Function at 0x140088f60
Capabilities:
Check for debugger via api
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov dword [rsp + 0x2c], 0
cmp dword [0x1406e8314], 0xa
jl 0x140088f90
mov eax, dword [0x1406e8310]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140088fbe
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rdx, [rsp + 0x2c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
cmp dword [0x1406e8314], 0xa
jl 0x140088fd4
mov eax, dword [0x1406e8310]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140088fd4
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rdx, [rsp + 0x2c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
jmp 0x140088f90
cmp dword [rsp + 0x2c], 0
je 0x140089002
mov byte [0x1406ea210], 1
cmp dword [0x1406e8494], 0xa
jl 0x140089011
mov eax, dword [0x1406e8490]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140089011
nop dword [rax]
jmp 0x140089000
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
mov eax, dword [0x1406e7fb4]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406e7fb0], 0xa
setl r8b
or r8b, al
mov ecx, dword [0x1406e7fbc]
mov edi, dword [0x1406e7fb8]
jne 0x14008904a
lea ebx, [rcx - 1]
imul ebx, ecx
and ebx, 1
jmp 0x140089074
lea ebx, [rcx - 1]
imul ebx, ecx
and ebx, 1
sete dl
cmp edi, 0xa
setl al
or al, dl
cmp al, 1
jne 0x1400890a4
mov rbp, qword gs:[0x60]
test al, al
je 0x1400890a4
test r8b, r8b
jne 0x1400890af
mov rax, qword gs:[0x60]
cmp edi, 0xa
jl 0x14008904a
test ebx, ebx
je 0x14008904a
mov rax, qword gs:[0x60]
nop
mov rax, qword gs:[0x60]
mov rax, qword gs:[0x60]
jmp 0x140089090
mov rdx, qword gs:[0x60]
jmp 0x140089062
mov r8, qword [rbp + 0x18]
add r8, 0x10
mov eax, dword [0x1406e84a0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406e84a4], 0xa
setl r11b
or r11b, al
mov eax, dword [0x1406e8488]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406e848c], 0xa
setl r15b
or r15b, al
mov eax, dword [0x1406e7f9c]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete cl
cmp dword [0x1406e7f98], 0xa
setl al
or al, cl
mov ecx, dword [0x1406e7fa8]
lea edx, [rcx - 1]
imul edx, ecx
test dl, 1
sete cl
cmp dword [0x1406e7fac], 0xa
setl r9b
or r9b, cl
mov r10d, 0xffffffff
mov r8, qword [r8]
mov rcx, qword [r8 + 0x30]
movsxd rdx, dword [rcx + 0x3c]
mov r14d, dword [rdx + rcx + 0x88]
test r14, r14
je 0x14008920b
mov esi, dword [rcx + r14 + 0x18]
mov rdi, rsi
jmp 0x14008917f
mov rsi, rdi
cmp ebp, 0xcded1a85
je 0x140089262
sub rdi, 1
jb 0x140089212
test r11b, r11b
je 0x140089230
add rsi, r10
mov edx, dword [rcx + r14 + 0x20]
add rdx, rcx
mov r12d, esi
mov edx, dword [rdx + r12*4]
add rdx, rcx
test r15b, r15b
jne 0x1400891c0
test al, al
jne 0x1400891f9
jmp 0x140089240
mov ebp, 0x811c9dc5
mov rsi, rdx
nop dword [rax + rax]
test al, al
je 0x1400891d0
movsx ebx, byte [rsi]
test ebx, ebx
je 0x1400891f0
add rsi, 1
xor ebp, ebx
imul ebp, ebp, 0x1000193
jmp 0x1400891d0
test r15b, r15b
jne 0x140089170
mov rsi, rdx
nop dword [rax]
cmp byte [rsi], 0
lea rsi, [rsi + 1]
jne 0x140089200
jmp 0x1400891c0
test r15b, r15b
jne 0x140089217
jmp 0x140089250
test r15b, r15b
je 0x140089260
test r9b, r9b
jne 0x14008913b
jmp 0x140089220
jmp 0x140089230
jmp 0x140089240
jmp 0x140089250
jmp 0x140089260
mov eax, dword [rcx + r14 + 0x1c]
mov edx, dword [rcx + r14 + 0x24]
add rdx, rcx
movzx edx, word [rdx + r12*2]
add rax, rcx
mov eax, dword [rax + rdx*4]
add rax, rcx
xor ecx, ecx
call rax
int3