Function at 0x140004000
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
cwde
lahf
nop
nop
xchg ecx, eax
wait
xchg edx, eax
nop
cld
wait
cwde
cwde
xchg ecx, eax
clc
xchg edx, eax
cdq
xchg edx, eax
xchg ebx, eax
stc
cdq
cld
cdq
clc
cwde
cwde
cdq
std
xchg edx, eax
xchg ebx, eax
xchg edx, eax
wait
nop
sahf
xchg ebx, eax
wait
stc
wait
wait
cdq
cld
lahf
xchg edx, eax
std
xchg ebx, eax
cdq
lahf
cwde
xchg ebx, eax
clc
lahf
xchg edx, eax
xchg edx, eax
cld
xchg edx, eax
wait
xchg edx, eax
xchg edx, eax
cwde
std
sahf
std
clc
cld
nop
cld
cwde
cld
cld
xchg ecx, eax
xchg ebx, eax
xchg ecx, eax
xchg edx, eax
cld
cld
xchg edx, eax
std
xchg ebx, eax
std
sahf
cld
sahf
stc
wait
stc
clc
clc
xchg ebx, eax
clc
sahf
cdq
cdq
cwde
lahf
std
sahf
xchg edx, eax
xchg ecx, eax
cld
nop
xchg ebx, eax
xchg ebx, eax
cld
cld
xchg ecx, eax
std
nop
lahf
cld
clc
cdq
clc
sahf
wait
cwde
xchg ecx, eax
sahf
lahf
cld
lahf
sahf
xchg ebx, eax
std
clc
nop
xchg ebx, eax
wait
xchg ecx, eax
clc
cld
sahf
xchg edx, eax
cdq
lahf
cdq
xchg ebx, eax
clc
xchg edx, eax
sahf
cld
xchg ebx, eax
nop
clc
xchg ecx, eax
xchg edx, eax
sahf
stc
cld
xchg ebx, eax
lahf
xchg edx, eax
cwde
std
xchg ebx, eax
xchg ebx, eax
cwde
stc
sahf
cwde
lahf
std
xchg ecx, eax
wait
cwde
lahf
std
wait
lahf
xchg edx, eax
cwde
wait
wait
wait
nop
wait
std
wait
std
xchg edx, eax
stc
cld
lahf
stc
std
xchg ebx, eax
std
cdq
lahf
stc
sahf
std
stc
lahf
stc
cld
std
xchg edx, eax
cwde
clc
std
xchg ebx, eax
cld
xchg ebx, eax
xchg edx, eax
std
nop
sahf
xchg ebx, eax
xchg ebx, eax
clc
stc
xchg ecx, eax
nop
cld
lahf
xchg ecx, eax
nop
wait
wait
cdq
cdq
cwde
nop
cdq
lahf
sahf
cwde
stc
std
cdq
cld
std
sahf
xchg edx, eax
xchg ebx, eax
cdq
cld
wait
sahf
nop
wait
sahf
cwde
cld
xchg edx, eax
xchg ecx, eax
lahf
cwde
nop
cld
xchg ecx, eax
cld
cdq
std
wait
stc
std
cwde
xchg ecx, eax
wait
xchg ebx, eax
clc
wait
sahf
cld
sahf
cld
xchg ebx, eax
wait
sahf
xchg ecx, eax
nop
lahf
cld
std
std
cld
clc
cdq
cld
cdq
cdq
std
stc
xchg edx, eax
stc
cdq
xchg edx, eax
xchg ecx, eax
xchg edx, eax
lahf
cdq
sahf
stc
xchg edx, eax
cwde
sahf
xchg ecx, eax
lahf
clc
sahf
std
lahf
xchg ecx, eax
cld
std
cwde
nop
xchg edx, eax
cwde
xchg ebx, eax
clc
stc
xchg ecx, eax
std
clc
cld
wait
sahf
stc
xchg ecx, eax
nop
lahf
xchg ebx, eax
xchg ebx, eax
xchg ecx, eax
clc
cwde
wait
stc
stc
lahf
xchg ecx, eax
wait
xchg ebx, eax
stc
cdq
nop
nop
xchg edx, eax
cld
nop
xchg ebx, eax
nop
cld
xchg ecx, eax
wait
wait
sahf
clc
stc
wait
xchg ebx, eax
lahf
clc
stc
std
lahf
nop
std
clc
sahf
xchg ebx, eax
xchg edx, eax
nop
xchg edx, eax
cwde
cwde
stc
xchg edx, eax
stc
cwde
clc
xchg ebx, eax
xchg edx, eax
cwde
sahf
cdq
cdq
cld
std
nop
sahf
cdq
clc
cdq
sahf
xchg ebx, eax
nop
cld
cwde
nop
nop
wait
xchg edx, eax
sahf
lahf
std
xchg edx, eax
lahf
std
wait
xchg ebx, eax
wait
stc
sahf
nop
xchg edx, eax
cwde
std
nop
stc
cdq
cwde
xchg edx, eax
stc
stc
sahf
wait
clc
xchg edx, eax
xchg ecx, eax
xchg ebx, eax
cwde
std
clc
clc
cwde
clc
cdq
xchg edx, eax
xchg ebx, eax
clc
cwde
xchg ecx, eax
stc
cwde
std
std
xchg ebx, eax
xchg ecx, eax
stc
wait
xchg ebx, eax
cwde
xchg ebx, eax
stc
std
std
stc
cwde
sahf
cwde
cwde
lahf
cld
xchg ebx, eax
cdq
sahf
sahf
lahf
clc
lahf
stc
cdq
cwde
cld
wait
xchg ecx, eax
clc
cwde
sahf
xchg edx, eax
cld
std
lahf
nop
xchg ebx, eax
wait
nop
cdq
xchg ecx, eax
wait
cdq
sahf
std
cld
xchg ecx, eax
cld
xchg ebx, eax
xchg ecx, eax
cwde
std
xchg ecx, eax
clc
xchg ebx, eax
xchg ecx, eax
std
xchg ebx, eax
stc
lahf
cld
and rsp, 0xfffffffffffffff0
call fcn.1400042ca
push r9
push r8
push rdx
xor rdx, rdx
push rcx
push rsi
mov rdx, qword gs:[rdx + 0x60]
mov rdx, qword [rdx + 0x18]
mov rdx, qword [rdx + 0x20]
movzx rcx, word [rdx + 0x4a]
mov rsi, qword [rdx + 0x50]
xor r9, r9
xor rax, rax
lodsb al, byte [rsi]
cmp al, 0x61
jl 0x14000422b
sub al, 0x20
ror r9d, 0xd
add r9d, eax
loop 0x140004221
push rdx
push r9
mov rdx, qword [rdx + 0x20]
mov eax, dword [rdx + 0x3c]
add rax, rdx
cmp word [rax + 0x18], 0x20b
jne 0x1400042bf
mov eax, dword [rax + 0x88]
test rax, rax
je 0x1400042bf
add rax, rdx
mov r8d, dword [rax + 0x20]
push rax
mov ecx, dword [rax + 0x18]
add r8, rdx
jrcxz 0x1400042be
xor r9, r9
dec rcx
mov esi, dword [r8 + rcx*4]
add rsi, rdx
xor rax, rax
lodsb al, byte [rsi]
ror r9d, 0xd
add r9d, eax
cmp al, ah
jne 0x140004275
add r9, qword [rsp + 8]
cmp r9d, r10d
jne 0x140004266
pop rax
mov r8d, dword [rax + 0x24]
add r8, rdx
mov cx, word [r8 + rcx*2]
mov r8d, dword [rax + 0x1c]
add r8, rdx
mov eax, dword [r8 + rcx*4]
pop r8
pop r8
pop rsi
pop rcx
add rax, rdx
pop rdx
pop r8
pop r9
pop r10
sub rsp, 0x20
push r10
jmp rax
pop rax
pop r9
pop rdx
mov rdx, qword [rdx]
jmp 0x140004215