Function at 0x140037f80
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
mov rax, qword [0x14007c040]
xor rax, rsp
mov qword [rbp - 1], rax
mov r14, rcx
mov qword [rbp - 0x21], rcx
call fcn.140003750
movsx esi, al
call fcn.140003760
movsx edx, al
imul esi, edx
call fcn.140003790
movsd xmm8, qword [0x140073f60]
movsd xmm7, qword [0x140073f88]
movsd xmm6, qword [0x140073fa0]
movsx r15d, al
lea eax, [rsi + rsi*4]
lea r12d, [r15 + rsi*2]
add r12d, esi
lea ebx, [r15 + rax*2]
mov dword [rbp - 0x61], r12d
mov r13d, dword [rbp - 0x61]
mov dword [rbp - 0x71], ebx
movabs rdi, 0x837e1f5abcff2ab0
nop dword [rax]
movsx eax, byte [0x14007c0da]
movd xmm1, eax
movsx eax, byte [0x14007c0dc]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
xor eax, eax
cmp byte [r14], al
cvtdq2pd xmm0, xmm0
sete al
xor edx, edx
addsd xmm0, xmm0
subsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm1, xmm0
movsd qword [rbp - 0x79], xmm1
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, r12d
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x1400380bb
call fcn.140003770
movsx edx, al
movsx eax, byte [0x14007d2e0]
imul edx, eax
shl edx, 3
call fcn.1400037a0
movsx ecx, al
sub edx, ecx
call fcn.140003780
movsx ecx, al
add edx, ecx
movsx ecx, byte [0x14007c0dc]
add ecx, edx
je 0x1400380bb
mov r13d, 7
jmp 0x140038117
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rsi + r15]
lea ecx, [rcx + rsi*4]
xor edx, edx
add eax, ecx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x140038117
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rsi + r15]
lea ecx, [rcx + rsi*8]
xor edx, edx
add eax, ecx
xorps xmm0, xmm0
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
div ecx
movsx ecx, byte [0x14007c0db]
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x79]
cvttsd2si r13d, xmm0
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
xor edx, edx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, ebx
div ecx
movsx ecx, byte [0x14007c0db]
sub eax, ecx
imul eax, r13d
test eax, eax
je 0x140038a2a
call sym.Stunner.exe_unsigned_long_int___cdecl_anti_suspend_void_
call sym.Stunner.exe_int___cdecl_ollydbg_exploit_void_
call sym.Stunner.exe_bool___cdecl_window_check_void_
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea edx, [rsi + rsi*2]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, r15d
lea eax, [rax + rdx*2]
xor edx, edx
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x140038020
call sym.Stunner.exe_bool___cdecl_isDebuggerPresent_void_
test al, al
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_CheckOutputDebugString_void_
test al, al
jne 0x14003823c
call fcn.140037580
test eax, eax
jne 0x14003823c
call sym.Stunner.exe_unsigned_long_int___cdecl_anti_suspend_void_
test eax, eax
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_anti_injection_vm_void_
test al, al
jne 0x14003823c
call sym.Stunner.exe_int___cdecl_last_error_void_
test eax, eax
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_check2_void_
test al, al
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_check12_void_
test al, al
jne 0x14003823c
call sym.Stunner.exe_int___cdecl_remote_is_present_void_
test eax, eax
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_window_check_void_
test al, al
jne 0x14003823c
call sym.Stunner.exe_int___cdecl_contextthread_void_
test eax, eax
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_detectExceptionHandling_void_
test al, al
jne 0x14003823c
call fcn.140023a30
test al, al
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_antiAttachMeasures_void_
test al, al
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_detectDLLS_void_
test al, al
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_checkTrapFlag_void_
test al, al
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_detectDebuggerWindows_void_
test al, al
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_detectTimingAnomalies_void_
test al, al
jne 0x14003823c
call sym.Stunner.exe_bool___cdecl_checkDebugObject_void_
test al, al
jne 0x14003823c
xor edx, edx
jmp 0x140038241
mov edx, 1
movsx eax, byte [0x14007c0da]
movd xmm1, eax
movsx eax, byte [0x14007c0dc]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, rdx
xor edx, edx
mulsd xmm1, xmm0
movsd qword [rbp - 0x79], xmm1
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, r12d
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x1400382d5
call fcn.140003770
movsx edx, al
movsx eax, byte [0x14007d2e0]
imul edx, eax
shl edx, 3
call fcn.1400037a0
movsx ecx, al
sub edx, ecx
call fcn.140003780
movsx ecx, al
add edx, ecx
movsx ecx, byte [0x14007c0dc]
add ecx, edx
je 0x1400382d5
mov dword [rbp - 0x6d], 7
jmp 0x140038333
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rsi + r15]
lea ecx, [rcx + rsi*4]
xor edx, edx
add eax, ecx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x140038333
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rsi + r15]
lea ecx, [rcx + rsi*8]
xor edx, edx
add eax, ecx
xorps xmm0, xmm0
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
div ecx
movsx ecx, byte [0x14007c0db]
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x79]
cvttsd2si eax, xmm0
mov dword [rbp - 0x6d], eax
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea r9d, [rsi + r15]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, r9d
xor edx, edx
div ecx
movsx ecx, byte [0x14007c0db]
sub eax, ecx
imul eax, dword [rbp - 0x6d]
test eax, eax
je 0x1400384f3
xor eax, eax
mov dword [rbp - 0x59], 0x8df78ea6
mov qword [rbp - 0x40], rax
mov word [rbp - 0x38], ax
mov dword [rbp - 0x55], 0x82a24580
mov dword [rbp - 0x51], 0x8c8dfc8a
mov dword [rbp - 0x4d], 0x434fff89
mov dword [rbp - 0x49], 0xdaead430
mov dword [rbp - 0x45], 0xd0d8dce0
mov byte [rbp - 0x41], 0x18
mov qword [rbp - 0x79], rax
mov rax, qword [rbp - 0x79]
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rbp - 0x79]
mov rax, qword [rbp - 0x79]
add rcx, rdi
movzx edx, byte [rbp + rax - 0x59]
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
mov rax, qword [rbp - 0x79]
add r8, rcx
add r8, rdx
add r8b, 0x30
mov byte [rbp + rax - 0x59], r8b
mov rax, qword [rbp - 0x79]
inc rax
mov qword [rbp - 0x79], rax
mov rax, qword [rbp - 0x79]
cmp rax, 0x23
jb 0x1400383b0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x59]
call fcn.140002170
mov rcx, rax
lea rdx, [0x140002340]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov byte [r14], 1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r14, qword [rax]
mov rdi, r14
nop dword [rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1400384a4
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400384a4
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0xcd3037e0
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x14003849f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140038480
cmp edx, 0x4b651fb0
je 0x1400384cc
test r8d, r8d
jne 0x140038460
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r14
je 0x1400384ba
cmp qword [rax + 0x30], 0
jne 0x140038430
xor eax, eax
xor ecx, ecx
call rax
mov ebx, dword [rbp - 0x71]
mov r14, qword [rbp - 0x21]
jmp 0x140038013
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
xor ecx, ecx
add rax, r9
call rax
mov ebx, dword [rbp - 0x71]
mov r14, qword [rbp - 0x21]
jmp 0x140038013
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
xor edx, edx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, ebx
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x140038020
call fcn.140003770
movsx r10d, al
call fcn.1400037a0
movsx r11d, al
call fcn.140003780
movsx ecx, byte [0x14007d2e0]
xorps xmm2, xmm2
movsx ebx, al
movsx eax, byte [0x14007c0dc]
imul ecx, r10d
lea edx, [rcx + rcx*4]
sub edx, r11d
add edx, ebx
add eax, edx
xor edx, edx
cvtsi2sd xmm2, rax
movsx eax, byte [0x14007c0da]
movd xmm1, eax
movsx eax, byte [0x14007c0dc]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x79], xmm1
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, r12d
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x1400385ca
movsx edx, byte [0x14007d2e0]
movsx ecx, byte [0x14007c0dc]
imul edx, r10d
shl edx, 3
sub edx, r11d
add edx, ebx
add ecx, edx
je 0x1400385ca
mov dword [rbp - 0x69], 7
jmp 0x140038628
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rsi + r15]
lea ecx, [rcx + rsi*4]
xor edx, edx
add eax, ecx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x140038628
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rsi + r15]
lea ecx, [rcx + rsi*8]
xor edx, edx
add eax, ecx
xorps xmm0, xmm0
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
div ecx
movsx ecx, byte [0x14007c0db]
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x79]
cvttsd2si eax, xmm0
mov dword [rbp - 0x69], eax
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
xor edx, edx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, r9d
div ecx
movsx ecx, byte [0x14007c0db]
sub eax, ecx
imul eax, dword [rbp - 0x69]
test eax, eax
je 0x14003893d
movsx eax, byte [0x14007c0da]
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14007c0dc]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm8
movsd qword [rbp - 0x79], xmm1
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, r12d
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x1400386c0
movsx edx, byte [0x14007d2e0]
movsx ecx, byte [0x14007c0dc]
imul edx, r10d
shl edx, 3
sub edx, r11d
add edx, ebx
add ecx, edx
jne 0x140038700
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rsi + r15]
lea ecx, [rcx + rsi*4]
xor edx, edx
add eax, ecx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x140038700
movzx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movzx eax, byte [reloc.OLEAUT32.dll_VariantClear]
movzx eax, byte [0x14007c0db]
movsd xmm0, qword [rbp - 0x79]
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
xor edx, edx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, r15d
mov ebx, dword [rbp - 0x71]
lea eax, [rax + rsi*4]
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x140038020
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
xor edx, edx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, r12d
div ecx
movsx ecx, byte [0x14007c0db]
xorps xmm2, xmm2
sub eax, ecx
xor edx, edx
cvtsi2sd xmm2, rax
movsx eax, byte [0x14007c0da]
movd xmm1, eax
movsx eax, byte [0x14007c0dc]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm2
movsd qword [rbp - 0x79], xmm1
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, r12d
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x1400387dc
call fcn.140003770
movsx edx, al
movsx eax, byte [0x14007d2e0]
imul edx, eax
shl edx, 3
call fcn.1400037a0
movsx ecx, al
sub edx, ecx
call fcn.140003780
movsx ecx, al
add edx, ecx
movsx ecx, byte [0x14007c0dc]
add ecx, edx
je 0x1400387dc
mov dword [rbp - 0x65], 7
jmp 0x14003883a
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rsi + r15]
lea ecx, [rcx + rsi*4]
xor edx, edx
add eax, ecx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x14003883a
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rsi + r15]
lea ecx, [rcx + rsi*8]
xor edx, edx
add eax, ecx
xorps xmm0, xmm0
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
div ecx
movsx ecx, byte [0x14007c0db]
sub eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm0, qword [rbp - 0x79]
cvttsd2si eax, xmm0
mov dword [rbp - 0x65], eax
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rsi + r15]
lea ecx, [rcx + rsi*8]
xor edx, edx
add eax, ecx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
div ecx
movsx ecx, byte [0x14007c0db]
sub eax, ecx
imul eax, dword [rbp - 0x65]
test eax, eax
je 0x140038020
movsx eax, byte [0x14007c0da]
xor edx, edx
movd xmm1, eax
movsx eax, byte [0x14007c0dc]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
cvtdq2pd xmm0, xmm0
addsd xmm0, xmm0
subsd xmm1, xmm0
mulsd xmm1, xmm7
movsd qword [rbp - 0x79], xmm1
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
add eax, r12d
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x1400388f1
call fcn.140003770
movsx edx, al
movsx eax, byte [0x14007d2e0]
imul edx, eax
shl edx, 3
call fcn.1400037a0
movsx ecx, al
sub edx, ecx
call fcn.140003780
movsx ecx, al
add edx, ecx
movsx ecx, byte [0x14007c0dc]
add ecx, edx
jne 0x140038020
movsx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
lea ecx, [rsi + r15]
mov ebx, dword [rbp - 0x71]
lea ecx, [rcx + rsi*4]
add eax, ecx
xor edx, edx
movsx ecx, byte [reloc.OLEAUT32.dll_VariantClear]
div ecx
movsx ecx, byte [0x14007c0db]
cmp eax, ecx
je 0x140038020
movzx eax, byte [reloc.OLEAUT32.dll_VariantCopy]
movzx eax, byte [reloc.OLEAUT32.dll_VariantClear]
movzx eax, byte [0x14007c0db]
movsd xmm0, qword [rbp - 0x79]
jmp 0x140038020
lea rcx, [rbp - 0x19]
call fcn.140002f20
mov rax, qword [rbp - 0x19]
movabs rcx, 0x7fffffffc46535ff
lea rdi, [rax + 0x3b9aca00]
cmp rax, rcx
jl 0x14003896a
movabs rdi, 0x7fffffffffffffff
lea rcx, [rbp - 0x29]
call fcn.140002f20
mov rax, qword [rbp - 0x29]
mov ebx, dword [rbp - 0x71]
cmp rax, rdi
jge 0x140038013
movabs r14, 0x311cdad160000
movabs r12, 0x112e0be826d694b3
nop word [rax + rax]
mov rbx, rdi
sub rbx, rax
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rdx, rax, 0x64
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
comisd xmm0, xmm6
lea rcx, [rdx + r14]
seta r8b
test r8b, r8b
jne 0x1400389cd
lea rcx, [rdx + rbx]
lea rax, [rbx + rdx]
add rdx, r14
test r8b, r8b
cmove rdx, rax
mov rax, r12
imul rdx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul eax, edx, 0x3b9aca00
mov qword [rbp - 0x11], rdx
sub ecx, eax
mov dword [rbp - 9], ecx
lea rcx, [rbp - 0x11]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
lea rcx, [rbp - 0x29]
call fcn.140002f20
mov rax, qword [rbp - 0x29]
cmp rax, rdi
jl 0x1400389a0
mov r12d, dword [rbp - 0x61]
mov ebx, dword [rbp - 0x71]
mov r14, qword [rbp - 0x21]
jmp 0x140038013
mov rcx, qword [rbp - 1]
xor rcx, rsp
call fcn.14006f780
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret