Function at 0x140381770
Capabilities:
Access peb ldr_data
Encode data using xor
Get process filename
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d0]
sub rsp, 0x2d0
mov r14, r8
mov r15d, edx
xor r12d, r12d
mov dword [rbp + 0x210], r12d
mov qword [rbp + 0x70], r12
movabs rax, 0xb2bdb3ffb6101277
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x60], rax
movabs rax, 0x8bc1c19ad94e080a
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x68], rax
movabs rax, 0xded99d93da746619
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xe0], rax
movabs rax, 0x8bc1c19ad94e0866
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xe8], rax
movdqa xmm0, xmmword [rsp + 0x60]
pxor xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rsp + 0x60], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1403818b6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1403818b6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0xa8947627
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1403818b1
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140381890
cmp r8d, 0xb580d952
je 0x1403818bb
test r9d, r9d
jne 0x140381870
mov rax, qword [rax]
jmp 0x140381840
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
lea rcx, [rsp + 0x60]
call rdx
mov rsi, rax
movabs rax, 0xadabf8e08f285c5a
movabs rbx, 0x82f6452a6173fdde
movabs rdi, 0x6f366752f465de03
movabs r8, 0xee859de8bc3d5d3a
movabs r9, 0x37561c353675b660
movabs r10, 0x76b69d3c17c6ed5c
movabs r11, 0x5144da9ff5e4c88c
movabs rdx, 0x2ac5ed4c76e68528
movabs r13, 0x423740455901dd13
test rsi, rsi
jne 0x140382005
mov rcx, qword [0x14049bfa8]
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp - 0x30], rax
mov qword [rbp + 0x210], r8
mov rax, qword [rbp + 0x210]
mov qword [rbp - 0x28], rax
mov qword [rbp + 0x210], r9
mov rax, qword [rbp + 0x210]
mov qword [rbp - 0x20], rax
mov qword [rbp + 0x210], r10
mov rax, qword [rbp + 0x210]
mov qword [rbp - 0x18], rax
mov qword [rbp + 0x210], r11
mov rax, qword [rbp + 0x210]
mov qword [rbp - 0x10], rax
mov qword [rbp + 0x210], rbx
mov rax, qword [rbp + 0x210]
mov qword [rbp - 8], rax
mov qword [rbp + 0x210], rdi
mov rax, qword [rbp + 0x210]
mov qword [rbp], rax
movabs rax, 0xeae467dafc22d51f
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 8], rax
movabs rax, 0xb4d2ccfe8694583d
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x10], rax
movabs rax, 0x12763d824d18abd7
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x18], rax
movabs rax, 0xded99d93da746619
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0xf0], rax
movabs rax, 0x8bc1c19ad94e0866
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0xf8], rax
mov qword [rbp + 0x210], r13
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x100], rax
mov qword [rbp + 0x210], rdx
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x108], rax
movabs rax, 0x3964f7bf9d90bded
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x110], rax
movabs rax, 0xe3992976120389aa
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x118], rax
movabs rax, 0x33551521a817bb67
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x120], rax
movabs rax, 0x93900ea88941b06c
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x128], rax
movabs rax, 0xc0bbbe8be5f12b61
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x130], rax
movabs rax, 0x12763df23d7b85ae
mov qword [rbp + 0x210], rax
mov rax, qword [rbp + 0x210]
mov qword [rbp + 0x138], rax
movdqa xmm0, xmmword [rbp - 0x30]
pxor xmm0, xmmword [rbp + 0xf0]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [rbp + 0x100]
pxor xmm1, xmmword [rbp - 0x20]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [rbp - 0x10]
pxor xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp - 0x10], xmm0
movdqa xmm1, xmmword [rbp]
pxor xmm1, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm1
movdqa xmm0, xmmword [rbp + 0x10]
pxor xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x10], xmm0
mov r9d, 0xdd
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x70]
call fcn.140398980
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], sil
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x70], sil
mov dword [rbp + 0x210], 1
lea r8, [rbp - 0x70]
cmp qword [rbp - 0x58], 0x10
cmovae r8, qword [rbp - 0x70]
mov r9, qword [rbp - 0x60]
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.14035ab50
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x88], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], sil
mov dword [rbp + 0x210], 0x801
lea rdx, [rbp + 0x78]
call fcn.14035b6c0
nop
mov rdx, qword [rbp + 0x90]
cmp rdx, 0x10
jb 0x140381c7c
inc rdx
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140381c77
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1403828e4
call fcn.140419458
mov qword [rbp + 0x88], r12
mov qword [rbp + 0x90], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x78], 0
mov dword [rbp + 0x210], 0x800
mov rdx, qword [rbp - 0x78]
cmp rdx, 0x10
jb 0x140381cd8
inc rdx
mov rcx, qword [rsp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140381cd3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1403828ea
call fcn.140419458
mov qword [rbp - 0x80], r12
mov qword [rbp - 0x78], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x70], 0
mov byte [rbp + 0x228], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140381d86
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140381d86
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x6b6caac4
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140381d81
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140381d60
cmp r8d, 0x6c0ed600
je 0x140381d8b
test r9d, r9d
jne 0x140381d40
mov rax, qword [rax]
jmp 0x140381d10
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
lea r9, [rbp + 0x228]
xor r8d, r8d
mov dl, 1
lea ecx, [r8 + 0x14]
call r10
mov dword [rsp + 0x2c], 1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140381e46
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140381e46
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x6e6caf7d
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140381e41
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140381e20
cmp r8d, 0x41637962
je 0x140381e4b
test r9d, r9d
jne 0x140381e00
mov rax, qword [rax]
jmp 0x140381dd0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov r9d, 4
lea r8, [rsp + 0x2c]
lea edx, [r9 + 0x19]
mov rcx, 0xffffffffffffffff
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140381f06
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140381f06
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x6d6cadea
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140381f01
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140381ee0
cmp r8d, 0x773d2a94
je 0x140381f0b
test r9d, r9d
jne 0x140381ec0
mov rax, qword [rax]
jmp 0x140381e90
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, dword [0x7ffe0014]
mov rcx, 0xffffffffffffffff
call r8
mov ecx, 0xa
call fcn.140419954
lea rcx, [rax + 1]
call fcn.140419458
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov dword [rbx], 0xa
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov edx, 4
mov rcx, rbx
call fcn.140419458
mov ecx, dword [0x7ffe0014]
int 0x29
mov qword [rbp + 0xa8], r12
mov qword [rbp + 0xb0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x98], 0
mov rdx, qword [rbp - 0x58]
cmp rdx, 0x10
jb 0x140381feb
inc rdx
mov rcx, qword [rbp - 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140381fe6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1403828f0
call fcn.140419458
mov qword [rbp - 0x60], r12
mov qword [rbp - 0x58], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x70], 0
movabs rdx, 0x2ac5ed4c76e68528
movabs rax, 0xadb0faf688060255
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
movabs rax, 0xe48fadf69d3c6d12
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x48], rax
movabs rax, 0x2b4321263067b467
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x50], rax
movabs rax, 0x2ac5ed4c76e6eb47
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x58], rax
movabs rax, 0xded99d93da746619
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x50], rax
movabs rax, 0x8bc1c19ad94e0866
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x20], rdx
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x38], rax
movdqa xmm0, xmmword [rsp + 0x40]
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [rsp + 0x50]
pxor xmm1, xmmword [rbp - 0x40]
movdqa xmmword [rsp + 0x50], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140382166
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140382166
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x62b8f6ba
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140382161
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140382140
cmp r8d, 0xbe00f7d2
je 0x14038216b
test r9d, r9d
jne 0x140382120
mov rax, qword [rax]
jmp 0x1403820f0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
lea rdx, [rsp + 0x40]
mov rcx, rsi
call r8
test rax, rax
je 0x1403821ad
lea r9, [rbp + 0x70]
xor r8d, r8d
lea rdx, [0x14038bec0]
xor ecx, ecx
call rax
test eax, eax
je 0x1403828c0
mov rcx, qword [0x14049bfa8]
movabs rax, 0xadabf8e08f285c5a
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x20], rax
movabs rax, 0xee859de8bc3d5d3a
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x28], rax
movabs rax, 0x37561c353675b660
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x30], rax
movabs rax, 0x76b69d3c17c6ed5c
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x38], rax
movabs rax, 0x5144da9ff5e4c88c
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x40], rax
movabs rax, 0x82f6452a6173fdde
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x48], rax
movabs rax, 0x6f366752f465de03
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x50], rax
movabs rax, 0xeae467dafc22d51f
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x58], rax
movabs rax, 0xb4d2ccfe8694583d
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x60], rax
movabs rax, 0x12763d824d18abd7
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x68], rax
movabs rax, 0xded99d93da746619
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x140], rax
movabs rax, 0x8bc1c19ad94e0866
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x148], rax
mov qword [rbp + 0x228], r13
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x150], rax
movabs rax, 0x2ac5ed4c76e68528
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x158], rax
movabs rax, 0x3964f7bf9d90bded
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x160], rax
movabs rax, 0xe3992976120389aa
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x168], rax
movabs rax, 0x33551521a817bb67
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x170], rax
movabs rax, 0x93900ea88941b06c
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x178], rax
movabs rax, 0xc0bbbe8be5f12b61
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x180], rax
movabs rax, 0x12763df23d7b85ae
mov qword [rbp + 0x228], rax
mov rax, qword [rbp + 0x228]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x20]
pxor xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x20], xmm0
movdqa xmm1, xmmword [rbp + 0x30]
pxor xmm1, xmmword [rbp + 0x150]
movdqa xmmword [rbp + 0x30], xmm1
movdqa xmm0, xmmword [rbp + 0x40]
pxor xmm0, xmmword [rbp + 0x160]
movdqa xmmword [rbp + 0x40], xmm0
movdqa xmm1, xmmword [rbp + 0x50]
pxor xmm1, xmmword [rbp + 0x170]
movdqa xmmword [rbp + 0x50], xmm1
movdqa xmm0, xmmword [rbp + 0x60]
pxor xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x60], xmm0
mov r9d, 0xe6
lea r8, [rbp + 0x20]
lea rdx, [rsp + 0x40]
call fcn.140398980
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r12
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x50], 0
movups xmmword [rbp + 0xb8], xmm0
mov qword [rbp + 0xc8], r12
mov qword [rbp + 0xd0], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0xb8], 0
mov ebx, dword [rbp + 0x210]
or ebx, 4
mov dword [rbp + 0x210], ebx
lea r8, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae r8, qword [rsp + 0x40]
mov r9, qword [rsp + 0x50]
xor edx, edx
lea rcx, [rbp + 0xb8]
call fcn.14035ab50
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x190], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x1a0], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
bts ebx, 0xa
mov dword [rbp + 0x210], ebx
lea rdx, [rbp + 0x190]
call fcn.14035b6c0
nop
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x14038254e
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140382548
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1403828f6
call fcn.140419458
nop
test bl, 8
je 0x140382598
and ebx, 0xfffffff7
mov rdx, qword [rbp + 0x1c8]
cmp rdx, 0x10
jb 0x140382598
inc rdx
mov rcx, qword [rbp + 0x1b0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140382592
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1403828fc
call fcn.140419458
nop
test bl, 4
je 0x1403825de
mov rdx, qword [rbp + 0xd0]
cmp rdx, 0x10
jb 0x1403825de
inc rdx
mov rcx, qword [rbp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1403825d9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140382902
call fcn.140419458
mov byte [rsp + 0x28], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140382676
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140382676
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x36791926
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140382671
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140382650
cmp r8d, 0xcf020cba
je 0x14038267b
test r9d, r9d
jne 0x140382630
mov rax, qword [rax]
jmp 0x140382600
mov edx, dword [rdi + 0x1c]
add rdx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rdx + rax*4]
add r10, r11
lea r9, [rsp + 0x28]
xor r8d, r8d
mov dl, 1
lea ecx, [r8 + 0x14]
call r10
mov dword [rsp + 0x30], 1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140382736
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140382736
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x35791793
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140382731
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140382710
cmp r8d, 0x38d7fc88
je 0x14038273b
test r9d, r9d
jne 0x1403826f0
mov rax, qword [rax]
jmp 0x1403826c0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov r9d, 4
lea r8, [rsp + 0x30]
lea edx, [r9 + 0x19]
mov rcx, 0xffffffffffffffff
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1403827f6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1403827f6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x34791600
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1403827f1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1403827d0
cmp r8d, 0xc991dc62
je 0x1403827fb
test r9d, r9d
jne 0x1403827b0
mov rax, qword [rax]
jmp 0x140382780
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rdx + rax*4]
add r8, r10
mov edx, dword [0x7ffe0014]
mov rcx, 0xffffffffffffffff
call r8
mov ecx, 0xa
call fcn.140419954
lea rcx, [rax + 1]
call fcn.140419458
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov dword [rbx], 0xa
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov edx, 4
mov rcx, rbx
call fcn.140419458
mov ecx, dword [0x7ffe0014]
int 0x29
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1403828c0
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1403828bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1403828de
call fcn.140419458
mov dword [r14], r15d
mov rbx, qword [rsp + 0x318]
add rsp, 0x2d0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
int3