Function at 0x140106480
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xf0
mov r13, rcx
mov byte [rsp + 0x22], 0
mov byte [rsp + 0x21], 0
lea rdx, [rbp + 0x1f]
lea rcx, [rsp + 0x21]
call fcn.140224780
mov r9, rax
lea rbx, [rax + 0xc]
mov byte [rbx + 4], 0
xor r14d, r14d
mov r11, rbx
mov r15d, 1
sub r15, rbx
nop dword [rax]
nop word [rax + rax]
lea esi, [r14 + r14*2]
movzx ecx, byte [rsi + r9]
mov byte [r11], cl
movzx eax, r14b
add al, al
lea edi, [rax + r14]
movzx r10d, dil
add r10b, byte [r9 + 0x13]
xor r10b, cl
mov byte [r11], r10b
xor dl, dl
lea eax, [rsi + 1]
movzx r8d, byte [rax + r9]
nop
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x140106526
inc dl
cmp dl, 4
jne 0x140106510
jmp 0x140106535
movsx ecx, r10b
movzx eax, byte [r9 + 0x16]
btc ecx, eax
mov byte [r11], cl
mov cl, 5
lea eax, [rsi + 2]
mov r8d, eax
movzx edx, byte [rax + r9]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140106554
inc cl
cmp cl, 8
jne 0x140106542
jmp 0x140106563
movsx ecx, byte [r11]
movzx eax, byte [r9 + 0x15]
btc ecx, eax
mov byte [r11], cl
xor cl, cl
movzx edx, byte [r8 + r9]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140106582
inc cl
cmp cl, 5
jne 0x140106570
jmp 0x140106591
movsx ecx, byte [r11]
movzx eax, byte [r9 + 0x14]
btc ecx, eax
mov byte [r11], cl
movzx eax, dil
add al, byte [r9 + 0x12]
xor byte [r11], al
lea eax, [rsi + 3]
movzx eax, byte [rax + r9]
mov byte [r11 + 1], al
lea r10d, [rdi + 3]
add r10b, byte [r9 + 0x13]
xor r10b, al
mov byte [r11 + 1], r10b
xor dl, dl
lea eax, [rsi + 4]
movzx r8d, byte [rax + r9]
movzx eax, r8b
movzx ecx, dl
sar al, cl
test al, 1
jne 0x1401065db
inc dl
cmp dl, 4
jne 0x1401065c1
lea rdx, [r15 + r11]
jmp 0x1401065ee
lea rdx, [r15 + r11]
movsx ecx, r10b
movzx eax, byte [r9 + 0x16]
btc ecx, eax
mov byte [rdx + rbx], cl
mov cl, 5
lea eax, [rsi + 5]
mov r10d, eax
movzx r8d, byte [rax + r9]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106613
inc cl
cmp cl, 8
jne 0x140106600
jmp 0x140106622
movsx ecx, byte [rdx + rbx]
movzx eax, byte [r9 + 0x15]
btc ecx, eax
mov byte [rdx + rbx], cl
xor cl, cl
movzx r8d, byte [r10 + r9]
nop dword [rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106643
inc cl
cmp cl, 5
jne 0x140106630
jmp 0x140106652
movsx ecx, byte [rdx + rbx]
movzx eax, byte [r9 + 0x14]
btc ecx, eax
mov byte [rdx + rbx], cl
add dil, 3
add dil, byte [r9 + 0x12]
xor byte [rdx + rbx], dil
add r14d, 2
add r11, 2
cmp r14d, 4
jne 0x1401064e0
mov rdx, rbx
lea rcx, [rbp - 0x49]
call fcn.14008b2f0
mov rdi, rax
lea rdx, [rbp - 0x29]
lea rcx, [rsp + 0x22]
call fcn.140224750
mov rbx, rax
mov byte [rax + 0xc], 0
movzx r8d, byte [rax]
xor r8b, byte [rax + 0xf]
mov byte [rax + 9], r8b
xor cl, cl
movzx edx, byte [rax + 1]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1401066b8
inc cl
cmp cl, 4
jne 0x1401066a6
jmp 0x1401066c6
movsx ecx, r8b
movzx eax, byte [rbx + 0x12]
btc ecx, eax
mov byte [rbx + 9], cl
mov cl, 5
movzx edx, byte [rbx + 2]
nop dword [rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1401066e2
inc cl
cmp cl, 8
jne 0x1401066d0
jmp 0x1401066f0
movsx ecx, byte [rbx + 9]
movzx eax, byte [rbx + 0x11]
btc ecx, eax
mov byte [rbx + 9], cl
xor cl, cl
movzx eax, dl
sar al, cl
test al, 1
jne 0x140106704
inc cl
cmp cl, 5
jne 0x1401066f2
jmp 0x140106712
movsx ecx, byte [rbx + 9]
movzx eax, byte [rbx + 0x10]
btc ecx, eax
mov byte [rbx + 9], cl
movzx eax, byte [rbx + 0xe]
xor byte [rbx + 9], al
movzx eax, byte [rbx + 3]
mov byte [rbx + 0xa], al
movzx edx, byte [rbx + 0xf]
add dl, 3
xor dl, al
mov byte [rbx + 0xa], dl
xor cl, cl
movzx r8d, byte [rbx + 4]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106746
inc cl
cmp cl, 4
jne 0x140106733
jmp 0x140106753
movsx ecx, dl
movzx eax, byte [rbx + 0x12]
btc ecx, eax
mov byte [rbx + 0xa], cl
mov cl, 5
movzx edx, byte [rbx + 5]
nop dword [rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140106772
inc cl
cmp cl, 8
jne 0x140106760
jmp 0x140106780
movsx ecx, byte [rbx + 0xa]
movzx eax, byte [rbx + 0x11]
btc ecx, eax
mov byte [rbx + 0xa], cl
xor cl, cl
movzx eax, dl
sar al, cl
test al, 1
jne 0x140106794
inc cl
cmp cl, 5
jne 0x140106782
jmp 0x1401067a2
movsx ecx, byte [rbx + 0xa]
movzx eax, byte [rbx + 0x10]
btc ecx, eax
mov byte [rbx + 0xa], cl
movzx eax, byte [rbx + 0xe]
add al, 3
xor byte [rbx + 0xa], al
movzx eax, byte [rbx + 6]
mov byte [rbx + 0xb], al
movzx edx, byte [rbx + 0xf]
add dl, 6
xor dl, al
mov byte [rbx + 0xb], dl
xor cl, cl
movzx r8d, byte [rbx + 7]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1401067d8
inc cl
cmp cl, 4
jne 0x1401067c5
jmp 0x1401067e5
movsx ecx, dl
movzx eax, byte [rbx + 0x12]
btc ecx, eax
mov byte [rbx + 0xb], cl
mov cl, 5
movzx edx, byte [rbx + 8]
nop dword [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140106802
inc cl
cmp cl, 8
jne 0x1401067f0
jmp 0x140106810
movsx ecx, byte [rbx + 0xb]
movzx eax, byte [rbx + 0x11]
btc ecx, eax
mov byte [rbx + 0xb], cl
xor cl, cl
movzx eax, dl
sar al, cl
test al, 1
jne 0x140106824
inc cl
cmp cl, 5
jne 0x140106812
jmp 0x140106832
movsx ecx, byte [rbx + 0xb]
movzx eax, byte [rbx + 0x10]
btc ecx, eax
mov byte [rbx + 0xb], cl
movzx eax, byte [rbx + 0xe]
add al, 6
xor byte [rbx + 0xb], al
mov edx, 1
mov rcx, rdi
call fcn.140086910
movzx edi, byte [rax]
movzx ebx, byte [rbx + 9]
lea rcx, [rbp - 0x49]
call fcn.14008b180
cmp bl, dil
jne 0x14010768f
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140106909
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140106909
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x1d2990e
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140106904
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1401068d0
cmp r10d, 0x1d1b6408
je 0x140106911
test r11d, r11d
jne 0x1401068b0
mov rax, qword [rax]
jmp 0x140106880
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov ecx, dword [rcx + rax*4]
add rcx, rbx
call rcx
mov esi, eax
mov byte [rsp + 0x23], 0
lea rdx, [rbp - 0x69]
lea rcx, [rsp + 0x23]
call fcn.1402247b0
mov r8, rax
mov byte [rax + 8], 0
movzx r9d, byte [rax + 0xb]
xor r9b, byte [rax]
mov byte [rax + 6], r9b
xor cl, cl
movzx edx, byte [rax + 1]
nop word [rax + rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140106972
inc cl
cmp cl, 4
jne 0x140106960
jmp 0x140106982
movsx ecx, r9b
movzx eax, byte [r8 + 0xe]
btc ecx, eax
mov byte [r8 + 6], cl
mov cl, 5
movzx edx, byte [r8 + 2]
nop dword [rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x1401069a2
inc cl
cmp cl, 8
jne 0x140106990
jmp 0x1401069b3
movsx ecx, byte [r8 + 6]
movzx eax, byte [r8 + 0xd]
btc ecx, eax
mov byte [r8 + 6], cl
xor cl, cl
movzx eax, dl
sar al, cl
test al, 1
jne 0x1401069c7
inc cl
cmp cl, 5
jne 0x1401069b5
jmp 0x1401069d8
movsx ecx, byte [r8 + 6]
movzx eax, byte [r8 + 0xc]
btc ecx, eax
mov byte [r8 + 6], cl
movzx eax, byte [r8 + 0xa]
xor byte [r8 + 6], al
movzx eax, byte [r8 + 3]
mov byte [r8 + 7], al
movzx edx, byte [r8 + 0xb]
add dl, 3
xor dl, al
mov byte [r8 + 7], dl
xor cl, cl
movzx r9d, byte [r8 + 4]
nop
movzx eax, r9b
sar al, cl
test al, 1
jne 0x140106a13
inc cl
cmp cl, 4
jne 0x140106a00
jmp 0x140106a22
movsx ecx, dl
movzx eax, byte [r8 + 0xe]
btc ecx, eax
mov byte [r8 + 7], cl
mov cl, 5
movzx edx, byte [r8 + 5]
nop dword [rax]
movzx eax, dl
sar al, cl
test al, 1
jne 0x140106a42
inc cl
cmp cl, 8
jne 0x140106a30
jmp 0x140106a53
movsx ecx, byte [r8 + 7]
movzx eax, byte [r8 + 0xd]
btc ecx, eax
mov byte [r8 + 7], cl
xor cl, cl
movzx eax, dl
sar al, cl
test al, 1
jne 0x140106a67
inc cl
cmp cl, 5
jne 0x140106a55
jmp 0x140106a78
movsx ecx, byte [r8 + 7]
movzx eax, byte [r8 + 0xc]
btc ecx, eax
mov byte [r8 + 7], cl
movzx eax, byte [r8 + 0xa]
add al, 3
xor byte [r8 + 7], al
mov eax, 0xaaaaaaab
mul esi
shr edx, 1
lea eax, [rdx + rdx*2]
mov ecx, esi
sub ecx, eax
mov ebx, ecx
cmp byte [rcx + r8 + 6], 0x5d
je 0x14010768f
mov byte [rsp + 0x24], 0
lea rdx, [rbp - 0x79]
lea rcx, [rsp + 0x24]
call fcn.1402247d0
mov rdx, rax
mov byte [rax + 4], 0
movzx r9d, byte [rax + 7]
xor r9b, byte [rax]
mov byte [rax + 3], r9b
xor cl, cl
movzx r8d, byte [rax + 1]
nop
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106ae3
inc cl
cmp cl, 4
jne 0x140106ad0
jmp 0x140106af1
movsx ecx, r9b
movzx eax, byte [rdx + 0xa]
btc ecx, eax
mov byte [rdx + 3], cl
mov cl, 5
movzx r8d, byte [rdx + 2]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106b13
inc cl
cmp cl, 8
jne 0x140106b00
jmp 0x140106b21
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 9]
btc ecx, eax
mov byte [rdx + 3], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106b36
inc cl
cmp cl, 5
jne 0x140106b23
jmp 0x140106b44
movsx ecx, byte [rdx + 3]
movzx eax, byte [rdx + 8]
btc ecx, eax
mov byte [rdx + 3], cl
movzx eax, byte [rdx + 6]
xor byte [rdx + 3], al
mov rdi, rsi
mov rax, rsi
and eax, 1
cmp byte [rax + rdx + 3], 0x20
je 0x14010768f
mov byte [rsp + 0x25], 0
lea rdx, [rbp - 0x59]
lea rcx, [rsp + 0x25]
call fcn.1402247f0
mov rdx, rax
mov byte [rax + 8], 0
movzx r9d, byte [rax + 0xb]
xor r9b, byte [rax]
mov byte [rax + 6], r9b
xor cl, cl
movzx r8d, byte [rax + 1]
nop dword [rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106ba3
inc cl
cmp cl, 4
jne 0x140106b90
jmp 0x140106bb1
movsx ecx, r9b
movzx eax, byte [rdx + 0xe]
btc ecx, eax
mov byte [rdx + 6], cl
mov cl, 5
movzx r8d, byte [rdx + 2]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106bd3
inc cl
cmp cl, 8
jne 0x140106bc0
jmp 0x140106be1
movsx ecx, byte [rdx + 6]
movzx eax, byte [rdx + 0xd]
btc ecx, eax
mov byte [rdx + 6], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106bf6
inc cl
cmp cl, 5
jne 0x140106be3
jmp 0x140106c04
movsx ecx, byte [rdx + 6]
movzx eax, byte [rdx + 0xc]
btc ecx, eax
mov byte [rdx + 6], cl
movzx eax, byte [rdx + 0xa]
xor byte [rdx + 6], al
movzx eax, byte [rdx + 3]
mov byte [rdx + 7], al
movzx r8d, byte [rdx + 0xb]
add r8b, 3
xor r8b, al
mov byte [rdx + 7], r8b
xor cl, cl
movzx r9d, byte [rdx + 4]
nop dword [rax]
movzx eax, r9b
sar al, cl
test al, 1
jne 0x140106c43
inc cl
cmp cl, 4
jne 0x140106c30
jmp 0x140106c51
movsx ecx, r8b
movzx eax, byte [rdx + 0xe]
btc ecx, eax
mov byte [rdx + 7], cl
mov cl, 5
movzx r8d, byte [rdx + 5]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106c73
inc cl
cmp cl, 8
jne 0x140106c60
jmp 0x140106c81
movsx ecx, byte [rdx + 7]
movzx eax, byte [rdx + 0xd]
btc ecx, eax
mov byte [rdx + 7], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106c96
inc cl
cmp cl, 5
jne 0x140106c83
jmp 0x140106ca4
movsx ecx, byte [rdx + 7]
movzx eax, byte [rdx + 0xc]
btc ecx, eax
mov byte [rdx + 7], cl
movzx eax, byte [rdx + 0xa]
add al, 3
xor byte [rdx + 7], al
cmp byte [rdx + rbx + 6], 0xa
je 0x14010768f
mov byte [rsp + 0x26], 0
lea rdx, [rbp - 0x11]
lea rcx, [rsp + 0x26]
call fcn.140224810
mov rdx, rax
mov byte [rax + 0xc], 0
movzx r9d, byte [rax + 0xf]
xor r9b, byte [rax]
mov byte [rax + 9], r9b
xor cl, cl
movzx r8d, byte [rax + 1]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106cf8
inc cl
cmp cl, 4
jne 0x140106ce5
jmp 0x140106d06
movsx ecx, r9b
movzx eax, byte [rdx + 0x12]
btc ecx, eax
mov byte [rdx + 9], cl
mov cl, 5
movzx r8d, byte [rdx + 2]
nop dword [rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106d23
inc cl
cmp cl, 8
jne 0x140106d10
jmp 0x140106d31
movsx ecx, byte [rdx + 9]
movzx eax, byte [rdx + 0x11]
btc ecx, eax
mov byte [rdx + 9], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106d46
inc cl
cmp cl, 5
jne 0x140106d33
jmp 0x140106d54
movsx ecx, byte [rdx + 9]
movzx eax, byte [rdx + 0x10]
btc ecx, eax
mov byte [rdx + 9], cl
movzx eax, byte [rdx + 0xe]
xor byte [rdx + 9], al
movzx eax, byte [rdx + 3]
mov byte [rdx + 0xa], al
movzx r8d, byte [rdx + 0xf]
add r8b, 3
xor r8b, al
mov byte [rdx + 0xa], r8b
xor cl, cl
movzx r9d, byte [rdx + 4]
nop dword [rax]
movzx eax, r9b
sar al, cl
test al, 1
jne 0x140106d93
inc cl
cmp cl, 4
jne 0x140106d80
jmp 0x140106da1
movsx ecx, r8b
movzx eax, byte [rdx + 0x12]
btc ecx, eax
mov byte [rdx + 0xa], cl
mov cl, 5
movzx r8d, byte [rdx + 5]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106dc3
inc cl
cmp cl, 8
jne 0x140106db0
jmp 0x140106dd1
movsx ecx, byte [rdx + 0xa]
movzx eax, byte [rdx + 0x11]
btc ecx, eax
mov byte [rdx + 0xa], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106de6
inc cl
cmp cl, 5
jne 0x140106dd3
jmp 0x140106df4
movsx ecx, byte [rdx + 0xa]
movzx eax, byte [rdx + 0x10]
btc ecx, eax
mov byte [rdx + 0xa], cl
movzx eax, byte [rdx + 0xe]
add al, 3
xor byte [rdx + 0xa], al
movzx eax, byte [rdx + 6]
mov byte [rdx + 0xb], al
movzx r8d, byte [rdx + 0xf]
add r8b, 6
xor r8b, al
mov byte [rdx + 0xb], r8b
xor cl, cl
movzx r9d, byte [rdx + 7]
nop dword [rax + rax]
movzx eax, r9b
sar al, cl
test al, 1
jne 0x140106e33
inc cl
cmp cl, 4
jne 0x140106e20
jmp 0x140106e41
movsx ecx, r8b
movzx eax, byte [rdx + 0x12]
btc ecx, eax
mov byte [rdx + 0xb], cl
mov cl, 5
movzx r8d, byte [rdx + 8]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106e63
inc cl
cmp cl, 8
jne 0x140106e50
jmp 0x140106e71
movsx ecx, byte [rdx + 0xb]
movzx eax, byte [rdx + 0x11]
btc ecx, eax
mov byte [rdx + 0xb], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106e86
inc cl
cmp cl, 5
jne 0x140106e73
jmp 0x140106e94
movsx ecx, byte [rdx + 0xb]
movzx eax, byte [rdx + 0x10]
btc ecx, eax
mov byte [rdx + 0xb], cl
movzx eax, byte [rdx + 0xe]
add al, 6
xor byte [rdx + 0xb], al
and edi, 3
cmp byte [rdi + rdx + 9], 0x2e
je 0x14010768f
cmp esi, 0xc4b67e8b
ja 0x14010768f
inc esi
xor esi, 0xc4b67e8b
cmp esi, 0x15c9c09
jne 0x14010768f
mov byte [rsp + 0x20], 0
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x20]
call fcn.140224840
mov rdx, rax
mov byte [rax + 0xc], 0
movzx r9d, byte [rax + 0xf]
xor r9b, byte [rax]
mov byte [rax + 9], r9b
xor cl, cl
movzx r8d, byte [rax + 1]
nop dword [rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106f13
inc cl
cmp cl, 4
jne 0x140106f00
jmp 0x140106f21
movsx ecx, r9b
movzx eax, byte [rdx + 0x12]
btc ecx, eax
mov byte [rdx + 9], cl
mov cl, 5
movzx r8d, byte [rdx + 2]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106f43
inc cl
cmp cl, 8
jne 0x140106f30
jmp 0x140106f51
movsx ecx, byte [rdx + 9]
movzx eax, byte [rdx + 0x11]
btc ecx, eax
mov byte [rdx + 9], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106f66
inc cl
cmp cl, 5
jne 0x140106f53
jmp 0x140106f74
movsx ecx, byte [rdx + 9]
movzx eax, byte [rdx + 0x10]
btc ecx, eax
mov byte [rdx + 9], cl
movzx eax, byte [rdx + 0xe]
xor byte [rdx + 9], al
movzx eax, byte [rdx + 3]
mov byte [rdx + 0xa], al
movzx r8d, byte [rdx + 0xf]
add r8b, 3
xor r8b, al
mov byte [rdx + 0xa], r8b
xor cl, cl
movzx r9d, byte [rdx + 4]
nop dword [rax]
movzx eax, r9b
sar al, cl
test al, 1
jne 0x140106fb3
inc cl
cmp cl, 4
jne 0x140106fa0
jmp 0x140106fc1
movsx ecx, r8b
movzx eax, byte [rdx + 0x12]
btc ecx, eax
mov byte [rdx + 0xa], cl
mov cl, 5
movzx r8d, byte [rdx + 5]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140106fe3
inc cl
cmp cl, 8
jne 0x140106fd0
jmp 0x140106ff1
movsx ecx, byte [rdx + 0xa]
movzx eax, byte [rdx + 0x11]
btc ecx, eax
mov byte [rdx + 0xa], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140107006
inc cl
cmp cl, 5
jne 0x140106ff3
jmp 0x140107014
movsx ecx, byte [rdx + 0xa]
movzx eax, byte [rdx + 0x10]
btc ecx, eax
mov byte [rdx + 0xa], cl
movzx eax, byte [rdx + 0xe]
add al, 3
xor byte [rdx + 0xa], al
movzx eax, byte [rdx + 6]
mov byte [rdx + 0xb], al
movzx r8d, byte [rdx + 0xf]
add r8b, 6
xor r8b, al
mov byte [rdx + 0xb], r8b
xor cl, cl
movzx r9d, byte [rdx + 7]
nop dword [rax + rax]
movzx eax, r9b
sar al, cl
test al, 1
jne 0x140107053
inc cl
cmp cl, 4
jne 0x140107040
jmp 0x140107061
movsx ecx, r8b
movzx eax, byte [rdx + 0x12]
btc ecx, eax
mov byte [rdx + 0xb], cl
mov cl, 5
movzx r8d, byte [rdx + 8]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140107083
inc cl
cmp cl, 8
jne 0x140107070
jmp 0x140107091
movsx ecx, byte [rdx + 0xb]
movzx eax, byte [rdx + 0x11]
btc ecx, eax
mov byte [rdx + 0xb], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1401070a6
inc cl
cmp cl, 5
jne 0x140107093
jmp 0x1401070b4
movsx ecx, byte [rdx + 0xb]
movzx eax, byte [rdx + 0x10]
btc ecx, eax
mov byte [rdx + 0xb], cl
movzx eax, byte [rdx + 0xe]
add al, 6
xor byte [rdx + 0xb], al
cmp byte [rdx + 9], 3
jne 0x14010719b
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x140107169
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140107169
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + r14]
add r9, rbx
mov r10d, 0x146ffc67
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140107164
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140107130
cmp r10d, 0x213bed7
je 0x140107171
test r11d, r11d
jne 0x140107110
mov rax, qword [rax]
jmp 0x1401070e0
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rsi + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r8d, dword [rcx + rax*4]
add r8, rbx
mov edx, 0xc8c9f43
mov ecx, 0x54fc3d74
call r8
jmp 0x14010768f
mov byte [rsp + 0x20], 0
lea rdx, [rbp + 7]
lea rcx, [rsp + 0x20]
call fcn.140224870
mov rdx, rax
mov byte [rax + 0xc], 0
movzx r9d, byte [rax + 0xf]
xor r9b, byte [rax]
mov byte [rax + 9], r9b
xor cl, cl
movzx r8d, byte [rax + 1]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1401071e3
inc cl
cmp cl, 4
jne 0x1401071d0
jmp 0x1401071f1
movsx ecx, r9b
movzx eax, byte [rdx + 0x12]
btc ecx, eax
mov byte [rdx + 9], cl
mov cl, 5
movzx r8d, byte [rdx + 2]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140107213
inc cl
cmp cl, 8
jne 0x140107200
jmp 0x140107221
movsx ecx, byte [rdx + 9]
movzx eax, byte [rdx + 0x11]
btc ecx, eax
mov byte [rdx + 9], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140107236
inc cl
cmp cl, 5
jne 0x140107223
jmp 0x140107244
movsx ecx, byte [rdx + 9]
movzx eax, byte [rdx + 0x10]
btc ecx, eax
mov byte [rdx + 9], cl
movzx eax, byte [rdx + 0xe]
xor byte [rdx + 9], al
movzx eax, byte [rdx + 3]
mov byte [rdx + 0xa], al
movzx r8d, byte [rdx + 0xf]
add r8b, 3
xor r8b, al
mov byte [rdx + 0xa], r8b
xor cl, cl
movzx r9d, byte [rdx + 4]
nop dword [rax]
movzx eax, r9b
sar al, cl
test al, 1
jne 0x140107283
inc cl
cmp cl, 4
jne 0x140107270
jmp 0x140107291
movsx ecx, r8b
movzx eax, byte [rdx + 0x12]
btc ecx, eax
mov byte [rdx + 0xa], cl
mov cl, 5
movzx r8d, byte [rdx + 5]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1401072b3
inc cl
cmp cl, 8
jne 0x1401072a0
jmp 0x1401072c1
movsx ecx, byte [rdx + 0xa]
movzx eax, byte [rdx + 0x11]
btc ecx, eax
mov byte [rdx + 0xa], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x1401072d6
inc cl
cmp cl, 5
jne 0x1401072c3
jmp 0x1401072e4
movsx ecx, byte [rdx + 0xa]
movzx eax, byte [rdx + 0x10]
btc ecx, eax
mov byte [rdx + 0xa], cl
movzx eax, byte [rdx + 0xe]
add al, 3
xor byte [rdx + 0xa], al
movzx eax, byte [rdx + 6]
mov byte [rdx + 0xb], al
movzx r8d, byte [rdx + 0xf]
add r8b, 6
xor r8b, al
mov byte [rdx + 0xb], r8b
xor cl, cl
movzx r9d, byte [rdx + 7]
nop dword [rax + rax]
movzx eax, r9b
sar al, cl
test al, 1
jne 0x140107323
inc cl
cmp cl, 4
jne 0x140107310
jmp 0x140107331
movsx ecx, r8b
movzx eax, byte [rdx + 0x12]
btc ecx, eax
mov byte [rdx + 0xb], cl
mov cl, 5
movzx r8d, byte [rdx + 8]
nop dword [rax + rax]
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140107353
inc cl
cmp cl, 8
jne 0x140107340
jmp 0x140107361
movsx ecx, byte [rdx + 0xb]
movzx eax, byte [rdx + 0x11]
btc ecx, eax
mov byte [rdx + 0xb], cl
xor cl, cl
movzx eax, r8b
sar al, cl
test al, 1
jne 0x140107376
inc cl
cmp cl, 5
jne 0x140107363
jmp 0x140107384
movsx ecx, byte [rdx + 0xb]
movzx eax, byte [rdx + 0x10]
btc ecx, eax
mov byte [rdx + 0xb], cl
movzx eax, byte [rdx + 0xe]
add al, 6
xor al, byte [rdx + 0xb]
mov byte [rdx + 0xb], al
cmp al, 4
jne 0x14010768f
movss xmm1, dword [0x140345cd4]
movaps xmm0, xmm1
divss xmm0, dword [0x140345cd0]
mulss xmm0, xmm1
addss xmm1, xmm0
movss dword [0x140345cd4], xmm1
mov byte [rsp + 0x27], 0
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x27]
call fcn.1402248a0
mov r9, rax
mov r8d, dword [rax + 4]
movzx ecx, byte [rax + 0xa]
mov edx, r8d
shr edx, cl
test dl, 1
je 0x1401073f3
movzx ecx, byte [rax]
inc cl
mov edx, r8d
shr edx, cl
test dl, 1
jne 0x14010743c
movzx ecx, byte [rax]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x14010743c
add cl, 2
mov eax, r8d
shr eax, cl
test al, 1
jne 0x14010743c
movzx ecx, byte [r9 + 8]
mov eax, r8d
shr eax, cl
test al, 1
jne 0x14010743c
movzx ecx, byte [r9 + 9]
shr r8d, cl
test r8b, 1
jne 0x14010743c
movss xmm0, dword [0x140345cd0]
comiss xmm0, dword [0x140345cd4]
jbe 0x14010768f
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov edi, dword [rcx + rbx + 0x88]
add rdi, rbx
cmp rdi, rbx
je 0x1401074d9
mov r11d, dword [rdi + 0x18]
test r11d, r11d
je 0x1401074d9
mov esi, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rsi]
add r9, rbx
mov r10d, 0x3f11bdf6
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1401074d4
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x1401074a0
cmp r10d, 0x484b6328
je 0x1401074e1
test r11d, r11d
jne 0x140107480
mov rax, qword [rax]
jmp 0x140107450
mov edx, dword [rdi + 0x1c]
add rdx, rbx
mov ecx, dword [rdi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
call rax
mov r14, rax
test rax, rax
je 0x14010768f
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov edi, dword [rdx + rbx + 0x88]
add rdi, rbx
cmp rdi, rbx
je 0x1401075a9
mov r11d, dword [rdi + 0x18]
test r11d, r11d
je 0x1401075a9
mov esi, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rsi]
add r9, rbx
mov r10d, 0xb8c428c0
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1401075a4
movsx eax, r8b
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140107570
cmp r10d, 0xcc9ab10a
je 0x1401075b1
test r11d, r11d
jne 0x140107550
mov rcx, qword [rcx]
jmp 0x140107520
mov edx, dword [rdi + 0x1c]
add rdx, rbx
mov ecx, dword [rdi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov rcx, r14
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov edi, dword [rcx + rbx + 0x88]
add rdi, rbx
cmp rdi, rbx
je 0x140107669
mov r11d, dword [rdi + 0x18]
test r11d, r11d
je 0x140107669
mov esi, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rsi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x1fa70343
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140107664
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140107630
cmp r10d, 0xb8510ec1
je 0x140107671
test r11d, r11d
jne 0x140107610
mov rax, qword [rax]
jmp 0x1401075e0
mov edx, dword [rdi + 0x1c]
add rdx, rbx
mov ecx, dword [rdi + 0x24]
add rcx, rbx
movzx ecx, word [rcx + r11*2]
mov eax, dword [rdx + rcx*4]
add rax, rbx
mov ecx, 0xe8b6a9b9
call rax
mov rcx, qword [r13 + 0xca0]
test rcx, rcx
je 0x1401076a0
call fcn.1401c2bf0
mov rcx, qword [r13 + 0xca8]
test rcx, rcx
je 0x1401076b1
call fcn.1401c2cf0
mov rcx, qword [r13 + 0xcb0]
test rcx, rcx
je 0x1401076c2
call fcn.1401c2d80
mov rax, qword [0x140348ab8]
mov rcx, qword [rax + 0x58]
test rcx, rcx
je 0x1401076e6
call fcn.1401c2e20
mov rax, qword [0x140348ab8]
mov qword [rax + 0x58], 0
mov rcx, qword [r13 + 8]
test rcx, rcx
je 0x1401076fd
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [r13 + 8], 0
lea rcx, [r13 + 0xaa8]
call fcn.1400b35a0
lea rcx, [r13 + 0x968]
call fcn.1400b1b40
lea rcx, [r13 + 0x828]
call fcn.1400b0d50
nop
mov rcx, qword [r13 + 0x820]
test rcx, rcx
je 0x140107733
call fcn.1402c69c0
mov rcx, qword [r13 + 0x808]
call fcn.1400a77b0
nop
mov rcx, qword [r13 + 0x7e0]
test rcx, rcx
je 0x140107751
call fcn.1402c69c0
mov rcx, qword [r13 + 0x7c8]
call fcn.1400a77b0
nop
mov rcx, qword [r13 + 0x748]
test rcx, rcx
je 0x140107774
mov edx, reloc.WS2_32.dll_recv
call fcn.1402c69c0
mov rcx, qword [r13 + 0x750]
call fcn.1400a8530
nop
mov rcx, qword [r13 + 0x730]
test rcx, rcx
je 0x140107792
call fcn.1402c69c0
mov rcx, qword [r13 + 0x718]
call fcn.1400a77b0
nop
mov rbx, qword [r13 + 0x6b8]
test rbx, rbx
je 0x1401077d0
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x1401077b9
call fcn.1402c69c0
mov rcx, qword [rbx + 0x20]
call fcn.1400a77b0
nop
mov edx, 0x40
mov rcx, rbx
call fcn.1402c69c0
mov rbx, qword [r13 + 0x6b0]
test rbx, rbx
je 0x140107806
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x1401077ef
mov edx, reloc.WS2_32.dll_recv
call fcn.1402c69c0
mov rcx, qword [rbx + 0x18]
call fcn.1400a8530
nop
mov edx, reloc.WS2_32.dll_WSASetLastError
mov rcx, rbx
call fcn.1402c69c0
mov rbx, qword [r13 + 0x640]
test rbx, rbx
je 0x140107837
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x140107820
call fcn.1402c69c0
mov rcx, qword [rbx + 0x20]
call fcn.1400a77b0
nop
mov edx, 0x40
mov rcx, rbx
call fcn.1402c69c0
mov rbx, qword [r13 + 0x638]
test rbx, rbx
je 0x14010786d
mov rcx, qword [rbx + 0x10]
test rcx, rcx
je 0x140107856
mov edx, reloc.WS2_32.dll_recv
call fcn.1402c69c0
mov rcx, qword [rbx + 0x18]
call fcn.1400a8530
nop
mov edx, reloc.WS2_32.dll_WSASetLastError
mov rcx, rbx
call fcn.1402c69c0
lea rcx, [r13 + 0x400]
call fcn.1400b0090
lea rcx, [r13 + 0x318]
call fcn.1400af300
lea rcx, [r13 + 0xb0]
call fcn.1400aea70
nop
mov rcx, qword [r13 + 0x50]
test rcx, rcx
je 0x1401078a5
mov edx, reloc.WS2_32.dll_recv
call fcn.1402c69c0
mov rcx, qword [r13 + 0x58]
call fcn.1400a8530
nop
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret