Function at 0x1401aaa60
Capabilities:
Access peb ldr_data
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rsi, qword [0x1404fba20]
mov edx, 8
lea r13d, [rdx - 7]
test rsi, rsi
jne 0x1401aabe8
mov rax, qword gs:[0x60]
xor ebx, ebx
mov edi, 0x53b2070f
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov r8, r14
movups xmm0, xmmword [r8 + 0x58]
movd eax, xmm0
sub ax, dx
test ebx, ebx
je 0x1401aaafd
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1401aaaf0
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1401aaae1
cmp edx, ebx
jne 0x1401aabc3
mov r9, qword [r8 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x1401aabc3
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x1401aabc3
mov r12d, dword [r10 + 0x20]
dec r11d
mov esi, 0x811c9dc5
lea rcx, [r12 + r11*4]
mov edx, dword [rcx + r9]
add rdx, r9
jmp 0x1401aab51
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x1401aab46
cmp esi, edi
je 0x1401aab65
test r11d, r11d
jne 0x1401aab31
jmp 0x1401aabc3
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r11*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov esi, dword [rdx + r8*4]
add rsi, r9
cmp rsi, r10
jbe 0x1401aabe1
lea rcx, [rax + r10]
cmp rsi, rcx
jae 0x1401aabe1
mov ebx, 0x811c9dc5
mov edi, ebx
jmp 0x1401aaba4
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
add rsi, r13
mov al, byte [rsi]
cmp al, 0x2e
jne 0x1401aab96
jmp 0x1401aabb7
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
add rsi, r13
mov al, byte [rsi]
test al, al
jne 0x1401aabac
mov r8, qword [r14]
mov rax, qword [r8]
mov r8, rax
cmp rax, r14
je 0x1401aabdf
cmp qword [rax + 0x30], 0
je 0x1401aabdf
mov edx, 8
jmp 0x1401aaab6
xor esi, esi
mov qword [0x1404fba20], rsi
mov bl, byte [rbp + 0x30]
mov r14d, Ordinal_35
xorps xmm0, xmm0
mov dword [rbp - 0x50], 0xafb6a5ae
mov dword [rbp - 0x4c], 0x534a1350
mov r12b, 0x68
mov word [rbp - 0x48], 0xe154
lea r15d, [r14 - 0xe]
movups xmmword [rbp - 0x46], xmm0
call fcn.1401ac500
mov rdi, qword [rax]
call fcn.1401ac508
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x1a
jae 0x1401ab5d3
movzx r8d, byte [rbp + r9 - 0x50]
mov r11d, r8d
cmp rdi, r9
ja 0x1401ab5ca
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x1401aac6c
movabs rcx, 0xf109768600e1de7c
mov al, r11b
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
sub bl, 0x64
jmp 0x1401aaef0
je 0x1401ab556
lea rax, [r10 + 2]
cmp rdi, rax
je 0x1401ab4e7
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1401ab49c
lea rax, [r10 + 8]
cmp rdi, rax
je 0x1401ab45e
cmp r10, r9
ja 0x1401ab5c1
lea rax, [r10 + 0x41]
cmp rdi, rax
jae 0x1401aaccc
movabs rcx, 0xc5c6b8fe1287402c
mov al, r11b
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
sub bl, 0x34
jmp 0x1401aaed4
lea rax, [r10 + 1]
cmp rdi, rax
je 0x1401ab44d
lea rax, [r10 + 2]
cmp rdi, rax
je 0x1401ab433
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1401ab41b
lea rax, [r10 + 7]
cmp rdi, rax
je 0x1401ab401
lea rax, [r10 + rdi]
cmp rax, r9
jbe 0x1401ab19c
lea rax, [r10 + 6]
cmp rdi, rax
je 0x1401ab17e
lea rax, [r10 + 0x10]
cmp rdi, rax
je 0x1401ab161
lea rax, [r10 + 0x42]
cmp rdi, rax
je 0x1401ab153
lea rax, [r10 + 0x3e8]
cmp rdi, rax
je 0x1401ab211
lea rax, [r10 + 0x7a]
cmp rdi, rax
je 0x1401ab139
lea rax, [r10 + 1]
cmp rdi, rax
je 0x1401ab11c
lea rax, [r10 + 0x61]
cmp rdi, rax
je 0x1401ab101
lea rax, [r10 + 0x2a]
cmp rdi, rax
je 0x1401ab0e7
lea rax, [r10 + 4]
cmp rdi, rax
je 0x1401ab0c9
lea rax, [r10 + 9]
cmp rdi, rax
je 0x1401aad0d
lea rdi, [r10 + 0x10]
lea r10, [rdi + 0x28]
lea rax, [r10 + 0x42]
cmp rdi, rax
jb 0x1401ab5a6
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jb 0x1401ab587
lea rax, [r10 + 0x7a]
cmp rdi, rax
jb 0x1401aaef7
lea rax, [r10 + 1]
cmp rdi, rax
jb 0x1401aaedb
lea rax, [r10 + 0x61]
cmp rdi, rax
jb 0x1401aaec1
lea rax, [r10 + 0x2a]
cmp rdi, rax
jb 0x1401ab025
lea rax, [r10 + 4]
cmp rdi, rax
jb 0x1401ab01a
lea rax, [r10 + 9]
cmp rdi, rax
jb 0x1401aafff
lea rax, [r10 + 0x28]
cmp rdi, rax
jb 0x1401aafe0
lea rax, [r10 + 0x80]
cmp rdi, rax
jb 0x1401aad0d
lea rdi, [r10 + 0x3e8]
lea r10, [rdi + 0x1000]
lea rax, [r10 + 0x7a]
cmp rdi, rax
ja 0x1401aafc6
lea rax, [r10 + 1]
cmp rdi, rax
ja 0x1401aafac
lea rax, [r10 + 0x61]
cmp rdi, rax
ja 0x1401aaf9e
lea rax, [r10 + 0x2a]
cmp rdi, rax
ja 0x1401aaf90
lea rax, [r10 + 4]
cmp rdi, rax
ja 0x1401aaf73
lea rax, [r10 + 9]
cmp rdi, rax
ja 0x1401aaf56
lea rax, [r10 + 0x28]
cmp rdi, rax
ja 0x1401aaf3c
lea rax, [r10 + 0x80]
cmp rdi, rax
ja 0x1401aaf30
lea rax, [r10 + 0x1000]
cmp rdi, rax
ja 0x1401aaf12
lea rax, [r10 + 0x5a]
cmp rdi, rax
ja 0x1401aad0d
lea rdi, [r10 + 1]
lea r10, [rdi + 3]
jmp 0x1401aad0d
lea ecx, [r9 + 0x54]
mov al, r8b
and al, cl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x4c
add bl, cl
jmp 0x1401aad00
lea ecx, [r9 + 0x5c]
mov al, r8b
and al, cl
mov ebx, 0x3e
sub bl, al
add bl, bl
add bl, r8b
add bl, cl
jmp 0x1401aac99
lea edx, [r9 + 0x64]
mov ecx, r14d
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401aac39
mov ecx, Ordinal_50
lea edx, [r9 + 0x60]
mov al, r8b
mov r11b, r9b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401ab474
lea edx, [r12 + r9]
mov ecx, r15d
jmp 0x1401ab16a
lea ecx, [r9 + 0x70]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x10
jmp 0x1401ab494
lea edx, [r9 + 0x78]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
mov r11b, r9b
sub bl, al
sub bl, 0x48
add bl, dl
jmp 0x1401ab4b4
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x1401ab4d2
lea edx, [r9 - 0x78]
mov ecx, 0x24
jmp 0x1401ab125
lea edx, [r9 - 0x70]
mov ecx, 8
jmp 0x1401ab10a
mov dl, r9b
mov al, r8b
sub dl, r12b
mov bl, r8b
and al, dl
add al, al
sub bl, al
sub bl, 0x28
jmp 0x1401ab0fa
lea ecx, [r9 - 0x60]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x60
jmp 0x1401ab573
lea ecx, [r9 + 0x34]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x6c
mov byte [rbp + r9 - 0x50], bl
jmp 0x1401ab57f
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [r9 + 0x3c]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401ab09d
lea edx, [r9 + 0x44]
mov ecx, reloc.WS2_32.dll_select
jmp 0x1401ab05e
lea edx, [r9 + 0x4c]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, dl
sub bl, r15b
lea rax, [r10 + rdi]
cmp rax, 9
je 0x1401ab3e2
lea rax, [r10 + 0x10]
cmp rdi, rax
jbe 0x1401ab26d
lea edx, [r9 - 0x74]
mov ecx, reloc.WLDAP32.dll_Ordinal_22
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
cmp rdi, 0x80
jae 0x1401ab3c2
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jbe 0x1401ab2f8
lea edx, [r9 - 0x48]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 8
add bl, dl
cmp r10, 0x5a
jb 0x1401aaff5
mov ecx, r15d
mov r11b, r9b
mov al, r8b
lea edx, [r12 + r11]
and al, dl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
lea ebx, [rcx + rcx]
jmp 0x1401ab476
mov ecx, 8
mov al, r8b
add ecx, r9d
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x38
jmp 0x1401ab573
lea edx, [r9 + 0x10]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x70
add bl, dl
jmp 0x1401ab52d
lea edx, [r9 + 0x18]
mov ecx, Ordinal_46
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401ab2f1
lea edx, [r9 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab4d5
lea ecx, [r9 + 0x28]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x18
jmp 0x1401ab4d2
lea edx, [r9 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
jmp 0x1401ab43c
lea edx, [r9 + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab491
mov r11b, r9b
mov ecx, 4
lea edx, [r11 + 0x48]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401ab474
lea rax, [r10 + 4]
cmp rdi, rax
jae 0x1401ab1bf
lea edx, [r9 + 0x7c]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x64
add bl, dl
jmp 0x1401ab03a
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401ab1e2
lea ecx, [r9 + 0x58]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, r12b
jmp 0x1401ab573
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1401ab208
lea edx, [r9 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab4d2
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401ab22c
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x30]
and al, dl
add al, al
sub bl, al
sub bl, 0x50
jmp 0x1401ab3db
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x1401ab24f
lea ecx, [r9 + 0x28]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x18
jmp 0x1401ab494
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x1401ab03a
mov r11b, r9b
mov ecx, Ordinal_46
lea edx, [r11 + 0x18]
jmp 0x1401ab18a
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401ab287
mov r11b, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
lea edx, [r11 - 0x7c]
jmp 0x1401ab18a
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1401ab2aa
lea ecx, [r9 + 0x74]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x2c
jmp 0x1401ab494
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401ab2d1
mov r11b, r9b
mov ecx, 6
lea edx, [r11 + 0x6c]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401ab3db
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x1401ab06d
lea edx, [r9 + 0x54]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x4c
add bl, dl
jmp 0x1401ab505
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401ab31e
lea edx, [r9 - 0x50]
mov ecx, Ordinal_27
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab573
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401ab342
mov ecx, 0x34
lea edx, [r9 - 0x58]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401ab0fa
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1401ab367
mov cl, r9b
mov al, r8b
sub cl, r12b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x28
jmp 0x1401ab4d5
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x1401ab37e
lea edx, [r9 - 0x70]
mov ecx, 8
jmp 0x1401ab1f4
lea rax, [r10 + 4]
cmp rdi, rax
jne 0x1401ab398
mov r11b, r9b
mov ecx, 0x24
lea edx, [r11 - 0x78]
jmp 0x1401ab2bf
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x1401ab09f
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x1401ab494
mov cl, byte [rbp + r9 - 0x50]
mov r11b, r9b
mov al, r8b
lea edx, [r11 + 0x60]
and al, dl
sub cl, al
add cl, 0x30
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x1401ab4b4
lea edx, [r9 + 0x58]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, byte [rbp + r9 - 0x50]
add bl, dl
sub bl, r12b
jmp 0x1401ab505
lea ecx, [r9 - 0x1c]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x3c
jmp 0x1401ab573
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0xc]
and al, dl
add al, al
sub bl, al
sub bl, 0x54
jmp 0x1401ab3db
lea edx, [r15 + r9]
mov ecx, Ordinal_60
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab494
mov r11b, r9b
mov ecx, 2
lea edx, [r11 + 0x24]
jmp 0x1401ab18a
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x34]
and al, dl
add al, al
sub bl, al
sub bl, 0x6c
add bl, dl
mov al, r8b
sub r11b, 0x1c
and al, r11b
add al, al
sub r8b, al
sub r8b, 0x3c
add r8b, r11b
mov byte [rbp + r9 - 0x50], r8b
add r10, r13
sub r9, r13
jmp 0x1401ab57f
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x4c]
and al, dl
add al, al
sub bl, al
add bl, dl
sub bl, r15b
mov al, r8b
sub r11b, 0x24
and al, r11b
add al, al
sub r8b, al
sub r8b, 4
add r8b, r11b
add r8b, bl
mov byte [rbp + r9 - 0x50], r8b
add rdi, r10
or rcx, 0xffffffffffffffff
movzx eax, bl
sub rcx, rax
add r9, rcx
jmp 0x1401ab57f
mov eax, r14d
movabs rcx, 0x97423daa062d1564
add rcx, r9
and r11b, cl
sub al, r11b
lea ebx, [rax + rax]
add bl, r8b
add bl, cl
lea edx, [r9 - 0x2c]
mov al, r8b
and al, dl
add r10, r13
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
movzx eax, cl
mov byte [rbp + r9 - 0x50], al
add rax, r10
sub r9, rax
mov al, r8b
lea ecx, [r9 + 0x50]
and al, cl
add rdi, r13
add al, al
sub r8b, al
or rax, 0xffffffffffffffff
sub r8b, 0x30
sub rax, rdi
add r8b, cl
mov byte [rbp + r9 - 0x50], r8b
add r9, rax
jmp 0x1401ab573
movabs rax, 0xd31c639202a59b74
add rax, r9
and r11b, al
add r11b, r11b
sub r8b, r11b
lea ebx, [rax + r8]
sub bl, 0x2c
movzx eax, byte [rbp + r9 - 0x50]
add rax, r10
add r9, rax
add r9, r13
jmp 0x1401aac26
add r9b, 0x6c
mov ecx, 6
mov al, r8b
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x1401aac23
add r9b, 0x74
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x2c
jmp 0x1401aac13
lea rcx, [rbp + 0x1417b00]
jmp 0x1401ab5d7
lea rcx, [rbp + 0xa3597c]
jmp 0x1401ab5d7
lea rcx, [rbp - 0x50]
call rsi
mov r12, qword [0x1404fba18]
mov r13, rax
test r12, r12
jne 0x1401ab743
mov rcx, qword gs:[0x60]
xor esi, esi
mov r14d, 0xf8f45725
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x1401ab652
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x1401ab645
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401ab636
cmp edx, esi
jne 0x1401ab723
mov r11, qword [rbx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r10d, eax
add r10, r11
shr rax, 0x20
cmp r10, r11
je 0x1401ab723
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1401ab723
mov edi, dword [r10 + 0x20]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + rdi]
mov edx, 0x811c9dc5
add r8, r11
jmp 0x1401ab6a6
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1401ab69b
cmp edx, r14d
je 0x1401ab6bc
test r9d, r9d
jne 0x1401ab686
jmp 0x1401ab723
mov edx, dword [r10 + 0x24]
add rdx, r11
movzx r9d, word [rdx + r9*2]
mov edx, dword [r10 + 0x1c]
add rdx, r11
mov r12d, dword [rdx + r9*4]
add r12, r11
cmp r12, r10
jbe 0x1401ab73c
lea rcx, [r10 + rax]
cmp r12, rcx
jae 0x1401ab73c
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x1401ab6fe
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r12
mov al, byte [r12]
cmp al, 0x2e
jne 0x1401ab6f0
jmp 0x1401ab715
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r12
mov al, byte [r12]
test al, al
jne 0x1401ab708
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x1401ab739
cmp qword [rax + 0x30], 0
jne 0x1401ab60b
xor r12d, r12d
mov qword [0x1404fba18], r12
mov bl, byte [rbp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x30], 0x8669956e
mov dword [rbp - 0x2c], 0x89806c98
mov dword [rbp - 0x28], 0x72878387
lea r14d, [rax + 0x1e]
mov dword [rbp - 0x24], 0x99999480
lea r15d, [rax + 0x2e]
mov dword [rbp - 0x20], 0x96989164
mov word [rbp - 0x1c], 0x9965
mov byte [rbp - 0x1a], 6
movups xmmword [rbp - 0x19], xmm0
mov dword [rbp - 9], eax
mov word [rbp - 5], ax
call fcn.1401ac500
mov rdi, qword [rax]
call fcn.1401ac508
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x2d
jae 0x1401ac0e8
movzx r8d, byte [rbp + r9 - 0x30]
mov esi, r8d
mov r11d, r8d
cmp rdi, r9
ja 0x1401ac0df
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x1401ab7e6
movabs rcx, 0x3917e6a897a99604
mov al, sil
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
sub bl, 0x1c
add bl, cl
jmp 0x1401ab820
je 0x1401ac06b
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1401abff6
lea rax, [r10 + 2]
cmp rdi, rax
je 0x1401abfc3
lea rax, [r10 + 5]
cmp rdi, rax
je 0x1401abf89
lea rax, [r10 + 7]
cmp rdi, rax
je 0x1401abf6b
cmp r10, r9
ja 0x1401ac0d6
lea rcx, [r10 + 2]
cmp rdi, rcx
jae 0x1401ab847
lea ebx, [r9 + 0x54]
mov al, bl
and al, r8b
add al, al
sub bl, al
sub bl, 0x4c
add bl, r8b
jmp 0x1401ab877
lea rax, [r10 + 1]
cmp rdi, rax
je 0x1401abf30
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1401abf25
lea rax, [r10 + 4]
cmp rdi, rax
je 0x1401abf08
cmp rdi, rcx
je 0x1401abeeb
mov r11d, gethostname
lea rax, [r10 + rdi]
cmp rax, r9
jbe 0x1401abc98
lea rax, [r10 + 0x10]
cmp rdi, rax
je 0x1401abc7d
lea rax, [r10 + 0x42]
cmp rdi, rax
je 0x1401abc63
lea rax, [r10 + 2]
cmp rdi, rax
je 0x1401abc49
lea rax, [r10 + 6]
cmp rdi, rax
je 0x1401abc29
lea rax, [r10 + 0x400]
cmp rdi, rax
je 0x1401abc0c
lea rax, [r10 + 0x41]
cmp rdi, rax
je 0x1401abbf2
lea rax, [r10 + 0x64]
cmp rdi, rax
je 0x1401abbd5
lea rax, [r10 + 8]
cmp rdi, rax
je 0x1401ab88a
lea rdi, [r10 + 0xa]
lea r10, [rdi + 0x20]
lea rax, [r10 + 0x40]
cmp rdi, rax
jb 0x1401ac0bb
lea rax, [r10 + 1]
cmp rdi, rax
jb 0x1401ac09c
lea rax, [r10 + 5]
cmp rdi, rax
jb 0x1401aba34
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jb 0x1401aba18
lea rax, [r10 + 0x7a]
cmp rdi, rax
jb 0x1401aba00
lea rax, [r10 + 0x10]
cmp rdi, rax
jb 0x1401abb8c
lea rax, [r10 + 0x42]
cmp rdi, rax
jb 0x1401abb45
lea rax, [r10 + 2]
cmp rdi, rax
jb 0x1401abb06
lea rax, [r10 + 6]
cmp rdi, rax
jb 0x1401abae8
lea rax, [r10 + 0x400]
cmp rdi, rax
jb 0x1401ab88a
lea rdi, [r10 + 0x61]
lea r10, [rdi + 0x41]
lea rax, [r10 + 0x2a]
cmp rdi, rax
ja 0x1401abada
lea rax, [r10 + 0x40]
cmp rdi, rax
ja 0x1401abacc
lea rax, [r10 + 0x200]
cmp rdi, rax
ja 0x1401abab4
lea rax, [r10 + 5]
cmp rdi, rax
ja 0x1401aba9a
lea rax, [r10 + 0xa]
cmp rdi, rax
ja 0x1401aba7d
lea rax, [r10 + 1]
cmp rdi, rax
ja 0x1401aba6f
lea rax, [r10 + 0x3e8]
cmp rdi, rax
ja 0x1401aba52
lea rax, [r10 + 0x7a]
cmp rdi, rax
ja 0x1401ab88a
lea rdi, [r10 + 0x5a]
lea r10, [rdi + 0x10]
jmp 0x1401ab88a
lea ebx, [r9 + 0x2c]
mov al, bl
and al, r8b
add al, al
sub bl, al
add bl, r8b
sub bl, r11b
jmp 0x1401ab87d
lea ecx, [r9 + 0x24]
mov ebx, 2
mov al, cl
and al, r8b
sub bl, al
add bl, bl
add bl, cl
add bl, r8b
jmp 0x1401ab820
lea edx, [r9 + 0x1c]
mov ecx, r14d
mov al, dl
mov r11, rsi
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x1401ab7b4
lea edx, [r9 - 0x60]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
mov r11b, r9b
sub bl, al
sub bl, 0x60
add bl, dl
jmp 0x1401abf4b
lea edx, [r9 - 0x70]
mov ecx, 8
jmp 0x1401abd38
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x1401abfbe
lea ecx, [r9 + 0x78]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x48
jmp 0x1401abfe4
lea edx, [r9 + 0x70]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x10
jmp 0x1401ac016
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
jmp 0x1401abbde
lea edx, [r9 + 0x60]
mov ecx, Ordinal_50
jmp 0x1401abccb
lea ecx, [r9 + 0x4c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x14
mov byte [rbp + r9 - 0x30], bl
jmp 0x1401ac094
lea edx, [r9 + 0x44]
mov ecx, reloc.WS2_32.dll_select
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
cmp r10, 1
jb 0x1401abafc
mov cl, r8b
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x68]
and al, dl
add al, al
sub cl, al
add cl, dl
lea ebx, [rcx*2 - 0x50]
jmp 0x1401abf4b
lea edx, [r9 + 0x3c]
mov ecx, r15d
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
cmp rdi, 0x42
jae 0x1401abeb3
lea rax, [r10 + 0x2a]
cmp rdi, rax
jbe 0x1401abdfc
lea edx, [r9 + 0x48]
mov ecx, 4
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401abb1e
lea ecx, [r11 + r9]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x6c
lea rax, [r10 + rdi]
cmp rax, 0x20
je 0x1401abed5
lea rax, [r10 + 0x40]
cmp rdi, rax
jbe 0x1401abd4c
lea edx, [r9 - 0xc]
mov ecx, Ordinal_46
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401abb5b
lea edx, [r9 - 0x10]
mov ecx, Ordinal_60
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ac040
lea ecx, [r9 - 0x20]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x20
jmp 0x1401abfe4
lea edx, [r9 - 0x28]
mov ecx, recv
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401abfbe
lea edx, [r9 - 0x30]
mov ecx, Ordinal_41
mov al, r8b
mov r11b, r9b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401abfa0
lea ecx, [r9 - 0x38]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x78
jmp 0x1401abf81
lea ecx, [r9 - 0x40]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x40
jmp 0x1401abf66
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x48]
and al, dl
add al, al
sub bl, al
sub bl, 8
jmp 0x1401abd6e
lea rcx, [r10 + 3]
cmp rdi, rcx
jae 0x1401abcbb
lea edx, [r9 + 4]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x1c
add bl, dl
jmp 0x1401abba0
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401abcdf
lea edx, [r9 - 0x58]
mov ecx, r11d
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ac088
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401abd02
lea ecx, [r9 - 0x38]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x78
jmp 0x1401abfbe
cmp rdi, rcx
jne 0x1401abd22
mov r11b, r9b
mov ecx, Ordinal_41
lea edx, [r11 - 0x30]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
jmp 0x1401abecb
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x1401abba0
lea edx, [r9 - 0x28]
mov ecx, recv
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401abf81
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401abd75
mov ecx, reloc.WS2_32.dll_ntohl
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 4]
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401abf4b
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401abd98
lea ecx, [r9 + 4]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x1c
jmp 0x1401abf66
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1401abdb2
mov r11b, r9b
mov ecx, Ordinal_60
lea edx, [r11 + 0x14]
jmp 0x1401abd13
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x1401abdd4
lea ecx, [r9 + 0x2c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, r11b
jmp 0x1401ac018
lea rax, [r10 + 8]
cmp rdi, rax
jne 0x1401abb5b
lea edx, [r9 + 0x3c]
mov ecx, r15d
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x1401ac088
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401abe1f
lea ecx, [r9 + 0x50]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x30
jmp 0x1401ac088
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401abe40
lea edx, [r9 + 0x58]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x68
jmp 0x1401abbeb
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1401abe66
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401abfe4
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x1401abe89
lea ecx, [r9 + 0x70]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x10
jmp 0x1401abfbe
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x1401abb1e
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x1401abf81
mov bl, byte [rbp + r9 - 0x30]
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x60]
and al, dl
add al, al
sub bl, al
sub bl, 0x60
add bl, r8b
add bl, dl
jmp 0x1401abfa0
mov ecx, r11d
lea edx, [r9 - 0x58]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
jmp 0x1401ac016
lea edx, [r9 - 0x74]
mov ecx, reloc.WLDAP32.dll_Ordinal_22
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x1401ac018
lea edx, [r9 - 0x7c]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x1401abfe4
lea edx, [r9 + 0x6c]
mov ecx, 6
jmp 0x1401abf72
mov ecx, 0x3e
mov r11b, r9b
lea edx, [r11 + 0x5c]
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
mov al, r8b
sub r11b, 0x64
and al, r11b
add al, al
sub r8b, al
sub r8b, 0x44
add r8b, r11b
mov byte [rbp + r9 - 0x30], r8b
inc r10
jmp 0x1401abf81
lea edx, [r9 + 0x3c]
mov ecx, r15d
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
dec r9
jmp 0x1401ac094
mov r11b, r9b
lea ecx, [r11 + 0x34]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x6c
mov al, r8b
sub r11b, 0x5c
and al, r11b
add al, al
sub r8b, al
sub r8b, 0x7c
add r8b, r11b
add r8b, bl
mov byte [rbp + r9 - 0x30], r8b
add rdi, r10
jmp 0x1401abfe4
mov edx, 2
movabs rcx, 0x1d71bed54f64624
add rcx, r9
mov al, cl
and al, r11b
sub dl, al
lea ebx, [rdx + rdx]
add bl, cl
add bl, r11b
or rcx, 0xffffffffffffffff
movzx eax, bl
sub rcx, rax
add r9, rcx
jmp 0x1401ac094
mov ecx, r14d
movabs rdx, 0x8fa74e9c25a31a1c
add rdx, r9
mov r8b, r11b
mov al, dl
and al, r11b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
lea edx, [r9 - 0x54]
mov al, r8b
and al, dl
inc r10
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
movzx eax, cl
mov byte [rbp + r9 - 0x30], al
add rax, r10
sub r9, rax
lea edx, [r9 - 0x50]
mov al, r8b
and al, dl
inc rdi
mov ecx, Ordinal_27
sub cl, al
or rax, 0xffffffffffffffff
add cl, cl
sub rax, rdi
add cl, r8b
add cl, dl
mov byte [rbp + r9 - 0x30], cl
add r9, rax
jmp 0x1401ac088
movabs rcx, 0xab47b3f9c6fcc20c
add rcx, r9
mov al, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x54
movzx eax, byte [rbp + r9 - 0x30]
add rax, r10
add r9, rax
inc r9
jmp 0x1401ab79e
add r9b, 0x14
mov ecx, Ordinal_60
mov al, r8b
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x1401ab79b
add r9b, 0xc
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x54
jmp 0x1401ab78b
lea rdx, [rbp + 0x170ca80]
jmp 0x1401ac0ec
lea rdx, [rbp + 0x15a6084]
jmp 0x1401ac0ec
lea rdx, [rbp - 0x30]
mov rcx, r13
call r12
mov rdx, qword [0x1404fba08]
mov r12, rax
test rdx, rdx
jne 0x1401ac24f
mov rcx, qword gs:[0x60]
xor edi, edi
mov esi, 0x9bc5a608
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r14, qword [rcx]
mov r9, r14
movups xmm0, xmmword [r9 + 0x58]
mov r13d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x1401ac16f
psrldq xmm0, 8
mov edx, r13d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x1401ac162
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401ac153
cmp edx, edi
jne 0x1401ac230
mov r10, qword [r9 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x1401ac230
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x1401ac230
mov r15d, dword [r11 + 0x20]
dec ebx
lea rdx, [r10 + rbx*4]
mov r8d, dword [rdx + r15]
mov edx, r13d
add r8, r10
jmp 0x1401ac1bf
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1401ac1b4
cmp edx, esi
je 0x1401ac1d3
test ebx, ebx
jne 0x1401ac1a2
jmp 0x1401ac230
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r9d, word [rdx + rbx*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov edx, dword [rdx + r9*4]
add rdx, r10
cmp rdx, r11
jbe 0x1401ac248
lea rcx, [rax + r11]
cmp rdx, rcx
jae 0x1401ac248
mov edi, r13d
mov esi, r13d
jmp 0x1401ac211
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1401ac203
jmp 0x1401ac224
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x1401ac219
mov r9, qword [r14]
mov rax, qword [r9]
mov r9, rax
cmp rax, r14
je 0x1401ac246
cmp qword [rax + 0x30], 0
jne 0x1401ac123
xor edx, edx
mov qword [0x1404fba08], rdx
call rdx
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
lea edx, [r9 + 0x11]
call r12
test eax, eax
je 0x1401ac271
mov qword [0], 1
lea r11, [rsp + 0x70]
xor al, al
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret