Function at 0x1400011e0
Capabilities:
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x140005040]
xor rax, rsp
mov qword [rbp], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetDC]
mov r14, rax
test rax, rax
jne 0x14000123c
lea eax, [r14 + 1]
jmp 0x140001828
movdqa xmm1, xmmword [0x1400033e0]
movdqu xmmword [rsp + 0x20], xmm1
mov dl, 0x22
mov r8b, 0x3e
mov r9b, 0x14
mov r10b, 0x33
mov r11b, 0x26
movzx ebx, r10b
movzx edi, dl
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], cl
xor byte [rsp + 0x23], cl
xor byte [rsp + 0x24], cl
xor byte [rsp + 0x25], cl
xor byte [rsp + 0x26], cl
xor byte [rsp + 0x27], cl
xor byte [rsp + 0x28], cl
xor byte [rsp + 0x29], cl
xor byte [rsp + 0x2a], cl
xor byte [rsp + 0x2b], cl
xor byte [rsp + 0x2c], cl
xor byte [rsp + 0x2d], cl
xor byte [rsp + 0x2e], cl
xor byte [rsp + 0x2f], cl
xor dl, cl
mov byte [rsp + 0x30], dl
xor r8b, cl
mov byte [rsp + 0x31], r8b
xor r9b, cl
mov byte [rsp + 0x32], r9b
xor r10b, cl
mov byte [rsp + 0x33], r10b
xor r11b, cl
mov byte [rsp + 0x34], r11b
xor bl, cl
mov byte [rsp + 0x35], bl
xor dil, cl
mov byte [rsp + 0x36], dil
mov byte [rsp + 0x37], 0
mov byte [rsp + 0x48], 0x61
mov al, 0x16
mov cl, 8
mov dl, 0xf
mov r8b, 0x52
mov r9b, 0x53
mov r10b, 0x14
mov r11b, 0x4f
mov bl, 5
mov dil, 0xd
movzx esi, dil
xor r15d, r15d
xor al, 0x61
mov byte [rsp + 0x49], al
xor cl, 0x61
mov byte [rsp + 0x4a], cl
xor dl, 0x61
mov byte [rsp + 0x4b], dl
xor r8b, 0x61
mov byte [rsp + 0x4c], r8b
xor r9b, 0x61
mov byte [rsp + 0x4d], r9b
xor r10b, 0x61
mov byte [rsp + 0x4e], r10b
xor r11b, 0x61
mov byte [rsp + 0x4f], r11b
xor bl, 0x61
mov byte [rsp + 0x50], bl
xor dil, 0x61
mov byte [rsp + 0x51], dil
xor sil, 0x61
mov byte [rsp + 0x52], sil
mov byte [rsp + 0x53], r15b
xor edi, edi
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x38], 0xb8ca8949
mov dword [rsp + 0x3c], 0x103f
mov word [rsp + 0x40], 0x50f
mov bl, 0xc3
mov byte [rsp + 0x42], bl
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14000575c], eax
jle 0x1400016ce
lea rcx, [0x14000575c]
call fcn.140001b7c
cmp dword [0x14000575c], 0xffffffff
jne 0x1400016ce
mov rax, qword gs:[0x60]
movsx eax, byte [rsp + 0x49]
test al, al
jne 0x1400013d7
mov r13d, 0x811c9dc5
jmp 0x1400013ef
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
lea rcx, [rsp + 0x4a]
call fcn.1400011c0
mov r13d, eax
mov rcx, qword gs:[0x60]
test rcx, rcx
je 0x14000156b
mov r12, qword [rcx + 0x18]
add r12, 0x10
mov rsi, qword [r12]
cmp rsi, r12
je 0x14000156b
nop word [rax + rax]
mov rdx, qword [rsi + 0x60]
test rdx, rdx
je 0x14000155f
lea rcx, [rsp + 0x70]
call fcn.140001860
mov r8, qword [rbp - 0x80]
test r8, r8
jne 0x140001464
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rdi
mov ebx, 0xf
mov qword [rbp - 0x58], rbx
mov byte [rbp - 0x70], r8b
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x1400014d8
jmp 0x14000149d
lea rdx, [rsp + 0x70]
cmp qword [rbp - 0x78], 7
seta r9b
cmova rdx, qword [rsp + 0x70]
lea r8, [rdx + r8*2]
lea rdx, [rsp + 0x70]
test r9b, r9b
cmovne rdx, qword [rsp + 0x70]
lea rcx, [rbp - 0x70]
call fcn.1400019b0
mov rdx, qword [rbp - 0x78]
cmp rdx, 7
jbe 0x1400014d4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x70]
cmp rdx, 0x1000
mov rax, rcx
jb 0x1400014cf
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400015db
call fcn.140001c30
mov rbx, qword [rbp - 0x58]
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], 7
mov word [rsp + 0x70], di
lea rcx, [rbp - 0x70]
cmp rbx, 0xf
seta r15b
mov rdi, qword [rbp - 0x70]
cmova rcx, rdi
movsx eax, byte [rcx]
test al, al
jne 0x14000150b
mov eax, 0x811c9dc5
jmp 0x14000151e
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
inc rcx
call fcn.1400011c0
cmp eax, r13d
je 0x1400015e2
test r15b, r15b
je 0x14000155d
lea rdx, [rbx + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140001555
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140001611
mov rcx, rdi
call fcn.140001c30
xor edi, edi
mov rsi, qword [rsi]
cmp rsi, r12
jne 0x140001420
mov rsi, rdi
test rsi, rsi
je 0x140001687
movsxd rax, dword [rsi + 0x3c]
cmp dword [rax + rsi], 0x4550
jne 0x140001687
mov eax, dword [rax + rsi + 0x88]
add rax, rsi
mov ecx, dword [rax + 0x24]
add rcx, rsi
mov qword [rsp + 0x60], rcx
mov ecx, dword [rax + 0x1c]
add rcx, rsi
mov qword [rsp + 0x58], rcx
mov ebx, dword [rax + 0x20]
add rbx, rsi
mov r13d, dword [rax + 0x14]
test r13d, r13d
je 0x140001685
movsx r12d, byte [rsp + 0x21]
mov ecx, dword [rbx]
add rcx, rsi
je 0x140001676
movsx eax, byte [rcx]
test al, al
jne 0x140001637
mov r15d, 0x811c9dc5
jmp 0x14000164d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rsi, qword [rsi + 0x30]
cmp rbx, 0xf
jbe 0x140001620
lea rdx, [rbx + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140001618
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001618
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.140001c30
xor edi, edi
mov qword [rbp - 0x60], rdi
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], dil
jmp 0x14000156e
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
inc rcx
call fcn.1400011c0
mov r15d, eax
test r12b, r12b
jne 0x140001659
mov eax, 0x811c9dc5
jmp 0x140001671
mov eax, r12d
xor eax, 0x811c9dc5
imul edx, eax, 0x1000193
lea rcx, [rsp + 0x22]
call fcn.1400011c0
cmp r15d, eax
je 0x140001694
inc edi
add rbx, 4
cmp edi, r13d
jb 0x1400015c1
xor edi, edi
mov rax, rdi
add rax, 3
jne 0x1400016af
mov eax, edi
jmp 0x1400016b2
movsxd rax, edi
mov rcx, qword [rsp + 0x60]
movzx ecx, word [rcx + rax*2]
mov rax, qword [rsp + 0x58]
mov eax, dword [rax + rcx*4]
add rax, rsi
xor edi, edi
jmp 0x14000168a
mov eax, dword [rax + 1]
mov dword [0x140005758], eax
lea rcx, [0x14000575c]
call fcn.140001b10
movzx ebx, byte [rsp + 0x42]
mov r15, qword [rsp + 0x68]
mov eax, dword [0x140005758]
mov dword [rsp + 0x3c], eax
mov edx, 0xb
xor ecx, ecx
lea r9d, [rdx + 0x35]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
test rax, rax
je 0x140001710
movsd xmm0, qword [rsp + 0x38]
movsd qword [rax], xmm0
movzx eax, word [rsp + 0x40]
mov word [rsi + 8], ax
mov byte [rsi + 0xa], bl
mov r15, rsi
xor ecx, ecx
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
mov ecx, 1
call qword [sym.imp.USER32.dll_GetSystemMetrics]
cdq
sub eax, edx
sar eax, 1
mov edi, eax
xor eax, eax
mov qword [rbp - 0x4c], rax
mov qword [rbp - 0x44], rax
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x30], rax
mov dword [rbp - 0x50], eax
mov dword [rbp - 0x3c], 2
mov dword [rbp - 0x28], eax
mov dword [rbp - 0x14], 4
lea ecx, [rax + 0x23]
call r15
nop
test ax, ax
jne 0x140001805
mov ecx, 0x58
call r15
nop
test ax, ax
je 0x1400017e7
mov r8d, edi
mov edx, ebx
mov rcx, r14
call qword [sym.imp.GDI32.dll_GetPixel]
cmp eax, 0xff
jne 0x1400017e7
mov r8d, 0x28
lea rdx, [rbp - 0x50]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov r8d, edi
mov edx, ebx
mov rcx, r14
call qword [sym.imp.GDI32.dll_GetPixel]
cmp eax, 0xff
jne 0x1400017d3
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, edi
mov edx, ebx
mov rcx, r14
call qword [sym.imp.GDI32.dll_GetPixel]
cmp eax, 0xff
je 0x1400017b3
mov r8d, 0x28
lea rdx, [rbp - 0x28]
lea ecx, [r8 - 0x27]
call qword [sym.imp.USER32.dll_SendInput]
mov ecx, 5
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov ecx, 0x23
call r15
nop
test ax, ax
je 0x140001767
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
test rsi, rsi
je 0x140001826
xor edx, edx
mov r8d, 0xc000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
xor eax, eax
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.140001af0
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret