Function at 0x7ff70b548170
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xc8]
sub rsp, 0x1c8
xor r12d, r12d
mov dword [rbp + 0x128], r12d
mov esi, r12d
mov edi, 0x2c334564
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rbp + 0x10], xmm0
movd ecx, xmm0
sub cx, 8
test esi, esi
je 0x7ff70b548223
mov r9, qword [rbp + 0x18]
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
mov r10d, 0x811c9dc5
cmp r9, r11
je 0x7ff70b54821a
nop dword [rax]
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
add r9, 2
cmp r9, r11
jne 0x7ff70b5481f0
cmp r10d, esi
jne 0x7ff70b548376
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x7ff70b548383
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r13, rdx
shr r13, 0x20
mov r15d, edx
add r15, rbx
cmp r15, rbx
je 0x7ff70b548376
mov r11d, dword [r15 + 0x18]
test r11d, r11d
je 0x7ff70b548376
mov r12d, dword [r15 + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rcx, [r12 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x811c9dc5
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x7ff70b5482ba
nop
movsx edx, cl
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
movzx ecx, byte [r9]
lea r9, [r9 + 1]
test cl, cl
jne 0x7ff70b548290
cmp r10d, edi
je 0x7ff70b5482cc
test r11d, r11d
jne 0x7ff70b548270
mov rax, qword [rax]
jmp 0x7ff70b5481c0
mov ecx, dword [r15 + 0x1c]
add rcx, rbx
mov eax, dword [r15 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r9d, dword [rcx + rax*4]
add r9, rbx
cmp r9, r15
jbe 0x7ff70b54837e
lea rax, [r15 + r13]
cmp r9, rax
jae 0x7ff70b54837e
mov esi, 0x811c9dc5
mov edi, esi
movzx edx, byte [r9]
cmp dl, 0x2e
je 0x7ff70b548335
nop dword [rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, esi
imul esi, ecx, 0x1000193
inc r9
movzx edx, byte [r9]
cmp dl, 0x2e
jne 0x7ff70b548310
inc r9
movzx edx, byte [r9]
test dl, dl
je 0x7ff70b548365
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, edi
imul edi, ecx, 0x1000193
lea r9, [r9 + 1]
movzx edx, byte [r9]
test dl, dl
jne 0x7ff70b548340
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x7ff70b5481c0
xor r12d, r12d
jmp 0x7ff70b548389
xor r12d, r12d
mov r9d, r12d
lea r8, [rbp + 0x128]
mov rdx, qword [rbp + 0x110]
mov ecx, 2
call r9
mov r15d, eax
mov dword [rbp + 0x118], r15d
test eax, eax
je 0x7ff70b548b63
mov rcx, r15
call fcn.7ff70b4dd450
mov rsi, rax
mov qword [rsp + 0x30], rax
test rax, rax
je 0x7ff70b5483d5
mov r8, r15
xor edx, edx
mov rcx, rax
call fcn.7ff70b54e850
jmp 0x7ff70b5483dd
mov rsi, r12
mov qword [rsp + 0x30], r12
mov qword [rbp + 0x10], rsi
mov r14d, r12d
mov edi, 0x4688edf7
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rbp], xmm0
movd ecx, xmm0
sub cx, 8
test r14d, r14d
je 0x7ff70b548463
mov r9, qword [rbp + 8]
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
mov r10d, 0x811c9dc5
cmp r9, r11
je 0x7ff70b54845a
nop
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
add r9, 2
cmp r9, r11
jne 0x7ff70b548430
cmp r10d, r14d
jne 0x7ff70b5485a8
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x7ff70b5485b5
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r13, rdx
shr r13, 0x20
mov esi, edx
add rsi, rbx
cmp rsi, rbx
je 0x7ff70b5485a8
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x7ff70b5485a8
mov r12d, dword [rsi + 0x20]
dec r11d
lea rcx, [r12 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x811c9dc5
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x7ff70b5484ed
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x7ff70b5484c2
cmp r10d, edi
je 0x7ff70b5484ff
test r11d, r11d
jne 0x7ff70b5484a2
mov rax, qword [rax]
jmp 0x7ff70b548400
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rsi + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rbx
cmp r10, rsi
jbe 0x7ff70b5485b0
lea rax, [rsi + r13]
cmp r10, rax
jae 0x7ff70b5485b0
mov edi, 0x811c9dc5
mov r14d, edi
movzx edx, byte [r10]
cmp dl, 0x2e
je 0x7ff70b548567
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r14d
imul r14d, ecx, 0x1000193
inc r10
movzx edx, byte [r10]
cmp dl, 0x2e
jne 0x7ff70b548540
inc r10
movzx edx, byte [r10]
test dl, dl
je 0x7ff70b548597
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, edi
imul edi, ecx, 0x1000193
lea r10, [r10 + 1]
movzx edx, byte [r10]
test dl, dl
jne 0x7ff70b548572
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x7ff70b548400
xor r12d, r12d
jmp 0x7ff70b5485bb
xor r12d, r12d
mov r10d, r12d
mov rsi, qword [rsp + 0x30]
mov qword [rsp + 0x20], rsi
mov r9d, dword [rbp + 0x118]
xor r8d, r8d
mov rdx, qword [rbp + 0x110]
lea ecx, [r8 + 2]
call r10
test eax, eax
je 0x7ff70b548b50
mov qword [rsp + 0x38], r12
mov dword [rbp + 0x120], r12d
mov esi, r12d
mov edi, 0xb38d9868
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rbp], xmm0
movd ecx, xmm0
sub cx, 8
test esi, esi
je 0x7ff70b548673
mov r9, qword [rbp + 8]
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
mov r10d, 0x811c9dc5
cmp r9, r11
je 0x7ff70b54866a
nop dword [rax]
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
add r9, 2
cmp r9, r11
jne 0x7ff70b548640
cmp r10d, esi
jne 0x7ff70b5487c6
mov rbx, qword [rax + 0x30]
test rbx, rbx
je 0x7ff70b5487ce
movsxd rcx, dword [rbx + 0x3c]
mov rdx, qword [rcx + rbx + 0x88]
mov r13, rdx
shr r13, 0x20
mov r15d, edx
add r15, rbx
cmp r15, rbx
je 0x7ff70b5487c6
mov r11d, dword [r15 + 0x18]
test r11d, r11d
je 0x7ff70b5487c6
mov r12d, dword [r15 + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rcx, [r12 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x811c9dc5
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x7ff70b54870b
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x7ff70b5486e0
cmp r10d, edi
je 0x7ff70b54871d
test r11d, r11d
jne 0x7ff70b5486c0
mov rax, qword [rax]
jmp 0x7ff70b548610
mov ecx, dword [r15 + 0x1c]
add rcx, rbx
mov eax, dword [r15 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rbx
cmp r10, r15
jbe 0x7ff70b5487d1
lea rax, [r15 + r13]
cmp r10, rax
jae 0x7ff70b5487d1
mov esi, 0x811c9dc5
mov edi, esi
movzx edx, byte [r10]
cmp dl, 0x2e
je 0x7ff70b548785
nop dword [rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, esi
imul esi, ecx, 0x1000193
inc r10
movzx edx, byte [r10]
cmp dl, 0x2e
jne 0x7ff70b548760
inc r10
movzx edx, byte [r10]
test dl, dl
je 0x7ff70b5487b5
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, edi
imul edi, ecx, 0x1000193
lea r10, [r10 + 1]
movzx edx, byte [r10]
test dl, dl
jne 0x7ff70b548790
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x7ff70b548610
xor r10d, r10d
movabs rdi, 0xe7bd05baecff104f
mov qword [rbp + 0x20], rdi
movabs r14, 0x44ec8cb3968b0828
mov qword [rbp + 0x28], r14
movabs r12, 0xbe24bad459d90971
mov qword [rbp + 0x30], r12
movabs r13, 0xa04bc35d81530712
mov qword [rbp + 0x38], r13
movabs rax, 0x6a67ab160104df23
mov qword [rbp + 0x40], rax
movabs rax, 0x76122c7f94d15eec
mov qword [rbp + 0x48], rax
movabs rax, 0x66ebd9e0dc9eb675
mov qword [rbp + 0x50], rax
movabs rax, 0xb1cd3b0991fceed6
mov qword [rbp + 0x58], rax
movabs rax, 0x3d5858e243eda697
mov qword [rbp + 0x60], rax
movabs rbx, 0x35d49b7b068acff0
mov qword [rbp + 0x68], rbx
movabs rax, 0xe7cf05ceecac1013
mov qword [rsp + 0x60], rax
movabs rax, 0x44aa8cd496e50841
mov qword [rsp + 0x68], rax
movabs rax, 0xbe6dbab159b50918
mov qword [rsp + 0x70], rax
movabs rax, 0xa017c3328135077c
mov qword [rsp + 0x78], rax
movabs rax, 0x6a5eab260130df13
mov qword [rbp - 0x80], rax
movabs rax, 0x76222c3d94e55edc
mov qword [rbp - 0x78], rax
movabs rax, 0x6684d992dcceb629
mov qword [rbp - 0x70], rax
movabs rax, 0xb1b93b6a9189eeb2
mov qword [rbp - 0x68], rax
movabs rax, 0x3d3d588f438ca6d9
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], rbx
movdqa xmm0, xmmword [rbp + 0x20]
pxor xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [rbp + 0x30]
pxor xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm1
movdqa xmm0, xmmword [rbp + 0x40]
pxor xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x80], xmm0
movdqa xmm1, xmmword [rbp + 0x50]
pxor xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm1
movdqa xmm0, xmmword [rbp + 0x60]
pxor xmm0, xmmword [rbp - 0x60]
movdqa xmmword [rbp - 0x60], xmm0
lea r9, [rbp + 0x120]
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x60]
mov rsi, qword [rsp + 0x30]
mov rcx, rsi
call r10
test eax, eax
je 0x7ff70b548b50
mov rdx, qword [rsp + 0x38]
test rdx, rdx
je 0x7ff70b548b50
mov r15d, dword [rbp + 0x118]
shr r15d, 1
mov eax, dword [rbp + 0x120]
cmp r15d, eax
jb 0x7ff70b548b50
mov r8d, eax
xor r15d, r15d
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
lea rcx, [rsp + 0x40]
call fcn.7ff70b4fb720
mov qword [rbp + 0x70], rdi
mov qword [rbp + 0x78], r14
mov qword [rbp + 0x80], r12
mov qword [rbp + 0x88], r13
movabs rax, 0x6a67ab160104df23
mov qword [rbp + 0x90], rax
movabs rax, 0x76122c7f94d15eec
mov qword [rbp + 0x98], rax
movabs rax, 0x66ebd9e0dc9eb675
mov qword [rbp + 0xa0], rax
movabs rax, 0xb1cd3b0991fceed6
mov qword [rbp + 0xa8], rax
movabs rax, 0x3d5858e243eda697
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], rbx
movabs rax, 0xe7cf05d9ec961002
mov qword [rbp - 0x50], rax
movabs rax, 0x448a8cdc96f80847
mov qword [rbp - 0x48], rax
movabs rax, 0xbe73baf459770905
mov qword [rbp - 0x40], rax
movabs rax, 0xa024c339813d077b
mov qword [rbp - 0x38], rax
movabs rax, 0x6a47abb80177df54
mov qword [rbp - 0x30], rax
movabs rax, 0x76602c1a94a15ea3
mov qword [rbp - 0x28], rax
movabs rax, 0x6685d989dceab614
mov qword [rbp - 0x20], rax
movabs rax, 0xb1b43b5a91dceeb1
mov qword [rbp - 0x18], rax
movabs rax, 0x3d3558874399a6e4
mov qword [rbp - 0x10], rax
mov qword [rbp - 8], rbx
movdqa xmm0, xmmword [rbp + 0x70]
pxor xmm0, xmmword [rbp - 0x50]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [rbp - 0x40]
pxor xmm1, xmmword [rbp + 0x80]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [rbp - 0x30]
pxor xmm0, xmmword [rbp + 0x90]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [rbp - 0x20]
pxor xmm1, xmmword [rbp + 0xa0]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [rbp - 0x10]
pxor xmm0, xmmword [rbp + 0xb0]
movdqa xmmword [rbp - 0x10], xmm0
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x40]
call fcn.7ff70b520a70
cmp rax, 0xffffffffffffffff
setne bl
mov rax, qword [rsp + 0x58]
cmp rax, 8
jb 0x7ff70b548b3a
lea rax, [rax*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rdx, rcx
cmp rax, 0x1000
jb 0x7ff70b548b34
mov rcx, qword [rcx - 8]
sub rdx, rcx
lea rax, [rdx - 8]
cmp rax, 0x1f
ja 0x7ff70b548b77
call fcn.7ff70b4dd700
nop
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 7
mov word [rsp + 0x40], r15w
jmp 0x7ff70b548b52
xor bl, bl
test rsi, rsi
je 0x7ff70b548b60
mov rcx, rsi
call fcn.7ff70b4dd700
nop
movzx eax, bl
add rsp, 0x1c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.7ff70b5526b4
nop
int3