Function at 0x1401aa3ec
Capabilities:
Access peb ldr_data
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rsi, qword [0x1404fba20]
mov edx, 8
lea r13d, [rdx - 7]
test rsi, rsi
jne 0x1401aa574
mov rax, qword gs:[0x60]
xor ebx, ebx
mov edi, 0x53b2070f
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov r8, r14
movups xmm0, xmmword [r8 + 0x58]
movd eax, xmm0
sub ax, dx
test ebx, ebx
je 0x1401aa489
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1401aa47c
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1401aa46d
cmp edx, ebx
jne 0x1401aa54f
mov r9, qword [r8 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rax, qword [rax + r9 + 0x88]
mov r10d, eax
add r10, r9
shr rax, 0x20
cmp r10, r9
je 0x1401aa54f
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x1401aa54f
mov r12d, dword [r10 + 0x20]
dec r11d
mov esi, 0x811c9dc5
lea rcx, [r12 + r11*4]
mov edx, dword [rcx + r9]
add rdx, r9
jmp 0x1401aa4dd
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x1401aa4d2
cmp esi, edi
je 0x1401aa4f1
test r11d, r11d
jne 0x1401aa4bd
jmp 0x1401aa54f
mov edx, dword [r10 + 0x24]
add rdx, r9
movzx r8d, word [rdx + r11*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov esi, dword [rdx + r8*4]
add rsi, r9
cmp rsi, r10
jbe 0x1401aa56d
lea rcx, [rax + r10]
cmp rsi, rcx
jae 0x1401aa56d
mov ebx, 0x811c9dc5
mov edi, ebx
jmp 0x1401aa530
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
add rsi, r13
mov al, byte [rsi]
cmp al, 0x2e
jne 0x1401aa522
jmp 0x1401aa543
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
add rsi, r13
mov al, byte [rsi]
test al, al
jne 0x1401aa538
mov r8, qword [r14]
mov rax, qword [r8]
mov r8, rax
cmp rax, r14
je 0x1401aa56b
cmp qword [rax + 0x30], 0
je 0x1401aa56b
mov edx, 8
jmp 0x1401aa442
xor esi, esi
mov qword [0x1404fba20], rsi
mov bl, byte [rbp + 0x30]
mov r14d, Ordinal_35
xorps xmm0, xmm0
mov dword [rbp - 0x50], 0xafb6a5ae
mov dword [rbp - 0x4c], 0x534a1350
mov r12b, 0x68
mov word [rbp - 0x48], 0xe154
lea r15d, [r14 - 0xe]
movups xmmword [rbp - 0x46], xmm0
call fcn.1401abe8c
mov rdi, qword [rax]
call fcn.1401abe94
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x1a
jae 0x1401aaf5f
movzx r8d, byte [rbp + r9 - 0x50]
mov r11d, r8d
cmp rdi, r9
ja 0x1401aaf56
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x1401aa5f8
movabs rcx, 0xf109768600e1de7c
mov al, r11b
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
sub bl, 0x64
jmp 0x1401aa87c
je 0x1401aaee2
lea rax, [r10 + 2]
cmp rdi, rax
je 0x1401aae73
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1401aae28
lea rax, [r10 + 8]
cmp rdi, rax
je 0x1401aadea
cmp r10, r9
ja 0x1401aaf4d
lea rax, [r10 + 0x41]
cmp rdi, rax
jae 0x1401aa658
movabs rcx, 0xc5c6b8fe1287402c
mov al, r11b
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
sub bl, 0x34
jmp 0x1401aa860
lea rax, [r10 + 1]
cmp rdi, rax
je 0x1401aadd9
lea rax, [r10 + 2]
cmp rdi, rax
je 0x1401aadbf
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1401aada7
lea rax, [r10 + 7]
cmp rdi, rax
je 0x1401aad8d
lea rax, [r10 + rdi]
cmp rax, r9
jbe 0x1401aab28
lea rax, [r10 + 6]
cmp rdi, rax
je 0x1401aab0a
lea rax, [r10 + 0x10]
cmp rdi, rax
je 0x1401aaaed
lea rax, [r10 + 0x42]
cmp rdi, rax
je 0x1401aaadf
lea rax, [r10 + 0x3e8]
cmp rdi, rax
je 0x1401aab9d
lea rax, [r10 + 0x7a]
cmp rdi, rax
je 0x1401aaac5
lea rax, [r10 + 1]
cmp rdi, rax
je 0x1401aaaa8
lea rax, [r10 + 0x61]
cmp rdi, rax
je 0x1401aaa8d
lea rax, [r10 + 0x2a]
cmp rdi, rax
je 0x1401aaa73
lea rax, [r10 + 4]
cmp rdi, rax
je 0x1401aaa55
lea rax, [r10 + 9]
cmp rdi, rax
je 0x1401aa699
lea rdi, [r10 + 0x10]
lea r10, [rdi + 0x28]
lea rax, [r10 + 0x42]
cmp rdi, rax
jb 0x1401aaf32
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jb 0x1401aaf13
lea rax, [r10 + 0x7a]
cmp rdi, rax
jb 0x1401aa883
lea rax, [r10 + 1]
cmp rdi, rax
jb 0x1401aa867
lea rax, [r10 + 0x61]
cmp rdi, rax
jb 0x1401aa84d
lea rax, [r10 + 0x2a]
cmp rdi, rax
jb 0x1401aa9b1
lea rax, [r10 + 4]
cmp rdi, rax
jb 0x1401aa9a6
lea rax, [r10 + 9]
cmp rdi, rax
jb 0x1401aa98b
lea rax, [r10 + 0x28]
cmp rdi, rax
jb 0x1401aa96c
lea rax, [r10 + 0x80]
cmp rdi, rax
jb 0x1401aa699
lea rdi, [r10 + 0x3e8]
lea r10, [rdi + 0x1000]
lea rax, [r10 + 0x7a]
cmp rdi, rax
ja 0x1401aa952
lea rax, [r10 + 1]
cmp rdi, rax
ja 0x1401aa938
lea rax, [r10 + 0x61]
cmp rdi, rax
ja 0x1401aa92a
lea rax, [r10 + 0x2a]
cmp rdi, rax
ja 0x1401aa91c
lea rax, [r10 + 4]
cmp rdi, rax
ja 0x1401aa8ff
lea rax, [r10 + 9]
cmp rdi, rax
ja 0x1401aa8e2
lea rax, [r10 + 0x28]
cmp rdi, rax
ja 0x1401aa8c8
lea rax, [r10 + 0x80]
cmp rdi, rax
ja 0x1401aa8bc
lea rax, [r10 + 0x1000]
cmp rdi, rax
ja 0x1401aa89e
lea rax, [r10 + 0x5a]
cmp rdi, rax
ja 0x1401aa699
lea rdi, [r10 + 1]
lea r10, [rdi + 3]
jmp 0x1401aa699
lea ecx, [r9 + 0x54]
mov al, r8b
and al, cl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x4c
add bl, cl
jmp 0x1401aa68c
lea ecx, [r9 + 0x5c]
mov al, r8b
and al, cl
mov ebx, 0x3e
sub bl, al
add bl, bl
add bl, r8b
add bl, cl
jmp 0x1401aa625
lea edx, [r9 + 0x64]
mov ecx, r14d
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401aa5c5
mov ecx, Ordinal_50
lea edx, [r9 + 0x60]
mov al, r8b
mov r11b, r9b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401aae00
lea edx, [r12 + r9]
mov ecx, r15d
jmp 0x1401aaaf6
lea ecx, [r9 + 0x70]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x10
jmp 0x1401aae20
lea edx, [r9 + 0x78]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
mov r11b, r9b
sub bl, al
sub bl, 0x48
add bl, dl
jmp 0x1401aae40
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x1401aae5e
lea edx, [r9 - 0x78]
mov ecx, 0x24
jmp 0x1401aaab1
lea edx, [r9 - 0x70]
mov ecx, 8
jmp 0x1401aaa96
mov dl, r9b
mov al, r8b
sub dl, r12b
mov bl, r8b
and al, dl
add al, al
sub bl, al
sub bl, 0x28
jmp 0x1401aaa86
lea ecx, [r9 - 0x60]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x60
jmp 0x1401aaeff
lea ecx, [r9 + 0x34]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x6c
mov byte [rbp + r9 - 0x50], bl
jmp 0x1401aaf0b
mov ecx, reloc.WLDAP32.dll_Ordinal_46
lea edx, [r9 + 0x3c]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401aaa29
lea edx, [r9 + 0x44]
mov ecx, reloc.WS2_32.dll_select
jmp 0x1401aa9ea
lea edx, [r9 + 0x4c]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
add bl, dl
sub bl, r15b
lea rax, [r10 + rdi]
cmp rax, 9
je 0x1401aad6e
lea rax, [r10 + 0x10]
cmp rdi, rax
jbe 0x1401aabf9
lea edx, [r9 - 0x74]
mov ecx, reloc.WLDAP32.dll_Ordinal_22
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
cmp rdi, 0x80
jae 0x1401aad4e
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jbe 0x1401aac84
lea edx, [r9 - 0x48]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 8
add bl, dl
cmp r10, 0x5a
jb 0x1401aa981
mov ecx, r15d
mov r11b, r9b
mov al, r8b
lea edx, [r12 + r11]
and al, dl
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
lea ebx, [rcx + rcx]
jmp 0x1401aae02
mov ecx, 8
mov al, r8b
add ecx, r9d
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x38
jmp 0x1401aaeff
lea edx, [r9 + 0x10]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x70
add bl, dl
jmp 0x1401aaeb9
lea edx, [r9 + 0x18]
mov ecx, Ordinal_46
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401aac7d
lea edx, [r9 + 0x20]
mov ecx, reloc.WS2_32.dll_recv
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401aae61
lea ecx, [r9 + 0x28]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x18
jmp 0x1401aae5e
lea edx, [r9 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
jmp 0x1401aadc8
lea edx, [r9 + 0x40]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401aae1d
mov r11b, r9b
mov ecx, 4
lea edx, [r11 + 0x48]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401aae00
lea rax, [r10 + 4]
cmp rdi, rax
jae 0x1401aab4b
lea edx, [r9 + 0x7c]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x64
add bl, dl
jmp 0x1401aa9c6
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401aab6e
lea ecx, [r9 + 0x58]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, r12b
jmp 0x1401aaeff
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1401aab94
lea edx, [r9 + 0x38]
mov ecx, reloc.WLDAP32.dll_Ordinal_60
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401aae5e
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401aabb8
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x30]
and al, dl
add al, al
sub bl, al
sub bl, 0x50
jmp 0x1401aad67
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x1401aabdb
lea ecx, [r9 + 0x28]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x18
jmp 0x1401aae20
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x1401aa9c6
mov r11b, r9b
mov ecx, Ordinal_46
lea edx, [r11 + 0x18]
jmp 0x1401aab16
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401aac13
mov r11b, r9b
mov ecx, reloc.WLDAP32.dll_Ordinal_50
lea edx, [r11 - 0x7c]
jmp 0x1401aab16
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1401aac36
lea ecx, [r9 + 0x74]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x2c
jmp 0x1401aae20
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401aac5d
mov r11b, r9b
mov ecx, 6
lea edx, [r11 + 0x6c]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401aad67
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x1401aa9f9
lea edx, [r9 + 0x54]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x4c
add bl, dl
jmp 0x1401aae91
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401aacaa
lea edx, [r9 - 0x50]
mov ecx, Ordinal_27
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401aaeff
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401aacce
mov ecx, 0x34
lea edx, [r9 - 0x58]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
jmp 0x1401aaa86
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1401aacf3
mov cl, r9b
mov al, r8b
sub cl, r12b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x28
jmp 0x1401aae61
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x1401aad0a
lea edx, [r9 - 0x70]
mov ecx, 8
jmp 0x1401aab80
lea rax, [r10 + 4]
cmp rdi, rax
jne 0x1401aad24
mov r11b, r9b
mov ecx, 0x24
lea edx, [r11 - 0x78]
jmp 0x1401aac4b
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x1401aaa2b
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x1401aae20
mov cl, byte [rbp + r9 - 0x50]
mov r11b, r9b
mov al, r8b
lea edx, [r11 + 0x60]
and al, dl
sub cl, al
add cl, 0x30
lea ebx, [rcx + rcx]
add bl, dl
jmp 0x1401aae40
lea edx, [r9 + 0x58]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, byte [rbp + r9 - 0x50]
add bl, dl
sub bl, r12b
jmp 0x1401aae91
lea ecx, [r9 - 0x1c]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x3c
jmp 0x1401aaeff
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0xc]
and al, dl
add al, al
sub bl, al
sub bl, 0x54
jmp 0x1401aad67
lea edx, [r15 + r9]
mov ecx, Ordinal_60
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401aae20
mov r11b, r9b
mov ecx, 2
lea edx, [r11 + 0x24]
jmp 0x1401aab16
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x34]
and al, dl
add al, al
sub bl, al
sub bl, 0x6c
add bl, dl
mov al, r8b
sub r11b, 0x1c
and al, r11b
add al, al
sub r8b, al
sub r8b, 0x3c
add r8b, r11b
mov byte [rbp + r9 - 0x50], r8b
add r10, r13
sub r9, r13
jmp 0x1401aaf0b
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 + 0x4c]
and al, dl
add al, al
sub bl, al
add bl, dl
sub bl, r15b
mov al, r8b
sub r11b, 0x24
and al, r11b
add al, al
sub r8b, al
sub r8b, 4
add r8b, r11b
add r8b, bl
mov byte [rbp + r9 - 0x50], r8b
add rdi, r10
or rcx, 0xffffffffffffffff
movzx eax, bl
sub rcx, rax
add r9, rcx
jmp 0x1401aaf0b
mov eax, r14d
movabs rcx, 0x97423daa062d1564
add rcx, r9
and r11b, cl
sub al, r11b
lea ebx, [rax + rax]
add bl, r8b
add bl, cl
lea edx, [r9 - 0x2c]
mov al, r8b
and al, dl
add r10, r13
mov ecx, reloc.WLDAP32.dll_Ordinal_26
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
movzx eax, cl
mov byte [rbp + r9 - 0x50], al
add rax, r10
sub r9, rax
mov al, r8b
lea ecx, [r9 + 0x50]
and al, cl
add rdi, r13
add al, al
sub r8b, al
or rax, 0xffffffffffffffff
sub r8b, 0x30
sub rax, rdi
add r8b, cl
mov byte [rbp + r9 - 0x50], r8b
add r9, rax
jmp 0x1401aaeff
movabs rax, 0xd31c639202a59b74
add rax, r9
and r11b, al
add r11b, r11b
sub r8b, r11b
lea ebx, [rax + r8]
sub bl, 0x2c
movzx eax, byte [rbp + r9 - 0x50]
add rax, r10
add r9, rax
add r9, r13
jmp 0x1401aa5b2
add r9b, 0x6c
mov ecx, 6
mov al, r8b
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x1401aa5af
add r9b, 0x74
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x2c
jmp 0x1401aa59f
lea rcx, [rbp + 0x1417b00]
jmp 0x1401aaf63
lea rcx, [rbp + 0xa3597c]
jmp 0x1401aaf63
lea rcx, [rbp - 0x50]
call rsi
mov r12, qword [0x1404fba18]
mov r13, rax
test r12, r12
jne 0x1401ab0cf
mov rcx, qword gs:[0x60]
xor esi, esi
mov r14d, 0xf8f45725
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rbx, r15
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x1401aafde
psrldq xmm0, 8
mov edx, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x1401aafd1
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401aafc2
cmp edx, esi
jne 0x1401ab0af
mov r11, qword [rbx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r10d, eax
add r10, r11
shr rax, 0x20
cmp r10, r11
je 0x1401ab0af
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1401ab0af
mov edi, dword [r10 + 0x20]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + rdi]
mov edx, 0x811c9dc5
add r8, r11
jmp 0x1401ab032
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1401ab027
cmp edx, r14d
je 0x1401ab048
test r9d, r9d
jne 0x1401ab012
jmp 0x1401ab0af
mov edx, dword [r10 + 0x24]
add rdx, r11
movzx r9d, word [rdx + r9*2]
mov edx, dword [r10 + 0x1c]
add rdx, r11
mov r12d, dword [rdx + r9*4]
add r12, r11
cmp r12, r10
jbe 0x1401ab0c8
lea rcx, [r10 + rax]
cmp r12, rcx
jae 0x1401ab0c8
mov eax, 0x811c9dc5
mov esi, eax
mov r14d, eax
jmp 0x1401ab08a
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc r12
mov al, byte [r12]
cmp al, 0x2e
jne 0x1401ab07c
jmp 0x1401ab0a1
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r12
mov al, byte [r12]
test al, al
jne 0x1401ab094
mov rbx, qword [r15]
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r15
je 0x1401ab0c5
cmp qword [rax + 0x30], 0
jne 0x1401aaf97
xor r12d, r12d
mov qword [0x1404fba18], r12
mov bl, byte [rbp + 0x30]
xor eax, eax
xorps xmm0, xmm0
mov dword [rbp - 0x30], 0x8669956e
mov dword [rbp - 0x2c], 0x89806c98
mov dword [rbp - 0x28], 0x72878387
lea r14d, [rax + 0x1e]
mov dword [rbp - 0x24], 0x99999480
lea r15d, [rax + 0x2e]
mov dword [rbp - 0x20], 0x96989164
mov word [rbp - 0x1c], 0x9965
mov byte [rbp - 0x1a], 6
movups xmmword [rbp - 0x19], xmm0
mov dword [rbp - 9], eax
mov word [rbp - 5], ax
call fcn.1401abe8c
mov rdi, qword [rax]
call fcn.1401abe94
mov r10, qword [rax]
xor r9d, r9d
cmp r9, 0x2d
jae 0x1401aba74
movzx r8d, byte [rbp + r9 - 0x30]
mov esi, r8d
mov r11d, r8d
cmp rdi, r9
ja 0x1401aba6b
lea rax, [r10 + 1]
cmp rdi, rax
jae 0x1401ab172
movabs rcx, 0x3917e6a897a99604
mov al, sil
add rcx, r9
mov bl, r8b
and al, cl
add al, al
sub bl, al
sub bl, 0x1c
add bl, cl
jmp 0x1401ab1ac
je 0x1401ab9f7
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1401ab982
lea rax, [r10 + 2]
cmp rdi, rax
je 0x1401ab94f
lea rax, [r10 + 5]
cmp rdi, rax
je 0x1401ab915
lea rax, [r10 + 7]
cmp rdi, rax
je 0x1401ab8f7
cmp r10, r9
ja 0x1401aba62
lea rcx, [r10 + 2]
cmp rdi, rcx
jae 0x1401ab1d3
lea ebx, [r9 + 0x54]
mov al, bl
and al, r8b
add al, al
sub bl, al
sub bl, 0x4c
add bl, r8b
jmp 0x1401ab203
lea rax, [r10 + 1]
cmp rdi, rax
je 0x1401ab8bc
lea rax, [r10 + 3]
cmp rdi, rax
je 0x1401ab8b1
lea rax, [r10 + 4]
cmp rdi, rax
je 0x1401ab894
cmp rdi, rcx
je 0x1401ab877
mov r11d, gethostname
lea rax, [r10 + rdi]
cmp rax, r9
jbe 0x1401ab624
lea rax, [r10 + 0x10]
cmp rdi, rax
je 0x1401ab609
lea rax, [r10 + 0x42]
cmp rdi, rax
je 0x1401ab5ef
lea rax, [r10 + 2]
cmp rdi, rax
je 0x1401ab5d5
lea rax, [r10 + 6]
cmp rdi, rax
je 0x1401ab5b5
lea rax, [r10 + 0x400]
cmp rdi, rax
je 0x1401ab598
lea rax, [r10 + 0x41]
cmp rdi, rax
je 0x1401ab57e
lea rax, [r10 + 0x64]
cmp rdi, rax
je 0x1401ab561
lea rax, [r10 + 8]
cmp rdi, rax
je 0x1401ab216
lea rdi, [r10 + 0xa]
lea r10, [rdi + 0x20]
lea rax, [r10 + 0x40]
cmp rdi, rax
jb 0x1401aba47
lea rax, [r10 + 1]
cmp rdi, rax
jb 0x1401aba28
lea rax, [r10 + 5]
cmp rdi, rax
jb 0x1401ab3c0
lea rax, [r10 + 0x3e8]
cmp rdi, rax
jb 0x1401ab3a4
lea rax, [r10 + 0x7a]
cmp rdi, rax
jb 0x1401ab38c
lea rax, [r10 + 0x10]
cmp rdi, rax
jb 0x1401ab518
lea rax, [r10 + 0x42]
cmp rdi, rax
jb 0x1401ab4d1
lea rax, [r10 + 2]
cmp rdi, rax
jb 0x1401ab492
lea rax, [r10 + 6]
cmp rdi, rax
jb 0x1401ab474
lea rax, [r10 + 0x400]
cmp rdi, rax
jb 0x1401ab216
lea rdi, [r10 + 0x61]
lea r10, [rdi + 0x41]
lea rax, [r10 + 0x2a]
cmp rdi, rax
ja 0x1401ab466
lea rax, [r10 + 0x40]
cmp rdi, rax
ja 0x1401ab458
lea rax, [r10 + 0x200]
cmp rdi, rax
ja 0x1401ab440
lea rax, [r10 + 5]
cmp rdi, rax
ja 0x1401ab426
lea rax, [r10 + 0xa]
cmp rdi, rax
ja 0x1401ab409
lea rax, [r10 + 1]
cmp rdi, rax
ja 0x1401ab3fb
lea rax, [r10 + 0x3e8]
cmp rdi, rax
ja 0x1401ab3de
lea rax, [r10 + 0x7a]
cmp rdi, rax
ja 0x1401ab216
lea rdi, [r10 + 0x5a]
lea r10, [rdi + 0x10]
jmp 0x1401ab216
lea ebx, [r9 + 0x2c]
mov al, bl
and al, r8b
add al, al
sub bl, al
add bl, r8b
sub bl, r11b
jmp 0x1401ab209
lea ecx, [r9 + 0x24]
mov ebx, 2
mov al, cl
and al, r8b
sub bl, al
add bl, bl
add bl, cl
add bl, r8b
jmp 0x1401ab1ac
lea edx, [r9 + 0x1c]
mov ecx, r14d
mov al, dl
mov r11, rsi
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x1401ab140
lea edx, [r9 - 0x60]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
mov r11b, r9b
sub bl, al
sub bl, 0x60
add bl, dl
jmp 0x1401ab8d7
lea edx, [r9 - 0x70]
mov ecx, 8
jmp 0x1401ab6c4
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x1401ab94a
lea ecx, [r9 + 0x78]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x48
jmp 0x1401ab970
lea edx, [r9 + 0x70]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x10
jmp 0x1401ab9a2
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
jmp 0x1401ab56a
lea edx, [r9 + 0x60]
mov ecx, Ordinal_50
jmp 0x1401ab657
lea ecx, [r9 + 0x4c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x14
mov byte [rbp + r9 - 0x30], bl
jmp 0x1401aba20
lea edx, [r9 + 0x44]
mov ecx, reloc.WS2_32.dll_select
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
cmp r10, 1
jb 0x1401ab488
mov cl, r8b
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x68]
and al, dl
add al, al
sub cl, al
add cl, dl
lea ebx, [rcx*2 - 0x50]
jmp 0x1401ab8d7
lea edx, [r9 + 0x3c]
mov ecx, r15d
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
cmp rdi, 0x42
jae 0x1401ab83f
lea rax, [r10 + 0x2a]
cmp rdi, rax
jbe 0x1401ab788
lea edx, [r9 + 0x48]
mov ecx, 4
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab4aa
lea ecx, [r11 + r9]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x6c
lea rax, [r10 + rdi]
cmp rax, 0x20
je 0x1401ab861
lea rax, [r10 + 0x40]
cmp rdi, rax
jbe 0x1401ab6d8
lea edx, [r9 - 0xc]
mov ecx, Ordinal_46
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab4e7
lea edx, [r9 - 0x10]
mov ecx, Ordinal_60
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab9cc
lea ecx, [r9 - 0x20]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x20
jmp 0x1401ab970
lea edx, [r9 - 0x28]
mov ecx, recv
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab94a
lea edx, [r9 - 0x30]
mov ecx, Ordinal_41
mov al, r8b
mov r11b, r9b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab92c
lea ecx, [r9 - 0x38]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x78
jmp 0x1401ab90d
lea ecx, [r9 - 0x40]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x40
jmp 0x1401ab8f2
mov r11b, r9b
mov al, r8b
mov bl, r8b
lea edx, [r11 - 0x48]
and al, dl
add al, al
sub bl, al
sub bl, 8
jmp 0x1401ab6fa
lea rcx, [r10 + 3]
cmp rdi, rcx
jae 0x1401ab647
lea edx, [r9 + 4]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x1c
add bl, dl
jmp 0x1401ab52c
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401ab66b
lea edx, [r9 - 0x58]
mov ecx, r11d
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401aba14
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401ab68e
lea ecx, [r9 - 0x38]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x78
jmp 0x1401ab94a
cmp rdi, rcx
jne 0x1401ab6ae
mov r11b, r9b
mov ecx, Ordinal_41
lea edx, [r11 - 0x30]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
jmp 0x1401ab857
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x1401ab52c
lea edx, [r9 - 0x28]
mov ecx, recv
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab90d
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401ab701
mov ecx, reloc.WS2_32.dll_ntohl
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 4]
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab8d7
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401ab724
lea ecx, [r9 + 4]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x1c
jmp 0x1401ab8f2
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1401ab73e
mov r11b, r9b
mov ecx, Ordinal_60
lea edx, [r11 + 0x14]
jmp 0x1401ab69f
lea rax, [r10 + 7]
cmp rdi, rax
jne 0x1401ab760
lea ecx, [r9 + 0x2c]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, r11b
jmp 0x1401ab9a4
lea rax, [r10 + 8]
cmp rdi, rax
jne 0x1401ab4e7
lea edx, [r9 + 0x3c]
mov ecx, r15d
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x1401aba14
lea rax, [r10 + 1]
cmp rdi, rax
jne 0x1401ab7ab
lea ecx, [r9 + 0x50]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x30
jmp 0x1401aba14
lea rax, [r10 + 2]
cmp rdi, rax
jne 0x1401ab7cc
lea edx, [r9 + 0x58]
mov al, r8b
and al, dl
mov bl, r8b
add al, al
sub bl, al
sub bl, 0x68
jmp 0x1401ab577
lea rax, [r10 + 3]
cmp rdi, rax
jne 0x1401ab7f2
lea edx, [r9 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, dl
jmp 0x1401ab970
lea rax, [r10 + 5]
cmp rdi, rax
jne 0x1401ab815
lea ecx, [r9 + 0x70]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
sub bl, 0x10
jmp 0x1401ab94a
lea rax, [r10 + 6]
cmp rdi, rax
jne 0x1401ab4aa
lea ecx, [r9 + 0x80]
mov al, r8b
and al, cl
add al, al
sub r8b, al
lea ebx, [rcx + r8]
add bl, 0x80
jmp 0x1401ab90d
mov bl, byte [rbp + r9 - 0x30]
mov r11b, r9b
mov al, r8b
lea edx, [r11 - 0x60]
and al, dl
add al, al
sub bl, al
sub bl, 0x60
add bl, r8b
add bl, dl
jmp 0x1401ab92c
mov ecx, r11d
lea edx, [r9 - 0x58]
mov al, r8b
and al, dl
sub cl, al
lea ebx, [rcx + rcx]
jmp 0x1401ab9a2
lea edx, [r9 - 0x74]
mov ecx, reloc.WLDAP32.dll_Ordinal_22
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x1401ab9a4
lea edx, [r9 - 0x7c]
mov ecx, reloc.WLDAP32.dll_Ordinal_50
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
jmp 0x1401ab970
lea edx, [r9 + 0x6c]
mov ecx, 6
jmp 0x1401ab8fe
mov ecx, 0x3e
mov r11b, r9b
lea edx, [r11 + 0x5c]
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
mov al, r8b
sub r11b, 0x64
and al, r11b
add al, al
sub r8b, al
sub r8b, 0x44
add r8b, r11b
mov byte [rbp + r9 - 0x30], r8b
inc r10
jmp 0x1401ab90d
lea edx, [r9 + 0x3c]
mov ecx, r15d
mov al, dl
and al, r8b
sub cl, al
lea ebx, [rcx + rcx]
add bl, dl
add bl, r8b
dec r9
jmp 0x1401aba20
mov r11b, r9b
lea ecx, [r11 + 0x34]
mov al, cl
and al, r8b
add al, al
sub cl, al
lea ebx, [r8 + rcx]
sub bl, 0x6c
mov al, r8b
sub r11b, 0x5c
and al, r11b
add al, al
sub r8b, al
sub r8b, 0x7c
add r8b, r11b
add r8b, bl
mov byte [rbp + r9 - 0x30], r8b
add rdi, r10
jmp 0x1401ab970
mov edx, 2
movabs rcx, 0x1d71bed54f64624
add rcx, r9
mov al, cl
and al, r11b
sub dl, al
lea ebx, [rdx + rdx]
add bl, cl
add bl, r11b
or rcx, 0xffffffffffffffff
movzx eax, bl
sub rcx, rax
add r9, rcx
jmp 0x1401aba20
mov ecx, r14d
movabs rdx, 0x8fa74e9c25a31a1c
add rdx, r9
mov r8b, r11b
mov al, dl
and al, r11b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r11b
add bl, dl
lea edx, [r9 - 0x54]
mov al, r8b
and al, dl
inc r10
mov ecx, Ordinal_41
sub cl, al
add cl, cl
add cl, r8b
add cl, dl
movzx eax, cl
mov byte [rbp + r9 - 0x30], al
add rax, r10
sub r9, rax
lea edx, [r9 - 0x50]
mov al, r8b
and al, dl
inc rdi
mov ecx, Ordinal_27
sub cl, al
or rax, 0xffffffffffffffff
add cl, cl
sub rax, rdi
add cl, r8b
add cl, dl
mov byte [rbp + r9 - 0x30], cl
add r9, rax
jmp 0x1401aba14
movabs rcx, 0xab47b3f9c6fcc20c
add rcx, r9
mov al, cl
and al, r11b
add al, al
sub cl, al
lea ebx, [r11 + rcx]
sub bl, 0x54
movzx eax, byte [rbp + r9 - 0x30]
add rax, r10
add r9, rax
inc r9
jmp 0x1401ab12a
add r9b, 0x14
mov ecx, Ordinal_60
mov al, r8b
and al, r9b
sub cl, al
lea ebx, [rcx + rcx]
add bl, r8b
add bl, r9b
jmp 0x1401ab127
add r9b, 0xc
mov al, r8b
and al, r9b
add al, al
sub r8b, al
lea ebx, [r9 + r8]
sub bl, 0x54
jmp 0x1401ab117
lea rdx, [rbp + 0x170ca80]
jmp 0x1401aba78
lea rdx, [rbp + 0x15a6084]
jmp 0x1401aba78
lea rdx, [rbp - 0x30]
mov rcx, r13
call r12
mov rdx, qword [0x1404fba08]
mov r12, rax
test rdx, rdx
jne 0x1401abbdb
mov rcx, qword gs:[0x60]
xor edi, edi
mov esi, 0x9bc5a608
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r14, qword [rcx]
mov r9, r14
movups xmm0, xmmword [r9 + 0x58]
mov r13d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x1401abafb
psrldq xmm0, 8
mov edx, r13d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r8, [rcx + rax*2]
jmp 0x1401abaee
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401abadf
cmp edx, edi
jne 0x1401abbbc
mov r10, qword [r9 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x1401abbbc
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x1401abbbc
mov r15d, dword [r11 + 0x20]
dec ebx
lea rdx, [r10 + rbx*4]
mov r8d, dword [rdx + r15]
mov edx, r13d
add r8, r10
jmp 0x1401abb4b
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1401abb40
cmp edx, esi
je 0x1401abb5f
test ebx, ebx
jne 0x1401abb2e
jmp 0x1401abbbc
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r9d, word [rdx + rbx*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov edx, dword [rdx + r9*4]
add rdx, r10
cmp rdx, r11
jbe 0x1401abbd4
lea rcx, [rax + r11]
cmp rdx, rcx
jae 0x1401abbd4
mov edi, r13d
mov esi, r13d
jmp 0x1401abb9d
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1401abb8f
jmp 0x1401abbb0
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x1401abba5
mov r9, qword [r14]
mov rax, qword [r9]
mov r9, rax
cmp rax, r14
je 0x1401abbd2
cmp qword [rax + 0x30], 0
jne 0x1401abaaf
xor edx, edx
mov qword [0x1404fba08], rdx
call rdx
xor r9d, r9d
mov rcx, rax
xor r8d, r8d
lea edx, [r9 + 0x11]
call r12
test eax, eax
je 0x1401abbfd
mov qword [0], 1
lea r11, [rsp + 0x70]
xor al, al
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret