Function at 0x14000a690
Capabilities:
Access peb ldr_data
Hash data using djb2
Resolve function by djb2 hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xe0
mov eax, 0x5a4d
mov r15d, r9d
mov r12, rdx
cmp word [rdx], ax
jne 0x14000b690
movsxd r13, dword [rdx + 0x3c]
mov qword [rbp - 0x41], 0
add r13, rdx
mov dword [rbp - 0x35], 0
mov dword [rbp - 0x25], 0
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r14, qword [rcx + 0x18]
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, r14
je 0x14000a78b
nop dword [rax + rax]
mov r9, qword [rdi + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
test ecx, ecx
je 0x14000a783
mov r11d, dword [r9 + rcx + 0x18]
lea rbx, [r9 + rcx]
xor r8d, r8d
test r11d, r11d
je 0x14000a783
mov esi, dword [rbx + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
mov eax, 0x1505
add rcx, r9
movsx edx, byte [rcx]
test edx, edx
je 0x14000a77b
nop word [rax + rax]
imul eax, eax, 0x21
lea rcx, [rcx + 1]
add eax, edx
movsx edx, byte [rcx]
test edx, edx
jne 0x14000a760
cmp eax, 0x5fbff0fb
je 0x14000ab3b
inc r8d
cmp r8d, r11d
jb 0x14000a740
mov rdi, qword [rdi]
cmp rdi, r14
jne 0x14000a710
mov rax, qword [rbp + 0x6f]
mov qword [rbp - 0x61], rax
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r14, qword [rcx + 0x18]
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, r14
je 0x14000a82b
mov r9, qword [rdi + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
test ecx, ecx
je 0x14000a823
mov r11d, dword [r9 + rcx + 0x18]
lea rbx, [r9 + rcx]
xor r8d, r8d
test r11d, r11d
je 0x14000a823
mov esi, dword [rbx + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
mov eax, 0x1505
add rcx, r9
movsx edx, byte [rcx]
test edx, edx
je 0x14000a81b
nop word [rax + rax]
imul eax, eax, 0x21
lea rcx, [rcx + 1]
add eax, edx
movsx edx, byte [rcx]
test edx, edx
jne 0x14000a800
cmp eax, 0xcf31bb1f
je 0x14000ab57
inc r8d
cmp r8d, r11d
jb 0x14000a7e0
mov rdi, qword [rdi]
cmp rdi, r14
jne 0x14000a7b0
mov rax, qword [rbp + 0x6f]
mov qword [rbp - 0x59], rax
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov r14, qword [rcx + 0x18]
add r14, 0x20
mov rdi, qword [r14]
cmp rdi, r14
je 0x14000a8cb
mov r9, qword [rdi + 0x20]
movsxd rax, dword [r9 + 0x3c]
mov ecx, dword [rax + r9 + 0x88]
test ecx, ecx
je 0x14000a8c3
mov r11d, dword [r9 + rcx + 0x18]
lea rbx, [r9 + rcx]
xor r8d, r8d
test r11d, r11d
je 0x14000a8c3
mov esi, dword [rbx + 0x20]
nop dword [rax + rax]
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
mov eax, 0x1505
add rcx, r9
movsx edx, byte [rcx]
test edx, edx
je 0x14000a8bb
nop word [rax + rax]
imul eax, eax, 0x21
lea rcx, [rcx + 1]
add eax, edx
movsx edx, byte [rcx]
test edx, edx
jne 0x14000a8a0
cmp eax, 0xbdb9f1ae
je 0x14000ab73
inc r8d
cmp r8d, r11d
jb 0x14000a880
mov rdi, qword [rdi]
cmp rdi, r14
jne 0x14000a850
mov rax, qword [rbp + 0x6f]
mov qword [rbp - 0x51], rax
jmp 0x14076b72a
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x14000a78f
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x14000a82f
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x14000a8cf
xor al, al
mov rbx, qword [rsp + 0x138]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call 0x14072d2b9
sub rsp, 8
push 0x5769c8ec
push rdx
pop qword [rsp]
pop qword [rsp]
push r15
mov r15, rsp
add r15, 8
sub r15, 8
xchg qword [rsp], r15
pop rsp
push rbx
pop qword [rsp]
sub rsp, 8
push r11
mov r11, r12
mov qword [rsp + 8], r11
pop r11
mov r12, rsp
add r12, 8
sub r12, 8
xchg qword [rsp], r12
pop rsp
mov qword [rsp], rbx
push 0x7efa8493
sub rsp, 8
push rbp
pop qword [rsp]
pop qword [rsp]
push 0x5deb7f77
sub rsp, 8
push rsi
pop qword [rsp]
pop qword [rsp]
sub rsp, 8
push 0x7bbb707f
sub rsp, 8
mov qword [rsp], rdi
pop qword [rsp]
pop qword [rsp]
push r10
mov r10, rsp
add r10, 8
sub r10, 8
xor r10, qword [rsp]
push r14
mov r14, r10
xor qword [rsp + 8], r14
pop r14
xor r10, qword [rsp]
pop rsp
mov qword [rsp], r15
sub rsp, 8
push 0x35712984
push 0x6efe5373
mov qword [rsp], r14
pop qword [rsp]
pop qword [rsp]
push 0x737bb113
sub rsp, 8
push 0x7d27a00e
mov qword [rsp], r13
pop qword [rsp]
pop qword [rsp]
sub rsp, 8
push rbx
push r12
mov rbx, qword [rsp]
add rsp, 8
mov qword [rsp + 8], rbx
mov rbx, qword [rsp]
add rsp, 8
push 0x7ebf983e
push 0x3ffde171
push r11
pop qword [rsp]
pop qword [rsp]
push 0x5eee83ba
push rcx
mov rcx, r10
sub rsp, 8
mov qword [rsp], rcx
pop qword [rsp + 8]
mov rcx, qword [rsp]
add rsp, 8
push 0x7f7ff035
push 0x1dff5e84
push r9
pop qword [rsp]
pop qword [rsp]
push 0x5a1eb2fe
push rcx
mov rcx, rsp
add rcx, 8
sub rcx, 8
xchg qword [rsp], rcx
pop rsp
push r8
pop qword [rsp]
pop qword [rsp]
sub rsp, 8
mov qword [rsp], rcx
push qword [rsp]
mov r8, qword [rsp]
add rsp, 8
add rsp, 8
push qword [rsp + 0x78]
push qword [rsp]
pop r9
push r12
mov r12, rsp
add r12, 8
add r12, 8
xchg qword [rsp], r12
pop rsp
push qword [rsp + 0x70]
mov rcx, qword [rsp]
push rdx
mov rdx, rsp
add rdx, 8
add rdx, 8
xor rdx, qword [rsp]
xor qword [rsp], rdx
xor rdx, qword [rsp]
pop rsp
sub rsp, 8
push r10
mov r10, rsp
add r10, 8
sub r10, 8
xchg qword [rsp], r10
pop rsp
mov qword [rsp], rax
pop qword [rsp]
pop qword [rsp + 0x78]
sub rcx, 5
sub rcx, 0x72d2b4
mov ebp, 0x77f74aad
sub ebp, 1
sub rsp, 8
mov qword [rsp], r13
mov r13d, 0x77dbdc59
shr r13d, 6
add r13d, 0x6d752f5c
push r11
mov r11d, 0x6a6372b9
shr r11d, 1
add r11d, 0x6fd31295
and r11d, 0x6f63335a
dec r11d
and r11d, 0x26ef5839
add r11d, 0x4aef0e05
and r13d, r11d
pop r11
add r13d, 0x921ec4c
xor ebp, r13d
pop r13
add rbp, 0x2fef1694
add rbp, 0x2f193f4a
sub rbp, 0x6eef087e
add rbp, 0x5ea97853
add rbp, rcx
sub rbp, 0x5ea97853
add rbp, 0x6eef087e
sub rbp, 0x2f193f4a
sub rbp, 0x2fef1694
push 0x7ffed1d6
push 0x7fbf2060
push rcx
pop qword [rsp]
pop qword [rsp]
push r14
push 0x67fbed40
mov qword [rsp], r15
mov r15, r15
mov qword [rsp], 0x6fc32cba
mov r14, qword [rsp]
add rsp, 8
shl r14d, 3
push r10
mov r10d, 0x81e69a31
add r14d, r10d
pop r10
mov ecx, r14d
pop r14
sub rsp, 8
mov qword [rsp], r9
mov r9d, 0x180
push r9
add dword [rsp], 0xbff4057
pop rbx
push r8
mov r8d, 0x6eff2496
shl r8d, 1
and r8d, 0x5e686d91
shl r8d, 1
add r8d, 0x532eae57
sub ebx, r8d
pop r8
mov r9, qword [rsp]
add rsp, 8
xor eax, eax
lock cmpxchg dword [rbx + rbp], ecx
je 0x14072d5df
pause
jmp 0x14072d5cb
push qword [rsp]
mov rcx, qword [rsp]
add rsp, 8
push r8
mov r8, rsp
add r8, 8
add r8, 8
xchg qword [rsp], r8
pop rsp
push 0x1f68848d
mov qword [rsp], r13
push r9
push 0x5fff2bad
pop r9
neg r9d
xor r9d, 0x7f968dc4
xor r9d, 0xa069ec9a
mov r13d, r9d
pop r9
add r13d, 0x80004b00
mov ebx, r13d
push qword [rsp]
pop r13
add rsp, 8
push r10
mov r10, rsp
add r10, 8
sub r10, 8
xchg qword [rsp], r10
mov rsp, qword [rsp]
mov qword [rsp], r14
mov r14, rcx
push r14
pop qword [rbx + rbp]
pop r14
push rcx
mov ecx, 0x577e4ec7
push r11
mov r11d, 0x57f6cf89
and ecx, r11d
pop r11
xor ecx, 0x3f665d40
shl ecx, 6
not ecx
shr ecx, 8
push rax
mov eax, 0xff0404f2
add ecx, eax
pop rax
mov edx, ecx
mov rcx, qword [rsp]
push rsi
mov rsi, rsp
add rsi, 8
add rsi, 8
xchg qword [rsp], rsi
pop rsp
test edx, edx
je 0x14072d7dd
push 0x5b3fa056
push r12
mov r12, rcx
push r11
mov r11, rsp
add r11, 8
sub r11, 8
xchg qword [rsp], r11
pop rsp
mov qword [rsp], r12
pop qword [rsp + 8]
pop r12
push r9
push r14
mov r14, rsp
add r14, 8
sub r14, 8
xchg qword [rsp], r14
pop rsp
mov qword [rsp], r14
mov r14, r14
mov qword [rsp], 0x7ff65037
pop r9
add r9d, 0x329ed61e
sub r9d, 0xb293df80
mov ebx, r9d
mov r9, qword [rsp]
add rsp, 8
add rbx, 0x7f573ef0
sub rbx, 0x1fbc9a60
sub rbx, 0x5f5f7162
sub rbx, 0x67ab8ec0
sub rbx, 0xbdece8f
add rbx, rcx
add rbx, 0xbdece8f
add rbx, 0x67ab8ec0
add rbx, 0x5f5f7162
add rbx, 0x1fbc9a60
sub rbx, 0x7f573ef0
mov ecx, 0x754bd335
or ecx, 0x5af955aa
dec ecx
shl ecx, 3
add ecx, 0x5b6b5aa1
inc ecx
sub rsp, 8
mov qword [rsp], rdi
mov edi, 0x779d8d9f
inc edi
xor edi, 0x7fcbaac0
or edi, 0x16faf97f
push r9
mov r9d, 0x3c4b18fe
add edi, r9d
pop r9
sub ecx, 0xfed3b67
sub ecx, edi
add ecx, 0xfed3b67
pop rdi
push 0x329f6f28
sub rsp, 8
push rbx
pop qword [rsp]
pop qword [rsp]
pop qword [rcx + rbp]
push qword [rsp]
push qword [rsp]
mov rcx, qword [rsp]
add rsp, 8
add rsp, 8
add rsp, 8
push r12
push r9
mov r9d, 0x22ff095e
push rax
mov eax, 0x1e05dd14
xor r9d, eax
pop rax
mov r12d, r9d
mov r9, qword [rsp]
add rsp, 8
mov ebx, 0xc397dea6
add ebx, 0x5bdb04b9
add ebx, r12d
sub ebx, 0x5bdb04b9
pop r12
mov eax, 0x57cee61a
sub eax, 1
shl eax, 4
shr eax, 1
push rcx
push r10
mov r10d, 0x798550ec
and r10d, 0x733fb1aa
inc r10d
add r10d, 0x4e7d35a3
sub r10d, 0x810b1583
push r10
add dword [rsp], 0x7ff50aa5
pop rcx
sub ecx, 0x7ff50aa5
pop r10
xor eax, ecx
pop rcx
test eax, eax
je 0x14072d8ac
push r8
push rcx
mov ecx, 0x7ede6df6
push rax
mov eax, 0x6fbfd7ec
mov r8d, 0x1161ba1a
xor r8d, eax
pop rax
sub r8d, ecx
pop rcx
mov eax, r8d
push qword [rsp]
pop r8
add rsp, 8
test eax, eax
je 0x14072d8a1
movabs rax, qword gs:[0x188]
jmp 0x14072d8ac
movabs rax, qword gs:[0x30]
shl rax, 0x20
xor edx, edx
push rcx
push 0x3eef346d
mov qword [rsp], rdx
mov rdx, rax
push rdx
pop rcx
pop rdx
push r13
mov r13, rcx
mov rdx, r13
pop r13
pop rcx
push r9
push r11
mov r11d, 0x536cd152
sub dword [rsp + 8], r11d
pop r11
mov rax, qword [rsp]
add rsp, 8
push rdi
mov edi, 0x7f7df9cd
and edi, 0x57dd2ac4
xor edi, 0x2832f1c1
and edi, 0x7b7d8bd7
add edi, 0x7d422c8f
sub edi, 0xa542e442
add eax, edi
pop rdi
or rdx, rax
push rbx
mov rbx, rsp
add rbx, 8
sub rbx, 8
xor rbx, qword [rsp]
xor qword [rsp], rbx
xor rbx, qword [rsp]
mov rsp, qword [rsp]
mov qword [rsp], rdx
pop qword [rcx + rbx]
mov edx, 0x757e369c
push rsi
mov esi, 0x3ffbc0e8
add esi, 0x25dfeda7
and esi, 0x7fff4661
add esi, 0x24a6c398
sub edx, 0x7ebecdaa
add edx, esi
add edx, 0x7ebecdaa
mov rsi, qword [rsp]
add rsp, 8
push rbx
sub rsp, 8
mov qword [rsp], r11
mov r11d, 0x73df50d6
add dword [rsp + 8], r11d
pop r11
pop rax
sub rsp, 8
mov qword [rsp], r12
mov r12d, 0x73df50d6
sub eax, r12d
pop r12
add rax, 0x7ff622ac
add rax, 0x37d5025f
add rax, 0x3f9f1096
add rax, rcx
sub rax, 0x3f9f1096
sub rax, 0x37d5025f
sub rax, 0x7ff622ac
sub rsp, 8
push r11
pop qword [rsp]
mov r11, rax
mov qword [rdx + rbp], r11
push qword [rsp]
pop r11
add rsp, 8
push r11
mov r11, rsp
add r11, 8
sub r11, 8
xchg qword [rsp], r11
pop rsp
sub rsp, 8
mov qword [rsp], r8
pop qword [rsp]
pop qword [rsp + 0x70]
push 0x3fa9118c
push 0x45cc36c9
mov qword [rsp], rbp
pop qword [rsp]
mov ebp, 0xb7
mov ebx, ebp
mov rbp, qword [rsp]
add rsp, 8
push qword [rsp + 0x50]
push qword [rsp]
push qword [rsp]
pop rax
add rsp, 8
add rsp, 8
sub rsp, 8
sub rsp, 8
push rax
pop qword [rsp]
pop qword [rsp]
pop qword [rbx + rbp]
push r15
mov r15d, 0x6bfd5a1a
and r15d, 0x77bea3f5
shl r15d, 8
push rbp
push r8
mov r8d, 0x39f53b39
mov ebp, 0x51406e85
xor ebp, r8d
pop r8
dec ebp
add ebp, 0x3bd8190e
shl ebp, 8
and ebp, 0x7bfed6c3
xor ebp, 0xa696726c
add r15d, ebp
pop rbp
add r15d, 1
xor r15d, 0x6bfac2eb
mov ebx, r15d
pop r15
push qword [rsp + 0x90]
push qword [rsp]
push qword [rsp]
pop rax
add rsp, 8
add rsp, 8
add rax, 0x4aae75ff
sub rax, 0x73a932bd
sub rax, 0x46fa525a
sub rax, 0x6df6cbca
sub rax, 0x6f1a1962
add rax, rcx
add rax, 0x6f1a1962
add rax, 0x6df6cbca
add rax, 0x46fa525a
add rax, 0x73a932bd
sub rax, 0x4aae75ff
sub rsp, 8
mov qword [rsp], rax
push r13
movabs r13, 0x7bff7f39
sub qword [rsp + 8], r13
pop r13
pop qword [rbx + rbp]
add qword [rbx + rbp], 0x7bff7f39
push rsi
push r15
mov r15d, 0x3fee3142
sub r15d, 0xffffffff
add r15d, 0xd7c162da
mov esi, r15d
pop r15
inc esi
shr esi, 5
add esi, 0xffd53658
push rsi
sub dword [rsp], 0x5df3dc2f
mov rax, qword [rsp]
add rsp, 8
add eax, 0x5df3dc2f
pop rsi
sub rax, 0x693b720d
add rax, 0x363f9b65
add rax, 0x57f369e3
add rax, 0x7eb6a6e1
add rax, 0x1ef3a2e0
add rax, rcx
sub rax, 0x1ef3a2e0
sub rax, 0x7eb6a6e1
sub rax, 0x57f369e3
sub rax, 0x363f9b65
add rax, 0x693b720d
push 0x5c9d8a23
mov qword [rsp], r15
push r14
mov r14d, 0x7baf2349
dec r14d
not r14d
sub r14d, 0x77fcca08
inc r14d
sub r14d, 0x8d80529f
mov r15d, 0xb92b566f
add r15d, r14d
pop r14
mov ebx, 0x37ff1799
xor ebx, r15d
mov r15, qword [rsp]
add rsp, 8
push qword [rbx + rbp]
push rsi
movabs rsi, 0x1bfbbb69
sub qword [rsp + 8], rsi
pop rsi
push qword [rsp]
mov rdx, qword [rsp]
add rsp, 8
add rsp, 8
add rdx, 0x1bfbbb69
cmp rdx, rax
je 0x14072dd50
push 0x1d7384c7
sub rsp, 8
sub rsp, 8
mov qword [rsp], rbx
pop qword [rsp]
pop qword [rsp]
push rdx
mov edx, 0x77ad734d
sub edx, 0x5bf25ee0
sub edx, 0x5ffd8964
inc edx
sub edx, 0xffffffff
add edx, 1
sub edx, 0xbbbd7d2c
push 0x3ef70d20
mov qword [rsp], rdx
xor dword [rsp], 0x6fdf0925
pop rbx
xor ebx, 0x6fdf0925
pop rdx
shr ebx, 3
push 0x6bffed42
push rsi
mov rsi, rsp
add rsi, 8
sub rsi, 8
xchg qword [rsp], rsi
pop rsp
push rax
pop qword [rsp]
pop qword [rsp]
test rbx, rbx
je 0x14072dcf9
sub rsp, 8
mov qword [rsp], r11
mov r11, 0
add r11, 0x4ff64f9b
add r11, rax
sub r11, 0x4ff64f9b
add qword [r11], 0x7ddef0a6
add qword [r11], rcx
sub qword [r11], 0x7ddef0a6
mov r11, qword [rsp]
add rsp, 8
add rax, 8
push 0x7b97ef74
mov qword [rsp], r8
mov r8d, 0x66ad385e
shl r8d, 6
shr r8d, 5
shl r8d, 2
not r8d
sub r8d, 0xea963d0e
sub ebx, r8d
mov r8, qword [rsp]
add rsp, 8
jmp 0x14072dc7b
push qword [rsp]
push qword [rsp]
mov rax, qword [rsp]
add rsp, 8
add rsp, 8
add rsp, 8
push qword [rsp]
push qword [rsp]
mov rbx, qword [rsp]
add rsp, 8
add rsp, 8
add rsp, 8
sub rsp, 8
mov qword [rsp], r8
mov r8, rax
push r8
add qword [rsp], 0x7ff7ca71
pop qword [rbx + rbp]
sub qword [rbx + rbp], 0x7ff7ca71
mov r8, qword [rsp]
add rsp, 8
push qword [rsp + 0x88]
mov rbx, qword [rsp]
push 0x2b8704b2
mov qword [rsp], r15
mov r15, rsp
add r15, 8
add r15, 8
push r15
push qword [rsp + 8]
pop r15
pop qword [rsp]
pop rsp
shl rbx, 3
sub rax, 0x7eec19c9
add rax, 0x37687cc5
sub rax, 0x7f77fc41
sub rax, 0x2cd9f201
add rax, rbx
add rax, 0x2cd9f201
add rax, 0x7f77fc41
sub rax, 0x37687cc5
add rax, 0x7eec19c9
jmp qword [rax]
pushfq
push 0x47bdb0f7
mov qword [rsp], rdx
push rdx
mov rdx, qword [rsp]
push rsi
mov rsi, rsp
add rsi, 8
add rsi, 8
xchg qword [rsp], rsi
pop rsp
mov qword [rsp], Ordinal_143
push 0x7f35e7fd
mov qword [rsp], rbx
push 0x3bfb5382
mov qword [rsp], rbx
sub qword [rsp], 0x65ef4cf6
pop rbx
add rbx, 0x65ef4cf6
mov qword [rsp], 0x685488
push 0x7dfe31ed
push 0x6a7fbf1a
push 0x3bf69f49
mov qword [rsp], rax
pop qword [rsp]
pop qword [rsp]
sub rsp, 8
mov qword [rsp], rbp
mov rbp, rsp
add rbp, 8
sub rbp, 8
xchg qword [rsp], rbp
pop rsp
mov qword [rsp], rbx
push qword [rsp + 0x20]
push qword [rsp]
pop rax
push 0x5fff9f0f
mov qword [rsp], rbp
mov rbp, rsp
add rbp, 8
add rbp, 8
xchg qword [rsp], rbp
pop rsp
push qword [rsp + 0x10]
push qword [rsp]
mov rbx, qword [rsp]
add rsp, 8
add rsp, 8
push 0x7fb7feed
push 0x7fff0d29
mov qword [rsp], rax
pop qword [rsp]
pop qword [rsp + 0x10]
push 0x7bfde559
sub rsp, 8
mov qword [rsp], rbx
pop qword [rsp]
pop qword [rsp + 0x20]
push qword [rsp]
mov rbx, qword [rsp]
add rsp, 8
push rax
mov rax, rsp
add rax, 8
add rax, 8
xchg qword [rsp], rax
pop rsp
push qword [rsp]
mov rax, qword [rsp]
push rbp
push rsp
pop rbp
add rbp, 8
add rbp, 8
xchg qword [rsp], rbp
pop rsp
add rsp, 8
push 0x2d2eb476
push 0x5f69956d
mov qword [rsp], rdx
pop qword [rsp]
push rdx
pop rdx
mov qword [rsp], 0xa8d9
jmp 0x14072d2b4