Function at 0x1400018b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4f0]
sub rsp, 0x5f0
movaps xmmword [rsp + 0x5e0], xmm6
mov rax, qword [0x140009040]
xor rax, rsp
mov qword [rbp + 0x4d0], rax
mov r12, rdx
mov r13, rcx
xor r11d, r11d
mov qword [rbp - 0x80], r11
mov qword [rbp - 0x78], r11
mov rax, qword gs:[0x60]
mov r15, qword [rax + 0x18]
add r15, 0x10
mov rax, qword [r15]
mov r14, qword [rax]
mov qword [rbp + 0x3d8], r14
mov qword [rbp + 0x3e0], r15
mov qword [rbp + 0x310], r14
mov qword [rbp + 0x318], r14
mov qword [rbp + 0x418], r15
mov qword [rbp + 0x420], r15
lea rdx, [r11 - 1]
cmp r14, r15
je 0x140001d0b
mov rsi, r14
mov qword [rbp + 0x318], r14
movabs rbx, 0xef7ac599bcf0b9ac
movabs rdi, 0x1fa28d1ae8cc80fc
test rsi, rsi
jne 0x14000197b
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x78], r11
lea rax, [rsp + 0x70]
jmp 0x14000198d
movups xmm0, xmmword [rsi + 0x58]
movups xmmword [rbp + 0x200], xmm0
lea rax, [rbp + 0x200]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x248], xmm0
mov rcx, qword [rax + 8]
mov qword [rbp + 0x140], rcx
mov rax, rdx
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400019a5
mov qword [rbp + 0x148], rax
movaps xmm0, xmmword [rbp + 0x140]
movdqa xmmword [rbp + 0x220], xmm0
lea r8, [rbp + 0x220]
mov rdx, rbx
call fcn.140001660
test al, al
jne 0x140001bfb
xorps xmm0, xmm0
movups xmmword [rbp + 0x2c0], xmm0
mov rcx, qword [rsi + 0x30]
mov qword [rbp + 0x2c0], rcx
mov eax, dword [rcx + 0x3c]
mov edx, dword [rax + rcx + 0x88]
test rcx, rcx
jne 0x140001a08
xor r10d, r10d
mov eax, r10d
jmp 0x140001a0c
lea rax, [rcx + rdx]
mov qword [rbp + 0x2c8], rax
xor eax, eax
movups xmmword [rbp + 0x360], xmm0
movups xmmword [rbp + 0x370], xmm0
mov qword [rbp + 0x380], rax
mov byte [rsp + 0x20], al
mov r9, rdi
lea r8, [rbp + 0x2c0]
lea rdx, [rbp + 0x360]
call fcn.140005110
mov rax, qword [rbp + 0x2c8]
mov r9d, dword [rax + 0x18]
lea r10, [rbp + 0x2c0]
mov qword [rbp + 0x70], r10
mov qword [rbp + 0x78], r9
xor r11d, r11d
mov qword [rbp + 0x80], r11
mov qword [rbp + 0x88], r11
mov qword [rbp + 0x90], r11
mov r8, qword [r10 + 8]
mov eax, dword [r8 + 0x18]
cmp r9, rax
jae 0x140001af8
mov rdx, qword [r10]
test rdx, rdx
jne 0x140001a90
mov ecx, r11d
jmp 0x140001a9e
mov eax, dword [r8 + 0x20]
add rax, rdx
mov ecx, dword [rax + r9*4]
add rcx, rdx
mov qword [rbp + 0x150], rcx
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], r11b
jne 0x140001ab0
mov qword [rbp + 0x158], rax
mov ecx, dword [r8 + 0x1c]
add rcx, rdx
mov eax, dword [r8 + 0x24]
add rax, rdx
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
test rdx, rdx
mov rax, r11
je 0x140001ae3
lea rax, [rdx + r8]
movups xmm0, xmmword [rbp + 0x150]
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rax
cmp qword [rbp + 0x368], r9
jne 0x140001b0e
cmp qword [rbp + 0x360], r10
je 0x140001bfe
mov rax, qword [rbp + 0x2c0]
mov ecx, dword [rax + 0x3c]
mov rdx, qword [rcx + rax + 0x88]
mov ecx, edx
add rcx, rax
shr rdx, 0x20
add rdx, rcx
mov r8, r11
test rcx, rcx
cmovne r8, rdx
mov rdi, qword [rbp + 0x380]
cmp rdi, rcx
mov ecx, 0xff
je 0x140001b57
mov eax, 1
cmovb eax, ecx
test al, al
js 0x140001cfb
cmp rdi, r8
je 0x140001cfb
mov eax, 1
cmovb eax, ecx
test al, al
jns 0x140001cfb
mov qword [rbp + 0x160], rdi
mov rbx, 0xffffffffffffffff
nop
inc rbx
cmp byte [rdi + rbx], r11b
jne 0x140001b80
mov qword [rbp + 0x168], rbx
test rbx, rbx
je 0x140001c2a
mov r8, rbx
mov edx, 0x2e
mov rcx, rdi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140001c27
sub rax, rdi
cmp rax, 0xffffffffffffffff
je 0x140001c27
mov rcx, rax
cmp rbx, rax
cmovb rcx, rbx
mov qword [rbp + 0x350], rdi
mov qword [rbp + 0x358], rcx
inc rax
cmp rbx, rax
jb 0x140002cf4
sub rbx, rax
mov rsi, 0xffffffffffffffff
cmp rbx, rsi
cmovb rsi, rbx
movups xmm0, xmmword [rbp + 0x350]
add rdi, rax
xor r11d, r11d
jmp 0x140001c3a
xor r11d, r11d
mov r14, qword [r14]
mov rsi, r14
mov qword [rbp + 0x310], r14
mov qword [rbp + 0x318], r14
cmp r14, r15
je 0x140001d0b
mov rdx, 0xffffffffffffffff
jmp 0x140001965
xor r11d, r11d
movups xmm0, xmmword [rbp + 0x160]
mov rdi, r11
mov rsi, r11
mov rcx, rbx
movups xmmword [rbp + 0x438], xmm0
mov r10d, r11d
mov r14d, 0x5a7f5a6c
mov r9d, r14d
movabs r15, 0x100000001b3
test rcx, rcx
je 0x140001ca6
movq r11, xmm0
mov rbx, qword [rbp + 0x440]
nop dword [rax + rax]
movzx r8d, byte [r11]
lea edx, [r8 - 0x41]
lea eax, [r8 + 0x20]
movzx ecx, al
cmp dl, 0x19
cmova ecx, r8d
movsx rax, cl
xor rax, r9
imul rax, r15
add r9, rax
inc r10d
lea r11, [r11 + 1]
movsxd rax, r10d
cmp rax, rbx
jb 0x140001c70
xor r11d, r11d
mov r10, r14
test rsi, rsi
je 0x140001ce3
nop
movzx r8d, byte [rdi]
lea edx, [r8 - 0x41]
lea eax, [r8 + 0x20]
movzx ecx, al
cmp dl, 0x19
cmova ecx, r8d
movsx rax, cl
xor rax, r10
imul rax, r15
add r10, rax
inc r11d
lea rdi, [rdi + 1]
movsxd rax, r11d
cmp rax, rsi
jb 0x140001cb0
mov r8, r10
lea rdx, [rbp + 0x290]
lea rcx, [rbp - 0x80]
call fcn.140001340
xor r11d, r11d
jmp 0x140001d19
mov qword [rbp + 0x290], rdi
mov qword [rbp + 0x298], rsi
jmp 0x140001d19
mov qword [rbp + 0x290], r11
mov qword [rbp + 0x298], r11
movaps xmm0, xmmword [rbp + 0x290]
movdqa xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x40], 0x2b2a2d2c
xor eax, eax
mov qword [rbp - 0x3c], rax
mov dword [rbp - 0x34], eax
mov byte [rbp - 0x30], al
mov qword [rsp + 0x30], r11
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jae 0x140001da8
movabs r9, 0x94d67c99c9886fda
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax - 0x40]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0xa
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax - 0x40], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x140001d60
movsxd rcx, dword [rbp - 0x40]
mov rax, qword [rbp + 0x290]
cmp rax, rcx
jne 0x14000278c
mov dword [rsp + 0x39], r11d
mov byte [rsp + 0x3d], 0
mov word [rbp + 0x49d], 0x72
mov dword [rbp + 0x498], 0x7206ae72
mov byte [rbp + 0x49c], 0xff
mov rdx, r11
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rbp + rdx + 0x498]
movzx eax, byte [rbp + rdx + 0x499]
mov byte [rbp + rdx + 0x498], al
mov byte [rbp + rdx + 0x499], cl
add rdx, 2
cmp rdx, 6
jb 0x140001df0
movzx eax, byte [rbp + 0x498]
not al
movzx r9d, al
and r9b, 0xd5
add r9b, r9b
shr al, 1
and al, 0x55
or r9b, al
xor r10b, r10b
mov r8d, r11d
mov edx, 7
nop
movzx eax, r9b
movzx ecx, r8b
shr al, cl
and al, 1
mov ecx, edx
shl al, cl
or r10b, al
inc r8d
dec edx
cmp edx, 0xffffffff
jg 0x140001e40
mov byte [rsp + 0x38], r10b
movzx eax, byte [rbp + 0x499]
not al
movzx r9d, al
and r9b, 0xd5
add r9b, r9b
shr al, 1
and al, 0x55
or r9b, al
xor r10b, r10b
mov r8d, r11d
mov edx, 7
nop dword [rax + rax]
movzx eax, r9b
movzx ecx, r8b
shr al, cl
and al, 1
mov ecx, edx
shl al, cl
or r10b, al
inc r8d
dec edx
cmp edx, 0xffffffff
jg 0x140001e90
mov byte [rsp + 0x39], r10b
movzx eax, byte [rbp + 0x49a]
not al
movzx r9d, al
and r9b, 0xd5
add r9b, r9b
shr al, 1
and al, 0x55
or r9b, al
xor r10b, r10b
mov r8d, r11d
mov edx, 7
nop dword [rax + rax]
movzx eax, r9b
movzx ecx, r8b
shr al, cl
and al, 1
mov ecx, edx
shl al, cl
or r10b, al
inc r8d
dec edx
cmp edx, 0xffffffff
jg 0x140001ee0
mov byte [rsp + 0x3a], r10b
movzx eax, byte [rbp + 0x49b]
not al
movzx r9d, al
and r9b, 0xd5
add r9b, r9b
shr al, 1
and al, 0x55
or r9b, al
xor r10b, r10b
mov r8d, r11d
mov edx, 7
nop dword [rax + rax]
movzx eax, r9b
movzx ecx, r8b
shr al, cl
and al, 1
mov ecx, edx
shl al, cl
or r10b, al
inc r8d
dec edx
cmp edx, 0xffffffff
jg 0x140001f30
mov byte [rsp + 0x3b], r10b
movzx eax, byte [rbp + 0x49c]
not al
movzx r9d, al
and r9b, 0xd5
add r9b, r9b
shr al, 1
and al, 0x55
or r9b, al
xor r10b, r10b
mov r8d, r11d
mov edx, 7
nop dword [rax + rax]
movzx eax, r9b
movzx ecx, r8b
shr al, cl
and al, 1
mov ecx, edx
shl al, cl
or r10b, al
inc r8d
dec edx
cmp edx, 0xffffffff
jg 0x140001f80
mov byte [rsp + 0x3c], r10b
movzx eax, byte [rbp + 0x49d]
not al
movzx r10d, al
and r10b, 0xd5
add r10b, r10b
shr al, 1
and al, 0x55
or r10b, al
xor r9b, r9b
mov r8d, r11d
mov edx, 7
nop dword [rax + rax]
movzx eax, r10b
movzx ecx, r8b
shr al, cl
and al, 1
mov ecx, edx
shl al, cl
or r9b, al
inc r8d
dec edx
cmp edx, 0xffffffff
jg 0x140001fd0
mov byte [rsp + 0x3d], r9b
mov byte [rsp + 0x3e], 0
movdqa xmm2, xmmword [0x140007420]
movdqu xmmword [rsp + 0x40], xmm2
movdqa xmm1, xmmword [0x140007400]
movdqu xmmword [rsp + 0x50], xmm1
mov dword [rsp + 0x60], 0xc6f7b6c6
mov dword [rsp + 0x64], 0xa6f7e2d6
mov dword [rsp + 0x68], 0x86a626b6
mov word [rsp + 0x6c], 0x47ff
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x60], rax
mov dword [rbp + 0x68], eax
mov word [rbp + 0x6c], ax
mov byte [rbp + 0x6e], al
mov byte [rbp + 0x4ce], al
movups xmmword [rbp + 0x4a0], xmm2
movups xmmword [rbp + 0x4b0], xmm1
movsd xmm0, qword [rsp + 0x60]
movsd qword [rbp + 0x4c0], xmm0
mov eax, dword [rsp + 0x68]
mov dword [rbp + 0x4c8], eax
movzx eax, word [rsp + 0x6c]
mov word [rbp + 0x4cc], ax
mov rdx, r11
nop dword [rax + rax]
movzx ecx, byte [rbp + rdx + 0x4a0]
movzx eax, byte [rbp + rdx + 0x4a1]
mov byte [rbp + rdx + 0x4a0], al
mov byte [rbp + rdx + 0x4a1], cl
add rdx, 2
cmp rdx, 0x2e
jb 0x140002090
xor esi, esi
nop word [rax + rax]
movzx eax, byte [rbp + r11 + 0x4a0]
not al
movzx r9d, al
and r9b, 0xd5
add r9b, r9b
shr al, 1
and al, 0x55
or r9b, al
xor r10b, r10b
mov r8d, esi
mov edx, 7
nop dword [rax + rax]
movzx eax, r9b
movzx ecx, r8b
shr al, cl
and al, 1
mov ecx, edx
shl al, cl
or r10b, al
inc r8d
dec edx
cmp edx, 0xffffffff
jg 0x1400020f0
mov byte [rbp + r11 + 0x40], r10b
movzx eax, byte [rbp + r11 + 0x4a1]
not al
movzx r10d, al
and r10b, 0xd5
add r10b, r10b
shr al, 1
and al, 0x55
or r10b, al
xor r9b, r9b
mov r8d, esi
mov edx, 7
nop word [rax + rax]
movzx eax, r10b
movzx ecx, r8b
shr al, cl
and al, 1
mov ecx, edx
shl al, cl
or r9b, al
inc r8d
dec edx
cmp edx, 0xffffffff
jg 0x140002140
mov byte [rbp + r11 + 0x41], r9b
add r11, 2
cmp r11, 0x2e
jb 0x1400020c0
mov byte [rbp + 0x6e], sil
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140002206
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140002206
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x16507bb5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140002201
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400021e0
cmp r8d, 0x5ddda4d4
je 0x14000220b
test r9d, r9d
jne 0x1400021c0
mov rax, qword [rax]
jmp 0x140002190
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov r9d, 0x10
lea r8, [rsp + 0x38]
lea rdx, [rbp + 0x40]
xor ecx, ecx
call r10
mov r12, qword [r13]
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
movups xmmword [rbp + 0x10], xmm0
movabs rdi, 0x4baa8dbc3abe7353
mov r8, rdi
lea rdx, [rbp + 0x10]
call fcn.140004fd0
mov rax, qword [rbp + 0x10]
test rax, rax
jne 0x1400025fc
xor r10d, r10d
mov qword [rbp - 0x60], r10
mov qword [rbp - 0x58], r10
mov rax, qword gs:[0x60]
mov r15, qword [rax + 0x18]
add r15, 0x10
mov rax, qword [r15]
mov rsi, qword [rax]
mov qword [rbp + 0x3e8], rsi
mov qword [rbp + 0x3f0], r15
mov qword [rbp + 0x300], rsi
mov qword [rbp + 0x308], rsi
mov qword [rbp + 0x3f8], r15
mov qword [rbp + 0x400], r15
cmp rsi, r15
je 0x140002588
mov r14, rsi
mov qword [rbp + 0x308], rsi
movabs rbx, 0x218c04230219554a
lea r13, [r10 - 1]
test r14, r14
jne 0x1400022e9
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r10
lea rax, [rbp - 0x70]
jmp 0x1400022fc
movups xmm0, xmmword [r14 + 0x58]
movups xmmword [rbp + 0x1a0], xmm0
lea rax, [rbp + 0x1a0]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x238], xmm0
mov rcx, qword [rax + 8]
mov qword [rbp + 0x130], rcx
mov rax, r13
inc rax
cmp word [rcx + rax*2], 0
jne 0x140002314
mov qword [rbp + 0x138], rax
movaps xmm0, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x1c0], xmm0
lea r8, [rbp + 0x1c0]
mov rdx, rbx
call fcn.140001660
test al, al
jne 0x140002568
xorps xmm0, xmm0
movups xmmword [rbp + 0x2d0], xmm0
mov rcx, qword [r14 + 0x30]
mov qword [rbp + 0x2d0], rcx
mov eax, dword [rcx + 0x3c]
mov edx, dword [rax + rcx + 0x88]
test rcx, rcx
jne 0x140002377
xor r10d, r10d
mov eax, r10d
jmp 0x14000237b
lea rax, [rcx + rdx]
mov qword [rbp + 0x2d8], rax
xor eax, eax
movups xmmword [rbp + 0x388], xmm0
movups xmmword [rbp + 0x398], xmm0
mov qword [rbp + 0x3a8], rax
mov byte [rsp + 0x20], al
mov r9, rdi
lea r8, [rbp + 0x2d0]
lea rdx, [rbp + 0x388]
call fcn.140005110
mov rax, qword [rbp + 0x2d8]
mov r8d, dword [rax + 0x18]
lea r11, [rbp + 0x2d0]
mov qword [rbp + 0xc0], r11
mov qword [rbp + 0xc8], r8
xor r10d, r10d
mov qword [rbp + 0xd0], r10
mov qword [rbp + 0xd8], r10
mov qword [rbp + 0xe0], r10
mov r9, qword [r11 + 8]
mov eax, dword [r9 + 0x18]
cmp r8, rax
jae 0x140002468
mov rdx, qword [r11]
test rdx, rdx
jne 0x140002405
mov ecx, r10d
jmp 0x140002413
mov eax, dword [r9 + 0x20]
add rax, rdx
mov ecx, dword [rax + r8*4]
add rcx, rdx
mov qword [rbp + 0x170], rcx
mov rax, r13
nop dword [rax]
inc rax
cmp byte [rcx + rax], r10b
jne 0x140002420
mov qword [rbp + 0x178], rax
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov r9d, dword [rcx + rax*4]
test rdx, rdx
mov rax, r10
je 0x140002453
lea rax, [rdx + r9]
movups xmm0, xmmword [rbp + 0x170]
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], rax
cmp qword [rbp + 0x390], r8
jne 0x14000247e
cmp qword [rbp + 0x388], r11
je 0x14000256b
mov rax, qword [rbp + 0x2d0]
mov ecx, dword [rax + 0x3c]
mov rdx, qword [rcx + rax + 0x88]
mov ecx, edx
add rcx, rax
shr rdx, 0x20
add rdx, rcx
mov r8, r10
test rcx, rcx
cmovne r8, rdx
mov rsi, qword [rbp + 0x3a8]
mov edx, 1
cmp rsi, rcx
mov ecx, 0xff
je 0x1400024c9
mov eax, edx
cmovb eax, ecx
test al, al
js 0x1400026eb
cmp rsi, r8
je 0x1400026eb
cmovb edx, ecx
test dl, dl
jns 0x1400026eb
mov qword [rbp + 0xe8], rsi
mov rbx, r13
inc rbx
cmp byte [rsi + rbx], r10b
jne 0x1400024e7
mov qword [rbp + 0xf0], rbx
test rbx, rbx
je 0x14000260f
mov r8, rbx
mov edx, 0x2e
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14000260c
sub rax, rsi
cmp rax, 0xffffffffffffffff
je 0x14000260c
mov rcx, rax
cmp rbx, rax
cmovb rcx, rbx
mov qword [rbp + 0x340], rsi
mov qword [rbp + 0x348], rcx
inc rax
cmp rbx, rax
jb 0x140002cfa
sub rbx, rax
cmp rbx, 0xffffffffffffffff
cmovb r13, rbx
movups xmm0, xmmword [rbp + 0x340]
lea r11, [rax + rsi]
xor r10d, r10d
jmp 0x14000261f
xor r10d, r10d
mov rsi, qword [rsi]
mov r14, rsi
mov qword [rbp + 0x300], rsi
mov qword [rbp + 0x308], rsi
cmp rsi, r15
jne 0x1400022d6
mov qword [rbp + 0x2e0], r10
mov qword [rbp + 0x2e8], r10
xor esi, esi
movaps xmm6, xmmword [rbp + 0x2e0]
movaps xmmword [rbp - 0x60], xmm6
movups xmmword [rbp + 0x10], xmm6
mov qword [rbp + 0x328], rdi
movdqa xmmword [rbp + 0x1b0], xmm6
lea rbx, [0x1400097c0]
mov qword [rbp + 0x210], rbx
mov rcx, rbx
call sub.KERNEL32.dll_AcquireSRWLockExclusive
nop
lea r9, [rbp + 0x1b0]
lea r8, [rbp + 0x328]
lea rdx, [rbp + 0x258]
lea rcx, [0x1400097c8]
call fcn.140005370
nop
mov rcx, rbx
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
movq rax, xmm6
test rax, rax
jne 0x1400026fe
mov eax, esi
jmp 0x140002704
xor r10d, r10d
movups xmm0, xmmword [rbp + 0xe8]
mov r11, r10
mov r13, r10
mov rcx, rbx
movups xmmword [rbp + 0x458], xmm0
mov ebx, 0x5a7f5a6c
mov r9d, ebx
movabs r14, 0x100000001b3
test rcx, rcx
je 0x140002688
movq rbx, xmm0
mov rsi, qword [rbp + 0x460]
nop dword [rax]
movzx r8d, byte [rbx]
lea edx, [r8 - 0x41]
lea eax, [r8 + 0x20]
movzx ecx, al
cmp dl, 0x19
cmova ecx, r8d
movsx rax, cl
xor rax, r9
imul rax, r14
add r9, rax
inc r10d
lea rbx, [rbx + 1]
movsxd rax, r10d
cmp rax, rsi
jb 0x140002650
mov ebx, 0x5a7f5a6c
xor esi, esi
mov r10d, esi
test r13, r13
je 0x1400026d3
nop dword [rax]
nop word [rax + rax]
movzx r8d, byte [r11]
lea edx, [r8 - 0x41]
lea eax, [r8 + 0x20]
movzx ecx, al
cmp dl, 0x19
cmova ecx, r8d
movsx rax, cl
xor rax, rbx
imul rax, r14
add rbx, rax
inc r10d
lea r11, [r11 + 1]
movsxd rax, r10d
cmp rax, r13
jb 0x1400026a0
mov r8, rbx
lea rdx, [rbp + 0x2e0]
lea rcx, [rbp - 0x60]
call fcn.140001340
jmp 0x140002598
mov qword [rbp + 0x2e0], rsi
mov qword [rbp + 0x2e8], r14
jmp 0x140002596
mov rcx, r12
call rax
nop
mov dword [rbp + 8], eax
mov byte [rbp + 0x180], 0x58
xorps xmm0, xmm0
movups xmmword [rbp + 0x181], xmm0
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jae 0x140002780
movabs r9, 0xd73ba2c2e8f97ef4
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x180]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x54
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x180], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x11
jb 0x140002732
movzx eax, byte [rbp + 0x180]
jmp 0x140002bdc
mov rcx, r12
call rax
mov r12, qword [r13]
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp - 8], xmm0
movabs rdi, 0x4baa8dbc3abe7353
mov r8, rdi
lea rdx, [rbp - 8]
call fcn.140004fd0
mov rax, qword [rbp - 8]
test rax, rax
jne 0x140002b5a
xor r10d, r10d
mov qword [rbp - 0x20], r10
mov qword [rbp - 0x18], r10
mov rax, qword gs:[0x60]
mov r15, qword [rax + 0x18]
add r15, 0x10
mov rax, qword [r15]
mov rsi, qword [rax]
mov qword [rbp + 0x408], rsi
mov qword [rbp + 0x410], r15
mov qword [rbp + 0x2f0], rsi
mov qword [rbp + 0x2f8], rsi
mov qword [rbp + 0x428], r15
mov qword [rbp + 0x430], r15
cmp rsi, r15
je 0x140002ae8
mov r14, rsi
mov qword [rbp + 0x2f8], rsi
movabs rbx, 0x218c04230219554a
lea r13, [r10 - 1]
test r14, r14
jne 0x140002843
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r10
lea rax, [rbp - 0x50]
jmp 0x140002856
movups xmm0, xmmword [r14 + 0x58]
movups xmmword [rbp + 0x1d0], xmm0
lea rax, [rbp + 0x1d0]
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x278], xmm0
mov rcx, qword [rax + 8]
mov qword [rbp + 0x100], rcx
mov rax, r13
nop
inc rax
cmp word [rcx + rax*2], 0
jne 0x140002870
mov qword [rbp + 0x108], rax
movaps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x1e0], xmm0
lea r8, [rbp + 0x1e0]
mov rdx, rbx
call fcn.140001660
test al, al
jne 0x140002ac8
xorps xmm0, xmm0
movups xmmword [rbp + 0x2a0], xmm0
mov rcx, qword [r14 + 0x30]
mov qword [rbp + 0x2a0], rcx
mov eax, dword [rcx + 0x3c]
mov edx, dword [rax + rcx + 0x88]
test rcx, rcx
jne 0x1400028d3
xor r10d, r10d
mov eax, r10d
jmp 0x1400028d7
lea rax, [rcx + rdx]
mov qword [rbp + 0x2a8], rax
xor eax, eax
movups xmmword [rbp + 0x3b0], xmm0
movups xmmword [rbp + 0x3c0], xmm0
mov qword [rbp + 0x3d0], rax
mov byte [rsp + 0x20], al
mov r9, rdi
lea r8, [rbp + 0x2a0]
lea rdx, [rbp + 0x3b0]
call fcn.140005110
mov rax, qword [rbp + 0x2a8]
mov r8d, dword [rax + 0x18]
lea r11, [rbp + 0x2a0]
mov qword [rbp + 0x98], r11
mov qword [rbp + 0xa0], r8
xor r10d, r10d
mov qword [rbp + 0xa8], r10
mov qword [rbp + 0xb0], r10
mov qword [rbp + 0xb8], r10
mov r9, qword [r11 + 8]
mov eax, dword [r9 + 0x18]
cmp r8, rax
jae 0x1400029c8
mov rdx, qword [r11]
test rdx, rdx
jne 0x140002961
mov ecx, r10d
jmp 0x14000296f
mov eax, dword [r9 + 0x20]
add rax, rdx
mov ecx, dword [rax + r8*4]
add rcx, rdx
mov qword [rbp + 0x110], rcx
mov rax, r13
nop dword [rax]
inc rax
cmp byte [rcx + rax], r10b
jne 0x140002980
mov qword [rbp + 0x118], rax
mov ecx, dword [r9 + 0x1c]
add rcx, rdx
mov eax, dword [r9 + 0x24]
add rax, rdx
movzx eax, word [rax + r8*2]
mov r9d, dword [rcx + rax*4]
test rdx, rdx
mov rax, r10
je 0x1400029b3
lea rax, [rdx + r9]
movups xmm0, xmmword [rbp + 0x110]
movups xmmword [rbp + 0xa8], xmm0
mov qword [rbp + 0xb8], rax
cmp qword [rbp + 0x3b8], r8
jne 0x1400029de
cmp qword [rbp + 0x3b0], r11
je 0x140002acb
mov rax, qword [rbp + 0x2a0]
mov ecx, dword [rax + 0x3c]
mov rdx, qword [rcx + rax + 0x88]
mov ecx, edx
add rcx, rax
shr rdx, 0x20
add rdx, rcx
mov r8, r10
test rcx, rcx
cmovne r8, rdx
mov rsi, qword [rbp + 0x3d0]
mov edx, 1
cmp rsi, rcx
mov ecx, 0xff
je 0x140002a29
mov eax, edx
cmovb eax, ecx
test al, al
js 0x140002cdb
cmp rsi, r8
je 0x140002cdb
cmovb edx, ecx
test dl, dl
jns 0x140002cdb
mov qword [rbp + 0x120], rsi
mov rbx, r13
inc rbx
cmp byte [rsi + rbx], r10b
jne 0x140002a47
mov qword [rbp + 0x128], rbx
test rbx, rbx
je 0x140002c11
mov r8, rbx
mov edx, 0x2e
mov rcx, rsi
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x140002c0e
sub rax, rsi
cmp rax, 0xffffffffffffffff
je 0x140002c0e
mov rcx, rax
cmp rbx, rax
cmovb rcx, rbx
mov qword [rbp + 0x330], rsi
mov qword [rbp + 0x338], rcx
inc rax
cmp rbx, rax
jb 0x140002cee
sub rbx, rax
cmp rbx, 0xffffffffffffffff
cmovb r13, rbx
movups xmm0, xmmword [rbp + 0x330]
lea r11, [rsi + rax]
xor r10d, r10d
jmp 0x140002c21
xor r10d, r10d
mov rsi, qword [rsi]
mov r14, rsi
mov qword [rbp + 0x2f0], rsi
mov qword [rbp + 0x2f8], rsi
cmp rsi, r15
jne 0x140002830
mov qword [rbp + 0x2b0], r10
mov qword [rbp + 0x2b8], r10
movaps xmm6, xmmword [rbp + 0x2b0]
movaps xmmword [rbp - 0x20], xmm6
movups xmmword [rbp - 8], xmm6
mov qword [rbp + 0x320], rdi
movdqa xmmword [rbp + 0x1f0], xmm6
lea rbx, [0x1400097c0]
mov qword [rbp + 0x230], rbx
mov rcx, rbx
call sub.KERNEL32.dll_AcquireSRWLockExclusive
nop
lea r9, [rbp + 0x1f0]
lea r8, [rbp + 0x320]
lea rdx, [rbp + 0x268]
lea rcx, [0x1400097c8]
call fcn.140005370
nop
mov rcx, rbx
call sub.KERNEL32.dll_ReleaseSRWLockExclusive
movq rax, xmm6
test rax, rax
je 0x140002b65
mov rcx, r12
call rax
nop
mov dword [rbp - 0x10], eax
mov byte [rbp + 0x20], 0x81
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x21], xmm0
mov qword [rbp + 0x31], rax
mov byte [rbp + 0x39], al
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
movabs r9, 0x27f26a1742e6c15
mov rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x30]
movzx edx, byte [rbp + rax + 0x20]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x6d
mov rax, qword [rsp + 0x30]
mov byte [rbp + rax + 0x20], r8b
mov rax, qword [rsp + 0x30]
inc rax
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
cmp rax, 0x1a
jb 0x140002b90
movzx eax, byte [rbp + 0x20]
mov rcx, qword [rbp + 0x4d0]
xor rcx, rsp
call fcn.140005a00
mov rbx, qword [rsp + 0x640]
movaps xmm6, xmmword [rsp + 0x5e0]
add rsp, 0x5f0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor r10d, r10d
movups xmm0, xmmword [rbp + 0x120]
mov r11, r10
mov r13, r10
mov rcx, rbx
movups xmmword [rbp + 0x478], xmm0
mov ebx, 0x5a7f5a6c
mov r9d, ebx
movabs r14, 0x100000001b3
test rcx, rcx
je 0x140002c88
movq rbx, xmm0
mov rsi, qword [rbp + 0x480]
nop dword [rax + rax]
movzx r8d, byte [rbx]
lea edx, [r8 - 0x41]
lea eax, [r8 + 0x20]
movzx ecx, al
cmp dl, 0x19
cmova ecx, r8d
movsx rax, cl
xor rax, r9
imul rax, r14
add r9, rax
inc r10d
lea rbx, [rbx + 1]
movsxd rax, r10d
cmp rax, rsi
jb 0x140002c50
mov ebx, 0x5a7f5a6c
xor r10d, r10d
test r13, r13
je 0x140002cc3
movzx r8d, byte [r11]
lea edx, [r8 - 0x41]
lea eax, [r8 + 0x20]
movzx ecx, al
cmp dl, 0x19
cmova ecx, r8d
movsx rax, cl
xor rax, rbx
imul rax, r14
add rbx, rax
inc r10d
lea r11, [r11 + 1]
movsxd rax, r10d
cmp rax, r13
jb 0x140002c90
mov r8, rbx
lea rdx, [rbp + 0x2b0]
lea rcx, [rbp - 0x20]
call fcn.140001340
jmp 0x140002af6
mov qword [rbp + 0x2b0], rsi
mov qword [rbp + 0x2b8], r14
jmp 0x140002af6
call fcn.140004fb0
nop
call fcn.140004fb0
nop
call fcn.140004fb0
int3