Function at 0x1400947b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x2c0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rdi, qword [0x140308b60]
mov eax, 0xf8f45725
mov qword [rbp + 0x10], rax
test rdi, rdi
jne 0x14009493a
mov ebx, eax
xor r14d, r14d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r12, qword [rcx + 0x10]
mov rdi, r12
nop word [rax + rax]
mov eax, dword [rdi + 0x58]
sub ax, 8
test r14d, r14d
je 0x14009485d
mov rcx, qword [rdi + 0x60]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140094854
nop dword [rax]
nop dword [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140094840
cmp edx, r14d
jne 0x140094922
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r15, rcx
mov r10d, ecx
shr r15, 0x20
add r10, r9
cmp r10, r9
je 0x140094922
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x140094922
mov esi, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rsi + r8*4]
mov eax, dword [rax + r9]
add rax, r9
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x1400948d7
nop dword [rax]
movsx ecx, cl
lea rax, [rax + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax - 1]
test cl, cl
jne 0x1400948c0
cmp edx, ebx
je 0x1400948e2
test r8d, r8d
jne 0x1400948a0
jmp 0x140094922
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov edi, dword [rcx + rdx*4]
add rdi, r9
cmp rdi, r10
jbe 0x140094933
lea rax, [r15 + r10]
cmp rdi, rax
jae 0x140094933
mov r14d, 0x811c9dc5
mov rdi, r12
mov dword [rbp + 8], r14d
mov dword [rbp + 0xc], r14d
mov rbx, qword [rbp + 8]
shr rbx, 0x20
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r12
jne 0x140094810
xor edi, edi
mov qword [0x140308b60], rdi
mov rdx, qword [0x140308b40]
movabs rax, 0x91db52b4a2d8e3a2
mov qword [rbp + 0xf0], rax
movabs rax, 0x3e0cc1d5cf967b15
mov qword [rbp + 0xf8], rax
movabs rax, 0x4985311fe2c5c6f5
mov qword [rbp + 0x100], rax
movabs rax, 0x12aacb0617469858
mov qword [rbp + 0x108], rax
movabs rsi, 0xfea902d1d6b191f5
mov qword [rbp + 0x120], rsi
movabs r14, 0x5161a498bce51e76
mov qword [rbp + 0x128], r14
movabs rcx, 0x4985311fe2c5bf87
movdqa xmm0, xmmword [rbp + 0x120]
mov r13d, 0xe463da3c
mov qword [rbp + 0x130], rcx
mov qword [rbp + 0x138], rax
mov qword [rbp + 8], r13
movups xmm1, xmmword [rbp + 0xf0]
movups xmm2, xmmword [rbp + 0x100]
xorps xmm0, xmm1
movdqa xmm1, xmmword [rbp + 0x130]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm2
movdqa xmmword [rbp + 0x30], xmm1
test rdx, rdx
jne 0x140094b62
mov rax, qword gs:[0x60]
mov ebx, r13d
xor r12d, r12d
mov rcx, qword [rax + 0x18]
mov r13, qword [rcx + 0x10]
mov r14, r13
nop word [rax + rax]
mov eax, dword [r14 + 0x58]
sub ax, 8
test r12d, r12d
je 0x140094a6d
mov rcx, qword [r14 + 0x60]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140094a64
nop word [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140094a50
cmp edx, r12d
jne 0x140094b32
mov r9, qword [r14 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r15, rcx
mov r10d, ecx
shr r15, 0x20
add r10, r9
cmp r10, r9
je 0x140094b32
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x140094b32
mov esi, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140094ae7
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140094ad0
cmp edx, ebx
je 0x140094af2
test r8d, r8d
jne 0x140094ab0
jmp 0x140094b32
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov edx, dword [rcx + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x140094b43
lea rax, [r15 + r10]
cmp rdx, rax
jae 0x140094b43
mov r12d, 0x811c9dc5
mov r14, r13
mov dword [rbp], r12d
mov dword [rbp + 4], r12d
mov rbx, qword [rbp]
shr rbx, 0x20
mov rax, qword [r14]
mov r14, rax
cmp rax, r13
jne 0x140094a20
xor edx, edx
mov r13, qword [rbp + 8]
movabs rsi, 0xfea902d1d6b191f5
mov qword [0x140308b40], rdx
movabs r14, 0x5161a498bce51e76
movabs rax, 0xcc9a6eb4b8c3f49e
mov qword [rbp + 0xa0], rsi
mov qword [rbp + 0x40], rax
lea rcx, [rbp + 0x40]
movabs rax, 0x5161a498d0897a58
mov qword [rbp + 0xa8], r14
movdqa xmm0, xmmword [rbp + 0xa0]
mov qword [rbp + 0x48], rax
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0x40], xmm0
call rdx
lea rdx, [rbp + 0x20]
mov rcx, rax
call rdi
movzx ecx, byte [rax]
cmp cl, 0xe9
je 0x140095d8c
cmp cl, 0x90
je 0x140095d8c
cmp cl, 0xc3
je 0x140095d8c
mov r15, qword [0x140308b60]
test r15, r15
jne 0x140094d30
mov rax, qword gs:[0x60]
mov ebx, dword [rbp + 0x10]
mov rcx, qword [rax + 0x18]
mov r12, qword [rcx + 0x10]
mov rsi, r12
mov eax, dword [rsi + 0x58]
sub ax, 8
test r15d, r15d
je 0x140094c3d
mov rcx, qword [rsi + 0x60]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140094c34
nop word [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140094c20
cmp edx, r15d
jne 0x140094d03
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r14, rcx
mov r10d, ecx
shr r14, 0x20
add r10, r9
cmp r10, r9
je 0x140094d03
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x140094d03
mov edi, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140094cb7
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140094ca0
cmp edx, ebx
je 0x140094cc2
test r8d, r8d
jne 0x140094c80
jmp 0x140094d03
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov r15d, dword [rcx + rdx*4]
add r15, r9
cmp r15, r10
jbe 0x140094d15
lea rax, [r10 + r14]
cmp r15, rax
jae 0x140094d15
mov r15d, 0x811c9dc5
mov rsi, r12
mov dword [rbp], r15d
mov dword [rbp + 4], r15d
mov rbx, qword [rbp]
shr rbx, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
jne 0x140094bf1
xor r15d, r15d
mov qword [0x140308b60], r15
movabs rsi, 0xfea902d1d6b191f5
movabs r14, 0x5161a498bce51e76
mov rdx, qword [0x140308b40]
movabs rax, 0xa8cc76b8a4e6e5bb
mov qword [rbp + 0x140], rax
movabs rax, 0x342cc8f9c9916c1f
mov qword [rbp + 0x148], rax
movabs rax, 0x4985311f9bb7d0ea
mov qword [rbp + 0x150], rax
movabs rax, 0x12aacb0617469858
mov qword [rbp + 0x160], rsi
movabs rcx, 0x4985311fe2c5bf87
mov qword [rbp + 0x168], r14
movdqa xmm0, xmmword [rbp + 0x160]
mov qword [rbp + 0x158], rax
mov qword [rbp + 0x170], rcx
mov qword [rbp + 0x178], rax
movups xmm1, xmmword [rbp + 0x140]
movups xmm2, xmmword [rbp + 0x150]
xorps xmm0, xmm1
movdqa xmm1, xmmword [rbp + 0x170]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm2
movdqa xmmword [rbp + 0x30], xmm1
test rdx, rdx
jne 0x140094f2e
mov rax, qword gs:[0x60]
mov ebx, r13d
xor r12d, r12d
mov rcx, qword [rax + 0x18]
mov r13, qword [rcx + 0x10]
mov rsi, r13
mov eax, dword [rsi + 0x58]
sub ax, 8
test r12d, r12d
je 0x140094e3d
mov rcx, qword [rsi + 0x60]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140094e34
nop word [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140094e20
cmp edx, r12d
jne 0x140094f02
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r14, rcx
mov r10d, ecx
shr r14, 0x20
add r10, r9
cmp r10, r9
je 0x140094f02
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x140094f02
mov edi, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140094eb7
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140094ea0
cmp edx, ebx
je 0x140094ec2
test r8d, r8d
jne 0x140094e80
jmp 0x140094f02
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov edx, dword [rcx + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x140094f13
lea rax, [r10 + r14]
cmp rdx, rax
jae 0x140094f13
mov r12d, 0x811c9dc5
mov rsi, r13
mov dword [rbp], r12d
mov dword [rbp + 4], r12d
mov rbx, qword [rbp]
shr rbx, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r13
jne 0x140094df2
xor edx, edx
mov qword [0x140308b40], rdx
movabs rsi, 0xfea902d1d6b191f5
movabs r14, 0x5161a498bce51e76
movabs rax, 0x92cd2cbdbad5e59b
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0x50], rax
lea rcx, [rbp + 0x50]
movabs rax, 0x5161a498bce51e1a
mov qword [rbp + 0xb8], r14
movdqa xmm0, xmmword [rbp + 0xb0]
mov qword [rbp + 0x58], rax
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0x50], xmm0
call rdx
lea rdx, [rbp + 0x20]
mov rcx, rax
call r15
movzx ecx, byte [rax]
cmp cl, 0xe9
je 0x140095d8c
cmp cl, 0x90
je 0x140095d8c
cmp cl, 0xc3
je 0x140095d8c
mov r15, qword [0x140308b60]
test r15, r15
jne 0x140095100
mov rax, qword gs:[0x60]
mov ebx, dword [rbp + 0x10]
mov rcx, qword [rax + 0x18]
mov r12, qword [rcx + 0x10]
mov r14, r12
nop
mov eax, dword [r14 + 0x58]
sub ax, 8
test r15d, r15d
je 0x14009500d
mov rcx, qword [r14 + 0x60]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140095004
nop word [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140094ff0
cmp edx, r15d
jne 0x1400950d3
mov r9, qword [r14 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov rsi, rcx
mov r10d, ecx
shr rsi, 0x20
add r10, r9
cmp r10, r9
je 0x1400950d3
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x1400950d3
mov edi, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140095087
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140095070
cmp edx, ebx
je 0x140095092
test r8d, r8d
jne 0x140095050
jmp 0x1400950d3
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov r15d, dword [rcx + rdx*4]
add r15, r9
cmp r15, r10
jbe 0x1400950e5
lea rax, [r10 + rsi]
cmp r15, rax
jae 0x1400950e5
mov r15d, 0x811c9dc5
mov r14, r12
mov dword [rbp], r15d
mov dword [rbp + 4], r15d
mov rbx, qword [rbp]
shr rbx, 0x20
mov rax, qword [r14]
mov r14, rax
cmp rax, r12
jne 0x140094fc0
xor r15d, r15d
mov qword [0x140308b60], r15
movabs rsi, 0xfea902d1d6b191f5
movabs r14, 0x5161a498bce51e76
mov rdx, qword [0x140308b40]
movabs rax, 0x93cc50b883d6f3b1
mov qword [rbp + 0x180], rax
movabs rax, 0x3a00c1eafe806a19
mov qword [rbp + 0x188], rax
movabs rax, 0x4985311fe2c5d1ee
mov qword [rbp + 0x190], rax
movabs r13, 0x12aacb0617469858
mov qword [rbp + 0x1a0], rsi
movabs rax, 0x4985311fe2c5bf87
mov qword [rbp + 0x1a8], r14
movdqa xmm0, xmmword [rbp + 0x1a0]
mov qword [rbp + 0x198], r13
mov qword [rbp + 0x1b0], rax
mov qword [rbp + 0x1b8], r13
movups xmm1, xmmword [rbp + 0x180]
movups xmm2, xmmword [rbp + 0x190]
xorps xmm0, xmm1
movdqa xmm1, xmmword [rbp + 0x1b0]
movdqa xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm2
movdqa xmmword [rbp + 0x30], xmm1
test rdx, rdx
jne 0x140095308
mov rax, qword gs:[0x60]
xor r12d, r12d
mov ebx, dword [rbp + 8]
mov rcx, qword [rax + 0x18]
mov r13, qword [rcx + 0x10]
mov r14, r13
mov eax, dword [r14 + 0x58]
sub ax, 8
test r12d, r12d
je 0x14009520d
mov rcx, qword [r14 + 0x60]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140095204
nop word [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x1400951f0
cmp edx, r12d
jne 0x1400952d2
mov r9, qword [r14 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov rsi, rcx
mov r10d, ecx
shr rsi, 0x20
add r10, r9
cmp r10, r9
je 0x1400952d2
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x1400952d2
mov edi, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140095287
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140095270
cmp edx, ebx
je 0x140095292
test r8d, r8d
jne 0x140095250
jmp 0x1400952d2
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov edx, dword [rcx + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x1400952e3
lea rax, [r10 + rsi]
cmp rdx, rax
jae 0x1400952e3
mov r12d, 0x811c9dc5
mov r14, r13
mov dword [rbp], r12d
mov dword [rbp + 4], r12d
mov rbx, qword [rbp]
shr rbx, 0x20
mov rax, qword [r14]
mov r14, rax
cmp rax, r13
jne 0x1400951c2
xor edx, edx
mov qword [0x140308b40], rdx
movabs rsi, 0xfea902d1d6b191f5
movabs r14, 0x5161a498bce51e76
movabs r13, 0x12aacb0617469858
movabs rax, 0x92cd2cbdbad5e59b
mov qword [rbp + 0xc0], rsi
mov qword [rbp + 0x60], rax
lea rcx, [rbp + 0x60]
movabs rax, 0x5161a498bce51e1a
mov qword [rbp + 0xc8], r14
movdqa xmm0, xmmword [rbp + 0xc0]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x60], xmm0
call rdx
lea rdx, [rbp + 0x20]
mov rcx, rax
call r15
movzx ecx, byte [rax]
cmp cl, 0xe9
je 0x140095d8c
cmp cl, 0x90
je 0x140095d8c
cmp cl, 0xc3
je 0x140095d8c
mov r15, qword [0x140308b60]
test r15, r15
jne 0x1400954e0
mov rax, qword gs:[0x60]
mov ebx, dword [rbp + 0x10]
mov rcx, qword [rax + 0x18]
mov r12, qword [rcx + 0x10]
mov rsi, r12
nop dword [rax + rax]
mov eax, dword [rsi + 0x58]
sub ax, 8
test r15d, r15d
je 0x1400953ed
mov rcx, qword [rsi + 0x60]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x1400953e4
nop dword [rax]
nop dword [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x1400953d0
cmp edx, r15d
jne 0x1400954b3
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r14, rcx
mov r10d, ecx
shr r14, 0x20
add r10, r9
cmp r10, r9
je 0x1400954b3
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x1400954b3
mov edi, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140095467
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140095450
cmp edx, ebx
je 0x140095472
test r8d, r8d
jne 0x140095430
jmp 0x1400954b3
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov r15d, dword [rcx + rdx*4]
add r15, r9
cmp r15, r10
jbe 0x1400954c5
lea rax, [r10 + r14]
cmp r15, rax
jae 0x1400954c5
mov r15d, 0x811c9dc5
mov rsi, r12
mov dword [rbp], r15d
mov dword [rbp + 4], r15d
mov rbx, qword [rbp]
shr rbx, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
jne 0x1400953a0
xor r15d, r15d
mov qword [0x140308b60], r15
movabs rsi, 0xfea902d1d6b191f5
movabs r14, 0x5161a498bce51e76
mov rdx, qword [0x140308b40]
movabs rax, 0x93cc50bab5d4f9b6
mov qword [rbp + 0x1c0], rax
movabs rax, 0x3614c6fdf8806a19
mov qword [rbp + 0x1c8], rax
movabs rax, 0x2cf6546db2b7dae0
mov qword [rbp + 0x1d0], rax
movabs rax, 0x12aacb061746ec36
mov qword [rbp + 0x1d8], rax
movabs rax, 0x4985311fe2c5bf87
mov qword [rbp + 0x1e0], rsi
mov qword [rbp + 0x1e8], r14
movdqa xmm0, xmmword [rbp + 0x1e0]
mov qword [rbp + 0x1f0], rax
mov qword [rbp + 0x1f8], r13
movups xmm2, xmmword [rbp + 0x1d0]
movups xmm1, xmmword [rbp + 0x1c0]
xorps xmm2, xmmword [rbp + 0x1f0]
movdqa xmmword [rbp + 0x30], xmm2
xorps xmm0, xmm1
movdqa xmmword [rbp + 0x20], xmm0
test rdx, rdx
jne 0x1400956de
mov rax, qword gs:[0x60]
xor r12d, r12d
mov ebx, dword [rbp + 8]
mov rcx, qword [rax + 0x18]
mov r13, qword [rcx + 0x10]
mov rsi, r13
nop
mov eax, dword [rsi + 0x58]
sub ax, 8
test r12d, r12d
je 0x1400955ed
mov rcx, qword [rsi + 0x60]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x1400955e4
nop dword [rax]
nop dword [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x1400955d0
cmp edx, r12d
jne 0x1400956b2
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r14, rcx
mov r10d, ecx
shr r14, 0x20
add r10, r9
cmp r10, r9
je 0x1400956b2
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x1400956b2
mov edi, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140095667
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140095650
cmp edx, ebx
je 0x140095672
test r8d, r8d
jne 0x140095630
jmp 0x1400956b2
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov edx, dword [rcx + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x1400956c3
lea rax, [r14 + r10]
cmp rdx, rax
jae 0x1400956c3
mov r12d, 0x811c9dc5
mov rsi, r13
mov dword [rbp], r12d
mov dword [rbp + 4], r12d
mov rbx, qword [rbp]
shr rbx, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r13
jne 0x1400955a0
xor edx, edx
mov qword [0x140308b40], rdx
movabs rsi, 0xfea902d1d6b191f5
movabs r14, 0x5161a498bce51e76
movabs rax, 0xcc9a6eb4b8c3f49e
mov qword [rbp + 0xd0], rsi
mov qword [rbp + 0x70], rax
lea rcx, [rbp + 0x70]
movabs rax, 0x5161a498d0897a58
mov qword [rbp + 0xd8], r14
movdqa xmm0, xmmword [rbp + 0xd0]
mov qword [rbp + 0x78], rax
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp + 0x70], xmm0
call rdx
lea rdx, [rbp + 0x20]
mov rcx, rax
call r15
movzx ecx, byte [rax]
cmp cl, 0xe9
je 0x140095d8c
cmp cl, 0x90
je 0x140095d8c
cmp cl, 0xc3
je 0x140095d8c
mov r15, qword [0x140308b60]
mov r13, qword [rbp + 0x10]
test r15, r15
jne 0x1400958b0
mov rax, qword gs:[0x60]
mov ebx, r13d
mov rcx, qword [rax + 0x18]
mov r12, qword [rcx + 0x10]
mov rsi, r12
mov eax, dword [rsi + 0x58]
sub ax, 8
test r15d, r15d
je 0x1400957bd
mov rcx, qword [rsi + 0x60]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x1400957b4
nop word [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x1400957a0
cmp edx, r15d
jne 0x140095883
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r14, rcx
mov r10d, ecx
shr r14, 0x20
add r10, r9
cmp r10, r9
je 0x140095883
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x140095883
mov edi, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140095837
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140095820
cmp edx, ebx
je 0x140095842
test r8d, r8d
jne 0x140095800
jmp 0x140095883
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov r15d, dword [rcx + rdx*4]
add r15, r9
cmp r15, r10
jbe 0x140095895
lea rax, [r14 + r10]
cmp r15, rax
jae 0x140095895
mov r15d, 0x811c9dc5
mov rsi, r12
mov dword [rbp], r15d
mov dword [rbp + 4], r15d
mov rbx, qword [rbp]
shr rbx, 0x20
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
jne 0x140095772
xor r15d, r15d
mov qword [0x140308b60], r15
movabs rsi, 0xfea902d1d6b191f5
movabs r14, 0x5161a498bce51e76
mov rdx, qword [0x140308b40]
movabs rax, 0x99ce77b3b3f5e2bc
mov qword [rbp + 0x200], rax
movabs rax, 0x3f04d7fdceb56c13
mov qword [rbp + 0x208], rax
movabs rax, 0x4985311fe2c5bff3
mov qword [rbp + 0x210], rax
movabs rax, 0x12aacb0617469858
mov qword [rbp + 0x218], rax
movabs rcx, 0x4985311fe2c5bf87
mov qword [rbp + 0x220], rsi
mov qword [rbp + 0x228], r14
movdqa xmm0, xmmword [rbp + 0x220]
mov qword [rbp + 0x230], rcx
mov qword [rbp + 0x238], rax
movups xmm2, xmmword [rbp + 0x210]
movups xmm1, xmmword [rbp + 0x200]
xorps xmm2, xmmword [rbp + 0x230]
movdqa xmmword [rbp + 0x30], xmm2
xorps xmm0, xmm1
movdqa xmmword [rbp + 0x20], xmm0
test rdx, rdx
jne 0x140095ab3
mov rax, qword gs:[0x60]
xor r14d, r14d
mov rcx, qword [rax + 0x18]
mov r12, qword [rcx + 0x10]
mov rdi, r12
nop dword [rax + rax]
mov eax, dword [rdi + 0x58]
sub ax, 8
test r14d, r14d
je 0x1400959bd
mov rcx, qword [rdi + 0x60]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x1400959b4
nop dword [rax]
nop dword [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x1400959a0
cmp edx, r14d
jne 0x140095a87
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov rsi, rcx
mov r10d, ecx
shr rsi, 0x20
add r10, r9
cmp r10, r9
je 0x140095a87
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x140095a87
mov ebx, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rbx + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140095a37
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140095a20
cmp edx, dword [rbp + 8]
je 0x140095a43
test r8d, r8d
jne 0x140095a00
jmp 0x140095a87
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov edx, dword [rcx + rdx*4]
add rdx, r9
cmp rdx, r10
jbe 0x140095a98
lea rax, [rsi + r10]
cmp rdx, rax
jae 0x140095a98
mov r14d, 0x811c9dc5
mov rdi, r12
mov dword [rbp], r14d
mov dword [rbp + 4], r14d
mov rax, qword [rbp]
shr rax, 0x20
mov qword [rbp + 8], rax
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r12
jne 0x140095970
xor edx, edx
mov qword [0x140308b40], rdx
movabs rsi, 0xfea902d1d6b191f5
movabs r14, 0x5161a498bce51e76
movabs rax, 0x5161a498d0897a58
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x88], rax
lea rcx, [rbp + 0x80]
mov qword [rbp + 0x18], r14
movabs r12, 0xcc9a6eb4b8c3f49e
movdqa xmm0, xmmword [rbp + 0x10]
mov qword [rbp + 0x80], r12
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp + 0x80], xmm0
call rdx
lea rdx, [rbp + 0x20]
mov rcx, rax
call r15
movzx ecx, byte [rax]
cmp cl, 0xe9
je 0x140095d8c
cmp cl, 0x90
je 0x140095d8c
cmp cl, 0xc3
je 0x140095d8c
mov rbx, qword [0x140308b60]
test rbx, rbx
jne 0x140095c8f
mov rax, qword gs:[0x60]
xor r14d, r14d
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov rdi, r15
nop dword [rax]
mov eax, dword [rdi + 0x58]
sub ax, 8
test r14d, r14d
je 0x140095b9d
mov rcx, qword [rdi + 0x60]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140095b94
nop dword [rax]
nop dword [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140095b80
cmp edx, r14d
jne 0x140095c63
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov rsi, rcx
mov r10d, ecx
shr rsi, 0x20
add r10, r9
cmp r10, r9
je 0x140095c63
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x140095c63
mov ebx, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rbx + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140095c17
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140095c00
cmp edx, r13d
je 0x140095c23
test r8d, r8d
jne 0x140095be0
jmp 0x140095c63
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov ebx, dword [rcx + rdx*4]
add rbx, r9
cmp rbx, r10
jbe 0x140095c74
lea rax, [r10 + rsi]
cmp rbx, rax
jae 0x140095c74
mov r14d, 0x811c9dc5
mov rdi, r15
mov dword [rbp], r14d
mov dword [rbp + 4], r14d
mov r13, qword [rbp]
shr r13, 0x20
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r15
jne 0x140095b50
xor ebx, ebx
mov qword [0x140308b60], rbx
movabs rsi, 0xfea902d1d6b191f5
movabs r14, 0x5161a498bce51e76
mov qword [rbp + 0x90], r12
movabs rax, 0x9dc67081b2d0f4a7
mov qword [rbp + 0x240], rax
movabs rcx, 0x4985311fe2c5bf87
mov qword [rbp + 0x270], rcx
movabs rax, 0x230ec9fdf1966d13
mov qword [rbp + 0x248], rax
lea rcx, [rbp + 0x90]
movups xmm1, xmmword [rbp + 0x240]
movabs rax, 0x4985311fe2c5bffe
mov qword [rbp + 0x260], rsi
mov qword [rbp + 0x250], rax
movabs rax, 0x12aacb0617469858
mov qword [rbp + 0x258], rax
movups xmm2, xmmword [rbp + 0x250]
mov qword [rbp + 0x278], rax
movabs rax, 0x5161a498d0897a58
mov qword [rbp + 0x98], rax
xorps xmm2, xmmword [rbp + 0x270]
mov qword [rbp + 0x268], r14
movdqa xmm0, xmmword [rbp + 0x260]
xorps xmm0, xmm1
mov qword [rbp + 0xe0], rsi
movdqa xmmword [rbp + 0x20], xmm0
mov qword [rbp + 0xe8], r14
movdqa xmm0, xmmword [rbp + 0xe0]
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp + 0x30], xmm2
movdqa xmmword [rbp + 0x90], xmm0
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rcx, rax
lea rdx, [rbp + 0x20]
call rbx
movzx ecx, byte [rax]
cmp cl, 0xe9
je 0x140095d8c
cmp cl, 0x90
je 0x140095d8c
cmp cl, 0xc3
je 0x140095d8c
xor al, al
jmp 0x140095d8e
mov al, 1
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret