Function at 0x1400027b8
Capabilities:
Encode data using xor
Hash data using fnv
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rdi
push r14
sub rsp, 0x10
mov rdx, qword [0x1400060f0]
xor r8d, r8d
movabs rbp, 0xcbf29ce484222325
movabs r14, 0x100000001b3
test rdx, rdx
jne 0x14000287f
sidt [rsp]
mov rax, qword [rax - 0x16]
mov edx, dword [rax + 8]
movzx eax, word [rax + 6]
shl rdx, 0x10
or rdx, rax
and rdx, 0xffffffffffffffe0
shl rdx, 0x10
mov eax, 0x5a4d
cmp word [rdx], ax
jne 0x14000286f
movsxd rax, dword [rdx + 0x3c]
cmp dword [rax + rdx], 0x4550
jne 0x14000286f
mov ecx, 0x8664
cmp word [rax + rdx + 4], cx
jne 0x14000286f
mov eax, dword [rax + rdx + 0x88]
mov r9, rbp
mov ecx, dword [rax + rdx + 0xc]
add rcx, rdx
mov al, byte [rcx]
test al, al
je 0x14000286f
inc rcx
movsx rax, al
xor r9, rax
imul r9, r14
mov al, byte [rcx]
test al, al
jne 0x14000284c
movabs rax, 0x9be7f70164f3dbf0
cmp r9, rax
je 0x140002878
sub rdx, 0x200000
jmp 0x140002812
mov qword [0x1400060f0], rdx
movsxd rax, dword [rdx + 0x3c]
mov ecx, dword [rax + rdx + 0x88]
add rcx, rdx
mov r11d, dword [rcx + 0x1c]
mov r9d, dword [rcx + 0x20]
add r11, rdx
mov ebx, dword [rcx + 0x24]
add r9, rdx
mov edi, dword [rcx + 0x18]
add rbx, rdx
mov edx, r8d
test edi, edi
je 0x1400028ef
mov ecx, dword [r9]
mov r10, rbp
add rcx, qword [0x1400060f0]
mov al, byte [rcx]
test al, al
je 0x1400028e5
inc rcx
movsx rax, al
xor r10, rax
imul r10, r14
mov al, byte [rcx]
test al, al
jne 0x1400028be
movabs rax, 0x48b8617d81fdd475
cmp r10, rax
je 0x140002b85
inc edx
add r9, 4
cmp edx, edi
jb 0x1400028ab
mov rax, r8
mov rcx, qword [0x1400060f0]
mov r9d, r8d
mov qword [0x1400060f8], rax
movsxd rax, dword [rcx + 0x3c]
mov edx, dword [rax + rcx + 0x88]
add rdx, rcx
mov r11d, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add r11, rcx
mov ebx, dword [rdx + 0x24]
add r10, rcx
mov edi, dword [rdx + 0x18]
add rbx, rcx
test edi, edi
je 0x140002972
mov ecx, dword [r10]
mov rdx, rbp
add rcx, qword [0x1400060f0]
mov al, byte [rcx]
test al, al
je 0x140002966
inc rcx
movsx rax, al
xor rdx, rax
imul rdx, r14
mov al, byte [rcx]
test al, al
jne 0x14000293f
movabs rax, 0x7f6272c86a6eeadc
cmp rdx, rax
je 0x140002b9b
inc r9d
add r10, 4
cmp r9d, edi
jb 0x14000292c
mov rax, r8
mov rcx, qword [0x1400060f0]
mov r9d, r8d
mov qword [0x140006100], rax
movsxd rax, dword [rcx + 0x3c]
mov edx, dword [rax + rcx + 0x88]
add rdx, rcx
mov r11d, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add r11, rcx
mov ebx, dword [rdx + 0x24]
add r10, rcx
mov edi, dword [rdx + 0x18]
add rbx, rcx
test edi, edi
je 0x1400029f5
mov ecx, dword [r10]
mov rdx, rbp
add rcx, qword [0x1400060f0]
mov al, byte [rcx]
test al, al
je 0x1400029e9
inc rcx
movsx rax, al
xor rdx, rax
imul rdx, r14
mov al, byte [rcx]
test al, al
jne 0x1400029c2
movabs rax, 0xb61941b7eb2f33e5
cmp rdx, rax
je 0x140002bb2
inc r9d
add r10, 4
cmp r9d, edi
jb 0x1400029af
mov rax, r8
mov rcx, qword [0x1400060f0]
mov r9d, r8d
mov qword [0x140006108], rax
movsxd rax, dword [rcx + 0x3c]
mov edx, dword [rax + rcx + 0x88]
add rdx, rcx
mov r11d, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add r11, rcx
mov ebx, dword [rdx + 0x24]
add r10, rcx
mov edi, dword [rdx + 0x18]
add rbx, rcx
test edi, edi
je 0x140002a78
mov ecx, dword [r10]
mov rdx, rbp
add rcx, qword [0x1400060f0]
mov al, byte [rcx]
test al, al
je 0x140002a6c
inc rcx
movsx rax, al
xor rdx, rax
imul rdx, r14
mov al, byte [rcx]
test al, al
jne 0x140002a45
movabs rax, 0x8a9495b5004b3e52
cmp rdx, rax
je 0x140002bc9
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002a32
mov rax, r8
mov rcx, qword [0x1400060f0]
mov r9d, r8d
mov qword [0x140006110], rax
movsxd rax, dword [rcx + 0x3c]
mov edx, dword [rax + rcx + 0x88]
add rdx, rcx
mov r11d, dword [rdx + 0x1c]
mov r10d, dword [rdx + 0x20]
add r11, rcx
mov ebx, dword [rdx + 0x24]
add r10, rcx
mov edi, dword [rdx + 0x18]
add rbx, rcx
test edi, edi
je 0x140002afb
mov ecx, dword [r10]
mov rdx, rbp
add rcx, qword [0x1400060f0]
mov al, byte [rcx]
test al, al
je 0x140002aef
inc rcx
movsx rax, al
xor rdx, rax
imul rdx, r14
mov al, byte [rcx]
test al, al
jne 0x140002ac8
movabs rax, 0x974adb99dcff7a24
cmp rdx, rax
je 0x140002be0
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140002ab5
mov rax, r8
mov rcx, qword [0x1400060f0]
mov qword [0x140006118], rax
movsxd rax, dword [rcx + 0x3c]
mov edx, dword [rax + rcx + 0x88]
add rdx, rcx
mov r11d, dword [rdx + 0x1c]
mov r9d, dword [rdx + 0x20]
add r11, rcx
mov ebx, dword [rdx + 0x24]
add r9, rcx
mov edi, dword [rdx + 0x18]
add rbx, rcx
mov ecx, r8d
test edi, edi
je 0x140002c08
mov edx, dword [r9]
mov r10, rbp
add rdx, qword [0x1400060f0]
mov al, byte [rdx]
test al, al
je 0x140002b76
inc rdx
movsx rax, al
xor r10, rax
imul r10, r14
mov al, byte [rdx]
test al, al
jne 0x140002b4f
movabs rax, 0x52478b3fd7abc6d
cmp r10, rax
je 0x140002bf7
inc ecx
add r9, 4
cmp ecx, edi
jb 0x140002b3c
jmp 0x140002c08
mov eax, edx
movzx ecx, word [rbx + rax*2]
mov eax, dword [r11 + rcx*4]
add rax, qword [0x1400060f0]
jmp 0x1400028f2
mov eax, r9d
movzx ecx, word [rbx + rax*2]
mov eax, dword [r11 + rcx*4]
add rax, qword [0x1400060f0]
jmp 0x140002975
mov eax, r9d
movzx ecx, word [rbx + rax*2]
mov eax, dword [r11 + rcx*4]
add rax, qword [0x1400060f0]
jmp 0x1400029f8
mov eax, r9d
movzx ecx, word [rbx + rax*2]
mov eax, dword [r11 + rcx*4]
add rax, qword [0x1400060f0]
jmp 0x140002a7b
mov eax, r9d
movzx ecx, word [rbx + rax*2]
mov eax, dword [r11 + rcx*4]
add rax, qword [0x1400060f0]
jmp 0x140002afe
mov eax, ecx
movzx ecx, word [rbx + rax*2]
mov r8d, dword [r11 + rcx*4]
add r8, qword [0x1400060f0]
mov rbx, qword [rsp + 0x20]
mov rbp, qword [rsp + 0x28]
mov rdi, qword [rsp + 0x30]
mov qword [0x140006120], r8
add rsp, 0x10
pop r14
ret