Function at 0x140122180
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x168]
sub rsp, 0x250
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x140714d80]
xor rax, rsp
mov qword [rbp + 0x130], rax
mov rbx, rcx
xor esi, esi
mov dword [rsp + 0x48], esi
call fcn.1401219e0
lea rcx, [rbp + 0xd0]
call fcn.14013af70
nop
mov dword [rsp + 0x70], 0x7a647d37
mov dword [rsp + 0x74], 0x7c7e6470
mov word [rsp + 0x78], 0x24
mov byte [rsp + 0x7a], 1
mov dword [rsp + 0x50], 0x79727c37
mov dword [rsp + 0x54], 0x1002b70
mov dword [rbp + 0xa0], 0x67766137
mov dword [rbp + 0xa4], 0x76787f66
mov dword [rbp + 0xa8], 0x267e70
mov byte [rbp + 0xac], 1
mov dword [rsp + 0x48], 0x7d647a37
mov dword [rsp + 0x4c], 0x1002b71
movdqa xmm0, xmmword [0x140381580]
movdqu xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x70], 0x575148
mov byte [rbp - 0x6c], 1
lea r8, [rsp + 0x48]
lea rdx, [rbp - 0x80]
lea rcx, [rbp - 0x40]
call fcn.1401178b0
nop
lea rdx, [rbp + 0xd0]
cmp qword [rbp + 0xe8], 0xf
cmova rdx, qword [rbp + 0xd0]
mov r8, qword [rbp + 0xe0]
mov rcx, rax
call fcn.14006ec50
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x50], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], sil
lea r8, [rbp + 0xa0]
lea rdx, [rbp - 0x60]
lea rcx, [rbp + 0x20]
call fcn.140117dd0
nop
lea rdx, [rbx + 0x240]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x1401222cc
mov rdx, qword [rdx]
mov rcx, rax
call fcn.14006ec50
movups xmm0, xmmword [rax]
movups xmmword [rbp], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x10], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x50]
lea rdx, [rbp]
lea rcx, [rbp + 0x80]
call fcn.1401172d0
nop
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x140122315
mov rdx, qword [rbx]
mov r8, qword [rbx + 0x10]
mov rcx, rax
call fcn.14006ec50
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x60], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x70], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r8, [rsp + 0x70]
lea rdx, [rbp + 0x60]
lea rcx, [rbp + 0x40]
call fcn.1401177b0
nop
lea rdi, [rbx + 0x20]
mov rdx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140122363
mov rdx, qword [rdi]
mov r8, qword [rdi + 0x10]
mov rcx, rax
call fcn.14006ec50
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x110], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x120], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp + 0x58]
cmp rdx, 0xf
jbe 0x1401223d1
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401223cc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401223cc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqa xmm6, xmmword [0x14037a260]
movdqu xmmword [rbp + 0x50], xmm6
mov byte [rbp + 0x40], 0
mov rdx, qword [rbp + 0x78]
cmp rdx, 0xf
jbe 0x140122421
inc rdx
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012241b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14012241b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
nop
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x140122465
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140122460
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140122460
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp + 0x90], xmm6
mov byte [rbp + 0x80], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x1401224b3
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401224ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401224ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
nop
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x1401224f1
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401224ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1401224ec
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp + 0x30], xmm6
mov byte [rbp + 0x20], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140122539
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140122533
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140122533
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140122577
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140122572
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140122572
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp - 0x30], xmm6
mov byte [rbp - 0x40], 0
lea rax, [rbp - 0x60]
mov qword [rsp + 0x60], rax
lea rdx, [rbx + 0x60]
lea rcx, [rbp - 0x60]
call fcn.1400df200
mov rbx, rax
lea rdx, [rbp + 0x110]
lea rcx, [rbp]
call fcn.1400df200
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rbp + 0xb0]
call fcn.140132de0
nop
lea rax, [rbp - 0x80]
mov qword [rsp + 0x38], rax
lea rdx, [rbp + 0xb0]
cmp qword [rbp + 0xc8], 0xf
cmova rdx, qword [rbp + 0xb0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
mov qword [rbp - 0x68], rsi
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1401225f3
lea rcx, [rbp - 0x80]
call fcn.14006d8c0
nop
lea rax, [rbp - 0x40]
mov qword [rsp + 0x60], rax
lea rdx, [0x140713ea8]
lea rcx, [rbp - 0x40]
call fcn.1400df200
mov rbx, rax
lea rdx, [0x140713e88]
lea rcx, [rbp + 0x20]
call fcn.1400df200
nop
lea r8, [rbp - 0x80]
mov rdx, rbx
mov rcx, rax
call fcn.14011f4e0
xor eax, 0xa5a5
mov edx, eax
shr eax, 8
movzx r8d, al
movzx eax, dl
movabs r15, 0xcbf29ce484222325
xor rax, r15
movabs r14, 0x100000001b3
imul rax, r14
xor r8, rax
imul r8, r14
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor r8, rcx
imul r8, r14
shr rdx, 0x18
xor r8, rdx
imul r8, r14
cmp r8w, 0xdf7f
jne 0x140122d0f
mov qword [rbp - 8], rsi
mov byte [rsp + 0x20], 0
mov r9b, 1
lea r8, [rbp - 0x40]
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0xa0]
call fcn.14011b810
nop
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.140116b60
nop
mov dword [rsp + 0x3c], 0x646972
mov dword [rsp + 0x38], 0x656e776f
mov byte [rsp + 0x40], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x3f]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x80]
call fcn.14006d490
nop
movzx ecx, byte [rbp + 0xa0]
test cl, cl
jne 0x140122723
mov byte [rbp + 0xa0], 1
call fcn.140119e60
mov qword [rbp + 0xa8], rax
movzx ecx, byte [rbp + 0xa0]
jmp 0x14012272a
mov rax, qword [rbp + 0xa8]
cmp cl, 1
jne 0x14012273d
lea rdx, [rbp - 0x80]
mov rcx, rax
call fcn.14011efd0
jmp 0x140122742
mov rax, qword [rsp + 0x38]
lea rdx, [rsp + 0x70]
mov rcx, rax
call fcn.14011ec00
movzx ebx, al
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140122790
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012278b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14012278b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
movzx edx, byte [rsp + 0x70]
lea rcx, [rsp + 0x78]
call fcn.140126380
test bl, bl
jne 0x140122869
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140122846
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140122846
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xb8a31a87
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140122841
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140122820
cmp r8d, 0x58f211c7
je 0x14012284b
test r9d, r9d
jne 0x140122800
mov rax, qword [rax]
jmp 0x1401227d0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 8
call rdx
mov dword [rsp + 0x3c], 0x656761
mov dword [rsp + 0x38], 0x7373656d
mov byte [rsp + 0x40], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x3f]
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x80]
call fcn.14006d490
nop
movzx ecx, byte [rbp + 0xa0]
test cl, cl
jne 0x1401228be
mov byte [rbp + 0xa0], 1
call fcn.140119e60
mov qword [rbp + 0xa8], rax
movzx ecx, byte [rbp + 0xa0]
jmp 0x1401228c5
mov rax, qword [rbp + 0xa8]
cmp cl, 1
jne 0x1401228d8
lea rdx, [rbp - 0x80]
mov rcx, rax
call fcn.14011efd0
jmp 0x1401228dd
mov rax, qword [rsp + 0x38]
xorps xmm0, xmm0
movups xmmword [rbp + 0xf0], xmm0
movdqu xmmword [rbp + 0x100], xmm6
mov byte [rbp + 0xf0], 0
mov dword [rsp + 0x48], 0xbfc
cmp byte [rax], 3
jne 0x140122915
mov rdx, qword [rax + 8]
lea rax, [rbp + 0xf0]
cmp rax, rdx
je 0x140122933
jmp 0x140122918
mov rdx, rsi
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0xf
jbe 0x140122926
mov rdx, qword [rdx]
lea rcx, [rbp + 0xf0]
call fcn.14006ece0
nop
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140122971
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14012296c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14012296c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
mov word [rsp + 0x4b], 0x65
mov word [rsp + 0x48], 0x6f63
mov byte [rsp + 0x4a], 0x64
mov byte [rsp + 0x4d], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x4c]
lea rdx, [rsp + 0x48]
lea rcx, [rbp - 0x40]
call fcn.14006d490
nop
movzx ecx, byte [rbp + 0xa0]
test cl, cl
jne 0x1401229d2
mov byte [rbp + 0xa0], 1
call fcn.140119e60
mov qword [rbp + 0xa8], rax
movzx ecx, byte [rbp + 0xa0]
jmp 0x1401229d9
mov rax, qword [rbp + 0xa8]
cmp cl, 1
jne 0x1401229ec
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.14011efd0
jmp 0x1401229f1
mov rax, qword [rsp + 0x38]
mov rcx, rax
call fcn.140117200
mov edx, eax
shr eax, 8
movzx edi, al
movzx eax, dl
xor rax, r15
imul rax, r14
xor rdi, rax
imul rdi, r14
mov eax, edx
shr eax, 0x10
movzx ecx, al
xor rdi, rcx
imul rdi, r14
shr rdx, 0x18
xor rdi, rdx
imul rdi, r14
mov rdx, qword [rbp - 0x28]
cmp rdx, 0xf
jbe 0x140122a6a
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140122a65
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140122a65
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
mov dword [rsp + 0x64], 0x737365
mov dword [rsp + 0x60], 0x63637573
mov byte [rsp + 0x68], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x67]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x60]
call fcn.14006d490
nop
mov ebx, 0xf7fd
mov dword [rsp + 0x48], ebx
movzx ecx, byte [rbp + 0xa0]
test cl, cl
jne 0x140122ac8
mov byte [rbp + 0xa0], 1
call fcn.140119e60
mov qword [rbp + 0xa8], rax
movzx ecx, byte [rbp + 0xa0]
jmp 0x140122acf
mov rax, qword [rbp + 0xa8]
cmp cl, 1
jne 0x140122ae5
lea rdx, [rbp - 0x60]
mov rcx, rax
call fcn.14011efd0
mov rcx, rax
jmp 0x140122aea
mov rcx, qword [rsp + 0x38]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, rsi
cmp byte [rax], 0
je 0x140122ba2
mov dword [rsp + 0x54], 0x737365
mov dword [rsp + 0x50], 0x63637573
mov byte [rsp + 0x58], 0
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x57]
lea rdx, [rsp + 0x50]
lea rcx, [rbp - 0x40]
call fcn.14006d490
nop
mov ebx, 0x3f7ff
mov dword [rsp + 0x48], ebx
movzx ecx, byte [rbp + 0xa0]
test cl, cl
jne 0x140122b5c
mov byte [rbp + 0xa0], 1
call fcn.140119e60
mov qword [rbp + 0xa8], rax
movzx ecx, byte [rbp + 0xa0]
jmp 0x140122b63
mov rax, qword [rbp + 0xa8]
cmp cl, 1
jne 0x140122b79
lea rdx, [rbp - 0x40]
mov rcx, rax
call fcn.14011efd0
mov rcx, rax
jmp 0x140122b7e
mov rcx, qword [rsp + 0x38]
lea rax, [rcx + 8]
cmp byte [rcx], 4
cmovne rax, rsi
cmp byte [rax], 0
je 0x140122b9d
movabs rax, 0xcbe5c873d26645f1
cmp rdi, rax
je 0x140122ba2
xor dil, dil
jmp 0x140122ba5
mov dil, 1
test bl, 2
je 0x140122bb7
and ebx, 0xfffffffd
lea rcx, [rbp - 0x40]
call fcn.14006ead0
nop
test bl, 1
je 0x140122bc5
lea rcx, [rbp - 0x60]
call fcn.14006ead0
test dil, dil
je 0x140122c3a
lea rdx, str.success
lea rcx, [rbp + 0xa0]
call fcn.140116fc0
lea rcx, [rax + 8]
cmp byte [rax], 4
cmovne rcx, rsi
movzx ebx, byte [rcx]
lea rcx, [rbp + 0xf0]
call fcn.14006ead0
nop
movzx edx, byte [rbp + 0xa0]
lea rcx, [rbp + 0xa8]
call fcn.140126380
nop
lea rcx, [rbp + 0xb0]
call fcn.14006ead0
nop
lea rcx, [rbp + 0x110]
call fcn.14006ead0
nop
lea rcx, [rbp + 0xd0]
call fcn.14006ead0
movzx eax, bl
jmp 0x140122e96
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140122cc6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140122cc6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x75ea3455
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140122cc1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140122ca0
cmp r8d, 0x393193d5
je 0x140122ccb
test r9d, r9d
jne 0x140122c80
mov rax, qword [rax]
jmp 0x140122c50
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 9
call rdx
nop
lea rcx, [rbp + 0xf0]
call fcn.14006ead0
nop
movzx edx, byte [rbp + 0xa0]
lea rcx, [rbp + 0xa8]
call fcn.140126380
jmp 0x140122dba
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140122d96
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140122d96
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
mov r8d, 0x8ba29a64
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140122d91
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140122d70
cmp r8d, 0x6e4f7974
je 0x140122d9b
test r9d, r9d
jne 0x140122d50
mov rax, qword [rax]
jmp 0x140122d20
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 7
call rdx
nop
mov rdx, qword [rbp + 0xc8]
cmp rdx, 0xf
jbe 0x140122dfe
inc rdx
mov rcx, qword [rbp + 0xb0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140122df9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140122df9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
movdqu xmmword [rbp + 0xc0], xmm6
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp + 0x128]
cmp rdx, 0xf
jbe 0x140122e52
inc rdx
mov rcx, qword [rbp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140122e4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140122e4c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
nop
mov rdx, qword [rbp + 0xe8]
cmp rdx, 0xf
jbe 0x140122e96
inc rdx
mov rcx, qword [rbp + 0xd0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140122e91
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140122e91
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
mov rcx, qword [rbp + 0x130]
xor rcx, rsp
call fcn.140225440
lea r11, [rsp + 0x250]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop rbp
ret