Function at 0x14000d230
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov rax, qword [0x140059040]
xor rax, rsp
mov qword [rbp + 0x10], rax
movdqa xmm1, xmmword [0x140050a00]
movdqu xmmword [rsp + 0x50], xmm1
mov dl, 0x30
mov r8b, 0x2d
movzx r9d, dl
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
xor byte [rsp + 0x5f], cl
xor dl, cl
mov byte [rsp + 0x60], dl
xor r8b, cl
mov byte [rsp + 0x61], r8b
xor r9b, cl
mov byte [rsp + 0x62], r9b
mov byte [rsp + 0x63], 0
lea rdx, [rsp + 0x51]
lea rcx, [rbp - 0x10]
call fcn.14000cf80
nop
lea rcx, [rbp - 0x10]
call fcn.140001f40
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r14, qword [rcx + 0x10]
xor esi, esi
nop
mov r9, qword [r14 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov edi, dword [rax + r9 + 0x88]
add rdi, r9
cmp rdi, r9
je 0x14000d386
mov r8d, esi
mov r11d, dword [rdi + 0x18]
test r11d, r11d
je 0x14000d386
mov ebx, dword [rdi + 0x20]
nop word [rax + rax]
mov r10d, r8d
lea rax, [r9 + r10*4]
mov eax, dword [rax + rbx]
add rax, r9
mov edx, 0x811c9dc5
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x14000d37e
nop dword [rax]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax]
lea rax, [rax + 1]
test cl, cl
jne 0x14000d360
cmp edx, 0xc98b9e00
je 0x14000d38b
inc r8d
cmp r8d, r11d
jb 0x14000d340
mov r14, qword [r14]
jmp 0x14000d310
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r10*2]
mov ebx, dword [rcx + rax*4]
add rbx, r9
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov edx, 5
mov rcx, rax
call rbx
call fcn.14000d170
test al, al
je 0x14000da47
nop
cmp esi, 7
jge 0x14000d440
movdqa xmm1, xmmword [0x1400507d0]
movdqu xmmword [rsp + 0x50], xmm1
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd ecx, xmm1
xor al, cl
mov byte [rsp + 0x51], al
xor byte [rsp + 0x52], cl
xor byte [rsp + 0x53], cl
xor byte [rsp + 0x54], cl
xor byte [rsp + 0x55], cl
xor byte [rsp + 0x56], cl
xor byte [rsp + 0x57], cl
xor byte [rsp + 0x58], cl
xor byte [rsp + 0x59], cl
xor byte [rsp + 0x5a], cl
xor byte [rsp + 0x5b], cl
xor byte [rsp + 0x5c], cl
xor byte [rsp + 0x5d], cl
xor byte [rsp + 0x5e], cl
mov byte [rsp + 0x5f], 0
lea rcx, [rsp + 0x51]
call fcn.14000d0a0
mov ebx, eax
inc esi
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
test ebx, ebx
je 0x14000d3c0
cmp esi, 6
jge 0x14000da47
cmp qword [0x140073028], 0
jne 0x14000d4c2
mov rax, qword [0x140073038]
nop word [rax + rax]
test rax, rax
jne 0x14000d4c2
lea rdx, str.GameAssembly.dll
lea rcx, [rbp - 0x60]
call fcn.14000e360
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
call fcn.140001570
mov qword [0x140073028], rax
lea rdx, str.UnityPlayer.dll
lea rcx, [rsp + 0x20]
call fcn.14000e360
movups xmm0, xmmword [rax]
movaps xmmword [rsp + 0x50], xmm0
lea rdx, [rsp + 0x50]
call fcn.140001570
mov qword [0x140073038], rax
cmp qword [0x140073028], 0
je 0x14000d460
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov edx, 0x2bc
mov ecx, edx
call qword [sym.imp.KERNEL32.dll_Beep]
lea rcx, [rbp - 0x80]
call fcn.14000e8e0
mov rdx, rax
call fcn.14000ea20
lea rcx, [rbp - 0x80]
call fcn.14000dde0
movdqa xmm1, xmmword [0x1400509f0]
movdqu xmmword [rsp + 0x20], xmm1
movdqa xmm2, xmmword [0x1400507c0]
movdqu xmmword [rsp + 0x30], xmm2
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], dl
xor byte [rsp + 0x23], dl
xor byte [rsp + 0x24], dl
xor byte [rsp + 0x25], dl
xor byte [rsp + 0x26], dl
xor byte [rsp + 0x27], dl
xor byte [rsp + 0x28], dl
xor byte [rsp + 0x29], dl
xor byte [rsp + 0x2a], dl
xor byte [rsp + 0x2b], dl
xor byte [rsp + 0x2c], dl
xor byte [rsp + 0x2d], dl
xor byte [rsp + 0x2e], dl
xor byte [rsp + 0x2f], dl
movd eax, xmm2
xor al, dl
mov byte [rsp + 0x30], al
xor byte [rsp + 0x31], dl
xor byte [rsp + 0x32], dl
xor byte [rsp + 0x33], dl
xor byte [rsp + 0x34], dl
xor byte [rsp + 0x35], dl
xor byte [rsp + 0x36], dl
xor byte [rsp + 0x37], dl
xor byte [rsp + 0x38], dl
xor byte [rsp + 0x39], dl
xor byte [rsp + 0x3a], dl
xor byte [rsp + 0x3b], dl
xor byte [rsp + 0x3c], dl
xor byte [rsp + 0x3d], dl
xor byte [rsp + 0x3e], dl
mov byte [rsp + 0x3f], 0
lea rdx, [rsp + 0x21]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ea60
lea rdx, [0x14000ec30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x5dc
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp - 0x78]
call fcn.14000e8e0
mov rdx, rax
call fcn.14000ec70
lea rcx, [rbp - 0x78]
call fcn.14000ddd0
movdqa xmm1, xmmword [0x1400509e0]
movdqu xmmword [rsp + 0x20], xmm1
mov cl, 9
mov dl, 0x40
mov r8b, 0x47
movzx r10d, dl
mov r11b, 0x5d
movzx ebx, dl
mov dil, 0x45
movzx esi, dl
mov r14b, 0x53
mov r15b, 0x4c
mov r12b, 0x4d
mov r13b, 8
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r9d, xmm1
xor al, r9b
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], r9b
xor byte [rsp + 0x23], r9b
xor byte [rsp + 0x24], r9b
xor byte [rsp + 0x25], r9b
xor byte [rsp + 0x26], r9b
xor byte [rsp + 0x27], r9b
xor byte [rsp + 0x28], r9b
xor byte [rsp + 0x29], r9b
xor byte [rsp + 0x2a], r9b
xor byte [rsp + 0x2b], r9b
xor byte [rsp + 0x2c], r9b
xor byte [rsp + 0x2d], r9b
xor byte [rsp + 0x2e], r9b
xor byte [rsp + 0x2f], r9b
xor cl, r9b
mov byte [rsp + 0x30], cl
xor dl, r9b
mov byte [rsp + 0x31], dl
xor r8b, r9b
mov byte [rsp + 0x32], r8b
xor r10b, r9b
mov byte [rsp + 0x33], r10b
xor r11b, r9b
mov byte [rsp + 0x34], r11b
xor bl, r9b
mov byte [rsp + 0x35], bl
xor dil, r9b
mov byte [rsp + 0x36], dil
xor sil, r9b
mov byte [rsp + 0x37], sil
xor r14b, r9b
mov byte [rsp + 0x38], r14b
xor r15b, r9b
mov byte [rsp + 0x39], r15b
xor r12b, r9b
mov byte [rsp + 0x3a], r12b
xor r13b, r9b
mov byte [rsp + 0x3b], r13b
mov byte [rsp + 0x3c], 0
lea rdx, [rsp + 0x21]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ea60
lea rdx, [0x14000ec30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp - 0x70]
call fcn.14000e8e0
mov rdx, rax
call fcn.14000ecb0
lea rcx, [rbp - 0x70]
call fcn.14000ddd0
movdqa xmm1, xmmword [0x140050840]
movdqu xmmword [rsp + 0x20], xmm1
movdqa xmm2, xmmword [0x1400507e0]
movdqu xmmword [rsp + 0x30], xmm2
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd edx, xmm1
xor al, dl
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], dl
xor byte [rsp + 0x23], dl
xor byte [rsp + 0x24], dl
xor byte [rsp + 0x25], dl
xor byte [rsp + 0x26], dl
xor byte [rsp + 0x27], dl
xor byte [rsp + 0x28], dl
xor byte [rsp + 0x29], dl
xor byte [rsp + 0x2a], dl
xor byte [rsp + 0x2b], dl
xor byte [rsp + 0x2c], dl
xor byte [rsp + 0x2d], dl
xor byte [rsp + 0x2e], dl
xor byte [rsp + 0x2f], dl
movd eax, xmm2
xor al, dl
mov byte [rsp + 0x30], al
xor byte [rsp + 0x31], dl
xor byte [rsp + 0x32], dl
xor byte [rsp + 0x33], dl
xor byte [rsp + 0x34], dl
xor byte [rsp + 0x35], dl
xor byte [rsp + 0x36], dl
xor byte [rsp + 0x37], dl
xor byte [rsp + 0x38], dl
xor byte [rsp + 0x39], dl
xor byte [rsp + 0x3a], dl
xor byte [rsp + 0x3b], dl
xor byte [rsp + 0x3c], dl
xor byte [rsp + 0x3d], dl
xor byte [rsp + 0x3e], dl
mov byte [rsp + 0x3f], 0
lea rdx, [rsp + 0x21]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ea60
lea rdx, [0x14000ec30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x12c
call qword [sym.imp.KERNEL32.dll_Sleep]
lea rcx, [rbp - 0x68]
call fcn.14000ecf0
mov rdx, rax
call fcn.14000ed30
lea rcx, [rbp - 0x68]
call fcn.14000dd60
movdqa xmm1, xmmword [0x1400509d0]
movdqu xmmword [rsp + 0x20], xmm1
movdqa xmm2, xmmword [str.ZBIeRURORWRA_]
movdqu xmmword [rsp + 0x30], xmm2
movdqa xmm0, xmm1
psrldq xmm0, 1
movd eax, xmm0
movd r8d, xmm1
xor al, r8b
mov byte [rsp + 0x21], al
xor byte [rsp + 0x22], r8b
xor byte [rsp + 0x23], r8b
xor byte [rsp + 0x24], r8b
xor byte [rsp + 0x25], r8b
xor byte [rsp + 0x26], r8b
xor byte [rsp + 0x27], r8b
xor byte [rsp + 0x28], r8b
xor byte [rsp + 0x29], r8b
xor byte [rsp + 0x2a], r8b
xor byte [rsp + 0x2b], r8b
xor byte [rsp + 0x2c], r8b
xor byte [rsp + 0x2d], r8b
xor byte [rsp + 0x2e], r8b
xor byte [rsp + 0x2f], r8b
movd eax, xmm2
xor al, r8b
mov byte [rsp + 0x30], al
xor byte [rsp + 0x31], r8b
xor byte [rsp + 0x32], r8b
xor byte [rsp + 0x33], r8b
xor byte [rsp + 0x34], r8b
xor byte [rsp + 0x35], r8b
xor byte [rsp + 0x36], r8b
xor byte [rsp + 0x37], r8b
xor byte [rsp + 0x38], r8b
xor byte [rsp + 0x39], r8b
xor byte [rsp + 0x3a], r8b
xor byte [rsp + 0x3b], r8b
xor byte [rsp + 0x3c], r8b
xor byte [rsp + 0x3d], r8b
xor byte [rsp + 0x3e], r8b
xor byte [rsp + 0x3f], r8b
mov byte [rsp + 0x40], 0
lea rdx, [rsp + 0x21]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000ea60
lea rdx, [0x14000ec30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x320
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
mov byte [rsp + 0x70], 0xc
mov al, 0x4d
mov cl, 0x62
mov dl, 0x78
mov r8b, 0x65
mov r9b, 0x4f
mov r10b, 0x64
mov r11b, 0x69
mov bl, 0x6d
movzx edi, dl
mov sil, 0x22
movzx r14d, r11b
mov r15b, 0x74
movzx r12d, r11b
xor r13d, r13d
xor al, 0xc
mov byte [rsp + 0x71], al
xor cl, 0xc
mov byte [rsp + 0x72], cl
xor dl, 0xc
mov byte [rsp + 0x73], dl
xor r8b, 0xc
mov byte [rsp + 0x74], r8b
xor r9b, 0xc
mov byte [rsp + 0x75], r9b
xor r10b, 0xc
mov byte [rsp + 0x76], r10b
xor r11b, 0xc
mov byte [rsp + 0x77], r11b
xor bl, 0xc
mov byte [rsp + 0x78], bl
xor dil, 0xc
mov byte [rsp + 0x79], dil
xor sil, 0xc
mov byte [rsp + 0x7a], sil
xor r14b, 0xc
mov byte [rsp + 0x7b], r14b
xor r15b, 0xc
mov byte [rsp + 0x7c], r15b
xor r12b, 0xc
mov byte [rsp + 0x7d], r12b
mov byte [rsp + 0x7e], r13b
lea rcx, [rsp + 0x71]
call fcn.14000d0a0
test eax, eax
je 0x14000d9d7
mov byte [0x140073088], 1
lea rdx, [0x14000afc0]
lea rcx, [rbp - 0x50]
call fcn.14000eda0
nop
lea rcx, [rbp - 0x50]
call fcn.140001530
lea rdx, [0x140006b00]
lea rcx, [rbp - 0x40]
call fcn.14000eda0
nop
lea rcx, [rbp - 0x40]
call fcn.140001530
lea rdx, [0x1400050c0]
lea rcx, [rbp - 0x30]
call fcn.14000eda0
nop
lea rcx, [rbp - 0x30]
call fcn.140001530
lea rdx, [0x140004a90]
lea rcx, [rbp - 0x20]
call fcn.14000eda0
nop
lea rcx, [rbp - 0x20]
call fcn.140001530
nop
call fcn.140043330
jmp 0x14000da40
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3