Function at 0x1400830b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x14014d0c0]
xor rax, rsp
mov qword [rbp - 8], rax
mov r15, rcx
lea rax, [0x140130e57]
cmp rcx, rax
je 0x140083fee
lea rcx, [rbp - 0x28]
call fcn.140082000
nop
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140083186
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140083186
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xa3f3e7fc
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083181
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140083160
cmp r8d, 0x4daac2ff
je 0x14008318b
test r9d, r9d
jne 0x140083140
mov rax, qword [rax]
jmp 0x140083110
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0xfffffff5
call rdx
mov r14, rax
mov rax, qword gs:[0x60]
cmp qword [rbp - 0x18], 0
je 0x1400838b5
mov rcx, qword [rax + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140083246
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140083246
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [rbx + r9*4]
mov edx, dword [rax + r10]
add rdx, r10
mov r8d, 0xac356048
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x140083241
nop
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x140083220
cmp r8d, 0xd4d514ce
je 0x14008324b
test r9d, r9d
jne 0x140083200
mov rcx, qword [rcx]
jmp 0x1400831d0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, 7
mov rcx, r14
call r8
mov eax, dword [0x14013826c]
mov dword [rbp - 0x3c], eax
movzx eax, byte [0x140138270]
mov byte [rbp - 0x38], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140083316
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140083316
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x30ad0960
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083311
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400832f0
cmp r8d, 0xfbb55473
je 0x14008331b
test r9d, r9d
jne 0x1400832d0
mov rax, qword [rax]
jmp 0x1400832a0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rbp - 0x3c], 0xa
xor byte [rbp - 0x3b], 0x37
xor byte [rbp - 0x3a], 0x38
xor byte [rbp - 0x39], 0x39
xor byte [rbp - 0x38], 0x3a
lea rcx, [rbp - 0x3c]
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400833d6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400833d6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x44fcf2b8
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400833d1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400833b0
cmp r8d, 0x7989a8fe
je 0x1400833db
test r9d, r9d
jne 0x140083390
mov rax, qword [rax]
jmp 0x140083360
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, 1
mov rcx, r14
call r8
lea rsi, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rsi, qword [rbp - 0x28]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140083496
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140083496
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x5836b700
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083491
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140083470
cmp r8d, 0xaad01a13
je 0x14008349b
test r9d, r9d
jne 0x140083450
mov rax, qword [rax]
jmp 0x140083420
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140083546
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140083546
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x78b61171
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083541
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140083520
cmp r8d, 0x3ba99d1
je 0x14008354b
test r9d, r9d
jne 0x140083500
mov rax, qword [rax]
jmp 0x1400834d0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, 7
mov rcx, r14
call r8
mov eax, dword [0x1401381d8]
mov dword [rbp - 0x34], eax
movzx eax, byte [0x1401381dc]
mov byte [rbp - 0x30], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140083616
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140083616
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x7b4685c9
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083611
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400835f0
cmp r8d, 0x20412f06
je 0x14008361b
test r9d, r9d
jne 0x1400835d0
mov rax, qword [rax]
jmp 0x1400835a0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rbp - 0x34], 0x5d
xor byte [rbp - 0x33], 0x37
xor byte [rbp - 0x32], 0x38
xor byte [rbp - 0x31], 0x39
xor byte [rbp - 0x30], 0x3a
lea rcx, [rbp - 0x34]
call rdx
mov byte [rbp - 0x40], gethostname
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400836e6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400836e6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x9c715591
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400836e1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400836c0
cmp r8d, 0x947039ee
je 0x1400836eb
test r9d, r9d
jne 0x1400836a0
mov rax, qword [rax]
jmp 0x140083670
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rbp - 0x40], 0
lea rcx, [rbp - 0x40]
call rdx
xor esi, esi
mov rcx, r15
call fcn.14006d340
test eax, eax
je 0x140083fb0
nop
movzx edx, byte [r15 + rsi]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140092fc0
mov rdx, qword gs:[0x60]
mov rcx, r15
call fcn.14006d340
cmp eax, 0x1e
mov rax, qword [rdx + 0x18]
mov rax, qword [rax + 0x10]
jge 0x140083800
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400837d6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400837d6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x2af9838b
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400837d1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400837b0
cmp r8d, 0xa08e4cce
je 0x1400837db
test r9d, r9d
jne 0x140083790
mov rax, qword [rax]
jmp 0x140083760
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
mov ecx, reloc.WS2_32.dll_sendto
jmp 0x140083894
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140083876
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140083876
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xb024f0bf
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083871
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140083850
cmp r8d, 0xb68f8462
je 0x14008387b
test r9d, r9d
jne 0x140083830
mov rax, qword [rax]
jmp 0x140083800
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
add rdx, r10
call rdx
inc rsi
mov rcx, r15
call fcn.14006d340
movsxd rcx, eax
cmp rsi, rcx
jb 0x140083720
jmp 0x140083fb0
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140083936
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140083936
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0xdbb72e8a
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083931
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140083910
cmp r8d, 0xb182d994
je 0x14008393b
test r9d, r9d
jne 0x1400838f0
mov rax, qword [rax]
jmp 0x1400838c0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, 7
mov rcx, r14
call r8
mov eax, dword [0x14013826c]
mov dword [rbp - 0x34], eax
movzx eax, byte [0x140138270]
mov byte [rbp - 0x30], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140083a06
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140083a06
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xdb0a6b3c
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083a01
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400839e0
cmp r8d, 0x96bc4f47
je 0x140083a0b
test r9d, r9d
jne 0x1400839c0
mov rax, qword [rax]
jmp 0x140083990
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rbp - 0x34], 0xa
xor byte [rbp - 0x33], 0x37
xor byte [rbp - 0x32], 0x38
xor byte [rbp - 0x31], 0x39
xor byte [rbp - 0x30], 0x3a
lea rcx, [rbp - 0x34]
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140083ac6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140083ac6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x32e6888e
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083ac1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140083aa0
cmp r8d, 0xc42d84f8
je 0x140083acb
test r9d, r9d
jne 0x140083a80
mov rax, qword [rax]
jmp 0x140083a50
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, 1
mov rcx, r14
call r8
movzx eax, word [0x140138648]
mov word [rbp - 0x40], ax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140083b86
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140083b86
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xbf4f33b4
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083b81
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140083b60
cmp r8d, 0xed5ba53f
je 0x140083b8b
test r9d, r9d
jne 0x140083b40
mov rax, qword [rax]
jmp 0x140083b10
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rbp - 0x40], Ordinal_46
xor byte [rbp - 0x3f], 0x37
lea rcx, [rbp - 0x40]
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140083c46
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140083c46
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x8b2a74a2
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083c41
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140083c20
cmp r8d, 0x6edf477c
je 0x140083c4b
test r9d, r9d
jne 0x140083c00
mov rax, qword [rax]
jmp 0x140083bd0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, 7
mov rcx, r14
call r8
mov eax, dword [0x1401381d8]
mov dword [rbp - 0x3c], eax
movzx eax, byte [0x1401381dc]
mov byte [rbp - 0x38], al
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140083d16
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140083d16
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x1a58302b
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083d11
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140083cf0
cmp r8d, 0x99a3a974
je 0x140083d1b
test r9d, r9d
jne 0x140083cd0
mov rax, qword [rax]
jmp 0x140083ca0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rbp - 0x3c], 0x5d
xor byte [rbp - 0x3b], 0x37
xor byte [rbp - 0x3a], 0x38
xor byte [rbp - 0x39], 0x39
xor byte [rbp - 0x38], 0x3a
lea rcx, [rbp - 0x3c]
call rdx
mov byte [rbp - 0x40], gethostname
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140083de6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140083de6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x9eb2472d
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083de1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140083dc0
cmp r8d, 0xf33b67d2
je 0x140083deb
test r9d, r9d
jne 0x140083da0
mov rax, qword [rax]
jmp 0x140083d70
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov byte [rbp - 0x40], 0
lea rcx, [rbp - 0x40]
call rdx
xor esi, esi
mov rcx, r15
call fcn.14006d340
test eax, eax
je 0x140083fb0
nop
movzx edx, byte [r15 + rsi]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.140092fc0
mov rdx, qword gs:[0x60]
mov rcx, r15
call fcn.14006d340
cmp eax, 0x1e
mov rax, qword [rdx + 0x18]
mov rax, qword [rax + 0x10]
jge 0x140083f00
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140083ed6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140083ed6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xbf9710a0
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140083ed1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140083eb0
cmp r8d, 0x72369973
je 0x140083edb
test r9d, r9d
jne 0x140083e90
mov rax, qword [rax]
jmp 0x140083e60
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
mov ecx, reloc.WS2_32.dll_sendto
jmp 0x140083f94
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140083f76
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140083f76
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x874fb900
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140083f71
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140083f50
cmp r8d, 0x45039893
je 0x140083f7b
test r9d, r9d
jne 0x140083f30
mov rax, qword [rax]
jmp 0x140083f00
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
mov ecx, reloc.WLDAP32.dll_Ordinal_30
add rdx, r10
call rdx
inc rsi
mov rcx, r15
call fcn.14006d340
movsxd rcx, eax
cmp rsi, rcx
jb 0x140083e20
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x140083fee
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140083fe9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140083fe9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140114080
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140114060
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret