Function at 0x1401b69a8
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x30
xor ebx, ebx
mov edi, 0xcc60a80e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r13d, 0x4764996c
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x1401b6a34
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0x2222337a
jmp 0x1401b6a26
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, r13d
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x1401b6a09
cmp r9d, ebx
jne 0x1401b6b34
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov rcx, qword [rcx + r9 + 0x88]
mov r11d, ecx
add r11, r9
shr rcx, 0x20
cmp r11, r9
je 0x1401b6b34
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x1401b6b34
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r10d, dword [rdx + r9]
add r10, r9
mov r14d, 0x2222337a
jmp 0x1401b6a97
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, r13d
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r10]
inc r10
test dl, dl
jne 0x1401b6a7c
cmp r14d, edi
je 0x1401b6aaf
test esi, esi
jne 0x1401b6a67
jmp 0x1401b6b34
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + rsi*2]
mov r8d, dword [rdx + rax*4]
add r8, r9
cmp r8, r11
jbe 0x1401b6b3c
lea rax, [rcx + r11]
cmp r8, rax
jae 0x1401b6b3c
mov ebx, 0x2222337a
mov edi, ebx
jmp 0x1401b6af9
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, r13d
mov eax, ebx
xor eax, ecx
mov ebx, edx
imul ebx, eax
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x1401b6adf
jmp 0x1401b6b19
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, r13d
mov eax, edi
xor eax, ecx
mov edi, edx
imul edi, eax
inc r8
mov al, byte [r8]
test al, al
jne 0x1401b6b02
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x1401b69dd
and dword [rbp + 0x48], 0
mov dword [rbp + 0x48], 0xf71f831
mov eax, 0xba7dd5f6
sub eax, dword [0x140336058]
sub eax, dword [0x140336050]
xor eax, 0xa7507f7b
sub eax, dword [0x140336048]
mov ecx, dword [0x140336040]
add eax, 0xaebffca9
add eax, ecx
xor eax, 0xbad893bd
sub eax, 0x20c0088a
xor eax, 0xddd00d65
lea edx, [rcx - 0x184987ac]
add edx, eax
not edx
mov eax, dword [0x140336038]
xor eax, 0xd35bb7d6
sub edx, eax
mov ecx, dword [0x140336030]
xor ecx, 0x2ca44829
add ecx, 0xf6ea396b
add ecx, edx
xor ecx, 0x327ca146
mov dword [rbp + 0x48], ecx
movsxd rcx, ecx
call r8
mov qword [rbp - 0x10], rax
and dword [rbp + 0x48], 0
movabs rsi, 0x1ccecaa646419bb3
movabs r12, 0x9605720cc6b8f66f
xor r11d, r11d
movabs rax, 0x372ad0503259f5e0
movabs r9, 0xb2dbacd1526857b0
mov r14, qword [0x140336070]
imul r14, rax
not r14
movabs rcx, 0x4d24532e9acc20f8
mov r13, qword [0x140336060]
mov rax, r13
xor rax, rcx
and r14, rax
ror r14, 0x38
shr r14, 8
movabs rax, 0xe523efc73bc8eaf0
mov rdi, qword [0x140336080]
imul rdi, rax
add rdi, rsi
movabs rax, 0xae526d1e7fffffff
xor rdi, rax
shr rdi, 0x1f
not rdi
movabs r8, 0xe3313559b9be644d
lea rcx, [rdi + r8]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea rdx, [0x140336060]
movzx eax, dil
movzx ecx, byte [rdx + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0xab
and ecx, 0x8000003f
jge 0x1401b6c9b
dec ecx
or ecx, 0xffffffc0
inc ecx
mov rdx, rdi
ror rdx, cl
not rdx
movabs rax, 0x572fdfd75adb7980
mov r15, rdx
imul r15, rax
lea r10, [r15 + r8]
mov r8, rdi
imul r8, r14
sub r8, r10
xor r8, r12
movzx ebx, r10b
mov ecx, ebx
xor ecx, 4
and ecx, 0xf
jge 0x1401b6cdb
dec ecx
or ecx, 0xffffffc0
inc ecx
rol r8, cl
mov rax, r10
sub rax, qword [0x140336078]
xor r8, rax
movabs rax, 0x88b6c58a43867480
imul rdx, rax
movabs rax, 0x76285a1a53983f29
sub rdx, rax
xor r8, rdx
xor r8, r9
mov rax, r8
and eax, 3
je 0x1401b6ff5
sub rax, 1
je 0x1401b6eee
sub rax, 1
movabs rbx, 0xaaaaaaaaaaaaaaab
je 0x1401b6e22
cmp rax, 1
jne 0x1401b7076
mov r12, r10
imul r12, rdi
movabs rax, 0x7c359ba68bcba39f
add rax, r8
xor r12, rax
shr r12, 0xc
not r12
movabs rcx, 0x83572abfa2c0
mov rdx, qword [0x140336088]
add rdx, rcx
movabs rax, 0xe3b3b021d81ae677
xor rdx, rax
movzx eax, r12b
movzx ecx, r8b
imul ecx, eax
and cl, 0x3f
ror rdx, cl
shl rdx, 0xf
movabs rax, 0xf7ca7db9725f4e43
sub rax, rdi
mov rdi, rdx
xor rdi, rax
mov rcx, rdi
imul rcx, rsi
mov eax, 0xa3849ca9
add rcx, rax
mov rax, rbx
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea r13, [0x140336060]
mov cl, byte [r13 + rcx*8]
and cl, 0xf
movabs rsi, 0x4dfc7bf6799e14b4
sub rsi, r12
shr rsi, cl
movabs rcx, 0xe33959e20abf50b3
add rcx, r15
mov rax, rbx
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov rax, r8
imul rax, qword [r13 + rcx*8]
imul rax, r8
sub rax, r14
xor rsi, rax
jmp 0x1401b707d
movabs rcx, 0xaaaaaa1aa39d6197
mov rdi, r8
xor rdi, rcx
movabs rcx, 0x1206ed6190bddb
imul rdi, rcx
movabs rcx, 0xffff7e8a858d534b
imul r15, rcx
movabs rcx, 0xa829960ec3abac7f
add rdi, rcx
add rdi, r15
movabs rax, 0x277cd7be714db6f7
mov rcx, rdi
xor rcx, rax
mov rax, rbx
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov r10, rdi
not r10
lea r13, [0x140336060]
imul r10, qword [r13 + rcx*8]
xor r10, 0xfffffffff6c8b747
lea ecx, [r8 + 0x15]
and cl, 0x3f
rol r10, cl
movabs rax, 0x6428610200000000
imul r10, rax
mov rcx, r10
ror rcx, 0x25
not rcx
movabs rax, 0x9b2de6b2fa84d340
imul rcx, rax
mov rax, rdi
sub rax, r10
lea rdx, [rcx + rax*4]
mov cl, r14b
and cl, 0x3f
ror rdx, cl
mov rax, rsi
mov rsi, rdx
imul rsi, rax
jmp 0x1401b707d
movabs rax, 0x38eda16113080c0f
imul r8, rax
movabs rax, 0xd79435e50d79435f
mul r8
shr rdx, 4
movzx eax, dl
imul edx, eax, 0x13
mov cl, r8b
sub cl, dl
movabs rdx, 0x69fa8df339470990
shl rdx, cl
mov rax, r9
mov r9, rdx
xor r9, rax
and ebx, 0x8000003f
jge 0x1401b6f3d
dec ebx
or ebx, 0xffffffc0
inc ebx
mov cl, bl
rol r9, cl
movabs rcx, 0xe3313559b9be644d
add rcx, r8
movabs rbx, 0xaaaaaaaaaaaaaaab
mov rax, rbx
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movabs rdx, 0xaa646419bb3
lea r13, [0x140336060]
mov rax, qword [r13 + rcx*8]
imul rax, rdx
xor r9, rax
movabs rax, 0xffffc7a7ff5917ba
or r9, rax
mov rsi, qword [0x140336070]
imul rsi, r12
sub rsi, r10
mov rax, r14
sub rax, r9
xor rsi, rax
movabs rax, 0xc7a7c6a6ae5117b7
xor rsi, rax
mov rax, r8
imul rax, r10
imul rax, rsi
mov r11, rdi
sub r11, rax
movabs rax, 0x789589461035bad
add r11, rax
xor r11, r14
mov al, dil
shl al, 3
lea ecx, [rax + rdi]
add cl, cl
and cl, 0x3f
rol r11, cl
not r11
jmp 0x1401b707d
mov rcx, r8
imul rcx, qword [0x140336080]
and rcx, r13
mov rax, r9
mov r9, rcx
xor r9, rax
ror r9, 0x30
imul r9, r10
mov r11, r14
not r11
imul r11, rdi
movabs rax, 0x7cd8a7de73a04656
imul r11, rax
imul rbx, r13, 0xffffffffc8a47748
mov rdx, qword [0x140336068]
sub rbx, rdx
mov al, r11b
not al
movzx ecx, al
movzx eax, dl
xor ecx, eax
and ecx, 0x8000003f
jge 0x1401b7059
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rbx, cl
movabs r14, 0xe3313559b9be644d
add r14, rbx
add r14, r15
movabs rbx, 0xaaaaaaaaaaaaaaab
lea r13, [0x140336060]
movabs rcx, 0xff055d7b83eb4c9b
xor r12, rcx
mov rax, rbx
mul r12
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub r12, rax
xor r9, r11
imul r9, qword [r13 + r12*8]
not r10
imul r10, r8
imul r10, r14
imul r10, rsi
movabs rcx, 0xf5ed7e8784580647
xor rcx, rdi
not rcx
xor rcx, r10
sub rcx, r9
call fcn.1401b57a8
mov qword [0x14033ff50], rax
and dword [rbp + 0x50], 0
mov dword [rbp + 0x50], 0xce40641
mov eax, 0xae786fdc
sub eax, dword [0x140336058]
sub eax, dword [0x140336050]
xor eax, 0x71c903ef
sub eax, dword [0x140336048]
mov ecx, dword [0x140336040]
add eax, 0x15f9adb1
add eax, ecx
xor eax, 0x1c445bb2
add eax, 0x6c77c803
xor eax, 0x19c2d838
lea edx, [rcx + 0x7e4b5d94]
add edx, eax
not edx
mov eax, dword [0x140336038]
xor eax, 0xc07d4f66
sub edx, eax
mov ecx, dword [0x140336030]
xor ecx, 0x3f82b099
add ecx, 0x256560e8
add ecx, edx
xor ecx, 0x9d4693f6
mov dword [rbp + 0x50], ecx
movsxd rdx, ecx
lea r8, str.Updating..._n
mov r13, qword [rbp - 0x10]
mov rcx, r13
call fcn.140113fe8
nop
and dword [rbp + 0x50], 0
and dword [rbp + 0x58], 0
mov dword [rbp + 0x58], 0x8e828c6
mov eax, 0x6216c5cf
sub eax, dword [0x140336058]
sub eax, dword [0x140336050]
xor eax, 0x7f52c550
sub eax, dword [0x140336048]
mov ecx, dword [0x140336040]
add eax, 0x43257c76
add eax, ecx
xor eax, 0x80673e4
sub eax, 0x75b53015
xor eax, 0x46dbc191
lea edx, [rcx - 0x408e3ee3]
add edx, eax
not edx
mov eax, dword [0x140336038]
xor eax, 0xa4b6448c
sub edx, eax
mov ecx, dword [0x140336030]
xor ecx, 0x5b49bb73
add ecx, 0x2918472
add ecx, edx
xor ecx, 0x71df0ee4
mov dword [rbp + 0x58], ecx
call fcn.140298200
mov rdx, rax
mov rcx, r13
call fcn.140299d94
nop
and dword [rbp + 0x58], 0
xor ebx, ebx
mov r14d, 0x7509bb5a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x1401b726f
psrldq xmm0, 8
movq r9, xmm0
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
mov r10d, 0x908ae96e
jmp 0x1401b7261
movsx edx, byte [r9]
mov r8d, edx
imul r8d, edx
add r8d, 0x31
xor r8d, 0x4764996c
mov ecx, r10d
xor ecx, edx
mov r10d, r8d
imul r10d, ecx
add r9, 2
cmp r9, r11
jne 0x1401b723b
cmp r10d, ebx
jne 0x1401b737b
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov r11d, ecx
add r11, r10
shr rcx, 0x20
cmp r11, r10
je 0x1401b737b
mov edi, dword [r11 + 0x18]
test edi, edi
je 0x1401b737b
mov r12d, dword [r11 + 0x20]
dec edi
lea rdx, [r12 + rdi*4]
mov r9d, dword [rdx + r10]
add r9, r10
mov esi, 0x908ae96e
jmp 0x1401b72d3
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, 0x4764996c
xor r8d, esi
mov esi, edx
imul esi, r8d
mov dl, byte [r9]
inc r9
test dl, dl
jne 0x1401b72b6
cmp esi, r14d
je 0x1401b72eb
test edi, edi
jne 0x1401b72a2
jmp 0x1401b737b
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r8d, word [rdx + rdi*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov r9d, dword [rdx + r8*4]
add r9, r10
cmp r9, r11
jbe 0x1401b7383
lea rax, [r11 + rcx]
cmp r9, rax
jae 0x1401b7383
mov ebx, 0x908ae96e
mov r14d, ebx
jmp 0x1401b733a
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, ebx
xor eax, ecx
mov ebx, edx
imul ebx, eax
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x1401b731d
jmp 0x1401b7360
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, r14d
xor eax, ecx
mov r14d, edx
imul r14d, eax
inc r9
mov al, byte [r9]
test al, al
jne 0x1401b7343
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x1401b720f
mov rcx, r13
mov rbx, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp r9