Function at 0x14000d610
Capabilities:
Access peb ldr_data
Encode data using xor
Get kernel32 base address
Get process filename
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rdi
push r12
push r13
push r14
lea rbp, [rsp - 0x100]
sub rsp, 0x200
mov rax, qword [0x14002b040]
xor rax, rsp
mov qword [rbp + 0xf0], rax
movabs rax, 0x43f49ac5c5f29659
mov dword [rsp + 0x20], 1
mov qword [rsp + 0x20], rax
movabs r14, 0x6c20203827185e8f
mov rax, qword [rsp + 0x20]
movabs r12, 0x6d98f6a1a09bf42a
mov qword [rsp + 0x30], rax
movabs r13, 0x6c202038277432eb
mov qword [rsp + 0x20], r14
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x30], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rsp + 0x30]
mov qword [rbp + 0x38], rax
xorps xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000d747
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000d747
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xc30cfe94
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000d742
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000d720
cmp r8d, 0x35a0b41d
je 0x14000d74c
test r9d, r9d
jne 0x14000d700
mov rax, qword [rax]
jmp 0x14000d6d0
mov ecx, dword [rbx + 0x24]
add rcx, r10
mov qword [rsp + 0x230], rsi
mov qword [rsp + 0x238], r15
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rsp + 0x30]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
movabs rsi, 0x15f399cec8fc824b
movabs r15, 0x6c2020384b1856c5
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x20], r15
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x40], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rsp + 0x40]
mov qword [rbp + 0x48], rax
xorps xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000d877
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000d877
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x309300db
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000d872
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000d850
cmp r8d, 0xbcd2e6fe
je 0x14000d87c
test r9d, r9d
jne 0x14000d830
mov rax, qword [rax]
jmp 0x14000d800
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rsp + 0x40]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
movabs rax, 0xcf399cec8fc824b
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x20], r15
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x50], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rsp + 0x50]
mov qword [rbp + 0x58], rax
xorps xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rsp + 0x50], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000d987
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000d987
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x74dee88d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000d982
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000d960
cmp r8d, 0xdeabd2a4
je 0x14000d98c
test r9d, r9d
jne 0x14000d940
mov rax, qword [rax]
jmp 0x14000d910
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rsp + 0x50]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
movabs rax, 0x1fcd8cac8e39a59
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x60], rax
movabs rax, 0x6c20203827743287
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x60], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rsp + 0x60]
mov qword [rbp + 0x68], rax
xorps xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000daa7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000daa7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x617804a7
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000daa2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000da80
cmp r8d, 0xdd2507d2
je 0x14000daac
test r9d, r9d
jne 0x14000da60
mov rax, qword [rax]
jmp 0x14000da30
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rsp + 0x60]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
movabs rax, 0x43e89ac4c8fc964e
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x20], r14
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x70], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rsp + 0x70]
mov qword [rbp + 0x78], rax
xorps xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000dbb7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000dbb7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x89c3c045
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000dbb2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000db90
cmp r8d, 0x39d89cbc
je 0x14000dbbc
test r9d, r9d
jne 0x14000db70
mov rax, qword [rax]
jmp 0x14000db40
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rsp + 0x70]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
movabs rax, 0x43ff99cdfff2844b
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x20], r14
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x78], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x80], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rbp - 0x80]
mov qword [rbp + 0x88], rax
xorps xmm0, xmmword [rbp + 0x80]
movdqa xmmword [rbp - 0x80], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000dcc7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000dcc7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x15b1b6b
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000dcc2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000dca0
cmp r8d, 0x31744e4e
je 0x14000dccc
test r9d, r9d
jne 0x14000dc80
mov rax, qword [rax]
jmp 0x14000dc50
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0x80]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x70], rax
mov qword [rsp + 0x20], r15
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x68], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x90], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rbp - 0x70]
mov qword [rbp + 0x98], rax
xorps xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp - 0x70], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000ddd7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000ddd7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xad57f4f5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000ddd2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000ddb0
cmp r8d, 0xe67506ac
je 0x14000dddc
test r9d, r9d
jne 0x14000dd90
mov rax, qword [rax]
jmp 0x14000dd60
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0x70]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
movabs rax, 0xeec97d6ffe99d4e
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x60], rax
movabs rax, 0x6c2020544b101c83
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x58], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rbp - 0x60]
mov qword [rbp + 0xa8], rax
xorps xmm0, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x60], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000def7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000def7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x18dbb57f
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000def2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000ded0
cmp r8d, 0xfa53c9ea
je 0x14000defc
test r9d, r9d
jne 0x14000deb0
mov rax, qword [rax]
jmp 0x14000de80
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0x60]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
movabs rax, 0x43fb93d3cfef875a
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x50], rax
mov qword [rsp + 0x20], r14
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x48], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xb0], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rbp - 0x50]
mov qword [rbp + 0xb8], rax
xorps xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x50], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000e007
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000e007
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xc0af582c
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000e002
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000dfe0
cmp r8d, 0xd603aa75
je 0x14000e00c
test r9d, r9d
jne 0x14000dfc0
mov rax, qword [rax]
jmp 0x14000df90
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0x50]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
movabs rax, 0x43f395c4c8f8995c
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x40], rax
mov qword [rsp + 0x20], r14
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xc0], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp + 0xc8], rax
xorps xmm0, xmmword [rbp + 0xc0]
movdqa xmmword [rbp - 0x40], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000e117
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000e117
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x592b9dee
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000e112
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000e0f0
cmp r8d, 0xbe9d5ef3
je 0x14000e11c
test r9d, r9d
jne 0x14000e0d0
mov rax, qword [rax]
jmp 0x14000e0a0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0x40]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
movabs rax, 0x9b68fd1d3fe845d
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x30], rax
movabs rax, 0x6c20203827745e87
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x28], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xd0], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rbp - 0x30]
mov qword [rbp + 0xd8], rax
xorps xmm0, xmmword [rbp + 0xd0]
movdqa xmmword [rbp - 0x30], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000e237
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000e237
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x69cfb008
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000e232
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000e210
cmp r8d, 0x392be1c9
je 0x14000e23c
test r9d, r9d
jne 0x14000e1f0
mov rax, qword [rax]
jmp 0x14000e1c0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0x30]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
movabs rax, 0x59ae82d3d6ff9949
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x20], rax
mov qword [rsp + 0x20], r15
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x18], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0xe0], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rbp - 0x20]
mov qword [rbp + 0xe8], rax
xorps xmm0, xmmword [rbp + 0xe0]
movdqa xmmword [rbp - 0x20], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000e347
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000e347
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x8fd84c1
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000e342
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000e320
cmp r8d, 0x5ddf0870
je 0x14000e34c
test r9d, r9d
jne 0x14000e300
mov rax, qword [rax]
jmp 0x14000e2d0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0x20]
add rax, r10
call rax
test rax, rax
jne 0x14000e482
movabs rax, 0x5fab82d3d6ff9949
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rbp - 0x10], rax
mov qword [rsp + 0x20], r15
mov rax, qword [rsp + 0x20]
mov qword [rbp - 8], rax
mov qword [rsp + 0x20], r12
mov rax, qword [rsp + 0x20]
mov qword [rbp + 0x10], rax
mov qword [rsp + 0x20], r13
mov rax, qword [rsp + 0x20]
movdqa xmm0, xmmword [rbp - 0x10]
mov qword [rbp + 0x18], rax
xorps xmm0, xmmword [rbp + 0x10]
movdqa xmmword [rbp - 0x10], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000e457
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000e457
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x8f7530ff
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000e452
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14000e430
cmp r8d, 0xee83256a
je 0x14000e45c
test r9d, r9d
jne 0x14000e410
mov rax, qword [rax]
jmp 0x14000e3e0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0x10]
add rax, r10
call rax
test rax, rax
je 0x14000e5c8
mov rdi, qword [0x1402af5f8]
lea rsi, [0x1402af5e8]
xor eax, eax
movabs rbx, 0x7fffffffffffffff
cmp qword [0x1402af600], 0xf
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
cmova rsi, qword [0x1402af5e8]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0x28], rax
cmp rdi, rbx
ja 0x14000e5ff
mov qword [rbp + 0x28], 0xf
cmp rdi, 0xf
ja 0x14000e4e2
mov qword [rbp + 0x20], rdi
movups xmm0, xmmword [rsi]
movups xmmword [rbp + 0x10], xmm0
jmp 0x14000e571
mov rcx, rdi
or rcx, 0xf
cmp rcx, rbx
jbe 0x14000e51a
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400178f4
mov rcx, rax
test rax, rax
je 0x14000e545
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14000e556
mov edx, 0x16
mov rbx, rcx
cmp rcx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000e54c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000e605
jmp 0x14000e4fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14000e556
call fcn.1400178f4
lea r8, [rdi + 1]
mov qword [rbp + 0x10], rax
mov rdx, rsi
mov qword [rbp + 0x20], rdi
mov rcx, rax
mov qword [rbp + 0x28], rbx
call sub.VCRUNTIME140.dll_memcpy
lea r8, [rbp + 0x10]
lea rdx, [rbp - 0x10]
lea rcx, [0x1402af448]
call fcn.140002120
mov rdx, qword [rbp + 8]
cmp rdx, 0xf
jbe 0x14000e5c3
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e5be
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e5be
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140017770
mov eax, 1
mov r15, qword [rsp + 0x238]
mov rsi, qword [rsp + 0x230]
mov rcx, qword [rbp + 0xf0]
xor rcx, rsp
call fcn.140017750
mov rbx, qword [rsp + 0x240]
add rsp, 0x200
pop r14
pop r13
pop r12
pop rdi
pop rbp
ret
call fcn.140002000
int3
call fcn.140001f60
int3