Function at 0x140013c00
Capabilities:
Access peb ldr_data
Encode data using xor
Get kernel32 base address
Hash data using fnv
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push rbp
push rbx
push r12
push r14
lea rbp, [rsp - 0x3f]
sub rsp, 0xc8
mov rax, qword [0x14011b8b0]
xor rax, rsp
mov qword [rbp + 0x2f], rax
xor r14d, r14d
lea rcx, str..TitanHide
mov qword [rsp + 0x30], r14
xor r12b, r12b
mov dword [rsp + 0x28], r14d
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 3
mov edx, 0xc0000000
mov byte [rbp - 0x49], r12b
mov qword [rbp - 0x21], r14
mov qword [rbp - 0x41], r14
mov qword [rbp - 0x39], r14
mov dword [rbp - 0x29], r14d
mov dword [rbp + 0x27], r14d
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x140013cb4
mov dword [rbp - 0x19], 2
lea r9, [rbp + 0x27]
mov rax, qword gs:[0x30]
lea r8d, [r14 + 0x10]
lea rdx, [rbp - 0x19]
mov qword [rsp + 0x20], r14
mov rcx, qword [rax + 0x40]
mov qword [rbp - 0x11], rcx
mov rcx, rbx
mov dword [rbp - 0x15], 0x3ff
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp - 9], 0x30
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x17], xmm0
mov qword [rbp - 1], r14
mov dword [rbp + 0xf], r14d
mov qword [rbp + 7], r14
mov rax, qword gs:[0x60]
mov qword [rsp + 0xf0], rsi
mov qword [rsp + 0xf8], rdi
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140123fd0]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140013d97
movsxd rax, dword [r10 + 0x3c]
mov r11d, r14d
mov edi, dword [rax + r10 + 0x88]
mov esi, dword [rdi + r10 + 0x20]
nop dword [rax + rax]
mov ebx, r11d
mov r9d, 0x36b29d60
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140013d71
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140013d40
cmp r9d, 0x38528d16
je 0x140013d76
inc r11d
jmp 0x140013d20
mov ecx, dword [rdi + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x140123fd0], rax
xor r9d, r9d
mov qword [rsp + 0x100], r13
lea r8, [rbp - 9]
mov qword [rsp + 0xc0], r15
lea rcx, [rbp - 0x21]
lea edx, [r9 + 8]
call rax
test eax, eax
js 0x14001480d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x1401240b8]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140013e77
movsxd rax, dword [r10 + 0x3c]
mov r11d, r14d
mov edi, dword [rax + r10 + 0x88]
mov esi, dword [rdi + r10 + 0x20]
nop dword [rax]
mov ebx, r11d
mov r9d, 0x1f3688d4
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140013e51
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140013e20
cmp r9d, 0xdca41029
je 0x140013e56
inc r11d
jmp 0x140013e00
mov ecx, dword [rdi + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x1401240b8], rax
mov r9d, 4
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x29]
mov rcx, qword [rbp - 0x21]
lea edx, [r9 - 2]
call rax
mov edx, dword [rbp - 0x29]
xor ecx, ecx
mov r8d, 0x1000
lea r9d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r15, rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov rax, qword [rcx]
test r15, r15
jne 0x140013f75
mov r10, qword [rax + 0x30]
mov rax, qword [0x140123ff0]
test rax, rax
jne 0x140013f68
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
mov edi, dword [rbx + r10 + 0x20]
nop
mov r11d, r14d
mov r9d, 0x380afa0e
lea rax, [rdi + r11*4]
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140013f41
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140013f10
cmp r9d, 0xbefa6f80
je 0x140013f46
inc r14d
jmp 0x140013ef0
mov ecx, dword [rbx + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + r11*2]
mov ecx, dword [rbx + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x140123ff0], rax
mov rcx, qword [rbp - 0x21]
call rax
xor al, al
jmp 0x140014811
mov r11, qword [rax + 0x30]
mov rax, qword [0x1401240e0]
test rax, rax
jne 0x140014017
movsxd rax, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
mov ebx, r10d
mov r9d, 0xbd02b79
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140013ff1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140013fc0
cmp r9d, 0x64261d9e
je 0x140013ff6
inc r10d
jmp 0x140013fa0
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x1401240e0], rax
mov r9d, dword [rbp - 0x29]
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x20], rcx
mov r8, r15
mov rcx, qword [rbp - 0x21]
mov edx, 2
call rax
mov edi, dword [r15 + 0x14]
cmp edi, 1
je 0x1400140b3
mov rdx, qword [r15 + 8]
test rdx, rdx
je 0x1400140b3
lea r10, str.DebugObject
sub r10, rdx
nop
movzx r8d, word [rdx]
movzx r9d, word [rdx + r10]
lea r11d, [r8 - 0x41]
cmp r11d, 0x19
lea ecx, [r8 + 0x20]
lea ebx, [r9 - 0x41]
cmova ecx, r8d
lea eax, [r9 + 0x20]
cmp ebx, 0x19
cmova eax, r9d
cmp eax, ecx
jne 0x140014094
test r9w, r9w
je 0x14001408e
test r8w, r8w
je 0x140014094
add rdx, 2
jmp 0x140014050
test r8w, r8w
je 0x1400140af
cmp r11d, 0x19
lea ecx, [r8 + 0x20]
lea eax, [r9 + 0x20]
cmova ecx, r8d
cmp ebx, 0x19
cmova eax, r9d
cmp eax, ecx
jne 0x1400140b3
mov byte [rbp - 0x49], 1
mov r13d, dword [r15 + 0x10]
xor edx, edx
mov r8d, 0x8000
mov qword [rbp - 0x19], r13
mov rcx, r15
mov qword [rbp - 0x31], rdi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140123fb0]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x140014187
movsxd rax, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
mov ebx, r10d
mov r9d, 0x96e5555
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140014161
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140014130
cmp r9d, 0x363388aa
je 0x140014166
inc r10d
jmp 0x140014110
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140123fb0], rax
mov r9d, 4
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x29]
xor ecx, ecx
lea edx, [r9 - 1]
call rax
mov edx, dword [rbp - 0x29]
xor ecx, ecx
mov r8d, 0x1000
lea r9d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r12, rax
test rax, rax
je 0x140014360
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140124060]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x140014277
movsxd rax, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop
mov ebx, r10d
mov r9d, 0x11eabb88
lea rax, [rsi + rbx*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140014251
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140014220
cmp r9d, 0xcdcda97d
je 0x140014256
inc r10d
jmp 0x140014200
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140124060], rax
mov r9d, dword [rbp - 0x29]
mov r8, r12
mov edx, 3
mov qword [rsp + 0x20], r14
mov rcx, 0xffffffffffffffff
call rax
test eax, eax
jns 0x140014369
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140124028]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x140014349
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
mov edi, dword [rbx + r10 + 0x20]
mov r11d, r14d
mov r9d, 0x6150646d
lea rax, [rdi + r11*4]
mov r8d, dword [rax + r10]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140014322
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x1400142f1
cmp r9d, 0x5dbe48ed
je 0x140014327
inc r14d
jmp 0x1400142d2
mov ecx, dword [rbx + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + r11*2]
mov ecx, dword [rbx + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x140124028], rax
mov rcx, qword [rbp - 0x21]
call rax
xor edx, edx
mov r8d, 0x8000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualFree]
movzx eax, byte [rbp - 0x49]
jmp 0x140014811
mov eax, dword [r12]
lea r10, [r12 + 8]
test eax, eax
je 0x140014446
mov r15d, eax
mov r13, r14
mov rsi, qword [r10 + 8]
mov rdx, rsi
test rsi, rsi
je 0x140014413
lea r11, str.DebugObject
sub r11, rsi
nop word [rax + rax]
movzx r8d, word [rdx]
movzx r9d, word [r11 + rdx]
lea edi, [r8 - 0x41]
cmp edi, 0x19
lea ecx, [r8 + 0x20]
lea ebx, [r9 - 0x41]
cmova ecx, r8d
lea eax, [r9 + 0x20]
cmp ebx, 0x19
cmova eax, r9d
cmp eax, ecx
jne 0x1400143e3
test r9w, r9w
je 0x1400143dd
test r8w, r8w
je 0x1400143e3
add rdx, 2
jmp 0x1400143a0
test r8w, r8w
je 0x1400143fd
cmp ebx, 0x19
lea ecx, [r9 + 0x20]
lea eax, [r8 + 0x20]
cmova ecx, r9d
cmp edi, 0x19
cmova eax, r8d
cmp ecx, eax
jne 0x140014413
mov eax, dword [r10 + 0x14]
test eax, eax
je 0x140014408
add r13, rax
mov eax, dword [r10 + 0x10]
test eax, eax
je 0x140014413
add r14, rax
movzx ecx, word [r10 + 2]
add rcx, rsi
mov rax, rcx
and rax, 0xfffffffffffffff8
cmp rax, rcx
lea r10, [rax + 8]
cmove r10, rax
sub r15, 1
jne 0x140014380
mov qword [rbp - 0x39], r14
xor r14d, r14d
mov qword [rbp - 0x41], r13
mov r13, qword [rbp - 0x19]
xor edx, edx
mov r8d, 0x8000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140123ff8]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x140014517
movsxd rax, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
mov ebx, r10d
mov r9d, 0x7e94130
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + rsi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1400144f1
nop dword [rax]
nop word [rax + rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x1400144c0
cmp r9d, 0x30330475
je 0x1400144f6
inc r10d
jmp 0x140014493
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140123ff8], rax
mov r9d, 4
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x20], rcx
lea r8, [rbp - 0x29]
xor ecx, ecx
lea edx, [r9 - 1]
call rax
cmp eax, 0xc0000004
je 0x14001461d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140124080]
mov r11, qword [rcx + 0x30]
test rax, rax
jne 0x1400145f7
movsxd rax, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rax + r11 + 0x88]
mov esi, dword [rdi + r11 + 0x20]
nop dword [rax]
mov ebx, r10d
mov r9d, 0x5b4ef061
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + rsi]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1400145d1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x1400145a0
cmp r9d, 0xaaa00251
je 0x1400145d6
inc r10d
jmp 0x140014580
mov ecx, dword [rdi + r11 + 0x24]
add rcx, r11
movzx edx, word [rcx + rbx*2]
mov ecx, dword [rdi + r11 + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
mov qword [0x140124080], rax
mov rcx, qword [rbp - 0x21]
call rax
mov rax, qword [rbp - 0x41]
cmp rax, 1
jb 0x140014616
mov r12, qword [rbp - 0x31]
cmp rax, r12
jb 0x140014616
cmp qword [rbp - 0x39], r13
jae 0x140014621
mov al, 1
jmp 0x140014811
mov r12, qword [rbp - 0x31]
mov edx, dword [rbp - 0x29]
xor ecx, ecx
mov r8d, 0x1000
lea r9d, [rcx + 4]
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rcx, qword gs:[0x60]
mov rsi, rax
mov r10, qword [0x140124040]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rdx, qword [rcx]
mov r11, qword [rdx + 0x30]
test r10, r10
jne 0x1400146f9
movsxd rcx, dword [r11 + 0x3c]
mov r10d, r14d
mov edi, dword [rcx + r11 + 0x88]
mov r15d, dword [rdi + r11 + 0x20]
nop word [rax + rax]
mov ebx, r10d
mov r9d, 0x53e5f9ea
lea rax, [r11 + rbx*4]
mov r8d, dword [rax + r15]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1400146d1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x1400146a0
cmp r9d, 0x790e70db
je 0x1400146d6
inc r10d
jmp 0x140014680
mov r8d, dword [rdi + r11 + 0x24]
add r8, r11
movzx r9d, word [r8 + rbx*2]
mov r8d, dword [rdi + r11 + 0x1c]
add r8, r11
mov r10d, dword [r8 + r9*4]
add r10, r11
mov qword [0x140124040], r10
mov r9d, dword [rbp - 0x29]
mov r8, rsi
mov edx, 3
mov qword [rsp + 0x20], rsi
mov rcx, 0xffffffffffffffff
call r10
test rsi, rsi
je 0x14001472a
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rcx, qword [rax]
mov rax, qword [0x140124000]
mov r10, qword [rcx + 0x30]
test rax, rax
jne 0x1400147e8
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
mov edi, dword [rbx + r10 + 0x20]
mov r11d, r14d
mov r9d, 0xec861fbc
lea rax, [r10 + r11*4]
mov r8d, dword [rax + rdi]
add r8, r10
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1400147c1
nop dword [rax]
nop word [rax + rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x140014790
cmp r9d, 0xa25c4402
je 0x1400147c6
inc r14d
jmp 0x140014763
mov ecx, dword [rbx + r10 + 0x24]
add rcx, r10
movzx edx, word [rcx + r11*2]
mov ecx, dword [rbx + r10 + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x140124000], rax
mov rcx, qword [rbp - 0x21]
call rax
mov rax, qword [rbp - 0x41]
cmp rax, 1
jb 0x140014803
cmp rax, r12
jb 0x140014803
cmp qword [rbp - 0x39], r13
jae 0x140014808
mov r12b, 1
jmp 0x14001480d
movzx r12d, byte [rbp - 0x49]
movzx eax, r12b
mov r15, qword [rsp + 0xc0]
mov r13, qword [rsp + 0x100]
mov rdi, qword [rsp + 0xf8]
mov rsi, qword [rsp + 0xf0]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.14009bc50
add rsp, 0xc8
pop r14
pop r12
pop rbx
pop rbp
ret