Function at 0x7ff6fff03850
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Hash data using rshash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x7fa0]
mov eax, 0x80a0
call fcn.7ff70000aae0
sub rsp, rax
mov rax, qword [0x7ff70011f780]
xor rax, rsp
mov qword [rbp + 0x7f90], rax
mov r13, rcx
mov qword [rsp + 0x28], rcx
xor r12d, r12d
xor edx, edx
mov r8d, 0x7fff
lea rcx, [rbp - 0x70]
call fcn.7ff700033610
mov dword [rsp + 0x28], 0x7fff
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x7ff6fff03946
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x7ff6fff03946
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0xf65ab5d8
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x7ff6fff03941
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x7ff6fff03920
cmp r8d, 0x2774105d
je 0x7ff6fff0394b
test r9d, r9d
jne 0x7ff6fff03900
mov rax, qword [rax]
jmp 0x7ff6fff038d0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
lea rdx, [rsp + 0x28]
lea rcx, [rbp - 0x70]
call r8
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
lea rax, [rbp - 0x70]
mov r14, 0xffffffffffffffff
mov rbx, r14
nop
inc rbx
cmp byte [rax + rbx], r12b
jne 0x7ff6fff03990
movabs r15, 0x7fffffffffffffff
cmp rbx, r15
ja 0x7ff6fff03d8c
movabs rsi, 0x8000000000000000
mov eax, 0x16
cmp rbx, 0xf
ja 0x7ff6fff039ea
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 0xf
mov r8, rbx
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x50]
call fcn.7ff700032f70
mov byte [rsp + rbx + 0x50], r12b
jmp 0x7ff6fff03a7d
mov rdi, rbx
or rdi, 0xf
cmp rdi, r15
jbe 0x7ff6fff03a1c
mov rdi, r15
lea rax, [rsi + 0x27]
mov rcx, rax
call fcn.7ff70000a150
test rax, rax
je 0x7ff6fff03d7a
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x7ff6fff03a51
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
test rcx, rcx
jne 0x7ff6fff03a31
mov rsi, r12
jmp 0x7ff6fff03a51
cmp rcx, 0x1000
jb 0x7ff6fff03a49
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff6fff03d80
jmp 0x7ff6fff039fd
call fcn.7ff70000a150
mov rsi, rax
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], rdi
mov r8, rbx
lea rdx, [rbp - 0x70]
mov rcx, rsi
call fcn.7ff700032f70
mov byte [rsi + rbx], r12b
movabs rsi, 0x8000000000000000
mov dword [rsp + 0x28], 0x7fff
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x7ff6fff03b16
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x7ff6fff03b16
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x2c5f2465
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x7ff6fff03b11
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x7ff6fff03af0
cmp r8d, 0xa606243a
je 0x7ff6fff03b1b
test r9d, r9d
jne 0x7ff6fff03ad0
mov rax, qword [rax]
jmp 0x7ff6fff03aa0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
lea rdx, [rsp + 0x28]
lea rcx, [rbp - 0x70]
call r8
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x40], xmm1
lea rax, [rbp - 0x70]
inc r14
cmp byte [rax + r14], 0
jne 0x7ff6fff03b54
cmp r14, r15
ja 0x7ff6fff03d92
cmp r14, 0xf
ja 0x7ff6fff03b97
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 0xf
mov r8, r14
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x30]
call fcn.7ff700032f70
mov byte [rsp + r14 + 0x30], 0
jmp 0x7ff6fff03c27
mov rax, r14
or rax, 0xf
cmp rax, r15
jbe 0x7ff6fff03bc6
lea rax, [rsi + 0x27]
mov rcx, rax
call fcn.7ff70000a150
test rax, rax
je 0x7ff6fff03d9e
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x7ff6fff03c04
mov r15, rax
cmp rax, 0x16
mov eax, 0x16
cmovb r15, rax
lea rcx, [r15 + 1]
test rcx, rcx
jne 0x7ff6fff03be4
mov rbx, r12
jmp 0x7ff6fff03c04
cmp rcx, 0x1000
jb 0x7ff6fff03bfc
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x7ff6fff03d86
jmp 0x7ff6fff03ba7
call fcn.7ff70000a150
mov rbx, rax
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r15
mov r8, r14
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.7ff700032f70
mov byte [rbx + r14], 0
lea r8, [rsp + 0x30]
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x70]
call fcn.7ff6fff08c50
nop
mov r8d, 0xf8c9
mov rcx, r12
mov rdi, qword [rbp - 0x78]
mov rbx, qword [rsp + 0x70]
mov r9, qword [rbp - 0x80]
test r9, r9
je 0x7ff6fff03c87
nop word [rax + rax]
lea rax, [rsp + 0x70]
cmp rdi, 0xf
cmova rax, rbx
movsx eax, byte [rax + rcx]
imul r12d, r8d
add r12d, eax
imul r8d, r8d, 0x5c6b7
inc rcx
cmp rcx, r9
jb 0x7ff6fff03c60
btr r12d, 0x1f
mov edx, r12d
mov rcx, r13
call fcn.7ff6fff08ab0
nop
cmp rdi, 0xf
jbe 0x7ff6fff03cd0
lea rdx, [rdi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x7ff6fff03cc7
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff6fff03d98
mov rcx, rbx
call fcn.7ff70000a3cc
nop
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x7ff6fff03d0e
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff6fff03d08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff6fff03d9e
call fcn.7ff70000a3cc
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 0xf
jbe 0x7ff6fff03d47
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x7ff6fff03d42
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x7ff6fff03d7a
call fcn.7ff70000a3cc
mov rax, r13
mov rcx, qword [rbp + 0x7f90]
xor rcx, rsp
call fcn.7ff70000a010
lea r11, [rsp + 0x80a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.7ff7000107e0
int3
call fcn.7ff6fff01830
nop
call fcn.7ff6fff01830
nop
call fcn.7ff6fff018d0
nop
call fcn.7ff6fff018d0
nop
call fcn.7ff7000107e0
nop
call fcn.7ff7000107e0
int3