Function at 0x140004000
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
stc
xchg ebx, eax
cwde
cdq
cdq
wait
xchg ebx, eax
clc
wait
xchg ecx, eax
std
cdq
stc
xchg ebx, eax
lahf
sahf
xchg edx, eax
nop
cdq
std
nop
cld
cld
clc
cwde
lahf
cld
nop
xchg ebx, eax
xchg ebx, eax
cdq
lahf
wait
wait
sahf
sahf
clc
cwde
sahf
stc
xchg ecx, eax
cld
lahf
std
wait
clc
wait
wait
cld
cld
clc
stc
clc
sahf
cwde
lahf
stc
lahf
std
sahf
stc
xchg ebx, eax
std
cld
std
std
xchg ebx, eax
xchg edx, eax
nop
xchg ecx, eax
xchg edx, eax
clc
nop
lahf
cld
xchg ebx, eax
stc
nop
xchg ebx, eax
nop
std
sahf
xchg ebx, eax
wait
cwde
cdq
cwde
sahf
xchg edx, eax
lahf
cwde
xchg ecx, eax
clc
xchg ebx, eax
xchg edx, eax
cwde
xchg ecx, eax
stc
std
xchg edx, eax
std
std
std
xchg ecx, eax
std
nop
cld
xchg ebx, eax
xchg ecx, eax
cwde
cdq
nop
stc
sahf
cwde
xchg edx, eax
clc
xchg ebx, eax
xchg ecx, eax
sahf
cwde
clc
lahf
wait
cdq
sahf
stc
clc
nop
cld
std
wait
nop
xchg ecx, eax
clc
xchg edx, eax
sahf
xchg edx, eax
stc
std
cwde
nop
cdq
sahf
xchg ebx, eax
xchg edx, eax
cwde
nop
stc
xchg edx, eax
xchg ebx, eax
xchg ecx, eax
stc
xchg ecx, eax
xchg ebx, eax
cwde
cld
xchg edx, eax
cwde
std
wait
stc
xchg ecx, eax
nop
wait
nop
cwde
nop
cld
clc
lahf
clc
xchg ecx, eax
sahf
std
cdq
wait
std
clc
std
sahf
std
lahf
sahf
sahf
xchg ecx, eax
lahf
xchg edx, eax
cwde
stc
xchg ebx, eax
xchg edx, eax
cdq
cwde
clc
clc
xchg ecx, eax
xchg ebx, eax
cwde
wait
std
stc
std
lahf
xchg edx, eax
lahf
cwde
sahf
clc
wait
xchg ecx, eax
stc
std
xchg edx, eax
wait
xchg ebx, eax
cld
nop
stc
xchg ecx, eax
xchg ebx, eax
xchg ecx, eax
lahf
cld
wait
wait
wait
wait
clc
xchg ecx, eax
std
sahf
sahf
lahf
xchg edx, eax
sahf
sahf
xchg edx, eax
nop
sahf
lahf
cdq
cld
xchg ecx, eax
wait
xchg edx, eax
stc
cwde
cld
nop
clc
xchg ebx, eax
lahf
nop
clc
clc
xchg edx, eax
wait
stc
cdq
clc
nop
clc
nop
sahf
cdq
xchg edx, eax
sahf
xchg ecx, eax
nop
lahf
xchg ebx, eax
cld
xchg ecx, eax
clc
lahf
lahf
xchg ecx, eax
xchg ebx, eax
xchg ecx, eax
sahf
cld
stc
xchg ebx, eax
stc
cld
nop
wait
cwde
cdq
sahf
lahf
clc
cwde
xchg edx, eax
cld
clc
xchg ebx, eax
xchg edx, eax
xchg edx, eax
clc
xchg edx, eax
xchg ecx, eax
lahf
xchg edx, eax
cld
cwde
sahf
sahf
cld
lahf
lahf
xchg edx, eax
sahf
std
std
wait
xchg edx, eax
xchg ebx, eax
wait
xchg edx, eax
sahf
wait
xchg ecx, eax
xchg ebx, eax
lahf
xchg ebx, eax
nop
cld
lahf
cwde
clc
cwde
cwde
cld
xchg ecx, eax
nop
xchg ecx, eax
std
cdq
clc
std
xchg ecx, eax
lahf
lahf
cld
cld
xchg ecx, eax
wait
xchg ecx, eax
xchg edx, eax
stc
lahf
cdq
nop
clc
std
cld
wait
xchg ecx, eax
wait
clc
cdq
cwde
nop
sahf
xchg ecx, eax
cld
clc
cwde
sahf
nop
wait
xchg ecx, eax
lahf
nop
xchg ebx, eax
xchg ebx, eax
cwde
nop
wait
stc
lahf
cdq
cld
wait
nop
cdq
xchg ecx, eax
cld
cld
xchg edx, eax
xchg edx, eax
xchg ecx, eax
xchg ebx, eax
std
lahf
xchg edx, eax
cdq
lahf
cwde
xchg ecx, eax
nop
nop
sahf
cwde
cld
wait
sahf
xchg edx, eax
sahf
lahf
nop
xchg ebx, eax
cld
wait
nop
nop
cdq
wait
lahf
std
sahf
xchg edx, eax
cwde
cwde
xchg ebx, eax
stc
stc
stc
xchg ebx, eax
xchg edx, eax
wait
std
sahf
wait
nop
xchg ebx, eax
clc
lahf
xchg edx, eax
xchg ebx, eax
xchg ebx, eax
clc
nop
lahf
cwde
wait
xchg ecx, eax
std
cld
xchg edx, eax
std
stc
xchg edx, eax
cwde
xchg ebx, eax
stc
nop
cdq
clc
sahf
stc
sahf
stc
lahf
sahf
nop
cld
nop
std
cld
sahf
cdq
xchg edx, eax
stc
cwde
xchg ecx, eax
clc
xchg ecx, eax
std
xchg ebx, eax
std
xchg ebx, eax
xchg edx, eax
xchg ecx, eax
wait
stc
nop
sahf
xchg ecx, eax
xchg edx, eax
lahf
xchg ebx, eax
cdq
sahf
cdq
xchg ebx, eax
cld
std
cld
and rsp, 0xfffffffffffffff0
call fcn.1400042ca
push r9
push r8
push rdx
push rcx
xor rdx, rdx
mov rdx, qword gs:[rdx + 0x60]
push rsi
mov rdx, qword [rdx + 0x18]
mov rdx, qword [rdx + 0x20]
mov rsi, qword [rdx + 0x50]
xor r9, r9
movzx rcx, word [rdx + 0x4a]
xor rax, rax
lodsb al, byte [rsi]
cmp al, 0x61
jl 0x14000422b
sub al, 0x20
ror r9d, 0xd
add r9d, eax
loop 0x140004221
push rdx
mov rdx, qword [rdx + 0x20]
push r9
mov eax, dword [rdx + 0x3c]
add rax, rdx
cmp word [rax + 0x18], 0x20b
jne 0x1400042bf
mov eax, dword [rax + 0x88]
test rax, rax
je 0x1400042bf
add rax, rdx
mov r8d, dword [rax + 0x20]
mov ecx, dword [rax + 0x18]
push rax
add r8, rdx
jrcxz 0x1400042be
dec rcx
xor r9, r9
mov esi, dword [r8 + rcx*4]
add rsi, rdx
xor rax, rax
ror r9d, 0xd
lodsb al, byte [rsi]
add r9d, eax
cmp al, ah
jne 0x140004275
add r9, qword [rsp + 8]
cmp r9d, r10d
jne 0x140004266
pop rax
mov r8d, dword [rax + 0x24]
add r8, rdx
mov cx, word [r8 + rcx*2]
mov r8d, dword [rax + 0x1c]
add r8, rdx
mov eax, dword [r8 + rcx*4]
add rax, rdx
pop r8
pop r8
pop rsi
pop rcx
pop rdx
pop r8
pop r9
pop r10
sub rsp, 0x20
push r10
jmp rax
pop rax
pop r9
pop rdx
mov rdx, qword [rdx]
jmp 0x140004215