Function at 0x7ff77f2eacc0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov rax, qword gs:[0x60]
mov r14, rcx
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov ebp, dword [rdx + rbx + 0x88]
add rbp, rbx
cmp rbp, rbx
je 0x7ff77f2ead7a
mov r11d, dword [rbp + 0x18]
test r11d, r11d
je 0x7ff77f2ead7a
mov esi, dword [rbp + 0x20]
dec r11d
mov r10d, 0xfc45d50e
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x7ff77f2ead75
nop dword [rax]
nop word [rax + rax]
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x7ff77f2ead40
cmp r10d, 0xb0f8fc37
je 0x7ff77f2ead82
test r11d, r11d
jne 0x7ff77f2ead13
mov rax, qword [rax]
jmp 0x7ff77f2eacf0
mov ecx, dword [rbp + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rbp + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [0x7ff77f37bf38]
add rax, rbx
call rax
mov edi, dword [0x7ff77f37bf3c]
mov rcx, qword [0x7ff77f37bf48]
mov qword [rsp + 0x60], rdi
lea r13, [rdi - 1]
not r13
and r13, r14
mov r14, qword [0x7ff77f37bf40]
lea rax, [r13 - 0x7fffff00]
cmp rax, r14
cmovb r14, rax
lea rax, [r13 + 0x7fffff00]
cmp rax, rcx
mov qword [rsp + 0x68], r14
cmova rcx, rax
xor edx, edx
mov rax, r13
mov qword [rsp + 0x70], rcx
div rdi
sub r13, rdx
lea r12, [rdi + r13]
xor edx, edx
mov rax, r12
sub rax, r13
mov r15, r13
sub r15, rax
cmp r13, rax
cmovbe r15, rdx
cmp r12, rcx
jbe 0x7ff77f2eae1d
cmp r15, r14
jb 0x7ff77f2eaffe
xor bl, bl
cmp r12, rcx
jae 0x7ff77f2eaefb
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov ebp, dword [rcx + rbx + 0x88]
add rbp, rbx
cmp rbp, rbx
je 0x7ff77f2eaebb
mov r11d, dword [rbp + 0x18]
test r11d, r11d
je 0x7ff77f2eaebb
mov esi, dword [rbp + 0x20]
dec r11d
mov r10d, 0x3b2cec74
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x7ff77f2eaeb6
movsx edx, cl
lea r9, [r9 + 1]
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
movzx ecx, byte [r9 - 1]
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
test cl, cl
jne 0x7ff77f2eae82
cmp r10d, 0x2a98590c
je 0x7ff77f2eaec0
test r11d, r11d
jne 0x7ff77f2eae63
mov rax, qword [rax]
jmp 0x7ff77f2eae40
mov ecx, dword [rbp + 0x24]
mov r9d, 4
mov rdi, qword [rsp + 0x60]
add rcx, rbx
mov r8d, 0x3000
movzx edx, word [rcx + r11*2]
mov ecx, dword [rbp + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
mov rdx, rdi
add rax, rbx
mov rcx, r12
call rax
xor bl, bl
test rax, rax
jne 0x7ff77f2eb000
cmp r15, r14
jbe 0x7ff77f2eafed
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rdi, qword [rax + 0x30]
movsxd rcx, dword [rdi + 0x3c]
mov ebp, dword [rcx + rdi + 0x88]
add rbp, rdi
cmp rbp, rdi
je 0x7ff77f2eafaa
mov r11d, dword [rbp + 0x18]
test r11d, r11d
je 0x7ff77f2eafaa
mov r14d, dword [rbp + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0xd9c88fc8
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rdi]
add r9, rdi
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x7ff77f2eafa5
movsx edx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov ecx, edx
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova ecx, edx
xor ecx, r10d
imul r10d, ecx, 0x1000193
test r8b, r8b
jne 0x7ff77f2eaf70
cmp r10d, 0x88bde568
je 0x7ff77f2eafb2
test r11d, r11d
jne 0x7ff77f2eaf50
mov rax, qword [rax]
jmp 0x7ff77f2eaf20
mov edx, dword [rbp + 0x24]
mov r9d, 4
add rdx, rdi
mov rcx, r15
movzx r8d, word [rdx + r11*2]
mov edx, dword [rbp + 0x1c]
add rdx, rdi
mov eax, dword [rdx + r8*4]
mov r8d, 0x3000
add rax, rdi
mov rdi, qword [rsp + 0x60]
mov rdx, rdi
call rax
test rax, rax
jne 0x7ff77f2eb000
mov r14, qword [rsp + 0x68]
add r12, rdi
test bl, bl
jne 0x7ff77f2eaffe
mov rcx, qword [rsp + 0x70]
jmp 0x7ff77f2eadfa
xor eax, eax
mov rbx, qword [rsp + 0x78]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret