Function at 0x14015c130
Capabilities:
Access peb ldr_data
Authenticate hmac
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov bl, byte [rbp + 0x38]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x30], 0xb689a58e
mov r13, rcx
mov dword [rbp - 0x2c], 0x8990ac98
mov dword [rbp - 0x28], 0x82979397
lea esi, [rax + 0x1c]
mov dword [rbp - 0x24], 0x99998490
lea r15d, [rax + 0x30]
mov dword [rbp - 0x20], 0x869881b4
lea r12d, [rax + 0x34]
mov word [rbp - 0x1c], 0x9995
lea r14d, [rax + 0x3c]
mov byte [rbp - 0x1a], 0xf6
movups xmmword [rbp - 0x19], xmm0
mov dword [rbp - 9], eax
mov word [rbp - 5], ax
call fcn.1400a1a30
mov rdi, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x2d
jae 0x14015cb58
movzx r8d, byte [rbp + r9 - 0x30]
mov r11d, 4
mov edx, r8d
cmp rdi, r9
ja 0x14015cb4f
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x14015c1fe
movabs rcx, 0xaa97c025b1ae7edc
mov al, dl
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
add bl, cl
sub bl, r11b
jmp 0x14015c238
je 0x14015cae1
lea rax, [r10 + 3]
cmp rdi, rax
je 0x14015ca71
lea rax, [r10 + 5]
cmp rdi, rax
je 0x14015ca26
lea rax, [r10 + 2]
cmp rdi, rax
je 0x14015ca08
lea rax, [r10 + 7]
cmp rdi, rax
je 0x14015c9ce
cmp r10, r9
ja 0x14015cb46
lea rax, [r10 + 9]
cmp rdi, rax
jae 0x14015c269
movabs rcx, 0xfe72c3179350680c
mov al, dl
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
sub bl, 0x54
add bl, cl
jmp 0x14015c2b7
lea rax, [r10 + 1]
cmp rdi, rax
je 0x14015c9b3
lea rax, [r10 + 2]
cmp rdi, rax
je 0x14015c99d
lea rax, [r10 + 3]
cmp rdi, rax
je 0x14015c981
lea rax, [r10 + 4]
cmp rdi, rax
je 0x14015c968
lea rax, [r10 + 5]
cmp rdi, rax
je 0x14015c94b
lea rax, [r10 + 6]
cmp rdi, rax
je 0x14015c92e
lea rax, [r10 + rdi]
cmp rax, r9
jbe 0x14015c715
lea rax, [r10 + 2]
cmp rdi, rax
je 0x14015c704
lea rax, [r10 + 0x1000]
cmp rdi, rax
je 0x14015c6e7
lea rax, [r10 + 0x7a]
cmp rdi, rax
je 0x14015c6dc
lea rax, [r10 + 0x64]
cmp rdi, rax
je 0x14015c77d
lea rax, [r10 + 9]
cmp rdi, rax
je 0x14015c6bf
lea rax, [r10 + 0x10]
cmp rdi, rax
je 0x14015c6b1
lea rax, [r10 + 3]
cmp rdi, rax
je 0x14015c6a3
lea rax, [r10 + 0x61]
cmp rdi, rax
je 0x14015c686
lea rax, [r10 + 0x41]
cmp rdi, rax
je 0x14015c67a
lea rax, [r10 + 0x80]
cmp rdi, rax
je 0x14015c2c4
lea rdi, [r10 + 0x200]
lea r10, [rdi + 0xa]
lea rax, [r10 + 0x10]
cmp rdi, rax
jb 0x14015cb2b
lea rax, [r10 + 3]
cmp rdi, rax
jb 0x14015cb10
lea rax, [r10 + 5]
cmp rdi, rax
jb 0x14015c4ab
lea rax, [r10 + 0x41]
cmp rdi, rax
jb 0x14015c493
lea rax, [r10 + 0x80]
cmp rdi, rax
jb 0x14015c47b
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jb 0x14015c631
lea rax, [r10 + 0x20]
cmp rdi, rax
jb 0x14015c5ee
lea rax, [r10 + 4]
cmp rdi, rax
jb 0x14015c5b6
lea rax, [r10 + 6]
cmp rdi, rax
jb 0x14015c598
lea rax, [r10 + 0x5a]
cmp rdi, rax
jb 0x14015c2c4
lea rdi, [r10 + 0x2a]
lea r10, [rdi + 0x200]
lea rax, [r10 + 0x3e8]
cmp rdi, rax
ja 0x14015c57f
lea rax, [r10 + 0x20]
cmp rdi, rax
ja 0x14015c566
lea rax, [r10 + 0x40]
cmp rdi, rax
ja 0x14015c54d
lea rax, [r10 + 6]
cmp rdi, rax
ja 0x14015c534
lea rax, [r10 + 0x5a]
cmp rdi, rax
ja 0x14015c518
lea rax, [r10 + 1]
cmp rdi, rax
ja 0x14015c4fa
lea rax, [r10 + 0x400]
cmp rdi, rax
ja 0x14015c4ec
lea rax, [r10 + 0x28]
cmp rdi, rax
ja 0x14015c4e0
lea rax, [r10 + 0x42]
cmp rdi, rax
ja 0x14015c4c3
lea rax, [r10 + 8]
cmp rdi, rax
ja 0x14015c2c4
lea rdi, [r10 + 9]
lea r10, [rdi + 0x2a]
jmp 0x14015c2c4
lea ebx, [r9 + 0x74]
mov al, bl
and al, r8b
add al, al
sub bl, al
sub bl, 0x2c
add bl, r8b
jmp 0x14015c2b7
lea ebx, [r9 - 0x44]
mov al, bl
and al, r8b
add al, al
sub bl, al
sub bl, 0x24
add bl, r8b
jmp 0x14015c238
lea ebx, [r11 + r9]
mov al, bl
and al, r8b
add al, al
sub bl, al
add bl, r8b
sub bl, sil
jmp 0x14015c1cd
lea ecx, [r9 + 0x60]
mov ebx, r15d
mov al, cl
mov r11b, r9b
and al, r8b
sub bl, al
add bl, bl
add bl, cl
add bl, r8b
jmp 0x14015c9e5
lea edx, [r9 - 0x58]
mov ecx, r12d
jmp 0x14015c6f0
lea edx, [r9 - 0x10]
mov ecx, gethostname
jmp 0x14015c7af
lea edx, [r9 + 0x38]
mov ecx, r14d
mov al, dl
mov r11b, r9b
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14015ca3d
lea ecx, [r9 + 0x80]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x80
jmp 0x14015ca5c
lea ecx, [r9 - 0x38]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x78
jmp 0x14015ca5f
lea ecx, [r9 + 0x10]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x70
jmp 0x14015ca8c
lea ecx, [r9 + 0x58]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x68
jmp 0x14015cab4
lea ecx, [r9 - 0x60]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x60
jmp 0x14015cafc
lea ecx, [r9 + 0x54]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x4c
mov byte [rbp + r9 - 0x30], bl
jmp 0x14015cb08
lea ecx, [r9 - 0x64]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x44
cmp r10, 0x61
jb 0x14015c5ac
mov r11b, r9b
lea ecx, [r11 - 0x58]
mov al, cl
and al, r8b
add al, al
sub cl, al
add cl, r8b
lea ebx, [rcx + rcx]
sub bl, r15b
jmp 0x14015c9e5
mov cl, r9b
sub cl, sil
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, r14b
cmp rdi, 0x40
jae 0x14015c8f4
lea rcx, [r10 + 5]
cmp rdi, rcx
jbe 0x14015c84f
lea ecx, [r9 + 0x78]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x48
jmp 0x14015c5ca
lea ecx, [r9 + 0x2c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, r12b
lea rax, [r10 + rdi]
cmp rax, 5
je 0x14015c914
lea rax, [r10 + 0x7a]
cmp rdi, rax
jbe 0x14015c7f0
lea edx, [r9 + 0x6c]
mov ecx, 6
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14015c604
lea edx, [r9 + 0x48]
mov ecx, r11d
jmp 0x14015c937
lea edx, [r9 - 0x70]
mov ecx, 8
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14015cab4
lea edx, [r9 - 0x28]
mov ecx, ntohl
jmp 0x14015c760
lea edx, [r9 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
jmp 0x14015c954
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14015ca5c
lea edx, [r9 - 8]
mov ecx, esi
jmp 0x14015c7af
lea edx, [r9 + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14015ca03
mov r11b, r9b
mov ecx, 0x24
lea edx, [r11 - 0x78]
jmp 0x14015c7dc
lea rax, [r10 + 0x64]
cmp rdi, rax
jae 0x14015c737
lea ecx, [r9 - 0x24]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, r11b
jmp 0x14015c645
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14015c74e
lea edx, [r9 + 0x18]
mov ecx, Ordinal_46
jmp 0x14015c937
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x14015c774
lea edx, [r9 - 0x78]
mov ecx, 0x24
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14015ca8c
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x14015c79d
mov ecx, Ordinal_27
mov r11b, r9b
lea edx, [r11 - 0x50]
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14015ca3d
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x14015c7c3
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14015ca1e
lea rax, [r10 + 4]
cmp rdi, rax
jne 0x14015c645
mov r11b, r9b
mov ecx, ntohl
lea edx, [r11 - 0x28]
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14015c9e5
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14015c807
mov r11b, r9b
mov ecx, 2
lea edx, [r11 + 0x24]
jmp 0x14015c7dc
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x14015c829
lea ecx, [r9 - 0x6c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0xc
jmp 0x14015ca1e
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x14015c604
lea ecx, [r9 - 0x44]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x24
jmp 0x14015ca5f
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14015c871
lea ecx, [r15 + r9]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x50
jmp 0x14015cafc
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x14015c893
lea ecx, [r9 - 0x60]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x60
jmp 0x14015ca8c
cmp rdi, rcx
jne 0x14015c8b1
lea ecx, [r9 + 0x10]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x70
jmp 0x14015ca5c
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x14015c8d6
lea ecx, [r9 + 0x80]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x80
jmp 0x14015ca1e
lea rax, [r10 + 8]
cmp rdi, rax
jne 0x14015c5ca
mov r11b, r9b
mov ecx, gethostname
lea edx, [r11 - 0x10]
jmp 0x14015c7dc
mov cl, byte [rbp + r9 - 0x30]
mov r11b, r9b
lea edx, [r11 + 0x60]
mov al, dl
and al, r8b
sub cl, al
add cl, r15b
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x14015ca3d
lea edx, [r9 + 0x18]
mov ecx, Ordinal_46
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x14015ca8c
lea edx, [r9 - 0x7c]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14015cafc
lea edx, [r9 + 0x5c]
mov ecx, 0x3e
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14015ca5f
lea ecx, [r9 - 0x5c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x7c
jmp 0x14015ca5c
mov r11b, r9b
lea ecx, [r11 - 0x14]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x74
jmp 0x14015ca3d
lea ecx, [r12 + r9]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x6c
jmp 0x14015ca1e
mov cl, r9b
mov r11b, r9b
sub cl, r14b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x5c
jmp 0x14015c9e5
mov r11b, r9b
lea ecx, [r11 + 0x54]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x4c
sub r11b, 0x7c
mov al, r8b
and al, r11b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
sub cl, al
add cl, cl
add cl, r8b
add cl, r11b
mov byte [rbp + r9 - 0x30], cl
inc r10
jmp 0x14015ca1e
mov cl, r9b
sub cl, sil
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, r14b
dec r9
jmp 0x14015cb08
mov r11b, r9b
lea ecx, [r11 + 0x2c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, r12b
add r11b, r14b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
mov al, r11b
and al, r8b
sub cl, al
add cl, cl
add cl, r11b
add cl, r8b
add cl, bl
mov byte [rbp + r9 - 0x30], cl
add rdi, r10
or rcx, 0xffffffffffffffff
movzx eax, bl
sub rcx, rax
add r9, rcx
jmp 0x14015cb08
movabs rcx, 0xaa264107dbc57804
mov bl, r8b
add rcx, r9
and dl, cl
add dl, dl
sub bl, dl
add bl, cl
sub bl, sil
lea edx, [r9 - 0xc]
inc r10
mov al, dl
mov ecx, Ordinal_46
and al, r8b
sub cl, al
add cl, cl
add cl, dl
add cl, r8b
movzx eax, cl
mov byte [rbp + r9 - 0x30], al
add rax, r10
sub r9, rax
mov dl, r9b
inc rdi
sub dl, r15b
mov ecx, Ordinal_41
mov al, dl
and al, r8b
sub cl, al
or rax, 0xffffffffffffffff
add cl, cl
sub rax, rdi
add cl, dl
add cl, r8b
mov byte [rbp + r9 - 0x30], cl
add r9, rax
jmp 0x14015cafc
movabs rax, 0xffc74071150b7c94
add rax, r9
and dl, al
add dl, dl
sub r8b, dl
lea ebx, [rax + r8]
sub bl, 0xc
movzx eax, byte [rbp + r9 - 0x30]
add rax, r10
add r9, rax
inc r9
jmp 0x14015c1b4
add r9b, 0x4c
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea ebx, [r8 + r9]
sub bl, 0x14
jmp 0x14015c1b1
sub r9b, 0x6c
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea ebx, [r8 + r9]
sub bl, 0xc
jmp 0x14015c1a1
lea r12, [rbp + 0x17d3ba0]
jmp 0x14015cb5c
lea r12, [rbp + 0x6bba7c]
jmp 0x14015cb5c
lea r12, [rbp - 0x30]
mov r14, qword [0x1403192c8]
test r14, r14
jne 0x14015ccba
mov rax, qword gs:[0x60]
xor edi, edi
mov esi, 0x53b2070f
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x14015cbd1
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x14015cbc4
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14015cbb5
cmp edx, edi
jne 0x14015cc9a
mov r10, qword [rbx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x14015cc9a
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14015cc9a
mov r14d, dword [r11 + 0x20]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r14]
mov edx, 0x811c9dc5
add r8, r10
jmp 0x14015cc25
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14015cc1a
cmp edx, esi
je 0x14015cc3a
test r9d, r9d
jne 0x14015cc05
jmp 0x14015cc9a
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r9d, word [rdx + r9*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov r14d, dword [rdx + r9*4]
add r14, r10
cmp r14, r11
jbe 0x14015ccb3
lea rcx, [rax + r11]
cmp r14, rcx
jae 0x14015ccb3
mov edi, 0x811c9dc5
mov esi, edi
jmp 0x14015cc79
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r14
mov al, byte [r14]
cmp al, 0x2e
jne 0x14015cc6b
jmp 0x14015cc8d
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r14
mov al, byte [r14]
test al, al
jne 0x14015cc82
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14015ccb0
cmp qword [rax + 0x30], 0
jne 0x14015cb8a
xor r14d, r14d
mov qword [0x1403192c8], r14
mov bl, byte [rbp + 0x38]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x36], eax
movups xmmword [rbp - 0x46], xmm0
mov byte [rbp - 0x32], al
mov dword [rbp - 0x50], 0xc7c839c4
mov dword [rbp - 0x4c], 0xbbcc83c6
mov word [rbp - 0x48], 0xcdba
call fcn.1400a1a30
mov rdi, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x1f
jae 0x14015d640
movzx r8d, byte [rbp + r9 - 0x50]
mov r11d, r8d
mov edx, r8d
cmp rdi, r9
ja 0x14015d637
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x14015cd3c
movabs rcx, 0x38a1883f86f34939
mov al, r11b
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
add bl, 0x71
jmp 0x14015cf9a
je 0x14015d5c9
lea rax, [r10 + 3]
cmp rdi, rax
je 0x14015d59f
lea rax, [r10 + 6]
cmp rdi, rax
je 0x14015d564
lea rax, [r10 + 2]
cmp rdi, rax
je 0x14015d547
lea rax, [r10 + 9]
cmp rdi, rax
je 0x14015d50f
cmp r10, r9
ja 0x14015d62e
lea rax, [r10 + 0x7a]
cmp rdi, rax
jae 0x14015cda0
lea ecx, [r9 - 0x53]
mov al, r8b
and al, cl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x45
jmp 0x14015cf80
lea rax, [r10 + 1]
cmp rdi, rax
je 0x14015d4f7
lea rax, [r10 + 3]
cmp rdi, rax
je 0x14015d4dc
lea rax, [r10 + 2]
cmp rdi, rax
je 0x14015d4c2
lea rax, [r10 + 5]
cmp rdi, rax
je 0x14015d4a8
lea rax, [rdi + r10]
cmp rax, r9
jbe 0x14015d1bd
lea rax, [r10 + 0x400]
cmp rdi, rax
je 0x14015d1a2
lea rax, [r10 + 0x2a]
cmp rdi, rax
je 0x14015d185
lea rax, [r10 + 6]
cmp rdi, rax
je 0x14015d168
lea rax, [r10 + 0x61]
cmp rdi, rax
je 0x14015d14a
lea rax, [r10 + 2]
cmp rdi, rax
je 0x14015d13c
lea rax, [r10 + 0x200]
cmp rdi, rax
je 0x14015d122
lea rax, [r10 + 0x41]
cmp rdi, rax
je 0x14015d107
lea rax, [r10 + 0x40]
cmp rdi, rax
je 0x14015d0ed
lea rax, [r10 + 0xa]
cmp rdi, rax
je 0x14015cde1
lea rdi, [r10 + 0x28]
lea r10, [rdi + 0x64]
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jb 0x14015d613
lea rax, [r10 + 9]
cmp rdi, rax
jb 0x14015d5f8
lea rax, [r10 + 0x42]
cmp rdi, rax
jb 0x14015cfa1
lea rax, [r10 + 4]
cmp rdi, rax
jb 0x14015cf87
lea rax, [r10 + 0x10]
cmp rdi, rax
jb 0x14015cf6d
lea rax, [r10 + 0x80]
cmp rdi, rax
jb 0x14015d0d5
lea rax, [r10 + 6]
cmp rdi, rax
jb 0x14015d0bd
lea rax, [r10 + 0x28]
cmp rdi, rax
jb 0x14015d0a6
lea rax, [r10 + 2]
cmp rdi, rax
jb 0x14015d087
lea rdi, [r10 + 0x20]
lea r10, [rdi + 0x41]
lea rax, [r10 + 1]
cmp rdi, rax
ja 0x14015d06a
lea rax, [r10 + 8]
cmp rdi, rax
ja 0x14015d052
lea rax, [r10 + 0x7a]
cmp rdi, rax
ja 0x14015d037
lea rax, [r10 + 3]
cmp rdi, rax
ja 0x14015d01d
lea rax, [r10 + 0x3e8]
cmp rdi, rax
ja 0x14015d003
lea rax, [r10 + 0x5a]
cmp rdi, rax
ja 0x14015cfe8
lea rax, [r10 + 0x42]
cmp rdi, rax
ja 0x14015cfda
lea rax, [r10 + 0x1000]
cmp rdi, rax
ja 0x14015cfbe
lea rax, [r10 + 0x80]
cmp rdi, rax
ja 0x14015cde1
lea rdi, [r10 + 0x400]
lea r10, [rdi + 0x7a]
jmp 0x14015cde1
lea ecx, [r9 - 0xd]
mov al, r8b
and al, cl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x5b
add bl, cl
jmp 0x14015cdd4
lea ecx, [r9 - 0x7f]
mov al, r8b
and al, cl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x79
add bl, cl
jmp 0x14015cd76
lea ecx, [r9 + 0xf]
mov al, r8b
and al, cl
mov bl, r8b
add al, al
mov rdx, r11
sub bl, al
sub bl, 0x69
add bl, cl
jmp 0x14015cd09
lea ecx, [r9 - 0xa]
mov al, r8b
and al, cl
mov ebx, reloc.WLDAP32.dll_Ordinal_35
sub bl, al
add bl, bl
add bl, r8b
add bl, cl
jmp 0x14015d542
lea edx, [r9 - 0x7c]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
jmp 0x14015d171
lea edx, [r9 + 0x12]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
mov r11b, r9b
sub bl, al
sub bl, 0x7e
jmp 0x14015d57a
lea ecx, [r9 - 0x60]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x60
jmp 0x14015d59a
lea ecx, [r9 + 0x2e]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x42
jmp 0x14015d5ba
lea edx, [r9 - 0x44]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
mov r11b, r9b
sub bl, al
sub bl, 0x24
jmp 0x14015d452
lea edx, [r9 + 0x4a]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 6
jmp 0x14015d100
lea edx, [r9 - 0x28]
mov ecx, ntohl
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x14015d5e4
lea ecx, [r9 - 0x45]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x1d
mov byte [rbp + r9 - 0x50], bl
jmp 0x14015d5f0
lea edx, [r9 + 0x49]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
inc bl
jmp 0x14015d244
lea edx, [r9 - 0x29]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x1f
jmp 0x14015d212
lea edx, [r9 + 0x65]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x3d
jmp 0x14015d1e0
lea edx, [r9 - 0x64]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x44
add bl, dl
jmp 0x14015d47c
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x2a]
and al, dl
add al, al
sub bl, al
sub bl, 0x26
jmp 0x14015d452
lea ecx, [r9 - 0x48]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 8
jmp 0x14015d5ba
lea edx, [r9 + 0x46]
mov ecx, ntohl
jmp 0x14015d2ce
mov ecx, reloc.WLDAP32.dll_Ordinal_26
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x2c]
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x14015d57a
lea edx, [r9 + 0x62]
mov ecx, reloc.WLDAP32.dll_Ordinal_41
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x14015d55c
lea edx, [r9 - 0x10]
mov ecx, gethostname
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x14015d542
lea edx, [r9 + 0x7e]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
mov r11b, r9b
sub bl, al
sub bl, 0x72
jmp 0x14015d525
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jae 0x14015d272
lea edx, [r9 + 0x39]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x71
add bl, dl
lea rax, [rdi + r10]
cmp rax, 0x1000
je 0x14015d437
lea rax, [r10 + 0x41]
cmp rdi, rax
jbe 0x14015d32e
lea edx, [r9 - 0x6b]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x13
add bl, dl
cmp rdi, 0x400
jae 0x14015d415
lea rax, [r10 + 0x7a]
cmp rdi, rax
jbe 0x14015d39d
mov ecx, Ordinal_27
lea edx, [r9 + 0x42]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
cmp r10, 2
jb 0x14015d09c
mov ecx, 3
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x4a]
and al, dl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
lea ebx, [rcx + rcx]
jmp 0x14015d527
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14015d295
lea ecx, [r9 + 0x5a]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x76
jmp 0x14015d5e4
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x14015d2bc
mov ecx, Ordinal_41
mov r11b, r9b
mov al, r8b
lea edx, [r11 + 0x3e]
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x14015d452
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x14015d2e2
lea edx, [r9 + 0x22]
mov ecx, 9
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x14015d59a
lea rax, [r10 + 4]
cmp rdi, rax
jne 0x14015d306
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x6c]
and al, dl
add al, al
sub bl, al
sub bl, 0xc
jmp 0x14015d57a
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x14015d1e2
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x16]
and al, dl
add al, al
sub bl, al
sub bl, 0x66
jmp 0x14015d525
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14015d352
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 7]
and al, dl
add al, al
sub bl, al
sub bl, 0x31
jmp 0x14015d525
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x14015d375
lea ecx, [r9 - 0x31]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x57
jmp 0x14015d59a
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x14015d214
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x4d]
and al, dl
add al, al
sub bl, al
add bl, 0x1b
jmp 0x14015d452
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14015d3b4
lea edx, [r9 - 0x4c]
mov ecx, 0xa
jmp 0x14015d073
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x14015d3d7
lea ecx, [r9 + 0xa]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x46
jmp 0x14015d5ba
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x14015d3fa
lea ecx, [r9 + 0x7c]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x64
jmp 0x14015d59a
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x14015d246
lea edx, [r9 - 0x2e]
mov ecx, reloc.WLDAP32.dll_Ordinal_33
jmp 0x14015d18e
mov bl, byte [rbp + r9 - 0x50]
mov r11b, r9b
mov al, r8b
lea edx, [r11 + 0x28]
and al, dl
add al, al
sub bl, al
sub bl, 0x18
add bl, dl
add bl, r8b
jmp 0x14015d57c
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x66]
and al, dl
add al, al
sub bl, al
sub bl, byte [rbp + r9 - 0x50]
sub bl, 0x36
add bl, dl
sub r11b, 0x2d
mov al, r8b
and al, r11b
inc r10
add al, al
mov cl, r8b
sub cl, al
add cl, 0x3b
add cl, r11b
movzx eax, cl
mov byte [rbp + r9 - 0x50], al
add rax, r10
sub r9, rax
mov al, r8b
lea ecx, [r9 + 0xc]
and al, cl
inc rdi
add al, al
sub r8b, al
or rax, 0xffffffffffffffff
sub r8b, 0x54
sub rax, rdi
add r8b, cl
mov byte [rbp + r9 - 0x50], r8b
add r9, rax
jmp 0x14015d5e4
lea ecx, [r9 + 0x59]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x6f
jmp 0x14015d5ba
lea ecx, [r9 - 0x19]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x51
jmp 0x14015d59a
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x75]
and al, dl
add al, al
sub bl, al
sub bl, 0x33
jmp 0x14015d57a
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x1f]
and al, dl
add al, al
sub bl, al
add bl, 0x27
jmp 0x14015d525
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x3b]
and al, dl
add al, al
sub bl, al
add bl, 0x63
add bl, dl
mov al, r8b
sub r11b, 0x11
and al, r11b
add al, al
sub r8b, al
add r8b, 0x77
add r8b, r11b
mov byte [rbp + r9 - 0x50], r8b
inc r10
jmp 0x14015d55c
lea ecx, [r9 + 0x57]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x61
dec r9
jmp 0x14015d5f0
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x1b]
and al, dl
add al, al
sub bl, al
sub bl, 0x43
add bl, dl
mov al, r8b
add r11b, 0x61
and al, r11b
add al, al
sub r8b, al
add r8b, 0x59
add r8b, r11b
add r8b, bl
mov byte [rbp + r9 - 0x50], r8b
add rdi, r10
jmp 0x14015d5ba
movabs rcx, 0xfdadca3bbe8d9301
add rcx, r9
mov al, cl
and al, dl
add al, al
sub cl, al
lea ebx, [rdx + rcx]
sub bl, 7
or rcx, 0xffffffffffffffff
movzx eax, bl
sub rcx, rax
add r9, rcx
jmp 0x14015d5f0
movabs rcx, 0xa9e498be94d9dbab
add rcx, r9
mov al, cl
and al, dl
add al, al
sub cl, al
lea ebx, [rdx + rcx]
add bl, 0x53
movzx eax, byte [rbp + r9 - 0x50]
add rax, r10
add r9, rax
inc r9
jmp 0x14015ccf3
sub r9b, 0x63
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x4b
jmp 0x14015ccf0
add r9b, 0x2b
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x2d
jmp 0x14015cce0
lea rcx, [rbp + 0x17531fc]
jmp 0x14015d644
lea rcx, [rbp + 0x687b35]
jmp 0x14015d644
lea rcx, [rbp - 0x50]
call r14
mov rcx, qword gs:[0x60]
mov rdi, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov r11d, dword [rdx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14015d6bf
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14015d6bf
mov ebx, dword [r11 + 0x20]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + rbx]
mov edx, 0x811c9dc5
add r8, r10
mov al, byte [r8]
inc r8
test al, al
je 0x14015d6ba
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [r8]
inc r8
test al, al
jne 0x14015d69d
cmp edx, 0xf8f45725
je 0x14015d6c4
test r9d, r9d
jne 0x14015d680
mov rcx, qword [rcx]
jmp 0x14015d65b
mov ecx, dword [r11 + 0x24]
mov rdx, r12
add rcx, r10
movzx r9d, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r9*4]
mov rcx, rdi
add rax, r10
call rax
test rax, rax
je 0x14015d6ff
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
lea edx, [r9 + 0x11]
call rax
test eax, eax
setns al
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret