Function at 0x140035470
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
movaps xmmword [rsp + 0x70], xmm6
movzx r14d, cl
movaps xmm6, xmm1
mov ecx, Ordinal_41
movss xmm1, dword [0x14012db64]
mov r15, r8
call fcn.14004d450
xor r13d, r13d
mov r12d, eax
cmp dword [0x140158108], r13d
je 0x1400356d3
test r14b, r14b
je 0x1400356d3
mov cl, 0x47
mov byte [rbp - 0x60], 0x64
movzx edx, cl
mov al, reloc.WS2_32.dll_recv
xor dl, 0x64
xor cl, 0x64
mov r8b, 5
mov byte [rbp - 0x5e], dl
mov r9b, 6
mov byte [rbp - 0x5f], cl
mov r10b, reloc.WS2_32.dll_socket
lea rcx, [rbp - 0x5f]
mov r11b, Ordinal_60
xor al, 0x64
xor r8b, 0x64
mov byte [rbp - 0x5d], al
xor r9b, 0x64
mov byte [rbp - 0x5c], r8b
xor r10b, 0x64
mov byte [rbp - 0x5b], r9b
xor r11b, 0x64
mov byte [rbp - 0x5a], r10b
mov bl, 0x54
mov byte [rbp - 0x59], r11b
xor edi, edi
xor bl, 0x64
xor edx, edx
mov byte [rbp - 0x58], bl
mov byte [rbp - 0x57], dil
call fcn.140082710
movups xmm0, xmmword [r15]
mov qword [rbp - 0x38], 1
lea edx, [rdi + 3]
xorps xmm1, xmm1
mov dword [rbp - 0x30], r13d
lea rcx, [rbp - 0x50]
movaps xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x50], xmm1
mov qword [rbp - 0x40], r13
call fcn.140011ec0
lea r8d, [r13 + 0xc]
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x38]
mov qword [rbp - 0x48], rax
mov rcx, rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x40], rbx
call sub.VCRUNTIME140.dll_memmove
mov al, Ordinal_32
mov qword [rbp - 0x48], rbx
mov r8b, 0x7e
mov byte [rbp - 0x60], 0x3f
movzx r11d, al
xor r8b, 0x3f
mov cl, 0x6d
mov byte [rbp - 0x5c], r8b
xor cl, 0x3f
mov dl, 0x7a
xor dl, 0x3f
mov byte [rbp - 0x5e], cl
mov r9b, 0x7c
mov byte [rbp - 0x5d], dl
xor r9b, 0x3f
lea rdx, [rbp - 0x50]
mov r10b, 0x77
mov byte [rbp - 0x5b], r9b
xor r11b, 0x3f
lea r9, [rbp - 0x20]
xor ebx, ebx
mov byte [rbp - 0x59], r11b
xor al, 0x3f
mov byte [rbp - 0x58], bl
xor r10b, 0x3f
mov byte [rbp - 0x5f], al
mov r8d, r12d
mov byte [rbp - 0x5a], r10b
lea rcx, [rbp - 0x5f]
call fcn.140012d50
movups xmm0, xmmword [r15]
mov dword [rbp - 0x38], r13d
mov qword [rbp - 0x34], 1
xorps xmm1, xmm1
movaps xmmword [rbp - 0x20], xmm0
lea edx, [rdi + 3]
mov qword [rbp - 0x40], r13
lea rcx, [rbp - 0x50]
movdqu xmmword [rbp - 0x50], xmm1
call fcn.140011ec0
lea r8d, [r13 + 0xc]
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x38]
mov qword [rbp - 0x48], rax
mov rcx, rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x40], rbx
call sub.VCRUNTIME140.dll_memmove
mov cl, 9
mov qword [rbp - 0x48], rbx
movzx r9d, cl
mov byte [rbp - 0x60], 0x4a
mov al, 0x6a
mov r8b, 3
xor r9b, 0x4a
movzx edi, al
xor cl, 0x4a
mov byte [rbp - 0x5b], r9b
xor r8b, 0x4a
mov byte [rbp - 0x5e], cl
mov dl, 6
mov byte [rbp - 0x5c], r8b
xor dl, 0x4a
lea r9, [rbp - 0x20]
mov r10b, 1
mov byte [rbp - 0x5d], dl
mov r11b, reloc.WS2_32.dll_ntohs
lea rdx, [rbp - 0x50]
xor al, 0x4a
lea rcx, [rbp - 0x5f]
xor r10b, 0x4a
mov byte [rbp - 0x5f], al
xor r11b, 0x4a
mov byte [rbp - 0x5a], r10b
mov bl, 0x18
mov byte [rbp - 0x59], r11b
xor esi, esi
xor bl, 0x4a
xor dil, 0x4a
mov byte [rbp - 0x58], bl
mov r8d, r12d
mov byte [rbp - 0x57], dil
mov byte [rbp - 0x56], sil
call fcn.140012d50
call fcn.1400885d0
cmp byte [0x140158ee4], sil
jne 0x1400356c8
cmp byte [0x140158ee5], sil
jne 0x140035aff
mov byte [0x140158ee4], 1
mov qword [0x140158f58], 1
cmp dword [0x14015810c], r13d
je 0x1400358f8
test r14b, r14b
je 0x1400358f8
mov al, 4
mov byte [rbp - 0x60], Ordinal_41
movzx ecx, al
mov dl, 0x53
xor cl, 0x27
xor dl, 0x27
mov r8b, 0x46
mov byte [rbp - 0x5e], cl
mov r9b, 0x45
mov byte [rbp - 0x5d], dl
mov r10b, 0x54
lea rcx, [rbp - 0x5f]
mov r11b, 0x78
xor al, 0x27
xor r8b, 0x27
mov byte [rbp - 0x5f], al
xor r9b, 0x27
mov byte [rbp - 0x5c], r8b
xor r10b, 0x27
mov byte [rbp - 0x5b], r9b
xor r11b, 0x27
mov byte [rbp - 0x5a], r10b
mov bl, reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp - 0x59], r11b
xor edi, edi
xor bl, 0x27
xor edx, edx
mov byte [rbp - 0x58], bl
mov byte [rbp - 0x57], dil
call fcn.140082710
movups xmm0, xmmword [r15]
mov qword [rbp - 0x38], 1
lea edx, [rdi + 3]
xorps xmm1, xmm1
mov dword [rbp - 0x30], r13d
lea rcx, [rbp - 0x50]
movaps xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x50], xmm1
mov qword [rbp - 0x40], r13
call fcn.140011ec0
lea r8d, [rdi + 0xc]
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x38]
mov qword [rbp - 0x48], rax
mov rcx, rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x40], rbx
call sub.VCRUNTIME140.dll_memmove
mov al, 0xb
mov qword [rbp - 0x48], rbx
movzx esi, al
mov byte [rbp - 0x60], Ordinal_45
xor al, 0x2b
mov byte [rbp - 0x55], r13b
mov cl, 0x7d
mov byte [rbp - 0x5f], al
xor cl, 0x2b
mov dl, WSAGetLastError
xor dl, 0x2b
mov byte [rbp - 0x5e], cl
mov r8b, 0x67
mov byte [rbp - 0x5d], dl
xor r8b, 0x2b
mov r9b, 0x64
xor r9b, 0x2b
mov byte [rbp - 0x5c], r8b
mov r10b, 0x68
mov byte [rbp - 0x5b], r9b
xor r10b, 0x2b
mov r11b, 0x62
xor r11b, 0x2b
mov byte [rbp - 0x5a], r10b
mov bl, 0x7f
mov byte [rbp - 0x59], r11b
xor bl, 0x2b
mov dil, WSAStartup
xor dil, 0x2b
mov byte [rbp - 0x58], bl
xor sil, 0x2b
mov byte [rbp - 0x57], dil
mov byte [rbp - 0x56], sil
lea r9, [rbp - 0x20]
mov r8d, r12d
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x5f]
call fcn.140012d50
movups xmm0, xmmword [r15]
mov dword [rbp - 0x38], r13d
mov edx, 3
xorps xmm1, xmm1
mov qword [rbp - 0x34], 1
lea rcx, [rbp - 0x50]
movaps xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x50], xmm1
mov qword [rbp - 0x40], r13
call fcn.140011ec0
mov r8d, listen
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x38]
mov qword [rbp - 0x48], rax
mov rcx, rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x40], rbx
call sub.VCRUNTIME140.dll_memmove
mov r8b, 0x5b
mov qword [rbp - 0x48], rbx
movzx r9d, r8b
mov byte [rbp - 0x60], reloc.WLDAP32.dll_Ordinal_30
mov al, 0x3e
xor r9b, 0x1e
movzx r11d, al
mov byte [rbp - 0x5b], r9b
xor r8b, 0x1e
lea r9, [rbp - 0x20]
mov cl, 0x4d
mov byte [rbp - 0x5c], r8b
xor cl, 0x1e
mov dl, Ordinal_79
xor dl, 0x1e
mov byte [rbp - 0x5e], cl
mov r10b, 0x5a
mov byte [rbp - 0x5d], dl
xor al, 0x1e
lea rdx, [rbp - 0x50]
xor r10b, 0x1e
mov byte [rbp - 0x5f], al
xor r11b, 0x1e
mov byte [rbp - 0x5a], r10b
xor ebx, ebx
mov byte [rbp - 0x59], r11b
mov r8d, r12d
mov byte [rbp - 0x58], bl
lea rcx, [rbp - 0x5f]
call fcn.140012d50
call fcn.1400885d0
cmp byte [0x140158ef4], bl
jne 0x1400358ed
cmp byte [0x140158ef5], bl
jne 0x140035b15
mov byte [0x140158ef4], 1
mov qword [0x140158f68], 1
cmp dword [reloc.WS2_32.dll_accept], 0
je 0x140035b42
test r14b, r14b
je 0x140035b42
xor cl, cl
mov byte [rbp - 0x60], reloc.WLDAP32.dll_Ordinal_35
mov dl, 0x57
xor cl, 0x23
xor dl, 0x23
mov byte [rbp - 0x5e], cl
xor al, al
mov byte [rbp - 0x5d], dl
mov r8b, 0x42
lea rcx, [rbp - 0x5f]
mov r9b, 0x41
mov r10b, 0x50
mov r11b, 0x7c
xor al, 0x23
xor r8b, 0x23
mov byte [rbp - 0x5f], al
xor r9b, 0x23
mov byte [rbp - 0x5c], r8b
xor r10b, 0x23
mov byte [rbp - 0x5b], r9b
xor r11b, 0x23
mov byte [rbp - 0x5a], r10b
mov bl, reloc.WS2_32.dll_recvfrom
mov byte [rbp - 0x59], r11b
xor edi, edi
xor bl, 0x23
xor edx, edx
mov byte [rbp - 0x58], bl
mov byte [rbp - 0x57], dil
call fcn.140082710
movups xmm0, xmmword [r15]
mov qword [rbp - 0x38], 1
lea edx, [rdi + 3]
xorps xmm1, xmm1
mov dword [rbp - 0x30], r13d
lea rcx, [rbp - 0x50]
movaps xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x50], xmm1
mov qword [rbp - 0x40], r13
call fcn.140011ec0
lea r8d, [rdi + 0xc]
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x38]
mov qword [rbp - 0x48], rax
mov rcx, rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x40], rbx
call sub.VCRUNTIME140.dll_memmove
mov dl, 0x56
mov qword [rbp - 0x48], rbx
movzx r8d, dl
mov byte [rbp - 0x60], reloc.WS2_32.dll_setsockopt
mov al, 0x35
mov byte [rbp - 0x57], dil
xor r8b, 0x15
movzx ebx, al
xor dl, 0x15
mov byte [rbp - 0x5c], r8b
mov cl, 0x54
mov byte [rbp - 0x5d], dl
xor cl, 0x15
lea rdx, [rbp - 0x50]
mov r9b, 0x50
mov byte [rbp - 0x5e], cl
xor r9b, 0x15
lea rcx, [rbp - 0x5f]
mov r10b, 0x5b
mov byte [rbp - 0x5b], r9b
mov r11b, 0x41
lea r9, [rbp - 0x20]
xor al, 0x15
xor r10b, 0x15
xor r11b, 0x15
mov byte [rbp - 0x5f], al
xor bl, 0x15
mov byte [rbp - 0x5a], r10b
mov r8d, r12d
mov byte [rbp - 0x59], r11b
mov byte [rbp - 0x58], bl
call fcn.140012d50
mov dword [rbp - 0x38], r13d
movups xmm0, xmmword [r15]
mov qword [rbp - 0x34], 1
lea edx, [rdi + 3]
xorps xmm1, xmm1
mov qword [rbp - 0x40], r13
lea rcx, [rbp - 0x50]
movaps xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x50], xmm1
call fcn.140011ec0
lea r8d, [rdi + 0xc]
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x38]
mov qword [rbp - 0x48], rax
mov rcx, rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x40], rbx
call sub.VCRUNTIME140.dll_memmove
mov dl, 0x59
mov qword [rbp - 0x48], rbx
movzx r9d, dl
mov byte [rbp - 0x60], reloc.WLDAP32.dll_Ordinal_22
mov al, 0x36
mov r8b, 0x5a
xor r9b, 0x16
movzx r11d, al
xor dl, 0x16
mov byte [rbp - 0x5b], r9b
xor r8b, 0x16
mov byte [rbp - 0x5d], dl
mov cl, 0x55
mov byte [rbp - 0x5c], r8b
xor cl, 0x16
lea r9, [rbp - 0x20]
mov r10b, 0x44
mov byte [rbp - 0x5e], cl
xor al, 0x16
lea rdx, [rbp - 0x50]
xor r10b, 0x16
mov byte [rbp - 0x5f], al
xor r11b, 0x16
mov byte [rbp - 0x5a], r10b
xor ebx, ebx
mov byte [rbp - 0x59], r11b
mov r8d, r12d
mov byte [rbp - 0x58], bl
lea rcx, [rbp - 0x5f]
call fcn.140012d50
call fcn.1400885d0
movss xmm0, dword [0x14012dbd4]
comiss xmm0, xmm6
jb 0x140035b2b
mov qword [0x140158f78], 1
mov dword [0x140158f80], r13d
jmp 0x140035b42
mov dword [0x140158f58], r13d
mov dword [0x140158f5c], 1
jmp 0x1400356d3
mov dword [0x140158f68], r13d
mov dword [0x140158f6c], 1
jmp 0x1400358f8
comiss xmm6, xmm0
jbe 0x140035b42
mov dword [0x140158f78], r13d
mov qword [0x140158f7c], 1
cmp dword [0x140158114], 0
movaps xmm6, xmmword [rsp + 0x70]
je 0x140035d73
test r14b, r14b
je 0x140035d73
mov al, reloc.WS2_32.dll_send
mov byte [rbp - 0x60], Ordinal_50
movzx ecx, al
mov dl, 0x44
xor cl, 0x30
xor dl, 0x30
mov r8b, 0x51
mov byte [rbp - 0x5e], cl
mov r9b, 0x52
mov byte [rbp - 0x5d], dl
mov r10b, 0x43
lea rcx, [rbp - 0x5f]
mov r11b, reloc.WS2_32.dll_WSAGetLastError
xor al, 0x30
xor r8b, 0x30
mov byte [rbp - 0x5f], al
xor r9b, 0x30
mov byte [rbp - 0x5c], r8b
xor r10b, 0x30
mov byte [rbp - 0x5b], r9b
xor r11b, 0x30
mov byte [rbp - 0x5a], r10b
mov bl, 3
mov byte [rbp - 0x59], r11b
xor edi, edi
xor bl, 0x30
xor edx, edx
mov byte [rbp - 0x58], bl
mov byte [rbp - 0x57], dil
call fcn.140082710
movups xmm0, xmmword [r15]
mov qword [rbp - 0x38], 1
lea edx, [rdi + 3]
xorps xmm1, xmm1
mov dword [rbp - 0x30], r13d
lea rcx, [rbp - 0x50]
movaps xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x50], xmm1
mov qword [rbp - 0x40], r13
call fcn.140011ec0
lea r8d, [rdi + 0xc]
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x38]
mov qword [rbp - 0x48], rax
mov rcx, rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x40], rbx
call sub.VCRUNTIME140.dll_memmove
mov al, 0x5a
mov qword [rbp - 0x48], rbx
mov r8b, 0x34
mov byte [rbp - 0x60], 0x7a
movzx ebx, al
mov byte [rbp - 0x57], dil
xor r8b, 0x7a
mov cl, reloc.WS2_32.dll_gethostname
xor cl, 0x7a
mov byte [rbp - 0x5c], r8b
mov dl, 0x35
mov byte [rbp - 0x5e], cl
xor dl, 0x7a
lea rcx, [rbp - 0x5f]
mov r9b, reloc.WLDAP32.dll_Ordinal_60
mov byte [rbp - 0x5d], dl
xor r9b, 0x7a
lea rdx, [rbp - 0x50]
mov r10b, 0x33
mov byte [rbp - 0x5b], r9b
mov r11b, 0x3d
lea r9, [rbp - 0x20]
xor bl, 0x7a
xor al, 0x7a
xor r10b, 0x7a
mov byte [rbp - 0x58], bl
xor r11b, 0x7a
mov byte [rbp - 0x5f], al
mov r8d, r12d
mov byte [rbp - 0x5a], r10b
mov byte [rbp - 0x59], r11b
call fcn.140012d50
mov dword [rbp - 0x38], r13d
movups xmm0, xmmword [r15]
mov qword [rbp - 0x34], 1
lea edx, [rdi + 3]
xorps xmm1, xmm1
mov qword [rbp - 0x40], r13
lea rcx, [rbp - 0x50]
movaps xmmword [rbp - 0x20], xmm0
movdqu xmmword [rbp - 0x50], xmm1
call fcn.140011ec0
lea r8d, [rdi + 0xc]
mov qword [rbp - 0x50], rax
lea rdx, [rbp - 0x38]
mov qword [rbp - 0x48], rax
mov rcx, rax
lea rbx, [rax + 0xc]
mov qword [rbp - 0x40], rbx
call sub.VCRUNTIME140.dll_memmove
mov al, 0x7e
mov qword [rbp - 0x48], rbx
mov r8b, 0xa
mov byte [rbp - 0x60], 0x5e
movzx edi, al
xor r8b, 0x5e
mov cl, reloc.WLDAP32.dll_Ordinal_22
mov byte [rbp - 0x5c], r8b
xor cl, 0x5e
mov dl, reloc.WS2_32.dll_recvfrom
xor dl, 0x5e
mov byte [rbp - 0x5e], cl
mov r9b, reloc.WS2_32.dll_setsockopt
mov byte [rbp - 0x5d], dl
xor r9b, 0x5e
lea rdx, [rbp - 0x50]
mov r10b, reloc.WLDAP32.dll_Ordinal_27
mov byte [rbp - 0x5b], r9b
mov r11b, 7
lea r9, [rbp - 0x20]
xor al, 0x5e
lea rcx, [rbp - 0x5f]
xor r10b, 0x5e
mov byte [rbp - 0x5f], al
xor r11b, 0x5e
mov byte [rbp - 0x5a], r10b
mov bl, reloc.WS2_32.dll_listen
mov byte [rbp - 0x59], r11b
xor dil, 0x5e
xor esi, esi
xor bl, 0x5e
mov byte [rbp - 0x57], dil
mov r8d, r12d
mov byte [rbp - 0x58], bl
mov byte [rbp - 0x56], sil
call fcn.140012d50
call fcn.1400885d0
cmp byte [0x140158f14], sil
jne 0x140035d61
cmp byte [0x140158f15], sil
jne 0x140035da7
cmp byte [0x140158f16], sil
jne 0x140035d94
mov byte [0x140158f14], 1
mov dword [0x140158f90], r13d
mov qword [0x140158f88], 1
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov qword [0x140158f88], rsi
mov dword [0x140158f90], 1
jmp 0x140035d73
mov dword [0x140158f88], r13d
mov qword [0x140158f8c], 1
jmp 0x140035d73