Function at 0x1401577f4
Capabilities:
Access peb ldr_data
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov rax, qword [0x14017b0c0]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov r8, qword [0x14017c798]
mov r13d, ecx
test r8, r8
jne 0x140157984
mov rax, qword gs:[0x60]
xor ebx, ebx
mov ebp, 0x185776b5
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdx, r15
movups xmm0, xmmword [rdx + 0x58]
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x14015789b
psrldq xmm0, 8
mov r8d, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x14015788d
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x14015787c
cmp r8d, ebx
jne 0x140157964
mov r10, qword [rdx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x140157964
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x140157964
mov r14d, dword [r9 + 0x20]
dec r11d
mov edi, 0x811c9dc5
lea rcx, [r14 + r11*4]
mov r8d, dword [rcx + r10]
add r8, r10
jmp 0x1401578ef
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x1401578e4
cmp edi, ebp
je 0x140157904
test r11d, r11d
jne 0x1401578cf
jmp 0x140157964
mov edx, dword [r9 + 0x24]
add rdx, r10
movzx r8d, word [rdx + r11*2]
mov edx, dword [r9 + 0x1c]
add rdx, r10
mov r8d, dword [rdx + r8*4]
add r8, r10
cmp r8, r9
jbe 0x14015797d
lea rcx, [rax + r9]
cmp r8, rcx
jae 0x14015797d
mov ebx, 0x811c9dc5
mov ebp, ebx
jmp 0x140157943
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140157935
jmp 0x140157957
movsx eax, al
xor eax, ebp
imul ebp, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x14015794c
mov rdx, qword [r15]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r15
je 0x14015797a
cmp qword [rax + 0x30], 0
jne 0x140157850
xor r8d, r8d
mov qword [0x14017c798], r8
xor edx, edx
lea ecx, [rdx + 4]
call r8
mov r12, rax
cmp rax, 0xffffffffffffffff
je 0x140157fa1
mov r8, qword [0x14017c6b8]
mov dword [rsp + 0x20], Ordinal_33
test r8, r8
jne 0x140157b03
mov rcx, qword gs:[0x60]
xor ebx, ebx
mov ebp, 0xeb843152
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r15, qword [rcx]
mov rdx, r15
movups xmm0, xmmword [rdx + 0x58]
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x140157a1a
psrldq xmm0, 8
mov r8d, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x140157a0c
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x1401579fb
cmp r8d, ebx
jne 0x140157ae3
mov r10, qword [rdx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x140157ae3
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x140157ae3
mov r14d, dword [r9 + 0x20]
dec r11d
mov edi, 0x811c9dc5
lea rcx, [r14 + r11*4]
mov r8d, dword [rcx + r10]
add r8, r10
jmp 0x140157a6e
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140157a63
cmp edi, ebp
je 0x140157a83
test r11d, r11d
jne 0x140157a4e
jmp 0x140157ae3
mov edx, dword [r9 + 0x24]
add rdx, r10
movzx r8d, word [rdx + r11*2]
mov edx, dword [r9 + 0x1c]
add rdx, r10
mov r8d, dword [rdx + r8*4]
add r8, r10
cmp r8, r9
jbe 0x140157afc
lea rcx, [rax + r9]
cmp r8, rcx
jae 0x140157afc
mov ebx, 0x811c9dc5
mov ebp, ebx
jmp 0x140157ac2
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x140157ab4
jmp 0x140157ad6
movsx eax, al
xor eax, ebp
imul ebp, eax, 0x1000193
inc r8
mov al, byte [r8]
test al, al
jne 0x140157acb
mov rdx, qword [r15]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r15
je 0x140157af9
cmp qword [rax + 0x30], 0
jne 0x1401579cf
xor r8d, r8d
mov qword [0x14017c6b8], r8
lea rdx, [rsp + 0x20]
mov rcx, r12
call r8
test eax, eax
jne 0x140157c7f
mov rdx, qword [0x14017c790]
test rdx, rdx
jne 0x140157c75
mov rax, qword gs:[0x60]
xor ebx, ebx
mov ebp, 0xfaba0065
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdx, r15
movups xmm0, xmmword [rdx + 0x58]
mov r13d, 0x811c9dc5
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x140157b92
psrldq xmm0, 8
mov r8d, r13d
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x140157b84
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x140157b73
cmp r8d, ebx
jne 0x140157c56
mov r10, qword [rdx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x140157c56
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x140157c56
mov r14d, dword [r9 + 0x20]
dec r11d
mov edi, r13d
lea rcx, [r14 + r11*4]
mov r8d, dword [rcx + r10]
add r8, r10
jmp 0x140157be4
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140157bd9
cmp edi, ebp
je 0x140157bf9
test r11d, r11d
jne 0x140157bc6
jmp 0x140157c56
mov edx, dword [r9 + 0x24]
add rdx, r10
movzx r8d, word [rdx + r11*2]
mov edx, dword [r9 + 0x1c]
add rdx, r10
mov edx, dword [rdx + r8*4]
add rdx, r10
cmp rdx, r9
jbe 0x140157c6e
lea rcx, [r9 + rax]
cmp rdx, rcx
jae 0x140157c6e
mov ebx, r13d
mov ebp, r13d
jmp 0x140157c37
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140157c29
jmp 0x140157c4a
movsx eax, al
xor eax, ebp
imul ebp, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140157c3f
mov rdx, qword [r15]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r15
je 0x140157c6c
cmp qword [rax + 0x30], 0
jne 0x140157b44
xor edx, edx
mov qword [0x14017c790], rdx
mov rcx, r12
call rdx
jmp 0x140157fa1
mov rdx, qword [0x14017c6b0]
test rdx, rdx
jne 0x140157de0
mov rax, qword gs:[0x60]
xor ebx, ebx
mov ebp, 0xebcdfe95
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdx, r15
movups xmm0, xmmword [rdx + 0x58]
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x140157cf8
psrldq xmm0, 8
mov r8d, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x140157cea
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x140157cd9
cmp r8d, ebx
jne 0x140157dc1
mov r10, qword [rdx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r9d, eax
add r9, r10
shr rax, 0x20
cmp r9, r10
je 0x140157dc1
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x140157dc1
mov r14d, dword [r9 + 0x20]
dec r11d
mov edi, 0x811c9dc5
lea rcx, [r14 + r11*4]
mov r8d, dword [rcx + r10]
add r8, r10
jmp 0x140157d4c
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140157d41
cmp edi, ebp
je 0x140157d61
test r11d, r11d
jne 0x140157d2c
jmp 0x140157dc1
mov edx, dword [r9 + 0x24]
add rdx, r10
movzx r8d, word [rdx + r11*2]
mov edx, dword [r9 + 0x1c]
add rdx, r10
mov edx, dword [rdx + r8*4]
add rdx, r10
cmp rdx, r9
jbe 0x140157dd9
lea rcx, [rax + r9]
cmp rdx, rcx
jae 0x140157dd9
mov eax, 0x811c9dc5
mov ebx, eax
mov ebp, eax
jmp 0x140157da2
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc rdx
mov al, byte [rdx]
cmp al, 0x2e
jne 0x140157d94
jmp 0x140157db5
movsx eax, al
xor eax, ebp
imul ebp, eax, 0x1000193
inc rdx
mov al, byte [rdx]
test al, al
jne 0x140157daa
mov rdx, qword [r15]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r15
je 0x140157dd7
cmp qword [rax + 0x30], 0
jne 0x140157cad
xor edx, edx
mov qword [0x14017c6b0], rdx
call rdx
mov r8d, dword [rsp + 0x28]
cmp r8d, eax
je 0x140157f83
mov r9, qword [0x14017c6a8]
test r9, r9
jne 0x140157f5e
mov rax, qword gs:[0x60]
xor ebx, ebx
mov r14d, 0xd435861d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov rdx, r15
movups xmm0, xmmword [rdx + 0x58]
movd eax, xmm0
sub ax, 8
test ebx, ebx
je 0x140157e6a
psrldq xmm0, 8
mov r8d, 0x811c9dc5
movzx eax, ax
movq rcx, xmm0
shr rax, 1
lea r9, [rcx + rax*2]
jmp 0x140157e5c
movsx eax, byte [rcx]
xor eax, r8d
imul r8d, eax, 0x1000193
add rcx, 2
cmp rcx, r9
jne 0x140157e4b
cmp r8d, ebx
jne 0x140157f39
mov r11, qword [rdx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov rax, qword [rax + r11 + 0x88]
mov r10d, eax
add r10, r11
shr rax, 0x20
cmp r10, r11
je 0x140157f39
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x140157f39
mov ebp, dword [r10 + 0x20]
dec r9d
mov edi, 0x811c9dc5
lea rcx, [r11 + r9*4]
mov r8d, dword [rcx + rbp]
add r8, r11
jmp 0x140157ebe
movsx ecx, cl
xor ecx, edi
imul edi, ecx, 0x1000193
mov cl, byte [r8]
inc r8
test cl, cl
jne 0x140157eb3
cmp edi, r14d
je 0x140157ed4
test r9d, r9d
jne 0x140157e9e
jmp 0x140157f39
mov edx, dword [r10 + 0x24]
add rdx, r11
movzx r8d, word [rdx + r9*2]
mov edx, dword [r10 + 0x1c]
add rdx, r11
mov r9d, dword [rdx + r8*4]
add r9, r11
cmp r9, r10
jbe 0x140157f52
lea rcx, [r10 + rax]
cmp r9, rcx
jae 0x140157f52
mov eax, 0x811c9dc5
mov ebx, eax
mov r14d, eax
jmp 0x140157f16
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x140157f08
jmp 0x140157f2c
movsx eax, al
xor eax, r14d
imul r14d, eax, 0x1000193
inc r9
mov al, byte [r9]
test al, al
jne 0x140157f1f
mov rdx, qword [r15]
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r15
je 0x140157f4f
cmp qword [rax + 0x30], 0
jne 0x140157e1f
xor r9d, r9d
mov r8d, dword [rsp + 0x28]
mov qword [0x14017c6a8], r9
xor edx, edx
lea ecx, [rdx + 0x60]
call r9
mov rbx, rax
test rax, rax
je 0x140157f83
mov edx, r13d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rdx, [rsp + 0x20]
mov rcx, r12
call sub.KERNEL32.dll_Thread32Next
test eax, eax
jne 0x140157c7f
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.140158250
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret