Function at 0x14010f370
Capabilities:
Contain obfuscated stackstrings
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x260]
sub rsp, 0x360
mov rax, qword [0x1401d8800]
xor rax, rsp
mov qword [rbp + 0x250], rax
mov r12, rdx
mov qword [rbp + 0xa0], rdx
xor ebx, ebx
mov dword [rsp + 0x60], ebx
mov qword [rbp + 0x90], rbx
lea r9, [rbp + 0x90]
xor r8d, r8d
mov edx, 0x8000
lea rcx, [0x1401b0880]
call qword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
jne 0x14010f3fe
mov r8d, 0x104
mov rdx, qword [rbp + 0x90]
lea rcx, [rbp + 0x140]
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_wcstombs]
jmp 0x14010fd72
mov dword [rsp + 0x28], 0x2c282b35
mov dword [rsp + 0x2c], 0xa09c516
mov dword [rsp + 0x30], 0x150b1d1c
mov dword [rsp + 0x34], 0x1f0fcd03
mov dword [rsp + 0x38], 0x170b0518
mov dword [rsp + 0x3c], 0x1606d515
mov dword [rsp + 0x40], 0xf3f8190c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x44], xmm0
mov dword [rsp + 0x54], eax
mov word [rsp + 0x58], ax
mov byte [rsp + 0x5a], al
movabs rdx, 0x13c960719128b09c
movabs r13, 0x55eed46088470d1c
movabs r15, 0xa8ad5069fe941e34
movabs rsi, 0x8fe71a7fc29c4a4
movzx r11d, byte [rsp + 0x20]
nop dword [rax + rax]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
mov r14, rbx
movabs rdi, 0x1030662e5f7e61f4
movabs rcx, 0x17625ab4c2d2ff44
cmp r14, 0x33
jae 0x14010fd61
movzx r10d, byte [rsp + r14 + 0x28]
cmp r8, r14
ja 0x14010fd58
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010f4ed
lea rcx, [r14 + r13]
mov eax, r10d
and rax, rcx
imul r11, rax, 0xfffffffffffffffe
add r11, r10
add r11, rcx
add r11b, 0x3c
movabs rcx, 0x17625ab4c2d2ff44
jmp 0x14010f526
je 0x14010fcc9
inc rax
cmp r8, rax
je 0x14010fc76
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010fc19
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010fbfa
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010fbae
cmp r9, r14
ja 0x14010fd4f
lea rax, [r9 + 0x10]
cmp r8, rax
jae 0x14010f55a
movabs r11, 0xc976beb2dd4134c
add r11, r14
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x14
add r11b, r10b
jmp 0x14010f5a0
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010fb88
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010fb65
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010fb4a
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010fb26
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010fb07
nop dword [rax + rax]
lea rdi, [r9 + r8]
cmp rdi, r14
jbe 0x14010f80a
nop dword [rax]
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x14010f7ef
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010f7c9
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x14010f7ae
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010f78e
lea r8, [r9 + 0x80]
lea r9, [r8 + 4]
lea rax, [r9 + 9]
cmp r8, rax
jb 0x14010fd32
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14010fd11
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14010f67f
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14010f754
lea rax, [r9 + 1]
cmp r8, rax
jb 0x14010f72f
lea r8, [r9 + 0x7a]
lea r9, [r8 + 1]
lea rax, [r9 + 5]
cmp r8, rax
ja 0x14010f714
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010f6f4
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14010f6d5
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14010f6ba
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14010f69a
lea r8, [r9 + 0x400]
lea r9, [r8 + 0x41]
jmp 0x14010f5b0
lea rcx, [r14 + r15]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x6c
jmp 0x14010f5a0
lea edx, [r14 + 0x60]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_50
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010fbd2
lea ecx, [r14 - 0x48]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 8
jmp 0x14010fc3d
lea ecx, [r14 + 0x10]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x70
movzx edx, r14b
jmp 0x14010fada
lea edx, [r14 - 0x28]
movzx eax, dl
and al, r10b
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010fc9a
lea ecx, [r14 - 0x60]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x60
jmp 0x14010fce9
lea edx, [r14 + 0x14]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
mov byte [rsp + r14 + 0x28], r11b
jmp 0x14010fcf5
lea ecx, [r14 - 0x24]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 4
cmp r9, 2
jb 0x14010f74a
lea ecx, [r14 + 0x28]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
add cl, r10b
lea r11d, [rcx*2 - 0x30]
jmp 0x14010fbd2
lea edx, [r14 - 0x70]
movzx eax, dl
and al, r10b
mov ecx, 8
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010fc9a
lea ecx, [r14 - 0x18]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x58
jmp 0x14010fc60
lea edx, [r14 + 0x40]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc r9
dec r14
jmp 0x14010fcf5
lea ecx, [r14 + 8]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x38
jmp 0x14010fbd2
lea rax, [r9 + 3]
lea rsi, [r9 + 1]
cmp r8, rax
jae 0x14010f8a2
lea rcx, [r14 + r13]
movzx eax, cl
and al, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_30
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
cmp rdi, 9
je 0x14010fac5
lea rax, [r9 + 0x61]
cmp r8, rax
jbe 0x14010f960
lea edx, [r14 - 0x54]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_41
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
cmp r8, 5
jae 0x14010faa3
lea rax, [r9 + 0x3e8]
cmp r8, rax
jbe 0x14010fa00
lea edx, [r14 - 8]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010f76a
cmp r8, rsi
jne 0x14010f8c2
lea ecx, [r14 - 0x68]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x28
jmp 0x14010fce9
cmp r8, rax
jne 0x14010f8e5
movzx edx, r14b
lea ecx, [rdx + 8]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x38
jmp 0x14010fada
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010f909
lea ecx, [r14 + 0x78]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x48
jmp 0x14010fc60
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010f938
lea edx, [r14 + 0x20]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc r9
dec r14
jmp 0x14010fcf5
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010f836
lea ecx, [r14 + 0x58]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x68
jmp 0x14010fbd2
cmp r8, rsi
jne 0x14010f980
lea ecx, [r14 - 0x1c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x3c
jmp 0x14010fbd2
lea rax, [rsi + 1]
cmp r8, rax
jne 0x14010f9af
lea edx, [r14 + 0x1c]
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
inc r9
dec r14
jmp 0x14010fcf5
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010f9d3
lea ecx, [r14 - 0x3c]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x5c
jmp 0x14010fc60
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010f868
lea edx, [r14 - 4]
movzx eax, dl
and al, r10b
mov ecx, recv
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010fc63
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010fa24
lea ecx, [r14 + 0x30]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x50
jmp 0x14010fce9
inc rax
cmp r8, rax
jne 0x14010fa4a
movzx edx, r14b
lea ecx, [rdx - 0x60]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x60
jmp 0x14010fada
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010fa76
movzx edi, r14b
lea edx, [rdi + 0x48]
movzx eax, dl
and al, r10b
mov ecx, 4
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010fc41
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14010f76a
lea edx, [r14 - 0x10]
movzx eax, dl
and al, r10b
mov ecx, gethostname
sub cl, al
lea r11d, [rcx + rcx]
add r11b, dl
add r11b, r10b
jmp 0x14010fbd2
movzx edi, r14b
lea edx, [rdi + 0x60]
movzx eax, dl
and al, r10b
movzx ecx, r10b
sub cl, al
add cl, 0x30
lea r11d, [rcx + rcx]
add r11b, dl
jmp 0x14010fc41
movzx edx, r14b
lea ecx, [rdx - 0x68]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [rcx - 0x28]
sub dl, 0x4c
movzx eax, dl
and al, r10b
mov ecx, 0xa
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
movzx eax, cl
mov byte [rsp + r14 + 0x28], al
inc r9
add rax, r9
sub r14, rax
jmp 0x14010fc9a
add rcx, r14
movzx eax, cl
and al, r10b
mov edx, reloc.WS2_32.dll_select
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
jmp 0x14010fce9
movabs rcx, 0x6b84b1f3b244e50c
add rcx, r14
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x54
jmp 0x14010fc9a
lea rcx, [r14 + rdx]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea r11d, [r10 + rcx]
sub r11b, 0x44
jmp 0x14010fc63
lea rcx, [r14 + rdi]
movzx eax, cl
and al, r10b
mov edx, Ordinal_45
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
dec r14
jmp 0x14010fcf5
movabs rcx, 0xb87514ac3e622d84
add rcx, r14
movzx eax, cl
and al, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_50
sub dl, al
lea r11d, [rdx + rdx]
add r11b, cl
add r11b, r10b
jmp 0x14010fbd2
movabs rdx, 0x60b9c32a1d45f914
add rdx, r14
movzx eax, dl
and al, r10b
mov ecx, Ordinal_60
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
lea edx, [r14 + 0x44]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
mov byte [rsp + r14 + 0x28], cl
inc r9
dec r14
jmp 0x14010fcf5
lea rcx, [r14 + rsi]
movzx eax, cl
and al, r10b
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x7c
dec r14
jmp 0x14010fcf5
movabs rdx, 0x5d20c8e6eb9baa6c
add rdx, r14
movzx eax, dl
and al, r10b
mov ecx, 6
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
movzx edi, r14b
add dil, 0x7c
movzx eax, dil
and al, r10b
add al, al
sub dil, al
sub dil, 0x64
add dil, r10b
add dil, r11b
mov byte [rsp + r14 + 0x28], dil
add r8, r9
movzx eax, r11b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r14, rcx
jmp 0x14010fcf5
movabs rdx, 0xadaa25e2a963418c
add rdx, r14
movzx eax, dl
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r10b
add r11b, dl
lea edx, [r14 - 0x30]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
mov byte [rsp + r14 + 0x28], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add r14, rax
jmp 0x14010fce9
movabs rcx, 0x1cc7d2198d52754
add rcx, r14
movzx eax, cl
and al, r10b
add al, al
sub r10b, al
lea r11d, [rcx + r10]
sub r11b, 0x4c
movzx eax, byte [rsp + r14 + 0x28]
add rax, r9
add r14, rax
inc r14
movabs rdx, 0x13c960719128b09c
movabs rsi, 0x8fe71a7fc29c4a4
jmp 0x14010f493
sub r14b, 0x74
movzx eax, r14b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea r11d, [rcx + rcx]
add r11b, r14b
add r11b, r10b
jmp 0x14010f48e
add r14b, 0x54
movzx eax, r14b
and al, r10b
add al, al
sub r14b, al
lea r11d, [r10 + r14]
sub r11b, 0x4c
jmp 0x14010f47b
lea rdx, [rbp + 0x17ccdf8]
jmp 0x14010fd66
lea rdx, [rbp + 0x143db14]
jmp 0x14010fd66
lea rdx, [rsp + 0x28]
mov rcx, qword [0x14022c178]
call fcn.1400648b0
mov dword [rsp + 0x68], 0xe5d1fbe0
mov dword [rsp + 0x6c], 0xebced2dc
mov dword [rsp + 0x70], 0xaca1d6d8
mov byte [rsp + 0x74], gethostname
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x75], xmm0
mov dword [rbp - 0x7b], eax
mov word [rbp - 0x77], ax
movabs r14, 0x1580cca681829536
movabs r15, 0xc18731da8d973ee6
movabs r13, 0x408265f38487bfa2
movzx r8d, byte [rsp + 0x20]
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
mov rdi, rbx
cmp rdi, 0x23
jae 0x14011097e
movzx r11d, byte [rsp + rdi + 0x68]
mov esi, r11d
cmp rax, rdi
ja 0x140110975
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14010fe22
lea rdx, [rdi + r14]
mov rcx, rdx
and rcx, rsi
imul r8, rcx, 0xfffffffffffffffe
add r8, rdx
add r8, rsi
sub r8b, 0x7a
jmp 0x14010fe5b
je 0x14011090a
inc rcx
cmp rax, rcx
je 0x140110881
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140110853
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x140110830
lea rcx, [r9 + 2]
cmp rax, rcx
je 0x1401107e8
movzx r10d, dil
nop
cmp r9, rdi
ja 0x14011096c
lea rcx, [r9 + 5]
cmp rax, rcx
jae 0x14010fe8a
lea edx, [r10 + 0x6e]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 2
jmp 0x14010feb1
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x1401107cf
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x1401107ae
lea rcx, [r9 + 7]
cmp rax, rcx
je 0x14011077f
lea rcx, [r9 + rax]
cmp rcx, rdi
jbe 0x140110402
nop
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x1401103ee
lea rcx, [r9 + 0x41]
cmp rax, rcx
je 0x1401103c8
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x1401103a5
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x140110389
lea rdx, [r9 + 0xa]
cmp rax, rdx
je 0x140110369
lea rcx, [r9 + 0x61]
cmp rax, rcx
je 0x14011034c
lea rcx, [r9 + 0x200]
cmp rax, rcx
je 0x14011032d
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14011030d
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x1401102e2
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14010fec0
mov rax, rdx
lea r9, [rdx + 0x64]
lea rcx, [r9 + 0x61]
cmp rdx, rcx
jb 0x14011094f
lea rcx, [r9 + 0x200]
cmp rdx, rcx
jb 0x140110932
lea rcx, [r9 + 4]
cmp rdx, rcx
jb 0x1401100a1
lea rcx, [r9 + 0x80]
cmp rdx, rcx
jb 0x140110086
lea rdx, [r9 + 3]
cmp rax, rdx
jb 0x14011006b
lea rcx, [r9 + 0x64]
cmp rax, rcx
jb 0x140110292
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x140110242
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x140110203
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x1401101de
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x14010fec0
mov rax, rdx
lea r9, [rdx + 0xa]
lea rcx, [r9 + 0x64]
cmp rdx, rcx
ja 0x1401101b3
lea rcx, [r9 + 2]
cmp rdx, rcx
ja 0x140110193
lea rcx, [r9 + 0x41]
cmp rdx, rcx
ja 0x140110174
lea rcx, [r9 + 0x10]
cmp rdx, rcx
ja 0x140110157
lea rdx, [r9 + 0x7a]
cmp rax, rdx
ja 0x140110137
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x14011011b
lea rcx, [r9 + 0x61]
cmp rax, rcx
ja 0x1401100f8
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x1401100d2
lea rcx, [r9 + 4]
cmp rax, rcx
ja 0x1401100be
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x14010fec0
mov rax, rdx
lea r9, [rdx + 3]
jmp 0x14010fec0
lea edx, [r10 + 0x52]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x3e
jmp 0x14010feb1
lea edx, [r10 - 0x1a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x4a
jmp 0x14010fe60
add r10b, 0x7a
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
lea r8d, [r11 + r10]
sub r8b, 0x56
jmp 0x14010fdf6
lea r8d, [r10 + 0x70]
movzx ecx, r11b
and cl, r8b
sub r8b, 0x10
jmp 0x1401107fb
add r10b, 4
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x1c
inc r9
dec rdi
inc rdi
jmp 0x14010fde3
sub r10b, 0x68
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x28
dec rdi
inc rdi
jmp 0x14010fde3
lea r8d, [r10 + 0x2c]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx edx, r11b
sub dl, cl
sub r8b, 0x34
jmp 0x140110739
sub r10b, 0x40
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x40
add rax, r9
jmp 0x140110868
add r10b, 0x54
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x4c
jmp 0x140110868
lea r8d, [r10 - 0x18]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx edx, r11b
sub dl, cl
sub r8b, 0x58
add r8b, dl
jmp 0x1401108a3
add r10b, 0x7c
movzx ecx, r11b
and cl, r10b
add cl, cl
movzx r8d, r11b
sub r8b, cl
sub r8b, 0x64
add r8b, r10b
jmp 0x1401108cd
add r10b, 0x10
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x70
movzx ecx, byte [rsp + rdi + 0x68]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010fde3
add r10b, 2
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0xe
mov byte [rsp + rdi + 0x68], r8b
inc rdi
jmp 0x14010fde3
lea edx, [r10 - 0x6a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x1a
cmp r9, 4
jb 0x1401101f6
lea r8d, [r10 - 0x7c]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx edx, r11b
sub dl, cl
add dl, r8b
lea r8d, [rdx*2 - 0x38]
jmp 0x140110806
lea r8d, [r10 + 0x2a]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx edx, r11b
sub dl, cl
sub r8b, 0x26
add r8b, dl
cmp rax, 0x10
jae 0x140110723
lea rcx, [r9 + 0x80]
cmp rax, rcx
jbe 0x140110611
lea r8d, [r10 + 0x4c]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx edx, r11b
sub dl, cl
sub r8b, 0x14
add r8b, dl
jmp 0x140110219
lea edx, [r10 - 0x42]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x32
lea rcx, [r9 + rax]
cmp rcx, 0x80
je 0x140110763
lea rcx, [r9 + 6]
cmp rax, rcx
jbe 0x14011050f
lea r8d, [r10 - 0x22]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx edx, r11b
sub dl, cl
sub r8b, 0x12
jmp 0x140110259
sub r10b, 0x6c
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0xc
movzx ecx, byte [rsp + rdi + 0x68]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010fde3
add r10b, 0x28
movzx ecx, r11b
and cl, r10b
add cl, cl
movzx r8d, r11b
sub r8b, cl
sub r8b, 0x18
add r8b, r10b
jmp 0x1401108cd
lea r8d, [r10 - 0x44]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx edx, r11b
sub dl, cl
sub r8b, 0x24
add r8b, dl
jmp 0x1401108a3
add r10b, 0x50
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x30
jmp 0x140110868
sub r10b, 0x1c
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x3c
add rax, r9
jmp 0x140110868
lea r8d, [r10 + 0x78]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx edx, r11b
sub dl, cl
sub r8b, 0x48
jmp 0x140110739
add r10b, 0xc
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x54
dec rdi
inc rdi
jmp 0x14010fde3
sub r10b, 0x60
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x60
inc r9
dec rdi
inc rdi
jmp 0x14010fde3
lea r8d, [r10 + 0x34]
movzx ecx, r11b
and cl, r8b
sub r8b, 0x6c
jmp 0x1401107fb
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jae 0x14011042d
lea r8d, [r10 + 0x36]
movzx ecx, r11b
and cl, r8b
add cl, cl
movzx edx, r11b
sub dl, cl
sub r8b, 0x7a
add r8b, dl
jmp 0x1401102a8
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x140110461
sub r10b, 0x24
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 4
movzx ecx, byte [rsp + rdi + 0x68]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010fde3
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140110489
lea r8d, [r10 - 0x4c]
movzx ecx, r11b
and cl, r8b
mov edx, 0xa
sub dl, cl
add dl, dl
add dl, r11b
add r8b, dl
jmp 0x1401108a3
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x1401104b6
sub r10b, 0x74
movzx ecx, r11b
and cl, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_22
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
add rax, r9
jmp 0x140110868
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1401104db
lea r8d, [r10 - 8]
movzx ecx, r11b
and cl, r8b
mov edx, Ordinal_30
sub dl, cl
add dl, dl
add dl, r11b
jmp 0x140110739
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x1401102a8
add r10b, 0x64
movzx ecx, r11b
and cl, r10b
mov edx, Ordinal_35
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
dec rdi
inc rdi
jmp 0x14010fde3
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14011052c
lea r8d, [r10 + 0x4a]
movzx ecx, r11b
and cl, r8b
sub r8b, 6
jmp 0x1401107fb
inc rcx
cmp rax, rcx
jne 0x14011055e
sub r10b, 0x4a
movzx ecx, r11b
and cl, r10b
mov edx, 3
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
inc r9
dec rdi
inc rdi
jmp 0x14010fde3
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14011058e
add r10b, 0x22
movzx ecx, r11b
and cl, r10b
mov edx, 9
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
dec rdi
inc rdi
jmp 0x14010fde3
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1401105bb
sub r10b, 6
movzx ecx, r11b
and cl, r10b
mov edx, reloc.WS2_32.dll_setsockopt
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
add rax, r9
jmp 0x140110868
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x1401105e5
add r10b, 0x66
movzx ecx, r11b
and cl, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_27
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
jmp 0x140110868
lea rcx, [r9 + 7]
cmp rax, rcx
jne 0x14011025c
lea r8d, [r10 - 0x2e]
movzx ecx, r11b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_33
sub dl, cl
add dl, dl
add dl, r11b
add r8b, dl
jmp 0x1401108a3
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x140110645
sub r10b, 0x48
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 8
movzx ecx, byte [rsp + rdi + 0x68]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010fde3
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14011066d
lea r8d, [r10 - 0x70]
movzx ecx, r11b
and cl, r8b
mov edx, 8
sub dl, cl
add dl, dl
add dl, r11b
add r8b, dl
jmp 0x1401108a3
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x140110697
sub r10b, 4
movzx ecx, r11b
and cl, r10b
mov edx, recv
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
jmp 0x140110868
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x1401106c7
add r10b, 0x40
movzx ecx, r11b
and cl, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_32
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
dec rdi
inc rdi
jmp 0x14010fde3
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x1401106fa
sub r10b, 0x54
movzx ecx, r11b
and cl, r10b
mov edx, Ordinal_41
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
inc r9
dec rdi
inc rdi
jmp 0x14010fde3
lea rcx, [r9 + 9]
cmp rax, rcx
jne 0x140110219
lea r8d, [r10 + 0x18]
movzx ecx, r11b
and cl, r8b
mov edx, Ordinal_45
sub dl, cl
add dl, dl
add dl, r11b
jmp 0x140110803
lea r8d, [r10 - 0x10]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
sub dl, cl
add dl, 0x38
add dl, dl
add r8b, dl
add r10b, 0x26
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0xa
add r10b, r8b
add r10b, r11b
mov byte [rsp + rdi + 0x68], r10b
add rax, r9
jmp 0x140110868
lea r8d, [r10 + 0x5c]
movzx ecx, r11b
and cl, r8b
mov edx, 0x3e
sub dl, cl
add dl, dl
add r8b, dl
jmp 0x1401108a3
add r10b, 0x3a
movzx ecx, r11b
and cl, r10b
mov edx, gethostname
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
movzx ecx, byte [rsp + rdi + 0x68]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010fde3
sub r10b, 0xa
movzx ecx, r11b
and cl, r10b
mov edx, reloc.WLDAP32.dll_Ordinal_35
sub dl, cl
lea r8d, [rdx + rdx]
add r8b, r11b
add r8b, r10b
jmp 0x140110868
lea r8d, [r10 - 0x26]
movzx ecx, r11b
and cl, r8b
mov edx, 5
sub dl, cl
add dl, dl
add dl, r11b
jmp 0x140110803
movzx r10d, dil
lea r8d, [r10 + 2]
movzx ecx, r11b
and cl, r8b
sub r8b, 0xe
add cl, cl
movzx edx, r11b
sub dl, cl
add r8b, dl
sub r10b, 0x46
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x16
add r10b, r11b
mov byte [rsp + rdi + 0x68], r10b
inc r9
dec rdi
inc rdi
jmp 0x14010fde3
lea edx, [rdi - 0x6a]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x1a
inc r9
dec rdi
inc rdi
jmp 0x14010fde3
lea rcx, [rdi + r15]
and sil, cl
add sil, sil
sub cl, sil
lea r8d, [r11 + rcx]
sub r8b, 0x4a
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rdi, rdx
inc rdi
jmp 0x14010fde3
movabs rcx, 0x9685988d8a92147a
add rcx, rdi
and sil, cl
add sil, sil
sub cl, sil
lea r8d, [r11 + rcx]
sub r8b, 0x56
movzx r10d, dil
sub r10b, 0x6e
movzx ecx, r11b
and cl, r10b
mov edx, 1
sub dl, cl
add dl, dl
add dl, r11b
add dl, r10b
movzx ecx, dl
mov byte [rsp + rdi + 0x68], cl
inc r9
add rcx, r9
sub rdi, rcx
lea edx, [rdi - 0x38]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
sub r11b, 0x78
add r11b, dl
mov byte [rsp + rdi + 0x68], r11b
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
movzx ecx, byte [rsp + rdi + 0x68]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010fde3
lea rcx, [rdi + r13]
and sil, cl
add sil, sil
sub cl, sil
lea r8d, [r11 + rcx]
sub r8b, 0x6e
movzx ecx, byte [rsp + rdi + 0x68]
add rcx, r9
add rdi, rcx
inc rdi
jmp 0x14010fde3
add r10b, 0xe
movzx ecx, r11b
and cl, r10b
add cl, cl
sub r11b, cl
lea r8d, [r10 + r11]
sub r8b, 0x62
jmp 0x14010fde0
sub r10b, 0x5e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea r8d, [r10 + r11]
sub r8b, 0x6e
jmp 0x14010fdd0
lea rdi, [rbp + 0x17c3fb0]
jmp 0x140110983
lea rdi, [rbp + 0xfed4e6]
jmp 0x140110983
lea rdi, [rsp + 0x68]
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0x118]
call fcn.1400029f0
nop
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdi + r8], 0
jne 0x1401109a0
mov rdx, rdi
lea rcx, [rbp + 0x118]
call fcn.140004460
nop
lea rdx, [rbp + 0x140]
lea rcx, [rbp + 0x70]
call fcn.1400042d0
nop
lea r8, [rbp + 0x118]
mov rdx, rax
lea rcx, [rbp + 0xd8]
call fcn.1400031a0
nop
lea rcx, [rbp + 0x70]
call fcn.140002820
xor r8d, r8d
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x30]
call fcn.1400d6d00
nop
mov edi, 1
mov dword [rsp + 0x60], edi
lea rcx, [rbp + 0x30]
call fcn.1400d0db0
test al, al
je 0x140110a48
xor r8d, r8d
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x10]
call fcn.1400d6d00
nop
mov edi, 3
mov dword [rsp + 0x60], edi
lea rdx, [rbp + 0x10]
lea rcx, [rbp]
call fcn.1400d0f80
cmp dword [rax], edi
jne 0x140110a48
xor sil, sil
jmp 0x140110a4b
mov sil, 1
test dil, 2
je 0x140110a5e
and edi, 0xfffffffd
lea rcx, [rbp + 0x10]
call fcn.140058b00
nop
test dil, 1
je 0x140110a6d
lea rcx, [rbp + 0x30]
call fcn.140058b00
test sil, sil
je 0x1401115f3
mov dword [rbp - 0x70], 0x2a303f05
mov dword [rbp - 0x6c], 0x773a203c
mov dword [rbp - 0x68], 0x3f26263e
mov dword [rbp - 0x64], 0x2f7e2f3d
mov dword [rbp - 0x60], 0x4d32213d
mov byte [rbp - 0x5c], 0x58
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x5b], xmm0
mov qword [rbp - 0x4b], rax
mov dword [rbp - 0x43], eax
mov word [rbp - 0x3f], ax
movabs r13, 0x7cb4eb8af2f14eca
movzx r10d, byte [rsp + 0x20]
mov r8, qword [0x14022c4b8]
mov r9, qword [0x14022c4b0]
nop
mov rsi, rbx
cmp rsi, 0x33
jae 0x1401115cc
movzx edi, byte [rbp + rsi - 0x70]
mov r14d, edi
movzx r11d, sil
nop dword [rax]
movzx r15d, r11b
cmp r8, rsi
ja 0x1401115c3
lea rax, [r9 + 1]
cmp r8, rax
jae 0x140110b20
lea rcx, [rsi + r13]
mov rax, rcx
and rax, r14
imul r10, rax, 0xfffffffffffffffe
add r10, rcx
add r10, r14
add r10b, 0x7a
jmp 0x140110b33
je 0x140111543
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401114eb
movzx r11d, sil
cmp r9, rsi
ja 0x1401115ba
lea rax, [r9 + 8]
cmp r8, rax
jae 0x140110b66
lea edx, [r11 - 0x6e]
movzx eax, dl
and al, dil
mov ecx, 1
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x140110ba0
lea rax, [r9 + 1]
cmp r8, rax
je 0x1401114a7
inc rax
cmp r8, rax
je 0x140111481
lea rax, [r9 + 4]
cmp r8, rax
je 0x140111464
lea rax, [r9 + 3]
cmp r8, rax
je 0x140111447
nop dword [rax]
lea rax, [r8 + r9]
cmp rax, rsi
jbe 0x140111163
nop dword [rax]
lea rax, [r9 + 9]
cmp r8, rax
je 0x140111142
lea rax, [r9 + 8]
cmp r8, rax
je 0x140111118
lea rax, [r9 + 6]
cmp r8, rax
je 0x1401110f1
lea rax, [r9 + 5]
cmp r8, rax
je 0x1401110d3
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x1401110b2
lea rcx, [r9 + 0x400]
cmp r8, rcx
je 0x140111091
lea rax, [r9 + 0x3e8]
cmp r8, rax
je 0x140111071
lea rax, [r9 + 0x200]
cmp r8, rax
je 0x140111050
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x140111021
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x140110bb0
mov r8, rcx
lea r9, [rcx + 0x42]
lea rax, [r9 + 0x3e8]
cmp rcx, rax
jb 0x140111599
lea rax, [r9 + 0x200]
cmp rcx, rax
jb 0x140111578
lea rax, [r9 + 0x80]
cmp rcx, rax
jb 0x140110db3
lea rax, [r9 + 0x64]
cmp rcx, rax
jb 0x140110d93
lea rax, [r9 + 0x42]
cmp rcx, rax
jb 0x140110d73
lea rax, [r9 + 0x40]
cmp rcx, rax
jb 0x140110fd7
lea rax, [r9 + 0x28]
cmp rcx, rax
jb 0x140110f85
lea rax, [r9 + 0x20]
cmp rcx, rax
jb 0x140110f41
lea rax, [r9 + 0x10]
cmp rcx, rax
jb 0x140110f18
lea rax, [r9 + 0xa]
cmp rcx, rax
jb 0x140110bb0
lea r8, [r9 + 4]
lea r9, [r8 + 9]
lea rax, [r9 + 3]
cmp r8, rax
ja 0x140110ee9
lea rax, [r9 + 2]
cmp r8, rax
ja 0x140110ec8
lea rax, [r9 + 1]
cmp r8, rax
ja 0x140110ea8
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x140110e87
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x140110e66
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x140110e45
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x140110e1e
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x140110df4
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x140110dd3
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x140110bb0
lea r8, [r9 + 0x42]
lea r9, [r8 + 0x3e8]
jmp 0x140110bb0
lea edx, [r11 - 0x52]
movzx eax, dl
and al, dil
mov ecx, Ordinal_35
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x140110ba0
lea edx, [r11 + 0x1a]
movzx eax, dl
and al, dil
mov ecx, Ordinal_41
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x140110b37
lea edx, [r11 - 0x7a]
movzx eax, dl
and al, dil
mov ecx, Ordinal_45
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x140110af0
sub r11b, 0x70
movzx eax, dil
and al, r11b
mov ecx, 8
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, r11b
jmp 0x1401114bf
sub r11b, 4
movzx eax, dil
and al, r11b
mov ecx, recv
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, r11b
inc r9
dec rsi
inc rsi
jmp 0x140110ad3
add r11b, 0x68
movzx eax, dil
and al, r11b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, r11b
dec rsi
inc rsi
jmp 0x140110ad3
sub r11b, 0x2c
movzx eax, dil
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, r11b
jmp 0x140111506
add r11b, 0x40
movzx eax, dil
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, r11b
jmp 0x140111527
sub r11b, 0x54
movzx eax, dil
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, r11b
jmp 0x14011152a
lea edx, [r11 + 0x18]
movzx eax, dil
and al, dl
mov ecx, Ordinal_45
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
jmp 0x1401113e0
sub r11b, 0x7c
movzx eax, dil
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, r11b
jmp 0x140111409
sub r11b, 0x10
movzx eax, dil
and al, r11b
mov ecx, gethostname
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, r11b
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140110ad3
sub r11b, 2
movzx eax, r11b
and al, dil
mov ecx, 7
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
mov byte [rbp + rsi - 0x70], r10b
inc rsi
jmp 0x140110ad3
lea edx, [r11 + 0x6a]
movzx eax, dil
and al, dl
mov ecx, reloc.WS2_32.dll_listen
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, dl
cmp r9, 0x28
jb 0x140110f34
add r11b, 0x7c
movzx eax, dil
and al, r11b
mov ecx, recv
sub cl, al
add cl, cl
add cl, dil
add cl, r11b
lea r10d, [rcx + rcx]
jmp 0x1401114bf
lea edx, [r11 - 0x2a]
movzx eax, dl
and al, dil
mov ecx, reloc.WS2_32.dll_send
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
cmp r8, 0x3e8
jae 0x1401113ab
lea rax, [r9 + 0x7a]
cmp r8, rax
jbe 0x140111329
lea edx, [r11 - 0x4c]
movzx eax, dl
and al, dil
mov ecx, 0xa
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x140110f5c
lea edx, [r11 + 0x42]
movzx eax, dl
and al, dil
mov ecx, Ordinal_26
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
lea rax, [r8 + r9]
cmp rax, 9
je 0x1401113ce
lea rax, [r9 + 0x28]
cmp r8, rax
jbe 0x14011122c
lea edx, [r11 + 0x22]
movzx eax, dl
and al, dil
mov ecx, 9
jmp 0x140110f94
add r11b, 0x6c
movzx eax, r11b
and al, dil
mov ecx, 6
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140110ad3
sub r11b, 0x28
movzx eax, r11b
and al, dil
mov ecx, recv
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
jmp 0x140111409
lea edx, [r11 + 0x44]
movzx eax, dl
and al, dil
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
jmp 0x1401113e0
sub r11b, 0x50
movzx eax, r11b
and al, dil
mov ecx, Ordinal_26
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
jmp 0x14011152a
add r11b, 0x1c
movzx eax, r11b
and al, dil
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
jmp 0x140111527
sub r11b, 0x78
movzx eax, r11b
and al, dil
mov ecx, 0x24
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
jmp 0x140111503
sub r11b, 0xc
movzx eax, r11b
and al, dil
mov ecx, Ordinal_45
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
dec rsi
inc rsi
jmp 0x140110ad3
add r11b, 0x60
movzx eax, r11b
and al, dil
mov ecx, Ordinal_50
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
inc r9
dec rsi
inc rsi
jmp 0x140110ad3
sub r11b, 0x34
movzx eax, r11b
and al, dil
mov ecx, gethostname
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
jmp 0x1401114bf
lea rax, [r9 + 0x7a]
cmp r8, rax
jae 0x140111180
lea edx, [r11 - 0x36]
movzx eax, dl
and al, dil
mov ecx, 0x3d
jmp 0x140110fe6
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401111b8
add r11b, 0x24
movzx eax, r11b
and al, dil
mov ecx, 2
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140110ad3
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401111dc
lea ecx, [r11 + 0x4c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x14
jmp 0x1401113e0
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140111202
sub r11b, 0x20
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x20
jmp 0x14011152a
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140110ff2
add r11b, 0x74
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x2c
jmp 0x140111527
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111256
sub r11b, 0x4a
movzx eax, r11b
and al, dil
mov ecx, 3
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
jmp 0x1401114bf
inc rax
cmp r8, rax
jne 0x140111281
sub r11b, 0x22
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x12
dec rsi
inc rsi
jmp 0x140110ad3
lea rax, [r9 + 4]
cmp r8, rax
jne 0x1401112a7
add r11b, 6
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x2a
jmp 0x140111527
lea rax, [r9 + 6]
cmp r8, rax
jne 0x1401112cb
lea ecx, [r11 + 0x2e]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x42
jmp 0x1401113e0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x1401112f1
sub r11b, 0x3e
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x4e
jmp 0x140111409
lea rax, [r9 + 8]
cmp r8, rax
jne 0x140110fa0
add r11b, 0x56
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x5a
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140110ad3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140111361
add r11b, 0x48
movzx eax, r11b
and al, dil
mov ecx, 4
sub cl, al
lea r10d, [rcx + rcx]
add r10b, r11b
add r10b, dil
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140110ad3
inc rax
cmp r8, rax
jne 0x140111381
lea ecx, [r11 + 0x70]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rdi + rcx]
sub r10b, 0x10
jmp 0x1401113e0
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140110f5c
sub r11b, 0x68
movzx eax, dil
and al, r11b
add al, al
sub dil, al
lea r10d, [r11 + rdi]
sub r10b, 0x28
jmp 0x140111527
add r11b, 0x10
movzx eax, dil
and al, r11b
add al, al
movzx r10d, dil
sub r10b, al
sub r10b, 0x70
add r10b, dil
add r10b, r11b
jmp 0x140111506
lea ecx, [r11 - 0x5c]
movzx eax, cl
and al, dil
add al, al
sub cl, al
lea r10d, [rcx - 0x7c]
add r11b, 0x6e
movzx eax, dil
and al, r11b
add al, al
movzx ecx, dil
sub cl, al
sub cl, 2
add cl, r11b
movzx eax, cl
mov byte [rbp + rsi - 0x70], al
inc r9
add rax, r9
sub rsi, rax
lea edx, [rsi + 0x38]
movzx eax, dil
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
add cl, cl
add cl, dil
add cl, dl
mov byte [rbp + rsi - 0x70], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rsi, rax
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140110ad3
add r11b, 0x76
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x3a
jmp 0x140111527
sub r11b, 0x1e
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x2e
jmp 0x140111506
sub r11b, 0x46
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0x16
inc r9
dec rsi
inc rsi
jmp 0x140110ad3
add r11b, 0x26
movzx eax, r11b
and al, dil
add al, al
sub r11b, al
lea r10d, [rdi + r11]
sub r10b, 0xa
add r15b, 0x46
movzx eax, dil
and al, r15b
mov ecx, listen
sub cl, al
add cl, cl
add cl, dil
add cl, r15b
mov byte [rbp + rsi - 0x70], cl
inc r9
dec rsi
inc rsi
jmp 0x140110ad3
lea edx, [r15 + 0x42]
movzx eax, dl
and al, dil
mov ecx, Ordinal_26
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dl
add r10b, dil
sub r15b, 0x26
movzx eax, dil
and al, r15b
mov ecx, 5
sub cl, al
add cl, cl
add cl, dil
add cl, r10b
add cl, r15b
mov byte [rbp + rsi - 0x70], cl
add r8, r9
movzx eax, r10b
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rsi, rcx
inc rsi
jmp 0x140110ad3
movabs rcx, 0x761ec2a0d8d3ec5e
add rcx, rsi
and r14b, cl
mov eax, gethostname
sub al, r14b
lea r10d, [rax + rax]
add r10b, dil
add r10b, cl
movzx eax, byte [rbp + rsi - 0x70]
add rax, r9
add rsi, rax
inc rsi
jmp 0x140110ad3
sub r11b, 0xe
movzx eax, dil
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, r11b
jmp 0x140110ad0
add r11b, 0x5e
movzx eax, dil
and al, r11b
mov ecx, gethostname
sub cl, al
lea r10d, [rcx + rcx]
add r10b, dil
add r10b, r11b
jmp 0x140110ac1
lea rdx, [rbp + 0x160ef48]
jmp 0x1401115d0
lea rdx, [rbp + 0x1523e12]
jmp 0x1401115d0
lea rdx, [rbp - 0x70]
mov rcx, qword [0x14022c178]
call fcn.1400648b0
xor r8d, r8d
lea rdx, [0x1401b0b3f]
mov rcx, r12
call fcn.140121490
jmp 0x140111782
movzx edx, byte [rsp + 0x20]
lea rcx, [rbp + 0xf8]
call fcn.1400029f0
lea rcx, [rbp + 0xf8]
call fcn.140058b70
nop
xor r8d, r8d
lea rdx, [rbp + 0xd8]
lea rcx, [rbp + 0x50]
call fcn.1400d6d00
nop
lea rdx, [rbp + 0x50]
lea rcx, [rbp + 0xc8]
call fcn.1400d8050
nop
lea rcx, [rbp + 0x50]
call fcn.140058b00
xorps xmm0, xmm0
movups xmmword [rbp + 0xa8], xmm0
lea rdx, [rbp + 0xc8]
lea rcx, [rbp - 0x20]
call fcn.1400e3860
lea rdx, [rbp - 0x20]
lea rcx, [rbp + 0xa8]
call fcn.1400e3830
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x140111678
call fcn.1400d7900
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0xb8], xmm0
movdqu xmmword [rbp - 0x10], xmm0
lea rdx, [rbp + 0xc8]
lea rcx, [rbp - 0x10]
call fcn.1400eea40
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0xb8]
call fcn.1400d81d0
nop
nop dword [rax + rax]
mov rdi, qword [rbp + 0xa8]
cmp rdi, qword [rbp + 0xb8]
je 0x140111730
add rdi, 0x20
mov rdx, rdi
lea rcx, [rbp + 8]
call fcn.1400d0f80
cmp dword [rax], 2
jne 0x14011171a
mov rdx, rdi
lea rcx, [rbp + 0x98]
call fcn.1400f9f10
mov qword [rbp - 0x38], rbx
mov rax, qword [rbp + 0x98]
mov qword [rbp - 0x30], rax
lea rdx, [rbp - 0x38]
lea rcx, [rbp - 0x30]
call fcn.1401117e0
test al, al
jle 0x14011171a
mov rbx, qword [rbp + 0x98]
mov rdx, rdi
lea rcx, [rbp + 0xf8]
call fcn.1400d62c0
lea rcx, [rbp + 0xa8]
call fcn.1400d7bb0
test eax, eax
jne 0x1401117ce
jmp 0x1401116b0
mov rcx, qword [rbp + 0xc0]
test rcx, rcx
je 0x140111742
call fcn.1400d7900
nop
mov rcx, qword [rbp + 0xb0]
test rcx, rcx
je 0x140111754
call fcn.1400d7900
nop
mov rcx, qword [rbp + 0xd0]
test rcx, rcx
je 0x140111765
call fcn.1400d7900
lea rdx, [rbp + 0xf8]
mov rcx, r12
call fcn.1400d62f0
nop
lea rcx, [rbp + 0xf8]
call fcn.140058b00
nop
lea rcx, [rbp + 0xd8]
call fcn.140002820
nop
lea rcx, [rbp + 0x118]
call fcn.140002820
mov rax, r12
mov rcx, qword [rbp + 0x250]
xor rcx, rsp
call fcn.140196270
lea r11, [rsp + 0x360]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov edx, eax
lea rcx, str.directory_iterator::operator
call fcn.1400d7b50
int3