Function at 0x14000b458
Capabilities:
Access peb ldr_data
Hash data using djb2
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x148
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0xb0], xmm11
movaps xmmword [rbp + 0xa0], xmm10
movaps xmmword [rbp + 0x90], xmm9
movaps xmmword [rbp + 0x80], xmm8
movaps xmmword [rbp + 0x70], xmm7
movaps xmmword [rbp + 0x60], xmm6
mov qword [rbp + 0x58], 0xfffffffffffffffe
mov qword [rbp], rcx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r8, qword [rcx + 0x10]
push 1
pop rbx
push 2
pop r12
movdqa xmm6, xmmword [0x14001e410]
movdqa xmm7, xmmword [0x14001e420]
movdqa xmm8, xmmword [0x14001e430]
movdqa xmm9, xmmword [0x14001e3e0]
movdqa xmm10, xmmword [0x14001e3f0]
movdqa xmm11, xmmword [0x14001e400]
mov r13, r8
mov qword [rbp + 0x30], r8
mov rdx, qword [r13 + 0x60]
test rdx, rdx
je 0x14000b78e
movzx eax, word [r13 + 0x58]
test ax, ax
je 0x14000b78e
mov rcx, qword [r13 + 0x30]
mov qword [rbp + 0x10], rcx
movzx r8d, ax
shr r8d, 1
lea rcx, [rbp - 0x30]
call fcn.140016240
mov rsi, qword [rbp - 0x28]
mov r15, qword [rbp - 0x20]
test r15, r15
mov qword [rbp + 0x28], rsi
je 0x14000b58a
js 0x14000bbae
mov al, byte [0x1400fc108]
mov rcx, r15
call fcn.140019bb0
test rax, rax
je 0x14000bbb3
mov r14, rax
mov rcx, rax
mov rdx, rsi
mov r8, r15
call sub.VCRUNTIME140.dll_memcpy
lea rdi, [r14 + r15]
mov rax, r14
cmp r15, 8
jb 0x14000b66c
cmp r15, 0x20
jae 0x14000b59c
xor eax, eax
jmp 0x14000b61a
mov r14, rbx
movabs rsi, 0x8000000000000000
jmp 0x14000b72e
mov rax, r15
movabs rcx, 0x7fffffffffffffe0
and rax, rcx
xor ecx, ecx
movdqu xmm0, xmmword [r14 + rcx]
movdqu xmm1, xmmword [r14 + rcx + 0x10]
movdqa xmm2, xmm0
paddb xmm2, xmm9
movdqa xmm3, xmm1
paddb xmm3, xmm9
movdqa xmm4, xmm2
pminub xmm4, xmm10
pcmpeqb xmm4, xmm2
pand xmm4, xmm11
movdqa xmm2, xmm3
pminub xmm2, xmm10
pcmpeqb xmm2, xmm3
pand xmm2, xmm11
por xmm4, xmm0
por xmm2, xmm1
movdqu xmmword [r14 + rcx], xmm4
movdqu xmmword [r14 + rcx + 0x10], xmm2
add rcx, 0x20
cmp rax, rcx
jne 0x14000b5ae
cmp rax, r15
je 0x14000b693
test r15b, 0x18
je 0x14000b669
mov rcx, r15
movabs rdx, 0x7ffffffffffffff8
and rcx, rdx
movq xmm0, qword [r14 + rax]
movdqa xmm1, xmm0
paddb xmm1, xmm6
movdqa xmm2, xmm1
pmaxub xmm2, xmm7
pcmpeqb xmm2, xmm1
pandn xmm2, xmm8
por xmm2, xmm0
movq qword [r14 + rax], xmm2
add rax, 8
cmp rcx, rax
jne 0x14000b62a
cmp rcx, r15
je 0x14000b693
add rcx, r14
mov rax, rcx
jmp 0x14000b66c
add rax, r14
mov cl, byte [rax]
lea edx, [rcx - 0x41]
cmp dl, 0x1a
setb dl
shl dl, 5
or dl, cl
mov byte [rax], dl
lea rcx, [rax + 1]
mov rax, rcx
cmp rcx, rdi
jne 0x14000b66c
test r15, r15
je 0x14000b721
xor esi, esi
mov rcx, r14
lea rax, [rcx + 1]
mov dl, byte [rcx]
test dl, dl
js 0x14000b6a7
mov rdx, rbx
jmp 0x14000b712
cmp dl, 0xe0
jae 0x14000b6bc
add rcx, 2
cmp rax, rdi
cmovne rax, rcx
mov rdx, r12
jmp 0x14000b712
cmp dl, 0xed
jne 0x14000b6e5
cmp rax, rdi
je 0x14000b721
lea rax, [rcx + 2]
cmp rax, rdi
je 0x14000b721
cmp byte [rcx + 1], 0x9f
ja 0x14000b7a0
add rcx, 3
push 3
pop rdx
mov rax, rcx
jmp 0x14000b712
add rcx, 2
cmp rax, rdi
cmove rcx, rax
xor eax, eax
cmp rcx, rdi
setne al
add rax, rcx
cmp dl, 0xf0
jae 0x14000b704
push 3
jmp 0x14000b711
xor ecx, ecx
cmp rax, rdi
setne cl
add rax, rcx
push 4
pop rdx
add rsi, rdx
mov rcx, rax
cmp rax, rdi
jne 0x14000b698
movabs rsi, 0x8000000000000000
mov rbx, r14
mov r12, r15
mov edi, 0x1505
xor eax, eax
cmp r12, rax
je 0x14000b74d
imul rcx, rdi, 0x21
movzx edi, byte [rbx + rax]
add rdi, rcx
inc rax
jmp 0x14000b738
mov rcx, rsi
mov rdx, rbx
call fcn.14000bc9e
mov rcx, r15
mov rdx, r14
call fcn.140006152
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rbp + 0x28]
call fcn.140006152
movabs rax, 0xd537e9367040ee75
cmp rdi, rax
mov r8, qword [rbp + 0x30]
push 1
pop rbx
push 2
pop r12
je 0x14000b9af
mov r13, qword [r13]
cmp r13, r8
jne 0x14000b4fa
jmp 0x14000bb78
test r15, r15
js 0x14000bbae
mov al, byte [0x1400fc108]
mov rcx, r15
call fcn.140019bb0
test rax, rax
je 0x14000bbb3
mov rbx, rax
mov qword [rbp + 0x40], r15
mov qword [rbp + 0x48], rax
mov rax, r15
sub rax, rsi
mov qword [rbp + 0x38], rax
jb 0x14000bbd2
mov rcx, rbx
mov rdx, r14
mov r8, rsi
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x50], rsi
mov r12, rsi
cmp qword [rbp + 0x38], 2
ja 0x14000b80f
lea rcx, [rbp + 0x40]
mov rdx, rsi
push 3
pop r8
call fcn.14001d7c0
mov rbx, qword [rbp + 0x48]
mov r12, qword [rbp + 0x50]
lea rax, [rbx + r12]
mov byte [rax + 2], 0xbd
mov word [rax], 0xbfef
add r12, 3
mov qword [rbp + 0x50], r12
add rsi, 3
cmp rsi, r15
ja 0x14000bbbe
je 0x14000b95a
lea rax, [r14 + rsi]
mov r9, rsi
mov qword [rbp + 0x38], rax
mov rcx, rax
lea rax, [rcx + 1]
mov dl, byte [rcx]
test dl, dl
js 0x14000b853
push 1
jmp 0x14000b865
cmp dl, 0xe0
jae 0x14000b876
add rcx, 2
cmp rax, rdi
cmovne rax, rcx
push 2
pop rdx
add rsi, rdx
mov rcx, rax
cmp rax, rdi
jne 0x14000b845
jmp 0x14000b95d
cmp dl, 0xed
jne 0x14000b8a3
cmp rax, rdi
je 0x14000b95d
lea rax, [rcx + 2]
cmp rax, rdi
je 0x14000b95d
cmp byte [rcx + 1], 0x9f
ja 0x14000b8d1
add rcx, 3
push 3
pop rdx
mov rax, rcx
jmp 0x14000b866
add rcx, 2
cmp rax, rdi
cmove rcx, rax
xor eax, eax
cmp rcx, rdi
setne al
add rax, rcx
cmp dl, 0xf0
jae 0x14000b8c2
push 3
jmp 0x14000b865
xor ecx, ecx
cmp rax, rdi
setne cl
add rax, rcx
push 4
jmp 0x14000b865
mov r8, rsi
sub r8, r9
jb 0x14000bbe6
cmp rsi, r15
ja 0x14000bbfa
mov rcx, qword [rbp + 0x40]
mov rax, rcx
sub rax, r12
cmp rax, r8
mov qword [rbp + 0x18], r8
jae 0x14000b91b
lea rcx, [rbp + 0x40]
mov rdx, r12
call fcn.14001d7c0
mov r12, qword [rbp + 0x50]
mov rax, qword [rbp + 0x40]
mov qword [rbp + 0x20], rax
mov rbx, qword [rbp + 0x48]
mov r8, qword [rbp + 0x18]
jmp 0x14000b91f
mov qword [rbp + 0x20], rcx
lea rcx, [rbx + r12]
mov rdx, qword [rbp + 0x38]
call sub.VCRUNTIME140.dll_memcpy
add r12, qword [rbp + 0x18]
mov qword [rbp + 0x50], r12
mov rax, qword [rbp + 0x20]
sub rax, r12
cmp rax, 2
ja 0x14000b80f
lea rcx, [rbp + 0x40]
mov rdx, r12
push 3
pop r8
call fcn.14001d7c0
jmp 0x14000b807
mov r9, r15
mov r8, r15
mov qword [rbp + 0x38], r9
sub r8, r9
mov rsi, qword [rbp + 0x40]
mov rax, rsi
sub rax, r12
cmp rax, r8
jae 0x14000b994
lea rcx, [rbp + 0x40]
mov rdx, r12
mov rdi, r8
call fcn.14001d7c0
mov r12, qword [rbp + 0x50]
mov rsi, qword [rbp + 0x40]
mov rbx, qword [rbp + 0x48]
mov r8, rdi
mov rdx, r14
add rdx, qword [rbp + 0x38]
lea rcx, [rbx + r12]
mov rdi, r8
call sub.VCRUNTIME140.dll_memcpy
add r12, rdi
jmp 0x14000b731
mov rcx, qword [rbp + 0x10]
mov qword [rbp + 8], rcx
cmp word [rcx], 0x5a4d
jne 0x14000ba9b
movsxd rax, dword [rcx + 0x3c]
cmp dword [rcx + rax], 0x4550
jne 0x14000bade
mov eax, dword [rcx + rax + 0x88]
mov r14d, dword [rcx + rax + 0x18]
mov edx, dword [rcx + rax + 0x1c]
mov r15d, dword [rcx + rax + 0x20]
mov eax, dword [rcx + rax + 0x24]
add rdx, rcx
mov qword [rbp + 0x28], rdx
add r15, rcx
add rax, rcx
mov qword [rbp + 0x30], rax
push 0xffffffffffffffff
pop r13
lea rdi, [rbp - 0x30]
push 0xd
pop rsi
lea rbx, str.Invalid_UTF_8____NT_headers_do_not_match_signature_with_from_dll_base:
xor eax, eax
cmp rax, r14
je 0x14000ba94
mov r12, rax
mov edx, dword [r15 + rax*4]
add rdx, rcx
mov r8, r13
cmp byte [rdx + r8 + 1], 0
lea r8, [r8 + 1]
jne 0x14000ba23
mov rcx, rdi
call fcn.1400089f0
cmp qword [rbp - 0x30], 0
mov rax, qword [rbp - 0x20]
cmovne rax, rsi
mov rcx, qword [rbp - 0x28]
cmovne rcx, rbx
mov edx, 0x1505
xor r8d, r8d
cmp rax, r8
je 0x14000ba6a
imul r9, rdx, 0x21
movzx edx, byte [rcx + r8]
add rdx, r9
inc r8
jmp 0x14000ba54
lea rax, [r12 + 1]
cmp rdx, qword [rbp]
mov rcx, qword [rbp + 0x10]
jne 0x14000ba11
mov rax, qword [rbp + 0x30]
movzx eax, word [rax + r12*2]
mov rdx, qword [rbp + 0x28]
mov eax, dword [rdx + rax*4]
add rcx, rax
push 1
pop rax
jmp 0x14000bb39
xor eax, eax
jmp 0x14000bb39
lea rax, [rbp + 8]
lea rcx, [rbp - 0x40]
mov qword [rcx], rax
lea rax, str.____DOS_header_not_matched_from_base_address:
lea rdx, [rbp - 0x30]
mov qword [rdx], rax
mov qword [rdx + 8], 2
and qword [rdx + 0x20], 0
lea rax, [0x14000b450]
mov qword [rcx + 8], rax
mov qword [rdx + 0x10], rcx
mov qword [rdx + 0x18], 1
lea rsi, [rbp - 0x58]
jmp 0x14000bb1f
lea rax, [rbp + 8]
lea rcx, [rbp - 0x40]
mov qword [rcx], rax
lea rax, [0x1400f6280]
lea rdx, [rbp - 0x30]
mov qword [rdx], rax
mov qword [rdx + 8], 2
and qword [rdx + 0x20], 0
lea rax, [0x14000b450]
mov qword [rcx + 8], rax
mov qword [rdx + 0x10], rcx
mov qword [rdx + 0x18], 1
lea rsi, [rbp + 0x40]
mov rcx, rsi
call fcn.14000bcb2
mov rcx, rsi
call fcn.14001c984
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx]
xor eax, eax
mov rdx, rcx
movaps xmm6, xmmword [rbp + 0x60]
movaps xmm7, xmmword [rbp + 0x70]
movaps xmm8, xmmword [rbp + 0x80]
movaps xmm9, xmmword [rbp + 0x90]
movaps xmm10, xmmword [rbp + 0xa0]
movaps xmm11, xmmword [rbp + 0xb0]
add rsp, 0x148
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rax, [0x1400f6210]
lea rcx, [rbp - 0x30]
mov qword [rcx], rax
mov qword [rcx + 8], 1
lea rax, [0x1400f6e20]
mov qword [rcx + 0x10], rax
pxor xmm0, xmm0
movdqu xmmword [rcx + 0x18], xmm0
lea rdx, str.src_resolver_finder.rsUnable_to_get_address
call fcn.14001c9e0
call fcn.140005b40
push 1
pop rcx
mov rdx, r15
call fcn.14001c8b0
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
mov rdx, r15
call fcn.14001ca20
jmp 0x14000bc0c
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
mov rdx, r15
call fcn.14001cab0
jmp 0x14000bc0c
mov rcx, r9
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rdx, rsi
call fcn.14001ccc0
jmp 0x14000bc0c
lea r8, str.library_std_src_sys_commonwtf8.rs
mov rcx, rsi
mov rdx, r15
call fcn.14001cab0
ud2