Function at 0x1400136e0
Capabilities:
Access peb ldr_data
Encode data using xor
Get storage device properties
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140090040]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov r15, rcx
mov qword [rbp - 0x31], rcx
xor r13d, r13d
mov dword [rbp - 0x69], r13d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rbx, qword [rcx + 0x10]
mov r14, rbx
nop dword [rax + rax]
mov r11, qword [rbx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x1400137c9
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x1400137c9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rcx, [rdi + r10*4]
mov r8d, dword [rcx + r11]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1400137c4
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140013790
cmp r9d, 0xe95da064
je 0x1400139d1
test r10d, r10d
jne 0x140013770
mov rbx, qword [rbx]
cmp rbx, r14
je 0x1400137db
cmp qword [rbx + 0x30], r13
jne 0x140013740
mov r10, r13
mov eax, dword [0x1400818d8]
mov dword [rbp - 0x41], eax
movzx eax, word [0x1400818dc]
movups xmm1, xmmword [0x1400818c8]
movups xmm0, xmmword [0x1400818b8]
mov word [rbp - 0x3d], ax
movups xmmword [rbp - 0x51], xmm1
movups xmmword [rbp - 0x61], xmm0
mov r8d, r13d
cmp dword [0x140090090], 2
jl 0x140013937
movdqa xmm5, xmmword [0x140084890]
movdqa xmm4, xmmword [0x1400849c0]
movdqa xmm6, xmmword [0x1400848d0]
movdqa xmm7, xmmword [str.44444444]
lea rcx, [rbp - 0x61]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx]
xorps xmm3, xmm0
movq qword [rcx], xmm3
lea eax, [r8 + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rcx + 8]
xorps xmm3, xmm0
movq qword [rcx + 8], xmm3
add r8d, 8
lea rcx, [rcx + 0x10]
cmp r8d, 0x10
jl 0x140013840
cmp r8d, 0x13
jge 0x140013987
movsxd rax, r8d
lea r9, [rbp - 0x61]
lea r9, [r9 + rax*2]
nop dword [rax]
nop word [rax + rax]
mov eax, 0x92492493
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x38
movzx eax, r8w
sub ax, cx
add ax, 0x34
xor word [r9], ax
inc r8d
lea r9, [r9 + 2]
cmp r8d, 0x13
jl 0x140013950
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], r13d
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor edx, edx
lea r8d, [r9 + 3]
lea rcx, [rbp - 0x61]
call r10
mov r12, rax
mov qword [rbp - 0x39], rax
xorps xmm0, xmm0
cmp rax, 0xffffffffffffffff
jne 0x1400139ee
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], r13
mov qword [r15 + 0x18], 0xf
mov byte [r15], r13b
jmp 0x140013fdd
mov edx, dword [rsi + 0x1c]
add rdx, r11
mov ecx, dword [rsi + 0x24]
add rcx, r11
movzx ecx, word [rcx + r10*2]
mov r10d, dword [rdx + rcx*4]
add r10, r11
jmp 0x1400137de
movups xmmword [rbp - 9], xmm0
lea rax, [0x140014020]
mov qword [rbp - 9], rax
mov qword [rbp - 1], r12
mov qword [rbp - 0x1d], r13
mov dword [rbp - 0x21], r13d
mov qword [rbp - 0x11], r13
mov dword [rbp - 0x29], r13d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rbx, qword [rcx + 0x10]
mov r14, rbx
nop word [rax + rax]
mov r11, qword [rbx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140013ab9
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140013ab9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rcx, [rdi + r10*4]
mov r8d, dword [rcx + r11]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140013ab4
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140013a80
cmp r9d, 0x9661cbb4
je 0x140013bd5
test r10d, r10d
jne 0x140013a60
mov rbx, qword [rbx]
cmp rbx, r14
je 0x140013acc
cmp qword [rbx + 0x30], 0
jne 0x140013a30
mov rax, r13
mov qword [rsp + 0x38], r13
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 8
lea rcx, [rbp - 0x11]
mov qword [rsp + 0x20], rcx
mov r9d, 0xc
lea r8, [rbp - 0x21]
mov edx, 0x2d1400
mov rcx, r12
call rax
test eax, eax
jne 0x140013bf1
xorps xmm0, xmm0
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], r13
mov qword [r15 + 0x18], 0xf
mov byte [r15], al
mov dword [rbp - 0x69], 1
test r12, r12
je 0x140013fdd
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x140013bcd
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140013bcd
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
lea rdx, [rdi + r11*4]
mov r9d, dword [rdx + rbx]
add r9, rbx
mov r10d, 0x811c9dc5
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140013bc8
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140013b90
cmp r10d, 0x8285aca5
je 0x140013fc0
test r11d, r11d
jne 0x140013b70
mov rax, qword [rax]
jmp 0x140013b41
mov edx, dword [rsi + 0x1c]
add rdx, r11
mov ecx, dword [rsi + 0x24]
add rcx, r11
movzx ecx, word [rcx + r10*2]
mov eax, dword [rdx + rcx*4]
add rax, r11
jmp 0x140013acf
mov r13d, dword [rbp - 0xd]
mov ecx, r13d
call fcn.140049530
mov r14, rax
mov r8d, r13d
xor edx, edx
mov rcx, rax
call fcn.14006ec30
mov qword [rbp + 7], r14
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rbx, qword [rdx + 0x10]
mov r12, rbx
nop word [rax + rax]
mov r11, qword [rbx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x140013cb9
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x140013cb9
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
lea rcx, [r11 + r10*4]
mov r8d, dword [rcx + rdi]
add r8, r11
mov r9d, 0x811c9dc5
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x140013cb4
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
movzx edx, byte [r8]
lea r8, [r8 + 1]
test dl, dl
jne 0x140013c80
cmp r9d, 0x9661cbb4
je 0x140013de5
test r10d, r10d
jne 0x140013c60
mov rbx, qword [rbx]
cmp rbx, r12
je 0x140013ccc
cmp qword [rbx + 0x30], 0
jne 0x140013c30
xor ebx, ebx
mov eax, ebx
mov qword [rsp + 0x38], rbx
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r14
mov r9d, 0xc
lea r8, [rbp - 0x21]
mov edx, 0x2d1400
mov r12, qword [rbp - 0x39]
mov rcx, r12
call rax
xorps xmm0, xmm0
test eax, eax
jne 0x140013e03
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], 0xf
mov byte [r15], al
mov dword [rbp - 0x69], 1
mov rcx, r14
call fcn.1400491b0
nop
test r12, r12
je 0x140013fdd
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x140013ddd
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140013ddd
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0x811c9dc5
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140013dd8
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140013da0
cmp r10d, 0x8285aca5
je 0x140013fc0
test r11d, r11d
jne 0x140013d80
mov rax, qword [rax]
jmp 0x140013d50
mov edx, dword [rsi + 0x1c]
add rdx, r11
mov ecx, dword [rsi + 0x24]
add rcx, r11
movzx ecx, word [rcx + r10*2]
mov eax, dword [rdx + rcx*4]
add rax, r11
xor ebx, ebx
jmp 0x140013cd0
mov eax, dword [r14 + 0x18]
movups xmmword [r15], xmm0
mov qword [r15 + 0x10], rbx
test eax, eax
jne 0x140013ee5
mov qword [r15 + 0x18], 0xf
mov byte [r15], al
mov dword [rbp - 0x69], 1
mov rcx, r14
call fcn.1400491b0
nop
test r12, r12
je 0x140013fdd
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x140013edd
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140013edd
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0x811c9dc5
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140013ed8
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x140013ea0
cmp r10d, 0x8285aca5
je 0x140013fc0
test r11d, r11d
jne 0x140013e80
mov rax, qword [rax]
jmp 0x140013e50
lea rdx, [r14 + rax]
mov qword [r15 + 0x18], rbx
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140013ef4
mov rcx, r15
call fcn.1400055d0
mov dword [rbp - 0x69], 1
mov rcx, r14
call fcn.1400491b0
nop
test r12, r12
je 0x140013fdd
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x140013fb8
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140013fb8
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rdx, [rbx + r11*4]
mov r9d, dword [rdx + rdi]
add r9, rbx
mov r10d, 0x811c9dc5
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x140013fb3
nop
movsx edx, cl
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
movzx ecx, byte [r9]
lea r9, [r9 + 1]
test cl, cl
jne 0x140013f80
cmp r10d, 0x8285aca5
je 0x140013fc0
test r11d, r11d
jne 0x140013f60
mov rax, qword [rax]
jmp 0x140013f30
mov ecx, dword [rsi + 0x24]
add rcx, rbx
mov edx, dword [rsi + 0x1c]
movzx ecx, word [rcx + r11*2]
add rdx, rbx
mov eax, dword [rdx + rcx*4]
mov rcx, r12
add rax, rbx
call rax
nop
mov rax, r15
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.140049190
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret