Function at 0x14005a460
Capabilities:
Access peb ldr_data
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0xb8]
sub rsp, 0x1b0
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x14014a4c8]
xor rax, rsp
mov qword [rbp + 0x98], rax
movdqa xmm1, xmmword [0x1400da400]
lea r14, [0x14014af30]
movd ecx, xmm1
mov r10b, 0x5b
movdqu xmmword [rbp + 0x70], xmm1
movzx ebx, r10b
mov byte [rbp + 0x86], 0
xor byte [rbp + 0x72], cl
xor r10b, cl
xor byte [rbp + 0x73], cl
xor bl, cl
xor byte [rbp + 0x74], cl
movdqa xmm0, xmm1
xor byte [rbp + 0x75], cl
mov dl, 0x55
xor byte [rbp + 0x76], cl
xor dl, cl
xor byte [rbp + 0x77], cl
mov r8b, 0x41
xor byte [rbp + 0x78], cl
xor r8b, cl
xor byte [rbp + 0x79], cl
mov r9b, Ordinal_30
xor byte [rbp + 0x7a], cl
xor r9b, cl
xor byte [rbp + 0x7b], cl
mov r11b, 0x5c
xor byte [rbp + 0x7c], cl
xor r11b, cl
xor byte [rbp + 0x7d], cl
xor byte [rbp + 0x7e], cl
xor byte [rbp + 0x7f], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp + 0x80], dl
lea rdx, [rbp + 0x71]
mov byte [rbp + 0x81], r8b
xor al, cl
mov byte [rbp + 0x82], r9b
mov rcx, r14
mov byte [rbp + 0x71], al
mov byte [rbp + 0x83], r10b
mov byte [rbp + 0x84], r11b
mov byte [rbp + 0x85], bl
call fcn.140060860
mov byte [rbp + 0x10], reloc.WS2_32.dll_WSASetLastError
lea rsi, [0x14014b770]
mov al, 3
xor r11d, r11d
xor al, 0x70
mov byte [rbp + 0x17], r11b
mov byte [rbp + 0x11], al
mov cl, reloc.WS2_32.dll_setsockopt
xor cl, 0x70
mov dl, 2
mov byte [rbp + 0x12], cl
xor dl, 0x70
mov byte [rbp + 0x13], dl
mov r8b, Ordinal_26
xor r8b, 0x70
mov r9b, reloc.WS2_32.dll_recvfrom
mov byte [rbp + 0x14], r8b
xor r9b, 0x70
mov byte [rbp + 0x15], r9b
mov r10b, Ordinal_30
xor r10b, 0x70
cmp qword [0x14014b788], 0x10
mov byte [rbp + 0x16], r10b
mov rax, qword gs:[0x60]
cmovae rsi, qword [0x14014b770]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14005a637
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14005a637
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xaa24ed32
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a632
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a610
cmp r8d, 0x57c09122
je 0x14005a63c
test r9d, r9d
jne 0x14005a5f0
mov rax, qword [rax]
jmp 0x14005a5c0
mov ecx, dword [rdi + 0x24]
mov rdx, rsi
add rcx, r10
mov qword [rsp + 0x28], r14
mov dword [rsp + reloc.WLDAP32.dll_Ordinal_32], 0x20
movzx r8d, word [rcx + r9*2]
lea r9, [rbp + 0x70]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
lea r8, [0x1400cf724]
add rax, r10
lea rcx, [rbp + 0x11]
call rax
lea rax, [rbp + 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14005a680
lea rdx, [rbp + 0x70]
lea rcx, [0x14014b750]
call fcn.140054b40
xor r8d, r8d
mov byte [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_32
mov cl, 0x53
mov byte [rsp + 0x34], r8b
xor cl, 0x20
mov dl, 0x50
xor dl, 0x20
mov byte [rsp + 0x32], cl
mov al, 0x45
mov byte [rsp + 0x33], dl
xor al, 0x20
lea rdx, [rsp + 0x31]
lea rcx, [0x14014ba38]
mov byte [rsp + 0x31], al
mov r9, r14
mov r8b, 1
call fcn.14005b2b0
xor r8d, r8d
mov byte [rsp + 0x38], 0x53
mov cl, reloc.WLDAP32.dll_Ordinal_32
mov byte [rsp + 0x3c], r8b
xor cl, 0x53
mov dl, reloc.WLDAP32.dll_Ordinal_35
xor dl, 0x53
mov byte [rsp + 0x3a], cl
mov al, 0x36
mov byte [rsp + 0x3b], dl
xor al, 0x53
lea rdx, [rsp + 0x39]
lea rcx, [0x14014bab0]
mov byte [rsp + 0x39], al
mov r9, r14
mov r8b, 1
call fcn.14005b2b0
xor r8d, r8d
mov byte [rsp + 0x40], 0x40
mov cl, 0x33
mov byte [rsp + 0x44], r8b
xor cl, 0x40
mov dl, 0x30
xor dl, 0x40
mov byte [rsp + 0x42], cl
mov al, 0x25
mov byte [rsp + 0x43], dl
xor al, 0x40
lea rdx, [rsp + 0x41]
lea rcx, [0x14014b8d0]
mov byte [rsp + 0x41], al
mov r9, r14
mov r8b, 1
call fcn.14005b2b0
xor r8d, r8d
mov byte [rsp + 0x48], WSAGetLastError
mov cl, Ordinal_32
mov byte [rsp + 0x4c], r8b
xor cl, 0x6c
mov dl, 0x1c
xor dl, 0x6c
mov byte [rsp + 0x4a], cl
mov al, 9
mov byte [rsp + 0x4b], dl
xor al, 0x6c
lea rdx, [rsp + 0x49]
lea rcx, [0x14014b808]
mov byte [rsp + 0x49], al
mov r9, r14
mov r8b, 1
call fcn.14005b2b0
mov al, reloc.WLDAP32.dll_Ordinal_50
mov byte [rsp + 0x50], 0x57
xor al, 0x57
mov cl, 0x24
xor cl, 0x57
mov byte [rsp + 0x51], al
mov dl, 0x27
mov byte [rsp + 0x52], cl
xor r8d, r8d
xor dl, 0x57
mov byte [rsp + 0x53], dl
lea rcx, [0x14014ba10]
mov byte [rsp + 0x54], r8b
lea rdx, [rsp + 0x51]
mov r8b, 1
mov r9, r14
call fcn.14005b2b0
xor r8d, r8d
mov byte [rsp + 0x58], 0x63
mov cl, reloc.WS2_32.dll_recv
mov byte [rsp + 0x5c], r8b
xor cl, 0x63
mov dl, reloc.WS2_32.dll_send
xor dl, 0x63
mov byte [rsp + 0x5a], cl
mov al, 6
mov byte [rsp + 0x5b], dl
xor al, 0x63
lea rdx, [rsp + 0x59]
lea rcx, [0x14014bb40]
mov byte [rsp + 0x59], al
mov r9, r14
mov r8b, 1
call fcn.14005b2b0
xor r8d, r8d
mov byte [rsp + 0x60], 0x51
mov cl, Ordinal_35
mov byte [rsp + 0x64], r8b
xor cl, 0x51
mov dl, reloc.WLDAP32.dll_Ordinal_33
xor dl, 0x51
mov byte [rsp + 0x62], cl
mov al, 0x34
mov byte [rsp + 0x63], dl
xor al, 0x51
lea rdx, [rsp + 0x61]
lea rcx, [0x14014b830]
mov byte [rsp + 0x61], al
mov r9, r14
mov r8b, 1
call fcn.14005b2b0
xor r8d, r8d
mov byte [rsp + 0x68], 0x63
mov cl, reloc.WS2_32.dll_recv
mov byte [rsp + 0x6c], r8b
xor cl, 0x63
mov dl, reloc.WS2_32.dll_send
xor dl, 0x63
mov byte [rsp + 0x6a], cl
mov al, 6
mov byte [rsp + 0x6b], dl
xor al, 0x63
lea rdx, [rsp + 0x69]
lea rcx, [0x14014b258]
mov byte [rsp + 0x69], al
mov r9, r14
mov r8b, 1
call fcn.14005b2b0
xor r8d, r8d
mov byte [rsp + 0x70], 4
mov cl, 0x77
mov byte [rsp + 0x74], r8b
xor cl, 4
mov dl, reloc.WS2_32.dll_WSACleanup
xor dl, 4
mov byte [rsp + 0x72], cl
mov al, 0x61
mov byte [rsp + 0x73], dl
xor al, 4
lea rdx, [rsp + 0x71]
lea rcx, [0x14014b920]
mov byte [rsp + 0x71], al
mov r9, r14
mov r8b, 1
call fcn.14005b2b0
mov al, 7
mov byte [rsp + 0x78], 0x62
xor r8d, r8d
mov cl, reloc.WS2_32.dll_recvfrom
xor al, 0x62
mov dl, reloc.WS2_32.dll_select
movss xmm2, dword [0x1400d0034]
xor cl, 0x62
xor dl, 0x62
mov byte [rsp + 0x7a], cl
mov byte [rsp + 0x7b], dl
lea rcx, [0x14014bad8]
lea rdx, [rsp + 0x79]
mov byte [rsp + 0x79], al
mov r9, r14
mov byte [rsp + 0x7c], r8b
call fcn.14005b610
xor r8d, r8d
mov byte [rbp - 0x80], reloc.WS2_32.dll_send
mov cl, 0x60
mov byte [rbp - 0x7c], r8b
xor cl, 0x13
mov dl, 0x63
xor dl, 0x13
mov byte [rbp - 0x7e], cl
mov al, 0x76
mov byte [rbp - 0x7d], dl
xor al, 0x13
lea rdx, [rbp - 0x7f]
lea rcx, [0x14014b398]
mov byte [rbp - 0x7f], al
mov r9, r14
mov r8d, 1
call fcn.14005b790
mov al, 0x68
mov byte [rbp - 0x60], reloc.WLDAP32.dll_Ordinal_26
movzx r9d, al
mov cl, 0x7b
movzx r8d, cl
xor r9b, 0x1a
xor r8b, 0x1a
mov byte [rbp - 0x5b], r9b
xor cl, 0x1a
mov byte [rbp - 0x5c], r8b
mov dl, 0x7e
mov byte [rbp - 0x5e], cl
xor dl, 0x1a
lea rcx, [0x14014b7e0]
xor r10d, r10d
mov byte [rbp - 0x5d], dl
xor al, 0x1a
mov byte [rbp - 0x5a], r10b
mov r9, r14
mov byte [rbp - 0x5f], al
mov r8b, 1
lea rdx, [rbp - 0x5f]
call fcn.14005b2b0
mov al, reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp - 0x58], Ordinal_79
movzx r9d, al
mov cl, 0x2f
movzx r8d, cl
xor r9b, 0x4e
xor r8b, 0x4e
mov byte [rbp - 0x53], r9b
xor cl, 0x4e
mov byte [rbp - 0x54], r8b
mov dl, 0x2a
mov byte [rbp - 0x56], cl
xor dl, 0x4e
lea rcx, [0x14014b208]
xor r10d, r10d
mov byte [rbp - 0x55], dl
xor al, 0x4e
mov byte [rbp - 0x52], r10b
mov r9, r14
mov byte [rbp - 0x57], al
mov r8b, 1
lea rdx, [rbp - 0x57]
call fcn.14005b2b0
mov al, Ordinal_79
mov byte [rbp - 0x50], reloc.WLDAP32.dll_Ordinal_60
mov cl, 0x5d
movzx r9d, al
movzx r8d, cl
mov dl, 0x58
xor r10d, r10d
xor cl, 0x3c
mov byte [rbp - 0x4a], r10b
xor dl, 0x3c
mov byte [rbp - 0x4e], cl
xor r8b, 0x3c
mov byte [rbp - 0x4d], dl
xor r9b, 0x3c
mov byte [rbp - 0x4c], r8b
mov byte [rbp - 0x4b], r9b
lea rdx, [rbp - 0x4f]
xor al, 0x3c
lea rcx, [0x14014b688]
mov r9, r14
mov byte [rbp - 0x4f], al
mov r8b, 1
call fcn.14005b2b0
movss xmm2, dword [0x1400d0018]
mov al, 0x57
movzx r9d, al
mov byte [rbp - 0x48], 0x25
mov cl, 0x44
xor r9b, 0x25
movzx r8d, cl
mov byte [rbp - 0x43], r9b
xor cl, 0x25
mov dl, 0x41
xor dl, 0x25
mov byte [rbp - 0x46], cl
xor r10d, r10d
mov byte [rbp - 0x45], dl
xor al, 0x25
mov byte [rbp - 0x42], r10b
xor r8b, 0x25
mov byte [rbp - 0x47], al
mov r9, r14
mov byte [rbp - 0x44], r8b
lea rdx, [rbp - 0x47]
lea rcx, [0x14014b7b8]
call fcn.14005b610
movss xmm2, dword [0x1400d9fe0]
mov al, 0x4c
movzx r9d, al
mov byte [rbp - 0x40], 0x3e
mov cl, 0x5f
xor r9b, 0x3e
movzx r8d, cl
mov byte [rbp - 0x3b], r9b
xor cl, 0x3e
mov dl, 0x5a
xor dl, 0x3e
mov byte [rbp - 0x3e], cl
xor r10d, r10d
mov byte [rbp - 0x3d], dl
xor al, 0x3e
mov byte [rbp - 0x3a], r10b
xor r8b, 0x3e
mov byte [rbp - 0x3f], al
mov r9, r14
mov byte [rbp - 0x3c], r8b
lea rdx, [rbp - 0x3f]
lea rcx, [0x14014bb18]
call fcn.14005b610
mov cl, 0x42
mov byte [rbp - 0x38], reloc.WLDAP32.dll_Ordinal_35
mov al, 0x51
movzx r8d, cl
movzx r9d, al
xor r8b, 0x23
xor r10d, r10d
mov byte [rbp - 0x34], r8b
xor al, 0x23
mov byte [rbp - 0x32], r10b
xor cl, 0x23
mov byte [rbp - 0x37], al
mov dl, 0x47
mov byte [rbp - 0x36], cl
xor dl, 0x23
xor r9b, 0x23
mov byte [rbp - 0x35], dl
mov byte [rbp - 0x33], r9b
mov r9, r14
movss xmm2, dword [0x1400d9fe4]
lea rdx, [rbp - 0x37]
lea rcx, [0x14014b970]
call fcn.14005b610
movss xmm6, dword [0x1400d0028]
mov al, 8
movzx r9d, al
mov byte [rbp - 0x30], 0x7a
mov cl, reloc.WLDAP32.dll_Ordinal_27
xor r9b, 0x7a
movzx r8d, cl
mov byte [rbp - 0x2b], r9b
xor cl, 0x7a
mov dl, reloc.WLDAP32.dll_Ordinal_30
xor dl, 0x7a
mov byte [rbp - 0x2e], cl
xor r10d, r10d
mov byte [rbp - 0x2d], dl
xor al, 0x7a
mov byte [rbp - 0x2a], r10b
xor r8b, 0x7a
mov byte [rbp - 0x2f], al
mov r9, r14
mov byte [rbp - 0x2c], r8b
movaps xmm2, xmm6
lea rdx, [rbp - 0x2f]
lea rcx, [0x14014b6b0]
call fcn.14005b610
mov al, 0x67
mov byte [rbp - 0x28], reloc.WS2_32.dll_setsockopt
movzx r9d, al
mov cl, reloc.WS2_32.dll_WSACleanup
movzx r8d, cl
xor r9b, 0x15
xor cl, 0x15
mov byte [rbp - 0x23], r9b
mov dl, 0x71
mov byte [rbp - 0x26], cl
xor dl, 0x15
lea rcx, [0x14014ba60]
xor r10d, r10d
mov byte [rbp - 0x25], dl
xor al, 0x15
mov byte [rbp - 0x22], r10b
xor r8b, 0x15
mov byte [rbp - 0x27], al
mov r9, r14
mov byte [rbp - 0x24], r8b
movaps xmm2, xmm6
lea rdx, [rbp - 0x27]
call fcn.14005b610
mov cl, reloc.WS2_32.dll_sendto
mov byte [rbp + 0x18], 0x7d
xor cl, 0x7d
mov dl, reloc.WS2_32.dll_recv
xor dl, 0x7d
mov byte [rbp + 0x1a], cl
mov r8b, Ordinal_33
mov byte [rbp + 0x1b], dl
xor r8b, 0x7d
lea rdx, [rbp + 0x19]
mov r9b, reloc.WS2_32.dll_select
mov byte [rbp + 0x1c], r8b
xor r9b, 0x7d
lea rcx, [0x14014b948]
mov al, 0x1c
mov byte [rbp + 0x1d], r9b
mov r10b, 9
xor r11d, r11d
xor al, 0x7d
mov byte [rbp + 0x1f], r11b
xor r10b, 0x7d
mov byte [rbp + 0x19], al
mov r9, r14
mov byte [rbp + 0x1e], r10b
mov r8b, 1
call fcn.14005b2b0
mov al, 0x77
mov byte [rbp + 0x20], reloc.WLDAP32.dll_Ordinal_22
mov cl, 0x7f
mov dl, 0x7b
mov r8b, reloc.WS2_32.dll_WSACleanup
xor cl, 0x16
xor r8b, 0x16
mov byte [rbp + 0x22], cl
xor dl, 0x16
mov byte [rbp + 0x24], r8b
mov r9b, 0x79
mov byte [rbp + 0x23], dl
xor r9b, 0x16
lea rdx, [rbp + 0x21]
mov r10b, 0x62
mov byte [rbp + 0x25], r9b
xor r11d, r11d
lea rcx, [0x14014b790]
xor al, 0x16
mov byte [rbp + 0x27], r11b
xor r10b, 0x16
mov byte [rbp + 0x21], al
mov r9, r14
mov byte [rbp + 0x26], r10b
xor r8d, r8d
call fcn.14005b2b0
mov cl, 0x7e
mov byte [rbp + 0x28], reloc.WS2_32.dll_socket
xor cl, 0x17
mov dl, 0x7a
xor dl, 0x17
mov byte [rbp + 0x2a], cl
mov r8b, 0x75
mov byte [rbp + 0x2b], dl
xor r8b, 0x17
lea rdx, [rbp + 0x29]
mov r9b, 0x78
mov byte [rbp + 0x2c], r8b
xor r9b, 0x17
lea rcx, [0x14014b6d8]
mov al, 0x76
mov byte [rbp + 0x2d], r9b
mov r10b, 0x63
xor r11d, r11d
xor al, 0x17
mov byte [rbp + 0x2f], r11b
xor r10b, 0x17
mov byte [rbp + 0x29], al
mov r9, r14
mov byte [rbp + 0x2e], r10b
mov r8b, 1
call fcn.14005b2b0
mov cl, 7
mov byte [rbp + 0x30], WSAGetLastError
xor cl, 0x6e
mov dl, 3
xor dl, 0x6e
mov byte [rbp + 0x32], cl
mov r8b, ntohl
mov byte [rbp + 0x33], dl
xor r8b, 0x6e
lea rdx, [rbp + 0x31]
mov r9b, 1
mov byte [rbp + 0x34], r8b
xor r9b, 0x6e
lea rcx, [0x14014b9e8]
mov al, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x35], r9b
mov r10b, reloc.WLDAP32.dll_Ordinal_26
xor r11d, r11d
xor al, 0x6e
mov byte [rbp + 0x37], r11b
xor r10b, 0x6e
mov byte [rbp + 0x31], al
mov r9, r14
mov byte [rbp + 0x36], r10b
mov r8b, 1
call fcn.14005b2b0
mov al, 0x42
mov byte [rbp + 0x38], reloc.WLDAP32.dll_Ordinal_35
mov cl, 0x4a
mov dl, Ordinal_79
mov r8b, 0x41
mov r9b, 0x4c
mov r10b, 0x57
xor cl, 0x23
xor dl, 0x23
xor r8b, 0x23
mov byte [rbp + 0x3a], cl
xor r9b, 0x23
mov byte [rbp + 0x3b], dl
mov byte [rbp + 0x3c], r8b
lea rdx, [rbp + 0x39]
mov byte [rbp + 0x3d], r9b
lea rcx, [0x14014b348]
xor r11d, r11d
xor al, 0x23
xor r10b, 0x23
mov byte [rbp + 0x39], al
mov r9, r14
mov byte [rbp + 0x3e], r10b
mov r8b, 1
mov byte [rbp + 0x3f], r11b
call fcn.14005b2b0
mov cl, reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x40], 0x49
xor cl, 0x49
mov dl, 0x24
xor dl, 0x49
mov byte [rbp + 0x42], cl
mov r8b, Ordinal_45
mov byte [rbp + 0x43], dl
xor r8b, 0x49
lea rdx, [rbp + 0x41]
mov r9b, 0x26
mov byte [rbp + 0x44], r8b
xor r9b, 0x49
lea rcx, [0x14014bb68]
mov al, Ordinal_41
mov byte [rbp + 0x45], r9b
mov r10b, 0x3d
xor r11d, r11d
xor al, 0x49
mov byte [rbp + 0x47], r11b
xor r10b, 0x49
mov byte [rbp + 0x41], al
mov r9, r14
mov byte [rbp + 0x46], r10b
mov r8b, 1
call fcn.14005b2b0
mov cl, reloc.WLDAP32.dll_Ordinal_32
mov byte [rbp + 0x48], 0x49
xor cl, 0x49
mov dl, 0x24
xor dl, 0x49
mov byte [rbp + 0x4a], cl
mov r8b, Ordinal_45
mov byte [rbp + 0x4b], dl
xor r8b, 0x49
lea rdx, [rbp + 0x49]
mov r9b, 0x26
mov byte [rbp + 0x4c], r8b
xor r9b, 0x49
lea rcx, [0x14014b880]
mov al, Ordinal_41
mov byte [rbp + 0x4d], r9b
mov r10b, 0x3d
xor r11d, r11d
xor al, 0x49
mov byte [rbp + 0x4f], r11b
xor r10b, 0x49
mov byte [rbp + 0x49], al
mov r9, r14
mov byte [rbp + 0x4e], r10b
mov r8b, 1
call fcn.14005b2b0
mov al, 0x59
mov byte [rbp + 0x50], gethostname
xor r11d, r11d
mov cl, 0x51
xor al, 0x38
mov dl, 0x55
mov byte [rbp + 0x51], al
mov r8b, 0x5a
mov r9b, 0x57
mov r10b, 0x4c
movss xmm2, dword [0x1400cfe50]
xor cl, 0x38
xor dl, 0x38
mov byte [rbp + 0x52], cl
xor r9b, 0x38
mov byte [rbp + 0x53], dl
mov byte [rbp + 0x55], r9b
lea rdx, [rbp + 0x51]
xor r8b, 0x38
mov byte [rbp + 0x57], r11b
xor r10b, 0x38
mov byte [rbp + 0x54], r8b
mov r9, r14
mov byte [rbp + 0x56], r10b
lea rcx, [0x14014b230]
call fcn.14005b610
movss xmm2, dword [0x1400d9390]
mov cl, 0x71
xor cl, 0x18
mov byte [rbp + 0x58], Ordinal_26
mov dl, 0x75
mov byte [rbp + 0x5a], cl
xor dl, 0x18
lea rcx, [0x14014b8a8]
mov r9b, 0x77
mov byte [rbp + 0x5b], dl
xor r9b, 0x18
lea rdx, [rbp + 0x59]
mov al, 0x79
mov byte [rbp + 0x5d], r9b
mov r8b, 0x7a
mov r10b, 0x6c
xor r11d, r11d
xor al, 0x18
xor r8b, 0x18
mov byte [rbp + 0x59], al
xor r10b, 0x18
mov byte [rbp + 0x5c], r8b
mov r9, r14
mov byte [rbp + 0x5e], r10b
mov byte [rbp + 0x5f], r11b
call fcn.14005b610
mov r8b, 0x47
mov byte [rbp + 0x60], 0x25
xor r8b, 0x25
mov cl, 0x4c
xor cl, 0x25
mov byte [rbp + 0x64], r8b
mov dl, 0x48
mov byte [rbp + 0x62], cl
xor dl, 0x25
lea rcx, [0x14014b8f8]
mov r9b, 0x4a
mov byte [rbp + 0x63], dl
xor r9b, 0x25
lea rdx, [rbp + 0x61]
mov al, 0x44
mov byte [rbp + 0x65], r9b
mov r10b, 0x51
xor r11d, r11d
xor al, 0x25
mov byte [rbp + 0x67], r11b
xor r10b, 0x25
mov byte [rbp + 0x61], al
mov r9, r14
mov byte [rbp + 0x66], r10b
xor r8d, r8d
call fcn.14005b790
mov al, 0xb
mov byte [rbp + 0x68], 0x6a
xor al, 0x6a
mov cl, 3
xor cl, 0x6a
mov byte [rbp + 0x69], al
mov dl, 7
mov byte [rbp + 0x6a], cl
xor r11d, r11d
mov r8b, 8
xor dl, 0x6a
mov r9b, 5
mov r10b, reloc.WLDAP32.dll_Ordinal_30
xor r8b, 0x6a
mov byte [rbp + 0x6b], dl
xor r9b, 0x6a
mov byte [rbp + 0x6c], r8b
mov byte [rbp + 0x6d], r9b
lea r8d, [r11 + 2]
xor r10b, 0x6a
mov byte [rbp + 0x6f], r11b
mov r9, r14
mov byte [rbp + 0x6e], r10b
lea rdx, [rbp + 0x69]
lea rcx, [0x14014b320]
call fcn.14005b790
xor r9d, r9d
mov byte [rbp - 0x78], 0x7b
mov cl, reloc.WS2_32.dll_select
mov byte [rbp - 0x73], r9b
xor cl, 0x7b
mov dl, 8
xor dl, 0x7b
mov byte [rbp - 0x76], cl
mov r8b, Ordinal_26
mov byte [rbp - 0x75], dl
xor r8b, 0x7b
lea rdx, [rbp - 0x77]
mov al, reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp - 0x74], r8b
xor al, 0x7b
lea rcx, [0x14014b280]
mov r8b, 1
mov byte [rbp - 0x77], al
mov r9, r14
call fcn.14005b2b0
xor r9d, r9d
mov byte [rbp - 0x70], 0x53
mov cl, 0x3a
mov byte [rbp - 0x6b], r9b
xor cl, 0x53
mov dl, reloc.WLDAP32.dll_Ordinal_32
xor dl, 0x53
mov byte [rbp - 0x6e], cl
mov r8b, Ordinal_50
mov byte [rbp - 0x6d], dl
xor r8b, 0x53
lea rdx, [rbp - 0x6f]
mov al, 0x3e
mov byte [rbp - 0x6c], r8b
xor al, 0x53
lea rcx, [0x14014b858]
mov r8b, 1
mov byte [rbp - 0x6f], al
mov r9, r14
call fcn.14005b2b0
mov r8b, listen
mov byte [rbp - 0x68], 0x68
xor r8b, 0x68
xor r9d, r9d
mov cl, 1
mov byte [rbp - 0x64], r8b
xor cl, 0x68
mov byte [rbp - 0x63], r9b
mov dl, reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp - 0x66], cl
xor dl, 0x68
lea rcx, [0x14014b2a8]
mov al, 5
mov byte [rbp - 0x65], dl
xor al, 0x68
lea rdx, [rbp - 0x67]
mov r8d, 0x90
mov byte [rbp - 0x67], al
mov r9, r14
call fcn.14005b790
mov al, 0x59
mov byte [rbp - 0x20], Ordinal_60
mov cl, 0x55
xor r10d, r10d
movzx r8d, cl
xor al, 0x3a
mov dl, 0x56
mov r9b, 0x48
movss xmm6, dword [0x1400cfe34]
xor cl, 0x3a
xor dl, 0x3a
mov byte [rbp - 0x1e], cl
xor r9b, 0x3a
mov byte [rbp - 0x1d], dl
mov byte [rbp - 0x1b], r9b
lea rdx, [rbp - 0x1f]
xor r8b, 0x3a
mov byte [rbp - 0x1f], al
mov r9, r14
mov byte [rbp - 0x1c], r8b
lea rcx, [0x14014b2d0]
mov byte [rbp - 0x1a], r10b
movaps xmm2, xmm6
call fcn.14005b610
mov cl, Ordinal_30
mov byte [rbp - 0x18], WSAStartup
movzx r8d, cl
xor r9b, r9b
xor cl, 0x72
xor r9b, 0x72
mov dl, reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp - 0x16], cl
xor dl, 0x72
mov byte [rbp - 0x13], r9b
mov al, reloc.WS2_32.dll_recvfrom
mov byte [rbp - 0x15], dl
xor r10d, r10d
lea rcx, [0x14014b700]
xor al, 0x72
mov byte [rbp - 0x12], r10b
xor r8b, 0x72
mov byte [rbp - 0x17], al
mov r9, r14
mov byte [rbp - 0x14], r8b
movaps xmm2, xmm6
lea rdx, [rbp - 0x17]
call fcn.14005b610
mov cl, listen
mov byte [rbp - 0x10], 0x63
movzx r8d, cl
mov dl, reloc.WS2_32.dll_ntohs
xor cl, 0x63
xor dl, 0x63
mov r9b, reloc.WS2_32.dll_recvfrom
mov byte [rbp - 0xe], cl
xor r9b, 0x63
mov byte [rbp - 0xd], dl
xor al, al
mov byte [rbp - 0xb], r9b
xor r10d, r10d
lea rcx, [0x14014ba88]
xor al, 0x63
mov byte [rbp - 0xa], r10b
xor r8b, 0x63
mov byte [rbp - 0xf], al
mov r9, r14
mov byte [rbp - 0xc], r8b
movaps xmm2, xmm6
lea rdx, [rbp - 0xf]
call fcn.14005b610
mov cl, reloc.WS2_32.dll_select
mov byte [rbp - 8], 0x7d
movzx r8d, cl
mov r9b, reloc.WS2_32.dll_ntohs
xor r8b, 0x7d
xor r10d, r10d
xor cl, 0x7d
mov byte [rbp - 4], r8b
mov al, reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp - 6], cl
xor al, 0x7d
mov byte [rbp - 2], r10b
mov dl, reloc.WS2_32.dll_recvfrom
mov byte [rbp - 7], al
xor dl, 0x7d
xor r9b, 0x7d
mov byte [rbp - 5], dl
mov byte [rbp - 3], r9b
mov r9, r14
movss xmm2, dword [0x1400d9f40]
lea rdx, [rbp - 7]
lea rcx, [0x14014b3c0]
call fcn.14005b610
movss xmm2, dword [0x1400d9f34]
mov cl, 0x79
movzx r8d, cl
mov byte [rbp], reloc.WLDAP32.dll_Ordinal_22
xor cl, 0x16
mov dl, 0x7a
xor dl, 0x16
mov byte [rbp + 2], cl
mov r9b, 0x64
mov byte [rbp + 3], dl
xor r9b, 0x16
lea rcx, [0x14014b370]
mov al, 0x75
mov byte [rbp + 5], r9b
xor r10d, r10d
lea rdx, [rbp + 1]
xor al, 0x16
mov byte [rbp + 6], r10b
xor r8b, 0x16
mov byte [rbp + 1], al
mov r9, r14
mov byte [rbp + 4], r8b
call fcn.14005b610
movss xmm2, dword [0x1400d9f44]
mov cl, 9
movzx r8d, cl
mov byte [rbp + 8], 0x66
xor cl, 0x66
mov dl, 0xa
xor dl, 0x66
mov byte [rbp + 0xa], cl
mov al, 5
mov byte [rbp + 0xb], dl
mov r10b, reloc.WS2_32.dll_sendto
lea rcx, [0x14014b998]
xor r11d, r11d
lea rdx, [rbp + 9]
xor al, 0x66
mov byte [rbp + 0xe], r11b
xor r8b, 0x66
mov byte [rbp + 9], al
xor r10b, 0x66
mov byte [rbp + 0xc], r8b
mov r9, r14
mov byte [rbp + 0xd], r10b
call fcn.14005b610
mov rcx, qword [rbp + 0x98]
xor rcx, rsp
call fcn.1400c8960
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret