Function at 0x1401ec560
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
push rbp
push rbx
push rsi
push r13
lea rbp, [r11 - 0x5f]
sub rsp, 0xc8
mov rdx, qword [rcx + 0x20]
xor ebx, ebx
sub rdx, qword [rcx + 0x18]
movabs rax, 0x6d3a06d3a06d3a07
imul rdx
mov rsi, rcx
mov qword [rbp + 0x67], rbx
sar rdx, 8
mov r13d, ebx
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1401ec969
mov qword [r11 + 0x10], rdi
lea r9d, [rbx + 0x63]
mov qword [r11 + 0x18], r12
lea edi, [rbx + 0x77]
mov qword [r11 + 0x20], r14
lea r8d, [rbx + 0x72]
mov qword [r11 - 0x28], r15
movabs rdx, 0x4924924924924925
mov r15d, ebx
mov rcx, qword [rsi + 0x50]
mov rax, rdx
sub rcx, qword [rsi + 0x48]
mov r12, rbx
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1401ec905
mov r14, rbx
nop dword [rax + rax]
mov dword [rbp - 0x69], 0x720063
mov ecx, ebx
mov dword [rbp - 0x65], 0x700070
mov dword [rbp - 0x61], 0x77
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 - 0x69], cx
inc ecx
cmp ecx, 5
jb 0x1401ec620
mov rcx, qword [rsi + 0x18]
lea rdx, [rbp - 0x69]
add rcx, 4
mov word [rbp - 0x5f], bx
add rcx, r15
call fcn.1403cbeb0
test rax, rax
jne 0x1401ec8c4
mov dword [rbp - 0x5d], 0x60006c
mov ecx, ebx
mov dword [rbp - 0x59], 0x620071
mov dword [rbp - 0x55], 0x760077
mov word [rbp - 0x51], ax
nop dword [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 - 0x5d], cx
inc ecx
cmp ecx, 6
jb 0x1401ec670
mov rcx, qword [rsi + 0x18]
lea rdx, [rbp - 0x5d]
add rcx, 4
mov word [rbp - 0x51], bx
add rcx, r15
call fcn.1403cbeb0
test rax, rax
jne 0x1401ec8c4
mov r10, qword [rsi + 0x48]
lea r9, [r10 + 8]
add r9, r14
cmp qword [r9 + 0x18], 8
jb 0x1401ec6b5
mov r9, qword [r9]
mov rdx, qword [rsi + 0x18]
add rdx, 4
add rdx, r15
mov rax, rdx
sub r9, rdx
nop word [rax + rax]
movzx r8d, word [rax]
movzx ecx, word [rax + r9]
sub r8d, ecx
jne 0x1401ec6e6
add rax, 2
test ecx, ecx
jne 0x1401ec6d0
test r8d, r8d
jne 0x1401ec8c4
cmp dword [r10 + r14 + 0x30], 0x1fffff
jne 0x1401ec8c4
lea rcx, [rbp + 0xf]
mov qword [rbp + 0xf], rbx
mov qword [rbp + 0x1f], rbx
mov qword [rbp + 0x27], 7
call fcn.14013edcc
lea rdx, [rbp + 0xf]
mov rcx, rsi
call fcn.1401ed3b0
test al, al
jne 0x1401ec8c4
mov r8, qword [rsi + 0x48]
add r8, 8
add r8, r14
cmp qword [r8 + 0x18], 8
jb 0x1401ec740
mov r8, qword [r8]
mov dword [rbp - 0x4f], 0x790045
mov ecx, ebx
mov dword [rbp - 0x4b], 0x660076
mov dword [rbp - 0x47], 0x6b0076
mov dword [rbp - 0x43], 0x6b0067
mov dword [rbp - 0x3f], 0x680028
mov dword [rbp - 0x3b], 0x7f007e
mov dword [rbp - 0x37], 0x600069
mov dword [rbp - 0x33], 0x7b007e
mov dword [rbp - 0x2f], 0x650030
mov dword [rbp - 0x2b], 0x33007d
mov dword [rbp - 0x27], 0x760075
mov dword [rbp - 0x23], 0x720075
mov dword [rbp - 0x1f], 0x6a006b
mov dword [rbp - 0x1b], 0x6f003a
mov dword [rbp - 0x17], 0x740074
mov dword [rbp - 0x13], 0x3f006d
mov dword [rbp - 0xf], 0x510041
mov dword [rbp - 0xb], 0x30052
mov dword [rbp - 7], 0x5c0046
mov dword [rbp - 3], 6
mov dword [rbp + 1], 0x5e000d
mov dword [rbp + 5], 0xc0059
mov dword [rbp + 9], 2
nop dword [rax]
nop word [rax + rax]
movsxd rax, ecx
xor word [rbp + rax*2 - 0x4f], cx
inc ecx
cmp ecx, 0x2d
jb 0x1401ec7f0
lea rdx, [rbp - 0x4f]
mov word [rbp + 0xb], bx
xor ecx, ecx
call fcn.1401a8450
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1401ec897
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1401ec897
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x2c7209cc
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1401ec892
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x1401ec870
cmp r8d, 0x9330bef
je 0x1401ec89c
test r9d, r9d
jne 0x1401ec850
mov rax, qword [rax]
jmp 0x1401ec820
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 0x64
add rax, r10
call rax
call fcn.1401a9e40
xor ebx, ebx
lea edi, [rbx + 0x77]
mov rcx, qword [rsi + 0x50]
movabs rax, 0x4924924924924925
sub rcx, qword [rsi + 0x48]
inc r12
imul rcx
add r14, 0x38
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r12, rdx
jb 0x1401ec600
mov r13, qword [rbp + 0x67]
mov r8d, 0x72
lea r9d, [r8 - 0xf]
mov rcx, qword [rsi + 0x20]
inc r13
sub rcx, qword [rsi + 0x18]
movabs rax, 0x6d3a06d3a06d3a07
imul rcx
add r15, 0x258
mov qword [rbp + 0x67], r13
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp r13, rdx
movabs rdx, 0x4924924924924925
jb 0x1401ec5d0
mov r15, qword [rsp + 0xc0]
mov r14, qword [rsp + 0x108]
mov r12, qword [rsp + 0x100]
mov rdi, qword [rsp + 0xf8]
add rsp, 0xc8
pop r13
pop rsi
pop rbx
pop rbp
ret