Function at 0x1401757a0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Create thread
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x480]
sub rsp, 0x580
mov rax, qword [0x140217010]
xor rax, rsp
mov qword [rbp + 0x470], rax
mov rdi, rcx
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x118], xmm0
mov qword [rbp + 0x128], rax
mov ecx, 0xd0
call fcn.1401e2ee0
mov rbx, rax
mov qword [rbp + 0xf8], rax
xor edx, edx
mov r8d, 0xd0
mov rcx, rax
call fcn.1401e40c6
mov rcx, rbx
call fcn.1401745d0
mov qword [rbp + 0x118], rax
mov byte [rbp + 0x120], 0
mov byte [rbp + 0x128], 0
mov ecx, 0x18
call fcn.1401e2ee0
lea rcx, [rbp + 0x118]
mov qword [rax], rcx
mov qword [rax + 8], rdi
lea rcx, [0x140176190]
mov qword [rax + 0x10], rcx
mov qword [rbp + 0xf8], rax
lea rcx, [rbp + 0x138]
mov qword [rsp + 0x28], rcx
xor r13d, r13d
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [0x140176900]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 0x130], rax
test rax, rax
je 0x140176171
mov rcx, qword [0x140217c10]
test rcx, rcx
jne 0x140175937
mov qword [rbp + 0x100], 5
nop dword [rax]
mov byte [rbp - 0x70], 0x1c
mov al, 0x5b
mov cl, 0x7d
mov dl, 0x71
mov r8b, 0x79
mov r9b, 0x70
mov r10b, 0x73
movzx r11d, r10b
mov bl, 0x6c
xor edi, edi
xor al, 0x1c
mov byte [rbp - 0x6f], al
xor cl, 0x1c
mov byte [rbp - 0x6e], cl
xor dl, 0x1c
mov byte [rbp - 0x6d], dl
xor r8b, 0x1c
mov byte [rbp - 0x6c], r8b
xor r9b, 0x1c
mov byte [rbp - 0x6b], r9b
xor r10b, 0x1c
mov byte [rbp - 0x6a], r10b
xor r11b, 0x1c
mov byte [rbp - 0x69], r11b
xor bl, 0x1c
mov byte [rbp - 0x68], bl
mov byte [rbp - 0x67], dil
lea r9, [rbp - 0x6f]
xor r8d, r8d
xor ecx, ecx
call fcn.140177d30
mov qword [0x140217c10], rax
lea rcx, [rbp + 0x100]
call fcn.1401747f0
mov rcx, qword [0x140217c10]
test rcx, rcx
je 0x1401758b0
mov rdx, qword [0x1402179a0]
test rdx, rdx
jne 0x140175ad1
mov r11d, r13d
mov r10d, 0x829b88ef
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov r12, rbx
nop word [rax + rax]
movups xmm0, xmmword [rbx + 0x58]
movups xmmword [rbp - 0x70], xmm0
movd eax, xmm0
sub ax, 8
test r11d, r11d
je 0x1401759bd
mov rcx, qword [rbp - 0x68]
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x30c6d56b
cmp rcx, r8
je 0x1401759b4
nop dword [rax]
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1401759a0
cmp edx, r11d
jne 0x140175aad
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r14, qword [rax + r9 + 0x88]
mov edi, r14d
add rdi, r9
shr r14, 0x20
cmp rdi, r9
je 0x140175aad
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x140175aad
mov r15d, dword [rdi + 0x20]
dec r8d
lea rax, [r15 + r8*4]
mov eax, dword [rax + r9]
add rax, r9
mov edx, 0x30c6d56b
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x140175a26
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax]
lea rax, [rax + 1]
test cl, cl
jne 0x140175a10
cmp edx, r10d
je 0x140175a32
test r8d, r8d
jne 0x1401759f1
jmp 0x140175aad
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
cmp rdx, rdi
jbe 0x140175ac3
lea rax, [r14 + rdi]
cmp rdx, rax
jae 0x140175ac3
mov r11d, 0x30c6d56b
mov r10d, r11d
movzx eax, byte [rdx]
cmp al, 0x2e
je 0x140175a87
nop word [rax + rax]
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
inc rdx
movzx eax, byte [rdx]
cmp al, 0x2e
jne 0x140175a70
inc rdx
movzx eax, byte [rdx]
test al, al
je 0x140175aa9
movsx eax, al
xor eax, r10d
imul r10d, eax, 0x1000193
lea rdx, [rdx + 1]
movzx eax, byte [rdx]
test al, al
jne 0x140175a91
mov rbx, qword [r12]
mov rbx, qword [rbx]
cmp rbx, r12
je 0x140175ac0
cmp qword [rbx + 0x30], 0
jne 0x140175970
mov rdx, r13
mov qword [0x1402179a0], rdx
mov rcx, qword [0x140217c10]
call rdx
test eax, eax
je 0x140175b75
cmp qword [0x140217c18], 0
jne 0x140175b75
mov qword [rbp + 0xf8], 5
nop dword [rax]
nop dword [rax + rax]
movdqa xmm0, xmmword [str.c__r]
movdqu xmmword [rbp - 0x60], xmm0
mov dword [rbp - 0x50], 0x140c070d
mov dword [rbp - 0x4c], 0x10020f20
mov word [rbp - 0x48], 0x10
mov rcx, r13
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rbp - 0x60]
xor byte [rbp + rcx - 0x5f], al
inc rcx
cmp rcx, 0x18
jb 0x140175b30
mov byte [rbp - 0x47], 0
xor r9d, r9d
lea r8, [rbp - 0x5f]
mov rcx, qword [0x140217c10]
call fcn.140177d30
mov qword [0x140217c18], rax
lea rcx, [rbp + 0xf8]
call fcn.1401747f0
cmp qword [0x140217c18], 0
je 0x140175b00
call fcn.1401796d0
mov rcx, rax
lea rdx, [rbp + 0x100]
call fcn.140177530
call fcn.140176e80
cmp eax, dword [rbp + 0x100]
jne 0x140175b75
call fcn.1401792d0
lea rax, [rbp - 0x28]
mov qword [rbp + 0xf8], rax
movdqa xmm0, xmmword [0x140207ed0]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0xe0e
xor eax, eax
mov byte [rbp - 0x2e], al
mov rcx, r13
movzx eax, byte [rbp - 0x40]
xor byte [rbp + rcx - 0x3f], al
inc rcx
cmp rcx, 0x11
jb 0x140175bc1
mov byte [rbp - 0x2e], 0
mov qword [rbp - 0x28], r13
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], 0xf
lea rax, [rbp - 0x3f]
mov r14, 0xffffffffffffffff
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x140175bf4
lea rdx, [rbp - 0x3f]
lea rcx, [rbp - 0x28]
call fcn.14016dcb0
nop
mov cl, 0x14
mov dword [rsp + 0x40], 0x66715f14
mov dword [rsp + 0x44], 0x2778717a
mov dword [rsp + 0x48], 0x78703a26
mov word [rsp + 0x4c], 0x78
mov rax, r13
xor byte [rsp + rax + 0x41], cl
inc rax
cmp rax, 0xc
jae 0x140175c44
movzx ecx, byte [rsp + 0x40]
jmp 0x140175c30
mov byte [rsp + 0x4d], 0
mov qword [rbp - 8], r13
mov qword [rbp + 8], r13
mov qword [rbp + 0x10], 0xf
lea rax, [rsp + 0x41]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x140175c61
lea rdx, [rsp + 0x41]
lea rcx, [rbp - 8]
call fcn.14016dcb0
nop
lea rdx, [rbp - 0x28]
lea rcx, [rbp - 8]
call fcn.14017a010
mov qword [0x140217c00], rax
call fcn.1401796d0
mov r15, rax
mov qword [0x140217c10], rax
lea rax, [rbp + 0x18]
mov qword [rbp - 0x70], rax
mov cl, 0x5e
mov dword [rsp + 0x30], 0x2a3b195e
mov dword [rsp + 0x34], 0x3a303709
mov dword [rsp + 0x38], 0x3b0c2931
mov word [rsp + 0x3c], 0x2a3d
xor eax, eax
mov byte [rsp + 0x3e], al
mov rax, r13
nop
xor byte [rsp + rax + 0x31], cl
inc rax
cmp rax, 0xd
jae 0x140175ce4
movzx ecx, byte [rsp + 0x30]
jmp 0x140175cd0
mov byte [rsp + 0x3e], 0
mov qword [rbp + 0x18], r13
mov qword [rbp + 0x28], r13
mov qword [rbp + 0x30], 0xf
lea rax, [rsp + 0x31]
mov r8, r14
inc r8
cmp byte [rax + r8], 0
jne 0x140175d01
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x18]
call fcn.14016dcb0
nop
mov byte [rsp + 0x60], 0xc
mov al, 0x59
mov cl, 0x7f
mov dl, 0x69
mov r8b, 0x7e
mov r9b, 0x3f
mov r10b, 0x3e
mov r11b, 0x22
mov bl, 0x68
mov dil, 0x60
movzx esi, dil
xor r12d, r12d
xor al, 0xc
mov byte [rsp + 0x61], al
xor cl, 0xc
mov byte [rsp + 0x62], cl
xor dl, 0xc
mov byte [rsp + 0x63], dl
xor r8b, 0xc
mov byte [rsp + 0x64], r8b
xor r9b, 0xc
mov byte [rsp + 0x65], r9b
xor r10b, 0xc
mov byte [rsp + 0x66], r10b
xor r11b, 0xc
mov byte [rsp + 0x67], r11b
xor bl, 0xc
mov byte [rsp + 0x68], bl
xor dil, 0xc
mov byte [rsp + 0x69], dil
xor sil, 0xc
mov byte [rsp + 0x6a], sil
mov byte [rsp + 0x6b], r12b
mov qword [rbp + 0x38], r13
mov qword [rbp + 0x48], r13
mov qword [rbp + 0x50], 0xf
lea rax, [rsp + 0x61]
mov r8, r14
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x140175db0
lea rdx, [rsp + 0x61]
lea rcx, [rbp + 0x38]
call fcn.14016dcb0
nop
lea r9, [rbp + 0x108]
mov r8, r15
lea rdx, [rbp + 0x18]
lea rcx, [rbp + 0x38]
call fcn.140179b40
movzx eax, word [rbp + 0x110]
mov edx, dword [rbp + 0x108]
sub ax, dx
mov word [0x140217068], ax
movzx eax, word [rbp + 0x114]
mov ecx, dword [rbp + 0x10c]
sub ax, cx
mov word [0x14021706a], ax
mov dword [0x140217c08], edx
mov dword [0x140217c20], ecx
mov r15, qword [0x140217c10]
lea rax, [rbp + 0x58]
mov qword [rbp - 0x70], rax
movdqa xmm0, xmmword [0x140207e30]
movdqu xmmword [rsp + 0x30], xmm0
mov rcx, r13
nop dword [rax]
movzx eax, byte [rsp + 0x30]
xor byte [rsp + rcx + 0x31], al
inc rcx
cmp rcx, 0xe
jb 0x140175e40
mov byte [rsp + 0x3f], 0
mov qword [rbp + 0x58], r13
mov qword [rbp + 0x68], r13
mov qword [rbp + 0x70], 0xf
lea rax, [rsp + 0x31]
mov r8, r14
nop
inc r8
cmp byte [rax + r8], 0
jne 0x140175e70
lea rdx, [rsp + 0x31]
lea rcx, [rbp + 0x58]
call fcn.14016dcb0
nop
mov byte [rsp + 0x70], 0x2d
mov al, 0x78
mov cl, 0x5e
mov dl, 0x48
mov r8b, 0x5f
mov r9b, 0x1e
mov r10b, 0x1f
mov r11b, 3
mov bl, 0x49
mov dil, 0x41
movzx esi, dil
xor r12d, r12d
xor al, 0x2d
mov byte [rsp + 0x71], al
xor cl, 0x2d
mov byte [rsp + 0x72], cl
xor dl, 0x2d
mov byte [rsp + 0x73], dl
xor r8b, 0x2d
mov byte [rsp + 0x74], r8b
xor r9b, 0x2d
mov byte [rsp + 0x75], r9b
xor r10b, 0x2d
mov byte [rsp + 0x76], r10b
xor r11b, 0x2d
mov byte [rsp + 0x77], r11b
xor bl, 0x2d
mov byte [rsp + 0x78], bl
xor dil, 0x2d
mov byte [rsp + 0x79], dil
xor sil, 0x2d
mov byte [rsp + 0x7a], sil
mov byte [rsp + 0x7b], r12b
mov qword [rbp + 0x78], r13
mov qword [rbp + 0x88], r13
mov qword [rbp + 0x90], 0xf
lea rax, [rsp + 0x71]
mov r8, r14
inc r8
cmp byte [rax + r8], r12b
jne 0x140175f20
lea rdx, [rsp + 0x71]
lea rcx, [rbp + 0x78]
call fcn.14016dcb0
nop
lea r9, [rbp + 0x140]
mov r8, r15
lea rdx, [rbp + 0x58]
lea rcx, [rbp + 0x78]
call fcn.14017a130
mov r15, qword [0x140217c10]
lea rax, [rbp + 0x98]
mov qword [rbp - 0x70], rax
mov cl, 0x28
mov dword [rsp + 0x50], 0x5c4d6f28
mov dword [rsp + 0x54], 0x5b49446b
mov dword [rsp + 0x58], 0x4549665b
mov word [rsp + 0x5c], 0x694d
xor eax, eax
mov byte [rsp + 0x5e], al
mov rax, r13
nop dword [rax + rax]
xor byte [rsp + rax + 0x51], cl
inc rax
cmp rax, 0xd
jae 0x140175fa4
movzx ecx, byte [rsp + 0x50]
jmp 0x140175f90
mov byte [rsp + 0x5e], 0
mov qword [rbp + 0x98], r13
mov qword [rbp + 0xa8], r13
mov qword [rbp + 0xb0], 0xf
lea rax, [rsp + 0x51]
mov r8, r14
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140175fd0
lea rdx, [rsp + 0x51]
lea rcx, [rbp + 0x98]
call fcn.14016dcb0
nop
mov byte [rbp - 0x80], 0x13
mov al, 0x46
mov cl, 0x60
mov dl, 0x76
mov r8b, 0x61
mov r9b, 0x20
mov r10b, 0x21
mov r11b, 0x3d
mov bl, 0x77
mov dil, 0x7f
movzx esi, dil
xor r12d, r12d
xor al, 0x13
mov byte [rbp - 0x7f], al
xor cl, 0x13
mov byte [rbp - 0x7e], cl
xor dl, 0x13
mov byte [rbp - 0x7d], dl
xor r8b, 0x13
mov byte [rbp - 0x7c], r8b
xor r9b, 0x13
mov byte [rbp - 0x7b], r9b
xor r10b, 0x13
mov byte [rbp - 0x7a], r10b
xor r11b, 0x13
mov byte [rbp - 0x79], r11b
xor bl, 0x13
mov byte [rbp - 0x78], bl
xor dil, 0x13
mov byte [rbp - 0x77], dil
xor sil, 0x13
mov byte [rbp - 0x76], sil
mov byte [rbp - 0x75], r12b
mov qword [rbp + 0xb8], r13
mov qword [rbp + 0xc8], r13
mov qword [rbp + 0xd0], 0xf
lea rax, [rbp - 0x7f]
inc r14
cmp byte [rax + r14], r12b
jne 0x140176076
mov r8, r14
lea rdx, [rbp - 0x7f]
lea rcx, [rbp + 0xb8]
call fcn.14016dcb0
nop
lea r9, [rbp + 0x250]
mov r8, r15
lea rdx, [rbp + 0x98]
lea rcx, [rbp + 0xb8]
call fcn.14017a130
lea r8, [rbp + 0x360]
call fcn.140179490
lea rax, [0x14020681f]
mov qword [0x140217070], rax
mov edx, 0x96
lea rcx, [rbp + 0xd8]
call fcn.140176b50
cmp qword [rax + 0x18], 0x10
jb 0x1401760e5
mov rax, qword [rax]
mov qword [0x140217070], rax
mov rdx, qword [rbp + 0xf0]
cmp rdx, 0x10
jb 0x140176130
inc rdx
mov rcx, qword [rbp + 0xd8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14017612b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14017612b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401e2f1c
call fcn.140174d30
call fcn.140175160
nop word [rax + rax]
cmp qword [0x140217c10], 0
je 0x140176158
call fcn.140176e80
test eax, eax
jne 0x140176158
call fcn.140177f70
mov qword [rbp + 0xf8], 0x64
lea rcx, [rbp + 0xf8]
call fcn.1401747f0
jmp 0x140176140
mov dword [rbp + 0x138], r13d
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3