Function at 0x140013eb0
Capabilities:
Access peb ldr_data
Get process filename

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push r14
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword gs:[0x60]
xor edx, edx
mov r8d, 0xe49cb5cb
mov r10d, 0xf770de03
xor r9d, r9d
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x20]
mov rcx, qword [rax + 0x50]
nop
movzx eax, word [rcx]
test eax, eax
je 0x140013f20
imul eax, r10d
inc r9d
add rcx, 2
add r8d, eax
mov r10d, eax
mov edx, r8d
mov eax, r8d
shr edx, 0x11
shl eax, 0xf
or edx, eax
cmp r9d, 6
jb 0x140013ef0
nop dword [rax]
movabs rbx, 0x3b527efd926eb4a1
mov eax, edx
imul rax, rbx
movabs rsi, 0x1b2788e10fc27e1e
mov r10d, edx
sub rax, rsi
movabs r14, 0xc4ad81026d914b5f
mov r9, rax
shl rax, 0x20
shr r9, 0x20
or r9, rax
mov qword [rsp + 0x30], r9
lea rcx, [r9 + rdx]
imul rcx, rbx
add rcx, r14
mov r8, rcx
shr rcx, 0x1e
shl r8, 0x22
or r8, rcx
lea rcx, [rbp - 0x20]
mov rax, r8
mov qword [rsp + 0x38], r8
imul rax, rbx
lea r8, [rsp + 0x30]
add rax, r10
ror rax, 0x1f
mov qword [rsp + 0x40], rax
call fcn.140014ba0
test eax, eax
je 0x140013faa
mov eax, 0x10
jmp 0x14001445e
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x20]
call fcn.140016c70
mov r10d, eax
mov ecx, eax
imul rcx, rbx
sub rcx, rsi
mov r8, rcx
shl rcx, 0x20
shr r8, 0x20
or r8, rcx
mov qword [rsp + 0x68], r8
lea rcx, [r10 + r8]
imul rcx, rbx
lea r8, [rsp + 0x68]
add rcx, r14
mov rdx, rcx
shr rcx, 0x1e
shl rdx, 0x22
or rdx, rcx
lea rcx, [rbp + 0x30]
mov rax, rdx
mov qword [rsp + 0x70], rdx
imul rax, rbx
mov edx, r10d
add rax, r10
ror rax, 0x1f
mov qword [rsp + 0x78], rax
call fcn.140014480
test eax, eax
je 0x140014027
mov eax, 1
jmp 0x14001445e
movups xmm3, xmmword [rsp + 0x68]
lea r8, [rbp - 0x80]
mov qword [rsp + 0x250], r12
movsd xmm2, qword [rsp + 0x78]
lea rdx, [rsp + 0x30]
mov qword [rsp + 0x258], r13
lea rcx, [rbp + 8]
movaps xmmword [rbp - 0x80], xmm3
mov qword [rsp + 0x260], r15
mov dword [rsp + 0x50], 0
mov dword [rsp + 0x30], 0xaf0268bf
mov dword [rsp + 0x34], 0x1e71e734
mov dword [rsp + 0x38], 0x6acf8c3b
mov dword [rsp + 0x3c], 0x7520f0eb
mov dword [rsp + 0x40], 0x9ab70f94
mov dword [rsp + 0x44], 0x666909ee
movsd qword [rbp - 0x70], xmm2
call fcn.140018770
lea r8, [rbp - 0x80]
mov dword [rsp + 0x30], 0xaf3f6883
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x34], 0x1e73e71c
lea rcx, [rbp - 0x20]
mov dword [rsp + 0x38], 0x6aeb8c37
movups xmm0, xmmword [rax]
mov dword [rsp + 0x3c], 0x7562f0f7
mov dword [rsp + 0x40], 0x9ab60fd7
movups xmmword [rbp - 0x60], xmm0
mov dword [rsp + 0x44], 0x660409d6
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp - 0x50], xmm1
movzx eax, word [rax + 0x18]
mov word [rbp - 0x48], ax
mov eax, 0xfe0f
mov word [rsp + 0x48], ax
movaps xmmword [rbp - 0x80], xmm3
movsd qword [rbp - 0x70], xmm2
call fcn.140018380
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x3c]
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x3c], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp - 0x2c], xmm1
mov eax, dword [rax + 0x18]
mov dword [rbp - 0x24], eax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.140017050
test rax, rax
je 0x140014441
mov r9d, dword [rsp + 0x50]
lea rdx, [rsp + 0x68]
mov r8, rax
lea rcx, [rbp + 0x30]
call fcn.140018000
test eax, eax
je 0x140014441
movups xmm3, xmmword [rsp + 0x68]
lea r8, [rbp - 0x80]
mov dword [rsp + 0x50], 0
movsd xmm2, qword [rsp + 0x78]
lea rdx, [rsp + 0x30]
lea rcx, [rbp + 8]
movaps xmmword [rbp - 0x80], xmm3
mov dword [rsp + 0x30], 0xaf3d68a0
mov dword [rsp + 0x34], 0x1e79e701
mov dword [rsp + 0x38], 0x6af98c11
mov dword [rsp + 0x3c], 0x7558f0d1
mov dword [rsp + 0x40], 0x9aad0f9d
mov dword [rsp + 0x44], 0x666909fa
movsd qword [rbp - 0x70], xmm2
call fcn.140018770
lea r8, [rbp - 0x80]
mov dword [rsp + 0x30], 0xaf3f6883
lea rdx, [rsp + 0x30]
mov dword [rsp + 0x34], 0x1e73e71c
lea rcx, [rbp - 0x20]
mov dword [rsp + 0x38], 0x6aeb8c37
movups xmm0, xmmword [rax]
mov dword [rsp + 0x3c], 0x7562f0f7
mov dword [rsp + 0x40], 0x9ab60fd7
movups xmmword [rbp - 0x60], xmm0
mov dword [rsp + 0x44], 0x660409d6
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp - 0x50], xmm1
movzx eax, word [rax + 0x18]
mov word [rbp - 0x48], ax
mov eax, 0xfe0f
mov word [rsp + 0x48], ax
movaps xmmword [rbp - 0x80], xmm3
movsd qword [rbp - 0x70], xmm2
call fcn.140018380
lea r8, [rbp - 0x60]
lea rdx, [rbp - 0x3c]
lea rcx, [rbp + 0x30]
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x3c], xmm0
movsd xmm1, qword [rax + 0x10]
movsd qword [rbp - 0x2c], xmm1
mov eax, dword [rax + 0x18]
mov dword [rbp - 0x24], eax
lea rax, [rsp + 0x68]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
call fcn.140017050
mov rbx, rax
test rax, rax
je 0x140014441
movups xmm1, xmmword [rsp + 0x68]
movq r11, xmm1
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rdx, xmm1
movq rcx, xmm0
mov rax, r11
imul rdx, rcx
mov r8, r11
imul rax, rdx
imul r8, rdx
add rax, rcx
add rax, qword [rsp + 0x78]
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cl
mov r9, r8
xor al, 0xb3
mov byte [rsp + 0x58], al
mov rax, r8
imul rax, r11
imul r9, r11
add rax, rcx
add rax, rdx
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cl
mov rdx, r9
xor al, 0x3f
mov byte [rsp + 0x59], al
mov rax, r9
imul rax, r11
imul rdx, r11
add rax, r8
add rax, rcx
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cl
mov r10, rdx
xor al, 0x1a
mov byte [rsp + 0x5a], al
mov rax, r11
imul rax, rdx
imul r10, r11
add rax, r9
add rax, rcx
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cl
mov r9, r10
xor al, 0x46
mov byte [rsp + 0x5b], al
mov rax, r11
imul rax, r10
imul r9, r11
add rax, rcx
add rax, rdx
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cl
mov r8, r9
xor al, 0x22
mov byte [rsp + 0x5c], al
mov rax, r11
imul rax, r9
imul r8, r11
add rax, rcx
add rax, r10
mov rcx, rax
shr rcx, 0x20
shl rax, 0x20
or rcx, rax
mov byte [rsp + 0x61], 0
movzx eax, cl
mov rdx, r8
xor al, 0xf1
mov byte [rsp + 0x5d], al
mov rax, r11
imul rax, r8
imul rdx, r11
add rax, rcx
add rax, r9
xor r9d, r9d
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cl
xor al, 0xe9
mov byte [rsp + 0x5e], al
mov rax, r11
imul rax, rdx
add rax, rcx
add rax, r8
lea r8, [rbp - 0x46]
mov rcx, rax
shl rax, 0x20
shr rcx, 0x20
or rcx, rax
movzx eax, cl
xor al, 0x73
mov byte [rsp + 0x5f], al
mov rax, rdx
movsd xmm0, qword [rsp + 0x58]
imul rax, r11
movsd qword [rbp - 0x46], xmm0
imul rax, r11
add rax, rcx
lea rcx, [rbp + 0x30]
add rax, rdx
mov rdx, rbx
ror rax, 0x20
xor al, 0xf9
mov byte [rsp + 0x60], al
movzx eax, word [rsp + 0x60]
mov word [rbp - 0x3e], ax
call fcn.1400174e0
xor eax, eax
jmp 0x140014446
mov eax, 3
mov r13, qword [rsp + 0x258]
mov r12, qword [rsp + 0x250]
mov r15, qword [rsp + 0x260]
mov rbx, qword [rsp + 0x268]
add rsp, 0x230
pop r14
pop rsi
pop rbp
ret