Function at 0x140161210
Capabilities:
Access peb ldr_data
Authenticate hmac
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rsi, qword [0x1403192c8]
mov edx, 8
mov r13d, 0x811c9dc5
test rsi, rsi
jne 0x140161395
mov rax, qword gs:[0x60]
xor ebx, ebx
mov edi, 0x53b2070f
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov r8, r14
movups xmm0, xmmword [r8 + 0x58]
movd eax, xmm0
sub ax, dx
test ebx, ebx
je 0x1401612ad
psrldq xmm0, 8
mov edx, r13d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1401612a0
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x140161291
cmp edx, ebx
jne 0x140161370
mov r9, qword [r8 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x140161370
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x140161370
mov r12d, dword [r10 + 0x20]
dec r11d
mov esi, r13d
lea rcx, [r12 + r11*4]
mov edx, dword [rcx + r9]
add rdx, r9
jmp 0x1401612ff
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x1401612f4
cmp esi, edi
je 0x140161313
test r11d, r11d
jne 0x1401612e1
jmp 0x140161370
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r11*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov esi, dword [rdx + r8*4]
add rsi, r9
cmp rsi, r10
jbe 0x14016138e
lea rcx, [rax + r10]
cmp rsi, rcx
jae 0x14016138e
mov ebx, r13d
mov edi, r13d
jmp 0x140161351
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc rsi
mov al, byte [rsi]
cmp al, 0x2e
jne 0x140161343
jmp 0x140161364
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rsi
mov al, byte [rsi]
test al, al
jne 0x140161359
mov r8, qword [r14]
mov rax, qword [r8]
mov r8, rax
cmp rax, r14
je 0x14016138c
cmp qword [rax + 0x30], 0
je 0x14016138c
mov edx, 8
jmp 0x140161268
xor esi, esi
mov qword [0x1403192c8], rsi
mov dil, byte [rbp + 0x30]
xor eax, eax
mov dword [rbp - 0x50], 0xefe6d5ee
mov r13b, 0x54
mov dword [rbp - 0x4c], 0xe3ea23e0
mov word [rbp - 0x48], 0x51e4
lea r14d, [rax + 0x36]
mov qword [rbp - 0x46], rax
lea r12d, [rax + 0xe]
mov word [rbp - 0x3e], ax
lea r15d, [rax + 0x3e]
mov byte [rbp - 0x3c], al
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x15
jae 0x140161bb6
movzx r8d, byte [rbp + r9 - 0x50]
mov r11d, r8d
cmp rbx, r9
ja 0x140161bad
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x140161424
movabs rcx, 0x1aa8fc5311d9d474
mov al, r11b
add rcx, r9
mov dil, r8b
and al, cl
add al, al
sub dil, al
sub dil, 0x2c
add dil, cl
jmp 0x140161451
je 0x140161b35
lea rax, [r10 + 3]
cmp rbx, rax
je 0x140161ac4
lea rax, [r10 + 2]
cmp rbx, rax
je 0x140161a97
lea rax, [r10 + 4]
cmp rbx, rax
je 0x140161a78
cmp r10, r9
ja 0x140161ba4
lea rax, [r10 + 0x42]
cmp rbx, rax
jae 0x140161488
movabs rcx, 0x2fdcb2d076de6d84
mov al, r11b
add rcx, r9
mov edi, reloc.WLDAP32.dll_Ordinal_50
and al, cl
sub dil, al
add dil, dil
add dil, r8b
add dil, cl
jmp 0x1401614d6
lea rax, [r10 + 1]
cmp rbx, rax
je 0x140161a3a
lea rax, [r10 + 2]
cmp rbx, rax
je 0x140161a22
lea rax, [r10 + 3]
cmp rbx, rax
je 0x140161a17
lea rax, [r10 + 5]
cmp rbx, rax
je 0x1401619fd
lea rax, [r10 + 6]
cmp rbx, rax
je 0x1401619df
lea rax, [r10 + 8]
cmp rbx, rax
je 0x1401619bf
lea rax, [r10 + rbx]
cmp rax, r9
jbe 0x140161701
lea rax, [r10 + 0x5a]
cmp rbx, rax
je 0x1401616f0
lea rax, [r10 + 0x61]
cmp rbx, rax
je 0x1401616d5
lea rax, [r10 + 0x3e8]
cmp rbx, rax
je 0x1401616c7
lea rax, [r10 + 0x64]
cmp rbx, rax
je 0x1401616a9
lea rax, [r10 + 0x28]
cmp rbx, rax
je 0x14016168f
lea rbx, [r10 + 1]
lea r10, [rbx + 0x28]
lea rax, [r10 + 0x41]
cmp rbx, rax
jb 0x140161b87
lea rax, [r10 + 0x1000]
cmp rbx, rax
jb 0x140161b68
lea rax, [r10 + 0x200]
cmp rbx, rax
jb 0x1401615c2
lea rax, [r10 + 0x42]
cmp rbx, rax
jb 0x140161676
lea rax, [r10 + 0x20]
cmp rbx, rax
jb 0x14016165b
lea rbx, [r10 + 0x2a]
lea r10, [rbx + 0x20]
lea rax, [r10 + 0x7a]
cmp rbx, rax
ja 0x140161640
lea rax, [r10 + 0x400]
cmp rbx, rax
ja 0x140161626
lea rax, [r10 + 0x2a]
cmp rbx, rax
ja 0x140161618
lea rax, [r10 + 0x80]
cmp rbx, rax
ja 0x1401615fa
lea rax, [r10 + 0x40]
cmp rbx, rax
ja 0x1401615df
lea rbx, [r10 + 0x5a]
lea r10, [rbx + 0x10]
jmp 0x1401614e3
lea edx, [r9 + 0x2c]
mov al, r8b
and al, dl
mov dil, r8b
add al, al
sub dil, al
sub dil, 0x34
add dil, dl
jmp 0x1401613ef
lea ecx, [r9 + 0x50]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x30
jmp 0x140161a8f
mov ecx, reloc.WS2_32.dll_sendto
lea edx, [r9 + 0x68]
mov al, r8b
mov r11b, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x140161973
lea edx, [r9 - 0x50]
mov ecx, Ordinal_27
jmp 0x1401617ee
lea edx, [r9 - 0x38]
mov al, r8b
and al, dl
mov dil, r8b
add al, al
sub dil, al
sub dil, 0x78
jmp 0x140161885
lea ecx, [r9 - 0x20]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x20
jmp 0x140161b54
mov ecx, 0xa
lea edx, [r9 - 0x4c]
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x140161785
mov ecx, r14d
lea edx, [r9 - 0x34]
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x140161756
lea edx, [r9 + 0x30]
mov al, r8b
and al, dl
mov dil, r8b
add al, al
sub dil, al
sub dil, 0x50
jmp 0x140161885
mov ecx, 8
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x70]
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x140161973
lea edx, [r9 - 0x58]
mov ecx, 0x34
jmp 0x140161a7f
lea ecx, [r9 - 0x40]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x40
jmp 0x140161a73
lea edx, [r9 - 0x28]
mov ecx, ntohl
mov r11b, r9b
jmp 0x140161a46
lea rcx, [r10 + 2]
cmp rbx, rcx
jae 0x1401617b4
lea edx, [r9 + 0x74]
mov al, r8b
and al, dl
mov dil, r8b
add al, al
sub dil, al
sub dil, 0x2c
add dil, dl
lea rax, [r10 + rbx]
cmp rax, 4
je 0x140161999
lea rax, [r10 + 0x64]
cmp rbx, rax
jbe 0x14016183b
lea edx, [r9 - 0x5c]
mov al, r8b
and al, dl
mov dil, r8b
add al, al
sub dil, al
sub dil, 0x7c
add dil, dl
cmp rbx, 3
jae 0x14016195a
lea rax, [r10 + 0x42]
cmp rbx, rax
jbe 0x1401618a6
lea edx, [r9 + 0x28]
mov al, r8b
and al, dl
mov dil, r8b
add al, al
sub dil, al
sub dil, 0x18
add dil, dl
cmp r10, 2
jb 0x140161950
mov cl, r8b
mov r11b, r9b
mov al, r8b
lea edx, [r11 + 0x38]
and al, dl
add al, al
sub cl, al
add cl, dl
lea edi, [rcx*2 - 0x10]
jmp 0x140161a56
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1401617dc
mov ecx, 8
mov al, r8b
add ecx, r9d
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x38
jmp 0x140161b54
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x140161800
lea edx, [r9 - 0x28]
mov ecx, ntohl
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x1401619b7
cmp rbx, rcx
jne 0x140161813
lea edx, [r9 - 0x58]
mov ecx, 0x34
jmp 0x140161a9e
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x140161726
lea ecx, [r9 + 0x78]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x48
jmp 0x140161a8f
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140161855
mov r11b, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_22
lea edx, [r11 - 0x74]
jmp 0x140161a46
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x140161867
lea edx, [r9 - 4]
mov ecx, r12d
jmp 0x1401617ee
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x14016188d
lea edx, [r9 - 0x1c]
mov al, r8b
and al, dl
mov dil, r8b
add al, al
sub dil, al
sub dil, 0x3c
add dil, dl
jmp 0x140161b0a
lea rax, [r10 + 7]
cmp rbx, rax
jne 0x140161759
lea edx, [r9 - 0x34]
mov ecx, r14d
jmp 0x1401619ca
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1401618ca
lea ecx, [r9 + 0x10]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x70
jmp 0x140161b54
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1401618eb
mov ecx, Ordinal_30
lea edx, [r9 - 8]
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x140161885
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x140161902
lea edx, [r9 - 0x50]
mov ecx, Ordinal_27
jmp 0x140161a9e
lea rax, [r10 + 6]
cmp rbx, rax
jne 0x140161925
mov r11b, r9b
mov al, r8b
mov dil, r8b
lea edx, [r11 - 0x68]
and al, dl
add al, al
sub dil, al
sub dil, 0x28
jmp 0x140161973
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x140161788
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
add dil, 0x80
jmp 0x140161a8f
mov byte [rbp + r9 - 0x50], dil
jmp 0x140161b60
mov cl, byte [rbp + r9 - 0x50]
mov r11b, r9b
mov al, r8b
lea edx, [r11 + 0x20]
and al, dl
sub cl, al
add cl, 0x10
lea edi, [rcx + rcx]
add dil, dl
mov al, r8b
sub r11b, 0x6c
and al, r11b
add al, al
sub r8b, al
sub r8b, 0xc
add r8b, r11b
add r8b, dil
mov byte [rbp + r9 - 0x50], r8b
jmp 0x140161aae
mov edx, 8
mov al, r8b
add edx, r9d
mov dil, r8b
and al, dl
add al, al
sub dil, al
sub dil, byte [rbp + r9 - 0x50]
sub dil, 0x38
add dil, dl
jmp 0x140161ae4
mov dl, r9b
mov ecx, Ordinal_41
sub dl, r13b
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x140161b54
lea edx, [r9 - 0xc]
mov ecx, Ordinal_46
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x140161ab1
lea ecx, [r9 + 0xc]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, r13b
jmp 0x140161aae
lea edx, [r9 + 0x3c]
mov ecx, reloc.WLDAP32.dll_Ordinal_46
jmp 0x140161a7f
lea ecx, [r9 + r13]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x4c
jmp 0x140161a73
mov r11b, r9b
mov ecx, 6
lea edx, [r11 + 0x6c]
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
sub r11b, r13b
mov al, r8b
and al, r11b
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r8b
add cl, r11b
mov byte [rbp + r9 - 0x50], cl
inc r10
jmp 0x140161a8f
lea edx, [r9 - 0x34]
mov ecx, r14d
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
dec r9
jmp 0x140161b60
lea edx, [r9 - 4]
mov ecx, r12d
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
add rbx, r10
or rcx, 0xffffffffffffffff
movzx eax, dil
sub rcx, rax
add r9, rcx
jmp 0x140161b60
movabs rcx, 0xba9ee6457cf4cf2c
mov dil, r8b
add rcx, r9
and r11b, cl
add r11b, r11b
sub dil, r11b
sub dil, 0x34
add dil, cl
lea edx, [r9 + 0x7c]
mov al, r8b
and al, dl
inc r10
add al, al
mov cl, r8b
sub cl, al
sub cl, 0x64
add cl, dl
movzx eax, cl
mov byte [rbp + r9 - 0x50], al
add rax, r10
sub r9, rax
lea edx, [r9 - 0x10]
mov al, r8b
and al, dl
inc rbx
mov ecx, gethostname
sub cl, al
or rax, 0xffffffffffffffff
add cl, cl
sub rax, rbx
add cl, r8b
add cl, dl
mov byte [rbp + r9 - 0x50], cl
add r9, rax
jmp 0x140161b54
mov eax, r15d
movabs rcx, 0x4ffaf4f9358d7d5c
add rcx, r9
and r11b, cl
sub al, r11b
lea edi, [rax + rax]
add dil, r8b
add dil, cl
movzx eax, byte [rbp + r9 - 0x50]
add rax, r10
add r9, rax
inc r9
jmp 0x1401613dc
add r9b, 0x44
mov ecx, reloc.WS2_32.dll_select
mov al, r8b
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, r9b
jmp 0x1401613d9
add r9b, 0x5c
mov ecx, r15d
mov al, r8b
and al, r9b
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, r9b
jmp 0x1401613c9
lea rcx, [rbp + 0x15abda0]
jmp 0x140161bba
lea rcx, [rbp + 0x1349214]
jmp 0x140161bba
lea rcx, [rbp - 0x50]
call rsi
mov r12, qword [0x1403192e0]
mov r13, rax
test r12, r12
jne 0x140161d26
mov rcx, qword gs:[0x60]
xor esi, esi
mov r14d, 0xf8f45725
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x140161c35
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x140161c28
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140161c19
cmp edx, esi
jne 0x140161d06
mov r10, qword [rbx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x140161d06
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x140161d06
mov edi, dword [r11 + 0x20]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + rdi]
mov edx, 0x811c9dc5
add r8, r10
jmp 0x140161c89
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140161c7e
cmp edx, r14d
je 0x140161c9f
test r9d, r9d
jne 0x140161c69
jmp 0x140161d06
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r9d, word [rdx + r9*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov r12d, dword [rdx + r9*4]
add r12, r10
cmp r12, r11
jbe 0x140161d1f
lea rcx, [rax + r11]
cmp r12, rcx
jae 0x140161d1f
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x140161ce1
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r12
mov al, byte [r12]
cmp al, 0x2e
jne 0x140161cd3
jmp 0x140161cf8
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r12
mov al, byte [r12]
test al, al
jne 0x140161ceb
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x140161d1c
cmp qword [rax + 0x30], 0
jne 0x140161bee
xor r12d, r12d
mov qword [0x1403192e0], r12
mov dil, byte [rbp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 9], eax
movups xmmword [rbp - 0x19], xmm0
mov byte [rbp - 5], al
mov r14b, 0x60
mov dword [rbp - 0x30], 0x5641a54e
mov dword [rbp - 0x2c], 0x51a84ca0
mov dword [rbp - 0x28], 0x4ab7bbb7
mov dword [rbp - 0x24], 0xb1b1b4b8
mov dword [rbp - 0x20], 0x46b0b954
mov word [rbp - 0x1c], 0x4145
mov byte [rbp - 0x1a], Ordinal_41
call fcn.1400a1a30
mov rbx, qword [rax]
call fcn.1400a1a40
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x2c
jae 0x140162732
movzx r8d, byte [rbp + r9 - 0x30]
mov r15d, Ordinal_27
mov esi, r8d
mov r11d, r8d
cmp rbx, r9
ja 0x140162729
lea rax, [r10 + 1]
cmp rbx, rax
jae 0x140161dcc
movabs rcx, 0xec3e91abbb99ac28
mov al, sil
add rcx, r9
mov dil, r8b
and al, cl
add al, al
sub dil, al
add dil, cl
sub dil, r15b
jmp 0x140161df9
je 0x1401626b7
lea rax, [r10 + 3]
cmp rbx, rax
je 0x140162645
lea rax, [r10 + 5]
cmp rbx, rax
je 0x1401625f2
lea rax, [r10 + 2]
cmp rbx, rax
je 0x1401625ae
cmp r10, r9
ja 0x140162720
lea rax, [r10 + 9]
cmp rbx, rax
jae 0x140161e29
mov dl, 0x48
mov edi, 4
lea ecx, [rdx + r9]
mov al, cl
and al, r8b
sub dil, al
add dil, dil
add dil, cl
add dil, r8b
jmp 0x140161e6c
lea rax, [r10 + 1]
cmp rbx, rax
je 0x140162594
lea rax, [r10 + 2]
cmp rbx, rax
je 0x14016257b
lea rax, [r10 + 5]
cmp rbx, rax
je 0x140162562
lea rax, [r10 + 4]
cmp rbx, rax
je 0x140162548
lea rax, [r10 + 3]
cmp rbx, rax
je 0x14016252e
mov dl, 0x48
mov r11d, 8
lea rax, [r10 + rbx]
cmp rax, r9
jbe 0x140162290
lea rax, [r10 + 0x10]
cmp rbx, rax
je 0x140162273
lea rax, [r10 + 5]
cmp rbx, rax
je 0x140162256
lea rax, [r10 + 0x2a]
cmp rbx, rax
je 0x140162238
lea rax, [r10 + 0x1000]
cmp rbx, rax
je 0x14016221a
lea rax, [r10 + 6]
cmp rbx, rax
je 0x140162200
lea rax, [r10 + 1]
cmp rbx, rax
je 0x1401621e6
lea rax, [r10 + 0x61]
cmp rbx, rax
je 0x1401621cc
lea rcx, [r10 + 0x80]
cmp rbx, rcx
je 0x1401621ae
lea rax, [r10 + 0x20]
cmp rbx, rax
je 0x140162192
lea r10, [rcx + 1]
mov rbx, rcx
lea rax, [r10 + 2]
cmp rcx, rax
jb 0x140162705
lea rax, [r10 + 0x7a]
cmp rcx, rax
jb 0x1401626e9
lea rax, [r10 + 0x200]
cmp rcx, rax
jb 0x140162032
lea rax, [r10 + 0x28]
cmp rcx, rax
jb 0x140162014
lea rax, [r10 + 8]
cmp rcx, rax
jb 0x140161ffa
lea rcx, [r10 + 9]
cmp rbx, rcx
jb 0x140162151
lea rax, [r10 + 3]
cmp rbx, rax
jb 0x14016212c
lea rax, [r10 + 0x41]
cmp rbx, rax
jb 0x140161e7f
lea r10, [rcx + 0x3e8]
mov rbx, rcx
lea rax, [r10 + 3]
cmp rcx, rax
ja 0x140162112
lea rax, [r10 + 0x41]
cmp rcx, rax
ja 0x1401620f8
lea rax, [r10 + 0x3e8]
cmp rcx, rax
ja 0x1401620dd
lea rax, [r10 + 4]
cmp rcx, rax
ja 0x1401620c1
lea rax, [r10 + 0x5a]
cmp rcx, rax
ja 0x1401620ad
lea rax, [r10 + 0x400]
cmp rcx, rax
ja 0x14016208d
lea rax, [r10 + 0x42]
cmp rcx, rax
ja 0x140162071
lea rax, [r10 + 0xa]
cmp rcx, rax
ja 0x140162053
lea rax, [r10 + 0x64]
cmp rcx, rax
ja 0x140161e7f
lea rbx, [r10 + 0x2a]
lea r10, [rbx + 0x10]
jmp 0x140161e7f
mov cl, r9b
sub cl, dl
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, r11b
jmp 0x140161e72
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x140161df9
lea edx, [r15 + r9]
mov ecx, Ordinal_46
mov al, dl
mov r11, rsi
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x140161d98
lea edx, [r9 - 0x10]
mov ecx, gethostname
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x1401625e7
mov cl, r9b
mov al, r8b
sub cl, r14b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, r14b
jmp 0x1401625ea
lea edx, [r9 + 0x50]
mov al, r8b
and al, dl
mov dil, r8b
add al, al
mov r11b, r9b
sub dil, al
sub dil, 0x30
add dil, dl
jmp 0x14016260e
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea edi, [r9 + r8]
jmp 0x14016262f
lea edx, [r9 - 0x50]
mov ecx, r15d
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x140162632
mov ecx, Ordinal_50
lea edx, [r14 + r9]
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x140162526
lea ecx, [r9 + 0x10]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x70
jmp 0x14016268e
lea ecx, [r9 - 0x40]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x40
jmp 0x1401626d5
mov ecx, Ordinal_30
mov dl, r9b
sub dl, r11b
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
mov byte [rbp + r9 - 0x30], dil
jmp 0x1401626e1
lea edx, [r9 - 0x58]
mov ecx, 0x34
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
cmp r10, 0x42
jb 0x140162147
mov cl, r8b
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x10]
and al, dl
add al, al
sub cl, al
add cl, dl
lea edi, [rcx*2 - 0x20]
jmp 0x1401625ca
lea edx, [r9 - 0x50]
mov ecx, r15d
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x1401626d5
lea edx, [r14 + r9]
mov ecx, Ordinal_50
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14016268e
lea ecx, [r9 + 0x10]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x70
jmp 0x14016266a
lea ecx, [r9 - 0x40]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x40
jmp 0x140162632
lea ecx, [r9 + 0x70]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x10
jmp 0x14016262f
mov r11b, r9b
mov ecx, reloc.WS2_32.dll_recv
lea edx, [r11 + 0x20]
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
jmp 0x14016250d
lea edx, [r9 - 0x30]
mov ecx, Ordinal_41
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x1401625ea
lea ecx, [r9 + 0x80]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
add dil, 0x80
jmp 0x1401625e7
lea ecx, [r9 + 0x30]
mov r11b, r9b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x50
jmp 0x1401625ca
lea rax, [r10 + 0x64]
cmp rbx, rax
jae 0x140162316
lea ecx, [r9 + 0x28]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, r15b
lea rax, [r10 + rbx]
cmp rax, 0x61
je 0x140162515
lea rcx, [r10 + 6]
cmp rbx, rcx
jbe 0x1401623a8
lea edx, [r9 - 0x78]
mov ecx, 0x24
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
cmp rbx, 0x40
jae 0x1401624f4
lea rax, [r10 + 0x41]
cmp rbx, rax
jbe 0x140162429
lea edx, [r9 - 0x30]
mov ecx, Ordinal_41
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14016216a
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x14016233b
lea edx, [r9 - 0x70]
mov ecx, r11d
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
jmp 0x1401626d5
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14016235e
lea ecx, [r9 + 0x30]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x50
jmp 0x14016266a
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x140162381
lea ecx, [r9 + 0x70]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x10
jmp 0x1401625ea
lea rax, [r10 + 7]
cmp rbx, rax
jne 0x1401622ad
lea ecx, [r9 - 0x40]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x40
jmp 0x1401625e7
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x1401623c2
mov r11b, r9b
mov ecx, ntohl
lea edx, [r11 - 0x28]
jmp 0x1401625ba
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x1401623e4
lea ecx, [r9 + 0x28]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, r15b
jmp 0x1401625e7
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x140162406
lea ecx, [r9 + 0x78]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, dl
jmp 0x1401625ea
cmp rbx, rcx
jne 0x1401622e1
mov cl, r9b
sub cl, dl
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, r11b
jmp 0x14016266a
lea rax, [r10 + 1]
cmp rbx, rax
jne 0x140162440
lea edx, [r9 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
jmp 0x140162199
lea rax, [r10 + 4]
cmp rbx, rax
jne 0x140162463
lea ecx, [r9 + 0x10]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x70
jmp 0x140162632
lea rax, [r10 + 2]
cmp rbx, rax
jne 0x14016248a
lea edx, [r14 + r9]
mov ecx, Ordinal_50
mov al, r8b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r8b
add dil, dl
jmp 0x14016262f
lea rax, [r10 + 5]
cmp rbx, rax
jne 0x1401624a2
mov r11b, r9b
mov ecx, r15d
lea edx, [r11 - 0x50]
jmp 0x140162226
lea rax, [r10 + 3]
cmp rbx, rax
jne 0x1401624c6
lea ecx, [r9 + 0x50]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea edi, [rcx + r8]
sub dil, 0x30
jmp 0x1401625e7
lea rax, [r10 + 8]
cmp rbx, rax
jne 0x14016216a
mov dl, r9b
mov al, r8b
sub dl, r14b
mov dil, r8b
and al, dl
mov r11b, r9b
add al, al
sub dil, al
add dil, dl
sub dil, r14b
jmp 0x1401625ca
mov cl, byte [rbp + r9 - 0x30]
mov r11b, r9b
mov al, r8b
lea edx, [r11 + 0x40]
and al, dl
sub cl, al
add cl, 0x20
lea edi, [rcx + rcx]
add dil, dl
jmp 0x14016260e
mov ecx, r11d
lea edx, [r9 - 0x70]
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
jmp 0x14016266a
lea ecx, [r9 - 0x38]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x78
jmp 0x14016268e
lea ecx, [r9 + 0x78]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x48
jmp 0x14016266a
lea ecx, [r9 + 0x28]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, r15b
jmp 0x140162632
mov cl, r9b
sub cl, r15b
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x58
jmp 0x1401625e7
mov r11b, r9b
lea ecx, [r11 - 0x68]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x28
jmp 0x1401625ca
mov r11b, r9b
mov ecx, Ordinal_30
lea edx, [r11 - 8]
mov al, dl
and al, r8b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r8b
add r11b, r15b
mov ecx, Ordinal_46
mov al, r11b
and al, r8b
sub cl, al
add cl, cl
add cl, r11b
add cl, r8b
mov byte [rbp + r9 - 0x30], cl
inc r10
dec r9
jmp 0x1401626e1
mov ecx, 8
mov r11b, r9b
add ecx, r11d
mov al, cl
and al, r8b
add al, al
sub cl, al
lea edi, [r8 + rcx]
sub dil, 0x38
add r11b, 0x68
mov ecx, reloc.WS2_32.dll_sendto
mov al, r11b
and al, r8b
sub cl, al
add cl, cl
add cl, r11b
add cl, r8b
add cl, dil
mov byte [rbp + r9 - 0x30], cl
add rbx, r10
or rcx, 0xffffffffffffffff
movzx eax, dil
sub rcx, rax
add r9, rcx
jmp 0x1401626e1
mov ecx, Ordinal_46
movabs rdx, 0x75b5fbb22133b518
add rdx, r9
mov r8b, r11b
mov al, dl
and al, r11b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r11b
lea ecx, [r9 - 0x48]
inc r10
mov al, cl
and al, r8b
add al, al
sub cl, al
sub cl, 8
add cl, r8b
movzx eax, cl
mov byte [rbp + r9 - 0x30], al
add rax, r10
sub r9, rax
mov al, r8b
lea ecx, [r9 - 0x20]
and al, cl
inc rbx
add al, al
sub r8b, al
or rax, 0xffffffffffffffff
sub r8b, 0x20
sub rax, rbx
add r8b, cl
mov byte [rbp + r9 - 0x30], r8b
add r9, rax
jmp 0x1401626d5
movabs rcx, 0xc4bbb50332cd0478
add rcx, r9
mov al, cl
and al, r11b
add al, al
sub cl, al
lea edi, [r11 + rcx]
sub dil, 0x48
movzx eax, byte [rbp + r9 - 0x30]
add rax, r10
add r9, rax
inc r9
jmp 0x140161d7c
sub r9b, 0x38
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea edi, [r8 + r9]
sub dil, 0x78
jmp 0x140161d79
add r9b, 0x78
mov al, r9b
and al, r8b
add al, al
sub r9b, al
lea edi, [r8 + r9]
sub dil, dl
jmp 0x140161d69
lea rdx, [rbp + 0x17faab0]
jmp 0x140162736
lea rdx, [rbp + 0x9956d8]
jmp 0x140162736
lea rdx, [rbp - 0x30]
mov rcx, r13
call r12
mov rdx, qword [0x1403192d0]
mov r12, rax
test rdx, rdx
jne 0x140162899
mov rcx, qword gs:[0x60]
xor edi, edi
mov esi, 0x9bc5a608
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r14, qword [rcx]
mov r9, r14
movups xmm0, xmmword [r9 + 0x58]
mov r13d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x1401627b9
psrldq xmm0, 8
mov edx, r13d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x1401627ac
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14016279d
cmp edx, edi
jne 0x14016287a
mov r10, qword [r9 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x14016287a
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x14016287a
mov r15d, dword [r11 + 0x20]
dec ebx
lea rdx, [r10 + rbx*4]
mov r8d, dword [rdx + r15]
mov edx, r13d
add r8, r10
jmp 0x140162809
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1401627fe
cmp edx, esi
je 0x14016281d
test ebx, ebx
jne 0x1401627ec
jmp 0x14016287a
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r9d, word [rdx + rbx*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov edx, dword [rdx + r9*4]
add rdx, r10
cmp rdx, r11
jbe 0x140162892
lea rcx, [rax + r11]
cmp rdx, rcx
jae 0x140162892
mov edi, r13d
mov esi, r13d
jmp 0x14016285b
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x14016284d
jmp 0x14016286e
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140162863
mov r9, qword [r14]
mov rax, qword [r9]
mov r9, rax
cmp rax, r14
je 0x140162890
cmp qword [rax + 0x30], 0
jne 0x14016276d
xor edx, edx
mov qword [0x1403192d0], rdx
call rdx
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
lea edx, [r9 + 0x11]
call r12
test eax, eax
je 0x1401628bb
mov qword [0], 1
lea r11, [rsp + 0x70]
xor al, al
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret