Function at 0x140137660
Capabilities:
Access peb ldr_data
Authenticate hmac
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x14017c718]
mov esi, 8
mov qword [rbp + 0x48], rax
mov r13d, 0x811c9dc5
test rax, rax
jne 0x1401377f2
mov rax, qword gs:[0x60]
xor ebx, ebx
mov edi, 0xf8f45725
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov r8, r14
movups xmm0, xmmword [r8 + 0x58]
movd eax, xmm0
sub ax, si
test ebx, ebx
je 0x1401376fe
psrldq xmm0, 8
mov edx, r13d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1401376f1
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1401376e2
cmp edx, ebx
jne 0x1401377ca
mov r9, qword [r8 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x1401377ca
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x1401377ca
mov r12d, dword [r10 + 0x20]
dec r11d
mov esi, r13d
lea rcx, [r12 + r11*4]
mov edx, dword [rcx + r9]
add rdx, r9
jmp 0x140137750
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x140137745
cmp esi, edi
je 0x140137764
test r11d, r11d
jne 0x140137732
jmp 0x1401377c5
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r11*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov edx, dword [rdx + r8*4]
add rdx, r9
mov qword [rbp + 0x48], rdx
cmp rdx, r10
jbe 0x1401377e6
lea rcx, [r10 + rax]
cmp rdx, rcx
jae 0x1401377e6
mov ebx, r13d
mov edi, r13d
jmp 0x1401377a6
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140137798
jmp 0x1401377b9
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x1401377ae
mov r8, qword [r14]
mov esi, 8
mov rax, qword [r8]
mov r8, rax
cmp rax, r14
je 0x1401377e0
cmp qword [rax + 0x30], 0
jne 0x1401376b9
xor edx, edx
mov qword [rbp + 0x48], rdx
mov qword [0x14017c718], rdx
mov esi, 8
mov bl, byte [rbp + 0x48]
xor eax, eax
xorps xmm0, xmm0
mov word [rbp - 9], ax
movups xmmword [rbp - 0x19], xmm0
or r14, 0xffffffffffffffff
mov dword [rbp - 0x30], 0x10012104
mov dword [rbp - 0x2c], 0x151a361e
mov dword [rbp - 0x28], 0x41f1b1f
mov dword [rbp - 0x24], 0x15111e16
mov dword [rbp - 0x20], 0x121d32
mov word [rbp - 0x1c], 0x1d1d
mov byte [rbp - 0x1a], 0xf8
call fcn.140158170
mov rdi, qword [rax]
call fcn.140158178
mov r11, qword [rax]
xor r9d, r9d
cmp r9, 0x29
jae 0x14013819a
movzx r8d, byte [rbp + r9 - 0x30]
mov edx, r8d
cmp rdi, r9
ja 0x140138191
lea rax, [r11 + 1]
cmp rdi, rax
jae 0x140137888
movabs rbx, 0xfcd1913a8b3b299d
mov al, dl
add rbx, r9
and al, bl
add al, al
sub bl, al
sub bl, 0x4b
add bl, r8b
jmp 0x1401378c2
je 0x140138123
lea rax, [r11 + 3]
cmp rdi, rax
je 0x1401380b8
lea rax, [r11 + 4]
cmp rdi, rax
je 0x140138090
lea rax, [r11 + 6]
cmp rdi, rax
je 0x140138059
lea rax, [r11 + 2]
cmp rdi, rax
je 0x14013803a
cmp r11, r9
ja 0x140138188
lea rax, [r11 + 0x7a]
cmp rdi, rax
jae 0x1401378f2
movabs rcx, 0xbd30e9cd6bda69e1
mov al, dl
add rcx, r9
and al, cl
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x27
jmp 0x140137926
lea rax, [r11 + 1]
cmp rdi, rax
je 0x140138006
lea rax, [r11 + 3]
cmp rdi, rax
je 0x140137ff0
lea rax, [r11 + 5]
cmp rdi, rax
je 0x140137fd7
lea rax, [r11 + 7]
cmp rdi, rax
je 0x140137fbe
lea rax, [r11 + rdi]
cmp rax, r9
jbe 0x140137d85
lea rax, [r11 + 0x5a]
cmp rdi, rax
je 0x140137d69
lea rax, [r11 + 0x7a]
cmp rdi, rax
je 0x140137d4c
lea rax, [r11 + 0x1000]
cmp rdi, rax
je 0x140137d33
lea rax, [r11 + 0x3e8]
cmp rdi, rax
je 0x140137d18
lea rax, [r11 + 0x80]
cmp rdi, rax
je 0x140137cfb
lea rax, [r11 + 0x42]
cmp rdi, rax
je 0x140137ce2
lea rax, [r11 + 0x28]
cmp rdi, rax
je 0x140137cc5
lea rax, [r11 + 0x10]
cmp rdi, rax
je 0x140137cac
lea rax, [r11 + 9]
cmp rdi, rax
je 0x140137c8f
lea rax, [r11 + 6]
cmp rdi, rax
je 0x140137933
lea rdi, [r11 + 5]
lea r11, [rdi + 4]
lea rax, [r11 + 3]
cmp rdi, rax
jb 0x14013816d
lea rax, [r11 + 1]
cmp rdi, rax
jb 0x140138152
lea rax, [r11 + 0x5a]
cmp rdi, rax
jb 0x140137af8
lea rax, [r11 + 0x7a]
cmp rdi, rax
jb 0x140137adf
lea rax, [r11 + 0x1000]
cmp rdi, rax
jb 0x140137ac6
lea rax, [r11 + 0x3e8]
cmp rdi, rax
jb 0x140137c4a
lea rax, [r11 + 0x80]
cmp rdi, rax
jb 0x140137c09
lea rax, [r11 + 0x42]
cmp rdi, rax
jb 0x140137bce
lea rax, [r11 + 0x28]
cmp rdi, rax
jb 0x140137bb0
lea rax, [r11 + 0x10]
cmp rdi, rax
jb 0x140137933
lea rdi, [r11 + 0xa]
lea r11, [rdi + 9]
lea rax, [r11 + 8]
cmp rdi, rax
ja 0x140137ba2
lea rax, [r11 + 5]
cmp rdi, rax
ja 0x140137b89
lea rax, [r11 + 3]
cmp rdi, rax
ja 0x140137b7b
lea rax, [r11 + 1]
cmp rdi, rax
ja 0x140137b62
lea rax, [r11 + 0x5a]
cmp rdi, rax
ja 0x140137b54
lea rax, [r11 + 0x40]
cmp rdi, rax
ja 0x140137b38
lea rax, [r11 + 0x20]
cmp rdi, rax
ja 0x140137b1f
lea rax, [r11 + 0xa]
cmp rdi, rax
ja 0x140137b11
lea rdi, [r11 + 4]
lea r11, [rdi + 3]
jmp 0x140137933
lea ecx, [r9 + 0x3f]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x47
jmp 0x140137926
lea ecx, [r9 + 5]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x23
jmp 0x1401378c2
lea ecx, [r9 - 0x35]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x73
jmp 0x140137859
lea edx, [r9 - 0x32]
mov ecx, Ordinal_50
jmp 0x140137d55
lea ecx, [r9 - 0x6c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0xc
jmp 0x140138051
lea ecx, [r9 + 0x5a]
mov r10b, r9b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x76
jmp 0x140138070
lea edx, [r9 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
jmp 0x140137d04
lea ecx, [r9 - 0x1a]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x4a
jmp 0x1401380a7
lea edx, [r9 - 0x54]
mov ecx, Ordinal_41
jmp 0x140137cce
lea ecx, [r9 + 0x72]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x1e
jmp 0x1401380f9
lea edx, [r9 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
jmp 0x140137c98
lea ecx, [r9 + 0x27]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x11
mov byte [rbp + r9 - 0x30], bl
jmp 0x14013814a
lea ecx, [r9 - 0x13]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x7b
cmp r11, rsi
jb 0x140137bc4
mov edx, reloc.WS2_32.dll_ntohs
mov r10b, r9b
lea ecx, [r10 - 0x72]
mov al, cl
and al, r8b
sub dl, al
add dl, dl
add dl, cl
add dl, r8b
lea ebx, [rdx + rdx]
jmp 0x14013801d
lea ecx, [r9 - 0x4d]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x1b
cmp rdi, 0x28
jae 0x140137f7e
lea rcx, [r11 + 2]
cmp rdi, rcx
jbe 0x140137f14
lea ecx, [r9 + 0x4a]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 6
jmp 0x140137be2
lea ecx, [r9 + 0x79]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x4f
lea rax, [r11 + rdi]
cmp rax, 9
je 0x140137fa0
lea rax, [r11 + 8]
cmp rdi, rax
jbe 0x140137e3e
lea ecx, [r9 + 0x69]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x21
jmp 0x140137c1d
lea edx, [r9 + 0x46]
mov ecx, ntohs
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14013813e
lea ecx, [r9 + 0xc]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x54
jmp 0x1401380f9
lea edx, [r9 - 0x2e]
mov ecx, reloc.WLDAP32.dll_Ordinal_33
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x1401380d3
lea ecx, [r9 - 0x68]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x28
jmp 0x1401380a7
lea edx, [r9 + 0x5e]
mov ecx, gethostname
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x1401380a4
mov r10b, r9b
mov ecx, 2
lea edx, [r10 + 0x24]
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
jmp 0x140137f96
lea ecx, [r9 - 0x16]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x66
jmp 0x140138051
lea edx, [r9 - 0x50]
mov ecx, Ordinal_27
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14013804e
lea ecx, [r9 + 0x76]
mov r10b, r9b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x3a
jmp 0x14013801d
lea rax, [r11 + 2]
cmp rdi, rax
jae 0x140137da7
lea ecx, [r9 - 0x63]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x4b
jmp 0x140137c5e
lea rax, [r11 + 1]
cmp rdi, rax
jne 0x140137dc9
lea ecx, [r9 - 0x3e]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x4e
jmp 0x14013813e
lea rax, [r11 + 3]
cmp rdi, rax
jne 0x140137deb
lea ecx, [r9 + 0x36]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x7a
jmp 0x1401380d3
lea rax, [r11 + 4]
cmp rdi, rax
jne 0x140137e11
lea edx, [r9 + 0x1e]
mov ecx, reloc.WS2_32.dll_socket
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x140138051
lea rax, [r11 + 8]
cmp rdi, rax
jne 0x140137c5e
mov ecx, 1
mov r10b, r9b
lea edx, [r10 - 0x6e]
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14013801d
lea rax, [r11 + 1]
cmp rdi, rax
jne 0x140137e63
mov r10b, r9b
lea ecx, [r10 - 0x5d]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x75
jmp 0x14013801d
lea rax, [r11 + 2]
cmp rdi, rax
jne 0x140137e85
lea ecx, [r9 - 0x23]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0xb
jmp 0x14013804e
lea rax, [r11 + 3]
cmp rdi, rax
jne 0x140137eaa
mov r10b, r9b
lea ecx, [r10 + 0x51]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x37
jmp 0x140138070
lea rax, [r11 + 5]
cmp rdi, rax
jne 0x140137ecc
lea ecx, [r9 - 0x3b]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x63
jmp 0x1401380a7
lea rax, [r11 + 7]
cmp rdi, rax
jne 0x140137eee
lea ecx, [r9 - 1]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 7
jmp 0x1401380d3
lea rax, [r11 + 4]
cmp rdi, rax
jne 0x140137c1d
lea ecx, [r9 + 0x73]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x25
jmp 0x14013813e
lea rax, [r11 + 1]
cmp rdi, rax
jne 0x140137f2b
lea edx, [r9 - 0x7c]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
jmp 0x140137c98
cmp rdi, rcx
jne 0x140137f49
lea ecx, [r9 - 0x42]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x32
jmp 0x1401380f9
lea rax, [r11 + 3]
cmp rdi, rax
jne 0x140137f60
lea edx, [r9 + 0x6c]
mov ecx, 6
jmp 0x140137d04
lea rax, [r11 + 5]
cmp rdi, rax
jne 0x140137be2
mov r10b, r9b
mov ecx, Ordinal_60
lea edx, [r10 - 0x5a]
jmp 0x140137d24
mov bl, byte [rbp + r9 - 0x30]
mov r10b, r9b
lea edx, [r10 - 0x38]
mov al, dl
and al, r8b
add al, al
sub bl, al
sub bl, 0x78
add bl, dl
add bl, r8b
jmp 0x140138070
lea ecx, [r9 + 2]
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, byte [rbp + r9 - 0x30]
lea ebx, [r8 + rcx]
sub bl, 0xe
jmp 0x1401380d3
lea ecx, [r9 - 0x4f]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x29
jmp 0x1401380f9
lea ecx, [r9 + 0x3d]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x55
jmp 0x1401380a7
lea ecx, [r9 - 0x71]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x17
jmp 0x140138051
mov r10b, r9b
lea ecx, [r10 + 0x1b]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x43
mov al, r8b
add r10b, 0x2b
and al, r10b
add al, al
sub r8b, al
sub r8b, 0x2d
add r8b, r10b
mov byte [rbp + r9 - 0x30], r8b
jmp 0x14013804e
lea ecx, [r9 + 0x6d]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 5
inc r11
dec r9
jmp 0x14013814a
mov r10b, r9b
lea ecx, [r10 - 7]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
add bl, 0x31
mov al, r8b
add r10b, 0x65
and al, r10b
add al, al
sub r8b, al
add r8b, 0x3d
add r8b, r10b
add r8b, bl
mov byte [rbp + r9 - 0x30], r8b
jmp 0x1401380a4
lea ecx, [r9 - 0x41]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x39
add rdi, r11
movzx eax, bl
mov rcx, r14
sub rcx, rax
add r9, rcx
jmp 0x14013814a
movabs rcx, 0xe9baf899ce9e234b
mov bl, r8b
add rcx, r9
and dl, cl
add dl, dl
sub bl, dl
sub bl, 0xd
add bl, cl
lea edx, [r9 - 0x61]
mov al, r8b
and al, dl
inc r11
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x59
add cl, dl
movzx eax, cl
mov byte [rbp + r9 - 0x30], al
add rax, r11
sub r9, rax
lea edx, [r9 + 0x3c]
mov al, r8b
and al, dl
inc rdi
mov ecx, reloc.WLDAP32.dll_Ordinal_46
sub cl, al
mov rax, r14
add cl, cl
sub rax, rdi
add cl, r8b
add cl, dl
mov byte [rbp + r9 - 0x30], cl
add r9, rax
jmp 0x14013813e
movabs rax, 0xf674b3afa1b17cd7
add rax, r9
and dl, al
add dl, dl
sub r8b, dl
lea ebx, [rax + r8]
add bl, 0x1f
movzx eax, byte [rbp + r9 - 0x30]
add rax, r11
add r9, rax
inc r9
jmp 0x140137846
sub r9b, 0x6f
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea ebx, [r8 + r9]
add bl, 9
jmp 0x140137843
add r9b, 0x57
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea ebx, [r8 + r9]
sub bl, 0x61
jmp 0x140137833
lea r13, [rbp + 0x17ff54c]
jmp 0x14013819e
lea r13, [rbp + 0x7b1ee9]
jmp 0x14013819e
lea r13, [rbp - 0x30]
mov r12, qword [0x14017c708]
test r12, r12
jne 0x140138309
mov rax, qword gs:[0x60]
xor esi, esi
mov r14d, 0xe463da3c
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdi, r15
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x140138214
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x140138207
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401381f8
cmp edx, esi
jne 0x1401382e5
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x1401382e5
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x1401382e5
mov ebx, dword [r9 + 0x20]
dec r11d
lea rdx, [rbx + r11*4]
mov r8d, dword [rdx + r10]
mov edx, 0x811c9dc5
add r8, r10
jmp 0x140138268
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x14013825d
cmp edx, r14d
je 0x14013827e
test r11d, r11d
jne 0x140138248
jmp 0x1401382e5
mov ecx, dword [r9 + 0x24]
mov edx, dword [r9 + 0x1c]
add rcx, r10
add rdx, r10
movzx r8d, word [rcx + r11*2]
mov r12d, dword [rdx + r8*4]
add r12, r10
cmp r12, r9
jbe 0x1401382fe
lea rcx, [rax + r9]
cmp r12, rcx
jae 0x1401382fe
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x1401382c0
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r12
mov al, byte [r12]
cmp al, 0x2e
jne 0x1401382b2
jmp 0x1401382d7
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r12
mov al, byte [r12]
test al, al
jne 0x1401382ca
mov rdi, qword [r15]
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
je 0x1401382fb
cmp qword [rax + 0x30], 0
jne 0x1401381cd
xor r12d, r12d
mov qword [0x14017c708], r12
or r14, 0xffffffffffffffff
mov bl, byte [rbp + 0x48]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x36], eax
movups xmmword [rbp - 0x46], xmm0
mov byte [rbp - 0x32], al
mov sil, 0x48
mov dword [rbp - 0x50], 0x17300104
mov dword [rbp - 0x4c], 0x132c5b16
mov word [rbp - 0x48], 0x8d12
call fcn.140158170
mov rdi, qword [rax]
call fcn.140158178
mov r11, qword [rax]
xor r10d, r10d
cmp r10, 0x1f
jae 0x140138d3d
movzx r8d, byte [rbp + r10 - 0x50]
mov r9d, r8d
mov edx, r8d
cmp rdi, r10
ja 0x140138d34
lea rax, [r11 + 1]
cmp rdi, rax
jae 0x14013838d
movabs rcx, 0x161368b72bd49ed
mov al, r9b
add rcx, r10
mov bl, r8b
and al, cl
add al, al
sub bl, al
sub bl, 0x7b
add bl, cl
jmp 0x1401383c7
je 0x140138cc6
lea rax, [r11 + 2]
cmp rdi, rax
je 0x140138c57
lea rax, [r11 + 4]
cmp rdi, rax
je 0x140138c2b
lea rax, [r11 + 5]
cmp rdi, rax
je 0x140138bf0
lea rax, [r11 + 6]
cmp rdi, rax
je 0x140138bd0
cmp r11, r10
ja 0x140138d2b
lea rax, [r11 + 6]
cmp rdi, rax
jae 0x1401383ee
lea ebx, [r10 + 0x71]
mov al, bl
and al, r8b
add al, al
sub bl, al
sub bl, 0x17
jmp 0x1401385ea
lea rax, [r11 + 1]
cmp rdi, rax
je 0x140138b9b
lea rax, [r11 + 2]
cmp rdi, rax
je 0x140138b84
lea rax, [r11 + 3]
cmp rdi, rax
je 0x140138b6a
lea rax, [r11 + 5]
cmp rdi, rax
je 0x140138b50
lea rax, [r11 + 4]
cmp rdi, rax
je 0x140138b3b
lea rax, [r11 + rdi]
cmp rax, r10
jbe 0x14013885e
lea rax, [r11 + 0x7a]
cmp rdi, rax
je 0x140138840
lea rax, [r11 + 0x10]
cmp rdi, rax
je 0x140138832
lea rax, [r11 + 0x41]
cmp rdi, rax
je 0x140138824
lea rax, [r11 + 0x20]
cmp rdi, rax
je 0x140138806
lea rax, [r11 + 0x5a]
cmp rdi, rax
je 0x1401387e9
lea rax, [r11 + 0x28]
cmp rdi, rax
je 0x1401387cc
lea rax, [r11 + 0x2a]
cmp rdi, rax
je 0x1401387b1
lea rax, [r11 + 0x40]
cmp rdi, rax
je 0x140138794
lea rax, [r11 + 1]
cmp rdi, rax
je 0x140138777
lea rax, [r11 + 0x42]
cmp rdi, rax
je 0x14013843c
lea rdi, [r11 + 9]
lea r11, [rdi + 2]
lea rax, [r11 + 0x61]
cmp rdi, rax
jb 0x140138d10
lea rax, [r11 + 0xa]
cmp rdi, rax
jb 0x140138cf5
lea rax, [r11 + 0x7a]
cmp rdi, rax
jb 0x14013860a
lea rax, [r11 + 0x10]
cmp rdi, rax
jb 0x1401385f2
lea rax, [r11 + 0x41]
cmp rdi, rax
jb 0x1401385da
lea rax, [r11 + 0x20]
cmp rdi, rax
jb 0x14013875f
lea rax, [r11 + 0x5a]
cmp rdi, rax
jb 0x140138747
lea rax, [r11 + 0x28]
cmp rdi, rax
jb 0x14013872f
lea rax, [r11 + 0x2a]
cmp rdi, rax
jb 0x140138710
lea rax, [r11 + 0x40]
cmp rdi, rax
jb 0x14013843c
lea rdi, [r11 + 8]
lea r11, [rdi + 1]
lea rax, [r11 + 0x1000]
cmp rdi, rax
ja 0x1401386f4
lea rax, [r11 + 9]
cmp rdi, rax
ja 0x1401386e6
lea rax, [r11 + 0x61]
cmp rdi, rax
ja 0x1401386d8
lea rax, [r11 + 0xa]
cmp rdi, rax
ja 0x1401386bb
lea rax, [r11 + 0x7a]
cmp rdi, rax
ja 0x14013869e
lea rax, [r11 + 0x10]
cmp rdi, rax
ja 0x14013867e
lea rax, [r11 + 0x41]
cmp rdi, rax
ja 0x140138661
lea rax, [r11 + 0x20]
cmp rdi, rax
ja 0x140138644
lea rax, [r11 + 0x5a]
cmp rdi, rax
ja 0x140138625
lea rax, [r11 + 0x28]
cmp rdi, rax
ja 0x14013843c
lea rdi, [r11 + 6]
lea r11, [rdi + 0x2a]
jmp 0x14013843c
lea ebx, [r10 - 0x51]
mov al, bl
and al, r8b
add al, al
sub bl, al
add bl, 0x37
add bl, r8b
jmp 0x14013842f
lea ebx, [r10 - 0x2b]
mov al, bl
and al, r8b
add al, al
sub bl, al
add bl, 0x2d
add bl, r8b
jmp 0x1401383c7
lea ebx, [r10 - 5]
mov rdx, r9
mov al, bl
and al, r8b
add al, al
sub bl, al
add bl, 0x23
add bl, r8b
jmp 0x14013835b
lea ecx, [r10 - 0x78]
mov ebx, 0x24
mov al, cl
mov r9b, r10b
and al, r8b
sub bl, al
add bl, bl
add bl, cl
add bl, r8b
jmp 0x140138bb3
lea edx, [r10 - 0x52]
mov ecx, Ordinal_33
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x140138be5
lea edx, [r10 - 0x2c]
mov ecx, reloc.WLDAP32.dll_Ordinal_26
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x140138be8
lea edx, [r10 - 6]
mov ecx, reloc.WS2_32.dll_setsockopt
mov al, dl
mov r9b, r10b
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x140138c08
lea edx, [r10 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x140138c26
lea edx, [r10 + 0x46]
mov ecx, ntohs
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x140138c46
lea edx, [r10 + 0x6c]
mov ecx, 6
jmp 0x1401387ba
lea edx, [r10 - 0x6e]
mov ecx, 1
jmp 0x14013879d
mov cl, r10b
mov al, r8b
sub cl, sil
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 8
jmp 0x140138ce1
lea ecx, [r10 + 0x17]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x5f
mov byte [rbp + r10 - 0x50], bl
jmp 0x140138ced
lea edx, [r10 + 0x3d]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x55
jmp 0x1401388dd
lea edx, [r10 + 0x63]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x4b
jmp 0x1401388b1
lea edx, [r10 - 0x77]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x41
jmp 0x14013887e
lea edx, [r10 - 0x5a]
mov ecx, Ordinal_60
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140138ce1
lea edx, [r10 - 0x34]
mov ecx, gethostname
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140138c9c
lea edx, [r10 - 0xe]
mov ecx, Ordinal_50
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x140138b34
lea edx, [r10 + 0x18]
mov ecx, Ordinal_45
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140138c46
lea edx, [r10 + 0x3e]
mov ecx, Ordinal_41
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140138c26
mov r9b, r10b
mov ecx, Ordinal_35
lea edx, [r9 + 0x64]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x140138c06
lea edx, [r10 - 0x76]
mov ecx, Ordinal_33
jmp 0x14013897f
lea edx, [r10 - 0x50]
mov ecx, Ordinal_27
jmp 0x1401389a9
mov ecx, reloc.WS2_32.dll_send
mov r9b, r10b
mov al, r8b
lea edx, [r9 - 0x2a]
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x140138bb1
lea rax, [r11 + 0x20]
cmp rdi, rax
jae 0x14013890d
lea edx, [r10 - 0x13]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x7b
add bl, dl
lea rax, [r11 + rdi]
cmp rax, 0x7a
je 0x140138b21
lea rax, [r11 + 0x80]
cmp rdi, rax
jbe 0x1401389bd
lea edx, [r10 + 0x79]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x4f
add bl, dl
cmp rdi, 0x61
jae 0x140138b03
lea rax, [r11 + 0x64]
cmp rdi, rax
jbe 0x140138a4e
lea edx, [r10 - 0x16]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x66
add bl, dl
cmp r11, 0x1000
jb 0x140138725
mov cl, r8b
mov r9b, r10b
mov al, r8b
lea edx, [r9 + 0x6e]
and al, dl
add al, al
sub cl, al
add cl, dl
lea ebx, [rcx*2 - 4]
jmp 0x140138bb3
lea rax, [r11 + 1]
cmp rdi, rax
jne 0x140138930
lea ecx, [r10 - 0x1e]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x2e
jmp 0x140138ce1
lea rax, [r11 + 4]
cmp rdi, rax
jne 0x140138953
lea ecx, [r10 + 0x4a]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 6
jmp 0x140138c26
lea rax, [r11 + 5]
cmp rdi, rax
jne 0x14013896d
mov r9b, r10b
mov ecx, 2
lea edx, [r9 + 0x24]
jmp 0x140138812
lea rax, [r11 + 3]
cmp rdi, rax
jne 0x140138993
lea edx, [r10 - 2]
mov ecx, 7
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140138be8
lea rax, [r11 + 2]
cmp rdi, rax
jne 0x140138880
lea edx, [r10 - 0x28]
mov ecx, ntohs
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140138be5
lea rax, [r11 + 1]
cmp rdi, rax
jne 0x1401389e1
mov r9b, r10b
mov al, r8b
mov bl, r8b
lea edx, [r9 + 0x53]
and al, dl
add al, al
sub bl, al
sub bl, 0x45
jmp 0x140138bb1
lea rax, [r11 + 3]
cmp rdi, rax
jne 0x140138a04
lea ecx, [r10 + 7]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x31
jmp 0x140138be8
lea rax, [r11 + 2]
cmp rdi, rax
jne 0x140138a27
lea ecx, [r10 - 0x45]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x1d
jmp 0x140138c26
lea rax, [r11 + 5]
cmp rdi, rax
jne 0x1401388b3
lea ecx, [r10 - 0x6b]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x13
jmp 0x140138c46
lea rax, [r11 + 1]
cmp rdi, rax
jne 0x140138a71
lea ecx, [r10 - 0x3c]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x5c
jmp 0x140138ce1
lea rax, [r11 + 2]
cmp rdi, rax
jne 0x140138a94
lea edx, [r10 + 0x78]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, dl
sub bl, sil
jmp 0x140138c76
lea rax, [r11 + 5]
cmp rdi, rax
jne 0x140138ab8
mov r9b, r10b
mov al, r8b
mov bl, r8b
lea edx, [r9 + 6]
and al, dl
add al, al
sub bl, al
sub bl, 0x2a
jmp 0x140138c06
lea rax, [r11 + 7]
cmp rdi, rax
jne 0x140138adb
lea ecx, [r10 - 0x20]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x20
jmp 0x140138be8
lea rax, [r11 + 9]
cmp rdi, rax
jne 0x1401388df
mov r9b, r10b
mov al, r8b
mov bl, r8b
lea edx, [r9 - 0x6c]
and al, dl
add al, al
sub bl, al
sub bl, 0xc
jmp 0x140138bb1
mov cl, byte [rbp + r10 - 0x50]
mov r9b, r10b
mov al, r8b
lea edx, [rsi + r9]
and al, dl
sub cl, al
add cl, 4
lea ebx, [rcx + rcx]
jmp 0x140138c06
mov ecx, 9
lea edx, [r10 + 0x22]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x140138c76
lea edx, [r10 + 0x67]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, 0x2f
jmp 0x140138b34
lea ecx, [r10 - 0x73]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x25
jmp 0x140138c46
lea ecx, [r10 - 0x4d]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x1b
jmp 0x140138c26
lea ecx, [r10 - 1]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 7
jmp 0x140138be8
mov r9b, r10b
mov al, r8b
mov bl, r8b
lea edx, [r9 + 0x4b]
and al, dl
add al, al
sub bl, al
sub bl, 0xd
add bl, dl
mov al, r8b
add r9b, 0x5b
and al, r9b
add al, al
sub r8b, al
sub r8b, 0x7d
add r8b, r9b
mov byte [rbp + r10 - 0x50], r8b
jmp 0x140138be5
lea ecx, [r10 - 0x43]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x2b
inc r11
dec r10
jmp 0x140138ced
mov r9b, r10b
mov al, r8b
mov bl, r8b
lea edx, [r9 + 9]
and al, dl
add al, al
sub bl, al
sub bl, 0x3f
add bl, dl
mov al, r8b
add r9b, 0x35
and al, r9b
add al, al
sub r8b, al
sub r8b, 0x73
add r8b, r9b
add r8b, bl
mov byte [rbp + r10 - 0x50], r8b
add rdi, r11
jmp 0x140138c46
movabs rcx, 0xc6aeae708a79955
add rcx, r10
mov al, cl
and al, dl
add al, al
sub cl, al
lea ebx, [rdx + rcx]
sub bl, 0x53
movzx eax, bl
mov rcx, r14
sub rcx, rax
add r10, rcx
jmp 0x140138ced
movabs rcx, 0x9a87dd0232d057b
mov r8b, dl
add rcx, r10
mov al, cl
and al, dl
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x5d
lea edx, [r10 + 0xf]
mov al, r8b
and al, dl
inc r11
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x69
add cl, dl
movzx eax, cl
mov byte [rbp + r10 - 0x50], al
add rax, r11
sub r10, rax
lea edx, [r10 - 4]
mov al, r8b
and al, dl
inc rdi
mov ecx, reloc.WS2_32.dll_ntohl
sub cl, al
mov rax, r14
add cl, cl
sub rax, rdi
add cl, r8b
add cl, dl
mov byte [rbp + r10 - 0x50], cl
add r10, rax
jmp 0x140138ce1
movabs rcx, 0x423a3a25837ddc7
add rcx, r10
mov al, cl
and al, dl
add al, al
sub cl, al
lea ebx, [rdx + rcx]
sub bl, 0x71
movzx eax, byte [rbp + r10 - 0x50]
add rax, r11
add r10, rax
inc r10
jmp 0x140138345
add r10b, 0x21
mov al, r8b
and al, r10b
add al, al
sub r8b, al
lea ebx, [r10 + r8]
add bl, 0x19
jmp 0x140138342
add r10b, 0x47
mov al, r8b
and al, r10b
add al, al
sub r8b, al
lea ebx, [r10 + r8]
add bl, 0xf
jmp 0x140138332
lea rcx, [rbp + 0x16daaec]
jmp 0x140138d41
lea rcx, [rbp + 0xaaf4d9]
jmp 0x140138d41
lea rcx, [rbp - 0x50]
call r12
mov rdx, r13
mov rcx, rax
call qword [rbp + 0x48]
mov r15, rax
test rax, rax
je 0x140138edd
mov rax, qword [rbp + 0x40]
test rax, rax
jne 0x140138ec8
mov r10, qword [0x14017c710]
test r10, r10
jne 0x140138ec3
mov rcx, qword gs:[0x60]
xor edi, edi
mov esi, 0x9bc5a608
mov rdx, qword [rcx + 0x18]
mov rax, qword [rdx + 0x10]
mov r14, qword [rax]
mov r10, r14
movups xmm0, xmmword [r10 + 0x58]
mov r13d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x140138de0
psrldq xmm0, 8
mov edx, r13d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x140138dd3
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140138dc4
cmp edx, edi
jne 0x140138ea3
mov r9, qword [r10 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r11d, eax
add r11, r9
shr rax, 0x20
cmp r11, r9
je 0x140138ea3
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x140138ea3
mov r12d, dword [r11 + 0x20]
dec ebx
lea rdx, [r12 + rbx*4]
mov r8d, dword [rdx + r9]
mov edx, r13d
add r8, r9
jmp 0x140138e30
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140138e25
cmp edx, esi
je 0x140138e44
test ebx, ebx
jne 0x140138e13
jmp 0x140138ea3
mov ecx, dword [r11 + 0x24]
mov edx, dword [r11 + 0x1c]
add rcx, r9
add rdx, r9
movzx r8d, word [rcx + rbx*2]
mov r10d, dword [rdx + r8*4]
add r10, r9
cmp r10, r11
jbe 0x140138ebc
lea rcx, [rax + r11]
cmp r10, rcx
jae 0x140138ebc
mov edi, r13d
mov esi, r13d
jmp 0x140138e82
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x140138e74
jmp 0x140138e96
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x140138e8b
mov r10, qword [r14]
mov rax, qword [r10]
mov r10, rax
cmp rax, r14
je 0x140138eb9
cmp qword [rax + 0x30], 0
jne 0x140138d94
xor r10d, r10d
mov qword [0x14017c710], r10
mov rcx, r10
jmp 0x140138ecb
mov rcx, rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x11]
call r15
test eax, eax
sete al
mov rbx, qword [rsp + 0xc0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret