Function at 0x140006450
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x440
xor r12d, r12d
mov r15d, r12d
mov dword [rsp + 0x470], r12d
call fcn.140003d10
nop
call fcn.1400041e0
test al, al
je 0x140007668
movabs rax, 0x102530df2c76cfd2
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x190], rax
movabs rax, 0x65458c04af213e74
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x198], rax
movabs r8, 0xaee9d4a578b4f2cb
mov qword [rsp + 0x470], r8
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1a0], rax
movabs rdx, 0xbd8d3f9439476238
mov qword [rsp + 0x470], rdx
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1a8], rax
movabs rdi, 0x605043ab4d13a7b1
mov qword [rsp + 0x470], rdi
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x2b0], rax
movabs r13, 0x82aef2aca4c5b06
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x2b8], rax
mov qword [rsp + 0x470], r8
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x470], rdx
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x2c8], rax
movdqa xmm0, xmmword [rsp + 0x190]
xorps xmm0, xmmword [rsp + 0x2b0]
movdqa xmmword [rsp + 0x190], xmm0
movdqa xmm1, xmmword [rsp + 0x1a0]
xorps xmm1, xmmword [rsp + 0x2c0]
movdqa xmmword [rsp + 0x1a0], xmm1
movabs rax, 0x3f2226cf2c7ccb9e
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1d0], rax
movabs rax, 0x6c43834bbc636970
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1d8], rax
movabs rax, 0xcd8cbcc657d186aa
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1e0], rax
movabs rax, 0xd3ff5ae76c3f5d53
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1e8], rax
movabs rax, 0xec0570f72a3afcd4
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1f0], rax
movabs rcx, 0xf76044e67b8ceb8a
mov qword [rsp + 0x470], rcx
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1f8], rax
mov qword [rsp + 0x470], rdi
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x3b0], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x3b8], rax
mov qword [rsp + 0x470], r8
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x3c0], rax
mov qword [rsp + 0x470], rdx
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x3c8], rax
movabs rax, 0xec0570f7175f91b5
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x3d0], rax
mov qword [rsp + 0x470], rcx
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x3d8], rax
movdqa xmm0, xmmword [rsp + 0x1d0]
xorps xmm0, xmmword [rsp + 0x3b0]
movdqa xmmword [rsp + 0x1d0], xmm0
movdqa xmm1, xmmword [rsp + 0x1e0]
xorps xmm1, xmmword [rsp + 0x3c0]
movdqa xmmword [rsp + 0x1e0], xmm1
movdqa xmm0, xmmword [rsp + 0x1f0]
xorps xmm0, xmmword [rsp + 0x3d0]
movdqa xmmword [rsp + 0x1f0], xmm0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r12
lea rax, [rsp + 0x1d0]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140006793
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0x50]
call fcn.1400167e0
nop
lea rdx, [0x14011c140]
cmp qword [0x14011c158], 0xf
cmova rdx, qword [0x14011c140]
mov r8, qword [0x14011c150]
lea rcx, [rsp + 0x50]
call fcn.140013dd0
movabs rax, 0xf2730d82c43df97
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0xc0], rax
movabs rax, 0x82aef2aca713f74
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x470], rdi
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x3e0], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x3e8], rax
movdqa xmm0, xmmword [rsp + 0xc0]
xorps xmm0, xmmword [rsp + 0x3e0]
movdqa xmmword [rsp + 0xc0], xmm0
lea rax, [rsp + 0xc0]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140006871
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x50]
call fcn.140013dd0
lea rdx, [0x14011c160]
cmp qword [0x14011c178], 0xf
cmova rdx, qword [0x14011c160]
mov r8, qword [0x14011c170]
lea rcx, [rsp + 0x50]
call fcn.140013dd0
movabs rax, 0x606d27c23a5bdf97
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x470], rdi
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x280], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x288], rax
movdqa xmm0, xmmword [rsp + 0xd0]
xorps xmm0, xmmword [rsp + 0x280]
movdqa xmmword [rsp + 0xd0], xmm0
lea rax, [rsp + 0xd0]
mov r8, rbx
inc r8
cmp byte [rax + r8], 0
jne 0x140006944
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x50]
call fcn.140013dd0
lea rdx, [0x14011c1a0]
cmp qword [0x14011c1b8], 0xf
cmova rdx, qword [0x14011c1a0]
mov r8, qword [0x14011c1b0]
lea rcx, [rsp + 0x50]
call fcn.140013dd0
movabs rax, 0x5d3e26c02247df97
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0xe0], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0xe8], rax
mov qword [rsp + 0x470], rdi
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x290], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x298], rax
movdqa xmm0, xmmword [rsp + 0xe0]
xorps xmm0, xmmword [rsp + 0x290]
movdqa xmmword [rsp + 0xe0], xmm0
lea rax, [rsp + 0xe0]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140006a20
lea rdx, [rsp + 0xe0]
lea rcx, [rsp + 0x50]
call fcn.140013dd0
lea rdx, [0x14011c120]
cmp qword [0x14011c138], 0xf
cmova rdx, qword [0x14011c120]
mov r8, qword [0x14011c130]
lea rcx, [rsp + 0x50]
call fcn.140013dd0
lea rax, [rsp + 0x140]
mov qword [rsp + 0x470], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x140], xmm0
mov qword [rsp + 0x150], r12
mov qword [rsp + 0x158], r12
mov rsi, qword [rsp + 0x60]
lea r14, [rsp + 0x50]
cmp qword [rsp + 0x68], 0xf
cmova r14, qword [rsp + 0x50]
movabs rdi, 0x7fffffffffffffff
cmp rsi, rdi
ja 0x140007c1e
cmp rsi, 0xf
ja 0x140006ae3
mov qword [rsp + 0x150], rsi
mov qword [rsp + 0x158], 0xf
movups xmm0, xmmword [r14]
movups xmmword [rsp + 0x140], xmm0
jmp 0x140006b84
mov rax, rsi
or rax, 0xf
cmp rax, rdi
jbe 0x140006b1b
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14001c5d0
mov rcx, rax
test rax, rax
je 0x140006b46
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140006b5c
mov rdi, rax
mov ecx, 0x16
cmp rax, rcx
cmovb rdi, rcx
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x140006b4d
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140007c23
jmp 0x140006afd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140006b59
call fcn.14001c5d0
jmp 0x140006b5c
mov rax, r12
mov qword [rsp + 0x140], rax
mov qword [rsp + 0x150], rsi
mov qword [rsp + 0x158], rdi
lea r8, [rsi + 1]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x2d0], xmm0
mov qword [rsp + 0x2e0], r12
mov qword [rsp + 0x2e8], r12
lea rax, [rsp + 0x190]
mov r8, rbx
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140006bb0
lea rdx, [rsp + 0x190]
lea rcx, [rsp + 0x2d0]
call fcn.1400167e0
nop
lea r8, [rsp + 0x140]
lea rdx, [rsp + 0x2d0]
lea rcx, [rsp + 0x30]
call fcn.1400030b0
nop
movabs rax, 0x605072ea055de2e2
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0xf8], rax
movabs rdi, 0x605043ab4d13a7b1
mov qword [rsp + 0x470], rdi
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x2a0], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x2a8], rax
movdqa xmm0, xmmword [rsp + 0xf0]
xorps xmm0, xmmword [rsp + 0x2a0]
movdqa xmmword [rsp + 0xf0], xmm0
lea rcx, [rsp + 0xf0]
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x140006c84
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xf0]
xor r8d, r8d
mov rdx, qword [rsp + 0x40]
call fcn.140016430
cmp rax, 0xffffffffffffffff
je 0x140006ec4
movabs rax, 0x6050439a095af0f9
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x108], rax
mov qword [rsp + 0x470], rdi
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x330], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x338], rax
movdqa xmm0, xmmword [rsp + 0x100]
xorps xmm0, xmmword [rsp + 0x330]
movdqa xmmword [rsp + 0x100], xmm0
lea rcx, [rsp + 0x100]
mov rax, rbx
inc rax
cmp byte [rcx + rax], 0
jne 0x140006d51
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x100]
xor r8d, r8d
mov rdx, qword [rsp + 0x40]
call fcn.140016430
cmp rax, 0xffffffffffffffff
je 0x140006ec4
movabs rax, 0x605043ab4d1396f6
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x110], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x118], rax
mov qword [rsp + 0x470], rdi
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x360], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x368], rax
movdqa xmm0, xmmword [rsp + 0x110]
xorps xmm0, xmmword [rsp + 0x360]
movdqa xmmword [rsp + 0x110], xmm0
lea rcx, [rsp + 0x110]
mov rax, rbx
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140006e20
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x110]
xor r8d, r8d
mov rdx, qword [rsp + 0x40]
call fcn.140016430
cmp rax, 0xffffffffffffffff
je 0x140006ec4
lea rdx, [0x14011c120]
lea rcx, [rsp + 0x418]
call fcn.140014050
mov rdx, rax
lea rcx, [rsp + 0x3f0]
call fcn.14001beb0
mov r15d, 1
mov rdx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140006e92
mov rax, qword [rax]
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
mov qword [rsp + 0x20], rdx
mov r9, rax
xor r8d, r8d
mov rdx, qword [rsp + 0x40]
call fcn.140016430
cmp rax, 0xffffffffffffffff
je 0x140006ec4
movzx edi, r15b
jmp 0x140006ec7
xor dil, dil
test r15b, 1
je 0x140006f2c
mov rdx, qword [rsp + 0x408]
cmp rdx, 0xf
jbe 0x140006f13
inc rdx
mov rcx, qword [rsp + 0x3f0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140006f0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140006f0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001c84c
movdqa xmm0, xmmword [0x1400205b0]
movdqu xmmword [rsp + 0x400], xmm0
mov byte [rsp + 0x3f0], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
test dil, dil
je 0x140007093
mov rsi, qword [rcx]
mov rdi, rsi
nop dword [rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140006fc7
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140006fc7
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0xbfc91eef
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140006fc2
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140006fa0
cmp edx, 0x6aa43f1f
je 0x140007586
test r8d, r8d
jne 0x140006f80
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x140006fdd
cmp qword [rax + 0x30], 0
jne 0x140006f50
mov rdx, r12
call rdx
test eax, eax
je 0x140006fec
call fcn.140018c40
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140007029
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007024
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000757f
call fcn.14001c84c
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x140007079
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007074
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007642
call fcn.14001c84c
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
mov al, 1
jmp 0x140007c01
mov r14, qword [rcx]
mov rsi, r14
nop dword [rax]
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov edi, dword [rax + r9 + 0x88]
add rdi, r9
cmp rdi, r9
je 0x140007117
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x140007117
mov r11d, dword [rdi + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0x40814d62
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140007112
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1400070f0
cmp edx, 0x71dd7cec
je 0x1400075a2
test r8d, r8d
jne 0x1400070d0
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r14
je 0x14000712d
cmp qword [rax + 0x30], 0
jne 0x1400070a0
mov rdx, r12
call rdx
test eax, eax
je 0x14000713b
call fcn.140018c40
movabs rax, 0x9332dce2976d5f2
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1b0], rax
movabs rax, 0x67498143ea3f3267
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1b8], rax
movabs rax, 0xaec8a7c40cd180b9
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1c0], rax
movabs r15, 0xbd8d3f9439476238
mov qword [rsp + 0x470], r15
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x1c8], rax
movabs r14, 0x605043ab4d13a7b1
mov qword [rsp + 0x470], r14
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x2f0], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x2f8], rax
movabs rax, 0xaee9d4a578b4f2cb
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x300], rax
mov qword [rsp + 0x470], r15
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x308], rax
movdqa xmm0, xmmword [rsp + 0x1b0]
xorps xmm0, xmmword [rsp + 0x2f0]
movdqa xmmword [rsp + 0x1b0], xmm0
movdqa xmm1, xmmword [rsp + 0x1c0]
xorps xmm1, xmmword [rsp + 0x300]
movdqa xmmword [rsp + 0x1c0], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x310], xmm0
mov qword [rsp + 0x320], r12
mov qword [rsp + 0x328], r12
lea rax, [rsp + 0x1b0]
nop
inc rbx
cmp byte [rax + rbx], 0
jne 0x140007290
mov r8, rbx
lea rdx, [rsp + 0x1b0]
lea rcx, [rsp + 0x310]
call fcn.1400167e0
lea rcx, [rsp + 0x310]
call fcn.140005b60
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140007357
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140007357
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0x3a1565cb
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140007352
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140007330
cmp edx, 0x85119916
je 0x1400075be
test r8d, r8d
jne 0x140007310
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x14000736d
cmp qword [rax + 0x30], 0
jne 0x1400072e0
mov rdx, r12
call rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140007407
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140007407
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [r11 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0x32f3b94d
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140007402
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1400073e0
cmp edx, 0xd319d9e4
je 0x1400075da
test r8d, r8d
jne 0x1400073c0
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x14000741d
cmp qword [rax + 0x30], 0
jne 0x140007390
mov rdx, r12
movabs rax, 0x73925c52270d7d8
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x200], rax
movabs rax, 0x6c429c5fa62a7426
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x208], rax
movabs rax, 0xaee9d4a578b481a5
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x210], rax
mov qword [rsp + 0x470], r15
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x218], rax
mov qword [rsp + 0x470], r14
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x78], rax
movabs rax, 0xaee9d4a578b4f2cb
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x470], r15
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x88], rax
movdqa xmm0, xmmword [rsp + 0x200]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x200], xmm0
movdqa xmm1, xmmword [rsp + 0x210]
xorps xmm1, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x210], xmm1
lea rcx, [rsp + 0x200]
call rdx
call fcn.140018c40
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x1400075fb
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400075f6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400075f6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
jmp 0x140006fe0
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
jmp 0x140007130
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
jmp 0x140007370
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
jmp 0x140007420
call fcn.14001c84c
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x14000764e
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007649
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007649
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14001c84c
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], 0
xor al, al
jmp 0x140007c01
movabs rax, 0x123527ca227f87fe
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x240], rax
movabs rax, 0x644b990aa52d3526
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x248], rax
movabs rax, 0xcf9ca7850ddb96a2
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x250], rax
movabs rax, 0xd3e85bf14b24424b
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x258], rax
movabs rax, 0x98255c847e3ef8d6
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x260], rax
movabs rax, 0x810f2ac61ef885ef
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x268], rax
movabs rax, 0xaf40f765e6007e0e
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x270], rax
movabs rdx, 0x967acca04138effc
mov qword [rsp + 0x470], rdx
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x278], rax
movabs r14, 0x605043ab4d13a7b1
mov qword [rsp + 0x470], r14
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x370], rax
movabs r13, 0x82aef2aca4c5b06
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x378], rax
movabs rax, 0xaee9d4a578b4f2cb
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x380], rax
movabs r15, 0xbd8d3f9439476238
mov qword [rsp + 0x470], r15
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x388], rax
movabs rax, 0xec0570f7175f91b5
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x390], rax
movabs rcx, 0xf76044e67b8ceb8a
mov qword [rsp + 0x470], rcx
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x398], rax
movabs rax, 0xaf6192118865136f
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x3a0], rax
mov qword [rsp + 0x470], rdx
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x3a8], rax
movdqa xmm0, xmmword [rsp + 0x240]
xorps xmm0, xmmword [rsp + 0x370]
movdqa xmmword [rsp + 0x240], xmm0
movdqa xmm1, xmmword [rsp + 0x250]
xorps xmm1, xmmword [rsp + 0x380]
movdqa xmmword [rsp + 0x250], xmm1
movdqa xmm0, xmmword [rsp + 0x260]
xorps xmm0, xmmword [rsp + 0x390]
movdqa xmmword [rsp + 0x260], xmm0
movdqa xmm1, xmmword [rsp + 0x270]
xorps xmm1, xmmword [rsp + 0x3a0]
movdqa xmmword [rsp + 0x270], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x340], xmm0
mov qword [rsp + 0x350], r12
mov qword [rsp + 0x358], r12
lea rax, [rsp + 0x240]
mov rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], 0
jne 0x140007910
mov r8, rbx
lea rdx, [rsp + 0x240]
lea rcx, [rsp + 0x340]
call fcn.1400167e0
lea rcx, [rsp + 0x340]
call fcn.140005b60
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1400079d7
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400079d7
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r9
mov edx, 0x845f40a
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1400079d2
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1400079b0
cmp edx, 0xef324559
je 0x140007a9b
test r8d, r8d
jne 0x140007990
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1400079ed
cmp qword [rax + 0x30], 0
jne 0x140007960
mov rdx, r12
call rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140007a83
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140007a83
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r11]
add rcx, r9
mov edx, 0x14a4db54
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140007a7e
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140007a60
cmp edx, 0x140098ed
je 0x140007ab7
test r8d, r8d
jne 0x140007a40
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x140007acf
cmp qword [rax + 0x30], 0
jne 0x140007a10
jmp 0x140007acf
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
jmp 0x1400079f0
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov r12d, dword [rcx + rax*4]
add r12, r9
movabs rax, 0x73925c52270d7d8
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x220], rax
movabs rax, 0x6c429c5fa62a7426
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x228], rax
movabs rax, 0xaee9d4a578b481a5
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x230], rax
mov qword [rsp + 0x470], r15
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x238], rax
mov qword [rsp + 0x470], r14
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x120], rax
mov qword [rsp + 0x470], r13
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x128], rax
movabs rax, 0xaee9d4a578b4f2cb
mov qword [rsp + 0x470], rax
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x130], rax
mov qword [rsp + 0x470], r15
mov rax, qword [rsp + 0x470]
mov qword [rsp + 0x138], rax
movdqa xmm0, xmmword [rsp + 0x220]
xorps xmm0, xmmword [rsp + 0x120]
movdqa xmmword [rsp + 0x220], xmm0
movdqa xmm1, xmmword [rsp + 0x230]
xorps xmm1, xmmword [rsp + 0x130]
movdqa xmmword [rsp + 0x230], xmm1
lea rcx, [rsp + 0x220]
call r12
call fcn.140018c40
xor al, al
jmp 0x140007c01
lea r11, [rsp + 0x440]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140001de0
call fcn.140001d40
int3