Function at 0x140005e40
Capabilities:
Access peb ldr_data
Get process filename
Resolve function by hash

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
movaps xmmword [rsp + 0x20], xmm0
movaps xmmword [rsp + 0x10], xmm0
movaps xmmword [rsp], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x60], rax
mov dword [rsp + 0x4c], 0x7f6c1eb2
mov ecx, dword [rsp]
mov eax, ecx
xor eax, 0x1e27
mov dword [rsp], eax
movups xmm0, xmmword [rsp + 8]
movaps xmm1, xmmword [0x14000c630]
xorps xmm0, xmm1
movups xmmword [rsp + 8], xmm0
movups xmm0, xmmword [rsp + 0x18]
xorps xmm0, xmm1
movups xmmword [rsp + 0x18], xmm0
movups xmm0, xmmword [rsp + 0x28]
xorps xmm0, xmm1
movups xmmword [rsp + 0x28], xmm0
xor dword [rsp + 0x38], 0x1e27
xor dword [rsp + 0x3c], 0x1e27
xor ecx, 0xbb5
mov dword [rsp + 0x48], ecx
mov r8d, 0x22f1
xor eax, eax
mov qword [rsp + 0x58], rax
mov esi, 0x4eb9
movaps xmm0, xmmword [0x14000c640]
movaps xmm1, xmmword [0x14000c650]
mov eax, 0
mov qword [rsp + 0x50], rax
jmp 0x140005f4b
cmp r12d, 0x4f9bd1f3
je 0x140006178
cmp r12d, 0x7aca12ca
jne 0x140006380
mov r9d, r11d
rol r9d, 0x13
cmp byte [r15], 0x60
mov ebx, 0x4f9bd1f3
mov eax, 0x9808386a
cmova ebx, eax
mov r8d, dword [rsp + 0x14]
xor r8d, esi
mov rax, rcx
mov r10d, edx
mov r14, r15
mov rbp, r13
cmp r8d, 0x4818
jg 0x140005ff0
cmp r8d, 0xbb4
jle 0x140006050
cmp r8d, 0x25fc
jg 0x1400060ed
cmp r8d, 0xbb5
je 0x1400061a5
cmp r8d, 0x22f1
jne 0x140005f4b
mov r12d, dword [rsp + 0x4c]
mov ecx, 0xa954020
add r12d, ecx
cmp byte [rsp + 0x58], 0
jne 0x140005fcd
movups xmm2, xmmword [rsp + 8]
movups xmm3, xmmword [rsp + 0x18]
movups xmm4, xmmword [rsp + 0x28]
xorps xmm2, xmm1
movups xmmword [rsp + 8], xmm2
xorps xmm3, xmm1
movups xmmword [rsp + 0x18], xmm3
xorps xmm4, xmm1
movups xmmword [rsp + 0x28], xmm4
xor byte [rsp + 0x38], 0x26
xor byte [rsp + 0x3c], 0x26
mov cl, 1
mov qword [rsp + 0x58], rcx
mov r13, qword [rsp + 0x60]
mov r8d, dword [rsp + 0x48]
jmp 0x140005f4b
cmp r8d, 0x6531
jle 0x1400060b0
cmp r8d, 0x7c92
jg 0x140006124
cmp r8d, 0x6532
je 0x140006178
cmp r8d, 0x70d1
jne 0x140005f4b
cmp r11d, 0x3cfa685d
mov ebx, 0xc6e53926
mov eax, 0x7bdac62
cmove ebx, eax
mov r8d, dword [rsp + 0x28]
jmp 0x14000611c
cmp r8d, 0x8bf
jg 0x14000614f
cmp r8d, 0x24e
je 0x14000639b
cmp r8d, 0x52b
jne 0x140005f4b
mov r10d, edx
and r10d, 1
mov eax, edx
not eax
and eax, 1
add r10d, edx
add r10d, eax
add r10w, 0xfffe
mov ebx, 0x7aca12ca
mov eax, 0xb78a74eb
cmove ebx, eax
mov r8d, dword [rsp + 0x24]
xor r8d, esi
mov rax, rcx
jmp 0x140006170
cmp r8d, 0x4819
je 0x1400062c3
cmp r8d, 0x51f0
je 0x140006259
cmp r8d, 0x5497
jne 0x140005f4b
movzx eax, byte [r15]
lea r9, [rax + r11]
add r9, 0xffffffffffffffe0
mov r8d, dword [rsp + 0x18]
jmp 0x140006198
cmp r8d, 0x25fd
je 0x1400062a1
cmp r8d, 0x3958
jne 0x140005f4b
test r13, r13
mov ebx, 0x973321a
mov eax, 0x22c9ade3
cmove ebx, eax
mov r8d, dword [rsp + 0xc]
xor r8d, esi
mov rax, rcx
jmp 0x14000616d
cmp r8d, 0x7c93
je 0x140005f1f
cmp r8d, 0x7e16
jne 0x140005f4b
mov r8d, dword [rsp + 0x34]
xor r8d, esi
mov ebx, 0x718fce21
xor eax, eax
jmp 0x14000616d
cmp r8d, 0x8c0
jne 0x140006371
mov rax, qword [r13 + 0x20]
mov r8d, dword [rsp + 0x2c]
xor r8d, esi
mov ebx, 0x718fce21
mov r10d, edx
mov r9, r11
jmp 0x140005f45
movzx eax, byte [r15]
lea r9d, [r11 + 0x49]
and r9d, eax
mov ebp, 0xb6
sub ebp, r11d
and ebp, eax
add r9, r11
add r9, rbp
mov r8d, dword [rsp + 0x1c]
xor r8d, esi
mov ebx, 0xce9d06e5
jmp 0x140005f3f
cmp byte [rsp + 0x50], 0
jne 0x1400061db
movups xmm2, xmmword [rsp + 0xc]
movups xmm3, xmmword [rsp + 0x1c]
movups xmm4, xmmword [rsp + 0x2c]
xorps xmm2, xmm0
movups xmmword [rsp + 0xc], xmm2
xorps xmm3, xmm0
movups xmmword [rsp + 0x1c], xmm3
xorps xmm4, xmm0
movups xmmword [rsp + 0x2c], xmm4
xor dword [rsp + 0x3c], 0x52f6
mov al, 1
mov qword [rsp + 0x50], rax
cmp r12d, 0x7bdac61
jg 0x140006224
cmp r12d, 0xc6e53925
jg 0x14000627d
cmp r12d, 0x8a015ed2
je 0x140006107
cmp r12d, 0x9808386a
je 0x1400060d7
cmp r12d, 0xb78a74eb
je 0x140006024
jmp 0x140006389
cmp r12d, 0x4f9bd1f2
jg 0x140005f05
cmp r12d, 0x7bdac62
je 0x14000615c
cmp r12d, 0x973321a
je 0x140006259
cmp r12d, 0x22c9ade3
je 0x14000613e
jmp 0x140006389
mov r14, qword [r13 + 0x50]
movzx r10d, word [r13 + 0x48]
mov r8d, dword [rsp + 0x10]
xor r8d, esi
mov ebx, 0x7aca12ca
mov rax, rcx
xor r9d, r9d
mov rbp, r13
jmp 0x140005f4b
cmp r12d, 0xc6e53926
je 0x1400062a1
cmp r12d, 0xce9d06e5
je 0x1400062c3
cmp r12d, 0xf194ad51
je 0x140006077
jmp 0x140006389
mov rbp, qword [r13]
mov r8d, dword [rsp + 0x30]
xor r8d, esi
mov ebx, 0x8a015ed2
mov rax, rcx
mov r10d, edx
mov r9, r11
mov r14, r15
jmp 0x140005f4b
mov r9d, edx
mov rdx, rcx
mov rax, r15
movabs rbp, 0xffffffff494de75a
and rax, rbp
mov rsi, r15
mov ecx, 0xb6b218a5
or rsi, rcx
mov rdi, r15
xor rdi, rbp
add rsi, rbp
add rsi, rax
lea rax, [rsi + rdi]
lea rbx, [rdi + rsi]
add rbx, 2
mov ebp, ebx
and ebp, 1
lea rax, [rax*2 + 4]
add rax, rbp
xor rax, 1
or rbx, 1
sub rax, rbx
lea rbp, [rax + 1]
mov rbx, rbp
or rbx, rcx
mov rdi, rbp
xor rdi, rcx
and ebp, 0xb6b218a5
add rax, rcx
add rax, 1
add rax, rbp
add rax, rdi
add rax, rbx
not rbx
lea r14, [rax + rbx*2]
add r14, 2
mov r8d, dword [rsp + 0x20]
mov esi, 0x4eb9
xor r8d, esi
mov ebx, 0xf194ad51
mov rcx, rdx
mov rax, rdx
mov edx, r9d
mov r10d, edx
mov r9, r11
mov rbp, r13
jmp 0x140005f4b
cmp r8d, 0x98e
jne 0x140005f4b
jmp 0x1400063bf
cmp r12d, 0x718fce21
je 0x1400063bf
mov rax, rcx
mov ebx, r12d
mov r10d, edx
mov r9, r11
mov r14, r15
mov rbp, r13
mov r8d, dword [rsp + 0x3c]
mov ecx, 0x4742
xor r8d, ecx
mov rcx, rax
mov r12d, ebx
mov edx, r10d
mov r11, r9
mov r15, r14
mov r13, rbp
jmp 0x140005f4b
mov rax, rcx
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret