Function at 0x1405ef5c6
Capabilities:
Access peb ldr_data
Authenticate hmac
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
ror ch, 0x44
movzx rcx, r14w
lahf
mov qword [r11 + 0x10], rbp
adc r8b, r14b
and rdx, r12
mov qword [r11 + 0x18], rsi
rol r8b, cl
movsxd rax, edi
push rdi
and ecx, r9d
movsx rax, r12w
push r12
shr dx, 0xa5
push r13
push r14
rcl rdx, 0x1f
sbb cx, sp
test r13b, 0xb1
push r15
btr rcx, rbp
add r13b, 0x1e
sub rsp, 0x150
setl r8b
mov rax, qword [0x14002c010]
sets r15b
xor rax, rsp
add rcx, 0x7d271b92
mov qword [rsp + 0x140], rax
sal r13b, 0x44
cmp r10d, r8d
mov r15, r9
movsx eax, r10w
xor ax, 0x296
shl dh, cl
mov r13d, 6
jmp 0x1405ef657
mov word [r11 - 0x56], r13w
cmovg dx, r11w
dec r8w
sub r12d, r12d
movsxd r8, r13d
sets ah
jmp 0x1405ef673
mov edx, r12d
cwde
mov ecx, r12d
cmova ax, di
lea r8, str.tq1_44
movzx eax, bp
cdqe
nop
inc al
cmovne ax, dx
movzx eax, byte [rcx + r8]
jmp 0x1405ef69b
mov byte [rsp + rcx + 0x22], al
jmp 0x1405ef6a4
inc edx
lea rcx, [rcx + 1]
stc
cmp r15d, 0xbe0865
test spl, 0xb4
cmp edx, r13d
jb 0x1405ef691
movzx eax, word [rsp + 0x122]
shr r8b, cl
mov byte [rsp + rax + 0x22], r12b
movzx cx, r10b
stc
mov r8b, 9
inc rcx
rol cx, cl
rcl ecx, cl
mov word [rsp + 0x20], 0xc09
rcr cl, cl
mov r9b, 1
mov byte [rsp + 0x124], r9b
rcl ch, 0xab
movzx ecx, r12w
cmp r12w, word [rsp + 0x122]
jmp 0x1405ef709
jae 0x1405ef7b3
nop word [rax + rax]
sar dh, cl
mov eax, r11d
movzx eax, di
movzx edx, cx
adc rax, r8
cbw
movzx eax, byte [rsp + rdx + 0x22]
test r14b, bl
stc
test r9b, r9b
jmp 0x1405ef73b
je 0x1405ef759
sub al, r8b
test r14b, 0xfe
cmc
mov byte [rsp + rdx + 0x22], al
clc
sub al, dl
add al, byte [rsp + 0x21]
jmp 0x1405ef776
add al, r8b
stc
jmp 0x1405ef763
mov byte [rsp + rdx + 0x22], al
sub al, byte [rsp + 0x21]
test bx, sp
clc
add al, dl
jmp 0x1405ef776
mov byte [rsp + rdx + 0x22], al
inc cx
cmp di, 0x15c8
cmp cx, word [rsp + 0x122]
jmp 0x1405ef78f
jae 0x1405ef7b3
movzx r9d, byte [rsp + 0x124]
movsx r8w, dil
movzx r8d, byte [rsp + 0x20]
jmp 0x1405ef7ae
jmp 0x1405ef722
mov byte [rsp + 0x124], 0
mov rax, qword [0x14002d320]
test cx, r11w
cmp r15b, bl
test rax, rax
jmp 0x1405ef7d1
jne 0x1405ef9a1
mov rax, qword gs:[0x30]
cmp r14b, r12b
rol cl, 0x72
rol ch, cl
mov rcx, qword [rax + 0x60]
mov rax, 0x3bda57ce
rcr ebp, 0x31
cdqe
mov rax, qword [rcx + 0x18]
bsf ebp, edi
setle r10b
shl dil, 0xfc
mov r14, qword [rax + 0x10]
movabs rbp, 0x2290962a69d7b492
xadd r10d, r10d
movzx di, sil
nop dword [rax]
nop word [rax + rax]
shr al, 7
test r10b, cl
rcr dil, 0xd
mov r10, qword [r14 + 0x30]
adc di, cx
cdqe
cwde
movsxd rax, dword [r10 + 0x3c]
sub edi, esp
mov edi, dword [rax + r10 + 0x88]
cmc
add rdi, r10
test r9b, r10b
jmp 0x1405ef85a
cmp rdi, r10
je 0x1405ef93f
mov r9d, r12d
mov r11d, dword [rdi + 0x18]
cmp di, bx
cmc
stc
test r11d, r11d
jmp 0x1405ef877
je 0x1405ef93f
mov esi, dword [rdi + 0x20]
cmc
test r13b, 0x38
ror cl, 0x1d
nop word [rax + rax]
mov ebx, r9d
bsr rcx, rbx
sbb r8, 0x6b1f4b65
ror ax, cl
lea rax, [rsi + rbx*4]
btc ecx, 0xa3
mov eax, dword [rax + r10]
add rax, r10
mov r8, r12
cmp r8, r12
movzx ecx, byte [rax]
test r9b, 0x72
cmc
test cl, cl
jmp 0x1405ef8c6
je 0x1405ef924
nop dword [rax + rax]
cwd
movsx edx, cl
sal rcx, 0x38
bts cx, r15w
shld ecx, r8d, 0xf9
xor rdx, r8
clc
xor rcx, r15
imul r8, rdx, 0x1000193
adc cl, r14b
inc ch
or cl, r8b
lea rax, [rax + 1]
mov cl, 0x23
add ch, 0xf7
sal ch, cl
movzx ecx, byte [rax]
cmp sil, cl
test cl, cl
jne 0x1405ef8d6
cmp r8, rbp
jmp 0x1405ef91e
je 0x1405ef94c
inc r9d
cmp rsi, 0x5a6715dd
test al, r15b
cmp r9d, r11d
jmp 0x1405ef939
jb 0x1405ef891
mov r14, qword [r14]
jmp 0x1405ef947
jmp 0x1405ef836
mov ecx, dword [rdi + 0x1c]
mov ah, 0x2a
ror ah, cl
add ax, r15w
lea rcx, [rcx + r10]
shld eax, r10d, 0xd1
bts eax, r8d
ror ah, cl
mov eax, dword [rdi + 0x24]
clc
stc
test r9w, 0x25dd
lea rax, [rax + r10]
movzx eax, word [rax + rbx*2]
cmp r11w, 0x66ed
cmc
mov eax, dword [rcx + rax*4]
sub rcx, 0x211926cb
add rax, r10
bswap ecx
movsx ecx, r8w
mov qword [0x14002d320], rax
mov cl, spl
cmovae ecx, edx
lea rcx, [rsp + 0x22]
call rax
mov r10, rax
mov qword [0x14002c9f0], rax
jmp 0x1405ef9b7
movsxd rcx, dword [rax + 0x3c]
mov edi, dword [rcx + rax + 0x88]
mov r9d, r12d
mov ebx, dword [rdi + rax + 0x20]
stc
test r10b, spl
and r8w, di
movabs rsi, 0x933af2c906d11de
and r11b, dl
jmp 0x1405ef9e3
nop dword [rax]
add dh, 0x28
clc
sar r11d, cl
nop dword [rax + rax]
mov r11d, r9d
sub r8, 0x7b8015cd
lea rax, [rbx + r11*4]
bts dx, r12w
rcr r8w, 0x36
cmovne r8w, cx
mov edx, dword [rax + r10]
btr r8, 0x6c
shr ax, 0x19
lea rdx, [rdx + r10]
sar r8b, 0xcf
mov rax, rbp
mov r8, r12
movzx eax, byte [rdx]
test al, al
jmp 0x1405efa38
je 0x1405efa89
nop dword [rax + rax]
shld cx, r12w, 0xd9
movsx ecx, al
xor rcx, r8
shl ax, 0xb6
sbb ax, r11w
imul r8, rcx, 0x1000193
sar ah, cl
shr al, cl
xchg al, al
lea rdx, [rdx + 1]
movzx eax, byte [rdx]
test al, al
jmp 0x1405efa75
jne 0x1405efa4c
cmp r8, rsi
jmp 0x1405efa83
je 0x1405efa96
inc r9d
jmp 0x1405efa91
jmp 0x1405ef9f6
mov ecx, dword [rdi + r10 + 0x24]
rdtsc
cmp r9w, 0x27b1
add rcx, r10
movzx edx, word [rcx + r11*2]
mov ecx, dword [rdi + r10 + 0x1c]
lea rcx, [rcx + r10]
ror rax, 0x9c
cwde
mov eax, dword [rcx + rdx*4]
add rax, r10
cdq
jmp 0x1405efac8
mov ecx, 0x101
lea rdx, [0x14002c9f8]
jmp 0x1405efad9
call rax
mov r10, qword [0x14002c9f0]
mov r9d, r12d
test r12, r12
cmp r13b, 0x75
jmp 0x1405efaf1
test eax, eax
movzx rax, dx
mov al, r11b
movsxd rax, dword [r10 + 0x3c]
je 0x1405efc40
mov edi, dword [rax + r10 + 0x88]
stc
lahf
mov esi, dword [rdi + r10 + 0x20]
movabs rbx, 0x32f3c174855f5363
movzx edx, r12w
shl r11d, 0xd3
cmp r9w, 0x1bc6
nop dword [rax + rax]
bt r11w, r14w
bswap r11w
rcr rax, cl
mov r11d, r9d
setle r8b
movsx ax, r15b
sbb dx, 0x74d4
lea rax, [rsi + r11*4]
ror r8b, 0xd5
cmp ebp, 0x66c86af0
mov edx, dword [rax + r10]
cmp rsi, rbx
add r8d, r10d
lea rdx, [rdx + r10]
movzx ax, dil
cbw
adc rax, rsi
mov r8, r12
rol ah, 0xdf
bsf ax, r13w
movzx eax, byte [rdx]
test al, al
jmp 0x1405efb8b
je 0x1405efbe6
nop dword [rax + rax]
movsx ecx, al
test bl, 0x92
xor rcx, r8
shld eax, r9d, 0x70
imul r8, rcx, 0x1000193
sbb ax, di
btc ax, sp
cwde
lea rdx, [rdx + 1]
xor ax, bx
and al, bpl
movzx eax, byte [rdx]
jmp 0x1405efbcb
test al, al
jmp 0x1405efbd2
jne 0x1405efb99
cmp r8, rbx
jmp 0x1405efbe0
je 0x1405efbee
inc r9d
jmp 0x1405efb3f
mov ecx, dword [rdi + r10 + 0x24]
btr ax, 0xe3
btc eax, r13d
add rcx, r10
movzx edx, word [rcx + r11*2]
inc rax
neg ah
mov ecx, dword [rdi + r10 + 0x1c]
and ah, bh
lea rcx, [rcx + r10]
rol ah, 0x61
bsf eax, r10d
mov eax, dword [rcx + rdx*4]
cmc
cmp si, 0x667a
add rax, r10
jmp 0x1405efc2c
call rax
mov dword [r15], eax
mov eax, 1
jmp 0x1405efc3b
jmp 0x1405f0290
mov ebx, dword [rax + r10 + 0x88]
movzx r8, r10w
btr r11, rax
mov edi, dword [rbx + r10 + 0x20]
btr eax, 0x83
cmovle ax, si
lahf
movabs rsi, 0x2019c60e54c74e49
adc r11b, cl
sub dh, cl
nop dword [rax]
cwd
movzx r8w, dil
nop word [rax + rax]
setbe dh
shld eax, r10d, 0xbf
mov r11d, r9d
lea rax, [rdi + r11*4]
neg dx
cwd
mov edx, dword [rax + r10]
add rdx, r10
rol eax, 0xbd
mov r8, r12
movzx eax, byte [rdx]
test r13w, dx
test r15b, 0x60
test al, al
je 0x1405efd04
nop dword [rax + rax]
cmc
movsx ecx, al
mov ax, sp
rol al, cl
xor rcx, r8
adc r8b, 0x39
xor r8b, r8b
xadd rax, rax
imul r8, rcx, 0x1000193
lea rdx, [rdx + 1]
cmp bp, cx
or ah, 0xd1
movzx eax, byte [rdx]
cmc
test al, al
jmp 0x1405efcf0
jne 0x1405efcbe
cmp r8, rsi
jmp 0x1405efcfe
je 0x1405efd0c
inc r9d
jmp 0x1405efc89
mov ecx, dword [rbx + r10 + 0x24]
add rcx, r10
xor bpl, 0xa7
neg ax
movzx edx, word [rcx + r11*2]
bsf r8w, bp
cmovs cx, r8w
mov ecx, dword [rbx + r10 + 0x1c]
movsx r8, bx
sbb bp, 0x40d0
rcl eax, cl
lea rcx, [rcx + r10]
stc
adc rax, r8
xchg r8b, al
mov eax, dword [rcx + rdx*4]
sar bp, 0xe9
cmove ecx, r8d
movzx ebp, ax
add rax, r10
cwd
mov r8d, r13d
setg dl
cmovne cx, si
mov ebp, 0x119b562c
mov edx, 1
seto ch
mov ebp, 2
mov cl, 0x42
jmp 0x1405efd7b
mov ecx, ebp
jmp 0x1405efd82
call rax
mov rsi, rax
cmp dil, r10b
add r10b, al
rcr r10w, 0xf9
mov qword [0x14002cb90], rax
adc r10d, 0x27774c0
mov r10, qword [0x14002c9f0]
mov r9d, r12d
cmp rax, 0xffffffffffffffff
jmp 0x1405efdb3
jne 0x1405efedc
movsxd rax, dword [r10 + 0x3c]
mov edi, dword [rax + r10 + 0x88]
movsx ebx, r10w
shr rsi, cl
neg rbx
mov esi, dword [rdi + r10 + 0x20]
movabs rbx, 0x32f3c174855f5363
sbb ah, 0x88
nop word [rax + rax]
stc
btr eax, edx
rcl r11d, 0x26
mov r11d, r9d
rcr rdx, 0xef
adc dl, spl
xor dl, r15b
lea rax, [rsi + r11*4]
clc
mov edx, dword [rax + r10]
lahf
movsx r8, r14w
rol ah, cl
add rdx, r10
mov r8, r12
movzx eax, byte [rdx]
jmp 0x1405efe1d
test al, al
je 0x1405efe79
nop dword [rax + rax]
btc cx, r15w
btc cx, 0xa8
movsx ecx, al
movzx eax, r9w
not al
inc eax
xor rcx, r8
bt r8d, esi
imul r8, rcx, 0x1000193
movsx eax, r10w
jmp 0x1405efe59
lea rdx, [rdx + 1]
and eax, ebx
movzx eax, si
sub ax, bp
movzx eax, byte [rdx]
test al, al
jne 0x1405efe37
cmp r8, rbx
je 0x1405efe86
inc r9d
jmp 0x1405efe81
jmp 0x1405efdf2
mov edx, dword [rdi + r10 + 0x24]
lea rdx, [rdx + r10]
clc
neg ecx
shld r8d, r11d, 0x49
movzx r8d, word [rdx + r11*2]
btr rcx, rbx
movzx rdx, r13w
mov edx, dword [rdi + r10 + 0x1c]
bsr cx, di
lea rdx, [rdx + r10]
rcr cx, 0x33
rcl cl, 2
bts ecx, r8d
mov ecx, dword [rdx + r8*4]
add rcx, r10
jmp 0x1405efec8
call rcx
mov dword [r15], eax
movsx eax, dx
mov eax, ebp
jmp 0x1405efed7
jmp 0x1405f0290
mov dword [rsp + 0x130], 0x431f0002
jmp 0x1405efeef
mov dword [rsp + 0x134], 0x987fc1b9
neg r8b
shrd rbx, rbx, 0x8b
dec r11
movsxd rax, dword [r10 + 0x3c]
jmp 0x1405eff13
mov edi, dword [rax + r10 + 0x88]
bswap bp
mov ebx, dword [rdi + r10 + 0x20]
movabs rbp, 0x192da6bb67b13a96
nop dword [rax + rax]
mov r11d, r9d
add al, 6
lea rax, [rbx + r11*4]
cwd
and r8b, 0xc6
mov edx, dword [rax + r10]
cmp r9b, dil
lea rdx, [rdx + r10]
clc
mov r8, r12
and al, r11b
lahf
not ax
movzx eax, byte [rdx]
cmp r8w, 0x379a
cmp r9b, bpl
jmp 0x1405eff68
test al, al
jmp 0x1405eff6f
je 0x1405effc3
nop dword [rax + rax]
movsx ecx, al
sub al, r15b
lahf
xor rcx, r8
sal rax, 0xbd
movsx r8w, r14b
test r11w, r10w
imul r8, rcx, 0x1000193
or eax, ebp
lea rdx, [rdx + 1]
movsx rax, dx
movzx eax, byte [rdx]
test al, al
jmp 0x1405effaf
jne 0x1405eff7d
cmp r8, rbp
jmp 0x1405effbd
je 0x1405effd0
inc r9d
jmp 0x1405effcb
jmp 0x1405eff32
mov ecx, dword [rdi + r10 + 0x24]
cwde
bts r8d, edx
lea rcx, [rcx + r10]
shr rdx, 0xe6
not al
sub ax, dx
movzx edx, word [rcx + r11*2]
sbb cl, r13b
or ch, 0x6e
bt r8d, r15d
mov ecx, dword [rdi + r10 + 0x1c]
bswap r8w
add rcx, r10
sub ah, 0x84
mov eax, dword [rcx + rdx*4]
add rax, r10
setp dl
mov r8d, 0x10
lea rdx, [rsp + 0x130]
mov rcx, rsi
call rax
test eax, eax
je 0x1405f028e
mov r10, qword [0x14002c9f0]
or bx, cx
and rsi, 0x178d7ee5
movsxd rax, dword [r10 + 0x3c]
cmp dil, 0x28
sar r8d, cl
mov ebx, dword [rax + r10 + 0x88]
mov r9d, r12d
mov edi, dword [rbx + r10 + 0x20]
movabs rsi, 0xe686b298b4871115
bt dx, 0x5c
nop dword [rax]
mov r11d, r9d
movzx r8w, spl
lahf
lea rax, [rdi + r11*4]
rcr r8b, cl
ror dx, cl
cmp r8b, 0xab
mov edx, dword [rax + r10]
add rdx, r10
add al, 0xb
mov r8, r12
movzx eax, byte [rdx]
stc
test al, al
jmp 0x1405f0095
je 0x1405f00f8
nop dword [rax + rax]
sub cl, 0x9c
xadd ecx, ecx
movsx ecx, al
jmp 0x1405f00b5
xor rcx, r8
imul r8, rcx, 0x1000193
bt eax, r14d
shrd ax, cx, 0x80
test r10b, r9b
lea rdx, [rdx + 1]
cmp edx, 0x7c8e04ac
rcr ah, cl
btr eax, 0x28
movzx eax, byte [rdx]
cmp r14w, cx
test al, al
jne 0x1405f00a9
cmp r8, rsi
jmp 0x1405f00f2
je 0x1405f0100
inc r9d
jmp 0x1405f0067
mov ecx, dword [rbx + r10 + 0x24]
shrd edx, ebx, 0x7d
bt eax, 0xbb
lea rcx, [rcx + r10]
movzx ax, sil
bts ax, r8w
movzx edx, word [rcx + r11*2]
bt eax, r9d
sal cx, 4
mov ecx, dword [rbx + r10 + 0x1c]
xchg ah, al
add rcx, r10
mov eax, dword [rcx + rdx*4]
movzx cx, dil
sbb cl, 0xd4
add rax, r10
mov cl, ch
not ch
mov rcx, qword [0x14002cb90]
jmp 0x1405f0150
call rax
mov r10, qword [0x14002c9f0]
cwd
movsxd rax, dword [r10 + 0x3c]
movzx r11, bp
clc
mov dl, 0xfb
mov esi, dword [rax + r10 + 0x88]
rol dh, 0xd5
and ax, 0x7240
mov r9d, r12d
cqo
xadd di, r8w
bt r8, rdi
mov edi, dword [rsi + r10 + 0x20]
add dl, r12b
btc ax, 0xbb
movabs rbx, 0x32f3c174855f5363
btr r8d, ecx
movzx r8, di
bts dx, r12w
nop dword [rax + rax]
movsxd r8, esi
mov r11d, r9d
xadd ah, dh
setg dh
bsf r8w, r8w
lea rax, [rdi + r11*4]
cmovb edx, r11d
movsx r8, r12w
mov edx, dword [rax + r10]
movsxd r8, edi
add rdx, r10
mov r8, r12
btr eax, 0xad
movzx eax, byte [rdx]
test al, al
je 0x1405f0230
nop dword [rax + rax]
xchg cx, cx
shl ch, 0x6a
sar cl, 0xa5
movsx ecx, al
xor rcx, r8
imul r8, rcx, 0x1000193
lea rdx, [rdx + 1]
bt ax, 0xcd
jmp 0x1405f0211
movzx eax, byte [rdx]
jmp 0x1405f021a
test al, al
jmp 0x1405f0221
jne 0x1405f01f6
cmp r8, rbx
je 0x1405f023d
inc r9d
jmp 0x1405f0238
jmp 0x1405f01af
mov ecx, dword [rsi + r10 + 0x24]
shr ax, 0x42
inc al
cmp r9b, 0xcd
add rcx, r10
bt dx, r8w
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + r10 + 0x1c]
add rcx, r10
btr ax, r12w
mov eax, dword [rcx + rdx*4]
add rax, r10
jmp 0x1405f0271
call rax
mov dword [r15], eax
mov ax, 0x7932
jmp 0x1405f027f
mov eax, 3
jmp 0x1405f0289
jmp 0x1405f0290
sub eax, eax
mov rcx, qword [rsp + 0x140]
test eax, eax
stc
jmp 0x1405f02a0
xor rcx, rsp
call fcn.140024b00
lea r11, [rsp + 0x150]
movzx r13w, r13b
mov di, 0x6027
xchg edi, r13d
mov rbx, qword [r11 + 0x30]
movzx rdi, r10w
movzx edi, r14w
mov r15b, 0x41
mov rbp, qword [r11 + 0x38]
movsxd r12, edi
movsx r15, ax
mov rsi, qword [r11 + 0x40]
not di
mov rsp, r11
cmova r12, rbx
mov r13b, r9b
setge r14b
pop r15
pop r14
pop r13
movsx r12, r10w
pop r12
jmp 0x1405f0304
pop rdi
jmp 0x1405f030a
ret