Function at 0x1401c4698
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x68
xor r13d, r13d
mov dword [rbp - 0x48], r13d
mov ebx, r13d
mov edi, 0x581384e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x1401c472a
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0x3aa20de
jmp 0x1401c471c
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, 0x4764996c
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x1401c46fc
cmp r9d, ebx
jne 0x1401c482d
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov r11d, ecx
add r11, r10
shr rcx, 0x20
cmp r11, r10
je 0x1401c482d
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x1401c482d
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r9d, dword [rdx + r10]
add r9, r10
mov r14d, 0x3aa20de
jmp 0x1401c4790
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, 0x4764996c
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r9]
inc r9
test dl, dl
jne 0x1401c4772
cmp r14d, edi
je 0x1401c47a8
test esi, esi
jne 0x1401c475d
jmp 0x1401c482d
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov eax, dword [r11 + 0x24]
add rax, r10
movzx eax, word [rax + rsi*2]
mov r9d, dword [rdx + rax*4]
add r9, r10
cmp r9, r11
jbe 0x1401c4835
lea rax, [r11 + rcx]
cmp r9, rax
jae 0x1401c4835
mov ebx, 0x3aa20de
mov edi, ebx
jmp 0x1401c47f2
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, ebx
mov ebx, eax
imul ebx, ecx
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x1401c47d8
jmp 0x1401c4812
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, edi
mov edi, eax
imul edi, ecx
inc r9
mov al, byte [r9]
test al, al
jne 0x1401c47fb
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x1401c46d0
mov dword [rbp + 0x50], r13d
mov dword [rbp + 0x50], 0x87bfd7ca
mov eax, 0x52ded68a
sub eax, dword [0x14031d058]
sub eax, dword [0x14031d050]
xor eax, 0xcfb50284
sub eax, dword [0x14031d048]
mov rdx, qword [0x14031d040]
lea ecx, [rdx - 0x62a5fb97]
add ecx, eax
xor ecx, 0xcca40b55
add ecx, 0x5cf3da
xor ecx, 0xa726395e
mov r8d, dword [0x14031d030]
xor r8d, 0x9d126bb
sub r8d, ecx
mov eax, dword [0x14031d038]
xor eax, 0xf62ed944
sub r8d, eax
sub r8d, edx
add r8d, 0x3cc0f9b0
xor r8d, 0x8cfcccac
mov dword [rbp + 0x50], r8d
movsxd rcx, r8d
call r9
mov qword [rbp - 0x30], rax
mov dword [rbp + 0x50], r13d
movabs rbx, 0xb96dbcc428628555
movabs rax, 0x358972e000000000
movabs r11, 0xf95adb5e7ad29a76
mov r14, qword [0x14031d060]
imul r14, rax
movabs rax, 0xa01c029000000000
xor r14, rax
mov r13, r14
imul r13, rbx
movabs r10, 0xaaaaaaaaaaaaaaab
mov rax, r10
mul r13
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov rcx, r13
sub rcx, rax
lea r12, [0x14031d060]
mov r9, r14
and r9, rbx
imul r9, qword [r12 + rcx*8]
movabs rax, 0x37a1ae537e443c5c
imul r9, rax
shr r9, 3
movabs rax, 0x32b7d54df95599c9
xor r9, rax
movabs rax, 0xa83e6db105
mov rdi, r14
imul rdi, rax
sub rdi, 0x1e5ad056
xor rdi, r9
xor rdi, qword [0x14031d060]
shr rdi, 8
mov rax, r9
imul rax, qword [0x14031d070]
movabs rcx, 0x46216d7437de0e24
imul rax, rcx
not rax
shr rax, 8
and rdi, rax
movabs r8, 0x4692433bd79d7aab
lea rcx, [r14 + r8]
xor rcx, 0x9500529
mov rax, r10
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movabs rax, 0x46d9e1cc5387acc8
mov rsi, qword [r12 + rcx*8]
imul rsi, rax
sub rsi, r8
movabs rcx, 0xe5a70d1f0d625cb8
mov rax, r9
imul rax, rcx
xor rsi, rax
shr rsi, 0x1f
not rsi
mov r15, rsi
xor r15, r14
lea rcx, [rsi + r8]
mov rax, r10
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movzx eax, sil
movzx ecx, byte [r12 + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0x35
and ecx, 0x8000003f
jge 0x1401c4a2f
dec ecx
or ecx, 0xffffffc0
inc ecx
ror r15, cl
not r15
imul r15, r9
imul r12, r15, 0xffffffffe1a52faa
lea r10, [r12 + r8]
mov r8, rsi
imul r8, rdi
sub r8, r10
xor r8, r11
mov cl, r10b
xor cl, 0xfa
and cl, 0xf
rol r8, cl
movabs rax, 0x321177078cb02572
imul r15, rax
movabs rax, 0xa8e0e43157a91c7
add r15, rax
xor r8, r15
mov rax, r10
sub rax, qword [0x14031d078]
xor r8, rax
xor r8, r9
xor r8, r14
mov rax, r8
and eax, 1
xor rax, 2
movabs r15, 0xaaaaaaaaaaaaaaab
je 0x1401c4dc1
sub rax, 1
je 0x1401c4c9d
sub rax, 1
je 0x1401c4baf
cmp rax, 1
jne 0x1401c4e6b
mov r11, r10
imul r11, rsi
movabs rax, 0xb38c880c72a94a57
add rax, r8
xor r11, rax
ror r11, 0x3a
shr r11, 0xc
xor r11, r14
not r11
movabs rcx, 0xffff7ca8d52f0022
mov rdx, qword [0x14031d088]
add rdx, rcx
movabs rax, 0xb9ef39bc49a95a0f
xor rdx, rax
movzx eax, r8b
movzx ecx, r11b
imul ecx, eax
and cl, 0x3f
ror rdx, cl
shl rdx, 0xf
movabs rax, 0x83582468dcfecdd
sub rax, rsi
mov rsi, rdx
xor rsi, rax
mov rcx, rsi
imul rcx, rbx
mov eax, 0xa3ebc1c9
sub rcx, rax
mov rax, r15
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea r13, [0x14031d060]
mov cl, byte [r13 + rcx*8]
and cl, 0xf
movabs rbx, 0x2b0c3c38603a5596
sub rbx, r11
shr rbx, cl
movabs rcx, 0x468a1eb3862dc9a7
add rcx, r12
mov rax, r15
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov rax, r8
imul rax, qword [r13 + rcx*8]
imul rax, r8
sub rax, rdi
xor rbx, rax
jmp 0x1401c4e6b
movabs rax, 0x555555e55c0dc309
mov rcx, r8
xor rcx, rax
movabs rax, 0xffedf9129e001f45
imul rcx, rax
movabs rdx, 0xe83578b6ff575
mov rax, r9
xor rax, rdx
sub rcx, rax
movabs rax, 0x81757a1df1d5
imul r12, rax
movabs rsi, 0x714f7cae83fefd1c
add rsi, rcx
add rsi, r12
movabs rax, 0xd88328418edd1469
mov rcx, rsi
xor rcx, rax
mov rax, r15
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov r10, rsi
not r10
lea rdx, [0x14031d060]
imul r10, qword [rdx + rcx*8]
xor r10, 0x95815d9
lea ecx, [r8 + 0xb]
and cl, 0x3f
rol r10, cl
movabs rax, 0x85803120000000
xor r13, rax
movabs rax, 0x83858239605f1f68
and r13, rax
imul r10, r13
mov rdx, r10
ror rdx, 0x22
not rdx
movabs rax, 0x193486534131964e
imul rdx, rax
sub rdx, r10
add rdx, rsi
shl rdx, 2
mov cl, dil
and cl, 0x3f
ror rdx, cl
mov rax, rbx
mov rbx, rdx
imul rbx, rax
jmp 0x1401c4e6b
movabs rax, 0xda3d200c4f1d4e85
imul r8, rax
movabs rax, 0xd79435e50d79435f
mul r8
shr rdx, 4
movzx eax, dl
imul edx, eax, 0x13
mov cl, r8b
sub cl, dl
movabs rdx, 0x4692433bd79d7aaa
mov rax, r14
imul rax, rdx
xor rax, r11
not rax
shl rax, cl
xor r9, rax
mov cl, r10b
and cl, 0x3f
rol r9, cl
movabs rcx, 0x4692433bd79d7aab
add rcx, r8
mov rax, r15
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea rdx, [0x14031d060]
mov rax, qword [rdx + rcx*8]
imul rax, rbx
xor r9, rax
movabs rax, 0x385800c9b524
or r9, rax
mov rbx, qword [0x14031d070]
imul rbx, r11
sub rbx, r10
mov rax, rdi
sub rax, r9
xor rbx, rax
movabs rax, 0x3858395951c1b529
xor rbx, rax
movabs rax, 0xcccccccccccccccd
mul r14
shr rdx, 3
lea rax, [rdx + rdx*4]
add rax, rax
mov rcx, r14
sub rcx, rax
or rcx, 1
xor edx, edx
mov rax, rbx
div rcx
mov rcx, rdx
mov rdx, r8
imul rdx, r10
imul rdx, rbx
shr rdx, cl
mov rax, rsi
sub rax, rdx
sub rax, r14
movabs rcx, 0x7895894616c06cd
mov r14, rax
sub r14, rcx
xor r14, rdi
mov al, sil
add al, al
lea ecx, [rax + rsi]
shl cl, 2
and cl, 0x3f
rol r14, cl
not r14
jmp 0x1401c4e6b
mov rax, r15
mul r9
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov rcx, r9
sub rcx, rax
mov rax, r8
imul rax, qword [0x14031d080]
lea rdx, [0x14031d060]
mov rdx, qword [rdx + rcx*8]
and rdx, rax
xor rdx, r9
and r9b, 0x3f
mov cl, r9b
mov r9, rdx
ror r9, cl
imul r9, r10
not rdi
imul rdi, rsi
movabs rax, 0x832758218c30e4c8
imul rdi, rax
mov rax, r9
imul rax, r14
mov r14, rdi
xor r14, rax
imul rdi, qword [0x14031d060], 0xffffffffe1a52faa
mov rdx, qword [0x14031d068]
sub rdi, rdx
mov al, r14b
not al
movzx ecx, al
movzx eax, dl
xor ecx, eax
and ecx, 0x8000003f
jge 0x1401c4e58
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rdi, cl
movabs rax, 0x4692433bd79d7aab
add rdi, rax
add rdi, r12
movabs rcx, 0xfaa2847c7bee05
xor r11, rcx
mov rax, r15
mul r11
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub r11, rax
xor r9, r14
lea rax, [0x14031d060]
imul r9, qword [rax + r11*8]
not r10
imul r10, r8
imul r10, rdi
imul r10, rbx
movabs rcx, 0xa1281787bc8a4d9
xor rcx, rsi
not rcx
xor rcx, r10
sub rcx, r9
call fcn.14019d694
mov qword [0x140321f60], rax
xor r14d, r14d
mov qword [rbp - 0x38], r14
movabs rax, 0x2ee7a30989a02076
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x40], r14
movabs rax, 0xe1789d74b21e678f
mov qword [rbp - 0x40], rax
movabs rax, 0x7f88c1d3e8f8c80a
sub rax, qword [0x14031d050]
sub rax, qword [0x14031d058]
movabs rcx, 0xf8f8cd920c130957
xor rax, rcx
sub rax, qword [0x14031d048]
movabs rcx, 0x87d654b104304d8a
add rcx, rax
mov rdi, qword [0x14031d040]
add rcx, rdi
movabs rax, 0x5a9179a12ff212ff
xor rcx, rax
movabs rax, 0x5f627dbd5e29115a
sub rcx, rax
movabs rax, 0x323b3ccf36eff8ba
xor rcx, rax
movabs rdx, 0xb483ce3e9edb1dd7
add rdx, rcx
add rdx, rdi
not rdx
movabs rcx, 0x13cce94af150d92a
mov r10, qword [0x14031d038]
mov rax, r10
xor rax, rcx
sub rdx, rax
movabs rax, 0xec3316b50eaf26d5
mov r11, qword [0x14031d030]
mov rcx, r11
xor rcx, rax
movabs rax, 0xe0b56da74a02767f
add rdx, rax
add rdx, rcx
movabs rax, 0x3bdc4038836ebf2
xor rdx, rax
mov qword [rbp - 0x40], rdx
movabs rax, 0x5695bf57aaf2bc88
sub rax, qword [0x14031d050]
sub rax, qword [0x14031d058]
movabs rcx, 0xf8f8cda37d6c3725
xor rax, rcx
sub rax, qword [0x14031d048]
movabs rcx, 0xc7d654c8544c6ac2
add rcx, rax
add rcx, rdi
movabs rax, 0x5a9179b4c6e0133d
xor rcx, rax
movabs rax, 0x5f627dc9d0da90f0
sub rcx, rax
movabs rax, 0xce3b3cd7cdcca7af
xor rcx, rax
movabs rax, 0x3483ce4f5349234e
add rcx, rax
add rcx, rdi
not rcx
movabs rax, 0x13cce94aac9e3edc
xor r10, rax
sub rcx, r10
movabs rax, 0xec3316b55361c123
xor r11, rax
movabs rax, 0xe0b56d6252b3c5b1
add rcx, rax
add rcx, r11
movabs rax, 0xc745413c0c627414
xor rcx, rax
mov qword [rbp - 0x38], rcx
and rcx, rdx
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
cmp qword [rax], rcx
jne 0x1401c5091
lea r8, [0x1402f68a8]
mov ebx, dword [rbp - 0x48]
jmp 0x1401c50af
lea rcx, [rbp - 0x28]
call fcn.14020dbfc
mov r8, rax
mov ebx, 1
mov dword [rbp - 0x48], ebx
cmp qword [rax + 0x18], 0xf
jbe 0x1401c50af
mov r8, qword [rax]
mov dword [rbp + 0x58], r14d
mov dword [rbp + 0x58], 0x9474f63f
mov eax, 0x601b52c5
sub eax, dword [0x14031d058]
sub eax, dword [0x14031d050]
xor eax, 0xcce96f4a
sub eax, dword [0x14031d048]
mov rdx, qword [0x14031d040]
lea ecx, [rdx - 0x3a139b70]
add ecx, eax
xor ecx, 0x884563c
sub ecx, 0x73a84424
xor ecx, 0x29e55cd6
mov r9d, dword [0x14031d030]
xor r9d, 0x11a6a27f
sub r9d, ecx
mov eax, dword [0x14031d038]
xor eax, 0xee595d80
sub r9d, eax
sub r9d, edx
add r9d, 0x780659f9
xor r9d, 0xec806280
mov dword [rbp + 0x58], r9d
movsxd rdx, r9d
mov r13, qword [rbp - 0x30]
mov rcx, r13
call fcn.14003eebc
nop
mov dword [rbp + 0x58], r14d
test bl, 1
je 0x1401c5154
and ebx, 0xfffffffe
mov dword [rbp - 0x48], ebx
lea rcx, [rbp - 0x28]
call fcn.140027b9c
nop
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], r14
mov dword [rbp + 0x60], r14d
mov dword [rbp + 0x60], 0x3b8e911d
mov eax, 0xdf54fb82
sub eax, dword [0x14031d058]
sub eax, dword [0x14031d050]
xor eax, 0x2026ce0b
sub eax, dword [0x14031d048]
mov rcx, qword [0x14031d040]
add eax, 0xe021ca6b
add eax, ecx
xor eax, 0xce8ca102
add eax, 0x64ace344
xor eax, 0xf68ad8eb
lea edx, [rcx + 0x234dd266]
add edx, eax
not edx
mov eax, dword [0x14031d038]
xor eax, 0x31735eee
sub edx, eax
mov ecx, dword [0x14031d030]
xor ecx, 0xce8ca111
add ecx, 0x390bc9e1
add ecx, edx
xor ecx, 0x4584fbce
mov dword [rbp + 0x60], ecx
call fcn.14027f118
mov rdx, rax
mov rcx, r13
call fcn.14027f2ac
nop
mov dword [rbp + 0x60], r14d
mov ebx, r14d
mov edi, 0xbfbb3682
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x1401c525c
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0xdb8d7474
jmp 0x1401c524e
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, 0x4764996c
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x1401c522e
cmp r9d, ebx
jne 0x1401c536f
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov r11d, ecx
add r11, r10
shr rcx, 0x20
cmp r11, r10
je 0x1401c536f
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x1401c536f
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r9d, dword [rdx + r10]
add r9, r10
mov r14d, 0xdb8d7474
jmp 0x1401c52c2
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, 0x4764996c
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r9]
inc r9
test dl, dl
jne 0x1401c52a4
cmp r14d, edi
je 0x1401c52dd
xor r14d, r14d
test esi, esi
jne 0x1401c528f
jmp 0x1401c536f
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r8d, word [rdx + rsi*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov r9d, dword [rdx + r8*4]
add r9, r10
cmp r9, r11
jbe 0x1401c5377
lea rax, [rcx + r11]
cmp r9, rax
jae 0x1401c5377
mov ebx, 0xdb8d7474
mov edi, ebx
jmp 0x1401c532b
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, ebx
xor eax, ecx
mov ebx, edx
imul ebx, eax
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x1401c530e
inc r9
xor r14d, r14d
jmp 0x1401c5357
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, edi
xor eax, ecx
mov edi, edx
imul edi, eax
inc r9
mov al, byte [r9]
test al, al
jne 0x1401c533a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x1401c5202
mov rcx, r13
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
jmp r9