Function at 0x1400792e0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
mov rax, qword [0x14009d040]
xor rax, rsp
mov qword [rbp + 0xa0], rax
mov rbx, rcx
mov dword [rbp - 0x80], 0x6b6a6d42
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x7c], xmm0
mov dword [rbp - 0x6c], eax
mov word [rbp - 0x68], ax
mov byte [rbp - 0x66], al
xor esi, esi
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
nop dword [rax]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x1b
jb 0x140079340
mov dword [rbp + 0x20], 0xb3b2b142
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x24], xmm0
mov dword [rbp + 0x34], eax
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x18
jb 0x140079390
mov dword [rbp + 0x40], 0xfbf8f9f4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x44], xmm0
mov dword [rbp + 0x54], eax
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x18
jb 0x1400793e0
lea rax, [0x14009d250]
cmp rax, rbx
je 0x14007948f
mov rdx, qword [0x14009d268]
cmp rdx, 0xf
jbe 0x140079454
mov rcx, qword [0x14009d250]
inc rdx
cmp rdx, 0x1000
jb 0x14007944f
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007995f
mov rcx, r8
call fcn.14007b120
movdqa xmm0, xmmword [0x14008ec90]
movdqu xmmword [0x14009d260], xmm0
mov byte [0x14009d250], sil
movups xmm0, xmmword [rbx]
movups xmmword [0x14009d250], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x14009d260], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], sil
mov dword [rsp + 0x60], 0x94b6a482
mov dword [rsp + 0x64], 0x65b9bbb1
mov qword [rsp + 0x68], 0x53a6a1b8
xor eax, eax
mov word [rsp + 0x70], ax
mov byte [rsp + 0x72], al
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
movabs r9, 0xed15a6ec11ce618a
nop word [rax + rax]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x60]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
add r8b, 0x3a
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x60], r8b
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x13
jb 0x1400794d0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400795a6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400795a6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xaebcc3f4
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400795a1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140079580
cmp r8d, 0xd8e937b6
je 0x1400795ab
test r9d, r9d
jne 0x140079560
mov rax, qword [rax]
jmp 0x140079530
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
lea rcx, [rsp + 0x60]
call rdx
mov qword [0x14009e450], rax
mov dword [rbp - 0x60], 0x63646518
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x5c], xmm0
mov qword [rbp - 0x4c], rax
mov word [rbp - 0x44], ax
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
nop dword [rax]
nop word [rax + rax]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x1e
jb 0x140079600
mov dword [rbp - 0x40], 0x4b444530
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x3c], xmm0
mov dword [rbp - 0x2c], eax
mov byte [rbp - 0x28], al
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
nop word [rax + rax]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x19
jb 0x140079650
mov rdx, qword [0x14009e450]
lea rcx, [rbp + 0x80]
call fcn.140078420
nop
mov dword [rbp - 0x20], 0x7b787974
xor eax, eax
mov qword [rbp - 0x1c], rax
mov dword [rbp - 0x14], eax
mov word [rbp - 0x10], ax
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
nop dword [rax]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x12
jb 0x1400796b0
mov dword [rbp], 0x6b6a6d02
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 4], xmm0
mov word [rbp + 0x14], ax
mov byte [rbp + 0x16], al
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
nop dword [rax + rax]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x17
jb 0x140079700
mov dword [rsp + 0x30], 0x3a050513
mov dword [rsp + 0x34], 0xe180038
mov dword [rsp + 0x38], 0xe031919
mov dword [rsp + 0x3c], 0x5100f09
mov dword [rsp + 0x40], 0x712072c
mov dword [rsp + 0x44], 0x261f1702
mov dword [rsp + 0x48], 0xd1e1925
mov dword [rsp + 0x4c], 0x5f641c20
mov byte [rsp + 0x50], 0xac
xor eax, eax
mov qword [rsp + 0x51], rax
mov dword [rsp + 0x59], eax
mov word [rsp + 0x5d], ax
mov byte [rsp + 0x5f], al
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
movabs r9, 0x7478415419b689a2
nop dword [rax]
nop dword [rax + rax]
mov rcx, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
movzx edx, byte [rsp + rax + 0x30]
add rcx, r9
mov rax, rcx
and rax, rdx
imul r8, rax, 0xfffffffffffffffe
add r8, rcx
add r8, rdx
sub r8b, 0x6e
mov rax, qword [rsp + 0x20]
mov byte [rsp + rax + 0x30], r8b
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x30
jb 0x1400797a0
lea rcx, [rsp + 0x30]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x1400797f4
lea rcx, [rbp + 0x80]
cmp qword [rbp + 0x98], 0xf
cmova rcx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x90]
cmp r8, rax
jne 0x140079832
lea rdx, [rsp + 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400798e6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400798c6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400798c6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xed533933
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400798c1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400798a0
cmp r8d, 0x6889f563
je 0x1400798cb
test r9d, r9d
jne 0x140079880
mov rax, qword [rax]
jmp 0x140079850
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
mov dword [rbp + 0x60], 0xdbdad9aa
xorps xmm0, xmm0
movups xmmword [rbp + 0x64], xmm0
mov qword [rsp + 0x20], rsi
mov rax, qword [rsp + 0x20]
nop
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
mov rax, qword [rsp + 0x20]
inc rax
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
cmp rax, 0x14
jb 0x140079900
mov rdx, qword [rbp + 0x98]
cmp rdx, 0xf
jbe 0x14007996b
inc rdx
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140079966
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140079966
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007b120
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.14007b100
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret