Function at 0x1401080a7
Capabilities:
Access peb ldr_data
Get process filename
Resolve function by parsing pe exports

Disassembly:
push rax
pushf
mov eax, 0x7b5e1749
pushf
not eax
add eax, 0x6db6cc4a
xor eax, 0x768f555f
rol eax, 0x35
popf
pushf
not eax
add eax, 0x253bc10c
xor eax, 0x6a1f05a3
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x150c4b14
xor eax, 0x6909a4d8
rol eax, 0x71
popf
pushf
not eax
add eax, 0x65ede430
xor eax, 0x7f1eb383
rol eax, 0x6d
popf
cmp eax, 9
jne 0x14010810a
popf
pop rax
jmp 0x140108862
cmp eax, 0x18
jne 0x140108119
popf
pop rax
jmp 0x140109015
cmp eax, 0xd
jne 0x140108128
popf
pop rax
jmp 0x140108a13
cmp eax, 0
jne 0x140108137
popf
pop rax
jmp 0x140108272
cmp eax, 8
jne 0x140108146
popf
pop rax
jmp 0x1401087be
cmp eax, 0x12
jne 0x140108155
popf
pop rax
jmp 0x140108d2d
cmp eax, 0xb
jne 0x140108164
popf
pop rax
jmp 0x14010896a
cmp eax, 6
jne 0x140108173
popf
pop rax
jmp 0x140108681
cmp eax, 0xa
jne 0x140108182
popf
pop rax
jmp 0x1401088f9
cmp eax, 5
jne 0x140108191
popf
pop rax
jmp 0x140108579
cmp eax, 0x14
jne 0x1401081a0
popf
pop rax
jmp 0x140108e72
cmp eax, 0xe
jne 0x1401081af
popf
pop rax
jmp 0x140108b46
cmp eax, 7
jne 0x1401081be
popf
pop rax
jmp 0x14010873c
cmp eax, 2
jne 0x1401081cd
popf
pop rax
jmp 0x1401083a7
cmp eax, 0x13
jne 0x1401081dc
popf
pop rax
jmp 0x140108dd3
cmp eax, 0x10
jne 0x1401081eb
popf
pop rax
jmp 0x140108c04
cmp eax, 0x15
jne 0x1401081fa
popf
pop rax
jmp 0x140108eb0
cmp eax, 0xf
jne 0x140108209
popf
pop rax
jmp 0x140108b81
cmp eax, 0x11
jne 0x140108218
popf
pop rax
jmp 0x140108c98
cmp eax, 3
jne 0x140108227
popf
pop rax
jmp 0x140108456
cmp eax, 4
jne 0x140108236
popf
pop rax
jmp 0x140108511
cmp eax, 0x17
jne 0x140108245
popf
pop rax
jmp 0x140108f9e
cmp eax, 1
jne 0x140108254
popf
pop rax
jmp 0x140108321
cmp eax, 0xc
jne 0x140108263
popf
pop rax
jmp 0x14010899f
cmp eax, 0x16
jne 0x140108272
popf
pop rax
jmp 0x140108f2e
push rbx
push r15
sub rsp, 0x28
mov rax, qword [0x140044250]
mov r15, rcx
mov qword [rsp + 0x58], r12
mov r12d, edx
test rax, rax
jne 0x1401082db
push rax
pushf
mov eax, 0x701f1cb3
pushf
not eax
add eax, 0x71272e2a
xor eax, 0x7ce46420
rol eax, 0x3e
popf
pushf
not eax
add eax, 0x512bce04
xor eax, 0x69c56911
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x2e117f6d
xor eax, 0x72d9855e
rol eax, 0x78
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0xb91fa5ee
pushf
not eax
add eax, 0x4f80566b
xor eax, 0x45edd7e8
rol eax, 0x1e
popf
pushf
not eax
add eax, 0x1322ffd6
xor eax, 0x5a092851
rol eax, 0x3f
popf
pushf
not eax
add eax, 0x22d48e3f
xor eax, 0x6069476e
rol eax, 0xec
popf
jmp 0x1401080fb
mov rax, qword gs:[0x60]
mov qword [rsp + 0x40], rbp
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rdi
mov r8, qword [rax + 0x18]
mov qword [rsp + 0x20], r14
mov rax, qword [r8 + 0x10]
mov rbp, qword [rax]
mov rsi, rbp
nop
push rax
pushf
mov eax, 0x642eb25d
pushf
not eax
add eax, 0x76417713
xor eax, 0x67b3670b
rol eax, 0x9f
popf
pushf
not eax
add eax, 0x6ac98627
xor eax, 0x129c3e77
rol eax, 0xe9
popf
pushf
not eax
add eax, 0x7063d63e
xor eax, 0x3f98cc1
rol eax, 0x83
popf
pushf
not eax
add eax, 0x64f9b752
xor eax, 0x7f41ef3c
rol eax, 3
popf
jmp 0x1401080fb
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
push r11
not r11
sub rdi, r11
pop r11
sub rdi, 1
cmp rdi, r11
je 0x1401083fd
push rax
pushf
mov eax, 0x37177f72
pushf
not eax
add eax, 0x772fd9c0
xor eax, 0x322e0952
rol eax, 0x35
popf
pushf
not eax
add eax, 0x683dc4fa
xor eax, 0x84f7e2f
rol eax, 0x66
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0x5599dd4a
pushf
not eax
add eax, 0x4b6be69e
xor eax, 0x35a9d9a2
rol eax, 0x2e
popf
pushf
not eax
add eax, 0x4cb84e8b
xor eax, 0x1e177a78
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x6b5e599a
xor eax, 0x5f2862a1
rol eax, 0x86
popf
pushf
not eax
add eax, 0x678933ec
xor eax, 0x2ff3e43
rol eax, 0xd8
popf
jmp 0x1401080fb
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x1401084b8
push rax
pushf
mov eax, 0x63c67ead
pushf
not eax
add eax, 0x6d67987d
xor eax, 0x5ecb2940
rol eax, 0xd9
popf
pushf
not eax
add eax, 0x4ff288d
xor eax, 0x4ac19ba3
rol eax, 0x63
popf
pushf
not eax
add eax, 0x4c69cf02
xor eax, 0x2f11adc8
rol eax, 0x13
popf
pushf
not eax
add eax, 0x774463b0
xor eax, 0x3b9e1d58
rol eax, 0x44
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0xa3a29fde
pushf
not eax
add eax, 0x7f911b14
xor eax, 0x7c12e57d
rol eax, 0x7d
popf
pushf
not eax
add eax, 0x6ada20f1
xor eax, 0x3b29f1d2
rol eax, 0xef
popf
pushf
not eax
add eax, 0x5d8b158
xor eax, 0x2e78b9ee
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x399a2998
xor eax, 0x507807f
rol eax, 0xd8
popf
jmp 0x1401080fb
mov r14d, dword [rdi + 0x20]
nop word [rax + rax]
push rax
pushf
mov eax, 0x78442ef0
pushf
not eax
add eax, 0x349e325e
xor eax, 0x479dd31b
rol eax, 0x66
popf
pushf
not eax
add eax, 0x5497c5cc
xor eax, 0x3a303568
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x737f7c
xor eax, 0x7a2a87e9
rol eax, 0xb
popf
pushf
not eax
add eax, 0x6ff69dd9
xor eax, 0x69e435d2
rol eax, 0x79
popf
jmp 0x1401080fb
dec r10d
mov r9d, 0xe5b11770
pushf
not r9d
add r9d, 0x2e1a48d6
xor r9d, 0x3509baad
rol r9d, 0x1f
popf
pushf
not r9d
add r9d, 0x46a906d7
xor r9d, 0x1287c553
rol r9d, 0x47
popf
pushf
not r9d
add r9d, 0x4c7bfef5
xor r9d, 0x28f7c92f
rol r9d, 0xc7
popf
pushf
not r9d
add r9d, 0x344a7e3a
xor r9d, 0x56ed07f0
rol r9d, 0x95
popf
lea rax, [r14 + r10*4]
mov eax, dword [rax + r11]
push r11
not r11
sub rax, r11
pop r11
sub rax, 1
movzx r8d, byte [rax]
inc rax
test r8b, r8b
je 0x14010864e
push rax
pushf
mov eax, 0xdc208ef3
pushf
not eax
add eax, 0x44990ce3
xor eax, 0x509ebbb7
rol eax, 6
popf
pushf
not eax
add eax, 0x47d04273
xor eax, 0x208710c2
rol eax, 0x58
popf
pushf
not eax
add eax, 0x59218d07
xor eax, 0x72f2f34a
rol eax, 0x23
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0x46f6f5fe
pushf
not eax
add eax, 0x7fb38ca7
xor eax, 0x71f310b3
rol eax, 8
popf
pushf
not eax
add eax, 0x61f77f81
xor eax, 0x10716437
rol eax, 0xca
popf
jmp 0x1401080fb
movsx ecx, r8b
lea rax, [rax + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rax - 1]
cmova edx, ecx
push rdx
not dword [rsp]
and dword [rsp], r9d
push r9
not r9d
and edx, r9d
pop r9
or edx, dword [rsp]
add rsp, 8
imul r9d, edx, 0x1000193
test r8b, r8b
jne 0x140108709
push rax
pushf
mov eax, 0x68f3fda4
pushf
not eax
add eax, 0xf28b8a4
xor eax, 0x2b17ab78
rol eax, 0xc0
popf
pushf
not eax
add eax, 0x5c30d2ec
xor eax, 0x7fea98e
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x2d07e87c
xor eax, 0x93a4750
rol eax, 0x19
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0x9c9602a
pushf
not eax
add eax, 0x320a52d4
xor eax, 0x1b2007d4
rol eax, 0x2b
popf
pushf
not eax
add eax, 0x2e79c724
xor eax, 0x26cdddb8
rol eax, 0x3d
popf
jmp 0x1401080fb
cmp r9d, 0xbd2acfbf
je 0x140108778
push rax
pushf
mov eax, 0x72751160
pushf
not eax
add eax, 0x46bb5d92
xor eax, 0x7bc632e6
rol eax, 0x93
popf
pushf
not eax
add eax, 0x112bb1d8
xor eax, 0xa6e35d4
rol eax, 0xa7
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0x5b5a6008
pushf
not eax
add eax, 0x240e2a32
xor eax, 0x22456591
rol eax, 0xbc
popf
pushf
not eax
add eax, 0x4415c8e7
xor eax, 0x6c40025e
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x653158aa
xor eax, 0x4dccbf28
rol eax, 0x22
popf
jmp 0x1401080fb
test r10d, r10d
jne 0x140108809
push rax
pushf
mov eax, 0xa801b144
pushf
not eax
add eax, 0x515bba0e
xor eax, 0x3e448dc6
rol eax, 0x4a
popf
pushf
not eax
add eax, 0x41eee17c
xor eax, 0x822ce99
rol eax, 0xe0
popf
pushf
not eax
add eax, 0x22546a6d
xor eax, 0x525b6ce6
rol eax, 0xf4
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0xc436e1f
pushf
not eax
add eax, 0x6122f05a
xor eax, 0x531d4da
rol eax, 2
popf
pushf
not eax
add eax, 0x65579ec0
xor eax, 0x5074455a
rol eax, 0x29
popf
pushf
not eax
add eax, 0x58b97fef
xor eax, 0x3dcfca15
rol eax, 0x10
popf
pushf
not eax
add eax, 0x7faba61b
xor eax, 0x24cecb7
rol eax, 0xd
popf
jmp 0x1401080fb
mov rax, qword [rsi]
mov rsi, rax
cmp rax, rbp
je 0x1401088b3
push rax
pushf
mov eax, 0x5767aba
pushf
not eax
add eax, 0x79d6f33b
xor eax, 0xaa55d5c
rol eax, 0xfc
popf
pushf
not eax
add eax, 0x6ee96425
xor eax, 0x70c2b18f
rol eax, 0xa7
popf
pushf
not eax
add eax, 0x63c86844
xor eax, 0x43f813d8
rol eax, 0x15
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0x950e2673
pushf
not eax
add eax, 0x24021470
xor eax, 0x9c95efd
rol eax, 0x92
popf
pushf
not eax
add eax, 0x5db9e9ff
xor eax, 0x582e52e5
rol eax, 0x53
popf
pushf
not eax
add eax, 0x362fe063
xor eax, 0x36a1932e
rol eax, 0xdd
popf
jmp 0x1401080fb
cmp qword [rax + 0x30], 0
jne 0x140108937
push rax
pushf
mov eax, 0x53f4e68f
pushf
not eax
add eax, 0xceb4b0b
xor eax, 0x763d6700
rol eax, 0x3b
popf
pushf
not eax
add eax, 0x467b3fa8
xor eax, 0x4404e78c
rol eax, 6
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0x9a13b89a
pushf
not eax
add eax, 0x79977d97
xor eax, 0x2b7d3526
rol eax, 0xcb
popf
pushf
not eax
add eax, 0x29ff913f
xor eax, 0x32703997
rol eax, 0x72
popf
jmp 0x1401080fb
xor eax, eax
push rax
pushf
mov eax, 0xc5fd34eb
pushf
not eax
add eax, 0x601fba06
xor eax, 0xaf62f70
rol eax, 0xa1
popf
pushf
not eax
add eax, 0x3c9591a7
xor eax, 0x1aef3cd1
rol eax, 0x52
popf
jmp 0x1401080fb
mov r14, qword [rsp + 0x20]
mov rdi, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x48]
mov rbp, qword [rsp + 0x40]
mov qword [0x140044250], rax
push rax
pushf
mov eax, 0x5ca2586b
pushf
not eax
add eax, 0x4d9b160c
xor eax, 0x7b11fa02
rol eax, 0xcc
popf
pushf
not eax
add eax, 0x6abc8ec0
xor eax, 0x273a53ed
rol eax, 0xae
popf
pushf
not eax
add eax, 0x1a6cf4e2
xor eax, 0x4c3df2f
rol eax, 0xea
popf
pushf
not eax
add eax, 0x2b65e98a
xor eax, 0x61c1b969
rol eax, 0x51
popf
jmp 0x1401080fb
mov r9d, 0xa94507fa
pushf
not r9d
add r9d, 0x4e44a880
xor r9d, 0x1044820a
rol r9d, 0x7f
popf
pushf
not r9d
add r9d, 0x1b5a05f1
xor r9d, 0x40fd74a9
rol r9d, 0xb2
popf
mov r8d, 0x6fad215a
pushf
not r8d
add r8d, 0x4e0d144d
xor r8d, 0x54620dc5
rol r8d, 0x4c
popf
pushf
not r8d
add r8d, 0xd131a33
xor r8d, 0x5f1fe2a7
rol r8d, 0x2b
popf
pushf
not r8d
add r8d, 0x5100debc
xor r8d, 0xee3085
rol r8d, 0xe3
popf
pushf
not r8d
add r8d, 0x739958c3
xor r8d, 0x34bfd50
rol r8d, 3
popf
mov rdx, r12
xor ecx, ecx
mov rbx, r12
jmp 0x140108abe
call rax
mov r12, qword [rsp + 0x58]
mov r8, rax
test rax, rax
jne 0x140108b13
push rax
pushf
mov eax, 0x49994a49
pushf
not eax
add eax, 0x56c29054
xor eax, 0x50938ab6
rol eax, 0x9b
popf
pushf
not eax
add eax, 0x3b2c7fb7
xor eax, 0x6385709a
rol eax, 0xf2
popf
pushf
not eax
add eax, 0x40ab554c
xor eax, 0x597e665f
rol eax, 0xe2
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0xb43ee108
pushf
not eax
add eax, 0x31dc7d8d
xor eax, 0x404761f6
rol eax, 0x5f
popf
pushf
not eax
add eax, 0x73f6d0e6
xor eax, 0x5409522c
rol eax, 0xc
popf
jmp 0x1401080fb
add rsp, 0x28
pop r15
pop rbx
ret
mov ecx, dword [rdi + 0x24]
push r11
not r11
sub rcx, r11
pop r11
sub rcx, 1
movzx edx, word [rcx + r10*2]
mov ecx, dword [rdi + 0x1c]
push r11
not r11
sub rcx, r11
pop r11
sub rcx, 1
mov eax, dword [rcx + rdx*4]
push r11
not r11
sub rax, r11
pop r11
sub rax, 1
jmp 0x14010899f
mov rcx, r8
cmp r8, r15
jbe 0x140108c52
push rax
pushf
mov eax, 0x8b4b9ffe
pushf
not eax
add eax, 0x54c29886
xor eax, 0x5dc05c85
rol eax, 0x53
popf
pushf
not eax
add eax, 0x1ed3bbeb
xor eax, 0x21b9c018
rol eax, 0x40
popf
pushf
not eax
add eax, 0x183da534
xor eax, 0x3972cf06
rol eax, 0x4e
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0x27059aa3
pushf
not eax
add eax, 0x58951eca
xor eax, 0x26b4e10d
rol eax, 0xae
popf
pushf
not eax
add eax, 0x76be0e89
xor eax, 0x2f317228
rol eax, 0x88
popf
pushf
not eax
add eax, 0x60d94297
xor eax, 0x1e9eafce
rol eax, 0xff
popf
jmp 0x1401080fb
lea rdx, [rbx + r15]
cmp r8, rdx
jae 0x140108cfa
push rax
pushf
mov eax, 0xd51c775b
pushf
not eax
add eax, 0x370e9474
xor eax, 0x13683c6d
rol eax, 0x8a
popf
pushf
not eax
add eax, 0x33b48275
xor eax, 0x7eea6fd
rol eax, 0xea
popf
pushf
not eax
add eax, 0x13743a7f
xor eax, 0xf3b2916
rol eax, 0xc6
popf
pushf
not eax
add eax, 0x55086b66
xor eax, 0x388bd09e
rol eax, 0x5a
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0x3747fba6
pushf
not eax
add eax, 0x7f1689d4
xor eax, 0x583788f2
rol eax, 0xfe
popf
pushf
not eax
add eax, 0x15736be
xor eax, 0x3958f513
rol eax, 0x40
popf
jmp 0x1401080fb
lea rcx, [rbx - 1]
push r8
not r8
sub rcx, r8
pop r8
sub rcx, 1
dec rdx
test rbx, rbx
je 0x140108d7a
push rax
pushf
mov eax, 0xb64f8d6
pushf
not eax
add eax, 0x69f8a886
xor eax, 0x1d7eaa8e
rol eax, 0xb4
popf
pushf
not eax
add eax, 0x709c04e1
xor eax, 0x1fb7c610
rol eax, 0x4c
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0xe5c13d3d
pushf
not eax
add eax, 0x6d85ebeb
xor eax, 0x17f6005d
rol eax, 0x67
popf
pushf
not eax
add eax, 0xfa4be31
xor eax, 0x2d092779
rol eax, 0xe5
popf
pushf
not eax
add eax, 0x75e89d88
xor eax, 0x617d71fe
rol eax, 0xb
popf
pushf
not eax
add eax, 0x55a97282
xor eax, 0x4b13df20
rol eax, 0xcd
popf
jmp 0x1401080fb
movzx eax, byte [rdx]
lea rdx, [rdx - 1]
mov byte [rcx], al
lea rcx, [rcx - 1]
sub rbx, 1
jne 0x140108e19
push rax
pushf
mov eax, 0x8d5c8ad5
pushf
not eax
add eax, 0x39f8cdb7
xor eax, 0x6a251cbb
rol eax, 0xc8
popf
pushf
not eax
add eax, 0x1bf16073
xor eax, 0x62bb05ac
rol eax, 0x2f
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0x5aaf3b87
pushf
not eax
add eax, 0x391420f8
xor eax, 0x2313efad
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x44339585
xor eax, 0x4b6cb77b
rol eax, 0x23
popf
pushf
not eax
add eax, 0x583cf674
xor eax, 0x42a3d380
rol eax, 0x16
popf
pushf
not eax
add eax, 0x435bd14d
xor eax, 0x2bf5a18a
rol eax, 0x55
popf
jmp 0x1401080fb
mov rax, r8
add rsp, 0x28
pop r15
pop rbx
ret
test rbx, rbx
je 0x140108efb
push rax
pushf
mov eax, 0x117faff2
pushf
not eax
add eax, 0x72a97c83
xor eax, 0x5ca4e649
rol eax, 0x9e
popf
pushf
not eax
add eax, 0x24423800
xor eax, 0x70d3869e
rol eax, 0xfa
popf
pushf
not eax
add eax, 0x767f4448
xor eax, 0x17e40e98
rol eax, 0x51
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0x5abbc9a4
pushf
not eax
add eax, 0x36faa8a6
xor eax, 0x7f03f4ad
rol eax, 0x71
popf
pushf
not eax
add eax, 0x59e16ddc
xor eax, 0x28826e1
rol eax, 0x9c
popf
jmp 0x1401080fb
push r8
not r8
add r15, r8
pop r8
add r15, 1
nop word [rax + rax]
push rax
pushf
mov eax, 0xf74ae430
pushf
not eax
add eax, 0x1d3091ab
xor eax, 0x14cb41ad
rol eax, 0xa2
popf
pushf
not eax
add eax, 0x5ef727aa
xor eax, 0x4b18ebe0
rol eax, 0x2a
popf
pushf
not eax
add eax, 0x5047f384
xor eax, 0x4ca5bde7
rol eax, 0xf3
popf
pushf
not eax
add eax, 0x24e411f4
xor eax, 0x161fad0f
rol eax, 0xb9
popf
jmp 0x1401080fb
movzx eax, byte [r15 + rcx]
mov byte [rcx], al
lea rcx, [rcx + 1]
sub rbx, 1
jne 0x140108fe2
push rax
pushf
mov eax, 0xb4ec7d70
pushf
not eax
add eax, 0x3b7f7497
xor eax, 0x624ab626
rol eax, 0x39
popf
pushf
not eax
add eax, 0x1c8b3436
xor eax, 0x1ac19bb3
rol eax, 0x58
popf
jmp 0x1401080fb
push rax
pushf
mov eax, 0x5bc8b682
pushf
not eax
add eax, 0x692cce19
xor eax, 0x27a21901
rol eax, 0xe8
popf
pushf
not eax
add eax, 0x23dcaf37
xor eax, 0x5d76180c
rol eax, 0x2d
popf
jmp 0x1401080fb
mov rax, r8
add rsp, 0x28
pop r15
pop rbx
ret