Function at 0x1401017e0
Capabilities:
Enumerate process modules
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3fa0]
mov eax, 0x40a0
call fcn.1403e4120
sub rsp, rax
movaps xmmword [rsp + 0x4090], xmm6
mov rax, qword [0x1405f98c0]
xor rax, rsp
mov qword [rbp + 0x3f80], rax
mov r15, rcx
lea r8, [rsp + 0x60]
mov edx, 0x4000
lea rcx, [rbp - 0x80]
call qword [sym.imp.KERNEL32.dll_K32EnumProcesses]
test eax, eax
jne 0x14010185e
lea r9, str.process:_could_not_enumerate_process..._will_retry_soon...
lea r8, str.CHECKPROCESS
lea edx, [rax + 4]
call fcn.1400c6f10
xor al, al
jmp 0x140101c8e
mov r12d, dword [rsp + 0x60]
shr r12, 2
mov dword [rsp + 0x20], 0
xor r13d, r13d
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x30], r13
lea ecx, [r13 + 0x18]
call fcn.1403e3660
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x38], r13
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x58], 8
mov dword [rsp + 0x20], 0x3f800000
mov r8, rax
lea edx, [r13 + 0x10]
lea rcx, [rsp + 0x38]
call fcn.1400eda30
nop
mov rcx, qword [r15 + 0xe8]
xorps xmm0, xmm0
test rcx, rcx
js 0x1401018e1
cvtsi2ss xmm0, rcx
jmp 0x1401018f6
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [rsp + 0x20]
call fcn.14043cb28
xor eax, eax
movabs rdi, 0x8000000000000000
movss xmm6, dword [0x14057a8a0]
comiss xmm0, xmm6
jb 0x140101926
subss xmm0, xmm6
comiss xmm0, xmm6
jae 0x140101926
mov rax, rdi
cvttss2si rbx, xmm0
add rbx, rax
mov rcx, qword [rsp + 0x30]
xorps xmm0, xmm0
test rcx, rcx
js 0x140101942
cvtsi2ss xmm0, rcx
jmp 0x140101957
mov rax, rcx
shr rax, 1
and ecx, 1
or rax, rcx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [rsp + 0x20]
call fcn.14043cb28
xor eax, eax
comiss xmm0, xmm6
jb 0x140101975
subss xmm0, xmm6
comiss xmm0, xmm6
jae 0x140101975
mov rax, rdi
cvttss2si rdx, xmm0
add rdx, rax
cmp rdx, rbx
cmovb rdx, rbx
cmp rdx, qword [rsp + 0x58]
jbe 0x140101995
lea rcx, [rsp + 0x20]
call fcn.1400ef4d0
mov rdi, qword [r15 + 0xe0]
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x1401019ce
nop dword [rax]
nop dword [rax + rax]
lea r8, [rbx + 0x10]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x20]
call fcn.1400ee700
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rdi
jne 0x1401019b0
mov r14, r13
movabs r11, 0xcbf29ce484222325
movabs r10, 0x100000001b3
mov r8, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
test r12, r12
je 0x140101b55
nop dword [rax + rax]
mov ebx, dword [rbp + r14*4 - 0x80]
mov ecx, ebx
shr ecx, 0x18
mov edx, ebx
shr edx, 0x10
mov eax, ebx
shr eax, 8
test ebx, ebx
je 0x140101b35
movzx esi, bl
xor rsi, r11
imul rsi, r10
movzx eax, al
xor rsi, rax
imul rsi, r10
movzx eax, dl
xor rsi, rax
imul rsi, r10
mov eax, ecx
xor rsi, rax
imul rsi, r10
mov rcx, qword [rsp + 0x50]
and rcx, rsi
add rcx, rcx
mov rax, qword [r8 + rcx*8 + 8]
cmp rax, rdi
je 0x140101a71
mov rcx, qword [r8 + rcx*8]
cmp ebx, dword [rax + 0x10]
je 0x140101a74
cmp rax, rcx
je 0x140101a71
mov rax, qword [rax + 8]
cmp ebx, dword [rax + 0x10]
jne 0x140101a61
jmp 0x140101a74
mov rax, r13
test rax, rax
jne 0x140101aa0
mov ecx, ebx
call fcn.140185e10
mov r8d, eax
mov edx, ebx
mov rcx, r15
call fcn.140100dc0
mov r8, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
nop word [rax + rax]
mov rdx, qword [rsp + 0x50]
and rdx, rsi
add rdx, rdx
mov rcx, qword [r8 + rdx*8 + 8]
cmp rcx, rdi
je 0x140101ad0
mov rax, qword [r8 + rdx*8]
cmp ebx, dword [rcx + 0x10]
je 0x140101ad3
nop
cmp rcx, rax
je 0x140101ad0
mov rcx, qword [rcx + 8]
cmp ebx, dword [rcx + 0x10]
jne 0x140101ac0
jmp 0x140101ad3
mov rcx, r13
test rcx, rcx
je 0x140101b35
mov rax, qword [r8 + rdx*8]
cmp qword [r8 + rdx*8 + 8], rcx
jne 0x140101afe
cmp rax, rcx
jne 0x140101af3
mov qword [r8 + rdx*8], rdi
mov qword [r8 + rdx*8 + 8], rdi
jmp 0x140101b0a
mov rdi, qword [rcx + 8]
mov qword [r8 + rdx*8 + 8], rdi
jmp 0x140101b0a
cmp rax, rcx
jne 0x140101b0a
mov rax, qword [rcx]
mov qword [r8 + rdx*8], rax
mov rdx, qword [rcx]
dec qword [rsp + 0x30]
mov rax, qword [rcx + 8]
mov qword [rax], rdx
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov edx, 0x18
call fcn.1403e3650
mov r8, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x28]
inc r14
cmp r14, r12
movabs r10, 0x100000001b3
movabs r11, 0xcbf29ce484222325
jb 0x140101a00
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x140101c3a
nop dword [rax]
nop word [rax + rax]
mov r9d, dword [rbx + 0x10]
mov dword [rsp + 0x64], r9d
movzx edx, r9b
xor rdx, r11
imul rdx, r10
mov eax, r9d
shr eax, 8
movzx ecx, al
xor rdx, rcx
imul rdx, r10
mov eax, r9d
shr eax, 0x10
movzx ecx, al
xor rdx, rcx
imul rdx, r10
mov eax, r9d
shr rax, 0x18
xor rdx, rax
imul rdx, r10
mov rax, qword [r15 + 0x108]
and rax, rdx
add rax, rax
mov rcx, qword [r15 + 0xf0]
mov r8, qword [rcx + rax*8 + 8]
cmp r8, qword [r15 + 0xe0]
je 0x140101cc3
mov rax, qword [rcx + rax*8]
cmp r9d, dword [r8 + 0x10]
je 0x140101bf5
cmp r8, rax
je 0x140101cc3
mov r8, qword [r8 + 8]
cmp r9d, dword [r8 + 0x10]
jne 0x140101be2
add r8, 0x18
mov rcx, r15
call fcn.140101ce0
lea rcx, [r15 + 0xd8]
lea rdx, [rsp + 0x64]
call fcn.140102a70
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rdi
movabs r10, 0x100000001b3
movabs r11, 0xcbf29ce484222325
jne 0x140101b70
mov r8, qword [rsp + 0x38]
test r8, r8
je 0x140101c82
mov rdx, qword [rsp + 0x48]
sub rdx, r8
and rdx, 0xfffffffffffffff8
mov rax, r8
cmp rdx, 0x1000
jb 0x140101c6c
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140101cd0
mov rcx, r8
call fcn.1403e3650
mov qword [rsp + 0x38], r13
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x28]
call fcn.1400ece10
mov al, 1
mov rcx, qword [rbp + 0x3f80]
xor rcx, rsp
call fcn.1403e3630
lea r11, [rsp + 0x40a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, str.invalid_unordered_map_K__T__key
call fcn.1403c23b0
nop
call fcn.1403fd768
int3