Function at 0x1800bb0e0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
movdqa xmm0, xmmword [0x1801b2700]
lea rcx, [rbp - 0x29]
movdqa xmm1, xmmword [0x1801b25b0]
xor ebx, ebx
movups xmmword [rbp + 0x27], xmm0
mov dword [rbp - 9], 0x130b1a1b
mov r9d, reloc.WLDAP32.dll_Ordinal_41
mov dword [rbp - 5], 0x186f0b69
xor r8d, r8d
movsd xmm0, qword [rbp - 9]
mov edx, r9d
movsd qword [rbp + 0x47], xmm0
movups xmmword [rbp + 0x37], xmm1
mov byte [rbp + 0x4f], Ordinal_46
mov qword [rbp - 0x29], rbx
mov qword [rbp - 0x19], rbx
mov qword [rbp - 0x11], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x20], bl
call fcn.180015ec0
mov ecx, ebx
mov qword [rsp + 0xc8], rdi
cmp rbx, 0x29
jae 0x1800bb0cb
movzx edx, byte [rbp + rcx + 0x27]
xor dl, 0x2b
cmp qword [rbp - 0x19], rcx
jbe 0x1800bb0c5
cmp qword [rbp - 0x11], 0x10
lea rax, [rbp - 0x29]
cmovae rax, qword [rbp - 0x29]
mov byte [rcx + rax], dl
inc rcx
cmp rcx, 0x29
jl 0x1800baeef
cmp qword [rbp - 0x11], 0x10
lea rdi, [rbp - 0x29]
movdqa xmm0, xmmword [0x1801b3770]
lea rcx, [rbp + 7]
cmovae rdi, qword [rbp - 0x29]
mov r9d, reloc.WS2_32.dll_socket
xor r8d, r8d
mov dword [rbp + 0x37], 0x5f155e4d
mov edx, r9d
mov word [rbp + 0x3b], 0x5757
movdqu xmmword [rbp + 0x27], xmm0
mov byte [rbp + 0x3d], Ordinal_60
mov qword [rbp + 7], rbx
mov qword [rbp + 0x17], rbx
mov qword [rbp + 0x1f], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x20], bl
call fcn.180015ec0
mov rax, rbx
cmp rax, 0x17
jae 0x1800bb0d1
movzx r8d, byte [rbp + rax + 0x27]
xor r8b, 0x3b
cmp qword [rbp + 0x17], rax
jbe 0x1800bb0c5
cmp qword [rbp + 0x1f], 0x10
lea rcx, [rbp + 7]
cmovae rcx, qword [rbp + 7]
mov byte [rcx + rax], r8b
inc rax
cmp rax, 0x17
jl 0x1800baf7d
cmp qword [rbp + 0x1f], 0x10
lea rcx, [rbp + 7]
mov rdx, rdi
cmovae rcx, qword [rbp + 7]
call fcn.180054aa0
lea rcx, [rbp + 7]
mov rdi, rax
call fcn.18000d1d0
lea rcx, [rbp - 0x29]
call fcn.18000d1d0
test rdi, rdi
je 0x1800bb0ac
movsxd rax, dword [rdi + 3]
add rax, 7
add rax, rdi
je 0x1800bb0ac
mov rax, qword [rax]
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xd0], r14
lea r14, [0x1801eafa0]
mov rsi, qword [rax]
mov rdi, qword [rsi]
mov qword [0x1801eaf98], rdi
lea rax, [rdi + 0xfff]
cmp r14, rax
ja 0x1800bb056
lea rax, [0x1801ebf9f]
cmp rax, rdi
jb 0x1800bb056
nop word [rax + rax]
movzx eax, byte [rbx + rdi]
mov byte [rbx + r14], al
inc rbx
cmp rbx, 0x1000
jb 0x1800bb040
jmp 0x1800bb067
mov r8d, 0x1000
mov rdx, rdi
mov rcx, r14
call fcn.180147b70
mov rax, qword [rdi + 0x40]
mov qword [0x1801eaee8], rax
mov rax, qword [rdi + 0x68]
mov qword [0x1801eaf50], rax
lea rax, [0x1800b1140]
mov qword [0x1801eafe0], rax
lea rax, [0x1800b0e70]
mov qword [0x1801eb008], rax
mov qword [rsi], r14
mov r14, qword [rsp + 0xd0]
mov rsi, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0xd8]
add rsp, 0xb0
pop rbp
ret
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3
call fcn.1800c1b00
int3
mov rax, rsp
push rbx
sub rsp, 0x70
movdqa xmm0, xmmword [0x1801b3f00]
lea rcx, [rax - 0x30]
xor ebx, ebx
mov dword [rax - 0x38], 0x62286370
mov r9d, reloc.WS2_32.dll_socket
mov word [rax - 0x34], 0x6a6a
mov edx, r9d
mov byte [rax - 0x32], 6
xor r8d, r8d
mov qword [rax - 0x30], rbx
movdqu xmmword [rax - 0x48], xmm0
mov qword [rax - 0x20], rbx
mov qword [rax - 0x18], 0xf
mov byte [rax - 0x58], bl
call fcn.180015ec0
cmp rbx, 0x17
jae 0x1800bb275
movzx ecx, byte [rsp + rbx + 0x30]
xor cl, 6
cmp qword [rsp + 0x58], rbx
jbe 0x1800bb26f
cmp qword [rsp + 0x60], 0x10
lea rax, [rsp + 0x48]
cmovae rax, qword [rsp + 0x48]
mov byte [rax + rbx], cl
inc rbx
cmp rbx, 0x17
jl 0x1800bb134
mov rax, qword gs:[0x60]
cmp qword [rsp + 0x60], 0x10
mov qword [rsp + 0x80], rsi
lea rsi, [rsp + 0x48]
cmovae rsi, qword [rsp + 0x48]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x88], rdi
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1800bb217
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1800bb217
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1800bb212
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x1800bb1f0
cmp r8d, 0xe463da3c
je 0x1800bb21c
test r9d, r9d
jne 0x1800bb1d0
mov rax, qword [rax]
jmp 0x1800bb1a0
mov edx, dword [rbx + 0x24]
mov rcx, rsi
add rdx, r10
movzx r8d, word [rdx + r9*2]
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov eax, dword [rdx + r8*4]
add rax, r10
call rax
lea rcx, [rsp + 0x48]
mov rbx, rax
call fcn.18000d1d0
mov rdi, qword [rsp + 0x88]
mov rsi, qword [rsp + 0x80]
test rbx, rbx
je 0x1800bb265
mov dword [reloc.WS2_32.dll_accept], 1
add rsp, 0x70
pop rbx
jmp 0x1800bae70
call fcn.1800c1f60
int3
call fcn.1800c1b00
int3