Function at 0x14036a510
Capabilities:
Access peb ldr_data
Encode data using xor
Get ntdll base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x5d0]
sub rsp, 0x6d0
mov r12, r8
mov r15, rdx
mov r14, rcx
xor r13d, r13d
xor edx, edx
lea rcx, [rbp + 0x4d0]
call fcn.1403618f0
nop
lea rdx, [rbp + 0x4d0]
lea rcx, [rbp + 0x450]
call fcn.14035bd30
nop
lea rdx, [rbp + 0x4f0]
lea rcx, [rbp + 0x470]
call fcn.14035bd30
nop
lea rdx, [rbp + 0x510]
lea rcx, [rbp + 0x490]
call fcn.14035bd30
nop
lea rdx, [rbp + 0x530]
lea rcx, [rbp + 0x4b0]
call fcn.14035bd30
nop
mov byte [rsp + 0x60], r13b
xor edx, edx
lea rcx, [rsp + 0x68]
call fcn.14035bf20
nop
mov qword [rbp + 0x628], r12
lea rdx, [rbp + 0x350]
lea rcx, [rbp + 0x628]
call fcn.14036da50
nop
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x628]
call fcn.14036d920
nop
lea rdx, [rbp + 0x3c0]
lea rcx, [rbp + 0x350]
call fcn.140370e10
test al, al
je 0x14036a7ac
lea rcx, [rbp + 0x350]
call fcn.140370b90
mov rdi, rax
lea rcx, [rbp + 0x350]
call fcn.140370d10
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x30], rcx
lea rdx, [rbp - 0x20]
mov rcx, rax
call fcn.1403717b0
nop
lea r8, [rbp - 0x20]
lea rdx, [rbp + 0x190]
lea rcx, [rbp + 0x4d0]
call fcn.140362ac0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xor eax, eax
mov qword [rsp + 0x48], rax
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.14035c360
mov byte [rsp + 0x40], 3
mov ecx, 0x20
call fcn.1404196c8
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
movups xmm0, xmmword [rbx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x10], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov qword [rsp + 0x48], rax
mov rdx, rdi
lea rcx, [rbp + 0x430]
call fcn.14035bd30
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.14035d570
nop
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x40]
mov byte [rax], cl
mov byte [rsp + 0x40], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x48]
mov qword [rax + 8], rdx
mov qword [rsp + 0x48], rcx
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x48]
call fcn.14035c360
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x14036a737
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036a732
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bbef
call fcn.140419458
mov qword [rbp + 0x1a0], r13
mov qword [rbp + 0x1a8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x190], 0
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14036a78b
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036a786
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bbf5
call fcn.140419458
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], 0
lea rcx, [rbp + 0x350]
call fcn.14036d850
jmp 0x14036a5e5
mov rdx, qword [rbp + 0x428]
cmp rdx, 0x10
jb 0x14036a7ed
inc rdx
mov rcx, qword [rbp + 0x410]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036a7e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bbfb
call fcn.140419458
mov qword [rbp + 0x420], r13
mov qword [rbp + 0x428], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x410], 0
mov rdx, qword [rbp + 0x408]
cmp rdx, 0x10
jb 0x14036a847
inc rdx
mov rcx, qword [rbp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036a842
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bbfb
call fcn.140419458
mov qword [rbp + 0x400], r13
mov qword [rbp + 0x408], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3f0], 0
mov rdx, qword [rbp + 0x3b8]
cmp rdx, 0x10
jb 0x14036a8a1
inc rdx
mov rcx, qword [rbp + 0x3a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036a89c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc01
call fcn.140419458
mov qword [rbp + 0x3b0], r13
mov qword [rbp + 0x3b8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x3a0], 0
mov rdx, qword [rbp + 0x398]
cmp rdx, 0x10
jb 0x14036a8fb
inc rdx
mov rcx, qword [rbp + 0x380]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036a8f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc01
call fcn.140419458
mov qword [rbp + 0x390], r13
mov qword [rbp + 0x398], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x380], 0
lea rax, [rsp + 0x50]
mov qword [rbp + 0x128], rax
mov dl, 1
lea rcx, [rbp + 0x550]
call fcn.1403618f0
mov rbx, rax
lea r8, [rbp + 0x4b0]
lea rdx, [rbp + 0x1f0]
mov rcx, qword [0x14049bfa8]
call fcn.140397c40
nop
mov r8, rax
lea rdx, [rbp + 0x1d0]
mov rcx, rbx
call fcn.140362ac0
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xor eax, eax
mov qword [rsp + 0x58], rax
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.14035c360
mov byte [rsp + 0x50], 3
mov ecx, 0x20
call fcn.1404196c8
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov qword [rax + 0x10], r13
mov qword [rax + 0x18], r13
movups xmm0, xmmword [rbx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rax + 0x10], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbx], 0
mov qword [rsp + 0x58], rax
movabs rax, 0x302e644b81865484
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x70], rax
movabs rdi, 0xdb8288fd51657d38
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rsp + 0x78], rax
movabs rsi, 0x302e6420eff33ce7
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2a0], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2a8], rax
movdqa xmm0, xmmword [rbp + 0x2a0]
pxor xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x1b0], xmm0
mov qword [rbp + 0x1c0], r13
mov qword [rbp + 0x1c8], r13
lea rax, [rsp + 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14036aa54
lea rdx, [rsp + 0x70]
lea rcx, [rbp + 0x1b0]
call fcn.14035aa00
lea rdx, [rbp + 0x1b0]
lea rcx, [rsp + 0x60]
call fcn.14035d570
mov rbx, rax
movzx edx, byte [rax]
movzx ecx, byte [rsp + 0x50]
mov byte [rax], cl
mov byte [rsp + 0x50], dl
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x58]
mov qword [rax + 8], rdx
mov qword [rsp + 0x58], rcx
movzx edx, byte [rsp + 0x50]
lea rcx, [rsp + 0x58]
call fcn.14035c360
nop
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.14035b950
nop
mov rdx, qword [rbp + 0x1e8]
cmp rdx, 0x10
jb 0x14036ab01
inc rdx
mov rcx, qword [rbp + 0x1d0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036aafc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc07
call fcn.140419458
mov qword [rbp + 0x1e0], r13
mov qword [rbp + 0x1e8], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1d0], 0
mov rdx, qword [rbp + 0x208]
cmp rdx, 0x10
jb 0x14036ab5b
inc rdx
mov rcx, qword [rbp + 0x1f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036ab56
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc0d
call fcn.140419458
mov qword [rbp + 0x200], r13
mov qword [rbp + 0x208], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x1f0], 0
lea rcx, [rbp + 0x550]
call fcn.1403617a0
movzx eax, byte [rbp - 0x80]
movabs rbx, 0x924ed2527019f221
movabs r9, 0x105a07419b9d53a4
movabs r10, 0xf5f6fa922115084b
movabs r8, 0x7949802f187d055a
cmp eax, 9
ja case.0x14036abc6.3
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0x36bc44]
add rcx, rdx
jmp rcx
mov rcx, qword [rbp - 0x78]
mov rax, qword [rcx + 8]
cmp qword [rcx], rax
jmp 0x14036abde
mov rax, qword [rbp - 0x78]
cmp qword [rax + 8], 0
sete al
test al, al
je case.0x14036abc6.3
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
mov qword [rsp + 0x30], r9
mov rax, qword [rsp + 0x30]
mov qword [rbp], rax
mov qword [rsp + 0x30], r10
mov rax, qword [rsp + 0x30]
mov qword [rbp + 8], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x10], rax
mov qword [rsp + 0x30], r8
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x18], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x210], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x218], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x220], rax
mov qword [rsp + 0x30], r8
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x228], rax
movdqa xmm0, xmmword [rbp + 0x210]
pxor xmm0, xmmword [rbp]
movdqa xmmword [rbp], xmm0
movdqa xmm1, xmmword [rbp + 0x10]
pxor xmm1, xmmword [rbp + 0x220]
movdqa xmmword [rbp + 0x10], xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], r13
lea rax, [rbp]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14036acc0
lea rdx, [rbp]
lea rcx, [rbp - 0x70]
call fcn.14035aa00
nop
mov rcx, qword [0x14049bfa8]
movabs rax, 0x435c0153baaf06a4
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd0], rax
movabs rax, 0xbec6d48f34162864
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xd8], rax
movabs rax, 0xe72f8e221f6d9952
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xe0], rax
movabs rax, 0x253af05f795d6d2e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xe8], rax
movabs rax, 0x82c149fce75a85da
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf0], rax
movabs rax, 0x52369c850a38f178
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xf8], rax
movabs rax, 0xbff73fcd7a6455d1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x100], rax
movabs rax, 0xbe67d2ee8badb98c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x108], rax
movabs rax, 0x5c4c58cd05249bbd
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x110], rax
movabs rax, 0xc1217765710ac2e3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x118], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2b0], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2b8], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2c0], rax
movabs rax, 0x7949802f187d055a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2c8], rax
movabs rax, 0xeae164dc8f2ef0bb
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2d0], rax
movabs rax, 0x3359f0d97948850c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2d8], rax
movabs rax, 0xe3944dbe261630b5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2e0], rax
movabs rax, 0xe213a18bfedcdcfe
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2e8], rax
movabs rax, 0x72382ba87055fecf
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2f0], rax
movabs rax, 0xc1217765717ab280
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x2f8], rax
movdqa xmm0, xmmword [rbp + 0xd0]
pxor xmm0, xmmword [rbp + 0x2b0]
movdqa xmmword [rbp + 0xd0], xmm0
movdqa xmm1, xmmword [rbp + 0xe0]
pxor xmm1, xmmword [rbp + 0x2c0]
movdqa xmmword [rbp + 0xe0], xmm1
movdqa xmm0, xmmword [rbp + 0xf0]
pxor xmm0, xmmword [rbp + 0x2d0]
movdqa xmmword [rbp + 0xf0], xmm0
movdqa xmm1, xmmword [rbp + 0x100]
pxor xmm1, xmmword [rbp + 0x2e0]
movdqa xmmword [rbp + 0x100], xmm1
movdqa xmm0, xmmword [rbp + 0x110]
pxor xmm0, xmmword [rbp + 0x2f0]
movdqa xmmword [rbp + 0x110], xmm0
mov r9d, 0x49
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0x150]
call fcn.140398980
nop
lea rdx, [rbp + 0x150]
mov rcx, qword [0x14049bfc0]
call fcn.14035b6c0
nop
mov rdx, qword [rbp + 0x168]
cmp rdx, 0x10
jb 0x14036afc4
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036afbf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc13
call fcn.140419458
mov qword [rbp + 0x160], r13
mov qword [rbp + 0x168], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x150], 0
movabs rax, 0x550e0a458b9749b4
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x30], rax
movabs rax, 0xdb8288d3230a0f4a
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp - 0x28], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x290], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x298], rax
movdqa xmm0, xmmword [rbp - 0x30]
pxor xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp - 0x30], xmm0
lea rsi, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae rsi, qword [rbp - 0x70]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x14036b0d6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14036b0d6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x67dfe509
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14036b0d1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14036b0b0
cmp r8d, 0xd3bd1a9f
je 0x14036b0db
test r9d, r9d
jne 0x14036b090
mov rax, qword [rax]
jmp 0x14036b060
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov dword [rsp + 0x28], 0xbb8
mov word [rsp + 0x20], r13w
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rbp - 0x30]
mov rdx, rsi
xor ecx, ecx
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14036b1a6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14036b1a6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x66dfe376
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14036b1a1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14036b180
cmp r8d, 0x87d19ba0
je 0x14036b1ab
test r9d, r9d
jne 0x14036b160
mov rax, qword [rax]
jmp 0x14036b130
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, dword [0x7ffe0014]
mov rcx, 0xffffffffffffffff
call r8
mov ecx, 0xa
call fcn.140419954
lea rcx, [rax + 1]
call fcn.140419458
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov dword [rbx], 0xa
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov edx, 4
mov rcx, rbx
call fcn.140419458
mov ecx, dword [0x7ffe0014]
int 0x29
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x14036b272
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036b26d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc19
call fcn.140419458
mov qword [rbp - 0x60], r13
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x14036b2bd
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036b2b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc1f
call fcn.140419458
mov qword [rbp + 0x50], r13
mov qword [rbp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x40], 0
movabs rdi, 0xdb8288fd51657d38
movabs rsi, 0x302e6420eff33ce7
mov rbx, qword [0x14049bfa8]
lea rdx, [rbp + 0x230]
lea rcx, [rsp + 0x60]
call fcn.14036db90
nop
mov r8, rax
lea rdx, [rbp + 0x60]
mov rcx, rbx
call fcn.140397c40
nop
mov rdx, qword [rbp + 0x248]
cmp rdx, 0x10
jb 0x14036b34b
inc rdx
mov rcx, qword [rbp + 0x230]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036b346
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc25
call fcn.140419458
mov qword [rbp + 0x240], r13
mov qword [rbp + 0x248], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x230], 0
lea r9, [rbp + 0x490]
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x130]
mov rcx, r14
call fcn.14036cfa0
nop
cmp qword [rbp + 0x70], 0
je 0x14036b394
cmp qword [rbp + 0x140], 0
jne 0x14036bab3
xorps xmm0, xmm0
movups xmmword [rbp + 0x270], xmm0
mov qword [rbp + 0x280], r13
mov qword [rbp + 0x288], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x270], 0
movabs rax, 0x105a07419b9d53a4
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x20], rax
movabs rax, 0xf5f6fa922115084b
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x28], rax
movabs rbx, 0x924ed2527019f221
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x30], rax
movabs r14, 0x7949802f187d055a
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x38], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x250], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x258], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x260], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x268], rax
movdqa xmm0, xmmword [rbp + 0x20]
pxor xmm0, xmmword [rbp + 0x250]
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmm1, xmmword [rbp + 0x30]
pxor xmm1, xmmword [rbp + 0x260]
movdqa xmmword [rbp + 0x30], xmm1
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], r13
lea rax, [rbp + 0x20]
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14036b4a0
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x50]
call fcn.14035aa00
nop
mov rcx, qword [0x14049bfa8]
movabs rax, 0x435c0153baaf06a4
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x80], rax
movabs rax, 0xbec6d48f34162864
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x88], rax
movabs rax, 0xe72f8e221f6d9952
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x90], rax
movabs rax, 0x253af05f795d6d2e
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x98], rax
movabs rax, 0x82c149fce75a85da
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xa0], rax
movabs rax, 0x52369c850a38f178
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xa8], rax
movabs rax, 0xbff73fcd7a6455d1
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xb0], rax
movabs rax, 0xbe67d2ee8badb98c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xb8], rax
movabs rax, 0x5c4c58cd05249bbd
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xc0], rax
movabs rax, 0xc1217765710ac2e3
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0xc8], rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x300], rax
mov qword [rsp + 0x30], rdi
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x308], rax
mov qword [rsp + 0x30], rbx
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x310], rax
mov qword [rsp + 0x30], r14
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x318], rax
movabs rax, 0xeae164dc8f2ef0bb
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x320], rax
movabs rax, 0x3359f0d97948850c
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x328], rax
movabs rax, 0xe3944dbe261630b5
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x330], rax
movabs rax, 0xe213a18bfedcdcfe
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x338], rax
movabs rax, 0x72382ba87055fecf
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x340], rax
movabs rax, 0xc1217765717ab280
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
mov qword [rbp + 0x348], rax
movdqa xmm0, xmmword [rbp + 0x80]
pxor xmm0, xmmword [rbp + 0x300]
movdqa xmmword [rbp + 0x80], xmm0
movdqa xmm1, xmmword [rbp + 0x90]
pxor xmm1, xmmword [rbp + 0x310]
movdqa xmmword [rbp + 0x90], xmm1
movdqa xmm0, xmmword [rbp + 0xa0]
pxor xmm0, xmmword [rbp + 0x320]
movdqa xmmword [rbp + 0xa0], xmm0
movdqa xmm1, xmmword [rbp + 0xb0]
pxor xmm1, xmmword [rbp + 0x330]
movdqa xmmword [rbp + 0xb0], xmm1
movdqa xmm0, xmmword [rbp + 0xc0]
pxor xmm0, xmmword [rbp + 0x340]
movdqa xmmword [rbp + 0xc0], xmm0
mov r9d, 0x4f
lea r8, [rbp + 0x80]
lea rdx, [rbp + 0x170]
call fcn.140398980
nop
lea rdx, [rbp + 0x170]
mov rcx, qword [0x14049bfc0]
call fcn.14035b6c0
nop
mov rdx, qword [rbp + 0x188]
cmp rdx, 0x10
jb 0x14036b79a
inc rdx
mov rcx, qword [rbp + 0x170]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036b795
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc2b
call fcn.140419458
mov qword [rbp + 0x180], r13
mov qword [rbp + 0x188], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x170], 0
movabs rax, 0x550e0a458b9749b4
mov qword [rbp + 0x628], rax
mov rax, qword [rbp + 0x628]
mov qword [rsp + 0x40], rax
movabs rax, 0xdb8288d3230a0f4a
mov qword [rbp + 0x628], rax
mov rax, qword [rbp + 0x628]
mov qword [rsp + 0x48], rax
mov qword [rbp + 0x628], rsi
mov rax, qword [rbp + 0x628]
mov qword [rbp - 0x20], rax
mov qword [rbp + 0x628], rdi
mov rax, qword [rbp + 0x628]
mov qword [rbp - 0x18], rax
movdqa xmm0, xmmword [rsp + 0x40]
pxor xmm0, xmmword [rbp - 0x20]
movdqa xmmword [rsp + 0x40], xmm0
lea rsi, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rsi, qword [rbp - 0x50]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x14036b8c6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14036b8c6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x3f319f1d
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14036b8c1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14036b8a0
cmp r8d, 0x176297b
je 0x14036b8cb
test r9d, r9d
jne 0x14036b880
mov rax, qword [rax]
jmp 0x14036b850
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov dword [rsp + 0x28], 0xbb8
mov word [rsp + 0x20], r13w
mov r9d, reloc.WS2_32.dll_recv
lea r8, [rsp + 0x40]
mov rdx, rsi
xor ecx, ecx
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14036b996
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14036b996
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0x3e319d8a
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14036b991
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14036b970
cmp r8d, 0x8cd941f4
je 0x14036b99b
test r9d, r9d
jne 0x14036b950
mov rax, qword [rax]
jmp 0x14036b920
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rdx + rax*4]
add r8, r10
mov edx, dword [0x7ffe0014]
mov rcx, 0xffffffffffffffff
call r8
mov ecx, 0xa
call fcn.140419954
lea rcx, [rax + 1]
call fcn.140419458
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov dword [rbx], 0xa
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov edx, 4
mov rcx, rbx
call fcn.140419458
mov ecx, dword [0x7ffe0014]
int 0x29
mov rdx, qword [rbp - 0x38]
cmp rdx, 0x10
jb 0x14036ba62
inc rdx
mov rcx, qword [rbp - 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036ba5d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc31
call fcn.140419458
mov qword [rbp - 0x40], r13
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
mov rdx, qword [rbp + 0x288]
cmp rdx, 0x10
jb 0x14036bab3
inc rdx
mov rcx, qword [rbp + 0x270]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036baae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc37
call fcn.140419458
lea rdx, [rbp + 0x490]
mov rcx, r15
call fcn.14035bd30
nop
lea rcx, [r15 + 0x20]
lea rdx, [rbp + 0x130]
call fcn.14035bd30
nop
lea rcx, [r15 + 0x40]
lea rdx, [rbp + 0x60]
call fcn.14035bd30
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x14036bb23
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036bb1e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bc3d
call fcn.140419458
mov qword [rbp + 0x140], r13
mov qword [rbp + 0x148], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x130], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0x10
jb 0x14036bb73
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14036bb6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14036bbe9
call fcn.140419458
mov qword [rbp + 0x70], r13
mov qword [rbp + 0x78], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x60], 0
movzx edx, byte [rbp - 0x80]
lea rcx, [rbp - 0x78]
call fcn.14035c360
nop
movzx edx, byte [rsp + 0x60]
lea rcx, [rsp + 0x68]
call fcn.14035c360
nop
lea rcx, [rbp + 0x450]
call fcn.1403617a0
nop
lea rcx, [rbp + 0x4d0]
call fcn.1403617a0
nop
lea rcx, [r12 + 8]
movzx edx, byte [r12]
call fcn.14035c360
nop
mov rax, r15
mov rbx, qword [rsp + 0x710]
add rsp, 0x6d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
int3