Function at 0x14010bd20
Capabilities:
Contain obfuscated stackstrings
Enumerate processes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x300]
sub rsp, 0x400
mov rax, qword [0x140236800]
xor rax, rsp
mov qword [rbp + 0x2f0], rax
mov r13, rdx
mov r12, qword [0x14023ce68]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.14010af10
mov rcx, r12
call fcn.14010bcb0
test al, al
jne 0x140111231
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x150], xmm0
mov qword [rbp + 0x160], rax
lea rcx, [rbp + 0x150]
call fcn.140049e40
nop
mov edx, 0x26e0
lea rcx, [rbp + 0x150]
call fcn.140114d30
lea r9, [rbp + 0x150]
lea r8, str.NtShutdownSystem
lea rdx, [0x1402152c0]
lea rcx, [rbp + 0xe8]
call fcn.140123f60
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x170], xmm0
movups xmmword [rbp + 0x180], xmm0
movups xmmword [rbp + 0x190], xmm0
movups xmmword [rbp + 0x1a0], xmm0
mov qword [rbp + 0x1b0], rax
lea rdx, [rbp + 0x150]
lea rcx, [rbp + 0xf0]
call fcn.1400fa230
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140044c20
nop
call fcn.14010a170
test al, al
jne 0x14010ca88
mov dword [rbp - 0x58], 0x191b6751
mov dword [rbp - 0x54], 0x6bdc1a66
mov dword [rbp - 0x50], 0x626cd16f
mov dword [rbp - 0x4c], 0x13d41111
mov dword [rbp - 0x48], 0xc7e7264
mov dword [rbp - 0x44], 0x31323378
mov word [rbp - 0x40], 0xdb30
mov byte [rbp - 0x3e], 0xe0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x3d], xmm0
mov qword [rbp - 0x2d], rax
movabs rsi, 0x354c9ce4f53c630b
movabs rdi, 0x878e47f259b94a39
movabs r12, 0xf658fb47daea7e9f
movabs r14, 0xc2507003dd52c055
movabs r15, 0xd59e7974277dc317
movabs r13, 0xe8ec82e471a8c5d9
movzx r11d, byte [rbp + 0x148]
nop
mov rax, qword [0x14023d108]
mov r9, qword [0x14023d100]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x14010ca7f
movzx r10d, byte [rbp + rbx - 0x58]
movzx r8d, r10b
cmp rax, rbx
ja 0x14010ca73
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x14010bf02
lea rdx, [rbx + r12]
mov rcx, r10
and rcx, rdx
imul r11, rcx, 0xfffffffffffffffe
add r11, r10
add r11, rdx
sub r11b, 0x59
jmp 0x14010bf15
je 0x14010ca00
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14010c993
movzx r8d, r10b
nop dword [rax]
cmp r9, rbx
ja 0x14010ca67
lea rcx, [r9 + 8]
cmp rax, rcx
jae 0x14010bf4a
lea rdx, [rbx + rsi]
movzx ecx, r10b
and cl, dl
add cl, cl
sub dl, cl
lea r11d, [r8 + rdx]
sub r11b, 0x4d
jmp 0x14010bf90
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x14010c938
inc rcx
cmp rax, rcx
je 0x14010c90c
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x14010c8e9
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14010c883
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x14010c85b
nop word [rax + rax]
lea rcx, [rax + r9]
cmp rcx, rbx
jbe 0x14010c512
nop dword [rax]
lea rcx, [r9 + 0x42]
cmp rax, rcx
je 0x14010c4ef
lea rcx, [r9 + 0x40]
cmp rax, rcx
je 0x14010c4c5
lea rcx, [r9 + 0x28]
cmp rax, rcx
je 0x14010c49e
lea rcx, [r9 + 0x20]
cmp rax, rcx
je 0x14010c47b
lea rcx, [r9 + 0x10]
cmp rax, rcx
je 0x14010c460
lea rcx, [r9 + 0xa]
cmp rax, rcx
je 0x14010c43f
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x14010c41f
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x14010c3ff
lea rcx, [r9 + 6]
cmp rax, rcx
je 0x14010c3d0
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x14010bfa0
lea rax, [r9 + 0x200]
lea r9, [rax + 4]
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x14010ca4c
lea rcx, [r9 + 0x64]
cmp rax, rcx
jb 0x14010ca31
lea rcx, [r9 + 5]
cmp rax, rcx
jb 0x14010c186
lea rcx, [r9 + 4]
cmp rax, rcx
jb 0x14010c16b
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x14010c150
lea rcx, [r9 + 2]
cmp rax, rcx
jb 0x14010c37a
lea rcx, [r9 + 1]
cmp rax, rcx
jb 0x14010c324
lea rcx, [r9 + 0x2a]
cmp rax, rcx
jb 0x14010c301
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x14010c2de
lea rcx, [r9 + 0x41]
cmp rax, rcx
jb 0x14010bfa0
lea rax, [r9 + 0x10]
lea r9, [rax + 0x7a]
lea rcx, [r9 + 0xa]
cmp rax, rcx
ja 0x14010c2af
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x14010c28e
lea rcx, [r9 + 8]
cmp rax, rcx
ja 0x14010c26e
lea rcx, [r9 + 6]
cmp rax, rcx
ja 0x14010c24d
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x14010c22c
lea rcx, [r9 + 0x1000]
cmp rax, rcx
ja 0x14010c20c
lea rcx, [r9 + 0x400]
cmp rax, rcx
ja 0x14010c1eb
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x14010c1c1
lea rcx, [r9 + 0x200]
cmp rax, rcx
ja 0x14010c1a1
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x14010bfa0
lea rax, [r9 + 3]
lea r9, [rax + 0x64]
jmp 0x14010bfa0
lea rdx, [rbx + r14]
movzx ecx, r10b
and cl, dl
add cl, cl
sub dl, cl
lea r11d, [r8 + rdx]
sub r11b, 0x53
jmp 0x14010bf90
lea rdx, [rbx + r15]
movzx ecx, r10b
and cl, dl
add cl, cl
sub dl, cl
lea r11d, [r8 + rdx]
add r11b, 0x5f
jmp 0x14010bf20
lea rdx, [rbx + r13]
movzx ecx, r10b
and cl, dl
add cl, cl
sub dl, cl
lea r11d, [r8 + rdx]
add r11b, 0x11
jmp 0x14010bed6
lea r8d, [rbx + 0x58]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x68
add r11b, r8b
jmp 0x14010c95c
lea r8d, [rbx + 0x1a]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_41
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
inc r9
dec rbx
inc rbx
jmp 0x14010bec2
lea edx, [rbx - 0x24]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 4
dec rbx
inc rbx
jmp 0x14010bec2
lea r8d, [rbx - 0x62]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x52
add r11b, r8b
jmp 0x14010c9b8
lea r8d, [rbx + 0x60]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_50
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
jmp 0x14010c9e4
lea r8d, [rbx + 0x22]
movzx ecx, r10b
and cl, r8b
mov edx, 9
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
jmp 0x14010c9e7
lea r8d, [rbx - 0x1c]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x3c
movzx edi, bl
jmp 0x14010c824
lea r8d, [rbx - 0x5a]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_60
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
jmp 0x14010c8a8
lea r8d, [rbx + 0x68]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_sendto
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
movzx ecx, byte [rbp + rbx - 0x58]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010bec2
lea edx, [rbx + 0x4d]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x1b
mov byte [rbp + rbx - 0x58], r11b
inc rbx
jmp 0x14010bec2
movzx edi, bl
lea r8d, [rdi + 0xf]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x69
add r11b, r8b
jmp 0x14010c7a5
lea r8d, [rbx - 0x2f]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
add r11b, 0x49
add r11b, r8b
cmp rax, 0x2a
jae 0x14010c7e5
lea rcx, [r9 + 0x28]
cmp rax, rcx
jbe 0x14010c6c6
movzx edi, bl
lea r8d, [rdi - 0x12]
movzx ecx, r10b
and cl, r8b
mov edx, 0x3f
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
jmp 0x14010c7a5
lea r8d, [rbx - 0x6d]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 5
add r11b, r8b
lea rcx, [rax + r9]
cmp rcx, 8
je 0x14010c80b
lea rcx, [r9 + 0x400]
cmp rax, rcx
jbe 0x14010c5c9
lea r8d, [rbx - 0x1d]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x35
jmp 0x14010c33c
lea r8d, [rbx + 0x42]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_26
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
movzx ecx, byte [rbp + rbx - 0x58]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010bec2
lea r8d, [rbx + 4]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x1c
add r11b, r8b
jmp 0x14010c8a8
movzx edi, bl
lea r8d, [rdi - 0x3a]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x6a
jmp 0x14010c824
lea r8d, [rbx - 0x78]
movzx ecx, r10b
and cl, r8b
mov edx, 0x24
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
jmp 0x14010c9e7
lea edx, [rbx + 0x4a]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 6
jmp 0x14010c9e4
movzx edi, bl
lea r8d, [rdi + 0xc]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x54
add r11b, r8b
jmp 0x14010c9bb
lea r8d, [rbx - 0x32]
movzx ecx, r10b
and cl, r8b
mov edx, Ordinal_50
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
dec rbx
inc rbx
jmp 0x14010bec2
lea r8d, [rbx - 0x70]
movzx ecx, r10b
and cl, r8b
mov edx, 8
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
inc r9
dec rbx
inc rbx
jmp 0x14010bec2
movzx edi, bl
lea r8d, [rdi + 0x52]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x3e
add r11b, r8b
jmp 0x14010c95f
lea rcx, [r9 + 0x40]
cmp rax, rcx
jae 0x14010c537
lea rdx, [rbx + r12]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r8b, cl
lea r11d, [rdx + r8]
sub r11b, 0x59
jmp 0x14010c395
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010c56f
lea r8d, [rbx + 0x16]
movzx ecx, r10b
and cl, r8b
mov edx, 0x33
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
movzx ecx, byte [rbp + rbx - 0x58]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010bec2
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14010c599
movzx edi, bl
lea r8d, [rdi - 0x6e]
movzx ecx, r10b
and cl, r8b
mov edx, 1
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
jmp 0x14010c824
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14010c395
movzx edi, bl
lea r8d, [rdi + 0x4c]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x14
add r11b, r8b
jmp 0x14010c9bb
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010c5f5
movzx edi, bl
lea r8d, [rdi + 0x21]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
add r11b, 0x19
add r11b, r8b
jmp 0x14010c95f
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x14010c61f
lea edx, [rbx - 0x63]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x4b
dec rbx
inc rbx
jmp 0x14010bec2
lea rcx, [r9 + 2]
cmp rax, rcx
jne 0x14010c643
lea edx, [rbx + 0x19]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
add r11b, 0x51
jmp 0x14010c9e4
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14010c667
lea edx, [rbx + 0x57]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x61
jmp 0x14010c9e7
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14010c690
movzx edi, bl
lea r8d, [rdi - 0x6b]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x13
jmp 0x14010c824
lea rcx, [r9 + 8]
cmp rax, rcx
jne 0x14010c33f
lea edx, [rbx + 0x11]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x77
movzx ecx, byte [rbp + rbx - 0x58]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010bec2
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x14010c6f8
lea edx, [rbx + 0x2c]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x34
movzx ecx, byte [rbp + rbx - 0x58]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010bec2
inc rcx
cmp rax, rcx
jne 0x14010c721
movzx edi, bl
lea r8d, [rdi - 0x58]
movzx ecx, r10b
and cl, r8b
mov edx, 0x34
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
jmp 0x14010c824
lea rcx, [r9 + 4]
cmp rax, rcx
jne 0x14010c74b
lea r8d, [rbx + 0x24]
movzx ecx, r10b
and cl, r8b
mov edx, 2
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r10b
add r11b, r8b
jmp 0x14010c9e4
lea rcx, [r9 + 6]
cmp rax, rcx
jne 0x14010c775
lea edx, [rbx - 0x60]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x60
dec rbx
inc rbx
jmp 0x14010bec2
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x14010c7a2
lea edx, [rbx - 0x22]
movzx ecx, r10b
and cl, dl
add cl, cl
sub r10b, cl
lea r11d, [rdx + r10]
sub r11b, 0x12
inc r9
dec rbx
inc rbx
jmp 0x14010bec2
movzx edi, bl
cmp r9, 2
jb 0x14010c7ce
lea r8d, [rdi + 0x5a]
movzx ecx, r10b
and cl, r8b
mov edx, 5
sub dl, cl
add dl, dl
add dl, r10b
add dl, r8b
lea r11d, [rdx + rdx]
jmp 0x14010c95f
movabs rdi, 0x878e47f259b94a39
mov byte [rbp + rbx - 0x58], r11b
inc rbx
jmp 0x14010bec2
movzx edi, bl
lea r8d, [rdi - 0x68]
movzx ecx, r10b
and cl, r8b
add cl, cl
movzx r11d, r10b
sub r11b, cl
sub r11b, 0x28
add r11b, r8b
add r11b, r10b
jmp 0x14010c9bb
movzx edi, bl
lea r8d, [rdi - 0x2a]
movzx ecx, r10b
and cl, r8b
mov edx, reloc.WS2_32.dll_send
sub dl, cl
lea r11d, [rdx + rdx]
add r11b, r8b
add dil, 0x75
movzx ecx, dil
and cl, r10b
add cl, cl
sub dil, cl
sub dil, 0x33
add dil, r10b
movzx ecx, dil
mov byte [rbp + rbx - 0x58], cl
inc r9
add rcx, r9
sub rbx, rcx
movabs rdi, 0x878e47f259b94a39
jmp 0x14010c8a8
lea rcx, [rbx + rdi]
and r10b, cl
add r10b, r10b
sub r8b, r10b
lea r11d, [rcx + r8]
add r11b, 0x71
movzx ecx, byte [rbp + rbx - 0x58]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010bec2
movabs rdx, 0x9adc5162a3e44cfb
add rdx, rbx
and r10b, dl
add r10b, r10b
movzx r11d, r8b
sub r11b, r10b
add r11b, 0x23
add r11b, dl
movzx r10d, r8b
lea r8d, [rbx + 0x14]
movzx ecx, r8b
and cl, r10b
mov edx, Ordinal_60
sub dl, cl
add dl, dl
add dl, r8b
add dl, r10b
mov byte [rbp + rbx - 0x58], dl
inc rax
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x58]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010bec2
movabs rcx, 0xc1786443383a527f
add rcx, rbx
and r10b, cl
add r10b, r10b
sub r8b, r10b
lea r11d, [rcx + r8]
sub r11b, 0x79
jmp 0x14010c9e7
movabs rcx, 0xeb08a0460e65d87
add rcx, rbx
and r10b, cl
add r10b, r10b
sub r8b, r10b
lea r11d, [rcx + r8]
add r11b, 0x4f
inc r9
dec rbx
inc rbx
jmp 0x14010bec2
movabs rdx, 0x21fe9374ab116049
add rdx, rbx
and r10b, dl
add r10b, r10b
movzx r11d, r8b
sub r11b, r10b
inc r11b
add r11b, dl
movzx r10d, r8b
movzx edi, bl
sub dil, 7
movzx ecx, dil
and cl, r10b
add cl, cl
sub dil, cl
add dil, 0x31
add dil, r10b
mov byte [rbp + rbx - 0x58], dil
movabs rdi, 0x878e47f259b94a39
inc r9
dec rbx
inc rbx
jmp 0x14010bec2
movabs rdx, 0x8284c2a61de86e13
add rdx, rbx
and r10b, dl
add r10b, r10b
movzx r11d, r8b
sub r11b, r10b
add r11b, 0x7b
add r11b, dl
movzx r10d, r8b
movzx edi, bl
add dil, 0x37
movzx ecx, dil
and cl, r10b
add cl, cl
sub dil, cl
add dil, 0x7f
add dil, r11b
add dil, r10b
mov byte [rbp + rbx - 0x58], dil
movabs rdi, 0x878e47f259b94a39
add rax, r9
movzx ecx, r11b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x14010bec2
movabs rcx, 0xe30af1d790bf7bdd
add rcx, rbx
and r10b, cl
add r10b, r10b
sub r8b, r10b
lea r11d, [rcx + r8]
sub r11b, 0xb
movzx ecx, byte [rbp + rbx - 0x58]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x14010bec2
sub bl, 0x65
movzx ecx, r10b
and cl, bl
add cl, cl
sub r10b, cl
lea r11d, [rbx + r10]
sub r11b, 0x3d
jmp 0x14010bec0
add bl, 0x5d
movzx eax, r10b
and al, bl
add al, al
sub r10b, al
lea r11d, [rbx + r10]
add r11b, 0x75
jmp 0x14010beb0
lea rdx, [rbp + 0x14d127c]
jmp 0x1401111a8
lea rdx, [rbp + 0xf7911b]
jmp 0x1401111a8
lea rdx, [rbp - 0x58]
jmp 0x1401111a8
lea rcx, [rbp + 0x149]
call fcn.14004f210
mov dword [rbp - 0x20], 0x291b1b08
mov dword [rbp - 0x1c], 0x1f461705
mov dword [rbp - 0x18], 0x1d5a1205
mov dword [rbp - 0x14], 0x5f0c1c1d
mov dword [rbp - 0x10], 0x17130e00
mov dword [rbp - 0xc], 0x45441515
mov word [rbp - 8], 0xab46
mov byte [rbp - 6], 0x8a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 5], xmm0
mov qword [rbp + 0xb], rax
movabs rsi, 0x92d298a003a00f46
movabs r15, 0xde1cfb2012204c5e
movabs r14, 0xb877c9e00ae02dd2
movzx ebx, byte [rbp + 0x148]
nop word [rax + rax]
mov r8, qword [0x14023d108]
mov r9, qword [0x14023d100]
nop
xor edi, edi
cmp rdi, 0x33
jae 0x14010d5c3
movzx r11d, byte [rbp + rdi - 0x20]
mov edx, r11d
cmp r8, rdi
ja 0x14010d5ba
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010cb50
lea rcx, [rdi + rsi]
mov rax, rdx
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rdx
add rbx, rcx
add bl, 0x16
jmp 0x14010cb89
je 0x14010d549
inc rax
cmp r8, rax
je 0x14010d4f6
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010d4aa
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010d452
lea rax, [r9 + 8]
cmp r8, rax
je 0x14010d40f
movzx r10d, dil
nop dword [rax]
cmp r9, rdi
ja 0x14010d5b1
lea rax, [r9 + 0x1000]
cmp r8, rax
jae 0x14010cbbc
lea ecx, [r10 - 0x42]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x32
jmp 0x14010cbf0
lea rcx, [r9 + 1]
cmp r8, rcx
je 0x14010d3f8
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010d3d2
lea rax, [rcx + 1]
cmp r8, rax
je 0x14010d3b4
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010d398
lea rax, [r8 + r9]
cmp rax, rdi
jbe 0x14010d154
nop dword [rax]
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x14010d136
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x14010d111
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14010d0ef
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010d0d3
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x14010d0b3
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010d093
lea rax, [r9 + 0x40]
cmp r8, rax
je 0x14010d075
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x14010d057
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14010d02d
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010cc00
lea r8, [r9 + 0x61]
lea r9, [r8 + 0x200]
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14010d591
lea rax, [r9 + 0x41]
cmp r8, rax
jb 0x14010d571
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14010cddf
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x14010cdc5
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14010cdab
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14010cfd8
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x14010cf8a
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14010cf4b
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x14010cf28
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14010cc00
lea r8, [r9 + 0x1000]
lea r9, [r8 + 0x2a]
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x14010cefa
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010ceda
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14010cebc
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14010cea0
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14010ce84
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x14010ce68
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x14010ce42
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x14010ce19
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x14010cdfb
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14010cc00
lea r8, [r9 + 0x400]
lea r9, [r8 + 0x5a]
jmp 0x14010cc00
lea ecx, [r10 + 2]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0xe
jmp 0x14010cbf0
lea ecx, [r10 + 0x76]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x3a
jmp 0x14010cb90
sub r10b, 0x16
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x66
jmp 0x14010cb25
lea edx, [r10 - 0x10]
movzx eax, r11b
and al, dl
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14010d428
add r10b, 0x64
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_35
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
inc r9
dec rdi
inc rdi
jmp 0x14010cb12
sub r10b, 0x28
movzx eax, r11b
and al, r10b
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
dec rdi
inc rdi
jmp 0x14010cb12
lea edx, [r10 + 0x4c]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x14
add bl, dl
jmp 0x14010d46f
sub r10b, 0x40
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x40
jmp 0x14010d48f
add r10b, 0x34
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x6c
jmp 0x14010d492
lea edx, [r10 - 0x58]
movzx eax, r11b
and al, dl
mov ecx, 0x34
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14010d4ca
add r10b, 0x1c
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010d50b
sub r10b, 0x70
movzx eax, r11b
and al, r10b
mov ecx, 8
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
movzx eax, byte [rbp + rdi - 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cb12
add r10b, 0x32
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x5e
mov byte [rbp + rdi - 0x20], bl
inc rdi
jmp 0x14010cb12
lea edx, [r10 - 0x5a]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
cmp r9, 0x10
jb 0x14010cf3f
lea edx, [r10 - 0x1c]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, dl
lea ebx, [rcx*2 - 0x78]
jmp 0x14010d428
lea edx, [r10 + 0x1a]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
cmp r8, 0x20
jae 0x14010d35e
lea rax, [r9 + 0x80]
cmp r8, rax
jbe 0x14010d2ff
lea edx, [r10 + 0x6c]
movzx eax, r11b
and al, dl
mov ecx, 6
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14010cf64
lea edx, [r10 - 0x72]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
lea rax, [r8 + r9]
cmp rax, 0x28
je 0x14010d37d
lea rax, [r9 + 0x200]
cmp r8, rax
jbe 0x14010d24e
lea edx, [r10 - 0x52]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_35
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14010cfa3
add r10b, 0x74
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x2c
movzx eax, byte [rbp + rdi - 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cb12
sub r10b, 0x18
movzx eax, r11b
and al, r10b
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x58
add bl, r10b
jmp 0x14010d50b
lea edx, [r10 + 0x5c]
movzx eax, r11b
and al, dl
mov ecx, 0x3e
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14010d4ca
sub r10b, 0x30
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010d492
add r10b, 0x44
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010d48f
lea edx, [r10 - 0x48]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 8
add bl, dl
jmp 0x14010d46f
add r10b, 0x2c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x34
dec rdi
inc rdi
jmp 0x14010cb12
sub r10b, 0x60
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x60
inc r9
dec rdi
inc rdi
jmp 0x14010cb12
lea edx, [r10 + 0x14]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14010d428
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x14010d17b
lea edx, [r10 + 0x46]
movzx eax, r11b
and al, dl
mov ecx, listen
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14010cff1
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010d1ae
add r10b, 0x7c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x64
movzx eax, byte [rbp + rdi - 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cb12
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010d1d3
lea edx, [r10 - 0x6c]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0xc
add bl, dl
jmp 0x14010d4ca
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010d1fc
add r10b, 0x20
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010d492
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010d225
sub r10b, 0x54
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010d48f
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010cff1
lea edx, [r10 - 0x24]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 4
add bl, dl
jmp 0x14010d428
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010d275
lea edx, [r10 + 0x3a]
movzx eax, r11b
and al, dl
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14010d428
inc rax
cmp r8, rax
jne 0x14010d29f
add r10b, 0x52
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x3e
dec rdi
inc rdi
jmp 0x14010cb12
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010d2c8
sub r10b, 0xa
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_35
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010d492
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14010cfa3
sub r10b, 0x66
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x36
movzx eax, byte [rbp + rdi - 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cb12
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010d336
sub r10b, 8
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
movzx eax, byte [rbp + rdi - 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cb12
inc rax
cmp r8, rax
jne 0x14010cf64
lea edx, [r10 + 0x10]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x70
add bl, dl
jmp 0x14010d4ca
lea edx, [r10 + 0x70]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x10
add bl, r11b
add bl, dl
jmp 0x14010d46f
lea edx, [r10 - 4]
movzx eax, r11b
and al, dl
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x14010d4ca
add r10b, 6
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x2a
jmp 0x14010d492
lea edx, [r10 - 0x12]
movzx eax, r11b
and al, dl
mov ecx, 0x3f
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14010d46f
add r10b, 0x62
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010cb12
lea ecx, [r10 + 0x4a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 6
jmp 0x14010d428
movzx r10d, dil
lea ecx, [r10 + 0x32]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x5e
add r10b, 0x2a
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x26
add r11b, r10b
mov byte [rbp + rdi - 0x20], r11b
inc r9
dec rdi
inc rdi
jmp 0x14010cb12
movzx r10d, dil
lea edx, [r10 - 0x72]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
sub r10b, 0x4a
movzx eax, r11b
and al, r10b
mov ecx, 3
sub cl, al
add cl, cl
add cl, r11b
add cl, bl
add cl, r10b
mov byte [rbp + rdi - 0x20], cl
add r8, r9
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x14010cb12
movabs rcx, 0x3c22c6019606aea
add rcx, rdi
and dl, cl
add dl, dl
movzx ebx, r11b
sub bl, dl
sub bl, 0x66
add bl, cl
movzx r10d, dil
add r10b, 0x42
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_26
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
movzx eax, cl
mov byte [rbp + rdi - 0x20], al
inc r9
add rax, r9
sub rdi, rax
jmp 0x14010d50b
lea rcx, [rdi + r15]
and dl, cl
mov eax, gethostname
sub al, dl
lea ebx, [rax + rax]
add bl, r11b
add bl, cl
lea edx, [rdi - 0x78]
movzx eax, dl
and al, r11b
mov ecx, 0x24
sub cl, al
add cl, cl
add cl, dl
add cl, r11b
mov byte [rbp + rdi - 0x20], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi - 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cb12
lea rcx, [rdi + r14]
and dl, cl
mov eax, reloc.WLDAP32.dll_Ordinal_33
sub al, dl
lea ebx, [rax + rax]
add bl, r11b
add bl, cl
movzx eax, byte [rbp + rdi - 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010cb12
add r10b, 0x5e
movzx eax, r11b
and al, r10b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010cb10
sub r10b, 0x2e
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_33
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010cb00
lea rdx, [rbp + 0x14a42e8]
jmp 0x14010d5c7
lea rdx, [rbp + 0x12a522e]
jmp 0x14010d5c7
lea rdx, [rbp - 0x20]
mov rcx, qword [0x14023cdc8]
call fcn.1400cc460
mov rsi, qword [0x14023d0e0]
mov dword [rbp + 0x90], 0xce12c215
mov dword [rbp + 0x94], 0xd2c6c5d5
mov dword [rbp + 0x98], 0x333ae92c
mov dword [rbp + 0x9c], 0x2c373e45
mov dword [rbp + 0xa0], 0x33e23d21
mov dword [rbp + 0xa4], 0xe7232225
mov dword [rbp + 0xa8], 0xebfa17e5
mov dword [rbp + 0xac], 0xc52ef854
mov byte [rbp + 0xb0], Ordinal_211
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0xb1], xmm0
movups xmmword [rbp + 0xc1], xmm0
mov word [rbp + 0xd1], ax
movabs r14, 0x8e09162f148a32f8
movabs r15, 0xfe51c7a7b8dbcab8
movzx edx, byte [rbp + 0x148]
nop word [rax + rax]
mov r8, qword [0x14023d108]
mov r9, qword [0x14023d100]
nop
xor ebx, ebx
cmp rbx, 0x43
jae 0x14010e217
movzx r11d, byte [rbp + rbx + 0x90]
mov edi, r11d
nop dword [rax + rax]
cmp r8, rbx
ja 0x14010e20e
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010d6cb
lea rcx, [rbx + r14]
mov rax, rdi
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rdi
add rdx, rcx
add dl, 0x38
jmp 0x14010d711
je 0x14010e196
inc rax
cmp r8, rax
je 0x14010e103
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010e0d7
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010e097
lea rax, [r9 + 7]
cmp r8, rax
je 0x14010e075
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010e02c
movzx r10d, bl
cmp r9, rbx
ja 0x14010e205
lea rax, [r9 + 0x1000]
cmp r8, rax
jae 0x14010d741
lea ecx, [r10 + 0x58]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x68
jmp 0x14010d780
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010e021
inc rax
cmp r8, rax
je 0x14010dfff
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010dfe0
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010dfc6
nop dword [rax]
nop dword [rax + rax]
lea rax, [r9 + r8]
cmp rax, rbx
jbe 0x14010dcb8
nop dword [rax]
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14010dcaa
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x14010dc85
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010dc63
lea rax, [r9 + 9]
cmp r8, rax
je 0x14010dc46
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x14010dc27
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010dc07
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x14010dbed
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010dbcd
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x14010dba0
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010d790
lea r8, [r9 + 0x41]
lea r9, [r8 + 0xa]
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14010e1e9
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14010e1c9
lea rax, [r9 + 0x80]
cmp r8, rax
jb 0x14010d973
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14010d959
lea rcx, [r9 + 3]
cmp r8, rcx
jb 0x14010d93c
lea rax, [r9 + 0xa]
cmp r8, rax
jb 0x14010db5f
lea rax, [r9 + 0x64]
cmp r8, rax
jb 0x14010db19
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14010dadb
lea rax, [r9 + 0x20]
cmp r8, rax
jb 0x14010dab1
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14010d790
mov r8, rcx
lea r9, [rcx + 0x41]
lea rax, [r9 + 0xa]
cmp rcx, rax
ja 0x14010da80
lea rax, [r9 + 0x64]
cmp rcx, rax
ja 0x14010da64
lea rax, [r9 + 0x61]
cmp rcx, rax
ja 0x14010da47
lea rax, [r9 + 0x20]
cmp rcx, rax
ja 0x14010da2b
lea rcx, [r9 + 0x200]
cmp r8, rcx
ja 0x14010da13
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14010d9f6
lea rax, [r9 + 4]
cmp r8, rax
ja 0x14010d9d4
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x14010d9ab
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010d98f
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010d790
mov r8, rcx
lea r9, [rcx + 3]
jmp 0x14010d790
lea edx, [r10 - 0x58]
movzx eax, dl
and al, r11b
mov ecx, 0x34
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010d780
lea ecx, [r10 - 0x48]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 8
jmp 0x14010d715
sub r10b, 0x38
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x78
jmp 0x14010d6a0
lea edx, [r10 - 0x40]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
sub dl, 0x40
add dl, cl
jmp 0x14010e048
sub r10b, 0x30
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r11b
add dl, r10b
inc r9
dec rbx
inc rbx
jmp 0x14010d682
sub r10b, 0x20
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edx, [r10 + r11]
sub dl, 0x20
dec rbx
inc rbx
jmp 0x14010d682
lea edx, [r10 - 0x10]
movzx eax, r11b
and al, dl
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r11b
add dl, cl
jmp 0x14010e0b0
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add r8, r9
jmp 0x14010e0eb
add r10b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x70
jmp 0x14010e0eb
lea edx, [r10 + 0x20]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010e126
add r10b, 0x30
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x50
jmp 0x14010e153
add r10b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010d682
add r10b, 0x68
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
mov byte [rbp + rbx + 0x90], dl
inc rbx
jmp 0x14010d682
lea ecx, [r10 + 0x78]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x48
cmp r9, 0x80
jb 0x14010dacc
lea edx, [r10 - 0x30]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, dl
lea edx, [rcx*2 - 0x60]
jmp 0x14010e048
lea edx, [r10 - 0x78]
movzx eax, dl
and al, r11b
mov ecx, 0x24
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
cmp r8, 2
jae 0x14010df8f
lea rax, [r9 + 0x40]
cmp r8, rax
jbe 0x14010deb7
lea ecx, [r10 + 0x70]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x10
jmp 0x14010daf0
lea ecx, [r10 - 0x68]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x28
lea rax, [r9 + r8]
cmp rax, 0x40
je 0x14010dfae
lea rax, [r9 + 9]
cmp r8, rax
jbe 0x14010dddd
lea edx, [r10 + 0x18]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_45
jmp 0x14010db28
add r10b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x70
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010d682
add r10b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010e153
lea ecx, [r10 + 0x30]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x50
jmp 0x14010e126
add r10b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010e0eb
add r10b, 0x50
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x30
add r8, r9
jmp 0x14010e0eb
lea edx, [r10 + 0x60]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010e0b0
add r10b, 0x70
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x10
dec rbx
inc rbx
jmp 0x14010d682
add r10b, 0x80
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x80
inc r9
dec rbx
inc rbx
jmp 0x14010d682
lea edx, [r10 - 0x70]
mov ecx, 8
jmp 0x14010e039
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x14010dcde
lea edx, [r10 - 8]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010db74
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010dd18
sub r10b, 0x50
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_26
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010d682
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010dd3e
lea edx, [r10 - 0x70]
movzx eax, dl
and al, r11b
mov ecx, 8
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010e126
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010dd63
add r10b, 0x80
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x80
jmp 0x14010e0eb
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010dd8b
add r10b, 0x70
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x10
add r8, r9
jmp 0x14010e0eb
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010ddb6
add r10b, 0x50
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x30
dec rbx
inc rbx
jmp 0x14010d682
lea rax, [r9 + 9]
cmp r8, rax
jne 0x14010db74
lea ecx, [r10 + 0x30]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x50
jmp 0x14010e048
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010de00
lea ecx, [r10 + 8]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x38
jmp 0x14010e048
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010de2b
sub r10b, 0x18
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x58
dec rbx
inc rbx
jmp 0x14010d682
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010de53
sub r10b, 0x38
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x78
add r8, r9
jmp 0x14010e0eb
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010de79
lea edx, [r10 - 0x58]
movzx eax, dl
and al, r11b
mov ecx, 0x34
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010e126
lea rax, [r9 + 8]
cmp r8, rax
jne 0x14010db31
sub r10b, 0x78
movzx eax, r10b
and al, r11b
mov ecx, 0x24
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010d682
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x14010def1
add r10b, 0x60
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010d682
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010df17
lea edx, [r10 + 0x40]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010e126
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14010df3c
add r10b, 0x30
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x50
jmp 0x14010e0eb
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010df68
add r10b, 0x20
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
add r8, r9
jmp 0x14010e0eb
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010daf0
lea ecx, [r10 + 0x10]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x70
jmp 0x14010e0b0
lea edx, [r10 - 0x40]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, r11b
sub dl, 0x40
add dl, cl
jmp 0x14010e0b0
lea edx, [r10 - 0x50]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_26
sub cl, al
add cl, cl
jmp 0x14010e124
lea ecx, [r10 - 0x18]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x58
jmp 0x14010e126
add r10b, 8
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x38
add r8, r9
jmp 0x14010e0eb
add r10b, 0x28
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x18
dec rbx
inc rbx
jmp 0x14010d682
lea edx, [r10 + 0x48]
mov ecx, 4
jmp 0x14010e039
movzx r10d, bl
lea edx, [r10 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
sub r10b, 0x38
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x78
add r11b, r10b
mov byte [rbp + rbx + 0x90], r11b
inc r9
dec rbx
inc rbx
jmp 0x14010d682
lea edx, [rbx - 0x78]
movzx eax, dl
and al, r11b
mov ecx, 0x24
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
dec rbx
inc rbx
jmp 0x14010d682
movzx r10d, bl
lea ecx, [r10 - 0x68]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x28
sub r10b, 0x48
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 8
add r11b, r10b
add r11b, dl
mov byte [rbp + rbx + 0x90], r11b
add r8, r9
jmp 0x14010e0eb
lea rax, [rbx + r15]
and dil, al
add dil, dil
sub r11b, dil
lea edx, [rax + r11]
sub dl, 8
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010d682
movabs rcx, 0xe23f9b498fc764c8
add rcx, rbx
and dil, cl
add dil, dil
movzx edx, r11b
sub dl, dil
sub dl, 0x78
movzx r10d, bl
add dl, cl
sub r10b, 0x58
movzx eax, r10b
and al, r11b
mov ecx, 0x34
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
movzx eax, cl
mov byte [rbp + rbx + 0x90], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx - 0x60]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
sub r11b, 0x60
add r11b, cl
mov byte [rbp + rbx + 0x90], r11b
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010d682
movabs rax, 0xaa1b428d3d9e98e8
add rax, rbx
and dil, al
add dil, dil
sub r11b, dil
lea edx, [rax + r11]
sub dl, 0x58
movzx eax, byte [rbp + rbx + 0x90]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010d682
sub r10b, 0x28
movzx eax, r10b
and al, r11b
mov ecx, recv
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010d680
sub r10b, 0x18
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x58
jmp 0x14010d670
lea rdx, [rbp + 0x15a3f30]
jmp 0x14010e21e
lea rdx, [rbp + 0x1247228]
jmp 0x14010e21e
lea rdx, [rbp + 0x90]
mov r9, rsi
lea r8, str.NtShutdownSystem
mov rcx, qword [0x14023cdc8]
call fcn.140117090
movzx esi, word [0x14023d0e8]
mov dword [rbp + 0x18], 0x3b8a3281
mov dword [rbp + 0x1c], 0xf7bbc2c9
mov dword [rbp + 0x20], 0x4cb8bf47
mov dword [rbp + 0x24], 0x8afe4dbd
mov dword [rbp + 0x28], 0x438afd9e
mov dword [rbp + 0x2c], 0xc7f041f5
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], rax
mov word [rbp + 0x48], ax
mov byte [rbp + 0x4a], al
movabs r14, 0xbe4bdb9ce4938d3a
movabs r15, 0xb0aab884092ff70a
movzx edx, byte [rbp + 0x148]
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [0x14023d108]
mov r9, qword [0x14023d100]
nop
xor ebx, ebx
cmp rbx, 0x33
jae 0x14010ed9f
movzx r11d, byte [rbp + rbx + 0x18]
mov edi, r11d
cmp r8, rbx
ja 0x14010ed96
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x14010e2f0
lea rcx, [rbx + r14]
mov rax, rcx
and rax, rdi
imul rdx, rax, 0xfffffffffffffffe
add rdx, rcx
add rdx, rdi
add dl, 0x6a
jmp 0x14010e32a
je 0x14010ed1a
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010ec93
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010ec67
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010ec4e
lea rax, [rcx + 1]
cmp r8, rax
je 0x14010ec0d
movzx r10d, bl
nop
cmp r9, rbx
ja 0x14010ed8d
lea rax, [r9 + 8]
cmp r8, rax
jae 0x14010e359
lea ecx, [r10 - 0x3e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x4e
jmp 0x14010e3a0
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010ebce
inc rax
cmp r8, rax
je 0x14010eba8
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010eb89
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010eb6d
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010eb50
nop dword [rax]
lea rax, [r8 + r9]
cmp rax, rbx
jbe 0x14010e8c3
nop dword [rax]
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14010e8a9
lea rax, [r9 + 9]
cmp r8, rax
je 0x14010e880
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14010e85a
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010e84c
lea rcx, [r9 + 0x3e8]
cmp r8, rcx
je 0x14010e82d
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14010e811
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x14010e7f7
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010e7d7
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010e7a9
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010e3b0
mov r8, rcx
lea r9, [rcx + 0x7a]
lea rax, [r9 + 0x10]
cmp rcx, rax
jb 0x14010ed6d
lea rax, [r9 + 0x20]
cmp rcx, rax
jb 0x14010ed4d
lea rax, [r9 + 3]
cmp rcx, rax
jb 0x14010e591
lea rax, [r9 + 4]
cmp rcx, rax
jb 0x14010e577
lea rax, [r9 + 0x61]
cmp rcx, rax
jb 0x14010e55d
lea rax, [r9 + 0x7a]
cmp rcx, rax
jb 0x14010e765
lea rax, [r9 + 0x42]
cmp rcx, rax
jb 0x14010e71f
lea rax, [r9 + 0x64]
cmp rcx, rax
jb 0x14010e6e2
lea rax, [r9 + 8]
cmp rcx, rax
jb 0x14010e6bf
lea rax, [r9 + 9]
cmp rcx, rax
jb 0x14010e3b0
lea r8, [r9 + 0x28]
lea r9, [r8 + 0x2a]
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x14010e695
lea rax, [r9 + 5]
cmp r8, rax
ja 0x14010e679
lea rax, [r9 + 6]
cmp r8, rax
ja 0x14010e65f
lea rax, [r9 + 0x41]
cmp r8, rax
ja 0x14010e63f
lea rax, [r9 + 0x5a]
cmp r8, rax
ja 0x14010e61c
lea rax, [r9 + 0x80]
cmp r8, rax
ja 0x14010e60e
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x14010e5ec
lea rax, [r9 + 0xa]
cmp r8, rax
ja 0x14010e5c7
lea rax, [r9 + 0x10]
cmp r8, rax
ja 0x14010e5ad
lea rax, [r9 + 2]
cmp r8, rax
ja 0x14010e3b0
lea r8, [r9 + 0x64]
lea r9, [r8 + 3]
jmp 0x14010e3b0
lea ecx, [r10 + 0x7e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x72
jmp 0x14010e3a0
lea ecx, [r10 + 0xa]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x46
jmp 0x14010e330
sub r10b, 0x6a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x1a
jmp 0x14010e2c5
lea ecx, [r10 + 0x10]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x70
jmp 0x14010ebe3
sub r10b, 0x64
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x44
inc r9
dec rbx
inc rbx
jmp 0x14010e2b2
add r10b, 0x28
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x18
dec rbx
inc rbx
jmp 0x14010e2b2
lea edx, [r10 - 0x4c]
mov ecx, 0xa
jmp 0x14010ec1a
add r10b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
add r8, r9
jmp 0x14010ec7b
sub r10b, 0x34
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010ec7b
lea ecx, [r10 + 0x58]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x68
jmp 0x14010ecb6
sub r10b, 0x1c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x3c
jmp 0x14010ece0
add r10b, 0x70
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x10
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e2b2
add r10b, 0x4e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x22
mov byte [rbp + rbx + 0x18], dl
inc rbx
jmp 0x14010e2b2
lea edx, [r10 - 0x26]
movzx eax, dl
and al, r11b
mov ecx, 5
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
cmp r9, 5
jb 0x14010e6d6
lea ecx, [r10 + 0x1c]
movzx eax, cl
and al, r11b
mov edx, reloc.WLDAP32.dll_Ordinal_30
sub dl, al
add dl, dl
add dl, cl
add dl, r11b
add dl, dl
jmp 0x14010ebe3
lea edx, [r10 + 0x66]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_27
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
cmp r8, 2
jae 0x14010eb1e
lea rax, [r9 + 0x64]
cmp r8, rax
jbe 0x14010eaa0
lea ecx, [r10 - 0x6c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0xc
jmp 0x14010e6fa
lea edx, [r10 - 0xe]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
lea rax, [r8 + r9]
cmp rax, 0x5a
je 0x14010eb3a
lea rax, [r9 + 0x28]
cmp r8, rax
jbe 0x14010e9ed
lea edx, [r10 - 0x2e]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_33
jmp 0x14010e72e
sub r10b, 0x74
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e2b2
add r10b, 0x18
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010ece0
lea ecx, [r10 - 0x5c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x7c
jmp 0x14010ecb6
add r10b, 0x30
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x50
jmp 0x14010ec7b
sub r10b, 0x44
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x24
add r8, r9
jmp 0x14010ec7b
lea edx, [r10 + 0x48]
mov ecx, 4
jmp 0x14010ec1a
sub r10b, 0x2c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010e2b2
add r10b, 0x60
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x14010e2b2
lea ecx, [r10 - 0x14]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x74
jmp 0x14010ebe3
lea rax, [r9 + 0x7a]
cmp r8, rax
jae 0x14010e8e0
lea edx, [r10 + 0x3a]
movzx eax, dl
and al, r11b
mov ecx, gethostname
jmp 0x14010e774
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010e917
sub r10b, 0x7c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e2b2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010e93f
add r10b, 0x54
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x4c
add r8, r9
jmp 0x14010ec7b
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010e962
lea ecx, [r10 - 0x38]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x78
jmp 0x14010ec29
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010e991
add r10b, 0x3c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010e2b2
lea rax, [r9 + 7]
cmp r8, rax
jne 0x14010e9c3
sub r10b, 0x50
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_26
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
inc r9
dec rbx
inc rbx
jmp 0x14010e2b2
lea rax, [r9 + 9]
cmp r8, rax
jne 0x14010e77d
lea edx, [r10 + 0x24]
movzx eax, dl
and al, r11b
mov ecx, 2
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010ebe3
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010ea13
lea edx, [r10 + 0x46]
movzx eax, dl
and al, r11b
mov ecx, listen
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010ebe3
inc rax
cmp r8, rax
jne 0x14010ea40
sub r10b, 0x46
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x16
inc r9
dec rbx
inc rbx
jmp 0x14010e2b2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010ea69
sub r10b, 0x76
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_30
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010ec7b
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010e737
sub r10b, 0x1a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x4a
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e2b2
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010ead3
add r10b, 8
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x38
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e2b2
inc rax
cmp r8, rax
jne 0x14010eaf7
add r10b, 0x7c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x64
jmp 0x14010ece0
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010e6fa
lea ecx, [r10 + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x14
jmp 0x14010ec29
lea edx, [r10 - 0x70]
movzx eax, dl
and al, r11b
movzx ecx, r11b
sub cl, al
add cl, 8
add cl, cl
add dl, cl
jmp 0x14010ec29
lea ecx, [r10 + 4]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [rcx - 0x1c]
jmp 0x14010ecb6
lea edx, [r10 - 0x12]
movzx eax, dl
and al, r11b
mov ecx, 0x3f
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x14010ecb6
add r10b, 0x7a
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x56
jmp 0x14010ec7b
add r10b, 6
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x2a
add r8, r9
jmp 0x14010ec7b
add r10b, 0x1e
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rbx
inc rbx
jmp 0x14010e2b2
lea ecx, [r10 + 0x36]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x7a
add r10b, 0x56
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x5a
add r11b, r10b
mov byte [rbp + rbx + 0x18], r11b
inc r9
dec rbx
inc rbx
jmp 0x14010e2b2
movzx r10d, bl
lea edx, [r10 - 0xe]
mov ecx, Ordinal_50
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
sub r10b, 0x36
movzx eax, r11b
and al, r10b
mov ecx, 0x3d
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
add cl, dl
mov byte [rbp + rbx + 0x18], cl
add r8, r9
jmp 0x14010ec7b
lea ecx, [rbx + 0x7e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x72
add r8, r9
jmp 0x14010ec7b
lea rax, [rbx + r15]
and dil, al
add dil, dil
sub r11b, dil
lea edx, [rax + r11]
sub dl, 0x46
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rbx, rcx
inc rbx
jmp 0x14010e2b2
movabs rcx, 0x3413014a4008dc96
add rcx, rbx
and dil, cl
add dil, dil
movzx edx, r11b
sub dl, dil
sub dl, 0x1a
add dl, cl
movzx r10d, bl
add r10b, 0x3e
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
movzx eax, cl
mov byte [rbp + rbx + 0x18], al
inc r9
add rax, r9
sub rbx, rax
lea ecx, [rbx + 0x78]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
sub cl, 0x48
add cl, r11b
mov byte [rbp + rbx + 0x18], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rbx, rax
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e2b2
movabs rcx, 0x3ae392d6adbaa7ae
add rcx, rbx
and dil, cl
mov eax, Ordinal_35
sub al, dil
lea edx, [rax + rax]
add dl, r11b
add dl, cl
movzx eax, byte [rbp + rbx + 0x18]
add rax, r9
add rbx, rax
inc rbx
jmp 0x14010e2b2
add r10b, 0x22
movzx eax, r10b
and al, r11b
mov ecx, 9
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010e2b0
sub r10b, 0x52
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_35
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14010e2a0
lea rdx, [rbp + 0x162e310]
jmp 0x14010eda3
lea rdx, [rbp + 0xf6704a]
jmp 0x14010eda3
lea rdx, [rbp + 0x18]
movzx r9d, si
lea r8, str.NtShutdownSystem
mov rcx, qword [0x14023cdc8]
call fcn.14011b4f0
xor eax, eax
mov byte [rbp + 0x148], al
lea rdx, [rbp + 0x148]
lea rcx, [rbp + 0x108]
call fcn.14011f950
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140045810
lea rcx, [rbp + 0x170]
call fcn.140044ca0
mov rax, qword [rbp + 0x1a8]
mov edx, dword [rax + 0x50]
xor r8d, r8d
lea rcx, [rbp + 0x149]
call fcn.140050cb0
mov r14, rax
mov rdx, rax
lea rcx, [rbp + 0x170]
call fcn.140045690
mov rcx, qword [rbp + 0x1a8]
mov r9d, dword [rcx + 0x50]
mov r8, qword [rbp + 0x188]
mov rdx, r14
lea rcx, [rbp + 0x149]
call fcn.140052080
mov rcx, qword [rbp + 0x1a8]
mov edx, dword [rcx + 0x28]
add rdx, r14
mov r9d, dword [rcx + 0x50]
mov r8, r14
lea rcx, [rbp + 0x149]
call fcn.14011f970
mov r15d, eax
mov dword [rsp + 0x70], 0x50b0314
mov dword [rsp + 0x74], 0x12d60711
mov dword [rsp + 0x78], 0x2383d36
mov dword [rsp + 0x7c], 0x3b2b3fec
mov dword [rbp - 0x80], 0x263c3335
mov dword [rbp - 0x7c], 0xf7e6cf20
mov dword [rbp - 0x78], 0x812afc10
mov byte [rbp - 0x74], 0x9c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x73], xmm0
mov dword [rbp - 0x63], eax
mov word [rbp - 0x5f], ax
movzx ebx, byte [rbp + 0x148]
nop
mov r8, qword [0x14023d108]
mov r9, qword [0x14023d100]
nop
xor edi, edi
movabs rcx, 0x239590e6513cad18
cmp rdi, 0x33
jae 0x14010fa64
movzx r10d, byte [rsp + rdi + 0x70]
mov esi, r10d
nop
cmp r8, rdi
ja 0x14010fa5b
lea rax, [r9 + 1]
cmp r8, rax
jae 0x14010ef0a
add rcx, rdi
mov rax, rsi
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rsi
add rbx, rcx
add bl, 0x58
jmp 0x14010ef51
je 0x14010f9e3
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010f958
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010f920
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010f906
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010f8c4
lea rax, [r9 + 6]
cmp r8, rax
je 0x14010f8a1
movzx r11d, dil
cmp r9, rdi
ja 0x14010fa52
lea rax, [r9 + 0x42]
cmp r8, rax
jae 0x14010ef82
lea edx, [r11 - 8]
movzx eax, dl
and al, r10b
mov ecx, Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r10b
jmp 0x14010efc3
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010f85e
lea rax, [r9 + 3]
cmp r8, rax
je 0x14010f83f
lea rax, [r9 + 5]
cmp r8, rax
je 0x14010f81f
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010f801
lea rax, [r9 + 8]
cmp r8, rax
je 0x14010f7d3
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x14010f505
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x14010f4eb
lea rcx, [r9 + 0x200]
cmp r8, rcx
je 0x14010f4c6
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x14010f4a0
lea rax, [r9 + 1]
cmp r8, rax
je 0x14010f562
lea rax, [r9 + 2]
cmp r8, rax
je 0x14010f481
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14010f461
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x14010f445
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x14010f427
lea rax, [r9 + 4]
cmp r8, rax
je 0x14010f3f9
lea rax, [r9 + 0x61]
cmp r8, rax
je 0x14010efd0
mov r8, rcx
lea r9, [rcx + 0x40]
lea rax, [r9 + 0x3e8]
cmp rcx, rax
jb 0x14010fa32
lea rcx, [r9 + 0x10]
cmp r8, rcx
jb 0x14010fa16
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14010f1b8
lea rax, [r9 + 0x400]
cmp r8, rax
jb 0x14010f19a
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x14010f17e
lea rax, [r9 + 0x28]
cmp r8, rax
jb 0x14010f3ae
lea rax, [r9 + 4]
cmp r8, rax
jb 0x14010f365
lea rax, [r9 + 5]
cmp r8, rax
jb 0x14010f328
lea rax, [r9 + 0x7a]
cmp r8, rax
jb 0x14010f305
lea rax, [r9 + 0x42]
cmp r8, rax
jb 0x14010efd0
mov r8, rcx
lea r9, [rcx + 6]
lea rax, [r9 + 2]
cmp rcx, rax
ja 0x14010f2d7
lea rcx, [r9 + 3]
cmp r8, rcx
ja 0x14010f2b9
lea rax, [r9 + 0x1000]
cmp r8, rax
ja 0x14010f29d
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x14010f27d
lea rax, [r9 + 0x40]
cmp r8, rax
ja 0x14010f265
lea rax, [r9 + 5]
cmp r8, rax
ja 0x14010f24b
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x14010f225
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14010f1fc
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14010f1e2
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14010efd0
mov r8, rcx
lea r9, [rcx + 0x5a]
jmp 0x14010efd0
lea edx, [r11 + 8]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x38
add bl, dl
jmp 0x14010efc3
lea edx, [r11 - 0x28]
movzx eax, r10b
and al, dl
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
jmp 0x14010ef55
sub r11b, 0x58
movzx eax, r10b
and al, r11b
mov ecx, 0x34
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movabs rcx, 0x239590e6513cad18
jmp 0x14010eee0
lea edx, [r11 - 0x40]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x40
jmp 0x14010f873
sub r11b, 0x70
movzx eax, r10b
and al, r11b
mov ecx, 8
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x14010eec2
add r11b, 0x60
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010eec2
lea edx, [r11 + 0x30]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x50
jmp 0x14010f8df
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add r8, r9
jmp 0x14010f940
sub r11b, 0x30
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f940
lea edx, [r11 - 0x60]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x60
add bl, dl
jmp 0x14010f97c
add r11b, 0x70
movzx eax, r10b
and al, r11b
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x10
add bl, r11b
jmp 0x14010f9a5
add r11b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010eec2
sub r11b, 0x38
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x78
mov byte [rsp + rdi + 0x70], bl
inc rdi
jmp 0x14010eec2
lea edx, [r11 - 0x68]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x28
add bl, dl
cmp r9, 0x41
jb 0x14010f31c
lea edx, [r11 - 0x70]
movzx eax, r10b
and al, dl
mov ecx, 8
sub cl, al
add cl, cl
add cl, r10b
add cl, dl
lea ebx, [rcx + rcx]
jmp 0x14010f875
lea edx, [r11 + 0x68]
movzx eax, r10b
and al, dl
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
cmp r8, 5
jae 0x14010f799
lea rax, [r9 + 1]
cmp r8, rax
jbe 0x14010f6b0
lea edx, [r11 - 0x50]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
jmp 0x14010f33d
lea edx, [r11 + 0x38]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
lea rax, [r9 + r8]
cmp rax, 0x28
je 0x14010f7b8
lea rax, [r9 + 9]
cmp r8, rax
jbe 0x14010f5ce
lea edx, [r11 - 0x48]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 8
jmp 0x14010f37c
sub r11b, 0x30
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010eec2
sub r11b, 0x60
movzx eax, r10b
and al, r11b
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x60
add bl, r11b
jmp 0x14010f9a5
lea edx, [r11 + 0x70]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x10
add bl, dl
jmp 0x14010f97c
add r11b, 0x40
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f940
add r11b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x70
add r8, r9
jmp 0x14010f940
sub r11b, 0x50
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010eec2
add r11b, 0x80
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
add bl, 0x80
inc r9
dec rdi
inc rdi
jmp 0x14010eec2
lea edx, [r11 + 0x50]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x30
jmp 0x14010f873
lea rax, [r9 + 0x20]
cmp r8, rax
jae 0x14010f522
lea edx, [r11 + 0x18]
movzx eax, r10b
and al, dl
mov ecx, Ordinal_45
jmp 0x14010f3bd
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010f559
sub r11b, 0x10
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010eec2
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010f57c
lea edx, [r11 - 0x20]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x20
jmp 0x14010f8df
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010f5a7
add r11b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x70
dec rdi
inc rdi
jmp 0x14010eec2
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010f3c7
lea edx, [r11 + 0x70]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x10
jmp 0x14010f873
lea rax, [r9 + 1]
cmp r8, rax
jne 0x14010f5f1
lea edx, [r11 - 0x18]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x58
jmp 0x14010f873
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010f620
add r11b, 0x48
movzx eax, r10b
and al, r11b
mov ecx, 4
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010eec2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010f64c
sub r11b, 0x58
movzx eax, r10b
and al, r11b
mov ecx, 0x34
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
add r8, r9
jmp 0x14010f940
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010f675
sub r11b, 0x28
movzx eax, r10b
and al, r11b
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f940
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010f37e
add r11b, 0x68
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010eec2
jne 0x14010f6dc
sub r11b, 0x20
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x20
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010eec2
lea rax, [r9 + 3]
cmp r8, rax
jne 0x14010f703
lea edx, [r11 + 0x40]
movzx eax, r10b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
jmp 0x14010f97c
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010f728
add r11b, 0x70
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x10
jmp 0x14010f940
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14010f750
sub r11b, 0x60
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x60
add r8, r9
jmp 0x14010f940
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14010f767
lea edx, [r11 - 0x30]
mov ecx, Ordinal_41
jmp 0x14010f8d1
lea rax, [r9 + 6]
cmp r8, rax
jne 0x14010f33f
add r11b, 0x30
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x50
inc r9
dec rdi
inc rdi
jmp 0x14010eec2
lea edx, [r11 - 0x40]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x40
add bl, dl
add bl, r10b
jmp 0x14010f8e1
lea edx, [r11 - 0x10]
movzx eax, r10b
and al, dl
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x14010f97c
sub r11b, 0x58
movzx eax, r10b
and al, r11b
mov ecx, 0x34
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010eec2
lea edx, [r11 + 0x48]
movzx eax, r10b
and al, dl
mov ecx, 4
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
jmp 0x14010f97c
add r11b, 0x18
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010f940
sub r11b, 0x18
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x58
add r8, r9
jmp 0x14010f940
lea edx, [r11 + 0x28]
movzx eax, r10b
and al, dl
add al, al
movzx ebx, r10b
sub bl, al
sub bl, 0x18
add bl, dl
sub r11b, 0x58
movzx eax, r10b
and al, r11b
mov ecx, 0x34
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
mov byte [rsp + rdi + 0x70], cl
inc r9
dec rdi
inc rdi
jmp 0x14010eec2
lea ecx, [rdi - 0x68]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea ebx, [rcx + r10]
sub bl, 0x28
inc r9
dec rdi
inc rdi
jmp 0x14010eec2
movzx r11d, dil
lea edx, [r11 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
movzx eax, r10b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, dl
sub r11b, 0x28
movzx eax, r10b
and al, r11b
mov ecx, recv
sub cl, al
add cl, cl
add cl, bl
add cl, r10b
add cl, r11b
mov byte [rsp + rdi + 0x70], cl
add r8, r9
jmp 0x14010f940
lea ecx, [rdi + 8]
movzx eax, r10b
and al, cl
add al, al
sub r10b, al
lea ebx, [rcx + r10]
sub bl, 0x38
add r8, r9
jmp 0x14010f940
movabs rcx, 0x40421818db2215d8
add rcx, rdi
and sil, cl
mov eax, recv
sub al, sil
lea ebx, [rax + rax]
add bl, r10b
add bl, cl
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x14010eec2
movabs rcx, 0xf916f64c38a8bba8
add rcx, rdi
and sil, cl
mov eax, 0x34
sub al, sil
lea ebx, [rax + rax]
add bl, r10b
add bl, cl
movzx r11d, dil
add r11b, 8
movzx eax, r10b
and al, r11b
add al, al
movzx ecx, r10b
sub cl, al
sub cl, 0x38
add cl, r11b
movzx eax, cl
mov byte [rsp + rdi + 0x70], al
inc r9
add rax, r9
sub rdi, rax
lea edx, [rdi + 0x20]
movzx eax, dl
and al, r10b
mov ecx, reloc.WS2_32.dll_recv
sub cl, al
add cl, cl
add cl, dl
add cl, r10b
mov byte [rsp + rdi + 0x70], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010eec2
movabs rcx, 0x6ac0b2b2f3b60748
add rcx, rdi
and sil, cl
mov eax, 4
sub al, sil
lea ebx, [rax + rax]
add bl, r10b
add bl, cl
movzx eax, byte [rsp + rdi + 0x70]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010eec2
add r11b, 0x78
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x48
jmp 0x14010eebe
add r11b, 0x48
movzx eax, r10b
and al, r11b
mov ecx, 4
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010eeaf
lea rdx, [rbp + 0x1444b90]
jmp 0x14010fa69
lea rdx, [rbp + 0x80f8a8]
jmp 0x14010fa69
lea rdx, [rsp + 0x70]
mov r8d, r15d
mov rcx, qword [0x14023cdc8]
call fcn.14011fa30
mov rax, qword [rbp + 0x1a8]
mov r8d, dword [rax + 0x54]
mov rdx, r14
lea rcx, [rbp + 0x149]
call fcn.140053910
call fcn.14010aed0
test al, al
jne 0x1401106f0
mov dword [rsp + 0x20], 0x756b7f81
mov dword [rsp + 0x24], 0x8b26747c
mov dword [rsp + 0x28], 0x718f2577
mov dword [rsp + 0x2c], 0x637f7274
mov dword [rsp + 0x30], 0x6294613c
mov dword [rsp + 0x34], 0x25986492
mov dword [rsp + 0x38], 0x72322726
mov dword [rsp + 0x3c], 0x570e6564
mov dword [rsp + 0x40], 0x5f565f4d
mov dword [rsp + 0x44], 0x5806a655
mov dword [rsp + 0x48], 0x5ead5650
mov dword [rsp + 0x4c], 0x3f28625c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x50], xmm0
mov word [rsp + 0x60], ax
mov byte [rsp + 0x62], al
movabs r14, 0x8dc7fe0970f51b82
movabs r15, 0xfc07ee54f89df792
movabs r13, 0xe077f24216b3c08e
movabs r12, 0xa957fa1c52df5286
movzx ebx, byte [rbp + 0x148]
nop dword [rax]
nop word [rax + rax]
mov r8, qword [0x14023d108]
mov r9, qword [0x14023d100]
nop
xor edi, edi
cmp rdi, 0x43
jae 0x1401106e6
movzx r11d, byte [rsp + rdi + 0x20]
mov esi, r11d
cmp r8, rdi
ja 0x1401106da
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x14010fba0
lea rcx, [rdi + r14]
mov rax, rsi
and rax, rcx
imul rbx, rax, 0xfffffffffffffffe
add rbx, rsi
add rbx, rcx
add bl, 0x72
jmp 0x14010fbe7
je 0x140110664
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401105e2
lea rax, [rcx + 1]
cmp r8, rax
je 0x1401105b3
lea rax, [r9 + 4]
cmp r8, rax
je 0x14011059a
lea rax, [r9 + 5]
cmp r8, rax
je 0x14011055d
lea rax, [r9 + 2]
cmp r8, rax
je 0x140110516
movzx r10d, dil
nop dword [rax + rax]
cmp r9, rdi
ja 0x1401106ce
lea rax, [r9 + 0x64]
cmp r8, rax
jae 0x14010fc1d
lea edx, [r10 - 0x56]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010fc50
lea rax, [r9 + 1]
cmp r8, rax
je 0x14011050b
inc rax
cmp r8, rax
je 0x1401104e2
lea rax, [r9 + 6]
cmp r8, rax
je 0x1401104c6
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401104ac
lea rax, [r8 + r9]
cmp rax, rdi
jbe 0x1401101b6
nop dword [rax]
lea rax, [r9 + 0x400]
cmp r8, rax
je 0x14011019c
lea rax, [r9 + 0x28]
cmp r8, rax
je 0x140110177
lea rax, [r9 + 5]
cmp r8, rax
je 0x140110155
lea rax, [r9 + 0x41]
cmp r8, rax
je 0x140110139
lea rax, [r9 + 0x80]
cmp r8, rax
je 0x14011011a
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x1401100fa
lea rax, [r9 + 0x20]
cmp r8, rax
je 0x1401100dc
lea rax, [r9 + 4]
cmp r8, rax
je 0x1401100bc
lea rax, [r9 + 0x7a]
cmp r8, rax
je 0x14011008e
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x14010fc60
lea r8, [r9 + 8]
lea r9, [r8 + 9]
lea rax, [r9 + 0x2a]
cmp r8, rax
jb 0x1401106ae
lea rax, [r9 + 2]
cmp r8, rax
jb 0x14011068e
lea rax, [r9 + 0x1000]
cmp r8, rax
jb 0x14010fe49
lea rax, [r9 + 0x40]
cmp r8, rax
jb 0x14010fe2b
lea rax, [r9 + 6]
cmp r8, rax
jb 0x14010fe11
lea rax, [r9 + 0x5a]
cmp r8, rax
jb 0x14011003e
lea rax, [r9 + 0x200]
cmp r8, rax
jb 0x14010fff9
lea rax, [r9 + 0x10]
cmp r8, rax
jb 0x14010ffbe
lea rax, [r9 + 3]
cmp r8, rax
jb 0x14010ff97
lea rax, [r9 + 0x61]
cmp r8, rax
jb 0x14010fc60
lea r8, [r9 + 0x7a]
lea r9, [r8 + 0x41]
lea rax, [r9 + 0x64]
cmp r8, rax
ja 0x14010ff6d
lea rax, [r9 + 9]
cmp r8, rax
ja 0x14010ff4f
lea rax, [r9 + 1]
cmp r8, rax
ja 0x14010ff31
lea rax, [r9 + 0x400]
cmp r8, rax
ja 0x14010ff11
lea rax, [r9 + 0x61]
cmp r8, rax
ja 0x14010feee
lea rax, [r9 + 0x42]
cmp r8, rax
ja 0x14010fed0
lea rax, [r9 + 8]
cmp r8, rax
ja 0x14010feaa
lea rax, [r9 + 0x2a]
cmp r8, rax
ja 0x14010fe85
lea rax, [r9 + 0x3e8]
cmp r8, rax
ja 0x14010fe69
lea rax, [r9 + 0x20]
cmp r8, rax
ja 0x14010fc60
lea r8, [r9 + 0x28]
lea r9, [r8 + 4]
jmp 0x14010fc60
lea ecx, [r10 - 0x6a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x1a
jmp 0x14010fc50
lea edx, [r10 - 0x6e]
movzx eax, dl
and al, r11b
mov ecx, 1
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x14010fbf0
sub r10b, 0x72
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_ntohs
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
jmp 0x14010fb75
lea edx, [r10 + 0x50]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x30
add bl, dl
jmp 0x140110533
add r10b, 0x4c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x14
inc r9
dec rdi
inc rdi
jmp 0x14010fb62
add r10b, 0x48
movzx eax, r11b
and al, r10b
mov ecx, 4
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
dec rdi
inc rdi
jmp 0x14010fb62
lea edx, [r10 + 0x44]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_select
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x140110576
add r10b, 0x40
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_32
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
add r8, r9
jmp 0x1401105ca
add r10b, 0x3c
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x1401105ca
lea edx, [r10 + 0x38]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x1401105fd
add r10b, 0x34
movzx eax, r11b
and al, r10b
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x6c
add bl, r10b
jmp 0x140110626
add r10b, 0x30
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x50
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010fb62
sub r10b, 0x5a
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_60
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
mov byte [rsp + rdi + 0x20], bl
inc rdi
jmp 0x14010fb62
lea ecx, [r10 - 0x5e]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x6e
cmp r9, 0x40
jb 0x14010ffb2
lea edx, [r10 - 0x34]
movzx eax, r11b
and al, dl
add al, al
movzx ecx, r11b
sub cl, al
add cl, dl
lea ebx, [rcx*2 - 0x28]
jmp 0x140110533
lea ecx, [r10 - 0x62]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x52
cmp r8, 8
jae 0x140110474
lea rax, [r9 + 0x5a]
cmp r8, rax
jbe 0x140110399
lea edx, [r10 - 0x5c]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x7c
add bl, dl
jmp 0x14010ffd3
lea ecx, [r10 - 0x66]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x36
lea rax, [r8 + r9]
cmp rax, 0x200
je 0x140110491
lea rax, [r9 + 0x3e8]
cmp r8, rax
jbe 0x1401102bf
lea edx, [r10 - 6]
movzx eax, r11b
and al, dl
mov ecx, reloc.WS2_32.dll_setsockopt
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x14011000e
sub r10b, 4
movzx eax, r11b
and al, r10b
mov ecx, recv
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010fb62
sub r10b, 8
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x140110626
lea edx, [r10 - 0xc]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x1401105fd
sub r10b, 0x10
movzx eax, r11b
and al, r10b
mov ecx, gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x1401105ca
sub r10b, 0x14
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x74
add r8, r9
jmp 0x1401105ca
lea edx, [r10 - 0x18]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x58
add bl, dl
jmp 0x140110576
sub r10b, 0x1c
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x3c
dec rdi
inc rdi
jmp 0x14010fb62
sub r10b, 0x20
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x20
inc r9
dec rdi
inc rdi
jmp 0x14010fb62
lea ecx, [r10 - 0x24]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 4
jmp 0x140110533
lea rax, [r9 + 4]
cmp r8, rax
jae 0x1401101dd
lea edx, [r10 - 0x7e]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_gethostname
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x140110053
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x140110210
add r10b, 0x54
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x4c
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010fb62
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140110237
lea edx, [r10 + 0x5c]
movzx eax, dl
and al, r11b
mov ecx, 0x3e
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x1401105fd
lea rax, [r9 + 5]
cmp r8, rax
jne 0x14011025e
lea edx, [r10 + 0x68]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
jmp 0x140110576
lea rax, [rcx + 1]
cmp r8, rax
jne 0x14011028d
add r10b, 0x6c
movzx eax, r10b
and al, r11b
mov ecx, 6
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
dec rdi
inc rdi
jmp 0x14010fb62
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140110053
add r10b, 0x70
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x10
inc r9
dec rdi
inc rdi
jmp 0x14010fb62
lea rax, [r9 + 1]
cmp r8, rax
jne 0x1401102e6
lea edx, [r10 - 2]
movzx eax, r11b
and al, dl
mov ecx, 7
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x140110533
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140110311
add r10b, 6
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x2a
dec rdi
inc rdi
jmp 0x14010fb62
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140110339
add r10b, 0xe
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x62
add r8, r9
jmp 0x1401105ca
lea rax, [r9 + 2]
cmp r8, rax
jne 0x14011035e
add r10b, 0x12
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x7e
jmp 0x1401105ca
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14011000e
add r10b, 0x1e
movzx eax, r11b
and al, r10b
mov ecx, reloc.WS2_32.dll_socket
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010fb62
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x1401103d0
sub r10b, 0x58
movzx eax, r11b
and al, r10b
mov ecx, 0x34
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010fb62
lea rax, [r9 + 2]
cmp r8, rax
jne 0x1401103f7
lea edx, [r10 - 0x50]
movzx eax, r11b
and al, dl
mov ecx, Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
jmp 0x1401105fd
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140110420
sub r10b, 0x4c
movzx eax, r11b
and al, r10b
mov ecx, 0xa
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x1401105ca
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140110445
lea edx, [r10 - 0x44]
movzx eax, r11b
and al, dl
add al, al
movzx ebx, r11b
sub bl, al
sub bl, 0x24
add bl, dl
jmp 0x140110576
lea rax, [r9 + 4]
cmp r8, rax
jne 0x14010ffd3
sub r10b, 0x40
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea ebx, [r10 + r11]
sub bl, 0x40
dec rdi
inc rdi
jmp 0x14010fb62
lea edx, [r10 - 0x30]
movzx eax, r11b
and al, dl
movzx ecx, r11b
sub cl, al
add cl, 0x28
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x140110576
lea edx, [r10 - 0x2c]
movzx eax, r11b
and al, dl
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x1401105fd
lea ecx, [r10 - 0x3a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x6a
jmp 0x1401105fd
sub r10b, 0x3e
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea ebx, [r11 + r10]
sub bl, 0x4e
jmp 0x1401105ca
sub r10b, 0x4e
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_recvfrom
sub cl, al
lea ebx, [rcx + rcx]
add bl, r10b
add bl, r11b
inc r9
dec rdi
inc rdi
jmp 0x14010fb62
lea edx, [r10 - 0x52]
mov ecx, Ordinal_35
jmp 0x140110523
movzx r10d, dil
lea edx, [r10 - 0x5a]
mov ecx, Ordinal_60
movzx eax, dl
and al, r11b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r11b
add r10b, 0x4e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x22
add r11b, r10b
mov byte [rsp + rdi + 0x20], r11b
inc r9
dec rdi
inc rdi
jmp 0x14010fb62
movzx r10d, dil
lea ecx, [r10 - 0x66]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x36
add r10b, 0x52
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x3e
add r11b, bl
add r11b, r10b
mov byte [rsp + rdi + 0x20], r11b
add r8, r9
jmp 0x1401105ca
lea ecx, [rdi - 0x6a]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x1a
add r8, r9
jmp 0x1401105ca
lea rcx, [rdi + r15]
and sil, cl
mov eax, 1
sub al, sil
lea ebx, [rax + rax]
add bl, r11b
add bl, cl
movzx eax, bl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x14010fb62
lea rcx, [rdi + r13]
and sil, cl
mov eax, reloc.WS2_32.dll_ntohs
sub al, sil
lea ebx, [rax + rax]
add bl, r11b
add bl, cl
movzx r10d, dil
add r10b, 0x56
movzx eax, r11b
and al, r10b
add al, al
movzx ecx, r11b
sub cl, al
sub cl, 0x5a
add cl, r10b
movzx eax, cl
mov byte [rsp + rdi + 0x20], al
inc r9
add rax, r9
sub rdi, rax
lea edx, [rdi - 0x28]
movzx eax, r11b
and al, dl
mov ecx, recv
sub cl, al
add cl, cl
add cl, r11b
add cl, dl
mov byte [rsp + rdi + 0x20], cl
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010fb62
lea rcx, [rdi + r12]
and sil, cl
mov eax, Ordinal_45
sub al, sil
lea ebx, [rax + rax]
add bl, r11b
add bl, cl
movzx eax, byte [rsp + rdi + 0x20]
add rax, r9
add rdi, rax
inc rdi
jmp 0x14010fb62
sub r10b, 0x76
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_30
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010fb60
sub r10b, 0x7a
movzx eax, r11b
and al, r10b
mov ecx, Ordinal_45
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, r10b
jmp 0x14010fb50
lea rdx, [rbp + 0x16e7a78]
jmp 0x1401111a8
lea rdx, [rbp + 0xe395fa]
jmp 0x1401111a8
lea rdx, [rsp + 0x20]
jmp 0x1401111a8
mov rcx, r12
call fcn.14010bcb0
test al, al
jne 0x14011120c
mov dword [rbp + 0x50], 0x4f437866
mov dword [rbp + 0x54], 0x5bb64949
mov dword [rbp + 0x58], 0x4a4cb147
mov dword [rbp + 0x5c], 0x53ae515a
mov dword [rbp + 0x60], 0x5644505a
mov dword [rbp + 0x64], 0xc7bca456
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x68], xmm0
mov qword [rbp + 0x78], rax
mov word [rbp + 0x80], ax
mov byte [rbp + 0x82], al
movabs rsi, 0xf0cd3dab60f2f64
movabs r15, 0x6959cafafa6a4bbc
movabs r14, 0x2d267b90222d8e2c
movzx edx, byte [rbp + 0x148]
nop dword [rax]
mov r8, qword [0x14023d108]
mov r9, qword [0x14023d100]
nop
xor edi, edi
cmp rdi, 0x33
jae 0x1401111a4
movzx r11d, byte [rbp + rdi + 0x50]
mov ebx, r11d
cmp r8, rdi
ja 0x14011119b
lea rcx, [r9 + 1]
cmp r8, rcx
jae 0x1401107c0
lea rcx, [rdi + rsi]
mov rax, rbx
and rax, rcx
imul rdx, rax, 0xfffffffffffffffe
add rdx, rbx
add rdx, rcx
add dl, 0x44
jmp 0x1401107ed
je 0x140111131
lea rax, [r9 + 3]
cmp r8, rax
je 0x1401110b3
lea rax, [rcx + 1]
cmp r8, rax
je 0x140111084
lea rax, [r9 + 2]
cmp r8, rax
je 0x14011103c
movzx r10d, dil
cmp r9, rdi
ja 0x140111192
lea rax, [r9 + 0x10]
cmp r8, rax
jae 0x14011081a
lea ecx, [r10 + 0x34]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x6c
jmp 0x140110850
lea rax, [r9 + 1]
cmp r8, rax
je 0x140111031
inc rax
cmp r8, rax
je 0x14011100b
lea rax, [r9 + 6]
cmp r8, rax
je 0x140110fef
lea rax, [r9 + 5]
cmp r8, rax
je 0x140110fd3
nop dword [rax]
lea rax, [r9 + r8]
cmp rax, rdi
jbe 0x140110cc4
nop dword [rax]
lea rax, [r9 + 0x1000]
cmp r8, rax
je 0x140110cb6
lea rax, [r9 + 0x64]
cmp r8, rax
je 0x140110c91
lea rax, [r9 + 0x10]
cmp r8, rax
je 0x140110c6b
lea rax, [r9 + 5]
cmp r8, rax
je 0x140110d6e
lea rax, [r9 + 0x2a]
cmp r8, rax
je 0x140110c4b
lea rax, [r9 + 0x5a]
cmp r8, rax
je 0x140110c2e
lea rcx, [r9 + 0x400]
cmp r8, rcx
je 0x140110c12
lea rax, [r9 + 0x42]
cmp r8, rax
je 0x140110be4
lea rax, [r9 + 0xa]
cmp r8, rax
je 0x140110860
mov r8, rcx
lea r9, [rcx + 4]
lea rax, [r9 + 0x42]
cmp rcx, rax
jb 0x140111176
lea rax, [r9 + 0xa]
cmp rcx, rax
jb 0x140111156
lea rax, [r9 + 4]
cmp rcx, rax
jb 0x1401109fa
lea rax, [r9 + 0x5a]
cmp rcx, rax
jb 0x1401109dd
lea rax, [r9 + 3]
cmp rcx, rax
jb 0x1401109c3
lea rax, [r9 + 0x41]
cmp rcx, rax
jb 0x140110b95
lea rax, [r9 + 0x3e8]
cmp rcx, rax
jb 0x140110b52
lea rcx, [r9 + 0x40]
cmp r8, rcx
jb 0x140110b18
lea rax, [r9 + 9]
cmp r8, rax
jb 0x140110af1
mov r8, rcx
lea r9, [rcx + 0x41]
lea rax, [r9 + 9]
cmp rcx, rax
ja 0x140110ac3
lea rax, [r9 + 3]
cmp rcx, rax
ja 0x140110aa7
lea rcx, [r9 + 8]
cmp r8, rcx
ja 0x140110a8a
lea rax, [r9 + 2]
cmp r8, rax
ja 0x140110a6e
lea rax, [r9 + 0x7a]
cmp r8, rax
ja 0x140110a52
lea rax, [r9 + 0x200]
cmp r8, rax
ja 0x140110a38
lea rax, [r9 + 0x28]
cmp r8, rax
ja 0x140110a16
mov r8, rcx
lea r9, [rcx + 1]
jmp 0x140110860
lea ecx, [r10 + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x14
jmp 0x140110850
lea edx, [r10 - 0x7c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401107f1
sub r10b, 0x44
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x24
jmp 0x140110795
add r10b, 0x10
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x70
dec rdi
inc rdi
jmp 0x140110782
lea edx, [r10 + 0x48]
movzx eax, dl
and al, r11b
mov ecx, 4
sub cl, al
add cl, cl
add dl, cl
jmp 0x140110f94
add r10b, 0x80
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x80
jmp 0x140111098
sub r10b, 0x48
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 8
jmp 0x14011109b
lea edx, [r10 - 0x10]
movzx eax, dl
and al, r11b
mov ecx, gethostname
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401110ca
add r10b, 0x28
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x18
jmp 0x1401110f4
add r10b, 0x60
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110782
add r10b, 0x6c
movzx eax, r10b
and al, r11b
mov ecx, 6
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
mov byte [rbp + rdi + 0x50], dl
inc rdi
jmp 0x140110782
lea ecx, [r10 - 0x5c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x7c
cmp r9, 6
jb 0x140110b0c
lea ecx, [r10 - 0x28]
movzx eax, cl
and al, r11b
mov edx, recv
sub dl, al
add dl, dl
add dl, cl
add dl, r11b
add dl, dl
jmp 0x140111058
lea ecx, [r10 - 0x24]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 4
cmp r8, 0x28
jae 0x140110f7f
lea rax, [r9 + 0x7a]
cmp r8, rax
jbe 0x140110e87
lea ecx, [r10 + 8]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x38
jmp 0x140110b2d
lea edx, [r10 + 0x14]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
lea rax, [r9 + r8]
cmp rax, 0x3e8
je 0x140110fbb
lea rbx, [r9 + 3]
cmp r8, rbx
jbe 0x140110dba
lea edx, [r10 - 0x2c]
movzx eax, dl
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x140110b67
add r10b, 0x38
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_60
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110782
add r10b, 0x70
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x10
jmp 0x1401110f4
lea edx, [r10 - 0x58]
movzx eax, dl
and al, r11b
mov ecx, 0x34
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401110ca
add r10b, 0x18
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140111098
sub r10b, 0x78
movzx eax, r10b
and al, r11b
mov ecx, 0x24
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rdi
inc rdi
jmp 0x140110782
sub r10b, 0x40
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x40
inc r9
dec rdi
inc rdi
jmp 0x140110782
lea edx, [r10 - 8]
mov ecx, Ordinal_30
jmp 0x140111049
lea rax, [r9 + 0x400]
cmp r8, rax
jae 0x140110ce4
lea edx, [r10 + 0x64]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_35
jmp 0x140110ba4
lea rax, [r9 + 1]
cmp r8, rax
jne 0x140110d1b
add r10b, 0x68
movzx eax, r10b
and al, r11b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110782
inc rax
cmp r8, rax
jne 0x140110d40
lea edx, [r10 - 8]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_30
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401110ca
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140110d65
sub r10b, 0x40
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x40
jmp 0x14011109b
lea rax, [r9 + 5]
cmp r8, rax
jne 0x140110d88
lea ecx, [r10 + 0x50]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x30
jmp 0x140110f97
lea rax, [r9 + 4]
cmp r8, rax
jne 0x140110bad
sub r10b, 0x20
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x20
inc r9
dec rdi
inc rdi
jmp 0x140110782
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x140110ddd
lea ecx, [r10 - 0x64]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x44
jmp 0x140111058
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140110e08
add r10b, 0x2c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x34
dec rdi
inc rdi
jmp 0x140110782
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140110e2b
lea edx, [r10 - 0xc]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_45
sub cl, al
add cl, cl
add dl, cl
jmp 0x140110f94
cmp r8, rbx
jne 0x140110e50
sub r10b, 0x7c
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x14011109b
lea rax, [r9 + 9]
cmp r8, rax
jne 0x140110b67
sub r10b, 0x24
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 4
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110782
lea rcx, [r9 + 1]
cmp r8, rcx
jne 0x140110ebe
sub r10b, 0x30
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110782
lea rax, [r9 + 3]
cmp r8, rax
jne 0x140110ee4
lea edx, [r10 + 0x60]
movzx eax, dl
and al, r11b
mov ecx, Ordinal_50
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
jmp 0x1401110ca
lea rax, [r9 + 2]
cmp r8, rax
jne 0x140110f0d
sub r10b, 0x10
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140111098
lea rax, [rcx + 1]
cmp r8, rax
jne 0x140110f2d
lea ecx, [r10 - 0x48]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 8
jmp 0x140110f97
lea rax, [r9 + 7]
cmp r8, rax
jne 0x140110f58
add r10b, 0x80
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
add dl, 0x80
dec rdi
inc rdi
jmp 0x140110782
lea rax, [r9 + 6]
cmp r8, rax
jne 0x140110b2d
lea ecx, [r10 + 0x10]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x70
jmp 0x140111058
lea ecx, [r10 - 0x60]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x60
add dl, r11b
add r10b, 4
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
sub r11b, 0x1c
add r11b, dl
add r11b, r10b
mov byte [rbp + rdi + 0x50], r11b
jmp 0x140111098
lea edx, [r10 + 0x68]
movzx eax, dl
and al, r11b
mov ecx, reloc.WS2_32.dll_sendto
sub cl, al
add cl, cl
jmp 0x1401110c8
add r10b, 0x74
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x2c
jmp 0x1401110f4
sub r10b, 0x1c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x3c
jmp 0x14011109b
sub r10b, 0x74
movzx eax, r10b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
dec rdi
inc rdi
jmp 0x140110782
lea edx, [r10 - 4]
mov ecx, recv
jmp 0x140111049
movzx r10d, dil
lea edx, [r10 + 0x6c]
mov ecx, 6
movzx eax, dl
and al, r11b
sub cl, al
add cl, cl
add dl, cl
add dl, r11b
add r10b, 0x3c
movzx eax, r11b
and al, r10b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
add cl, cl
add cl, r11b
add cl, r10b
mov byte [rbp + rdi + 0x50], cl
inc r9
dec rdi
inc rdi
jmp 0x140110782
lea ecx, [rdi + 0x4c]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
lea edx, [r11 + rcx]
sub dl, 0x14
add r8, r9
movzx eax, dl
mov rcx, 0xffffffffffffffff
sub rcx, rax
add rdi, rcx
inc rdi
jmp 0x140110782
lea rcx, [rdi + r15]
and bl, cl
add bl, bl
movzx edx, r11b
sub dl, bl
sub dl, 0x24
movzx r10d, dil
add dl, cl
sub r10b, 0x34
movzx eax, r10b
and al, r11b
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r10b
add cl, r11b
movzx eax, cl
mov byte [rbp + rdi + 0x50], al
inc r9
add rax, r9
sub rdi, rax
lea ecx, [rdi + 0x30]
movzx eax, r11b
and al, cl
add al, al
sub r11b, al
sub r11b, 0x50
add r11b, cl
mov byte [rbp + rdi + 0x50], r11b
inc r8
mov rax, 0xffffffffffffffff
sub rax, r8
add rdi, rax
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110782
lea rax, [rdi + r14]
and bl, al
add bl, bl
sub r11b, bl
lea edx, [rax + r11]
sub dl, 0x34
movzx eax, byte [rbp + rdi + 0x50]
add rax, r9
add rdi, rax
inc rdi
jmp 0x140110782
sub r10b, 0xc
movzx eax, r10b
and al, r11b
mov ecx, Ordinal_45
sub cl, al
lea edx, [rcx + rcx]
add dl, r10b
add dl, r11b
jmp 0x140110780
add r10b, 0x2c
movzx eax, r10b
and al, r11b
add al, al
sub r10b, al
lea edx, [r11 + r10]
sub dl, 0x34
jmp 0x140110770
lea rdx, [rbp + 0x173d780]
jmp 0x1401111a8
lea rdx, [rbp + 0xc306e4]
jmp 0x1401111a8
lea rdx, [rbp + 0x50]
mov rcx, qword [0x14023cdc8]
call fcn.1400644d0
nop
lea rcx, [rbp + 0x188]
call fcn.140045980
lea rcx, [rbp + 0x170]
call fcn.140045980
nop
lea rcx, [rbp + 0x150]
call fcn.140045980
xor al, al
mov rcx, qword [rbp + 0x2f0]
xor rcx, rsp
call fcn.140198db0
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rbp + 0x188]
call fcn.140045980
lea rcx, [rbp + 0x170]
call fcn.140045980
nop
lea rcx, [rbp + 0x150]
call fcn.140045980
xor edx, edx
lea ecx, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x1401112d1
mov dword [rbp + 0x1c0], 0x130
xor edx, edx
mov r8d, Ordinal_301
lea rcx, [rbp + 0x1c4]
call sub.VCRUNTIME140.dll_memset
lea rdx, [rbp + 0x1c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32First]
test eax, eax
je 0x1401112c8
nop dword [rax + rax]
lea rax, [rbp + 0x1ec]
mov r8, r13
sub r8, rax
nop dword [rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x1401112a3
inc rax
test ecx, ecx
jne 0x140111290
test edx, edx
je 0x1401112bd
lea rdx, [rbp + 0x1c0]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Process32Next]
test eax, eax
jne 0x140111280
jmp 0x1401112c8
mov eax, dword [rbp + 0x1c8]
mov qword [r12 + 0x18], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [r12 + 0x18], 0
je 0x1401111da
mov rdx, r13
mov rcx, r12
call fcn.140111330
mov qword [r12], rax
mov rdx, r13
mov rcx, r12
call fcn.140111430
mov qword [r12 + 8], rax
cmp qword [r12 + 0x10], 0xffffffffffffffff
je 0x1401111da
mov al, 1
jmp 0x1401111dc