Function at 0x1400103f0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x260
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14002b040]
xor rax, rsp
mov qword [rbp + 0x200], rax
mov dword [rbp + 0x100], 1
mov rcx, qword [0x1402af7f8]
test rcx, rcx
jne 0x1400105dc
xor r11d, r11d
mov r10d, 0xdb29724b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r11d, r11d
je 0x1400104bd
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0xef5d0773
cmp rcx, r8
je 0x1400104b4
nop
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1400104a0
cmp edx, r11d
jne 0x1400105bd
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r15, rcx
shr r15, 0x20
mov edi, ecx
add rdi, r9
cmp rdi, r9
je 0x1400105bd
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x1400105bd
mov r14d, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
lea rax, [r14 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0xef5d0773
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140010536
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140010520
cmp edx, r10d
je 0x140010542
test r8d, r8d
jne 0x140010500
jmp 0x1400105bd
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov ecx, dword [rcx + rax*4]
add rcx, r9
cmp rcx, rdi
jbe 0x1400105d5
lea rax, [r15 + rdi]
cmp rcx, rax
jae 0x1400105d5
mov r11d, 0xef5d0773
mov r10d, r11d
movzx eax, byte [rcx]
cmp al, 0x2e
je 0x140010597
nop word [rax + rax]
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
inc rcx
movzx eax, byte [rcx]
cmp al, 0x2e
jne 0x140010580
inc rcx
movzx eax, byte [rcx]
test al, al
je 0x1400105b9
movsx eax, al
xor eax, r10d
imul r10d, eax, 0x1000193
lea rcx, [rcx + 1]
movzx eax, byte [rcx]
test al, al
jne 0x1400105a1
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x1400105d3
cmp qword [rax + 0x30], 0
jne 0x140010470
xor ecx, ecx
mov qword [0x1402af7f8], rcx
movabs rbx, 0x22d4c437636b1eec
movabs r14, 0x7fffffffffffffff
movabs r15, 0x8000000000000000
mov r12d, 0x16
movabs r13, 0x6d98f6a1a09bf42a
test rcx, rcx
je 0x1400108eb
call rcx
test eax, eax
je 0x1400108eb
xorps xmm0, xmm0
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x58], 0
mov rdi, qword [0x1402af5f8]
lea rsi, [0x1402af5e8]
cmp qword [0x1402af600], 0xf
cmova rsi, qword [0x1402af5e8]
cmp rdi, r14
ja 0x140011293
mov qword [rbp + 0x58], 0xf
cmp rdi, 0xf
ja 0x140010679
mov qword [rbp + 0x50], rdi
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x40], xmm0
jmp 0x140010707
mov rbx, rdi
or rbx, 0xf
cmp rbx, r14
jbe 0x1400106aa
mov rbx, r14
lea rax, [r15 + 0x27]
mov rcx, rax
call fcn.1400178f4
mov rcx, rax
test rax, rax
je 0x1400106cd
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400106e2
cmp rbx, r12
cmovb rbx, r12
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1400106d4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140011287
jmp 0x14001068c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400106e0
call fcn.1400178f4
jmp 0x1400106e2
xor eax, eax
mov qword [rbp + 0x40], rax
mov qword [rbp + 0x50], rdi
mov qword [rbp + 0x58], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
movabs rbx, 0x22d4c437636b1eec
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x140]
lea rcx, [0x1402af448]
call fcn.140002120
nop
movabs rax, 0x3ef99c5d4ee9c59
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x5d00541507071fcb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rcx, 0x568121ceac43e0ad
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1a0], rax
movabs rax, 0x6c202038277432eb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1a8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x1b0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1b8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1a0]
vmovdqa ymmword [rbp + 0xa0], ymm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
vzeroupper
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140010866
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140010866
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x8dac4961
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140010861
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140010840
cmp r8d, 0xe72899b4
je 0x14001086b
test r9d, r9d
jne 0x140010820
mov rax, qword [rax]
jmp 0x1400107f0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
xor edx, edx
lea rcx, [rbp + 0xa0]
call r8
nop
mov rdx, qword [rbp + 0x158]
cmp rdx, 0xf
jbe 0x1400108d4
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400108cf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400108cf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017770
movdqa xmm0, xmmword [0x140027060]
movdqu xmmword [rbp + 0x150], xmm0
mov byte [rbp + 0x140], 0
mov rsi, qword [0x1402af410]
test rsi, rsi
jne 0x1400109a9
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140010986
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140010986
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xd19554ac
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140010981
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140010960
cmp r8d, 0x937dd180
je 0x14001098b
test r9d, r9d
jne 0x140010940
mov rax, qword [rax]
jmp 0x140010910
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov esi, dword [rcx + rax*4]
add rsi, r10
mov qword [0x1402af410], rsi
mov rax, qword [0x1402af818]
test rax, rax
jne 0x140010a69
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140010a46
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140010a46
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xd295563f
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140010a41
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140010a20
cmp r8d, 0x2f6a484b
je 0x140010a4b
test r9d, r9d
jne 0x140010a00
mov rax, qword [rax]
jmp 0x1400109d0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov eax, dword [rcx + rax*4]
add rax, r10
mov qword [0x1402af818], rax
call rax
lea rdx, [rbp + 0x104]
mov rcx, rax
call rsi
cmp eax, 1
jne 0x140010d5b
cmp dword [rbp + 0x104], eax
jne 0x140010d5b
xorps xmm0, xmm0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x78], 0
mov rbx, qword [0x1402af5f8]
lea rdi, [0x1402af5e8]
cmp qword [0x1402af600], 0xf
cmova rdi, qword [0x1402af5e8]
cmp rbx, r14
ja 0x140011281
mov qword [rbp + 0x78], 0xf
cmp rbx, 0xf
ja 0x140010ae8
mov qword [rbp + 0x70], rbx
movups xmm0, xmmword [rdi]
movups xmmword [rbp + 0x60], xmm0
jmp 0x140010b6d
mov rax, rbx
or rax, 0xf
cmp rax, r14
jbe 0x140010b16
lea rax, [r15 + 0x27]
mov rcx, rax
call fcn.1400178f4
mov rcx, rax
test rax, rax
je 0x140010b3d
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140010b52
mov r14, rax
cmp rax, 0x16
cmovb r14, r12
lea rcx, [r14 + 1]
cmp rcx, 0x1000
jb 0x140010b44
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14001128d
jmp 0x140010af8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140010b50
call fcn.1400178f4
jmp 0x140010b52
xor eax, eax
mov qword [rbp + 0x60], rax
mov qword [rbp + 0x70], rbx
mov qword [rbp + 0x78], r14
lea r8, [rbx + 1]
mov rdx, rdi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x160]
lea rcx, [0x1402af448]
call fcn.140002120
nop
movabs rax, 0x3ef99c5d4ee9c59
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x5d00541507071fcb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rcx, 0x22d4c437636b1eec
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rdx, 0x568121ceac43e0ad
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1c0], rax
movabs rax, 0x6c202038277432eb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x1c8], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x1d0], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x1d8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x1c0]
vmovdqa ymmword [rbp + 0xc0], ymm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
vzeroupper
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140010cd6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140010cd6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x92fb53d9
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140010cd1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140010cb0
cmp r8d, 0x24b768ac
je 0x140010cdb
test r9d, r9d
jne 0x140010c90
mov rax, qword [rax]
jmp 0x140010c60
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
xor edx, edx
lea rcx, [rbp + 0xc0]
call r8
nop
mov rdx, qword [rbp + 0x178]
cmp rdx, 0xf
jbe 0x140010d44
inc rdx
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010d3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140010d3f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017770
movdqa xmm0, xmmword [0x140027060]
movdqu xmmword [rbp + 0x170], xmm0
mov byte [rbp + 0x160], 0
mov rdx, qword [0x1402af400]
test rdx, rdx
jne 0x140010efc
xor r11d, r11d
mov r10d, 0xb991a995
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop dword [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r11d, r11d
je 0x140010ddd
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x13203883
cmp rcx, r8
je 0x140010dd4
nop
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140010dc0
cmp edx, r11d
jne 0x140010edd
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r15, rcx
shr r15, 0x20
mov edi, ecx
add rdi, r9
cmp rdi, r9
je 0x140010edd
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x140010edd
mov r14d, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r14]
add rcx, r9
mov edx, 0x13203883
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140010e56
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140010e40
cmp edx, r10d
je 0x140010e62
test r8d, r8d
jne 0x140010e20
jmp 0x140010edd
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
cmp rdx, rdi
jbe 0x140010ef5
lea rax, [rdi + r15]
cmp rdx, rax
jae 0x140010ef5
mov r11d, 0x13203883
mov r10d, r11d
movzx eax, byte [rdx]
cmp al, 0x2e
je 0x140010eb7
nop word [rax + rax]
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
inc rdx
movzx eax, byte [rdx]
cmp al, 0x2e
jne 0x140010ea0
inc rdx
movzx eax, byte [rdx]
test al, al
je 0x140010ed9
movsx eax, al
xor eax, r10d
imul r10d, eax, 0x1000193
lea rdx, [rdx + 1]
movzx eax, byte [rdx]
test al, al
jne 0x140010ec1
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140010ef3
cmp qword [rax + 0x30], 0
jne 0x140010d90
xor edx, edx
mov qword [0x1402af400], rdx
movabs rax, 0x1fcd8cdccff8044
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x6c20203827743287
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x180], rax
movabs rdi, 0x6c202038277432eb
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x188], rax
movdqa xmm0, xmmword [rbp + 0x80]
xorps xmm0, xmmword [rbp + 0x180]
movdqa xmmword [rbp + 0x80], xmm0
lea rcx, [rbp + 0x80]
call rdx
mov r8, rax
test rax, rax
je 0x140011251
movabs rax, 0x24e184c4d5ca8064
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x20], rcx
movabs rax, 0x5544155551b5485
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0x28], rcx
movabs rax, 0x51b1a758113b7083
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x568121ceac43e0de
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs rsi, 0x22d4c437636b1eec
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs r14, 0x568121ceac43e0ad
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0x20], ymm1
lea rdx, [rbp + 0x20]
mov rcx, r8
vzeroupper
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x140011251
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rax, [rbp + 0x108]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rbp + 0x100]
lea edx, [r9 + 3]
call rbx
test eax, eax
js 0x140011251
cmp dword [rbp + 0x100], 0xffffffff
jne 0x140011251
lea rdx, [0x1402af5e8]
lea rcx, [rbp + 0xe0]
call fcn.140003900
mov r8, rax
lea rdx, [rbp + 0x120]
lea rcx, [0x1402af448]
call fcn.140002120
nop
movabs rax, 0x3ef99c5d4ee9c59
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x5d00541507071fcb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x1e0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x1e8], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x1f0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x1f8], rax
vmovdqu ymm0, ymmword [rbp + 0x20]
vpxor ymm1, ymm0, ymmword [rbp + 0x1e0]
vmovdqa ymmword [rbp + 0x20], ymm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
vzeroupper
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400111e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400111e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0xe7b43420
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1400111e1
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x1400111c0
cmp r8d, 0x86ff2dcb
je 0x1400111eb
test r9d, r9d
jne 0x1400111a0
mov rax, qword [rax]
jmp 0x140011170
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
xor edx, edx
lea rcx, [rbp + 0x20]
call r8
nop
mov rdx, qword [rbp + 0x138]
cmp rdx, 0xf
jbe 0x140011251
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001124c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001124c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017770
mov rcx, qword [rbp + 0x200]
xor rcx, rsp
call fcn.140017750
lea r11, [rsp + 0x260]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140002000
int3
call fcn.140001f60
int3
call fcn.140001f60
int3
call fcn.140002000
int3