Function at 0x140101a30
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x14019d010]
xor rax, rsp
mov qword [rbp + 0x20], rax
mov rsi, rcx
xorps xmm0, xmm0
movups xmmword [rbp + 0x10], xmm0
mov eax, 1
xor ecx, ecx
cpuid
mov edi, ecx
mov dword [rbp + 0x10], eax
mov dword [rbp + 0x14], ebx
mov dword [rbp + 0x1c], edx
mov dword [rsp + 0x20], 0xff
mov dword [rsp + 0x24], 0xa
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x24]
call fcn.140103d80
mov word [rsi + 0x80], ax
test edi, edi
jns 0x140101f9e
mov eax, 0x40000000
xor ecx, ecx
cpuid
mov dword [rbp + 0x10], eax
mov dword [rbp + 0x10], ebx
mov dword [rbp + 0x14], ecx
mov dword [rbp + 0x18], edx
mov byte [rbp + 0x1c], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x28], xmm0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x40], 0
lea rax, [rbp + 0x10]
mov rdi, 0xffffffffffffffff
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140101ae5
lea rdx, [rbp + 0x10]
lea rcx, [rsp + 0x28]
call fcn.1400d9a90
nop
mov rax, qword gs:[0x58]
mov rsi, qword [rax]
mov ecx, 0x15c
mov eax, dword [rcx + rsi]
mov ebx, 0x178
add rbx, rsi
test al, 1
jne 0x140101b4b
or eax, 1
mov dword [rcx + rsi], eax
mov dword [rbx + 0xa], 0x117b555
mov dword [rbx], 0xfe18afd0
mov dword [rbx + 4], 0x2b0a4a41
mov word [rbx + 8], 0xf9d6
lea rcx, [0x14015b3b0]
call fcn.14010618c
nop
cmp byte [rbx + 0xd], 0
je 0x140101b88
xor byte [rbx], 0x9b
xor byte [rbx + 1], 0xf9
xor byte [rbx + 2], 0x55
xor byte [rbx + 3], 0xb5
xor byte [rbx + 4], 0x17
xor byte [rbx + 5], 7
xor byte [rbx + 6], 0x41
xor byte [rbx + 7], 0x7d
xor byte [rbx + 8], 0x9b
xor byte [rbx + 9], 0xf9
xor byte [rbx + 0xa], 0x55
xor byte [rbx + 0xb], 0xb5
xor byte [rbx + 0xc], 0x17
mov byte [rbx + 0xd], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x60], xmm1
mov r8, rdi
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x140101ba0
mov rdx, rbx
lea rcx, [rsp + 0x50]
call fcn.1400d9a90
nop
mov ecx, 0x1a8
mov eax, dword [rcx + rsi]
mov edx, 0x1d8
test al, 1
jne 0x140101bfc
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov dword [rbx + 0xa], 0x17d3bd9
mov dword [rbx], 0x3ff2badc
mov dword [rbx + 4], 0x6f529612
mov word [rbx + 8], 0xf3e5
lea rcx, [0x14015b390]
call fcn.14010618c
nop
jmp 0x140101c00
lea rbx, [rdx + rsi]
cmp byte [rbx + 0xd], 0
je 0x140101c3d
xor byte [rbx], 0x91
xor byte [rbx + 1], 0xd3
xor byte [rbx + 2], 0x91
xor byte [rbx + 3], 0x4d
xor byte [rbx + 4], 0x7d
xor byte [rbx + 5], 0xe5
xor byte [rbx + 6], 0x3d
xor byte [rbx + 7], 9
xor byte [rbx + 8], 0x91
xor byte [rbx + 9], 0xd3
xor byte [rbx + 0xa], 0x91
xor byte [rbx + 0xb], 0x4d
xor byte [rbx + 0xc], 0x7d
mov byte [rbx + 0xd], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x80], xmm1
mov r8, rdi
inc r8
cmp byte [rbx + r8], 0
jne 0x140101c50
mov rdx, rbx
lea rcx, [rsp + 0x70]
call fcn.1400d9a90
nop
mov ecx, 0x160
mov eax, dword [rcx + rsi]
mov edx, 0x168
test al, 1
jne 0x140101cac
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov dword [rbx + 0xa], 0x1574037
mov dword [rbx], 0x44329aa7
mov dword [rbx + 4], 0x3e938025
mov word [rbx + 8], 0xb686
lea rcx, [0x14015b370]
call fcn.14010618c
nop
jmp 0x140101cb0
lea rbx, [rdx + rsi]
cmp byte [rbx + 0xd], 0
je 0x140101ced
xor byte [rbx], 0xf1
xor byte [rbx + 1], 0xd7
xor byte [rbx + 2], 0x45
xor byte [rbx + 3], 0x25
xor byte [rbx + 4], 0x57
xor byte [rbx + 5], 0xe5
xor byte [rbx + 6], 0xc5
xor byte [rbx + 7], 0x73
xor byte [rbx + 8], 0xf1
xor byte [rbx + 9], 0xd7
xor byte [rbx + 0xa], 0x45
xor byte [rbx + 0xb], 0x25
xor byte [rbx + 0xc], 0x57
mov byte [rbx + 0xd], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x60], xmm1
mov r8, rdi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x140101d00
mov rdx, rbx
lea rcx, [rbp - 0x70]
call fcn.1400d9a90
nop
mov ecx, 0x158
mov eax, dword [rcx + rsi]
mov edx, 0x1b0
test al, 1
jne 0x140101d5b
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov dword [rbx + 0xa], 0x1b712ec
mov dword [rbx], 0x9cf9ebb
mov dword [rbx + 4], 0x789330fa
mov word [rbx + 8], 0xad8d
lea rcx, [0x14015b350]
call fcn.14010618c
nop
jmp 0x140101d5f
lea rbx, [rdx + rsi]
cmp byte [rbx + 0xd], 0
je 0x140101d9c
xor byte [rbx], 0xe3
xor byte [rbx + 1], 0xfb
xor byte [rbx + 2], 0xa1
xor byte [rbx + 3], 0x5f
xor byte [rbx + 4], 0xb7
xor byte [rbx + 5], 0x7d
xor byte [rbx + 6], 0xcb
xor byte [rbx + 7], 0x1d
xor byte [rbx + 8], 0xe3
xor byte [rbx + 9], 0xfb
xor byte [rbx + 0xa], 0xa1
xor byte [rbx + 0xb], 0x5f
xor byte [rbx + 0xc], 0xb7
mov byte [rbx + 0xd], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x40], xmm1
mov r8, rdi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x140101db0
mov rdx, rbx
lea rcx, [rbp - 0x50]
call fcn.1400d9a90
nop
mov ecx, 0x1a4
mov eax, dword [rcx + rsi]
mov edx, 0x138
test al, 1
jne 0x140101e0b
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rdx + rsi]
mov dword [rbx + 0xa], 0x1ad67ab
mov dword [rbx], 0x67e7cf7b
mov dword [rbx + 4], 0xbe1b8ec5
mov word [rbx + 8], 0xcb79
lea rcx, [0x14015b330]
call fcn.14010618c
nop
jmp 0x140101e0f
lea rbx, [rdx + rsi]
cmp byte [rbx + 0xd], 0
je 0x140101e4c
xor byte [rbx], 0xb
xor byte [rbx + 1], 0xbd
xor byte [rbx + 2], 0x8b
xor byte [rbx + 3], 0x47
xor byte [rbx + 4], 0xad
xor byte [rbx + 5], 0xf7
xor byte [rbx + 6], 0x6b
xor byte [rbx + 7], 0xdb
xor byte [rbx + 8], 0xb
xor byte [rbx + 9], 0xbd
xor byte [rbx + 0xa], 0x8b
xor byte [rbx + 0xb], 0x47
xor byte [rbx + 0xc], 0xad
mov byte [rbx + 0xd], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x20], xmm1
mov r8, rdi
nop
inc r8
cmp byte [rbx + r8], 0
jne 0x140101e60
mov rdx, rbx
lea rcx, [rbp - 0x30]
call fcn.1400d9a90
nop
mov ecx, 0x1c0
mov eax, dword [rcx + rsi]
mov edx, 0x148
test al, 1
jne 0x140101ebb
or eax, 1
mov dword [rcx + rsi], eax
lea rbx, [rsi + rdx]
mov dword [rbx + 0xa], 0x1cb45da
mov dword [rbx], 0x45da7d21
mov dword [rbx + 4], 0x79d6439d
mov word [rbx + 8], 0x7d21
lea rcx, [0x14015b310]
call fcn.14010618c
nop
jmp 0x140101ebf
lea rbx, [rdx + rsi]
cmp byte [rbx + 0xd], 0
je 0x140101efc
xor byte [rbx], 0x77
xor byte [rbx + 1], 0x3f
xor byte [rbx + 2], 0xb5
xor byte [rbx + 3], 0x3d
xor byte [rbx + 4], 0xcb
xor byte [rbx + 5], 1
xor byte [rbx + 6], 0xb9
xor byte [rbx + 7], 1
xor byte [rbx + 8], 0x77
xor byte [rbx + 9], 0x3f
xor byte [rbx + 0xa], 0xb5
xor byte [rbx + 0xb], 0x3d
xor byte [rbx + 0xc], 0xcb
mov byte [rbx + 0xd], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp], xmm1
nop dword [rax + rax]
inc rdi
cmp byte [rbx + rdi], 0
jne 0x140101f10
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp - 0x10]
call fcn.1400d9a90
nop
lea rbx, [rsp + 0x50]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x28]
nop dword [rax]
mov rdx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x140101f4d
mov rdx, qword [rbx]
lea rcx, [rsp + 0x28]
cmp rsi, 0x10
cmovae rcx, r14
cmp rdi, qword [rbx + 0x10]
jne 0x140101f6c
mov r8, rdi
call fcn.140126600
test eax, eax
je 0x140101fc4
add rbx, 0x20
lea rax, [rbp + 0x10]
cmp rbx, rax
jne 0x140101f40
lea r9, [fcn.1400d8f80]
mov edx, 0x20
lea r8d, [rdx - 0x1a]
lea rcx, [rsp + 0x50]
call fcn.140106224
nop
lea rcx, [rsp + 0x28]
call fcn.1400d93d0
xor al, al
mov rcx, qword [rbp + 0x20]
xor rcx, rsp
call fcn.140105b00
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
mov rax, qword [0x1401a6860]
test rax, rax
jne 0x140102081
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
nop dword [rax + rax]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r11d, dword [rax + r8 + 0x88]
add r11, r8
cmp r11, r8
je 0x140102062
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x140102062
mov edi, dword [r11 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec ebx
lea rax, [rdi + rbx*4]
mov eax, dword [rax + r8]
add rax, r8
mov edx, 0x8a60f977
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x14010205e
nop dword [rax]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax]
lea rax, [rax + 1]
test cl, cl
jne 0x140102040
cmp edx, 0x9b0a532c
je 0x1401020b7
test ebx, ebx
jne 0x140102020
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x140102078
cmp qword [rax + 0x30], 0
jne 0x140101ff0
xor eax, eax
mov qword [0x1401a6860], rax
mov edx, 1
xor ecx, ecx
call rax
nop
lea r9, [fcn.1400d8f80]
mov edx, 0x20
lea r8d, [rdx - 0x1a]
lea rcx, [rsp + 0x50]
call fcn.140106224
nop
lea rcx, [rsp + 0x28]
call fcn.1400d93d0
mov al, 1
jmp 0x140101fa0
mov ecx, dword [r11 + 0x1c]
add rcx, r8
mov eax, dword [r11 + 0x24]
add rax, r8
movzx eax, word [rax + rbx*2]
mov eax, dword [rcx + rax*4]
add rax, r8
jmp 0x14010207a