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14004b51a
lea ecx, [rdi + 8]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rbx + rcx]
sub r11b, 0x38
jmp 0x14004b7a9
cmp r8, rcx
jne 0x14004b53d
lea edx, [rdi + 0x64]
movzx eax, dl
and al, bl
mov ecx, Ordinal_35
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b6f4
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14004b564
lea edx, [rdi - 0x28]
movzx eax, dl
and al, bl
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b6f1
lea rax, [r9 + 9]
cmp r8, rax
jne 0x14004b158
lea edx, [rdi - 0x58]
movzx eax, dl
and al, bl
mov ecx, 0x34
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, bl
jmp 0x14004b663
lea edx, [rdi - 0x70]
movzx eax, dl
and al, bl
movzx ecx, bl
sub cl, al
add cl, 8
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x14004b6b7
movzx r10d, dil
lea ecx, [r10 + 4]
movzx eax, cl
and al, bl
add al, al
sub cl, al
lea r11d, [rcx - 0x1c]
jmp 0x14004b73f
movabs rcx, 0x5e7a60a11cf06986
mov eax, Ordinal_46
jmp 0x14004b6e0
movabs rcx, 0x712828d8c87dce12
add rcx, rdi
and bl, cl
add bl, bl
movzx r11d, r10b
sub r11b, bl
sub r11b, 0x7e
jmp 0x14004b6b0
movabs rax, 0x9683b9481f98972a
add rax, rdi
and bl, al
add bl, bl
sub r10b, bl
lea r11d, [rax + r10]
sub r11b, 0x26
inc r9
dec rdi
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
movabs rcx, 0xa931817fcb25fbb6
mov eax, 3
jmp 0x14004b64e
movabs rcx, 0xce8d11ef2240c4ce
mov eax, Ordinal_50
add rcx, rdi
and bl, cl
sub al, bl
lea r11d, [rax + rax]
add r11b, r10b
movzx ebx, r10b
add r11b, cl
lea edx, [rdi - 0x2a]
movzx eax, dl
and al, bl
mov ecx, reloc.WS2_32.dll_send
sub cl, al
add cl, cl
add cl, dl
add cl, bl
mov byte [rbp + rdi - 0x51], cl
inc r9
dec rdi
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
movabs rcx, 0x6966a9624e8f272
add rcx, rdi
and bl, cl
add bl, bl
movzx r11d, r10b
sub r11b, bl
sub r11b, 0x1e
movzx ebx, r10b
add r11b, cl
lea ecx, [rdi + 0x4a]
movzx eax, bl
and al, cl
add al, al
sub bl, al
sub bl, 6
add bl, cl
add bl, r11b
mov byte [rbp + rdi - 0x51], bl
jmp 0x14004b6f1
movabs rcx, 0x194432cdd07656fe
mov eax, 7
add rcx, rdi
and bl, cl
sub al, bl
lea r11d, [rax + rax]
add r11b, r10b
add r11b, cl
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
movabs rcx, 0x3e9fc33d27912016
add rcx, rdi
and bl, cl
mov eax, 0x33
sub al, bl
lea r11d, [rax + rax]
add r11b, r10b
add r11b, cl
movzx ebx, r10b
movzx r10d, dil
sub r10b, 0x42
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
sub r10b, 0x32
add r10b, bl
movzx eax, r10b
mov byte [rbp + rdi - 0x51], al
inc r9
add rax, r9
sub rdi, rax
lea ecx, [rdi + 0x78]
movzx eax, cl
and al, bl
add al, al
sub cl, al
sub cl, 0x48
add cl, bl
mov byte [rbp + rdi - 0x51], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
jmp 0x14004b7a9
movabs rax, 0x63fb53ac7eabe92e
add rax, rdi
and bl, al
add bl, bl
sub r10b, bl
lea r11d, [rax + r10]
sub r11b, 0x42
movzx eax, byte [rbp + rdi - 0x51]
add rax, r9
add rdi, rax
inc rdi
movabs rdx, 0x6dd224e2ed1d33fe
jmp 0x14004acc2
sub dil, 0x5e
movzx eax, dil
and al, bl
add al, al
sub dil, al
lea r11d, [rbx + rdi]
sub r11b, 0x6e
jmp 0x14004acb6
add dil, 0x2e
movzx eax, dil
and al, bl
add al, al
sub dil, al
lea r11d, [rbx + rdi]
sub r11b, 0x42
jmp 0x14004acac
lea rsi, [rbp + 0x14038a7]
jmp 0x14004b814
lea rsi, [rbp + 0xf98661]
jmp 0x14004b814
lea rsi, [rbp - 0x51]
mov dword [rbp - 0x19], 0x3439313e
mov dword [rbp - 0x15], 0x2324373f
mov dword [rbp - 0x11], 0x3e2a3866
mov byte [rbp - 0xd], 0x50
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0xc], xmm0
mov dword [rbp + 4], eax
mov word [rbp + 8], ax
movzx r11d, byte [rbp - 0x59]
mov rax, r15
mov r9, r14
nop dword [rax + rax]
xor edi, edi
movabs rdx, 0xb2040ada64e825ca
cmp rdi, 0x23
jae 0x14004c315
movzx ebx, byte [rbp + rdi - 0x19]
mov r10d, ebx
nop
cmp rax, rdi
ja 0x14004c30c
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14004b89b
add rdx, rdi
mov rcx, rdx
and rcx, r10
imul r11, rcx, 0xfffffffffffffffe
add r11, rdx
add r11, r10
add r11b, 0x7a
jmp 0x14004b8d4
je 0x14004c28e
inc rcx
cmp rax, rcx
je 0x14004c22d
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004c1f2
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14004c1cc
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14004c183
cmp r9, rdi
ja 0x14004c303
lea rcx, [r9 + 0x40]
cmp rax, rcx
jae 0x14004b903
lea r8d, [rdi - 0x6e]
movzx ecx, r8b
and cl, bl
mov edx, 1
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add r11b, bl
jmp 0x14004b940
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14004c166
inc rcx
cmp rax, rcx
je 0x14004c147
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14004c12b
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14004c0e5
nop word [rax + rax]
lea rcx, [r9 + rax]
cmp rcx, rdi
jbe 0x14004be2a
nop dword [rax]
lea rdx, [r9 + 0x64]
cmp rax, rdx
je 0x14004be18
lea rcx, [r9 + 0x2a]
cmp rax, rcx
je 0x14004bdef
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14004bde1
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x14004bdc7
lea rcx, [r9 + 0x28]
cmp rax, rcx
je 0x14004bda4
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x14004bd84
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x14004bd67
lea rcx, [r9 + 0x5a]
cmp rax, rcx
je 0x14004bd47
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x14004b950
mov rax, rdx
lea r9, [rdx + 0x20]
lea rcx, [r9 + 0x80]
cmp rdx, rcx
jb 0x14004c2e3
lea rcx, [r9 + 0x200]
cmp rdx, rcx
jb 0x14004c2c3
lea rcx, [r9 + 2]
cmp rdx, rcx
jb 0x14004bb19
lea rcx, [r9 + 3]
cmp rdx, rcx
jb 0x14004baf9
lea rcx, [r9 + 4]
cmp rdx, rcx
jb 0x14004bad9
lea rcx, [r9 + 0x42]
cmp rdx, rcx
jb 0x14004bcfd
lea rcx, [r9 + 0x64]
cmp rdx, rcx
jb 0x14004bc99
lea rcx, [r9 + 0x2a]
cmp rdx, rcx
jb 0x14004bc53
lea rcx, [r9 + 1]
cmp rdx, rcx
jb 0x14004bc2b
lea rax, [r9 + 8]
lea r9, [rax + 0x28]
lea rcx, [r9 + 0x200]
cmp rax, rcx
ja 0x14004bbfd
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x14004bbdd
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x14004bbc0
lea rcx, [r9 + 4]
cmp rax, rcx
ja 0x14004bba0
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x14004bb7d
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x14004bb63
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x14004bb55
lea rcx, [r9 + 2]
cmp rax, rcx
ja 0x14004bb43
lea rcx, [r9 + 3]
cmp rax, rcx
ja 0x14004b950
lea rax, [r9 + 9]
lea r9, [rax + 4]
jmp 0x14004b950
lea r8d, [rdi - 0x52]
movzx ecx, bl
and cl, r8b
mov edx, Ordinal_32
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14004b940
lea r8d, [rdi + 0x1a]
movzx ecx, bl
and cl, r8b
mov edx, Ordinal_41
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14004b8d4
lea r8d, [rdi - 0x7a]
movzx ecx, bl
and cl, r8b
mov edx, Ordinal_46
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
movabs rdx, 0xb2040ada64e825ca
jmp 0x14004b870
lea r8d, [rdi - 0x70]
mov edx, 8
movzx r10d, dil
jmp 0x14004c190
lea r8d, [rdi + 0x68]
mov edx, reloc.WS2_32.dll_sendto
jmp 0x14004c1d5
lea r8d, [rdi - 0x2c]
movzx ecx, bl
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_26
sub dl, cl
lea r11d, [rdx + rdx]
jmp 0x14004c0a2
lea r8d, [rdi + 0x40]
movzx ecx, bl
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
add rax, r9
jmp 0x14004c214
lea r8d, [rdi - 0x54]
movzx ecx, bl
and cl, r8b
mov edx, Ordinal_41
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14004c214
lea r8d, [rdi + 0x18]
movzx ecx, bl
and cl, r8b
mov edx, Ordinal_46
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
jmp 0x14004c0fc
lea r8d, [rdi - 0x7c]
movzx ecx, bl
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_50
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14004c24f
lea r8d, [rdi - 0x10]
movzx ecx, bl
and cl, r8b
mov edx, gethostname
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
movzx ecx, byte [rbp + rdi - 0x19]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14004b852
lea r8d, [rdi - 2]
movzx ecx, bl
and cl, r8b
mov edx, 7
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
mov byte [rbp + rdi - 0x19], r11b
inc rdi
jmp 0x14004b852
lea r8d, [rdi + 0x6a]
movzx ecx, bl
and cl, r8b
mov edx, reloc.WS2_32.dll_listen
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
cmp r9, 2
jb 0x14004bc46
lea r8d, [rdi + 0x7c]
movzx ecx, bl
and cl, r8b
mov edx, recv
sub dl, cl
add dl, dl
add dl, bl
add dl, r8b
lea r11d, [rdx + rdx]
movzx r10d, dil
jmp 0x14004c1a2
lea r8d, [rdi - 0x2a]
movzx ecx, bl
and cl, r8b
mov edx, reloc.WS2_32.dll_send
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
cmp rax, 1
jae 0x14004c08b
lea rdx, [r9 + 6]
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004bfcf
lea r8d, [rdi + 0x48]
movzx ecx, bl
and cl, r8b
mov edx, 4
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
movzx ecx, byte [rbp + rdi - 0x19]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14004b852
lea r8d, [rdi + 0x42]
movzx ecx, bl
and cl, r8b
mov edx, Ordinal_27
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
lea rcx, [r9 + rax]
cmp rcx, 0xa
je 0x14004c0d3
lea rdx, [r9 + 5]
cmp rax, rdx
jbe 0x14004bf15
lea r8d, [rdi + 0x22]
movzx ecx, bl
and cl, r8b
mov edx, 9
jmp 0x14004bca8
lea r8d, [rdi - 0x28]
movzx ecx, bl
and cl, r8b
mov edx, recv
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14004c24f
lea r8d, [rdi + 0x44]
movzx ecx, bl
and cl, r8b
mov edx, reloc.WS2_32.dll_select
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
jmp 0x14004c0fc
lea r8d, [rdi - 0x50]
movzx ecx, bl
and cl, r8b
mov edx, Ordinal_27
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
jmp 0x14004c214
lea r8d, [rdi + 0x1c]
movzx ecx, bl
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_30
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
add rax, r9
jmp 0x14004c214
lea r8d, [rdi - 0x78]
movzx ecx, bl
and cl, r8b
mov edx, 0x24
sub dl, cl
lea r11d, [rdx + rdx]
jmp 0x14004c0a2
lea r8d, [rdi - 0xc]
mov edx, Ordinal_46
jmp 0x14004c1d5
lea r8d, [rdi + 0x60]
movzx ecx, bl
and cl, r8b
mov edx, Ordinal_50
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
inc r9
dec rdi
inc rdi
jmp 0x14004b852
lea r8d, [rdi - 0x34]
mov edx, gethostname
movzx r10d, dil
jmp 0x14004c190
lea rcx, [r9 + 0xa]
cmp rax, rcx
jae 0x14004be47
lea r8d, [rdi - 0x36]
movzx ecx, bl
and cl, r8b
mov edx, 0x3d
jmp 0x14004bd0c
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004be7e
lea r8d, [rdi + 0x24]
movzx ecx, bl
and cl, r8b
mov edx, 2
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
movzx ecx, byte [rbp + rdi - 0x19]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14004b852
inc rcx
cmp rax, rcx
jne 0x14004be9f
lea edx, [rdi - 0x20]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x20
jmp 0x14004c214
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004bec4
lea edx, [rdi + 0x74]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x2c
add rax, r9
jmp 0x14004c214
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14004bee9
lea r8d, [rdi + 8]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r8b, 0x38
jmp 0x14004c0a5
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14004bd18
lea edx, [rdi - 0x64]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x44
dec rdi
inc rdi
jmp 0x14004b852
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14004bf30
lea r8d, [rdi - 0x4a]
mov edx, 3
movzx r10d, dil
jmp 0x14004c190
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004bf58
lea edx, [rdi - 0x22]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x12
dec rdi
inc rdi
jmp 0x14004b852
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14004bf7d
lea edx, [rdi + 6]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x2a
add rax, r9
jmp 0x14004c214
cmp rax, rdx
jne 0x14004bf9b
lea edx, [rdi - 0x66]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x36
jmp 0x14004c214
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x14004bcb4
lea edx, [rdi + 0x56]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x5a
movzx ecx, byte [rbp + rdi - 0x19]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14004b852
inc rcx
cmp rax, rcx
jne 0x14004bff3
lea r8d, [rdi + 0x70]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r11b, 0x10
jmp 0x14004c0fc
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14004c018
lea edx, [rdi - 0x68]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x28
add rax, r9
jmp 0x14004c214
cmp rax, rdx
jne 0x14004c036
lea r8d, [rdi + 0x2c]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r8b, 0x34
jmp 0x14004c0a5
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14004c05e
lea edx, [rdi - 0x40]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x40
dec rdi
inc rdi
jmp 0x14004b852
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x14004bc6e
lea r8d, [rdi - 0x18]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r11b, 0x58
movzx r10d, dil
jmp 0x14004c19f
lea r8d, [rdi + 0x10]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r8b, 0x70
add r11b, bl
add r11b, r8b
movzx r8d, dil
sub r8b, 0x26
movzx ecx, bl
and cl, r8b
mov edx, 5
sub dl, cl
add dl, dl
add dl, bl
add dl, r8b
add dl, r11b
mov byte [rbp + rdi - 0x19], dl
add rax, r9
jmp 0x14004c214
lea edx, [rdi - 0x5c]
movzx ecx, bl
and cl, dl
add cl, cl
sub dl, cl
lea r11d, [rdx - 0x7c]
jmp 0x14004c0ff
lea r8d, [rdi - 0x62]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r11b, 0x52
add r11b, r8b
lea r8d, [rdi + 0x6e]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx edx, bl
sub dl, cl
sub dl, 2
add dl, r8b
movzx ecx, dl
mov byte [rbp + rdi - 0x19], cl
inc r9
add rcx, r9
sub rdi, rcx
jmp 0x14004c24f
lea edx, [rdi + 0x76]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x3a
add rax, r9
jmp 0x14004c214
lea edx, [rdi + 0x4e]
movzx ecx, bl
and cl, dl
add cl, cl
sub bl, cl
lea r11d, [rdx + rbx]
sub r11b, 0x22
dec rdi
inc rdi
jmp 0x14004b852
lea r8d, [rdi + 0x26]
movzx ecx, bl
and cl, r8b
add cl, cl
movzx r11d, bl
sub r11b, cl
sub r11b, 0xa
movzx r10d, dil
jmp 0x14004c19f
movzx r10d, dil
lea r8d, [r10 - 2]
mov edx, 7
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
add r10b, 0x46
movzx ecx, bl
and cl, r10b
mov edx, listen
sub dl, cl
add dl, dl
add dl, bl
add dl, r10b
mov byte [rbp + rdi - 0x19], dl
inc r9
dec rdi
inc rdi
jmp 0x14004b852
lea r8d, [rdi - 0x2a]
mov edx, reloc.WS2_32.dll_send
movzx ecx, bl
and cl, r8b
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, r8b
dec rdi
inc rdi
jmp 0x14004b852
movabs rcx, 0x422461ad8c29541a
add rcx, rdi
and r10b, cl
mov edx, Ordinal_41
sub dl, r10b
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, bl
movzx ecx, r11b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x14004b852
movabs rcx, 0x7a143643f888bcf2
add rcx, rdi
and r10b, cl
mov edx, Ordinal_50
sub dl, r10b
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, bl
lea r8d, [rdi + 0x38]
movzx ecx, bl
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_60
sub dl, cl
add dl, dl
add dl, bl
add dl, r8b
mov byte [rbp + rdi - 0x19], dl
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
movzx ecx, byte [rbp + rdi - 0x19]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14004b852
movabs rcx, 0x160c208f2eb8715e
add rcx, rdi
and r10b, cl
mov edx, gethostname
sub dl, r10b
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, bl
movzx ecx, byte [rbp + rdi - 0x19]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14004b852
sub dil, 0xe
movzx ecx, bl
and cl, dil
mov edx, Ordinal_50
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, bl
add r11b, dil
jmp 0x14004b848
add dil, 0x5e
movzx eax, bl
and al, dil
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, bl
add r11b, dil
jmp 0x14004b842
lea rcx, [rbp + 0x179639f]
jmp 0x14004c319
lea rcx, [rbp + 0xe18969]
jmp 0x14004c319
lea rcx, [rbp - 0x19]
xor r8d, r8d
mov rdx, rsi
call fcn.140042280
mov qword [0x1402ce0b0], rax
lea rcx, [0x1402ce0c0]
call fcn.140212f64
mov r8, r12
lea r9, [rbp + 0xf]
mov rdx, qword [0x1402ce0b0]
mov rcx, r13
call fcn.14004e8d0
mov rax, qword [rbp + 0xf]
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140212e90
mov rbx, qword [rsp + 0xf0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret