Function at 0x140266a74
Capabilities:
Access peb ldr_data
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rsi, qword [0x14044bbb0]
mov edx, 8
lea r13d, [rdx - 7]
test rsi, rsi
jne 0x140266bfc
mov rax, qword gs:[0x60]
xor ebx, ebx
mov edi, 0x53b2070f
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov r8, r14
movups xmm0, xmmword [r8 + 0x58]
movd eax, xmm0
sub ax, dx
test ebx, ebx
je 0x140266b11
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x140266b04
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x140266af5
cmp edx, ebx
jne 0x140266bd7
mov r9, qword [r8 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x140266bd7
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x140266bd7
mov r12d, dword [r10 + 0x20]
dec r11d
mov esi, 0x811c9dc5
lea rcx, [r12 + r11*4]
mov edx, dword [rcx + r9]
add rdx, r9
jmp 0x140266b65
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x140266b5a
cmp esi, edi
je 0x140266b79
test r11d, r11d
jne 0x140266b45
jmp 0x140266bd7
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r11*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov esi, dword [rdx + r8*4]
add rsi, r9
cmp rsi, r10
jbe 0x140266bf5
lea rcx, [rax + r10]
cmp rsi, rcx
jae 0x140266bf5
mov ebx, 0x811c9dc5
mov edi, ebx
jmp 0x140266bb8
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
add rsi, r13
mov al, byte [rsi]
cmp al, 0x2e
jne 0x140266baa
jmp 0x140266bcb
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
add rsi, r13
mov al, byte [rsi]
test al, al
jne 0x140266bc0
mov r8, qword [r14]
mov rax, qword [r8]
mov r8, rax
cmp rax, r14
je 0x140266bf3
cmp qword [rax + 0x30], 0
je 0x140266bf3
mov edx, 8
jmp 0x140266aca
xor esi, esi
mov qword [0x14044bbb0], rsi
mov bl, byte [rbp + 0x30]
mov r14d, Ordinal_35
xorps xmm0, xmm0
mov dword [rbp - 0x50], 0xafb6a5ae
mov dword [rbp - 0x4c], 0x534a1350
mov r12b, 0x68
mov word [rbp - 0x48], 0xe154
lea r15d, [r14 - 0xe]
movups xmmword [rbp - 0x46], xmm0
call fcn.1402682a8
mov rdi, qword [rax]
call fcn.1402682b0
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x1a
jae 0x1402675e7
movzx r8d, byte [rbp + r9 - 0x50]
mov r11d, r8d
cmp rdi, r9
ja 0x1402675de
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x140266c80
movabs rcx, 0xf109768600e1de7c
mov al, r11b
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
sub bl, 0x64
jmp 0x140266f04
je 0x14026756a
lea rax, [r10 + 2]
cmp rdi, rax
je 0x1402674fb
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1402674b0
lea rax, [r10 + 8]
cmp rdi, rax
je 0x140267472
cmp r10, r9
ja 0x1402675d5
lea rax, [r10 + 0x41]
cmp rdi, rax
jae 0x140266ce0
movabs rcx, 0xc5c6b8fe1287402c
mov al, r11b
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
sub bl, 0x34
jmp 0x140266ee8
lea rax, [r10 + 1]
cmp rdi, rax
je 0x140267461
lea rax, [r10 + 2]
cmp rdi, rax
je 0x140267447
lea rax, [r10 + 3]
cmp rdi, rax
je 0x14026742f
lea rax, [r10 + 7]
cmp rdi, rax
je 0x140267415
lea rax, [r10 + rdi]
cmp rax, r9
jbe 0x1402671b0
lea rax, [r10 + 6]
cmp rdi, rax
je 0x140267192
lea rax, [r10 + 0x10]
cmp rdi, rax
je 0x140267175
lea rax, [r10 + 0x42]
cmp rdi, rax
je 0x140267167
lea rax, [r10 + 0x3e8]
cmp rdi, rax
je 0x140267225
lea rax, [r10 + 0x7a]
cmp rdi, rax
je 0x14026714d
lea rax, [r10 + 1]
cmp rdi, rax
je 0x140267130
lea rax, [r10 + 0x61]
cmp rdi, rax
je 0x140267115
lea rax, [r10 + 0x2a]
cmp rdi, rax
je 0x1402670fb
lea rax, [r10 + 4]
cmp rdi, rax
je 0x1402670dd
lea rax, [r10 + 9]
cmp rdi, rax
je 0x140266d21
lea rdi, [r10 + 0x10]
lea r10, [rdi + 0x28]
lea rax, [r10 + 0x42]
cmp rdi, rax
jb 0x1402675ba
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jb 0x14026759b
lea rax, [r10 + 0x7a]
cmp rdi, rax
jb 0x140266f0b
lea rax, [r10 + 1]
cmp rdi, rax
jb 0x140266eef
lea rax, [r10 + 0x61]
cmp rdi, rax
jb 0x140266ed5
lea rax, [r10 + 0x2a]
cmp rdi, rax
jb 0x140267039
lea rax, [r10 + 4]
cmp rdi, rax
jb 0x14026702e
lea rax, [r10 + 9]
cmp rdi, rax
jb 0x140267013
lea rax, [r10 + 0x28]
cmp rdi, rax
jb 0x140266ff4
lea rax, [r10 + 0x80]
cmp rdi, rax
jb 0x140266d21
lea rdi, [r10 + 0x3e8]
lea r10, [rdi + 0x1000]
lea rax, [r10 + 0x7a]
cmp rdi, rax
ja 0x140266fda
lea rax, [r10 + 1]
cmp rdi, rax
ja 0x140266fc0
lea rax, [r10 + 0x61]
cmp rdi, rax
ja 0x140266fb2
lea rax, [r10 + 0x2a]
cmp rdi, rax
ja 0x140266fa4
lea rax, [r10 + 4]
cmp rdi, rax
ja 0x140266f87
lea rax, [r10 + 9]
cmp rdi, rax
ja 0x140266f6a
lea rax, [r10 + 0x28]
cmp rdi, rax
ja 0x140266f50
lea rax, [r10 + 0x80]
cmp rdi, rax
ja 0x140266f44
lea rax, [r10 + 0x1000]
cmp rdi, rax
ja 0x140266f26
lea rax, [r10 + 0x5a]
cmp rdi, rax
ja 0x140266d21
lea rdi, [r10 + 1]
lea r10, [rdi + 3]
jmp 0x140266d21
lea ecx, [r9 + 0x54]
mov al, r8b
and al, cl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x4c
add bl, cl
jmp 0x140266d14
lea ecx, [r9 + 0x5c]
mov al, r8b
and al, cl
mov ebx, 0x3e
sub bl, al
add bl, bl
add bl, r8b
add bl, cl
jmp 0x140266cad
lea edx, [r9 + 0x64]
mov ecx, r14d
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140266c4d
mov ecx, Ordinal_50
lea edx, [r9 + 0x60]
mov al, r8b
mov r11b, r9b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x140267488
lea edx, [r12 + r9]
mov ecx, r15d
jmp 0x14026717e
lea ecx, [r9 + 0x70]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x10
jmp 0x1402674a8
lea edx, [r9 + 0x78]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
mov r11b, r9b
sub bl, al
sub bl, 0x48
add bl, dl
jmp 0x1402674c8
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x1402674e6
lea edx, [r9 - 0x78]
mov ecx, 0x24
jmp 0x140267139
lea edx, [r9 - 0x70]
mov ecx, 8
jmp 0x14026711e
mov dl, r9b
mov al, r8b
sub dl, r12b
mov bl, r8b
and al, dl
add al, al
sub bl, al
sub bl, 0x28
jmp 0x14026710e
lea ecx, [r9 - 0x60]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x60
jmp 0x140267587
lea ecx, [r9 + 0x34]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x6c
mov byte [rbp + r9 - 0x50], bl
jmp 0x140267593
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [r9 + 0x3c]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1402670b1
lea edx, [r9 + 0x44]
mov ecx, reloc.WS2_32.dll_select
jmp 0x140267072
lea edx, [r9 + 0x4c]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, dl
sub bl, r15b
lea rax, [r10 + rdi]
cmp rax, 9
je 0x1402673f6
lea rax, [r10 + 0x10]
cmp rdi, rax
jbe 0x140267281
lea edx, [r9 - 0x74]
mov ecx, reloc.WLDAP32.dll_Ordinal_22
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
cmp rdi, 0x80
jae 0x1402673d6
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jbe 0x14026730c
lea edx, [r9 - 0x48]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 8
add bl, dl
cmp r10, 0x5a
jb 0x140267009
mov ecx, r15d
mov r11b, r9b
mov al, r8b
lea edx, [r12 + r11]
and al, dl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
lea ebx, [rcx + rcx]
jmp 0x14026748a
mov ecx, 8
mov al, r8b
add ecx, r9d
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x38
jmp 0x140267587
lea edx, [r9 + 0x10]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x70
add bl, dl
jmp 0x140267541
lea edx, [r9 + 0x18]
mov ecx, Ordinal_46
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x140267305
lea edx, [r9 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1402674e9
lea ecx, [r9 + 0x28]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x18
jmp 0x1402674e6
lea edx, [r9 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
jmp 0x140267450
lea edx, [r9 + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1402674a5
mov r11b, r9b
mov ecx, 4
lea edx, [r11 + 0x48]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x140267488
lea rax, [r10 + 4]
cmp rdi, rax
jae 0x1402671d3
lea edx, [r9 + 0x7c]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x64
add bl, dl
jmp 0x14026704e
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1402671f6
lea ecx, [r9 + 0x58]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, r12b
jmp 0x140267587
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x14026721c
lea edx, [r9 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1402674e6
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x140267240
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x30]
and al, dl
add al, al
sub bl, al
sub bl, 0x50
jmp 0x1402673ef
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x140267263
lea ecx, [r9 + 0x28]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x18
jmp 0x1402674a8
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x14026704e
mov r11b, r9b
mov ecx, Ordinal_46
lea edx, [r11 + 0x18]
jmp 0x14026719e
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x14026729b
mov r11b, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
lea edx, [r11 - 0x7c]
jmp 0x14026719e
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1402672be
lea ecx, [r9 + 0x74]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x2c
jmp 0x1402674a8
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1402672e5
mov r11b, r9b
mov ecx, 6
lea edx, [r11 + 0x6c]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1402673ef
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x140267081
lea edx, [r9 + 0x54]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x4c
add bl, dl
jmp 0x140267519
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x140267332
lea edx, [r9 - 0x50]
mov ecx, Ordinal_26
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140267587
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x140267356
mov ecx, 0x34
lea edx, [r9 - 0x58]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x14026710e
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x14026737b
mov cl, r9b
mov al, r8b
sub cl, r12b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x28
jmp 0x1402674e9
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x140267392
lea edx, [r9 - 0x70]
mov ecx, 8
jmp 0x140267208
lea rax, [r10 + 4]
cmp rdi, rax
jne 0x1402673ac
mov r11b, r9b
mov ecx, 0x24
lea edx, [r11 - 0x78]
jmp 0x1402672d3
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x1402670b3
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x1402674a8
mov cl, byte [rbp + r9 - 0x50]
mov r11b, r9b
mov al, r8b
lea edx, [r11 + 0x60]
and al, dl
sub cl, al
add cl, 0x30
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x1402674c8
lea edx, [r9 + 0x58]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, byte [rbp + r9 - 0x50]
add bl, dl
sub bl, r12b
jmp 0x140267519
lea ecx, [r9 - 0x1c]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x3c
jmp 0x140267587
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0xc]
and al, dl
add al, al
sub bl, al
sub bl, 0x54
jmp 0x1402673ef
lea edx, [r15 + r9]
mov ecx, Ordinal_60
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1402674a8
mov r11b, r9b
mov ecx, 2
lea edx, [r11 + 0x24]
jmp 0x14026719e
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x34]
and al, dl
add al, al
sub bl, al
sub bl, 0x6c
add bl, dl
mov al, r8b
sub r11b, 0x1c
and al, r11b
add al, al
sub r8b, al
sub r8b, 0x3c
add r8b, r11b
mov byte [rbp + r9 - 0x50], r8b
add r10, r13
sub r9, r13
jmp 0x140267593
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x4c]
and al, dl
add al, al
sub bl, al
add bl, dl
sub bl, r15b
mov al, r8b
sub r11b, 0x24
and al, r11b
add al, al
sub r8b, al
sub r8b, 4
add r8b, r11b
add r8b, bl
mov byte [rbp + r9 - 0x50], r8b
add rdi, r10
or rcx, 0xffffffffffffffff
movzx eax, bl
sub rcx, rax
add r9, rcx
jmp 0x140267593
mov eax, r14d
movabs rcx, 0x97423daa062d1564
add rcx, r9
and r11b, cl
sub al, r11b
lea ebx, [rax + rax]
add bl, r8b
add bl, cl
lea edx, [r9 - 0x2c]
mov al, r8b
and al, dl
add r10, r13
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
movzx eax, cl
mov byte [rbp + r9 - 0x50], al
add rax, r10
sub r9, rax
mov al, r8b
lea ecx, [r9 + 0x50]
and al, cl
add rdi, r13
add al, al
sub r8b, al
or rax, 0xffffffffffffffff
sub r8b, 0x30
sub rax, rdi
add r8b, cl
mov byte [rbp + r9 - 0x50], r8b
add r9, rax
jmp 0x140267587
movabs rax, 0xd31c639202a59b74
add rax, r9
and r11b, al
add r11b, r11b
sub r8b, r11b
lea ebx, [rax + r8]
sub bl, 0x2c
movzx eax, byte [rbp + r9 - 0x50]
add rax, r10
add r9, rax
add r9, r13
jmp 0x140266c3a
add r9b, 0x6c
mov ecx, 6
mov al, r8b
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x140266c37
add r9b, 0x74
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x2c
jmp 0x140266c27
lea rcx, [rbp + 0x1417b00]
jmp 0x1402675eb
lea rcx, [rbp + 0xa3597c]
jmp 0x1402675eb
lea rcx, [rbp - 0x50]
call rsi
mov r12, qword [0x14044bba8]
mov r13, rax
test r12, r12
jne 0x140267757
mov rcx, qword gs:[0x60]
xor esi, esi
mov r14d, 0xf8f45725
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x140267666
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x140267659
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x14026764a
cmp edx, esi
jne 0x140267737
mov r11, qword [rbx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r10d, eax
add r10, r11
shr rax, 0x20
cmp r10, r11
je 0x140267737
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x140267737
mov edi, dword [r10 + 0x20]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + rdi]
mov edx, 0x811c9dc5
add r8, r11
jmp 0x1402676ba
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1402676af
cmp edx, r14d
je 0x1402676d0
test r9d, r9d
jne 0x14026769a
jmp 0x140267737
mov edx, dword [r10 + 0x24]
add rdx, r11
movzx r9d, word [rdx + r9*2]
mov edx, dword [r10 + 0x1c]
add rdx, r11
mov r12d, dword [rdx + r9*4]
add r12, r11
cmp r12, r10
jbe 0x140267750
lea rcx, [r10 + rax]
cmp r12, rcx
jae 0x140267750
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x140267712
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r12
mov al, byte [r12]
cmp al, 0x2e
jne 0x140267704
jmp 0x140267729
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r12
mov al, byte [r12]
test al, al
jne 0x14026771c
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x14026774d
cmp qword [rax + 0x30], 0
jne 0x14026761f
xor r12d, r12d
mov qword [0x14044bba8], r12
mov bl, byte [rbp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x30], 0x8669956e
mov dword [rbp - 0x2c], 0x89806c98
mov dword [rbp - 0x28], 0x72878387
lea r14d, [rax + 0x1e]
mov dword [rbp - 0x24], 0x99999480
lea r15d, [rax + 0x2e]
mov dword [rbp - 0x20], 0x96989164
mov word [rbp - 0x1c], 0x9965
mov byte [rbp - 0x1a], 6
movups xmmword [rbp - 0x19], xmm0
mov dword [rbp - 9], eax
mov word [rbp - 5], ax
call fcn.1402682a8
mov rdi, qword [rax]
call fcn.1402682b0
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x2d
jae 0x1402680fc
movzx r8d, byte [rbp + r9 - 0x30]
mov esi, r8d
mov r11d, r8d
cmp rdi, r9
ja 0x1402680f3
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x1402677fa
movabs rcx, 0x3917e6a897a99604
mov al, sil
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
sub bl, 0x1c
add bl, cl
jmp 0x140267834
je 0x14026807f
lea rax, [r10 + 3]
cmp rdi, rax
je 0x14026800a
lea rax, [r10 + 2]
cmp rdi, rax
je 0x140267fd7
lea rax, [r10 + 5]
cmp rdi, rax
je 0x140267f9d
lea rax, [r10 + 7]
cmp rdi, rax
je 0x140267f7f
cmp r10, r9
ja 0x1402680ea
lea rcx, [r10 + 2]
cmp rdi, rcx
jae 0x14026785b
lea ebx, [r9 + 0x54]
mov al, bl
and al, r8b
add al, al
sub bl, al
sub bl, 0x4c
add bl, r8b
jmp 0x14026788b
lea rax, [r10 + 1]
cmp rdi, rax
je 0x140267f44
lea rax, [r10 + 3]
cmp rdi, rax
je 0x140267f39
lea rax, [r10 + 4]
cmp rdi, rax
je 0x140267f1c
cmp rdi, rcx
je 0x140267eff
mov r11d, gethostname
lea rax, [r10 + rdi]
cmp rax, r9
jbe 0x140267cac
lea rax, [r10 + 0x10]
cmp rdi, rax
je 0x140267c91
lea rax, [r10 + 0x42]
cmp rdi, rax
je 0x140267c77
lea rax, [r10 + 2]
cmp rdi, rax
je 0x140267c5d
lea rax, [r10 + 6]
cmp rdi, rax
je 0x140267c3d
lea rax, [r10 + 0x400]
cmp rdi, rax
je 0x140267c20
lea rax, [r10 + 0x41]
cmp rdi, rax
je 0x140267c06
lea rax, [r10 + 0x64]
cmp rdi, rax
je 0x140267be9
lea rax, [r10 + 8]
cmp rdi, rax
je 0x14026789e
lea rdi, [r10 + 0xa]
lea r10, [rdi + 0x20]
lea rax, [r10 + 0x40]
cmp rdi, rax
jb 0x1402680cf
lea rax, [r10 + 1]
cmp rdi, rax
jb 0x1402680b0
lea rax, [r10 + 5]
cmp rdi, rax
jb 0x140267a48
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jb 0x140267a2c
lea rax, [r10 + 0x7a]
cmp rdi, rax
jb 0x140267a14
lea rax, [r10 + 0x10]
cmp rdi, rax
jb 0x140267ba0
lea rax, [r10 + 0x42]
cmp rdi, rax
jb 0x140267b59
lea rax, [r10 + 2]
cmp rdi, rax
jb 0x140267b1a
lea rax, [r10 + 6]
cmp rdi, rax
jb 0x140267afc
lea rax, [r10 + 0x400]
cmp rdi, rax
jb 0x14026789e
lea rdi, [r10 + 0x61]
lea r10, [rdi + 0x41]
lea rax, [r10 + 0x2a]
cmp rdi, rax
ja 0x140267aee
lea rax, [r10 + 0x40]
cmp rdi, rax
ja 0x140267ae0
lea rax, [r10 + 0x200]
cmp rdi, rax
ja 0x140267ac8
lea rax, [r10 + 5]
cmp rdi, rax
ja 0x140267aae
lea rax, [r10 + 0xa]
cmp rdi, rax
ja 0x140267a91
lea rax, [r10 + 1]
cmp rdi, rax
ja 0x140267a83
lea rax, [r10 + 0x3e8]
cmp rdi, rax
ja 0x140267a66
lea rax, [r10 + 0x7a]
cmp rdi, rax
ja 0x14026789e
lea rdi, [r10 + 0x5a]
lea r10, [rdi + 0x10]
jmp 0x14026789e
lea ebx, [r9 + 0x2c]
mov al, bl
and al, r8b
add al, al
sub bl, al
add bl, r8b
sub bl, r11b
jmp 0x140267891
lea ecx, [r9 + 0x24]
mov ebx, 2
mov al, cl
and al, r8b
sub bl, al
add bl, bl
add bl, cl
add bl, r8b
jmp 0x140267834
lea edx, [r9 + 0x1c]
mov ecx, r14d
mov al, dl
mov r11, rsi
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x1402677c8
lea edx, [r9 - 0x60]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
mov r11b, r9b
sub bl, al
sub bl, 0x60
add bl, dl
jmp 0x140267f5f
lea edx, [r9 - 0x70]
mov ecx, 8
jmp 0x140267d4c
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x140267fd2
lea ecx, [r9 + 0x78]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x48
jmp 0x140267ff8
lea edx, [r9 + 0x70]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x10
jmp 0x14026802a
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
jmp 0x140267bf2
lea edx, [r9 + 0x60]
mov ecx, Ordinal_50
jmp 0x140267cdf
lea ecx, [r9 + 0x4c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x14
mov byte [rbp + r9 - 0x30], bl
jmp 0x1402680a8
lea edx, [r9 + 0x44]
mov ecx, reloc.WS2_32.dll_select
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
cmp r10, 1
jb 0x140267b10
mov cl, r8b
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x68]
and al, dl
add al, al
sub cl, al
add cl, dl
lea ebx, [rcx*2 - 0x50]
jmp 0x140267f5f
lea edx, [r9 + 0x3c]
mov ecx, r15d
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
cmp rdi, 0x42
jae 0x140267ec7
lea rax, [r10 + 0x2a]
cmp rdi, rax
jbe 0x140267e10
lea edx, [r9 + 0x48]
mov ecx, 4
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140267b32
lea ecx, [r11 + r9]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x6c
lea rax, [r10 + rdi]
cmp rax, 0x20
je 0x140267ee9
lea rax, [r10 + 0x40]
cmp rdi, rax
jbe 0x140267d60
lea edx, [r9 - 0xc]
mov ecx, Ordinal_46
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140267b6f
lea edx, [r9 - 0x10]
mov ecx, Ordinal_60
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140268054
lea ecx, [r9 - 0x20]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x20
jmp 0x140267ff8
lea edx, [r9 - 0x28]
mov ecx, ntohl
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140267fd2
lea edx, [r9 - 0x30]
mov ecx, Ordinal_41
mov al, r8b
mov r11b, r9b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140267fb4
lea ecx, [r9 - 0x38]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x78
jmp 0x140267f95
lea ecx, [r9 - 0x40]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x40
jmp 0x140267f7a
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x48]
and al, dl
add al, al
sub bl, al
sub bl, 8
jmp 0x140267d82
lea rcx, [r10 + 3]
cmp rdi, rcx
jae 0x140267ccf
lea edx, [r9 + 4]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x1c
add bl, dl
jmp 0x140267bb4
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x140267cf3
lea edx, [r9 - 0x58]
mov ecx, r11d
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x14026809c
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x140267d16
lea ecx, [r9 - 0x38]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x78
jmp 0x140267fd2
cmp rdi, rcx
jne 0x140267d36
mov r11b, r9b
mov ecx, Ordinal_41
lea edx, [r11 - 0x30]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
jmp 0x140267edf
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x140267bb4
lea edx, [r9 - 0x28]
mov ecx, ntohl
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140267f95
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x140267d89
mov ecx, reloc.WS2_32.dll_ntohl
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 4]
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140267f5f
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x140267dac
lea ecx, [r9 + 4]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x1c
jmp 0x140267f7a
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x140267dc6
mov r11b, r9b
mov ecx, Ordinal_60
lea edx, [r11 + 0x14]
jmp 0x140267d27
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x140267de8
lea ecx, [r9 + 0x2c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, r11b
jmp 0x14026802c
lea rax, [r10 + 8]
cmp rdi, rax
jne 0x140267b6f
lea edx, [r9 + 0x3c]
mov ecx, r15d
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14026809c
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x140267e33
lea ecx, [r9 + 0x50]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x30
jmp 0x14026809c
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x140267e54
lea edx, [r9 + 0x58]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x68
jmp 0x140267bff
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x140267e7a
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x140267ff8
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x140267e9d
lea ecx, [r9 + 0x70]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x10
jmp 0x140267fd2
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x140267b32
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x140267f95
mov bl, byte [rbp + r9 - 0x30]
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x60]
and al, dl
add al, al
sub bl, al
sub bl, 0x60
add bl, r8b
add bl, dl
jmp 0x140267fb4
mov ecx, r11d
lea edx, [r9 - 0x58]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
jmp 0x14026802a
lea edx, [r9 - 0x74]
mov ecx, reloc.WLDAP32.dll_Ordinal_22
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x14026802c
lea edx, [r9 - 0x7c]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x140267ff8
lea edx, [r9 + 0x6c]
mov ecx, 6
jmp 0x140267f86
mov ecx, 0x3e
mov r11b, r9b
lea edx, [r11 + 0x5c]
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
mov al, r8b
sub r11b, 0x64
and al, r11b
add al, al
sub r8b, al
sub r8b, 0x44
add r8b, r11b
mov byte [rbp + r9 - 0x30], r8b
inc r10
jmp 0x140267f95
lea edx, [r9 + 0x3c]
mov ecx, r15d
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
dec r9
jmp 0x1402680a8
mov r11b, r9b
lea ecx, [r11 + 0x34]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x6c
mov al, r8b
sub r11b, 0x5c
and al, r11b
add al, al
sub r8b, al
sub r8b, 0x7c
add r8b, r11b
add r8b, bl
mov byte [rbp + r9 - 0x30], r8b
add rdi, r10
jmp 0x140267ff8
mov edx, 2
movabs rcx, 0x1d71bed54f64624
add rcx, r9
mov al, cl
and al, r11b
sub dl, al
lea ebx, [rdx + rdx]
add bl, cl
add bl, r11b
or rcx, 0xffffffffffffffff
movzx eax, bl
sub rcx, rax
add r9, rcx
jmp 0x1402680a8
mov ecx, r14d
movabs rdx, 0x8fa74e9c25a31a1c
add rdx, r9
mov r8b, r11b
mov al, dl
and al, r11b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
lea edx, [r9 - 0x54]
mov al, r8b
and al, dl
inc r10
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
movzx eax, cl
mov byte [rbp + r9 - 0x30], al
add rax, r10
sub r9, rax
lea edx, [r9 - 0x50]
mov al, r8b
and al, dl
inc rdi
mov ecx, Ordinal_26
sub cl, al
or rax, 0xffffffffffffffff
add cl, cl
sub rax, rdi
add cl, r8b
add cl, dl
mov byte [rbp + r9 - 0x30], cl
add r9, rax
jmp 0x14026809c
movabs rcx, 0xab47b3f9c6fcc20c
add rcx, r9
mov al, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x54
movzx eax, byte [rbp + r9 - 0x30]
add rax, r10
add r9, rax
inc r9
jmp 0x1402677b2
add r9b, 0x14
mov ecx, Ordinal_60
mov al, r8b
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x1402677af
add r9b, 0xc
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x54
jmp 0x14026779f
lea rdx, [rbp + 0x170ca80]
jmp 0x140268100
lea rdx, [rbp + 0x15a6084]
jmp 0x140268100
lea rdx, [rbp - 0x30]
mov rcx, r13
call r12
mov rdx, qword [0x14044bba0]
mov r12, rax
test rdx, rdx
jne 0x140268263
mov rcx, qword gs:[0x60]
xor edi, edi
mov esi, 0x9bc5a608
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r14, qword [rcx]
mov r9, r14
movups xmm0, xmmword [r9 + 0x58]
mov r13d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x140268183
psrldq xmm0, 8
mov edx, r13d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x140268176
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140268167
cmp edx, edi
jne 0x140268244
mov r10, qword [r9 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x140268244
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x140268244
mov r15d, dword [r11 + 0x20]
dec ebx
lea rdx, [r10 + rbx*4]
mov r8d, dword [rdx + r15]
mov edx, r13d
add r8, r10
jmp 0x1402681d3
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1402681c8
cmp edx, esi
je 0x1402681e7
test ebx, ebx
jne 0x1402681b6
jmp 0x140268244
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r9d, word [rdx + rbx*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov edx, dword [rdx + r9*4]
add rdx, r10
cmp rdx, r11
jbe 0x14026825c
lea rcx, [rax + r11]
cmp rdx, rcx
jae 0x14026825c
mov edi, r13d
mov esi, r13d
jmp 0x140268225
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140268217
jmp 0x140268238
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x14026822d
mov r9, qword [r14]
mov rax, qword [r9]
mov r9, rax
cmp rax, r14
je 0x14026825a
cmp qword [rax + 0x30], 0
jne 0x140268137
xor edx, edx
mov qword [0x14044bba0], rdx
call rdx
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
lea edx, [r9 + 0x11]
call r12
test eax, eax
je 0x140268285
mov qword [0], 1
lea r11, [rsp + 0x70]
xor al, al
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret