Function at 0x140004d10
Capabilities:
Access peb ldr_data
Encode data using xor
Get kernel32 base address
Hash data using fnv
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push rbp
push rbx
push r12
push r14
lea rbp, [rsp - 0x3f]
sub rsp, 0xc8
mov rax, qword [0x14000b010]
xor rax, rsp
mov qword [rbp + 0x2f], rax
xor r14d, r14d
lea rcx, str..TitanHide
mov qword [rsp + 0x30], r14
xor r12b, r12b
mov dword [rsp + 0x28], r14d
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov edx, 0xc0000000
mov byte [rbp - 0x49], r12b
mov qword [rbp - 0x21], r14
mov qword [rbp - 0x41], r14
mov qword [rbp - 0x39], r14
mov dword [rbp - 0x29], r14d
mov dword [rbp + 0x27], r14d
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140004dc4
mov dword [rbp - 0x19], 2
lea r9, [rbp + 0x27]
mov rax, qword gs:[0x30]
lea r8d, [r14 + 0x10]
lea rdx, [rbp - 0x19]
mov qword [rsp + 0x20], r14
mov rcx, qword [rax + 0x40]
mov qword [rbp - 0x11], rcx
mov rcx, rbx
mov dword [rbp - 0x15], 0x3ff
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp - 9], 0x30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x17], xmm0
mov qword [rbp - 1], r14
mov dword [rbp + 0xf], r14d
mov qword [rbp + 7], r14
mov rax, qword gs:[0x60]
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xf8], rdi
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cc10]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140004ea7
movsxd rax, dword [r10 + 0x3c]
mov r11d, r14d
mov edi, dword [rax + r10 + 0x88]
mov esi, dword [rdi + r10 + 0x20]
nop dword [rax + rax]
mov ebx, r11d
mov r9d, 0x62bc492
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140004e81
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140004e50
cmp r9d, 0x191badb8
je 0x140004e86
inc r11d
jmp 0x140004e30
mov ecx, dword [rdi + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x14000cc10], rax
xor r9d, r9d
mov qword [rsp + 0x100], r13
lea r8, [rbp - 9]
mov qword [rsp + 0xc0], r15
lea rcx, [rbp - 0x21]
lea edx, [r9 + 8]
call rax
test eax, eax
js 0x14000591d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cc98]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140004f87
movsxd rax, dword [r10 + 0x3c]
mov r11d, r14d
mov edi, dword [rax + r10 + 0x88]
mov esi, dword [rdi + r10 + 0x20]
nop dword [rax]
mov ebx, r11d
mov r9d, 0xbe070f87
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140004f61
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140004f30
cmp r9d, 0x17b08de0
je 0x140004f66
inc r11d
jmp 0x140004f10
mov ecx, dword [rdi + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x14000cc98], rax
mov r9d, 4
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x29]
mov rcx, qword [rbp - 0x21]
lea edx, [r9 - 2]
call rax
mov edx, dword [rbp - 0x29]
xor ecx, ecx
mov r8d, 0x1000
lea r9d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r15, rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
test r15, r15
jne 0x140005085
mov r10, qword [rax + 0x30]
mov rax, qword [0x14000cc58]
test rax, rax
jne 0x140005078
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
mov edi, dword [rbx + r10 + 0x20]
nop
mov r11d, r14d
mov r9d, 0xd96d007a
lea rax, [rdi + r11*4]
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140005051
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140005020
cmp r9d, 0x85bbcf0c
je 0x140005056
inc r14d
jmp 0x140005000
mov ecx, dword [rbx + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + r11*2]
mov ecx, dword [rbx + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x14000cc58], rax
mov rcx, qword [rbp - 0x21]
call rax
xor al, al
jmp 0x140005921
mov r11, qword [rax + 0x30]
mov rax, qword [0x14000cc20]
test rax, rax
jne 0x140005127
movsxd rax, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
mov ebx, r10d
mov r9d, 0x4c22da4c
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140005101
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x1400050d0
cmp r9d, 0x11a574d1
je 0x140005106
inc r10d
jmp 0x1400050b0
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x14000cc20], rax
mov r9d, dword [rbp - 0x29]
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x20], rcx
mov r8, r15
mov rcx, qword [rbp - 0x21]
mov edx, 2
call rax
mov edi, dword [r15 + 0x14]
cmp edi, 1
je 0x1400051c3
mov rdx, qword [r15 + 8]
test rdx, rdx
je 0x1400051c3
lea r10, str.DebugObject
sub r10, rdx
nop
movzx r8d, word [rdx]
movzx r9d, word [rdx + r10]
lea r11d, [r8 - 0x41]
cmp r11d, 0x19
lea ecx, [r8 + 0x20]
lea ebx, [r9 - 0x41]
cmova ecx, r8d
lea eax, [r9 + 0x20]
cmp ebx, 0x19
cmova eax, r9d
cmp eax, ecx
jne 0x1400051a4
test r9w, r9w
je 0x14000519e
test r8w, r8w
je 0x1400051a4
add rdx, 2
jmp 0x140005160
test r8w, r8w
je 0x1400051bf
cmp r11d, 0x19
lea ecx, [r8 + 0x20]
lea eax, [r9 + 0x20]
cmova ecx, r8d
cmp ebx, 0x19
cmova eax, r9d
cmp eax, ecx
jne 0x1400051c3
mov byte [rbp - 0x49], 1
mov r13d, dword [r15 + 0x10]
xor edx, edx
mov r8d, 0x8000
mov qword [rbp - 0x19], r13
mov rcx, r15
mov qword [rbp - 0x31], rdi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cc38]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x140005297
movsxd rax, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
mov ebx, r10d
mov r9d, 0x26a46b7e
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140005271
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140005240
cmp r9d, 0xe7a2da3f
je 0x140005276
inc r10d
jmp 0x140005220
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x14000cc38], rax
mov r9d, 4
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x29]
xor ecx, ecx
lea edx, [r9 - 1]
call rax
mov edx, dword [rbp - 0x29]
xor ecx, ecx
mov r8d, 0x1000
lea r9d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r12, rax
test rax, rax
je 0x140005470
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cbb0]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x140005387
movsxd rax, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop
mov ebx, r10d
mov r9d, 0x2b64a7b7
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140005361
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140005330
cmp r9d, 0xc7bd01f0
je 0x140005366
inc r10d
jmp 0x140005310
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x14000cbb0], rax
mov r9d, dword [rbp - 0x29]
mov r8, r12
mov edx, 3
mov qword [rsp + 0x20], r14
mov rcx, 0xffffffffffffffff
call rax
test eax, eax
jns 0x140005479
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cc28]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140005459
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
mov edi, dword [rbx + r10 + 0x20]
mov r11d, r14d
mov r9d, 0xe336042
lea rax, [rdi + r11*4]
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140005432
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140005401
cmp r9d, 0xdc91ec14
je 0x140005437
inc r14d
jmp 0x1400053e2
mov ecx, dword [rbx + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + r11*2]
mov ecx, dword [rbx + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x14000cc28], rax
mov rcx, qword [rbp - 0x21]
call rax
xor edx, edx
mov r8d, 0x8000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualFree]
movzx eax, byte [rbp - 0x49]
jmp 0x140005921
mov eax, dword [r12]
lea r10, [r12 + 8]
test eax, eax
je 0x140005556
mov r15d, eax
mov r13, r14
mov rsi, qword [r10 + 8]
mov rdx, rsi
test rsi, rsi
je 0x140005523
lea r11, str.DebugObject
sub r11, rsi
nop word [rax + rax]
movzx r8d, word [rdx]
movzx r9d, word [r11 + rdx]
lea edi, [r8 - 0x41]
cmp edi, 0x19
lea ecx, [r8 + 0x20]
lea ebx, [r9 - 0x41]
cmova ecx, r8d
lea eax, [r9 + 0x20]
cmp ebx, 0x19
cmova eax, r9d
cmp eax, ecx
jne 0x1400054f3
test r9w, r9w
je 0x1400054ed
test r8w, r8w
je 0x1400054f3
add rdx, 2
jmp 0x1400054b0
test r8w, r8w
je 0x14000550d
cmp ebx, 0x19
lea ecx, [r9 + 0x20]
lea eax, [r8 + 0x20]
cmova ecx, r9d
cmp edi, 0x19
cmova eax, r8d
cmp ecx, eax
jne 0x140005523
mov eax, dword [r10 + 0x14]
test eax, eax
je 0x140005518
add r13, rax
mov eax, dword [r10 + 0x10]
test eax, eax
je 0x140005523
add r14, rax
movzx ecx, word [r10 + 2]
add rcx, rsi
mov rax, rcx
and rax, 0xfffffffffffffff8
cmp rax, rcx
lea r10, [rax + 8]
cmove r10, rax
sub r15, 1
jne 0x140005490
mov qword [rbp - 0x39], r14
xor r14d, r14d
mov qword [rbp - 0x41], r13
mov r13, qword [rbp - 0x19]
xor edx, edx
mov r8d, 0x8000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cba8]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x140005627
movsxd rax, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
mov r9d, 0x67330303
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + rsi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140005601
nop dword [rax]
nop word [rax + rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x1400055d0
cmp r9d, 0x9fc97dec
je 0x140005606
inc r10d
jmp 0x1400055a3
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x14000cba8], rax
mov r9d, 4
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x29]
xor ecx, ecx
lea edx, [r9 - 1]
call rax
cmp eax, 0xc0000004
je 0x14000572d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cbc8]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x140005707
movsxd rax, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
mov ebx, r10d
mov r9d, 0x4955585e
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + rsi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1400056e1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x1400056b0
cmp r9d, 0x561e1ef0
je 0x1400056e6
inc r10d
jmp 0x140005690
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x14000cbc8], rax
mov rcx, qword [rbp - 0x21]
call rax
mov rax, qword [rbp - 0x41]
cmp rax, 1
jb 0x140005726
mov r12, qword [rbp - 0x31]
cmp rax, r12
jb 0x140005726
cmp qword [rbp - 0x39], r13
jae 0x140005731
mov al, 1
jmp 0x140005921
mov r12, qword [rbp - 0x31]
mov edx, dword [rbp - 0x29]
xor ecx, ecx
mov r8d, 0x1000
lea r9d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rcx, qword gs:[0x60]
mov rsi, rax
mov r10, qword [0x14000cbb8]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
mov r11, qword [rdx + 0x30]
test r10, r10
jne 0x140005809
movsxd rcx, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rcx + r11 + 0x88]
mov r15d, dword [rdi + r11 + 0x20]
nop word [rax + rax]
mov ebx, r10d
mov r9d, 0xadaee28b
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + r15]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1400057e1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x1400057b0
cmp r9d, 0x413fa7e4
je 0x1400057e6
inc r10d
jmp 0x140005790
mov r8d, dword [rdi + r11 + 0x24]
add r8, r11
movzx r9d, word [r8 + rbx*2]
mov r8d, dword [rdi + r11 + 0x1c]
add r8, r11
mov r10d, dword [r8 + r9*4]
add r10, r11
mov qword [0x14000cbb8], r10
mov r9d, dword [rbp - 0x29]
mov r8, rsi
mov edx, 3
mov qword [rsp + 0x20], rsi
mov rcx, 0xffffffffffffffff
call r10
test rsi, rsi
je 0x14000583a
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x14000cc48]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x1400058f8
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
mov edi, dword [rbx + r10 + 0x20]
mov r11d, r14d
mov r9d, 0x7cb25808
lea rax, [r10 + r11*4]
mov r8d, dword [rax + rdi]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1400058d1
nop dword [rax]
nop word [rax + rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x1400058a0
cmp r9d, 0x18c4e6ce
je 0x1400058d6
inc r14d
jmp 0x140005873
mov ecx, dword [rbx + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + r11*2]
mov ecx, dword [rbx + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x14000cc48], rax
mov rcx, qword [rbp - 0x21]
call rax
mov rax, qword [rbp - 0x41]
cmp rax, 1
jb 0x140005913
cmp rax, r12
jb 0x140005913
cmp qword [rbp - 0x39], r13
jae 0x140005918
mov r12b, 1
jmp 0x14000591d
movzx r12d, byte [rbp - 0x49]
movzx eax, r12b
mov r15, qword [rsp + 0xc0]
mov r13, qword [rsp + 0x100]
mov rdi, qword [rsp + 0xf8]
mov rsi, qword [rsp + 0xf0]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140007a30
add rsp, 0xc8
pop r14
pop r12
pop rbx
pop rbp
ret