Function at 0x140059e90
Capabilities:
Access peb ldr_data
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
push rbp
lea rbp, [rax - 0xb8]
sub rsp, 0x1b0
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x1401494d8]
xor rax, rsp
mov qword [rbp + 0x98], rax
movdqa xmm1, xmmword [0x1400d90a0]
lea r14, [0x140149f40]
movd ecx, xmm1
mov r10b, ntohl
movdqu xmmword [rbp + 0x70], xmm1
movzx ebx, r10b
mov byte [rbp + 0x86], 0
xor byte [rbp + 0x72], cl
xor r10b, cl
xor byte [rbp + 0x73], cl
xor bl, cl
xor byte [rbp + 0x74], cl
movdqa xmm0, xmm1
xor byte [rbp + 0x75], cl
mov dl, 2
xor byte [rbp + 0x76], cl
xor dl, cl
xor byte [rbp + 0x77], cl
mov r8b, reloc.WLDAP32.dll_Ordinal_22
xor byte [rbp + 0x78], cl
xor r8b, cl
xor byte [rbp + 0x79], cl
mov r9b, 0x4b
xor byte [rbp + 0x7a], cl
xor r9b, cl
xor byte [rbp + 0x7b], cl
mov r11b, listen
xor byte [rbp + 0x7c], cl
xor r11b, cl
xor byte [rbp + 0x7d], cl
xor byte [rbp + 0x7e], cl
xor byte [rbp + 0x7f], cl
psrldq xmm0, 1
movd eax, xmm0
mov byte [rbp + 0x80], dl
lea rdx, [rbp + 0x71]
mov byte [rbp + 0x81], r8b
xor al, cl
mov byte [rbp + 0x82], r9b
mov rcx, r14
mov byte [rbp + 0x71], al
mov byte [rbp + 0x83], r10b
mov byte [rbp + 0x84], r11b
mov byte [rbp + 0x85], bl
call fcn.140060290
mov byte [rbp + reloc.WS2_32.dll_recv], 0x10
lea rsi, [0x14014a770]
mov al, 0x63
xor r11d, r11d
xor al, 0x10
mov byte [rbp + 0x17], r11b
mov byte [rbp + 0x11], al
mov cl, 0x75
xor cl, 0x10
mov dl, 0x62
mov byte [rbp + 0x12], cl
xor dl, 0x10
mov byte [rbp + 0x13], dl
mov r8b, 0x79
xor r8b, 0x10
mov r9b, WSAStartup
mov byte [rbp + 0x14], r8b
xor r9b, 0x10
mov byte [rbp + 0x15], r9b
mov r10b, 0x7c
xor r10b, 0x10
cmp qword [0x14014a788], 0x10
mov byte [rbp + 0x16], r10b
mov rax, qword gs:[0x60]
cmovae rsi, qword [0x14014a770]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14005a067
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14005a067
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x4a11d806
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14005a062
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14005a040
cmp r8d, 0xef4c613e
je 0x14005a06c
test r9d, r9d
jne 0x14005a020
mov rax, qword [rax]
jmp 0x140059ff0
mov ecx, dword [rdi + 0x24]
mov rdx, rsi
add rcx, r10
mov qword [rsp + 0x28], r14
mov dword [rsp + reloc.WLDAP32.dll_Ordinal_32], 0x20
movzx r8d, word [rcx + r9*2]
lea r9, [rbp + 0x70]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
lea r8, [0x1400ce724]
add rax, r10
lea rcx, [rbp + 0x11]
call rax
lea rax, [rbp + 0x70]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x14005a0b0
lea rdx, [rbp + 0x70]
lea rcx, [0x14014a750]
call fcn.140054de0
xor r8d, r8d
mov byte [rsp + 0x30], Ordinal_35
mov cl, 0x51
mov byte [rsp + 0x34], r8b
xor cl, 0x22
mov dl, 0x52
xor dl, 0x22
mov byte [rsp + 0x32], cl
mov al, 0x47
mov byte [rsp + 0x33], dl
xor al, 0x22
lea rdx, [rsp + 0x31]
lea rcx, [0x14014aa38]
mov byte [rsp + 0x31], al
mov r9, r14
mov r8b, 1
call fcn.14005ace0
xor r8d, r8d
mov byte [rsp + 0x38], reloc.WS2_32.dll_select
mov cl, 0x61
mov byte [rsp + 0x3c], r8b
xor cl, 0x12
mov dl, 0x62
xor dl, 0x12
mov byte [rsp + 0x3a], cl
mov al, 0x77
mov byte [rsp + 0x3b], dl
xor al, 0x12
lea rdx, [rsp + 0x39]
lea rcx, [0x14014aab0]
mov byte [rsp + 0x39], al
mov r9, r14
mov r8b, 1
call fcn.14005ace0
xor r8d, r8d
mov byte [rsp + 0x40], 0x69
mov cl, reloc.WLDAP32.dll_Ordinal_26
mov byte [rsp + 0x44], r8b
xor cl, 0x69
mov dl, Ordinal_26
xor dl, 0x69
mov byte [rsp + 0x42], cl
mov al, listen
mov byte [rsp + 0x43], dl
xor al, 0x69
lea rdx, [rsp + 0x41]
lea rcx, [0x14014a8d0]
mov byte [rsp + 0x41], al
mov r9, r14
mov r8b, 1
call fcn.14005ace0
xor r8d, r8d
mov byte [rsp + 0x48], 0x4a
mov cl, reloc.WS2_32.dll_gethostname
mov byte [rsp + 0x4c], r8b
xor cl, 0x4a
mov dl, 0x3a
xor dl, 0x4a
mov byte [rsp + 0x4a], cl
mov al, 0x2f
mov byte [rsp + 0x4b], dl
xor al, 0x4a
lea rdx, [rsp + 0x49]
lea rcx, [0x14014a808]
mov byte [rsp + 0x49], al
mov r9, r14
mov r8b, 1
call fcn.14005ace0
mov al, 0x6d
mov byte [rsp + 0x50], 8
xor al, 8
mov cl, 0x7b
xor cl, 8
mov byte [rsp + 0x51], al
mov dl, 0x78
mov byte [rsp + 0x52], cl
xor r8d, r8d
xor dl, 8
mov byte [rsp + 0x53], dl
lea rcx, [0x14014aa10]
mov byte [rsp + 0x54], r8b
lea rdx, [rsp + 0x51]
mov r8b, 1
mov r9, r14
call fcn.14005ace0
xor r8d, r8d
mov byte [rsp + 0x58], 0x7e
mov cl, reloc.WS2_32.dll_listen
mov byte [rsp + 0x5c], r8b
xor cl, 0x7e
mov dl, reloc.WS2_32.dll_ntohl
xor dl, 0x7e
mov byte [rsp + 0x5a], cl
mov al, reloc.WLDAP32.dll_Ordinal_27
mov byte [rsp + 0x5b], dl
xor al, 0x7e
lea rdx, [rsp + 0x59]
lea rcx, [0x14014ab40]
mov byte [rsp + 0x59], al
mov r9, r14
mov r8b, 1
call fcn.14005ace0
xor r8d, r8d
mov byte [rsp + 0x60], 0x33
mov cl, 0x40
mov byte [rsp + 0x64], r8b
xor cl, 0x33
mov dl, 0x43
xor dl, 0x33
mov byte [rsp + 0x62], cl
mov al, 0x56
mov byte [rsp + 0x63], dl
xor al, 0x33
lea rdx, [rsp + 0x61]
lea rcx, [0x14014a830]
mov byte [rsp + 0x61], al
mov r9, r14
mov r8b, 1
call fcn.14005ace0
xor r8d, r8d
mov byte [rsp + 0x68], WSAGetLastError
mov cl, reloc.WLDAP32.dll_Ordinal_30
mov byte [rsp + 0x6c], r8b
xor cl, 0x6d
mov dl, Ordinal_30
xor dl, 0x6d
mov byte [rsp + 0x6a], cl
mov al, 8
mov byte [rsp + 0x6b], dl
xor al, 0x6d
lea rdx, [rsp + 0x69]
lea rcx, [0x14014a260]
mov byte [rsp + 0x69], al
mov r9, r14
mov r8b, 1
call fcn.14005ace0
xor r8d, r8d
mov byte [rsp + 0x70], 4
mov cl, 0x77
mov byte [rsp + 0x74], r8b
xor cl, 4
mov dl, reloc.WS2_32.dll_WSACleanup
xor dl, 4
mov byte [rsp + 0x72], cl
mov al, 0x61
mov byte [rsp + 0x73], dl
xor al, 4
lea rdx, [rsp + 0x71]
lea rcx, [0x14014a920]
mov byte [rsp + 0x71], al
mov r9, r14
mov r8b, 1
call fcn.14005ace0
mov al, 0x76
mov byte [rsp + 0x78], reloc.WS2_32.dll_send
xor r8d, r8d
mov cl, 0x60
xor al, 0x13
mov dl, 0x63
movss xmm2, dword [0x1400cf034]
xor cl, 0x13
xor dl, 0x13
mov byte [rsp + 0x7a], cl
mov byte [rsp + 0x7b], dl
lea rcx, [0x14014aad8]
lea rdx, [rsp + 0x79]
mov byte [rsp + 0x79], al
mov r9, r14
mov byte [rsp + 0x7c], r8b
call fcn.14005b040
xor r8d, r8d
mov byte [rbp - 0x80], Ordinal_45
mov cl, 0x59
mov byte [rbp - 0x7c], r8b
xor cl, 0x2a
mov dl, 0x5a
xor dl, 0x2a
mov byte [rbp - 0x7e], cl
mov al, reloc.WLDAP32.dll_Ordinal_79
mov byte [rbp - 0x7d], dl
xor al, 0x2a
lea rdx, [rbp - 0x7f]
lea rcx, [0x14014a3a0]
mov byte [rbp - 0x7f], al
mov r9, r14
mov r8d, 1
call fcn.14005b1c0
mov al, 4
mov byte [rbp - 0x60], 0x76
movzx r9d, al
mov cl, reloc.WS2_32.dll_socket
movzx r8d, cl
xor r9b, 0x76
xor r8b, 0x76
mov byte [rbp - 0x5b], r9b
xor cl, 0x76
mov byte [rbp - 0x5c], r8b
mov dl, reloc.WS2_32.dll_select
mov byte [rbp - 0x5e], cl
xor dl, 0x76
lea rcx, [0x14014a7e0]
xor r10d, r10d
mov byte [rbp - 0x5d], dl
xor al, 0x76
mov byte [rbp - 0x5a], r10b
mov r9, r14
mov byte [rbp - 0x5f], al
mov r8b, 1
lea rdx, [rbp - 0x5f]
call fcn.14005ace0
mov al, 0x76
mov byte [rbp - 0x58], 4
movzx r9d, al
mov cl, 0x65
movzx r8d, cl
xor r9b, 4
xor r8b, 4
mov byte [rbp - 0x53], r9b
xor cl, 4
mov byte [rbp - 0x54], r8b
mov dl, 0x60
mov byte [rbp - 0x56], cl
xor dl, 4
lea rcx, [0x14014a210]
xor r10d, r10d
mov byte [rbp - 0x55], dl
xor al, 4
mov byte [rbp - 0x52], r10b
mov r9, r14
mov byte [rbp - 0x57], al
mov r8b, 1
lea rdx, [rbp - 0x57]
call fcn.14005ace0
mov al, reloc.WLDAP32.dll_Ordinal_33
mov byte [rbp - 0x50], 0x53
mov cl, reloc.WLDAP32.dll_Ordinal_50
movzx r9d, al
movzx r8d, cl
mov dl, 0x37
xor r10d, r10d
xor cl, 0x53
mov byte [rbp - 0x4a], r10b
xor dl, 0x53
mov byte [rbp - 0x4e], cl
xor r8b, 0x53
mov byte [rbp - 0x4d], dl
xor r9b, 0x53
mov byte [rbp - 0x4c], r8b
mov byte [rbp - 0x4b], r9b
lea rdx, [rbp - 0x4f]
xor al, 0x53
lea rcx, [0x14014a688]
mov r9, r14
mov byte [rbp - 0x4f], al
mov r8b, 1
call fcn.14005ace0
movss xmm2, dword [0x1400cf018]
mov al, 0x24
movzx r9d, al
mov byte [rbp - 0x48], 0x56
mov cl, 0x37
xor r9b, 0x56
movzx r8d, cl
mov byte [rbp - 0x43], r9b
xor cl, 0x56
mov dl, reloc.WLDAP32.dll_Ordinal_50
xor dl, 0x56
mov byte [rbp - 0x46], cl
xor r10d, r10d
mov byte [rbp - 0x45], dl
xor al, 0x56
mov byte [rbp - 0x42], r10b
xor r8b, 0x56
mov byte [rbp - 0x47], al
mov r9, r14
mov byte [rbp - 0x44], r8b
lea rdx, [rbp - 0x47]
lea rcx, [0x14014a7b8]
call fcn.14005b040
movss xmm2, dword [0x1400d8fd8]
mov al, 0x24
movzx r9d, al
mov byte [rbp - 0x40], 0x56
mov cl, 0x37
xor r9b, 0x56
movzx r8d, cl
mov byte [rbp - 0x3b], r9b
xor cl, 0x56
mov dl, reloc.WLDAP32.dll_Ordinal_50
xor dl, 0x56
mov byte [rbp - 0x3e], cl
xor r10d, r10d
mov byte [rbp - 0x3d], dl
xor al, 0x56
mov byte [rbp - 0x3a], r10b
xor r8b, 0x56
mov byte [rbp - 0x3f], al
mov r9, r14
mov byte [rbp - 0x3c], r8b
lea rdx, [rbp - 0x3f]
lea rcx, [0x14014ab18]
call fcn.14005b040
mov cl, 9
mov byte [rbp - 0x38], 0x68
mov al, reloc.WLDAP32.dll_Ordinal_26
movzx r8d, cl
movzx r9d, al
xor r8b, 0x68
xor r10d, r10d
mov byte [rbp - 0x34], r8b
xor al, 0x68
mov byte [rbp - 0x32], r10b
xor cl, 0x68
mov byte [rbp - 0x37], al
mov dl, listen
mov byte [rbp - 0x36], cl
xor dl, 0x68
xor r9b, 0x68
mov byte [rbp - 0x35], dl
mov byte [rbp - 0x33], r9b
mov r9, r14
movss xmm2, dword [0x1400d8fdc]
lea rdx, [rbp - 0x37]
lea rcx, [0x14014a970]
call fcn.14005b040
movss xmm6, dword [0x1400cf028]
mov al, 0x2b
movzx r9d, al
mov byte [rbp - 0x30], 0x59
mov cl, gethostname
xor r9b, 0x59
movzx r8d, cl
mov byte [rbp - 0x2b], r9b
xor cl, 0x59
mov dl, 0x3d
xor dl, 0x59
mov byte [rbp - 0x2e], cl
xor r10d, r10d
mov byte [rbp - 0x2d], dl
xor al, 0x59
mov byte [rbp - 0x2a], r10b
xor r8b, 0x59
mov byte [rbp - 0x2f], al
mov r9, r14
mov byte [rbp - 0x2c], r8b
movaps xmm2, xmm6
lea rdx, [rbp - 0x2f]
lea rcx, [0x14014a6b0]
call fcn.14005b040
mov al, reloc.WS2_32.dll_send
mov byte [rbp - 0x28], 0x61
movzx r9d, al
xor cl, cl
xor r9b, 0x61
xor cl, 0x61
mov dl, 5
mov byte [rbp - 0x23], r9b
xor dl, 0x61
mov byte [rbp - 0x26], cl
xor r8b, r8b
mov byte [rbp - 0x25], dl
xor r10d, r10d
lea rdx, [rbp - 0x27]
xor al, 0x61
mov byte [rbp - 0x22], r10b
xor r8b, 0x61
mov byte [rbp - 0x27], al
mov r9, r14
mov byte [rbp - 0x24], r8b
movaps xmm2, xmm6
lea rcx, [0x14014aa60]
call fcn.14005b040
mov cl, 0x45
mov byte [rbp + 0x18], Ordinal_46
xor cl, 0x2c
mov dl, 0x41
xor dl, 0x2c
mov byte [rbp + 0x1a], cl
mov r8b, Ordinal_79
mov byte [rbp + 0x1b], dl
xor r8b, 0x2c
lea rdx, [rbp + 0x19]
mov r9b, 0x43
mov byte [rbp + 0x1c], r8b
xor r9b, 0x2c
lea rcx, [0x14014a948]
mov al, 0x4d
mov byte [rbp + 0x1d], r9b
mov r10b, 0x58
xor r11d, r11d
xor al, 0x2c
mov byte [rbp + 0x1f], r11b
xor r10b, 0x2c
mov byte [rbp + 0x19], al
mov r9, r14
mov byte [rbp + 0x1e], r10b
mov r8b, 1
call fcn.14005ace0
mov al, 0x6c
mov byte [rbp + 0x20], reloc.WS2_32.dll_listen
mov cl, 0x64
mov dl, 0x60
mov r8b, reloc.WS2_32.dll_WSAGetLastError
xor cl, 0xd
xor r8b, 0xd
mov byte [rbp + 0x22], cl
xor dl, 0xd
mov byte [rbp + 0x24], r8b
mov r9b, 0x62
mov byte [rbp + 0x23], dl
xor r9b, 0xd
lea rdx, [rbp + 0x21]
mov r10b, 0x79
mov byte [rbp + 0x25], r9b
xor r11d, r11d
lea rcx, [0x14014a790]
xor al, 0xd
mov byte [rbp + 0x27], r11b
xor r10b, 0xd
mov byte [rbp + 0x21], al
mov r9, r14
mov byte [rbp + 0x26], r10b
xor r8d, r8d
call fcn.14005ace0
mov cl, 0x36
mov byte [rbp + 0x28], 0x5f
xor cl, 0x5f
mov dl, reloc.WLDAP32.dll_Ordinal_50
xor dl, 0x5f
mov byte [rbp + 0x2a], cl
mov r8b, 0x3d
mov byte [rbp + 0x2b], dl
xor r8b, 0x5f
lea rdx, [rbp + 0x29]
mov r9b, Ordinal_50
mov byte [rbp + 0x2c], r8b
xor r9b, 0x5f
lea rcx, [0x14014a6d8]
mov al, 0x3e
mov byte [rbp + 0x2d], r9b
mov r10b, Ordinal_45
xor r11d, r11d
xor al, 0x5f
mov byte [rbp + 0x2f], r11b
xor r10b, 0x5f
mov byte [rbp + 0x29], al
mov r9, r14
mov byte [rbp + 0x2e], r10b
mov r8b, 1
call fcn.14005ace0
mov cl, 0x7a
mov byte [rbp + 0x30], reloc.WS2_32.dll_send
xor cl, 0x13
mov dl, 0x7e
xor dl, 0x13
mov byte [rbp + 0x32], cl
mov r8b, WSAStartup
mov byte [rbp + 0x33], dl
xor r8b, 0x13
lea rdx, [rbp + 0x31]
mov r9b, 0x7c
mov byte [rbp + 0x34], r8b
xor r9b, 0x13
lea rcx, [0x14014a9e8]
mov al, WSAStartup
mov byte [rbp + 0x35], r9b
mov r10b, 0x67
xor r11d, r11d
xor al, 0x13
mov byte [rbp + 0x37], r11b
xor r10b, 0x13
mov byte [rbp + 0x31], al
mov r9, r14
mov byte [rbp + 0x36], r10b
mov r8b, 1
call fcn.14005ace0
mov al, 1
mov byte [rbp + 0x38], 0x60
mov cl, 9
mov dl, reloc.WS2_32.dll_listen
mov r8b, 2
mov r9b, reloc.WS2_32.dll_ntohs
mov r10b, reloc.WS2_32.dll_sendto
xor cl, 0x60
xor dl, 0x60
xor r8b, 0x60
mov byte [rbp + 0x3a], cl
xor r9b, 0x60
mov byte [rbp + 0x3b], dl
mov byte [rbp + 0x3c], r8b
lea rdx, [rbp + 0x39]
mov byte [rbp + 0x3d], r9b
lea rcx, [0x14014a350]
xor r11d, r11d
xor al, 0x60
xor r10b, 0x60
mov byte [rbp + 0x39], al
mov r9, r14
mov byte [rbp + 0x3e], r10b
mov r8b, 1
mov byte [rbp + 0x3f], r11b
call fcn.14005ace0
mov cl, 0x7c
mov byte [rbp + 0x40], reloc.WS2_32.dll_setsockopt
xor cl, 0x15
mov dl, 0x78
xor dl, 0x15
mov byte [rbp + 0x42], cl
mov r8b, 0x77
mov byte [rbp + 0x43], dl
xor r8b, 0x15
lea rdx, [rbp + 0x41]
mov r9b, 0x7a
mov byte [rbp + 0x44], r8b
xor r9b, 0x15
lea rcx, [0x14014ab68]
mov al, reloc.WS2_32.dll_WSACleanup
mov byte [rbp + 0x45], r9b
mov r10b, 0x61
xor r11d, r11d
xor al, 0x15
mov byte [rbp + 0x47], r11b
xor r10b, 0x15
mov byte [rbp + 0x41], al
mov r9, r14
mov byte [rbp + 0x46], r10b
mov r8b, 1
call fcn.14005ace0
xor dl, dl
mov byte [rbp + 0x48], WSAGetLastError
xor dl, 0x6d
mov cl, 4
xor cl, 0x6d
mov byte [rbp + 0x4b], dl
mov r8b, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x4a], cl
xor r8b, 0x6d
lea rdx, [rbp + 0x49]
mov r9b, 2
mov byte [rbp + 0x4c], r8b
xor r9b, 0x6d
lea rcx, [0x14014a880]
mov al, listen
mov byte [rbp + 0x4d], r9b
mov r10b, Ordinal_26
xor r11d, r11d
xor al, 0x6d
mov byte [rbp + 0x4f], r11b
xor r10b, 0x6d
mov byte [rbp + 0x49], al
mov r9, r14
mov byte [rbp + 0x4e], r10b
mov r8b, 1
call fcn.14005ace0
mov al, 0x18
mov byte [rbp + 0x50], 0x79
xor r11d, r11d
mov cl, reloc.WS2_32.dll_recv
xor al, 0x79
mov dl, reloc.WS2_32.dll_sendto
mov byte [rbp + 0x51], al
mov r8b, reloc.WLDAP32.dll_Ordinal_27
mov r9b, reloc.WLDAP32.dll_Ordinal_22
mov r10b, reloc.WS2_32.dll_listen
movss xmm2, dword [0x1400cee50]
xor cl, 0x79
xor dl, 0x79
mov byte [rbp + 0x52], cl
xor r9b, 0x79
mov byte [rbp + 0x53], dl
mov byte [rbp + 0x55], r9b
lea rdx, [rbp + 0x51]
xor r8b, 0x79
mov byte [rbp + 0x57], r11b
xor r10b, 0x79
mov byte [rbp + 0x54], r8b
mov r9, r14
mov byte [rbp + 0x56], r10b
lea rcx, [0x14014a238]
call fcn.14005b040
movss xmm2, dword [0x1400d8390]
mov cl, 0xb
xor cl, 0x62
mov byte [rbp + 0x58], 0x62
mov dl, reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x5a], cl
xor dl, 0x62
lea rcx, [0x14014a8a8]
mov r9b, reloc.WS2_32.dll_listen
mov byte [rbp + 0x5b], dl
xor r9b, 0x62
lea rdx, [rbp + 0x59]
mov al, 3
mov byte [rbp + 0x5d], r9b
xor r8b, r8b
mov r10b, reloc.WLDAP32.dll_Ordinal_22
xor r11d, r11d
xor al, 0x62
xor r8b, 0x62
mov byte [rbp + 0x59], al
xor r10b, 0x62
mov byte [rbp + 0x5c], r8b
mov r9, r14
mov byte [rbp + 0x5e], r10b
mov byte [rbp + 0x5f], r11b
call fcn.14005b040
mov r8b, WSAStartup
mov byte [rbp + 0x60], reloc.WS2_32.dll_send
xor r8b, 0x13
mov cl, 0x7a
xor cl, 0x13
mov byte [rbp + 0x64], r8b
mov dl, 0x7e
mov byte [rbp + 0x62], cl
xor dl, 0x13
lea rcx, [0x14014a8f8]
mov r9b, 0x7c
mov byte [rbp + 0x63], dl
xor r9b, 0x13
lea rdx, [rbp + 0x61]
mov al, WSAStartup
mov byte [rbp + 0x65], r9b
mov r10b, 0x67
xor r11d, r11d
xor al, 0x13
mov byte [rbp + 0x67], r11b
xor r10b, 0x13
mov byte [rbp + 0x61], al
mov r9, r14
mov byte [rbp + 0x66], r10b
xor r8d, r8d
call fcn.14005b1c0
mov al, reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 0x68], 0x5d
xor al, 0x5d
mov cl, 0x34
xor cl, 0x5d
mov byte [rbp + 0x69], al
mov dl, 0x30
mov byte [rbp + 0x6a], cl
xor r11d, r11d
mov r8b, 0x3f
xor dl, 0x5d
mov r9b, reloc.WLDAP32.dll_Ordinal_50
mov r10b, reloc.WLDAP32.dll_Ordinal_41
xor r8b, 0x5d
mov byte [rbp + 0x6b], dl
xor r9b, 0x5d
mov byte [rbp + 0x6c], r8b
mov byte [rbp + 0x6d], r9b
lea r8d, [r11 + 2]
xor r10b, 0x5d
mov byte [rbp + 0x6f], r11b
mov r9, r14
mov byte [rbp + 0x6e], r10b
lea rdx, [rbp + 0x69]
lea rcx, [0x14014a328]
call fcn.14005b1c0
xor r9d, r9d
mov byte [rbp - 0x78], 0x53
mov cl, 0x3a
mov byte [rbp - 0x73], r9b
xor cl, 0x53
mov dl, reloc.WLDAP32.dll_Ordinal_32
xor dl, 0x53
mov byte [rbp - 0x76], cl
mov r8b, Ordinal_50
mov byte [rbp - 0x75], dl
xor r8b, 0x53
lea rdx, [rbp - 0x77]
mov al, 0x3e
mov byte [rbp - 0x74], r8b
xor al, 0x53
lea rcx, [0x14014a288]
mov r8b, 1
mov byte [rbp - 0x77], al
mov r9, r14
call fcn.14005ace0
xor r9d, r9d
mov byte [rbp - 0x70], 0x6a
mov cl, 3
mov byte [rbp - 0x6b], r9b
xor cl, 0x6a
mov dl, Ordinal_26
xor dl, 0x6a
mov byte [rbp - 0x6e], cl
mov r8b, 9
mov byte [rbp - 0x6d], dl
xor r8b, 0x6a
lea rdx, [rbp - 0x6f]
mov al, 7
mov byte [rbp - 0x6c], r8b
xor al, 0x6a
lea rcx, [0x14014a858]
mov r8b, 1
mov byte [rbp - 0x6f], al
mov r9, r14
call fcn.14005ace0
mov r8b, 0x34
mov byte [rbp - 0x68], 0x57
xor r8b, 0x57
xor r9d, r9d
mov cl, 0x3e
mov byte [rbp - 0x64], r8b
xor cl, 0x57
mov byte [rbp - 0x63], r9b
mov dl, 0x24
mov byte [rbp - 0x66], cl
xor dl, 0x57
lea rcx, [0x14014a2b0]
mov al, 0x3a
mov byte [rbp - 0x65], dl
xor al, 0x57
lea rdx, [rbp - 0x67]
mov r8d, 0x90
mov byte [rbp - 0x67], al
mov r9, r14
call fcn.14005b1c0
mov al, Ordinal_41
mov byte [rbp - 0x20], 0x4b
mov cl, 0x24
xor r10d, r10d
movzx r8d, cl
xor al, 0x4b
mov dl, 0x27
mov r9b, reloc.WS2_32.dll_gethostname
movss xmm6, dword [0x1400cee34]
xor cl, 0x4b
xor dl, 0x4b
mov byte [rbp - 0x1e], cl
xor r9b, 0x4b
mov byte [rbp - 0x1d], dl
mov byte [rbp - 0x1b], r9b
lea rdx, [rbp - 0x1f]
xor r8b, 0x4b
mov byte [rbp - 0x1f], al
mov r9, r14
mov byte [rbp - 0x1c], r8b
lea rcx, [0x14014a2d8]
mov byte [rbp - 0x1a], r10b
movaps xmm2, xmm6
call fcn.14005b040
mov cl, 0x33
mov byte [rbp - 0x18], 0x5c
movzx r8d, cl
mov dl, 0x30
xor cl, 0x5c
xor dl, 0x5c
mov r9b, reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp - 0x16], cl
xor r9b, 0x5c
mov byte [rbp - 0x15], dl
mov al, 0x3f
mov byte [rbp - 0x13], r9b
xor r10d, r10d
lea rcx, [0x14014a700]
xor al, 0x5c
mov byte [rbp - 0x12], r10b
xor r8b, 0x5c
mov byte [rbp - 0x17], al
mov r9, r14
mov byte [rbp - 0x14], r8b
movaps xmm2, xmm6
lea rdx, [rbp - 0x17]
call fcn.14005b040
mov cl, 0x5d
mov byte [rbp - 0x10], reloc.WLDAP32.dll_Ordinal_50
movzx r8d, cl
mov dl, 0x5e
xor cl, 0x32
xor dl, 0x32
mov r9b, 0x40
mov byte [rbp - 0xe], cl
xor r9b, 0x32
mov byte [rbp - 0xd], dl
mov al, 0x51
mov byte [rbp - 0xb], r9b
xor r10d, r10d
lea rcx, [0x14014aa88]
xor al, 0x32
mov byte [rbp - 0xa], r10b
xor r8b, 0x32
mov byte [rbp - 0xf], al
mov r9, r14
mov byte [rbp - 0xc], r8b
movaps xmm2, xmm6
lea rdx, [rbp - 0xf]
call fcn.14005b040
mov cl, reloc.WS2_32.dll_select
mov byte [rbp - 8], 0x7d
movzx r8d, cl
mov r9b, reloc.WS2_32.dll_ntohs
xor r8b, 0x7d
xor r10d, r10d
xor cl, 0x7d
mov byte [rbp - 4], r8b
mov al, reloc.WLDAP32.dll_Ordinal_30
mov byte [rbp - 6], cl
xor al, 0x7d
mov byte [rbp - 2], r10b
mov dl, reloc.WS2_32.dll_recvfrom
mov byte [rbp - 7], al
xor dl, 0x7d
xor r9b, 0x7d
mov byte [rbp - 5], dl
mov byte [rbp - 3], r9b
mov r9, r14
movss xmm2, dword [0x1400d8f38]
lea rdx, [rbp - 7]
lea rcx, [0x14014a3c8]
call fcn.14005b040
movss xmm2, dword [0x1400d8f2c]
mov cl, 0x30
movzx r8d, cl
mov byte [rbp], 0x5f
xor cl, 0x5f
mov dl, 0x33
xor dl, 0x5f
mov byte [rbp + 2], cl
mov r9b, reloc.WLDAP32.dll_Ordinal_45
mov byte [rbp + 3], dl
xor r9b, 0x5f
lea rcx, [0x14014a378]
mov al, reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp + 5], r9b
xor r10d, r10d
lea rdx, [rbp + 1]
xor al, 0x5f
mov byte [rbp + 6], r10b
xor r8b, 0x5f
mov byte [rbp + 1], al
mov r9, r14
mov byte [rbp + 4], r8b
call fcn.14005b040
movss xmm2, dword [0x1400d8f3c]
mov cl, 0x68
movzx r8d, cl
mov byte [rbp + 8], 7
xor cl, 7
mov dl, 0x6b
xor dl, 7
mov byte [rbp + 0xa], cl
mov al, 0x64
mov byte [rbp + 0xb], dl
mov r10b, 0x75
lea rcx, [0x14014a998]
xor r11d, r11d
lea rdx, [rbp + 9]
xor al, 7
mov byte [rbp + 0xe], r11b
xor r8b, 7
mov byte [rbp + 9], al
xor r10b, 7
mov byte [rbp + 0xc], r8b
mov r9, r14
mov byte [rbp + 0xd], r10b
call fcn.14005b040
mov rcx, qword [rbp + 0x98]
xor rcx, rsp
call fcn.1400c8560
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret