Function at 0x1401990c0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x350
mov rax, qword [0x1405f98c0]
xor rax, rsp
mov qword [rsp + 0x340], rax
mov rsi, r9
mov r14, r8
movzx r15d, dl
mov r13, rcx
xor r12b, r12b
mov eax, r15d
movabs rcx, 0xcbf29ce484222325
xor rax, rcx
movabs rcx, 0x100000001b3
imul rax, rcx
mov rcx, qword [r13 + 0x1c8]
and rcx, rax
add rcx, rcx
mov rax, qword [r13 + 0x1b0]
mov rbx, qword [rax + rcx*8 + 8]
cmp rbx, qword [r13 + 0x1a0]
je 0x1401998f3
mov rax, qword [rax + rcx*8]
nop dword [rax]
cmp r15b, byte [rbx + 0x10]
jne 0x1401998ae
mov dword [rsp + 0x20], 0
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
mov rcx, qword [rbx + 0x18]
call fcn.1403e6074
mov rcx, rax
test rax, rax
je 0x140199190
mov rax, qword [rbx + 0x20]
test rax, rax
je 0x140199180
lock inc dword [rax + 8]
mov qword [rsp + 0x60], rcx
mov rbx, qword [rbx + 0x20]
mov qword [rsp + 0x68], rbx
jmp 0x1401991a5
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
xor ecx, ecx
psrldq xmm1, 8
movq rbx, xmm1
test rcx, rcx
je 0x14019926d
mov rax, qword [rcx]
lea r9, [r13 + 0x1f8]
mov r8, rsi
mov rdx, r14
call qword [rax + reloc.WS2_32.dll_htonl]
movzx r12d, al
test al, al
jne 0x14019926d
mov rax, rsi
cmp qword [rsi + 0x18], 0xf
jbe 0x1401991da
mov rax, qword [rsi]
mov qword [rsp + 0x58], rax
movzx edx, r15b
lea rcx, [rsp + 0x180]
call fcn.140178d20
nop
cmp qword [rax + 0x18], 0xf
jbe 0x1401991fb
mov rax, qword [rax]
mov qword [rsp + 0x80], rax
mov rax, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x140199210
mov rax, qword [r14]
mov qword [rsp + 0x88], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x88]
mov qword [rsp + 0x20], rax
lea r9, str.processator:_failed_to_start:___type:___extra:__
call fcn.1400ee000
nop
mov r8, qword [rsp + 0x198]
cmp r8, 0xf
jbe 0x14019926d
mov rdx, qword [rsp + 0x180]
lea rcx, [rsp + 0x180]
call fcn.1400c68c0
nop
test rbx, rbx
je 0x1401992a6
mov edi, 0xffffffff
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1401992a6
mov rbx, qword [rsp + 0x68]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x1401992a6
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
call fcn.1403c35e8
mov rcx, rax
movabs rax, 0x346dc5d63886594b
imul rcx
mov rbx, rdx
sar rbx, 0xb
mov rax, rbx
shr rax, 0x3f
add rbx, rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x1c0], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_ioctlsocket]
movdqa xmmword [rsp + 0x1d0], xmm1
movsd xmm0, qword [str.event_type]
movsd qword [rsp + 0x1c0], xmm0
movzx eax, word [0x140579cc8]
mov word [rsp + 0x1c8], ax
mov byte [rsp + 0x1ca], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x1e0], xmm0
movdqa xmm1, xmmword [0x14057a910]
movdqa xmmword [rsp + 0x1f0], xmm1
mov eax, dword [str.start]
mov dword [rsp + 0x1e0], eax
movzx eax, byte [reloc.WS2_32.dll_WSACleanup]
mov byte [rsp + 0x1e4], al
mov byte [rsp + 0x1e5], 0
movzx edx, r15b
lea rcx, [rsp + 0x110]
call fcn.140178d20
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_htonl]
movdqa xmmword [rsp + 0x210], xmm1
movabs rcx, 0x72656469766f7270
mov qword [rsp + 0x200], rcx
mov byte [rsp + 0x208], 0
movups xmmword [rsp + 0x220], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x230], xmm1
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x220], xmm0
movups xmm1, xmmword [rax + 0x10]
movaps xmmword [rsp + 0x230], xmm1
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], recv
mov byte [rax], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x240], xmm0
movdqa xmm1, xmmword [0x14057a970]
movdqa xmmword [rsp + 0x250], xmm1
movsd xmm0, qword [0x140543470]
movsd qword [rsp + 0x240], xmm0
movzx eax, word [0x140543478]
mov word [rsp + 0x248], ax
movzx eax, byte [0x14054347a]
mov byte [rsp + 0x24a], al
mov byte [rsp + 0x24b], 0
mov rdx, r14
lea rcx, [rsp + 0x260]
call fcn.1400c6060
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x280], xmm0
movdqa xmm1, xmmword [0x14057a9a0]
movdqa xmmword [rsp + 0x290], xmm1
movsd xmm0, qword [str.provider_extra]
movsd qword [rsp + 0x280], xmm0
mov eax, dword [0x140570de0]
mov dword [rsp + 0x288], eax
movzx eax, word [0x140570de4]
mov word [rsp + 0x28c], ax
mov byte [rsp + 0x28e], 0
mov rdx, rsi
lea rcx, [rsp + 0x2a0]
call fcn.1400c6060
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2c0], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_htonl]
movdqa xmmword [rsp + 0x2d0], xmm1
movabs rax, 0x646975752d626577
mov qword [rsp + 0x2c0], rax
mov byte [rsp + 0x2c8], 0
lea rdx, [r13 + 0x1f8]
lea rcx, [rsp + 0x2e0]
call fcn.1400c6060
nop
lea r8, [r13 + 0x38]
lea rcx, [rsp + 0x300]
call fcn.14019bab0
nop
lea rax, [rsp + 0x1c0]
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0x340]
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0x90]
lea rcx, [rsp + 0x70]
call fcn.14019ae80
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x130], xmm0
movdqa xmm1, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rsp + 0x140], xmm1
mov eax, dword [str.result]
mov dword [rsp + 0x130], eax
movzx eax, word [0x1405434dc]
mov word [rsp + 0x134], ax
mov byte [rsp + 0x136], 0
mov byte [rsp + 0x150], 1
mov byte [rsp + 0x170], 0
lea rax, [rsp + 0x130]
mov qword [rsp + 0xa0], rax
lea rax, [rsp + 0x178]
mov qword [rsp + 0xa8], rax
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x48]
call fcn.14019acf0
nop
lea r9, [r13 + 0x88]
mov rcx, qword [r9 + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, 0x1b
jb 0x1401998e1
cmp qword [r9 + 0x18], 0xf
jbe 0x1401995d9
mov r9, qword [r9]
mov qword [rsp + 0x30], 0x1b
lea rax, str..shadow_intel_apps_triggers
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x1a0]
call fcn.1400e5120
nop
lea rdx, [rsp + 0x1a0]
lea rcx, [rsp + 0xc0]
call fcn.1400c6060
nop
mov qword [rsp + 0xe0], rbx
mov dword [rsp + 0xe8], 0
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0xf0]
call fcn.1400d8cf0
nop
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x100]
call fcn.1400d8c20
nop
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 0xf
jbe 0x140199694
inc rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14019968e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401998e7
call fcn.1403e3650
nop
mov rcx, qword [rsp + 0x48]
mov rbx, qword [rcx + 8]
cmp byte [rbx + 0x19], 0
jne 0x14019970b
lea r15, fcn.1400c69a0
nop word [rax + rax]
mov r8, qword [rbx + 0x10]
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x48]
call fcn.1400e5a20
mov rsi, rbx
mov rbx, qword [rbx]
movzx eax, byte [rsi + 0x60]
cmp al, 0xff
je 0x1401996e6
mov byte [rsp + 0x40], 0
mov r8, qword [r15 + rax*8]
lea rdx, [rsi + 0x40]
lea rcx, [rsp + 0x40]
call r8
mov byte [rsi + 0x60], 0xff
lea rcx, [rsi + 0x20]
call fcn.1400c6440
mov edx, 0x68
mov rcx, rsi
call fcn.1403e3650
cmp byte [rbx + 0x19], 0
je 0x1401996b0
mov rcx, qword [rsp + 0x48]
mov edx, 0x68
call fcn.1403e3650
nop
lea r9, [0x1400ea510]
mov edx, 0x48
lea r8d, [rdx - 0x47]
lea rcx, [rsp + 0x130]
call fcn.1403e3928
nop
mov rcx, qword [rsp + 0x70]
mov rsi, qword [rcx + 8]
cmp byte [rsi + 0x19], 0
jne 0x140199793
nop dword [rax]
nop word [rax + rax]
mov r8, qword [rsi + 0x10]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x70]
call fcn.1400e5ac0
mov rdi, rsi
mov rsi, qword [rsi]
lea rcx, [rdi + 0x40]
call fcn.1400c6440
lea rcx, [rdi + 0x20]
call fcn.1400c6440
mov edx, 0x60
mov rcx, rdi
call fcn.1403e3650
cmp byte [rsi + 0x19], 0
je 0x140199750
mov rcx, qword [rsp + 0x70]
mov edx, 0x60
call fcn.1403e3650
nop
lea r9, [fcn.1400ea560]
mov edx, 0x40
lea r8d, [rdx - 0x3a]
lea rcx, [rsp + 0x1c0]
call fcn.1403e3928
nop
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x1401997ff
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401997fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401998ed
call fcn.1403e3650
movdqa xmm0, xmmword [0x14057a8c0]
movdqu xmmword [rsp + 0x120], xmm0
mov byte [rsp + 0x110], 0
mov rax, qword [r13 + 0x218]
mov rcx, qword [rax + 0x18]
lea rdx, [rsp + 0xc0]
mov rcx, qword [rcx + 0x18]
call fcn.1401722f0
nop
mov r8, qword [rsp + 0x100]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0x100]
call fcn.1400e5a20
mov edx, 0x68
mov rcx, qword [rsp + 0x100]
call fcn.1403e3650
mov r8, qword [rsp + 0xf0]
mov r8, qword [r8 + 8]
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0xf0]
call fcn.1400e5ac0
mov edx, 0x60
mov rcx, qword [rsp + 0xf0]
call fcn.1403e3650
lea rcx, [rsp + 0xc0]
call fcn.1400c6440
movzx eax, r12b
jmp 0x1401998be
cmp rbx, rax
je 0x1401998f3
mov rbx, qword [rbx + 8]
jmp 0x140199140
mov rcx, qword [rsp + 0x340]
xor rcx, rsp
call fcn.1403e3630
add rsp, 0x350
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.1400c4f10
nop
call fcn.1403fd768
nop
call fcn.1403fd768
nop
lea rcx, str.invalid_unordered_map_K__T__key
call fcn.1403c23b0
int3