Function at 0x1400ded0c
Capabilities:
Access peb ldr_data
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x380
mov rax, qword [0x14017b0c0]
xor rax, rsp
mov qword [rsp + 0x370], rax
mov rbx, qword [0x14017c758]
mov r12, rdx
mov qword [rsp + 0x40], rdx
mov r13d, 1
mov dword [rsp + 0x48], 0x104
test rbx, rbx
jne 0x1400deeb2
mov rax, qword gs:[0x60]
xor edi, edi
mov ebp, 0x34ffef04
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdx, r15
movups xmm0, xmmword [rdx + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x1400dedcc
psrldq xmm0, 8
mov r8d, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1400dedbe
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1400dedad
cmp r8d, edi
jne 0x1400dee93
mov r10, qword [rdx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x1400dee93
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x1400dee93
mov r14d, dword [r9 + 0x20]
dec r11d
mov ebx, 0x811c9dc5
lea rcx, [r14 + r11*4]
mov r8d, dword [rcx + r10]
add r8, r10
jmp 0x1400dee20
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [r8]
add r8, r13
test cl, cl
jne 0x1400dee15
cmp ebx, ebp
je 0x1400dee35
test r11d, r11d
jne 0x1400dee00
jmp 0x1400dee93
mov edx, dword [r9 + 0x24]
add rdx, r10
movzx r8d, word [rdx + r11*2]
mov edx, dword [r9 + 0x1c]
add rdx, r10
mov ebx, dword [rdx + r8*4]
add rbx, r10
cmp rbx, r9
jbe 0x1400deeab
lea rcx, [rax + r9]
cmp rbx, rcx
jae 0x1400deeab
mov edi, 0x811c9dc5
mov ebp, edi
jmp 0x1400dee74
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
add rbx, r13
mov al, byte [rbx]
cmp al, 0x2e
jne 0x1400dee66
jmp 0x1400dee87
movsx eax, al
xor eax, ebp
imul ebp, eax, 0x1000193
add rbx, r13
mov al, byte [rbx]
test al, al
jne 0x1400dee7c
mov rdx, qword [r15]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r15
je 0x1400deea9
cmp qword [rax + 0x30], 0
jne 0x1400ded81
xor ebx, ebx
mov qword [0x14017c758], rbx
mov rdx, qword [0x14017c750]
test rdx, rdx
jne 0x1400df01c
mov rax, qword gs:[0x60]
xor esi, esi
mov r15d, 0x6dd8a845
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rdx, r12
movups xmm0, xmmword [rdx + 0x58]
movd eax, xmm0
sub ax, 8
test esi, esi
je 0x1400def2c
psrldq xmm0, 8
mov r8d, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1400def1e
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1400def0d
cmp r8d, esi
jne 0x1400deff8
mov r10, qword [rdx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x1400deff8
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x1400deff8
mov r14d, dword [r9 + 0x20]
dec r11d
mov edi, 0x811c9dc5
lea rcx, [r14 + r11*4]
mov r8d, dword [rcx + r10]
add r8, r10
jmp 0x1400def80
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [r8]
add r8, r13
test cl, cl
jne 0x1400def75
cmp edi, r15d
je 0x1400def96
test r11d, r11d
jne 0x1400def60
jmp 0x1400deff8
mov edx, dword [r9 + 0x24]
add rdx, r10
movzx r8d, word [rdx + r11*2]
mov edx, dword [r9 + 0x1c]
add rdx, r10
mov edx, dword [rdx + r8*4]
add rdx, r10
cmp rdx, r9
jbe 0x1400df010
lea rcx, [rax + r9]
cmp rdx, rcx
jae 0x1400df010
mov esi, 0x811c9dc5
mov r15d, esi
jmp 0x1400defd6
movsx eax, al
xor eax, esi
imul esi, eax, 0x1000193
add rdx, r13
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1400defc8
jmp 0x1400defeb
movsx eax, al
xor eax, r15d
imul r15d, eax, 0x1000193
add rdx, r13
mov al, byte [rdx]
test al, al
jne 0x1400defde
mov rdx, qword [r12]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r12
je 0x1400df00e
cmp qword [rax + 0x30], 0
jne 0x1400deee1
xor edx, edx
mov r12, qword [rsp + 0x40]
mov qword [0x14017c750], rdx
call rdx
lea r9, [rsp + 0x48]
xor edx, edx
lea r8, [rsp + 0x160]
mov rcx, rax
call rbx
mov r10, qword [0x14017c748]
test r10, r10
jne 0x1400df196
mov rax, qword gs:[0x60]
xor ebx, ebx
mov ebp, 0xe682dd7e
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdx, r15
movups xmm0, xmmword [rdx + 0x58]
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x1400df0ab
psrldq xmm0, 8
mov r8d, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1400df09d
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1400df08c
cmp r8d, ebx
jne 0x1400df176
mov r11, qword [rdx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r9d, eax
add r9, r11
shr rax, 0x20
cmp r9, r11
je 0x1400df176
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x1400df176
mov r14d, dword [r9 + 0x20]
dec r10d
mov edi, 0x811c9dc5
lea rcx, [r14 + r10*4]
mov r8d, dword [rcx + r11]
add r8, r11
jmp 0x1400df0ff
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [r8]
add r8, r13
test cl, cl
jne 0x1400df0f4
cmp edi, ebp
je 0x1400df114
test r10d, r10d
jne 0x1400df0df
jmp 0x1400df176
mov edx, dword [r9 + 0x24]
add rdx, r11
movzx r8d, word [rdx + r10*2]
mov edx, dword [r9 + 0x1c]
add rdx, r11
mov r10d, dword [rdx + r8*4]
add r10, r11
cmp r10, r9
jbe 0x1400df18f
lea rcx, [rax + r9]
cmp r10, rcx
jae 0x1400df18f
mov eax, 0x811c9dc5
mov ebx, eax
mov ebp, eax
jmp 0x1400df155
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
add r10, r13
mov al, byte [r10]
cmp al, 0x2e
jne 0x1400df147
jmp 0x1400df169
movsx eax, al
xor eax, ebp
imul ebp, eax, 0x1000193
add r10, r13
mov al, byte [r10]
test al, al
jne 0x1400df15e
mov rdx, qword [r15]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r15
je 0x1400df18c
cmp qword [rax + 0x30], 0
jne 0x1400df060
xor r10d, r10d
mov qword [0x14017c748], r10
and qword [rsp + 0x38], 0
lea rax, [rsp + 0x50]
and qword [rsp + 0x30], 0
lea r8, [rsp + 0x160]
mov dword [rsp + 0x28], 0x104
or r9d, 0xffffffff
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
call r10
mov r10, qword [0x14017c740]
test r10, r10
jne 0x1400df32b
mov rax, qword gs:[0x60]
xor ebx, ebx
mov ebp, 0xbdcac9ce
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdx, r15
movups xmm0, xmmword [rdx + 0x58]
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x1400df240
psrldq xmm0, 8
mov r8d, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1400df232
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1400df221
cmp r8d, ebx
jne 0x1400df30b
mov r11, qword [rdx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r9d, eax
add r9, r11
shr rax, 0x20
cmp r9, r11
je 0x1400df30b
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x1400df30b
mov r14d, dword [r9 + 0x20]
dec r10d
mov edi, 0x811c9dc5
lea rcx, [r11 + r10*4]
mov r8d, dword [rcx + r14]
add r8, r11
jmp 0x1400df294
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [r8]
add r8, r13
test cl, cl
jne 0x1400df289
cmp edi, ebp
je 0x1400df2a9
test r10d, r10d
jne 0x1400df274
jmp 0x1400df30b
mov edx, dword [r9 + 0x24]
add rdx, r11
movzx r8d, word [rdx + r10*2]
mov edx, dword [r9 + 0x1c]
add rdx, r11
mov r10d, dword [rdx + r8*4]
add r10, r11
cmp r10, r9
jbe 0x1400df324
lea rcx, [rax + r9]
cmp r10, rcx
jae 0x1400df324
mov eax, 0x811c9dc5
mov ebx, eax
mov ebp, eax
jmp 0x1400df2ea
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
add r10, r13
mov al, byte [r10]
cmp al, 0x2e
jne 0x1400df2dc
jmp 0x1400df2fe
movsx eax, al
xor eax, ebp
imul ebp, eax, 0x1000193
add r10, r13
mov al, byte [r10]
test al, al
jne 0x1400df2f3
mov rdx, qword [r15]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r15
je 0x1400df321
cmp qword [rax + 0x30], 0
jne 0x1400df1f5
xor r10d, r10d
mov qword [0x14017c740], r10
and qword [rsp + 0x30], 0
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x28], 0x80
xor r9d, r9d
mov r8d, r13d
mov dword [rsp + 0x20], 3
mov edx, 0x80000000
call r10
mov r13, rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1400df7f6
mov r10, qword [0x14017c738]
test r10, r10
jne 0x1400df4c6
mov rax, qword gs:[0x60]
xor ebx, ebx
mov ebp, 0x15b2461a
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdx, r15
movups xmm0, xmmword [rdx + 0x58]
mov r12d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x1400df3e0
psrldq xmm0, 8
mov r8d, r12d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1400df3d2
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1400df3c1
cmp r8d, ebx
jne 0x1400df4a6
mov r11, qword [rdx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r9d, eax
add r9, r11
shr rax, 0x20
cmp r9, r11
je 0x1400df4a6
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x1400df4a6
mov r14d, dword [r9 + 0x20]
dec r10d
mov edi, r12d
lea rcx, [r11 + r10*4]
mov r8d, dword [rcx + r14]
add r8, r11
jmp 0x1400df432
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1400df427
cmp edi, ebp
je 0x1400df447
test r10d, r10d
jne 0x1400df414
jmp 0x1400df4a6
mov edx, dword [r9 + 0x24]
add rdx, r11
movzx r8d, word [rdx + r10*2]
mov edx, dword [r9 + 0x1c]
add rdx, r11
mov r10d, dword [rdx + r8*4]
add r10, r11
cmp r10, r9
jbe 0x1400df4bf
lea rcx, [rax + r9]
cmp r10, rcx
jae 0x1400df4bf
mov ebx, r12d
mov ebp, r12d
jmp 0x1400df485
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x1400df477
jmp 0x1400df499
movsx eax, al
xor eax, ebp
imul ebp, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x1400df48e
mov rdx, qword [r15]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r15
je 0x1400df4bc
cmp qword [rax + 0x30], 0
jne 0x1400df392
xor r10d, r10d
mov qword [0x14017c738], r10
and qword [rsp + 0x28], 0
xor r9d, r9d
and dword [rsp + 0x20], 0
xor edx, edx
mov rcx, r13
lea r8d, [r9 + 2]
call r10
mov r12, rax
test rax, rax
jne 0x1400df666
mov rdx, qword [0x14017c790]
test rdx, rdx
jne 0x1400df64b
mov rax, qword gs:[0x60]
xor ebx, ebx
mov ebp, 0xfaba0065
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdx, r15
movups xmm0, xmmword [rdx + 0x58]
mov r12d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x1400df568
psrldq xmm0, 8
mov r8d, r12d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1400df55a
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1400df549
cmp r8d, ebx
jne 0x1400df62c
mov r10, qword [rdx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x1400df62c
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x1400df62c
mov r14d, dword [r9 + 0x20]
dec r11d
mov edi, r12d
lea rcx, [r10 + r11*4]
mov r8d, dword [rcx + r14]
add r8, r10
jmp 0x1400df5ba
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1400df5af
cmp edi, ebp
je 0x1400df5cf
test r11d, r11d
jne 0x1400df59c
jmp 0x1400df62c
mov edx, dword [r9 + 0x24]
add rdx, r10
movzx r8d, word [rdx + r11*2]
mov edx, dword [r9 + 0x1c]
add rdx, r10
mov edx, dword [rdx + r8*4]
add rdx, r10
cmp rdx, r9
jbe 0x1400df644
lea rcx, [rax + r9]
cmp rdx, rcx
jae 0x1400df644
mov ebx, r12d
mov ebp, r12d
jmp 0x1400df60d
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x1400df5ff
jmp 0x1400df620
movsx eax, al
xor eax, ebp
imul ebp, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x1400df615
mov rdx, qword [r15]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r15
je 0x1400df642
cmp qword [rax + 0x30], 0
jne 0x1400df51a
xor edx, edx
mov qword [0x14017c790], rdx
mov rcx, r13
call rdx
mov rcx, qword [rsp + 0x40]
and qword [rcx], 0
and qword [rcx + 8], 0
mov rax, rcx
jmp 0x1400df804
mov r10, qword [0x14017c730]
test r10, r10
jne 0x1400df7cf
mov rax, qword gs:[0x60]
xor edi, edi
mov r14d, 0x3d05404b
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdx, r15
movups xmm0, xmmword [rdx + 0x58]
movd eax, xmm0
sub ax, 8
test edi, edi
je 0x1400df6e0
psrldq xmm0, 8
mov r8d, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x1400df6d2
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1400df6c1
cmp r8d, edi
jne 0x1400df7af
mov r11, qword [rdx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r9d, eax
add r9, r11
shr rax, 0x20
cmp r9, r11
je 0x1400df7af
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x1400df7af
mov ebp, dword [r9 + 0x20]
dec r10d
mov ebx, 0x811c9dc5
lea rcx, [r11 + r10*4]
mov r8d, dword [rcx + rbp]
add r8, r11
jmp 0x1400df734
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1400df729
cmp ebx, r14d
je 0x1400df74a
test r10d, r10d
jne 0x1400df714
jmp 0x1400df7af
mov edx, dword [r9 + 0x24]
add rdx, r11
movzx r8d, word [rdx + r10*2]
mov edx, dword [r9 + 0x1c]
add rdx, r11
mov r10d, dword [rdx + r8*4]
add r10, r11
cmp r10, r9
jbe 0x1400df7c8
lea rcx, [r9 + rax]
cmp r10, rcx
jae 0x1400df7c8
mov eax, 0x811c9dc5
mov edi, eax
mov r14d, eax
jmp 0x1400df78c
movsx eax, al
xor eax, edi
imul edi, eax, 0x1000193
inc r10
mov al, byte [r10]
cmp al, 0x2e
jne 0x1400df77e
jmp 0x1400df7a2
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r10
mov al, byte [r10]
test al, al
jne 0x1400df795
mov rdx, qword [r15]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r15
je 0x1400df7c5
cmp qword [rax + 0x30], 0
jne 0x1400df695
xor r10d, r10d
mov qword [0x14017c730], r10
and qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rcx, r12
lea edx, [r9 + 4]
call r10
mov rcx, qword [rsp + 0x40]
mov qword [rcx], r13
mov qword [rcx + 8], rax
jmp 0x1400df65e
and qword [r12], 0
mov rax, r12
and qword [r12 + 8], 0
mov rcx, qword [rsp + 0x370]
xor rcx, rsp
call fcn.140158250
lea r11, [rsp + 0x380]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret