Function at 0x14001d970
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x14015f738]
movzx r14d, cl
movaps xmmword [rsp + 0x70], xmm6
lea rcx, [rbp - 0x38]
movss xmm6, dword [0x14015fb20]
mov r15, r8
movups xmm0, xmmword [rax + 0x3c28]
movups xmmword [rbp - 0x38], xmm0
shufps xmm0, xmm0, 0xff
mulss xmm0, dword [rax + 0x38f0]
movss dword [rbp - 0x2c], xmm0
call fcn.1400414f0
xor r13d, r13d
mov r12d, eax
cmp dword [0x14015e218], r13d
je 0x14001dbe0
test r14b, r14b
je 0x14001dbe0
mov cl, 9
mov byte [rbp - 0x60], Ordinal_45
movzx edx, cl
mov al, 0x5e
xor cl, 0x2a
mov r8b, 0x4b
mov r9b, 0x48
mov byte [rbp - 0x5f], cl
mov r10b, 0x59
lea rcx, [rbp - 0x5f]
mov r11b, 0x75
xor dl, 0x2a
xor al, 0x2a
mov byte [rbp - 0x5e], dl
xor r8b, 0x2a
mov byte [rbp - 0x5d], al
xor r9b, 0x2a
mov byte [rbp - 0x5c], r8b
xor r10b, 0x2a
mov byte [rbp - 0x5b], r9b
xor r11b, 0x2a
mov byte [rbp - 0x5a], r10b
mov bl, reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp - 0x59], r11b
xor edi, edi
xor bl, 0x2a
mov byte [rbp - 0x58], bl
mov byte [rbp - 0x57], dil
call fcn.140091710
xorps xmm0, xmm0
mov qword [rbp - 0x38], 1
lea edx, [rdi + 3]
mov dword [rbp - 0x30], r13d
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x40], r13
movdqu xmmword [rbp - 0x50], xmm0
call fcn.140032e30
mov rbx, qword [rbp - 0x50]
lea r8d, [r13 + 0xc]
mov rcx, rbx
lea rdx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memmove
movaps xmm0, xmmword [r15]
lea rax, [rbx + 0xc]
mov qword [rbp - 0x48], rax
mov r8b, 0x44
mov al, 0x25
mov byte [rbp - 0x60], 5
movzx r11d, al
movaps xmmword [rbp - 0x20], xmm0
xor r8b, 5
mov cl, 0x57
xor cl, 5
mov byte [rbp - 0x5c], r8b
mov dl, 0x40
mov byte [rbp - 0x5e], cl
xor dl, 5
lea rcx, [rbp - 0x5f]
mov r9b, 0x46
mov byte [rbp - 0x5d], dl
xor r9b, 5
lea rdx, [rbp - 0x50]
mov r10b, Ordinal_79
mov byte [rbp - 0x5b], r9b
xor r11b, 5
lea r9, [rbp - 0x20]
xor ebx, ebx
mov byte [rbp - 0x59], r11b
xor al, 5
mov byte [rbp - 0x58], bl
xor r10b, 5
mov byte [rbp - 0x5f], al
mov r8d, r12d
mov byte [rbp - 0x5a], r10b
call fcn.14001d540
xorps xmm0, xmm0
mov dword [rbp - 0x38], r13d
movdqu xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x34], 1
lea edx, [rdi + 3]
mov qword [rbp - 0x40], r13
lea rcx, [rbp - 0x50]
call fcn.140032e30
mov rbx, qword [rbp - 0x50]
lea r8d, [r13 + 0xc]
mov rcx, rbx
lea rdx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memmove
movaps xmm0, xmmword [r15]
lea rax, [rbx + 0xc]
mov cl, reloc.WS2_32.dll_select
mov qword [rbp - 0x48], rax
movzx r9d, cl
mov byte [rbp - 0x60], 0x51
mov al, 0x71
movaps xmmword [rbp - 0x20], xmm0
mov r8b, Ordinal_26
movzx edi, al
xor cl, 0x51
xor r8b, 0x51
xor r9b, 0x51
mov byte [rbp - 0x5e], cl
mov dl, Ordinal_30
mov byte [rbp - 0x5c], r8b
xor dl, 0x51
mov byte [rbp - 0x5b], r9b
mov r10b, reloc.WLDAP32.dll_Ordinal_26
mov byte [rbp - 0x5d], dl
mov r11b, reloc.WS2_32.dll_sendto
lea r9, [rbp - 0x20]
xor al, 0x51
lea rdx, [rbp - 0x50]
xor r10b, 0x51
mov byte [rbp - 0x5f], al
xor r11b, 0x51
mov byte [rbp - 0x5a], r10b
mov bl, 3
mov byte [rbp - 0x59], r11b
xor dil, 0x51
lea rcx, [rbp - 0x5f]
xor esi, esi
mov byte [rbp - 0x57], dil
xor bl, 0x51
mov byte [rbp - 0x56], sil
mov r8d, r12d
mov byte [rbp - 0x58], bl
call fcn.14001d540
call fcn.140091c40
cmp byte [0x14015f55c], sil
jne 0x14001dbd5
cmp byte [0x14015f55d], sil
jne 0x14001dfe9
mov byte [0x14015f55c], 1
mov qword [0x14015f638], 1
cmp dword [0x14015e21c], r13d
je 0x14001ddf3
test r14b, r14b
je 0x14001ddf3
mov al, 0x7a
mov byte [rbp - 0x60], 0x59
movzx ecx, al
mov dl, reloc.WLDAP32.dll_Ordinal_45
xor cl, 0x59
mov r8b, gethostname
mov r9b, Ordinal_60
mov byte [rbp - 0x5e], cl
mov r10b, 0x2a
lea rcx, [rbp - 0x5f]
mov r11b, 6
xor al, 0x59
xor dl, 0x59
mov byte [rbp - 0x5f], al
xor r8b, 0x59
mov byte [rbp - 0x5d], dl
xor r9b, 0x59
mov byte [rbp - 0x5c], r8b
xor r10b, 0x59
mov byte [rbp - 0x5b], r9b
xor r11b, 0x59
mov byte [rbp - 0x5a], r10b
mov bl, 0x68
mov byte [rbp - 0x59], r11b
xor edi, edi
xor bl, 0x59
mov byte [rbp - 0x58], bl
mov byte [rbp - 0x57], dil
call fcn.140091710
xorps xmm0, xmm0
mov qword [rbp - 0x38], 1
lea edx, [rdi + 3]
mov dword [rbp - 0x30], r13d
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x40], r13
movdqu xmmword [rbp - 0x50], xmm0
call fcn.140032e30
mov rbx, qword [rbp - 0x50]
lea r8d, [rdi + 0xc]
mov rcx, rbx
lea rdx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memmove
movaps xmm0, xmmword [r15]
lea rax, [rbx + 0xc]
mov qword [rbp - 0x48], rax
mov dl, 0x56
xor dl, 0x13
mov byte [rbp - 0x60], reloc.WS2_32.dll_send
mov al, 0x33
mov byte [rbp - 0x5d], dl
mov r8b, 0x5f
mov byte [rbp - 0x55], r13b
xor r8b, 0x13
movaps xmmword [rbp - 0x20], xmm0
mov r9b, 0x5c
mov byte [rbp - 0x5c], r8b
xor r9b, 0x13
lea rdx, [rbp - 0x50]
movzx esi, al
mov byte [rbp - 0x5b], r9b
xor al, 0x13
lea r9, [rbp - 0x20]
mov cl, 0x45
mov byte [rbp - 0x5f], al
xor cl, 0x13
mov r10b, 0x50
xor r10b, 0x13
mov byte [rbp - 0x5e], cl
mov r11b, 0x5a
mov byte [rbp - 0x5a], r10b
xor r11b, 0x13
mov bl, 0x47
xor bl, 0x13
mov byte [rbp - 0x59], r11b
mov dil, 0x4a
mov byte [rbp - 0x58], bl
xor dil, 0x13
mov r8d, r12d
xor sil, 0x13
mov byte [rbp - 0x57], dil
mov byte [rbp - 0x56], sil
lea rcx, [rbp - 0x5f]
call fcn.14001d540
xorps xmm0, xmm0
mov dword [rbp - 0x38], r13d
mov edx, 3
mov qword [rbp - 0x34], 1
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x40], r13
movdqu xmmword [rbp - 0x50], xmm0
call fcn.140032e30
mov rbx, qword [rbp - 0x50]
lea rdx, [rbp - 0x38]
mov rcx, rbx
mov r8d, recvfrom
call sub.VCRUNTIME140.dll_memmove
movaps xmm0, xmmword [r15]
lea rax, [rbx + 0xc]
mov r8b, 9
mov qword [rbp - 0x48], rax
movzx r9d, r8b
mov byte [rbp - 0x60], Ordinal_79
mov al, 0x6c
movaps xmmword [rbp - 0x20], xmm0
movzx r11d, al
xor r8b, 0x4c
xor r9b, 0x4c
mov byte [rbp - 0x5c], r8b
mov cl, Ordinal_32
mov byte [rbp - 0x5b], r9b
xor cl, 0x4c
lea r9, [rbp - 0x20]
mov dl, 0x1c
mov byte [rbp - 0x5e], cl
xor dl, 0x4c
lea rcx, [rbp - 0x5f]
mov r10b, 8
mov byte [rbp - 0x5d], dl
xor r11b, 0x4c
lea rdx, [rbp - 0x50]
xor al, 0x4c
mov byte [rbp - 0x59], r11b
xor r10b, 0x4c
mov byte [rbp - 0x5f], al
xor ebx, ebx
mov byte [rbp - 0x5a], r10b
mov r8d, r12d
mov byte [rbp - 0x58], bl
call fcn.14001d540
call fcn.140091c40
cmp byte [0x14015f5bc], bl
jne 0x14001dde8
cmp byte [0x14015f5bd], bl
jne 0x14001dfff
mov byte [0x14015f5bc], 1
mov qword [0x14015f658], 1
cmp dword [reloc.WS2_32.dll_accept], 0
je 0x14001e02c
test r14b, r14b
je 0x14001e02c
mov al, 0x3f
mov byte [rbp - 0x60], Ordinal_30
movzx ecx, al
mov dl, 0x68
xor cl, 0x1c
mov r8b, 0x7d
mov r9b, 0x7e
mov byte [rbp - 0x5e], cl
mov r10b, reloc.WS2_32.dll_WSAGetLastError
lea rcx, [rbp - 0x5f]
mov r11b, 0x43
xor al, 0x1c
xor dl, 0x1c
mov byte [rbp - 0x5f], al
xor r8b, 0x1c
mov byte [rbp - 0x5d], dl
xor r9b, 0x1c
mov byte [rbp - 0x5c], r8b
xor r10b, 0x1c
mov byte [rbp - 0x5b], r9b
xor r11b, 0x1c
mov byte [rbp - 0x5a], r10b
mov bl, reloc.WLDAP32.dll_Ordinal_46
mov byte [rbp - 0x59], r11b
xor edi, edi
xor bl, 0x1c
mov byte [rbp - 0x58], bl
mov byte [rbp - 0x57], dil
call fcn.140091710
xorps xmm0, xmm0
mov qword [rbp - 0x38], 1
lea edx, [rdi + 3]
mov dword [rbp - 0x30], r13d
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x40], r13
movdqu xmmword [rbp - 0x50], xmm0
call fcn.140032e30
mov rbx, qword [rbp - 0x50]
lea r8d, [rdi + 0xc]
mov rcx, rbx
lea rdx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memmove
movaps xmm0, xmmword [r15]
lea rax, [rbx + 0xc]
mov dl, 0x68
mov qword [rbp - 0x48], rax
movzx r8d, dl
mov byte [rbp - 0x60], Ordinal_46
mov al, 0xb
mov byte [rbp - 0x57], dil
movzx ebx, al
movaps xmmword [rbp - 0x20], xmm0
xor dl, 0x2b
xor r8b, 0x2b
mov cl, 0x6a
mov byte [rbp - 0x5d], dl
xor cl, 0x2b
mov byte [rbp - 0x5c], r8b
mov r9b, WSAGetLastError
mov byte [rbp - 0x5e], cl
xor r9b, 0x2b
lea rdx, [rbp - 0x50]
mov r10b, 0x65
mov byte [rbp - 0x5b], r9b
mov r11b, 0x7f
lea r9, [rbp - 0x20]
xor bl, 0x2b
lea rcx, [rbp - 0x5f]
xor al, 0x2b
mov byte [rbp - 0x58], bl
xor r10b, 0x2b
mov byte [rbp - 0x5f], al
xor r11b, 0x2b
mov byte [rbp - 0x5a], r10b
mov r8d, r12d
mov byte [rbp - 0x59], r11b
call fcn.14001d540
xorps xmm0, xmm0
mov dword [rbp - 0x38], r13d
movdqu xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x34], 1
lea edx, [rdi + 3]
mov qword [rbp - 0x40], r13
lea rcx, [rbp - 0x50]
call fcn.140032e30
mov rbx, qword [rbp - 0x50]
lea r8d, [rdi + 0xc]
mov rcx, rbx
lea rdx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memmove
movaps xmm0, xmmword [r15]
lea rax, [rbx + 0xc]
mov dl, 0x58
mov qword [rbp - 0x48], rax
movzx r9d, dl
mov byte [rbp - 0x60], reloc.WS2_32.dll_socket
mov al, 0x37
movaps xmmword [rbp - 0x20], xmm0
mov r8b, 0x5b
movzx r11d, al
xor dl, 0x17
xor r8b, 0x17
xor r9b, 0x17
mov byte [rbp - 0x5d], dl
mov cl, 0x54
mov byte [rbp - 0x5c], r8b
xor cl, 0x17
mov byte [rbp - 0x5b], r9b
mov r10b, 0x45
mov byte [rbp - 0x5e], cl
xor r11b, 0x17
lea r9, [rbp - 0x20]
xor al, 0x17
mov byte [rbp - 0x59], r11b
xor r10b, 0x17
mov byte [rbp - 0x5f], al
xor ebx, ebx
mov byte [rbp - 0x5a], r10b
mov r8d, r12d
mov byte [rbp - 0x58], bl
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x5f]
call fcn.14001d540
call fcn.140091c40
movss xmm0, dword [0x1401495bc]
comiss xmm0, xmm6
jb 0x14001e015
mov qword [0x14015f648], 1
mov dword [0x14015f650], r13d
jmp 0x14001e02c
mov dword [0x14015f638], r13d
mov dword [0x14015f63c], 1
jmp 0x14001dbe0
mov dword [0x14015f658], r13d
mov dword [0x14015f65c], 1
jmp 0x14001ddf3
comiss xmm6, xmm0
jbe 0x14001e02c
mov dword [0x14015f648], r13d
mov qword [0x14015f64c], 1
cmp dword [0x14015e224], 0
movaps xmm6, xmmword [rsp + 0x70]
je 0x14001e24b
test r14b, r14b
je 0x14001e24b
mov al, 0x53
mov byte [rbp - 0x60], reloc.WS2_32.dll_WSASetLastError
movzx ecx, al
mov dl, 4
xor cl, 0x70
mov r8b, reloc.WS2_32.dll_recvfrom
mov r9b, reloc.WS2_32.dll_select
mov byte [rbp - 0x5e], cl
mov r10b, 3
lea rcx, [rbp - 0x5f]
mov r11b, 0x2f
xor al, 0x70
xor dl, 0x70
mov byte [rbp - 0x5f], al
xor r8b, 0x70
mov byte [rbp - 0x5d], dl
xor r9b, 0x70
mov byte [rbp - 0x5c], r8b
xor r10b, 0x70
mov byte [rbp - 0x5b], r9b
xor r11b, 0x70
mov byte [rbp - 0x5a], r10b
mov bl, 0x43
mov byte [rbp - 0x59], r11b
xor edi, edi
xor bl, 0x70
mov byte [rbp - 0x58], bl
mov byte [rbp - 0x57], dil
call fcn.140091710
xorps xmm0, xmm0
mov qword [rbp - 0x38], 1
lea edx, [rdi + 3]
mov dword [rbp - 0x30], r13d
lea rcx, [rbp - 0x50]
mov qword [rbp - 0x40], r13
movdqu xmmword [rbp - 0x50], xmm0
call fcn.140032e30
mov rbx, qword [rbp - 0x50]
lea r8d, [rdi + 0xc]
mov rcx, rbx
lea rdx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memmove
movaps xmm0, xmmword [r15]
lea rax, [rbx + 0xc]
mov qword [rbp - 0x48], rax
mov r8b, 0x58
mov al, 0x36
mov byte [rbp - 0x60], reloc.WLDAP32.dll_Ordinal_22
movzx ebx, al
mov byte [rbp - 0x57], dil
xor r8b, 0x16
movaps xmmword [rbp - 0x20], xmm0
mov cl, 0x55
mov byte [rbp - 0x5c], r8b
xor cl, 0x16
mov dl, 0x59
xor dl, 0x16
mov byte [rbp - 0x5e], cl
mov r9b, 0x50
mov byte [rbp - 0x5d], dl
xor r9b, 0x16
lea rdx, [rbp - 0x50]
mov r10b, 0x5f
mov byte [rbp - 0x5b], r9b
mov r11b, 0x51
lea r9, [rbp - 0x20]
xor bl, 0x16
lea rcx, [rbp - 0x5f]
xor al, 0x16
mov byte [rbp - 0x58], bl
xor r10b, 0x16
mov byte [rbp - 0x5f], al
xor r11b, 0x16
mov byte [rbp - 0x5a], r10b
mov r8d, r12d
mov byte [rbp - 0x59], r11b
call fcn.14001d540
xorps xmm0, xmm0
mov dword [rbp - 0x38], r13d
movdqu xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x34], 1
lea edx, [rdi + 3]
mov qword [rbp - 0x40], r13
lea rcx, [rbp - 0x50]
call fcn.140032e30
mov rbx, qword [rbp - 0x50]
lea r8d, [rdi + 0xc]
mov rcx, rbx
lea rdx, [rbp - 0x38]
call sub.VCRUNTIME140.dll_memmove
movaps xmm0, xmmword [r15]
lea rax, [rbx + 0xc]
mov qword [rbp - 0x48], rax
mov r8b, WSAGetLastError
mov al, Ordinal_26
mov byte [rbp - 0x60], reloc.WS2_32.dll_gethostname
movzx edi, al
movaps xmmword [rbp - 0x20], xmm0
xor r8b, 0x39
mov cl, 0x71
xor cl, 0x39
mov byte [rbp - 0x5c], r8b
mov dl, 0x76
mov byte [rbp - 0x5e], cl
xor dl, 0x39
lea rcx, [rbp - 0x5f]
mov r9b, WSAStartup
mov byte [rbp - 0x5d], dl
xor r9b, 0x39
lea rdx, [rbp - 0x50]
mov r10b, 0x7c
mov byte [rbp - 0x5b], r9b
mov r11b, 0x60
lea r9, [rbp - 0x20]
xor al, 0x39
xor r10b, 0x39
xor r11b, 0x39
mov byte [rbp - 0x5f], al
mov bl, 0x6a
mov byte [rbp - 0x5a], r10b
xor dil, 0x39
mov byte [rbp - 0x59], r11b
xor esi, esi
mov byte [rbp - 0x57], dil
xor bl, 0x39
mov byte [rbp - 0x56], sil
mov r8d, r12d
mov byte [rbp - 0x58], bl
call fcn.14001d540
call fcn.140091c40
cmp byte [0x14015f5a4], sil
jne 0x14001e239
cmp byte [0x14015f5a5], sil
jne 0x14001e27f
cmp byte [0x14015f5a6], sil
jne 0x14001e26c
mov byte [0x14015f5a4], 1
mov dword [0x14015f620], r13d
mov qword [0x14015f618], 1
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov qword [0x14015f618], rsi
mov dword [0x14015f620], 1
jmp 0x14001e24b
mov dword [0x14015f618], r13d
mov qword [0x14015f61c], 1
jmp 0x14001e24b