Function at 0x1400058a0
Capabilities:
Access peb ldr_data
Get process filename
Resolve function by hash

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
xorps xmm0, xmm0
movaps xmmword [rsp + 0x30], xmm0
movaps xmmword [rsp + 0x20], xmm0
movaps xmmword [rsp + 0x10], xmm0
movaps xmmword [rsp], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x20]
mov edx, dword [rsp]
mov ecx, edx
xor ecx, 0x1e27
mov dword [rsp], ecx
movups xmm0, xmmword [rsp + 8]
movaps xmm1, xmmword [0x14000c630]
xorps xmm0, xmm1
movups xmmword [rsp + 8], xmm0
movups xmm0, xmmword [rsp + 0x18]
xorps xmm0, xmm1
movups xmmword [rsp + 0x18], xmm0
movups xmm0, xmmword [rsp + 0x28]
xorps xmm0, xmm1
movups xmmword [rsp + 0x28], xmm0
xor dword [rsp + 0x38], 0x1e27
xor dword [rsp + 0x3c], 0x1e27
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x44], 0x7afe1c38
xor edx, 0xbb5
mov dword [rsp + 0x40], edx
mov r13d, 0x22f1
xor eax, eax
mov qword [rsp + 0x48], rax
mov edx, 0x4eb9
movaps xmm0, xmmword [0x14000c640]
movaps xmm1, xmmword [0x14000c650]
mov ebp, 0
jmp 0x1400059ac
movzx eax, byte [r14]
mov rcx, r15
neg rcx
mov rbx, rax
neg rbx
and rbx, rcx
lea rcx, [r15 - 1]
lea rdi, [rax - 1]
or rdi, rcx
add rax, r15
add rax, rbx
add rax, rdi
lea r10, [rax + rax]
sub r10, rax
add r10, 1
mov r13d, dword [rsp + 0x1c]
xor r13d, edx
mov edi, 0xc9a02598
mov rax, r11
mov r8d, r12d
mov rcx, r14
mov rbx, rsi
cmp r13d, 0x4818
jg 0x140005a50
cmp r13d, 0xbb4
jle 0x140005ab0
cmp r13d, 0x25fc
jg 0x140005b9f
cmp r13d, 0xbb5
je 0x140005c2a
cmp r13d, 0x22f1
jne 0x1400059ac
mov r9d, dword [rsp + 0x44]
mov esi, 0x19c8af57
add r9d, esi
cmp byte [rsp + 0x48], 0
jne 0x140005a2e
movups xmm2, xmmword [rsp + 8]
movups xmm3, xmmword [rsp + 0x18]
movups xmm4, xmmword [rsp + 0x28]
xorps xmm2, xmm1
movups xmmword [rsp + 8], xmm2
xorps xmm3, xmm1
movups xmmword [rsp + 0x18], xmm3
xorps xmm4, xmm1
movups xmmword [rsp + 0x28], xmm4
xor byte [rsp + 0x38], 0x26
xor byte [rsp + 0x3c], 0x26
mov sil, 1
mov qword [rsp + 0x48], rsi
mov rsi, qword [rsp + 0x50]
mov r13d, dword [rsp + 0x40]
jmp 0x1400059ac
cmp r13d, 0x6531
jle 0x140005b00
cmp r13d, 0x7c92
jg 0x140005bd6
cmp r13d, 0x6532
je 0x140005961
cmp r13d, 0x70d1
jne 0x1400059ac
cmp r15d, 0x6a4abc5b
mov edi, 0xce61a3f9
mov eax, 0x8dfc83f5
cmove edi, eax
mov r13d, dword [rsp + 0x28]
jmp 0x140005bce
cmp r13d, 0x8bf
jg 0x140005c01
cmp r13d, 0x24e
je 0x140005dd4
cmp r13d, 0x52b
jne 0x1400059ac
mov r8d, r12d
add r8w, 0xffff
mov edi, 0x96fb2959
mov eax, 0xaa84ee83
cmove edi, eax
mov r13d, dword [rsp + 0x24]
xor r13d, edx
mov rax, r11
jmp 0x140005c22
cmp r13d, 0x4819
je 0x140005c9f
cmp r13d, 0x51f0
je 0x140005d7f
cmp r13d, 0x5497
jne 0x1400059ac
movzx eax, byte [r14]
mov ecx, eax
or ecx, 0x9d46754c
add ecx, eax
and eax, 0xffffffb3
xor eax, 0x62b98ab3
add eax, ecx
add eax, 0x9d46754e
mov ecx, eax
xor ecx, 0xffffffdf
mov ebx, eax
or ebx, 0x7fffffdf
sub eax, ebx
lea eax, [rcx + rax*2]
add eax, 0xffffffbf
mov ecx, eax
or ecx, 0x62b98ab3
or eax, 0x9d46754c
add eax, ecx
add eax, 0x62b98ab4
mov rcx, r15
neg rcx
mov rbx, rax
neg rbx
or rbx, rcx
lea rcx, [r15 - 1]
lea rdi, [rax - 1]
and rdi, rcx
add rax, r15
add rax, rbx
lea r10, [rdi + rax]
add r10, 1
mov r13d, dword [rsp + 0x18]
jmp 0x140005998
cmp r13d, 0x25fd
je 0x140005d09
cmp r13d, 0x3958
jne 0x1400059ac
test rsi, rsi
mov edi, 0x6a78ebb9
mov eax, 0x8450692b
cmove edi, eax
mov r13d, dword [rsp + 0xc]
xor r13d, edx
mov rax, r11
jmp 0x140005c1f
cmp r13d, 0x7c93
je 0x140005df8
cmp r13d, 0x7e16
jne 0x1400059ac
mov r13d, dword [rsp + 0x34]
xor r13d, edx
mov edi, 0xb2085ca9
xor eax, eax
jmp 0x140005c1f
cmp r13d, 0x8c0
jne 0x140005e1d
mov rax, qword [rsi + 0x20]
mov r13d, dword [rsp + 0x2c]
xor r13d, edx
mov edi, 0xb2085ca9
mov r8d, r12d
mov r10, r15
jmp 0x1400059a6
test bpl, bpl
jne 0x140005c5e
movups xmm2, xmmword [rsp + 0xc]
movups xmm3, xmmword [rsp + 0x1c]
movups xmm4, xmmword [rsp + 0x2c]
xorps xmm2, xmm0
movups xmmword [rsp + 0xc], xmm2
xorps xmm3, xmm0
movups xmmword [rsp + 0x1c], xmm3
xorps xmm4, xmm0
movups xmmword [rsp + 0x2c], xmm4
xor dword [rsp + 0x3c], 0x52f6
mov bpl, 1
cmp r9d, 0xc9a02597
jle 0x140005d2a
cmp r9d, 0x19ae53e9
jg 0x140005d5c
cmp r9d, 0xc9a02598
je 0x140005c9f
cmp r9d, 0xce61a3f9
je 0x140005d09
cmp r9d, 0xf8263fdf
je 0x140005ad7
jmp 0x140005dc2
mov rax, r14
xor rax, 0xffffffff84aaf36c
add rax, r14
lea ecx, [r14 + r14]
movabs rbx, 0xffffffff0955e6d8
or rcx, rbx
sub rax, rcx
lea rcx, [rax + r14]
lea ebx, [rcx + 1]
and ebx, 1
add rbx, rcx
neg rcx
add rax, r14
add rax, 0xffffffffffffffff
xor rax, 1
and rcx, 0xfffffffffffffffe
add rbx, rax
add rcx, rbx
add rcx, 0xffffffff84aaf36e
mov r13d, dword [rsp + 0x20]
xor r13d, edx
mov edi, 0xf8263fdf
mov rax, r11
mov r8d, r12d
mov r10, r15
mov rbx, rsi
jmp 0x1400059ac
mov rbx, qword [rsi]
mov r13d, dword [rsp + 0x30]
xor r13d, edx
mov edi, 0x94c6cb8f
mov rax, r11
mov r8d, r12d
mov r10, r15
mov rcx, r14
jmp 0x1400059ac
cmp r9d, 0x96fb2958
jg 0x140005da3
cmp r9d, 0x8450692b
je 0x140005bf0
cmp r9d, 0x8dfc83f5
je 0x140005c0e
cmp r9d, 0x94c6cb8f
je 0x140005bb9
jmp 0x140005dc2
cmp r9d, 0x19ae53ea
je 0x140005b27
cmp r9d, 0x4d829101
je 0x140005961
cmp r9d, 0x6a78ebb9
jne 0x140005dc2
mov rcx, qword [rsi + 0x50]
movzx r8d, word [rsi + 0x48]
mov r13d, dword [rsp + 0x10]
xor r13d, edx
mov edi, 0x96fb2959
mov rax, r11
xor r10d, r10d
mov rbx, rsi
jmp 0x1400059ac
cmp r9d, 0x96fb2959
je 0x140005df8
cmp r9d, 0xaa84ee83
je 0x140005a84
cmp r9d, 0xb2085ca9
je 0x140005e2a
mov rax, r11
mov edi, r9d
mov r8d, r12d
mov r10, r15
mov rcx, r14
mov rbx, rsi
mov r13d, dword [rsp + 0x3c]
mov esi, 0x4742
xor r13d, esi
mov r11, rax
mov r9d, edi
mov r12d, r8d
mov r15, r10
mov r14, rcx
mov rsi, rbx
jmp 0x1400059ac
mov r10d, r15d
rol r10d, 0x13
cmp byte [r14], 0x60
mov edi, 0x4d829101
mov eax, 0x19ae53ea
cmova edi, eax
mov r13d, dword [rsp + 0x14]
xor r13d, edx
jmp 0x1400059a0
cmp r13d, 0x98e
jne 0x1400059ac
mov rax, r11
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret