Function at 0x140138ef8
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov dil, byte [rbp + 0x38]
xor eax, eax
mov r13, rcx
mov dword [rbp - 0x30], 0x96e185ee
mov dword [rbp - 0x2c], 0x9188ec80
mov dword [rbp - 0x28], 0xaab7bbb7
lea esi, [rax + 0x20]
mov dword [rbp - 0x24], 0xb1b1b4b8
lea r14d, [rax + 0x38]
mov dword [rbp - 0x20], 0xa6b0b9d4
lea r15d, [rax + 0x10]
mov word [rbp - 0x1c], 0xa1a5
lea r12d, [rax + 8]
mov byte [rbp - 0x1a], 6
mov qword [rbp - 0x19], rax
mov word [rbp - 0x11], ax
call fcn.140158170
mov rbx, qword [rax]
call fcn.140158178
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x21
jae 0x140139711
movzx r8d, byte [rbp + r9 - 0x30]
mov edx, r8d
cmp rbx, r9
ja 0x140139708
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x140138fbc
movabs rdi, 0x49732a3ada89d458
add rdi, r9
mov al, dil
and al, dl
add al, al
sub dil, al
sub dil, 0x68
add dil, r8b
jmp 0x140138fe9
je 0x14013969c
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14013966d
lea rax, [r10 + 7]
cmp rbx, rax
je 0x140139652
lea rax, [r10 + 5]
cmp rbx, rax
je 0x140139634
cmp r10, r9
ja 0x1401396ff
lea rax, [r10 + 6]
cmp rbx, rax
jae 0x14013901e
movabs rcx, 0x67276d3ed4e6b38
add rcx, r9
mov al, cl
and al, dl
mov edx, reloc.WLDAP32.dll_Ordinal_60
sub dl, al
lea edi, [rdx + rdx]
add dil, cl
add dil, r8b
jmp 0x140139052
lea rax, [r10 + 1]
cmp rbx, rax
je 0x1401395f9
lea rax, [r10 + 3]
cmp rbx, rax
je 0x1401395de
lea rax, [r10 + 5]
cmp rbx, rax
je 0x1401395bd
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14013959f
lea rax, [r10 + rbx]
cmp rax, r9
jbe 0x1401392a7
lea rax, [r10 + 2]
cmp rbx, rax
je 0x140139289
lea rax, [r10 + 0x3e8]
cmp rbx, rax
je 0x14013926b
lea rax, [r10 + 0xa]
cmp rbx, rax
je 0x14013924a
lea rax, [r10 + 0x2a]
cmp rbx, rax
je 0x140139229
lea rax, [r10 + 0x80]
cmp rbx, rax
je 0x14013920f
lea rbx, [r10 + 0x5a]
lea r10, [rbx + 0x80]
lea rax, [r10 + 0x5a]
cmp rbx, rax
jb 0x1401396e5
lea rax, [r10 + 0x64]
cmp rbx, rax
jb 0x1401396ca
lea rax, [r10 + 6]
cmp rbx, rax
jb 0x14013913e
lea rax, [r10 + 0x7a]
cmp rbx, rax
jb 0x1401391f5
lea rax, [r10 + 0x40]
cmp rbx, rax
jb 0x1401391d2
lea rbx, [r10 + 0x61]
lea r10, [rbx + 0x40]
lea rax, [r10 + 0x61]
cmp rbx, rax
ja 0x1401391c7
lea rax, [r10 + 0x28]
cmp rbx, rax
ja 0x1401391a9
lea rax, [r10 + 3]
cmp rbx, rax
ja 0x140139195
lea rax, [r10 + 0x400]
cmp rbx, rax
ja 0x140139177
lea rax, [r10 + 0x10]
cmp rbx, rax
ja 0x14013915a
lea rbx, [r10 + 0x3e8]
lea r10, [rbx + 0x10]
jmp 0x14013905f
mov cl, r9b
sub cl, r14b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x78
jmp 0x140139052
lea ecx, [r9 - 0x40]
mov r11b, r9b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x40
jmp 0x140139614
lea edx, [r9 + 0x60]
mov ecx, Ordinal_50
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x140139668
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edi, [r9 + r8]
jmp 0x1401395d6
mov ecx, r14d
mov dl, r9b
sub dl, r15b
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x140139573
lea edx, [r9 + 0x40]
mov ecx, esi
jmp 0x1401395a8
lea edx, [r9 - 0x78]
mov ecx, 0x24
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
mov byte [rbp + r9 - 0x30], dil
jmp 0x1401396c2
lea edx, [r9 + 0x28]
mov al, r8b
and al, dl
mov dil, r8b
add al, al
sub dil, al
sub dil, 0x18
jmp 0x140139304
lea ecx, [r9 + 0x50]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x30
jmp 0x1401396b6
mov ecx, r14d
mov dl, r9b
sub dl, r15b
mov r11b, r9b
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013954c
mov dl, r9b
mov al, r8b
sub dl, sil
mov dil, r8b
and al, dl
mov r11b, r9b
add al, al
sub dil, al
add dil, dl
sub dil, sil
jmp 0x140139507
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
add dil, 0x80
jmp 0x14013964d
mov r11b, r9b
mov ecx, Ordinal_41
lea edx, [r11 - 0x30]
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x140139611
lea rax, [r10 + 0x1000]
cmp rbx, rax
jae 0x14013935f
lea edx, [r9 + 0x58]
mov al, r8b
and al, dl
mov dil, r8b
add al, al
sub dil, al
sub dil, 0x68
add dil, dl
lea rax, [r10 + rbx]
cmp rax, 0x200
je 0x14013952d
lea rax, [r10 + 0xa]
cmp rbx, rax
jbe 0x1401393e4
mov ecx, Ordinal_32
mov dl, r9b
sub dl, r12b
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
cmp rbx, 0x42
jae 0x1401394e7
lea rax, [r10 + 6]
cmp rbx, rax
jbe 0x140139474
lea edx, [r9 + 0x30]
mov al, r8b
and al, dl
mov dil, r8b
add al, al
sub dil, al
sub dil, 0x50
add dil, dl
cmp r10, rsi
jb 0x1401391eb
mov edx, r12d
mov r11b, r9b
lea ecx, [r15 + r11]
mov al, cl
and al, r8b
sub dl, al
add dl, dl
add dl, cl
add dl, r8b
lea edi, [rdx + rdx]
jmp 0x140139614
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140139382
lea ecx, [r9 + 0x70]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, r15b
jmp 0x1401396b6
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1401393a7
lea edx, [rsi + r9]
mov ecx, r15d
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x140139573
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x1401393cb
lea ecx, [r9 + 0x30]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x50
jmp 0x1401395d6
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1401392cf
lea edx, [r9 - 0x70]
mov ecx, r12d
jmp 0x1401395e7
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1401393fe
mov r11b, r9b
mov ecx, 0x34
lea edx, [r11 - 0x58]
jmp 0x140139295
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x140139421
lea ecx, [r12 + r9]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, r14b
jmp 0x140139668
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x140139448
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x1401395d6
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x140139307
mov cl, r9b
mov r11b, r9b
sub cl, r14b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x78
jmp 0x14013954c
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140139499
mov cl, r9b
mov al, r8b
sub cl, sil
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, sil
jmp 0x1401396b6
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1401394c0
mov ecx, esi
mov r11b, r9b
lea edx, [r11 + 0x40]
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013954c
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x140139336
lea ecx, [r9 - 0x60]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x60
jmp 0x1401395d6
mov dil, byte [rbp + r9 - 0x30]
mov r11b, r9b
lea edx, [r11 - 0x40]
mov al, dl
and al, r8b
add al, al
sub dil, al
sub dil, 0x40
add dil, dl
add dil, r8b
add r11b, 0x18
mov ecx, Ordinal_45
mov al, r11b
and al, r8b
sub cl, al
add cl, cl
add cl, r11b
add cl, r8b
add cl, dil
mov byte [rbp + r9 - 0x30], cl
jmp 0x1401395d6
mov r11b, r9b
mov al, r8b
mov dil, r8b
lea edx, [r11 + 0x70]
and al, dl
add al, al
sub dil, al
sub dil, byte [rbp + r9 - 0x30]
add dil, dl
sub dil, r15b
sub r11b, r14b
inc r10
mov al, r11b
and al, r8b
add al, al
sub r11b, al
sub r11b, 0x78
add r11b, r8b
movzx eax, r11b
mov byte [rbp + r9 - 0x30], al
add rax, r10
sub r9, rax
lea edx, [rsi + r9]
mov al, r8b
and al, dl
inc rbx
mov ecx, r15d
sub cl, al
or rax, 0xffffffffffffffff
add cl, cl
sub rax, rbx
add cl, r8b
add cl, dl
mov byte [rbp + r9 - 0x30], cl
add r9, rax
jmp 0x1401396b6
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x1401396b6
lea edx, [r9 - 0x58]
mov ecx, 0x34
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
add rbx, r10
jmp 0x14013968c
lea edx, [r9 + 0x48]
mov ecx, 4
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x140139668
mov r11b, r9b
mov al, r8b
mov dil, r8b
lea edx, [r11 - 0x18]
and al, dl
add al, al
sub dil, al
sub dil, 0x58
add dil, dl
add r11b, 0x68
mov ecx, reloc.WS2_32.dll_sendto
mov al, r11b
and al, r8b
sub cl, al
add cl, cl
add cl, r11b
add cl, r8b
mov byte [rbp + r9 - 0x30], cl
jmp 0x14013964d
lea edx, [r9 - 0x28]
mov ecx, ntohs
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
inc r10
jmp 0x140139668
lea ecx, [r9 + 0x28]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x18
dec r9
jmp 0x1401396c2
mov ecx, Ordinal_45
movabs rax, 0x950c7c11aed87718
add rax, r9
and dl, al
sub cl, dl
lea edi, [rcx + rcx]
add dil, al
add dil, r8b
or rcx, 0xffffffffffffffff
movzx eax, dil
sub rcx, rax
add r9, rcx
jmp 0x1401396c2
movabs rax, 0xdc597eb08f9d7d08
add rax, r9
and dl, al
add dl, dl
sub al, dl
lea edi, [r8 + rax]
sub dil, r14b
movzx eax, byte [rbp + r9 - 0x30]
add rax, r10
add r9, rax
inc r9
jmp 0x140138f77
sub r9b, 0x48
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edi, [r9 + r8]
sub dil, r12b
jmp 0x140138f74
add r9b, r12b
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edi, [r9 + r8]
sub dil, r14b
jmp 0x140138f64
lea r12, [rbp + 0x15aaaf0]
jmp 0x140139715
lea r12, [rbp + 0x1247f48]
jmp 0x140139715
lea r12, [rbp - 0x30]
mov r14, qword [0x14017c720]
test r14, r14
jne 0x140139873
mov rax, qword gs:[0x60]
xor edi, edi
mov esi, 0x53b2070f
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x14013978a
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x14013977d
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14013976e
cmp edx, edi
jne 0x140139853
mov r10, qword [rbx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x140139853
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140139853
mov r14d, dword [r11 + 0x20]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r14]
mov edx, 0x811c9dc5
add r8, r10
jmp 0x1401397de
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1401397d3
cmp edx, esi
je 0x1401397f3
test r9d, r9d
jne 0x1401397be
jmp 0x140139853
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r9d, word [rdx + r9*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov r14d, dword [rdx + r9*4]
add r14, r10
cmp r14, r11
jbe 0x14013986c
lea rcx, [rax + r11]
cmp r14, rcx
jae 0x14013986c
mov edi, 0x811c9dc5
mov esi, edi
jmp 0x140139832
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r14
mov al, byte [r14]
cmp al, 0x2e
jne 0x140139824
jmp 0x140139846
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r14
mov al, byte [r14]
test al, al
jne 0x14013983b
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x140139869
cmp qword [rax + 0x30], 0
jne 0x140139743
xor r14d, r14d
mov qword [0x14017c720], r14
mov dil, byte [rbp + 0x38]
xor eax, eax
mov dword [rbp - 0x50], 0xdfe6d9de
mov dword [rbp - 0x4c], 0xdbe293dc
mov word [rbp - 0x48], 0x45d8
lea r15d, [rax + 0x16]
mov qword [rbp - 0x46], rax
mov byte [rbp - 0x3e], al
call fcn.140158170
mov rbx, qword [rax]
call fcn.140158178
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x13
jae 0x14013a288
movzx r8d, byte [rbp + r9 - 0x50]
mov esi, r8d
mov r11d, r8d
cmp rbx, r9
ja 0x14013a27f
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x1401398f8
movabs rcx, 0x489836fd2e913fb6
mov al, sil
add rcx, r9
mov edi, 3
and al, cl
sub dil, al
add dil, dil
add dil, cl
jmp 0x140139b8b
je 0x14013a202
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14013a1b5
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14013a169
lea rax, [r10 + 7]
cmp rbx, rax
je 0x14013a148
lea rax, [r10 + 5]
cmp rbx, rax
je 0x14013a12a
cmp r10, r9
ja 0x14013a276
lea rax, [r10 + 0x20]
cmp rbx, rax
jae 0x140139952
lea edx, [r9 - 0x12]
mov ecx, 0x3f
jmp 0x140139b60
lea rax, [r10 + 1]
cmp rbx, rax
je 0x14013a0ef
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14013a0d7
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14013a085
lea rax, [r10 + 5]
cmp rbx, rax
je 0x14013a06d
lea rax, [r10 + 6]
cmp rbx, rax
je 0x14013a053
lea rax, [r10 + rbx]
cmp rax, r9
jbe 0x140139e14
lea rax, [r10 + 4]
cmp rbx, rax
je 0x140139df7
lea rax, [r10 + 0x28]
cmp rbx, rax
je 0x140139ddd
lea rax, [r10 + 0x1000]
cmp rbx, rax
je 0x140139dc3
lea rax, [r10 + 0x400]
cmp rbx, rax
je 0x140139da6
lea rax, [r10 + 2]
cmp rbx, rax
je 0x140139d8c
lea rax, [r10 + 1]
cmp rbx, rax
je 0x140139d72
lea rax, [r10 + 0xa]
cmp rbx, rax
je 0x140139d58
lea rax, [r10 + 9]
cmp rbx, rax
je 0x140139d3e
lea rax, [r10 + 0x80]
cmp rbx, rax
je 0x140139d24
lea rax, [r10 + 0x5a]
cmp rbx, rax
je 0x1401399a0
lea rbx, [r10 + 0x20]
lea r10, [rbx + 0x41]
lea rax, [r10 + 0x10]
cmp rbx, rax
jb 0x14013a257
lea rax, [r10 + 0x3e8]
cmp rbx, rax
jb 0x14013a238
lea rax, [r10 + 0x200]
cmp rbx, rax
jb 0x140139b93
lea rax, [r10 + 0x2a]
cmp rbx, rax
jb 0x140139b75
lea rax, [r10 + 9]
cmp rbx, rax
jb 0x140139b57
lea rax, [r10 + 8]
cmp rbx, rax
jb 0x140139d16
lea rax, [r10 + 0x64]
cmp rbx, rax
jb 0x140139d08
lea rax, [r10 + 0x42]
cmp rbx, rax
jb 0x140139cc7
lea rax, [r10 + 0x7a]
cmp rbx, rax
jb 0x140139ca4
lea rax, [r10 + 0x61]
cmp rbx, rax
jb 0x1401399a0
lea rbx, [r10 + 0x200]
lea r10, [rbx + 4]
lea rax, [r10 + 0x80]
cmp rbx, rax
ja 0x140139c8a
lea rax, [r10 + 0x5a]
cmp rbx, rax
ja 0x140139c70
lea rax, [r10 + 0x41]
cmp rbx, rax
ja 0x140139c56
lea rax, [r10 + 6]
cmp rbx, rax
ja 0x140139c3c
lea rax, [r10 + 0x42]
cmp rbx, rax
ja 0x140139c22
lea rax, [r10 + 0x40]
cmp rbx, rax
ja 0x140139c05
lea rax, [r10 + 0x61]
cmp rbx, rax
ja 0x140139beb
lea rax, [r10 + 0x1000]
cmp rbx, rax
ja 0x140139bd1
lea rax, [r10 + 3]
cmp rbx, rax
ja 0x140139bb4
lea rax, [r10 + 2]
cmp rbx, rax
ja 0x1401399a0
lea rbx, [r10 + 0x41]
lea r10, [rbx + 0x10]
jmp 0x1401399a0
lea edx, [r9 - 0x2e]
mov ecx, reloc.WLDAP32.dll_Ordinal_33
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x140139993
lea edx, [r9 + 0x66]
mov ecx, reloc.WLDAP32.dll_Ordinal_27
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x140139932
lea edx, [r9 - 6]
mov ecx, reloc.WS2_32.dll_setsockopt
mov al, dl
mov r11, rsi
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x1401398c1
lea ecx, [r9 + 0x70]
mov r11b, r9b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x10
jmp 0x14013a10a
lea ecx, [r9 + 4]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x1c
jmp 0x14013a143
lea ecx, [r9 - 0x68]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x28
jmp 0x14013a161
lea ecx, [r9 + 0x2c]
mov r11b, r9b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x34
jmp 0x14013a0a0
lea ecx, [r9 - 0x40]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x40
jmp 0x14013a0c1
lea ecx, [r9 + 0x54]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x4c
jmp 0x14013a0c4
lea ecx, [r9 - 0x18]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x58
jmp 0x14013a18d
lea ecx, [r9 + 0x7c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x64
jmp 0x14013a1d9
lea ecx, [r9 + 0x10]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x70
jmp 0x14013a224
lea edx, [r9 - 0x7e]
mov ecx, reloc.WS2_32.dll_gethostname
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
mov byte [rbp + r9 - 0x50], dil
jmp 0x14013a230
lea edx, [r15 + r9]
mov ecx, 0x33
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
cmp r10, 0x64
jb 0x140139cbd
mov cl, r8b
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x7c]
and al, dl
add al, al
sub cl, al
add cl, dl
lea edi, [rcx*2 - 0x38]
jmp 0x14013a10a
lea edx, [r9 - 0x56]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
jmp 0x140139e5a
lea edx, [r9 + 0x3e]
mov ecx, Ordinal_41
jmp 0x140139e26
lea ecx, [r9 - 0x6c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0xc
jmp 0x14013a224
lea ecx, [r9 + 0x28]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x18
jmp 0x14013a1d9
lea ecx, [r9 - 0x44]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x24
jmp 0x14013a18d
lea ecx, [r9 + 0x50]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x30
jmp 0x14013a0c4
lea ecx, [r9 - 0x1c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x3c
jmp 0x14013a0c1
mov r11b, r9b
lea ecx, [r11 + 0x78]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x48
jmp 0x14013a0a0
lea ecx, [r9 + 0xc]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x54
jmp 0x14013a161
lea ecx, [r9 - 0x60]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x60
jmp 0x14013a143
mov r11b, r9b
lea ecx, [r11 + 0x34]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x6c
jmp 0x14013a10a
lea rcx, [r10 + 5]
cmp rbx, rcx
jae 0x140139e9b
lea edx, [r9 - 0x4a]
mov ecx, 3
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
lea rax, [r10 + rbx]
cmp rax, 3
je 0x14013a038
lea rax, [r10 + 0x5a]
cmp rbx, rax
jbe 0x140139f24
lea edx, [r9 + 0x5e]
mov ecx, gethostname
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
cmp rbx, 0xa
jae 0x14013a01d
lea rax, [r10 + 0x61]
cmp rbx, rax
jbe 0x140139fa8
lea ecx, [r9 + 0x4c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x14
jmp 0x140139ce0
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140139ebe
lea ecx, [r9 - 0x24]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 4
jmp 0x14013a224
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x140139ee3
lea edx, [r9 - 0x74]
mov ecx, r15d
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013a0c1
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x140139efa
lea edx, [r9 + 0x64]
mov ecx, Ordinal_35
jmp 0x14013a151
cmp rbx, rcx
jne 0x140139e36
mov r11b, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [r11 + 0x3c]
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013a10a
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140139f3b
mov r11b, r9b
mov ecx, 0x3d
lea edx, [r11 - 0x36]
jmp 0x140139f0f
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x140139f5e
lea ecx, [r9 - 0x5e]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x6e
jmp 0x14013a161
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x140139f81
lea ecx, [r9 - 0x1a]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x4a
jmp 0x14013a0c4
lea rax, [r10 + 8]
cmp rbx, rax
jne 0x140139e6a
lea ecx, [r9 + 0x2a]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x26
jmp 0x14013a224
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140139fcb
lea ecx, [r9 - 0x48]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 8
jmp 0x14013a224
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x140139fef
lea edx, [r9 - 0x70]
mov ecx, 8
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
jmp 0x14013a18a
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x140139ce0
mov ecx, reloc.WLDAP32.dll_Ordinal_26
mov r11b, r9b
lea edx, [r11 - 0x2c]
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x14013a0a0
mov cl, byte [rbp + r9 - 0x50]
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x10]
and al, dl
sub cl, al
add cl, 0x38
lea edi, [rcx + rcx]
jmp 0x14013a09d
lea edx, [r9 + 0x5c]
mov ecx, 0x3e
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
jmp 0x14013a18d
lea ecx, [r9 - 0x46]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, r15b
jmp 0x14013a224
lea ecx, [r9 + 0xa]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x46
jmp 0x14013a0c1
mov r11b, r9b
mov al, r8b
mov dil, r8b
lea edx, [r11 - 0x62]
and al, dl
add al, al
sub dil, al
sub dil, 0x52
add dil, dl
sub r11b, 0x5a
mov al, r8b
and al, r11b
mov ecx, Ordinal_60
sub cl, al
add cl, cl
add cl, r8b
add cl, dil
add cl, r11b
mov byte [rbp + r9 - 0x50], cl
add rbx, r10
or rcx, 0xffffffffffffffff
movzx eax, dil
sub rcx, rax
add r9, rcx
jmp 0x14013a230
lea ecx, [r9 + 0x32]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x5e
jmp 0x14013a161
mov r11b, r9b
mov al, r8b
mov dil, r8b
lea edx, [r11 + 0x5a]
and al, dl
add al, al
sub dil, al
sub dil, 0x76
add dil, dl
add r11b, 0x3a
mov al, r8b
and al, r11b
mov ecx, gethostname
sub cl, al
add cl, cl
add cl, r8b
add cl, r11b
mov byte [rbp + r9 - 0x50], cl
jmp 0x14013a143
lea edx, [r15 + r9]
mov ecx, 0x33
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
inc r10
jmp 0x14013a161
lea edx, [r9 - 0x56]
mov ecx, reloc.WLDAP32.dll_Ordinal_45
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
dec r9
jmp 0x14013a230
mov eax, reloc.WS2_32.dll_setsockopt
movabs rcx, 0xfc2980ec45f8bdfa
add rcx, r9
mov r8b, r11b
and r11b, cl
sub al, r11b
lea edi, [rax + rax]
add dil, cl
add dil, r8b
lea edx, [r9 + 0x12]
mov al, r8b
and al, dl
inc r10
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x7e
add cl, dl
movzx eax, cl
mov byte [rbp + r9 - 0x50], al
add rax, r10
sub r9, rax
jmp 0x14013a1d9
mov r8b, r11b
mov eax, reloc.WS2_32.dll_ntohs
movabs rcx, 0x6af912f1e8d63e8e
add rcx, r9
and r11b, cl
sub al, r11b
lea edi, [rax + rax]
add dil, cl
add dil, r8b
mov al, r8b
lea ecx, [r9 - 0x38]
and al, cl
inc rbx
add al, al
sub r8b, al
or rax, 0xffffffffffffffff
sub r8b, 0x78
sub rax, rbx
add r8b, cl
mov byte [rbp + r9 - 0x50], r8b
add r9, rax
jmp 0x14013a224
mov ecx, 9
movabs rdx, 0xd9c8a4f78bb3bf22
add rdx, r9
mov al, r11b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r11b
add dil, dl
movzx eax, byte [rbp + r9 - 0x50]
add rax, r10
add r9, rax
inc r9
jmp 0x1401398ab
sub r9b, 0x72
mov ecx, reloc.WS2_32.dll_ntohs
mov al, r8b
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, r9b
jmp 0x1401398a8
add r9b, 0x22
mov ecx, 9
mov al, r8b
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, r9b
jmp 0x140139898
lea rcx, [rbp + 0x156cdf8]
jmp 0x14013a28c
lea rcx, [rbp + 0x680dae]
jmp 0x14013a28c
lea rcx, [rbp - 0x50]
call r14
mov rcx, qword gs:[0x60]
mov rdi, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov r11d, dword [rdx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14013a307
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14013a307
mov ebx, dword [r11 + 0x20]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + rbx]
mov edx, 0x811c9dc5
add r8, r10
mov al, byte [r8]
inc r8
test al, al
je 0x14013a302
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [r8]
inc r8
test al, al
jne 0x14013a2e5
cmp edx, 0xf8f45725
je 0x14013a30c
test r9d, r9d
jne 0x14013a2c8
mov rcx, qword [rcx]
jmp 0x14013a2a3
mov ecx, dword [r11 + 0x24]
mov rdx, r12
add rcx, r10
movzx r9d, word [rcx + r9*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r10
mov eax, dword [rcx + r9*4]
mov rcx, rdi
add rax, r10
call rax
test rax, rax
je 0x14013a347
xor r9d, r9d
xor r8d, r8d
mov rcx, r13
lea edx, [r9 + 0x11]
call rax
test eax, eax
setns al
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret