Function at 0x140019f90
Capabilities:
Access peb ldr_data
Create thread
Encode data using xor
Get kernel32 base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1401310c0]
xor rax, rsp
mov qword [rbp - 8], rax
mov byte [rbp - 0x18], 0
xor r13d, r13d
mov dword [rbp - 0x14], r13d
xor edx, edx
mov qword [rbp - 0x20], r13
mov dword [rbp - 0x10], 0x101
mov r8, qword gs:[0x30]
lea ecx, [rdx + 0x20]
mov r8d, dword [r8 + 0x48]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov r12, rax
test rax, rax
je 0x14001a1cc
mov rcx, qword gs:[0x30]
mov r14, qword [rcx + 0x40]
mov rcx, qword gs:[0x30]
mov r15, qword [rcx + 0x48]
mov rcx, qword gs:[0x30]
mov qword [rcx + 0x40], 1
mov rcx, qword gs:[0x30]
mov qword [rcx + 0x48], 1
mov rcx, qword gs:[0x60]
mov rax, qword [rcx + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov r11, qword [rax + 0x30]
mov rax, qword [0x1401349b8]
test rax, rax
jne 0x14001a0e8
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
mov r9d, 0x422f982
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001a0c2
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001a091
cmp r9d, 0x4512941a
je 0x14001a0c7
inc r10d
jmp 0x14001a072
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x1401349b8], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, r12
lea edx, [r9 + 0x11]
call rax
mov rax, qword gs:[0x30]
mov qword [rax + 0x40], r14
mov rax, qword gs:[0x30]
mov qword [rax + 0x48], r15
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140134a98]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001a1c7
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
mov ebx, r10d
mov r9d, 0x4f8a075f
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001a1a1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001a170
cmp r9d, 0xb2f5b853
je 0x14001a1a6
inc r10d
jmp 0x14001a150
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140134a98], rax
mov rcx, r12
call rax
mov qword [rsp + 0x28], r13
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 4
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov r15, rax
test rax, rax
je 0x14001a63c
mov rcx, qword gs:[0x60]
mov r10, qword [0x140134a50]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
mov r11, qword [rdx + 0x30]
test r10, r10
jne 0x14001a2a8
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
mov r9d, 0x5042ff52
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001a281
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001a250
cmp r9d, 0xa1a8e86
je 0x14001a286
inc r10d
jmp 0x14001a231
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov r10d, dword [rcx + rdx*4]
add r10, r11
mov qword [0x140134a50], r10
mov r9d, 1
lea rax, [rbp - 0x14]
lea r8, [rbp - 0x18]
mov qword [rsp + 0x20], rax
mov rcx, r15
lea edx, [r9 + 0x10]
call r10
test eax, eax
js 0x14001a2dd
cmp byte [rbp - 0x18], r13b
jne 0x14001b207
cmp dword [rbp - 0x14], 1
jne 0x14001b207
cmp eax, 0xc0000004
je 0x14001b207
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140134a48]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001a3a7
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
nop dword [rax + rax]
mov ebx, r10d
mov r9d, 0xfc9e2973
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001a381
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001a350
cmp r9d, 0x2426571b
je 0x14001a386
inc r10d
jmp 0x14001a330
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140134a48], rax
xor r9d, r9d
xor r8d, r8d
mov rcx, r15
lea edx, [r9 + 0x11]
call rax
test eax, eax
js 0x14001a578
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140134ac0]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001a477
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop word [rax + rax]
mov ebx, r10d
mov r9d, 0xe115a8da
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001a451
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001a420
cmp r9d, 0x8967acae
je 0x14001a456
inc r10d
jmp 0x14001a400
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140134ac0], rax
mov r9d, 1
lea rcx, [rbp - 0x14]
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x18]
mov rcx, r15
lea edx, [r9 + 0x10]
call rax
mov rcx, qword gs:[0x60]
mov r14d, eax
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
mov r11, qword [rdx + 0x30]
mov rdx, qword [0x1401349a8]
test rdx, rdx
jne 0x14001a54d
movsxd rcx, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rcx + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
mov r9d, 0xb7f3c6d6
lea rax, [rsi + rbx*4]
mov edx, dword [rax + r11]
add rdx, r11
movzx r8d, byte [rdx]
inc rdx
test r8b, r8b
je 0x14001a527
movsx eax, r8b
lea rdx, [rdx + 1]
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rdx - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test r8b, r8b
jne 0x14001a4f2
cmp r9d, 0xc17223e8
je 0x14001a52c
inc r10d
jmp 0x14001a4d2
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov edx, dword [rcx + rdx*4]
add rdx, r11
mov qword [0x1401349a8], rdx
mov rcx, r12
call rdx
test r14d, r14d
js 0x14001a56b
cmp byte [rbp - 0x18], r13b
je 0x14001b207
cmp dword [rbp - 0x14], 1
jne 0x14001b207
cmp r14d, 0xc0000004
je 0x14001b207
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140134a20]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001a637
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
nop dword [rax + rax]
mov ebx, r10d
mov r9d, 0xfab8c994
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001a611
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001a5e0
cmp r9d, 0xbcca5b7a
je 0x14001a616
inc r10d
jmp 0x14001a5c0
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140134a20], rax
mov rcx, r15
call rax
mov r8, qword gs:[0x30]
xor edx, edx
mov r8d, dword [r8 + 0x48]
lea ecx, [rdx + 0x40]
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov r15, rax
test rax, rax
je 0x14001a7f9
mov rcx, qword gs:[0x60]
mov r10, qword [0x140134b00]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
mov r11, qword [rdx + 0x30]
test r10, r10
jne 0x14001a718
movsxd rcx, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rcx + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
mov ebx, r10d
mov r9d, 0xe0ddcdb3
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + rsi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001a6f1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001a6c0
cmp r9d, 0x6e299b5b
je 0x14001a6f6
inc r10d
jmp 0x14001a6a0
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov r10d, dword [rcx + rdx*4]
add r10, r11
mov qword [0x140134b00], r10
xor r9d, r9d
xor r8d, r8d
mov rcx, r15
lea edx, [r9 + 0x11]
call r10
mov rcx, qword gs:[0x60]
mov r14d, eax
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
mov r11, qword [rdx + 0x30]
mov rdx, qword [0x140134a78]
test rdx, rdx
jne 0x14001a7e7
movsxd rcx, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rcx + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop word [rax + rax]
mov ebx, r10d
mov r9d, 0x616d456d
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + rsi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001a7c1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001a790
cmp r9d, 0x8feae3ed
je 0x14001a7c6
inc r10d
jmp 0x14001a770
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov edx, dword [rcx + rdx*4]
add rdx, r11
mov qword [0x140134a78], rdx
mov rcx, r15
call rdx
cmp r14d, 0xc0000022
jne 0x14001b207
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140134a08]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001a8b7
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop word [rax + rax]
mov ebx, r10d
mov r9d, 0xb99213a8
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + rsi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001a891
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001a860
cmp r9d, 0xfc69be07
je 0x14001a896
inc r10d
jmp 0x14001a840
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140134a08], rax
mov qword [rsp + 0x50], r13
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x48], r13
mov r9, 0xffffffffffffffff
mov qword [rsp + 0x40], r13
xor r8d, r8d
mov qword [rsp + 0x38], r13
mov edx, 0x1fffff
mov dword [rsp + 0x30], 1
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
call rax
test eax, eax
js 0x14001aac7
cmp qword [rbp - 0x20], r13
je 0x14001aac7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x1401349f8]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001a9b7
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
mov r9d, 0x6de1108c
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + rsi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001a991
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001a960
cmp r9d, 0x641c6314
je 0x14001a996
inc r10d
jmp 0x14001a940
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x1401349f8], rax
mov r9d, 1
lea rcx, [rbp - 0x14]
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x18]
mov rcx, qword [rbp - 0x20]
lea edx, [r9 + 0x10]
call rax
mov rcx, qword gs:[0x60]
mov r14d, eax
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
mov r11, qword [rdx + 0x30]
mov rdx, qword [0x1401349b0]
test rdx, rdx
jne 0x14001aa9b
movsxd rcx, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rcx + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
mov r9d, 0xfe49c1fe
lea rax, [rsi + rbx*4]
mov edx, dword [rax + r11]
add rdx, r11
movzx r8d, byte [rdx]
inc rdx
test r8b, r8b
je 0x14001aa75
nop dword [rax]
nop word [rax + rax]
movsx eax, r8b
lea rdx, [rdx + 1]
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rdx - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test r8b, r8b
jne 0x14001aa40
cmp r9d, 0x6049e210
je 0x14001aa7a
inc r10d
jmp 0x14001aa13
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov edx, dword [rcx + rdx*4]
add rdx, r11
mov qword [0x1401349b0], rdx
mov rcx, qword [rbp - 0x20]
call rdx
test r14d, r14d
js 0x14001aaba
cmp dword [rbp - 0x14], 1
jne 0x14001b207
cmp byte [rbp - 0x18], r13b
jne 0x14001b207
cmp r14d, 0xc0000004
je 0x14001b207
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x1401349c0]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001ab87
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
mov r9d, 0x3e54be42
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001ab61
nop dword [rax]
nop word [rax + rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001ab30
cmp r9d, 0x63394b49
je 0x14001ab66
inc r10d
jmp 0x14001ab03
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x1401349c0], rax
mov qword [rsp + 0x50], r13
lea rcx, [rbp - 0x20]
mov qword [rsp + 0x48], r13
mov r9, 0xffffffffffffffff
mov qword [rsp + 0x40], r13
xor r8d, r8d
mov qword [rsp + 0x38], r13
mov edx, 0x1fffff
mov dword [rsp + 0x30], 5
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r13
call rax
test eax, eax
js 0x14001ad93
cmp qword [rbp - 0x20], r13
je 0x14001ad93
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x1401349e8]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001ac87
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
mov r9d, 0xa491274a
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + rsi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001ac61
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001ac30
cmp r9d, 0xde0b03e
je 0x14001ac66
inc r10d
jmp 0x14001ac10
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x1401349e8], rax
mov r9d, 1
lea rcx, [rbp - 0x14]
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x18]
mov rcx, qword [rbp - 0x20]
lea edx, [r9 + 0x10]
call rax
mov rcx, qword gs:[0x60]
mov r14d, eax
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
mov r11, qword [rdx + 0x30]
mov rdx, qword [0x140134ac8]
test rdx, rdx
jne 0x14001ad67
movsxd rcx, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rcx + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
mov r9d, 0x8e2db314
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + rsi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001ad41
nop dword [rax]
nop word [rax + rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001ad10
cmp r9d, 0xdbd54bfa
je 0x14001ad46
inc r10d
jmp 0x14001ace3
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov edx, dword [rcx + rdx*4]
add rdx, r11
mov qword [0x140134ac8], rdx
mov rcx, qword [rbp - 0x20]
call rdx
test r14d, r14d
js 0x14001ad86
cmp dword [rbp - 0x14], 1
jne 0x14001b207
cmp byte [rbp - 0x18], r13b
je 0x14001b207
cmp r14d, 0xc0000004
je 0x14001b207
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140134ad0]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001ae47
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop
mov ebx, r10d
mov r9d, 0x14db1fd1
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001ae21
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001adf0
cmp r9d, 0x3fd0f59d
je 0x14001ae26
inc r10d
jmp 0x14001add0
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140134ad0], rax
lea r9, [0x140103d30]
mov edx, send
lea r8, [rbp - 0x18]
mov rcx, 0xfffffffffffffffe
call rax
test eax, eax
jns 0x14001b207
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140134a90]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001af27
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
nop dword [rax + rax]
mov ebx, r10d
mov r9d, 0xb2f2071b
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + rsi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001af01
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001aed0
cmp r9d, 0xa8489e73
je 0x14001af06
inc r10d
jmp 0x14001aeb0
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140134a90], rax
xor r9d, r9d
xor r8d, r8d
mov ecx, 0xffff
lea edx, [r9 + 0x11]
call rax
test eax, eax
jns 0x14001b207
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140134b38]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001aff7
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
mov ebx, r10d
mov r9d, 0xd1c681c7
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001afd1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001afa0
cmp r9d, 0xb3aa38f
je 0x14001afd6
inc r10d
jmp 0x14001af80
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140134b38], rax
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x11]
lea rcx, [r9 - 2]
call rax
test eax, eax
js 0x14001b203
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140134a40]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001b0c7
movsxd rax, dword [r11 + 0x3c]
mov r10d, r13d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax + rax]
mov ebx, r10d
mov r9d, 0x4b03903d
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001b0a1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001b070
cmp r9d, 0x645dac79
je 0x14001b0a6
inc r10d
jmp 0x14001b050
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140134a40], rax
mov r9d, 1
lea rcx, [rbp - 0x14]
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x18]
mov rcx, 0xfffffffffffffffe
lea edx, [r9 + 0x10]
call rax
test eax, eax
js 0x14001b0ff
cmp dword [rbp - 0x14], 1
jne 0x14001b207
cmp byte [rbp - 0x18], r13b
je 0x14001b207
cmp eax, 0xc0000004
je 0x14001b207
cmp eax, 0x80000002
je 0x14001b207
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x1401349c8]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x14001b1c9
movsxd rax, dword [r11 + 0x3c]
mov ebx, dword [rax + r11 + 0x88]
mov edi, dword [rbx + r11 + 0x20]
nop
mov r10d, r13d
mov r9d, 0xe798f133
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001b1a1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14001b170
cmp r9d, 0x5eb5dc5b
je 0x14001b1a6
inc r13d
jmp 0x14001b150
mov ecx, dword [rbx + r11 + 0x24]
mov r8d, dword [rbx + r11 + 0x1c]
add rcx, r11
add r8, r11
movzx r10d, word [rcx + r10*2]
mov eax, dword [r8 + r10*4]
add rax, r11
mov qword [0x1401349c8], rax
mov r9d, 1
lea r8, [rbp - 0x14]
mov qword [rsp + 0x20], r8
mov rcx, 0xfffffffffffffffe
lea r8, [rbp - 0x10]
lea edx, [r9 + 0x10]
call rax
test eax, eax
js 0x14001b1fc
cmp dword [rbp - 0x14], 1
jne 0x14001b207
cmp dword [rbp - 0x10], 0x101
jne 0x14001b207
cmp eax, 0xc0000004
je 0x14001b207
xor al, al
jmp 0x14001b209
mov al, 1
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400ab310
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret