Function at 0x1400b3350
Capabilities:
Access peb ldr_data
Get number of processors
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xc8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x40], 0xfffffffffffffffe
test r8, r8
je 0x1400b3c75
mov edx, dword [0x1406cf6a8]
mov eax, dword [0x1406cf6ac]
lea edi, [rdx - 1]
imul edi, edx
cmp eax, 0xa
jl 0x1400b33a2
mov edx, edi
and edx, 1
je 0x1400b33a2
nop word [rax + rax]
jmp 0x1400b33a0
mov rdx, qword gs:[0x60]
mov rdx, qword [rdx + 0x18]
mov rsi, qword [rdx + 0x10]
cmp dword [0x1406ce2d4], 0xa
jl 0x1400b33d2
mov edx, dword [0x1406ce2d0]
lea ebx, [rdx - 1]
imul ebx, edx
and ebx, 1
je 0x1400b33d2
nop dword [rax]
jmp 0x1400b33d0
cmp eax, 0xa
setl bl
test dil, 1
sete dl
mov eax, dword [0x1406ce2e0]
lea edi, [rax - 1]
imul edi, eax
test dil, 1
sete r14b
cmp dword [0x1406ce2e4], 0xa
setl r11b
mov eax, dword [0x1406ce2ec]
lea edi, [rax - 1]
imul edi, eax
test dil, 1
sete r15b
cmp dword [0x1406ce2e8], 0xa
setl byte [rbp + 0x28]
mov eax, dword [0x1406ce2f0]
lea edi, [rax - 1]
imul edi, eax
test dil, 1
sete r10b
cmp dword [0x1406ce2f4], 0xa
setl byte [rbp + 0x20]
cmp dword [0x1406ce6e4], 0xa
jl 0x1400b3462
mov eax, dword [0x1406ce6e0]
lea edi, [rax - 1]
imul edi, eax
and edi, 1
je 0x1400b3462
nop word cs:[rax + rax]
jmp 0x1400b3460
mov eax, ebx
and al, dl
xor al, 1
xor bl, dl
mov edx, ebx
xor dl, 1
or dl, al
cmp dl, 1
jne 0x1400b3482
xor bl, al
je 0x1400b3482
nop word [rax + rax]
jmp 0x1400b3480
mov qword [rbp - 0x60], r8
mov qword [rbp - 0x58], r9
mov qword [rbp + 0x30], rcx
or r11b, r14b
or byte [rbp + 0x28], r15b
or byte [rbp + 0x20], r10b
mov r14, qword [rsi + 0x30]
mov rax, rsi
mov qword [rbp], rsi
mov qword [rbp - 8], rax
movsxd rax, dword [r14 + 0x3c]
mov r15d, dword [rax + r14 + 0x88]
test r15, r15
je 0x1400b3685
mov ecx, dword [r14 + r15 + 0x18]
lea rax, [r14 + 1]
mov qword [rbp + 0x18], rax
mov rax, rcx
jmp 0x1400b34e6
mov r12d, 0x811c9dc5
mov rcx, rax
cmp r12d, 0xbd28aabc
je 0x1400b36d2
sub rax, 1
jb 0x1400b3685
test r11b, r11b
je 0x1400b36c0
mov edx, 0xffffffff
add rcx, rdx
mov ebx, dword [r14 + r15 + 0x20]
add rbx, r14
mov r8d, ecx
mov r9d, dword [rbx + r8*4]
mov cl, byte [r14 + r9]
test cl, cl
je 0x1400b34d0
add r9, qword [rbp + 0x18]
mov r12d, 0x811c9dc5
jmp 0x1400b35ef
mov ebx, r10d
or ebx, 0x1c6c88fb
mov r13d, r10d
not r13d
or r13d, 0xe3937704
mov edx, ebx
and edx, 0x4a121404
mov ecx, r10d
and ecx, 0x48801a
mov esi, r13d
and esi, 0x1c121044
add esi, ecx
add esi, 0x80006801
mov edi, r10d
and edi, 0x2408a1
mov ecx, r10d
and ecx, 0xa1816300
or ecx, edx
xor ecx, edi
xor ecx, esi
mov edx, r10d
and edx, 0x2103304
and ebx, 0xe9c7cc99
or ebx, edx
mov edx, r10d
and edx, 0x14280062
and r13d, 0xe9c7cc99
add edx, r13d
add edx, 0x2103304
xor edx, ebx
xor r10d, 0x1c6c88fb
or r10d, edx
mov edx, ecx
xor edx, 0x887ef0be
xor ecx, r10d
xor ecx, 0x887ef0be
or edx, r10d
not edx
or edx, ecx
xor r12d, edx
xor r12d, 0xe3937704
imul r12d, r12d, 0x1000193
movzx ecx, byte [r9]
add r9, 1
test cl, cl
je 0x1400b34d6
movsx r10d, cl
lea ecx, [r10 - 0x41]
cmp cl, 0x19
ja 0x1400b3530
mov ecx, r10d
not ecx
mov ebx, r10d
and ebx, 0x89c1ac7c
mov esi, r10d
or esi, 0x89c1ac7c
mov edi, r10d
xor edi, 0x1008070
and edi, ebx
not ebx
mov edx, esi
and edx, 0x253ac2f1
and ecx, 0x52041102
or ecx, edx
xor esi, ebx
and ebx, 0x253ac2f1
or edi, ebx
xor edi, ecx
mov ecx, r10d
xor ecx, 0x89c1ac7c
or ecx, esi
mov edx, ecx
xor edx, edi
not edx
not ecx
and ecx, edi
or ecx, edx
and r10d, 0x20
mov edx, ecx
not edx
and edx, r10d
mov esi, ecx
and esi, 0x2e4f563d
xor esi, r10d
and ecx, 0xd1b0a9c2
or ecx, esi
xor ecx, edx
xor ecx, 0x763e53a3
mov r10d, ecx
jmp 0x1400b3530
cmp byte [rbp + 0x20], 0
je 0x1400b36d0
mov rax, qword [rbp - 8]
mov rax, qword [rax]
mov rsi, qword [rbp]
cmp rax, rsi
je 0x1400b36a8
mov r14, qword [rax + 0x30]
test r14, r14
jne 0x1400b34a4
xor edx, edx
cmp dword [0x1406cf688], 0xa
jge 0x1400b36fc
jmp 0x1400b3722
jmp 0x1400b36c0
jmp 0x1400b36d0
cmp byte [rbp + 0x28], 0
je 0x1400b3720
mov eax, dword [r14 + r15 + 0x1c]
mov ecx, dword [r14 + r15 + 0x24]
add rax, r14
add rcx, r14
movzx ecx, word [rcx + r8*2]
mov edx, dword [rax + rcx*4]
add rdx, r14
cmp dword [0x1406cf688], 0xa
jl 0x1400b3722
mov eax, dword [0x1406cf68c]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400b3722
nop dword [rax]
jmp 0x1400b3710
jmp 0x1400b3720
mov eax, dword [0x1406cfb78]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406cfb7c], 0xa
setl al
or al, cl
test al, al
je 0x1400b3740
mov eax, dword [0x1406cf700]
cmp dword [0x1406cf704], 0xa
mov byte [rbp - 0x40], WSASetLastError
jl 0x1400b3772
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400b3772
nop word cs:[rax + rax]
nop dword [rax]
jmp 0x1400b3770
movabs rax, 0x6c6c642e6c6c6474
mov qword [rbp - 0x3f], rax
mov byte [rbp - 0x37], 0
lea rcx, [rbp - 0x40]
call rdx
test rax, rax
je 0x1400b3c75
mov ebx, dword [0x1406cf810]
mov edx, dword [0x1406cf814]
lea ecx, [rbx - 1]
imul ecx, ebx
and ecx, 1
cmp edx, 0xa
jl 0x1400b37c2
test ecx, ecx
je 0x1400b37c2
nop word cs:[rax + rax]
nop dword [rax + rax]
jmp 0x1400b37c0
cmp edx, 0xa
jl 0x1400b37d2
test ecx, ecx
je 0x1400b37d2
nop dword [rax + rax]
jmp 0x1400b37d0
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov r8, qword [rcx + 0x10]
cmp dword [0x1406ce2d4], 0xa
jl 0x1400b3802
mov ecx, dword [0x1406ce2d0]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x1400b3802
nop dword [rax]
jmp 0x1400b3800
mov ecx, dword [0x1406ce2e0]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete r9b
cmp dword [0x1406ce2e4], 0xa
setl byte [rbp + 0x18]
mov edx, dword [0x1406ce2ec]
lea ebx, [rdx - 1]
imul ebx, edx
test bl, 1
sete r10b
cmp dword [0x1406ce2e8], 0xa
setl cl
mov ebx, dword [0x1406ce2f0]
lea edi, [rbx - 1]
imul edi, ebx
test dil, 1
sete bl
cmp dword [0x1406ce2f4], 0xa
setl dl
cmp dword [0x1406ce6e4], 0xa
jl 0x1400b3882
mov edi, dword [0x1406ce6e0]
lea esi, [rdi - 1]
imul esi, edi
and esi, 1
je 0x1400b3882
nop word cs:[rax + rax]
nop
jmp 0x1400b3880
or byte [rbp + 0x18], r9b
or cl, r10b
mov byte [rbp + 0x3f], cl
or dl, bl
mov byte [rbp - 8], dl
mov r12, qword [r8 + 0x30]
xor ecx, ecx
mov qword [rbp - 0x20], rcx
mov qword [rbp], r8
mov qword [rbp + 0x28], r8
movsxd rcx, dword [r12 + 0x3c]
mov r14d, dword [rcx + r12 + 0x88]
test r14, r14
je 0x1400b3a79
mov edx, dword [r12 + r14 + 0x18]
lea rcx, [r12 + 1]
mov qword [rbp + 0x20], rcx
mov r8, rdx
jmp 0x1400b38e0
mov ecx, 0x811c9dc5
mov rdx, r8
cmp ecx, 0xb8e4e945
je 0x1400b3aa4
sub r8, 1
jb 0x1400b3a79
cmp byte [rbp + 0x18], 0
je 0x1400b3aa0
mov ecx, 0xffffffff
add rdx, rcx
mov ecx, dword [r12 + r14 + 0x20]
add rcx, r12
mov r9d, edx
mov r10d, dword [rcx + r9*4]
mov dl, byte [r12 + r10]
test dl, dl
je 0x1400b38cc
add r10, qword [rbp + 0x20]
mov ecx, 0x811c9dc5
jmp 0x1400b39df
mov r11d, r15d
or r11d, 0x1c6c88fb
mov edx, r15d
not edx
or edx, 0xe3937704
mov esi, r11d
and esi, 0x4a121404
mov edi, r15d
and edi, 0x48801a
mov ebx, edx
and ebx, 0x1c121044
add edi, ebx
add edi, 0x80006801
mov r13d, r15d
and r13d, 0x2408a1
mov ebx, r15d
and ebx, 0xa1816300
or ebx, esi
xor ebx, r13d
xor ebx, edi
mov esi, r15d
and esi, 0x2103304
and r11d, 0xe9c7cc99
or r11d, esi
mov esi, r15d
and esi, 0x14280062
and edx, 0xe9c7cc99
add edx, esi
add edx, 0x2103304
xor edx, r11d
xor r15d, 0x1c6c88fb
or r15d, edx
mov edx, ebx
xor edx, 0x887ef0be
xor ebx, r15d
xor ebx, 0x887ef0be
or edx, r15d
not edx
or edx, ebx
xor ecx, edx
xor ecx, 0xe3937704
imul ecx, ecx, 0x1000193
movzx edx, byte [r10]
add r10, 1
test dl, dl
je 0x1400b38d1
movsx r15d, dl
lea edx, [r15 - 0x41]
cmp dl, 0x19
ja 0x1400b3921
mov edx, r15d
not edx
mov ebx, r15d
and ebx, 0x89c1ac7c
mov r11d, r15d
or r11d, 0x89c1ac7c
mov esi, r15d
xor esi, 0x1008070
and esi, ebx
not ebx
mov edi, r11d
and edi, 0x253ac2f1
and edx, 0x52041102
or edx, edi
xor r11d, ebx
and ebx, 0x253ac2f1
or esi, ebx
xor esi, edx
mov edx, r15d
xor edx, 0x89c1ac7c
or edx, r11d
mov ebx, edx
xor ebx, esi
not ebx
not edx
and edx, esi
or edx, ebx
and r15d, 0x20
mov ebx, edx
not ebx
and ebx, r15d
mov edi, edx
and edi, 0x2e4f563d
xor edi, r15d
and edx, 0xd1b0a9c2
or edx, edi
xor edx, ebx
xor edx, 0x763e53a3
mov r15d, edx
jmp 0x1400b3921
cmp byte [rbp - 8], 0
je 0x1400b3aa2
mov rcx, qword [rbp + 0x28]
mov rcx, qword [rcx]
cmp rcx, qword [rbp]
je 0x1400b3ac9
mov qword [rbp + 0x28], rcx
mov r12, qword [rcx + 0x30]
test r12, r12
jne 0x1400b38a3
jmp 0x1400b3ac9
jmp 0x1400b3aa0
jmp 0x1400b3aa2
cmp byte [rbp + 0x3f], 0
je 0x1400b3ae5
mov ecx, dword [r12 + r14 + 0x1c]
mov edx, dword [r12 + r14 + 0x24]
add rcx, r12
add rdx, r12
movzx edx, word [rdx + r9*2]
mov ecx, dword [rcx + rdx*4]
add rcx, r12
mov qword [rbp - 0x20], rcx
cmp dword [0x1406d006c], 0xa
jl 0x1400b3ae7
mov ecx, dword [0x1406d0068]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x1400b3ae7
jmp 0x1400b3ae3
jmp 0x1400b3ae5
mov ecx, dword [0x1406cfb78]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete dl
cmp dword [0x1406cfb7c], 0xa
setl cl
or cl, dl
test cl, cl
je 0x1400b3b05
mov ecx, dword [0x1406cf700]
cmp dword [0x1406cf704], 0xa
mov byte [rbp - 0x40], Ordinal_79
jl 0x1400b3b29
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x1400b3b29
jmp 0x1400b3b27
movabs rsi, 0x6d6f744164644174
mov qword [rbp - 0x3f], rsi
mov byte [rbp - 0x37], 0
lea rdx, [rbp - 0x40]
mov rcx, rax
call qword [rbp - 0x20]
test rax, rax
je 0x1400b3c75
mov rdi, rax
mov dword [rbp - 0x48], 0xe0ff0000
mov qword [rbp - 0x50], 0xb848
mov rax, qword [rbp - 0x60]
mov qword [rbp - 0x4e], rax
mov eax, dword [0x1406d04d0]
mov ecx, dword [0x1406da6c8]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400b3c8b
mov rbx, qword [0x1406d04c8]
test rbx, rbx
je 0x1400b3c75
lea rdx, [rbp + 0xc]
mov r9d, ntohs
mov rcx, qword [rbp + 0x30]
mov r8, rbx
call fcn.1400a9480
cmp dword [0x1406ce3bc], 0xa
jl 0x1400b3c17
mov ecx, dword [0x1406ce3b8]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x1400b3c17
lea r15, [rbp + 0xc]
mov rsi, qword [rbp + 0x30]
mov r9d, ntohs
mov rcx, rsi
mov rdx, r15
mov r8, rbx
call fcn.1400a9480
mov r9d, ntohs
mov rcx, rsi
mov rdx, r15
mov r8, rbx
call fcn.1400a9480
cmp dword [0x1406ce3bc], 0xa
jl 0x1400b3c17
mov ecx, dword [0x1406ce3b8]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
jne 0x1400b3bd5
test al, al
je 0x1400b3c75
cmp byte [rbp + 0xc], 0x48
jne 0x1400b3c33
cmp byte [rbp + 0xd], 0xb8
jne 0x1400b3c33
cmp byte [rbp + 0x16], 0xff
jne 0x1400b3c33
cmp byte [rbp + 0x17], 0xe0
je 0x1400b3c75
mov rdx, qword [0x1406d04c8]
lea r8, [rbp - 0x50]
mov rcx, qword [rbp + 0x30]
mov r9d, ntohs
call fcn.1400a98c0
test al, al
je 0x1400b3c75
mov rcx, qword [rbp - 0x58]
call rdi
mov rdx, qword [0x1406d04c8]
lea r8, [rbp + 0xc]
mov rcx, qword [rbp + 0x30]
mov r9d, ntohs
call fcn.1400a98c0
mov al, 1
jmp 0x1400b3c77
xor eax, eax
add rsp, 0xc8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rcx, [0x1406d04d0]
call fcn.1401f8674
cmp dword [0x1406d04d0], 0xffffffff
jne 0x1400b3b8d
mov eax, dword [0x1406cfb78]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406cfb7c], 0xa
setl al
or al, cl
test al, al
je 0x1400b3cc2
mov eax, dword [0x1406cf700]
cmp dword [0x1406cf704], 0xa
mov byte [rbp - 0x18], Ordinal_79
jl 0x1400b3ce6
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x1400b3ce6
jmp 0x1400b3ce4
mov qword [rbp - 0x17], rsi
mov byte [rbp - 0xf], 0
lea rcx, [rbp - 0x40]
lea rdx, [rbp - 0x18]
call fcn.14009e520
mov rdx, qword [0x1406d01d0]
lea r8, [rbp - 0x40]
mov rcx, qword [rbp + 0x30]
call fcn.1400aa1c0
mov rbx, rax
lea rcx, [rbp - 0x40]
call fcn.14009eab0
mov qword [0x1406d04c8], rbx
lea rcx, [0x1406d04d0]
call fcn.1401f870c
jmp 0x1400b3b8d