Function at 0x140006ed0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xa0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x14001e040]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r12, rcx
mov rcx, qword [rcx]
call fcn.140003e40
test al, al
je 0x14000719e
movabs r13, 0x311cdad160000
movabs r14, 0x112e0be826d694b3
movsd xmm6, qword [0x1400198c8]
movabs rbx, 0x7fffffffffffffff
movabs rdi, 0x12a05f200
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x31], xmm0
mov qword [rbp - 0x21], rax
lea rdx, [rbp - 0x31]
mov rcx, qword [r12]
call fcn.140005190
nop
mov rsi, qword [rbp - 0x31]
mov r15, qword [rbp - 0x29]
cmp rsi, r15
je 0x14000709e
mov rdx, rsi
lea rcx, [rbp - 9]
call fcn.140007ae0
nop
lea r14, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova r14, qword [rbp - 9]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140007016
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140007016
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x4f2c3548
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140007011
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140006ff0
cmp r8d, 0xdd640e49
je 0x14000701b
test r9d, r9d
jne 0x140006fd0
mov rax, qword [rax]
jmp 0x140006fa0
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov rcx, r14
call rdx
nop
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x140007073
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000706e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000723b
call fcn.14001548c
add rsi, 0x20
cmp rsi, r15
jne 0x140006f74
movabs rbx, 0x7fffffffffffffff
movabs rdi, 0x12a05f200
movabs r14, 0x112e0be826d694b3
lea rcx, [rbp - 0x41]
call fcn.140001910
mov rax, qword [rbp - 0x41]
movabs rcx, 0x7ffffffed5fa0dff
cmp rax, rcx
jge 0x1400070bf
add rdi, rax
jmp 0x1400070c2
mov rdi, rbx
lea rcx, [rbp - 0x49]
call fcn.140001910
mov rax, qword [rbp - 0x49]
cmp rax, rdi
jge 0x140007142
mov rbx, rdi
sub rbx, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rdx, rax, 0x64
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
comisd xmm0, xmm6
seta r8b
mov rcx, r13
test r8b, r8b
cmove rcx, rbx
add rcx, rdx
mov rax, r14
imul rcx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp - 0x19], rdx
imul rax, rdx, 0x3b9aca00
sub rcx, rax
mov dword [rbp - 0x11], ecx
lea rcx, [rbp - 0x19]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
lea rcx, [rbp - 0x49]
call fcn.140001910
mov rax, qword [rbp - 0x49]
cmp rax, rdi
jl 0x1400070d4
mov rcx, qword [rbp - 0x31]
test rcx, rcx
je 0x14000718d
mov rdx, qword [rbp - 0x29]
call fcn.140008ff0
mov rdx, qword [rbp - 0x21]
mov rcx, qword [rbp - 0x31]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007188
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007242
call fcn.14001548c
mov rcx, qword [r12]
call fcn.140003e40
test al, al
jne 0x140006f34
xor ecx, ecx
int 0x29
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140007236
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140007236
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xd92e0020
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140007231
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140007210
cmp r8d, 0x13e57f0
je 0x140007249
test r9d, r9d
jne 0x1400071f0
mov rax, qword [rax]
jmp 0x1400071c0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
xor ecx, ecx
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400072f6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400072f6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0xda2bc31c
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400072f1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400072d0
cmp r8d, 0x3f2ddc1
je 0x1400072fb
test r9d, r9d
jne 0x1400072b0
mov rax, qword [rax]
jmp 0x140007280
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
xor ecx, ecx
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400073a6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400073a6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xeb3299a4
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400073a1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140007380
cmp r8d, 0xe6f2affe
je 0x1400073ab
test r9d, r9d
jne 0x140007360
mov rax, qword [rax]
jmp 0x140007330
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
call rax
mov dword [0], 0xdead
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1400150d0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret