Function at 0x140005f80
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Hash data using murmur3
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x38
mov dword [rbp + 0x48], 0xbf801354
mov word [rbp + 0x4c], 0xdb17
mov byte [rbp + 0x4e], 0x66
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov ecx, 0x1f0
mov eax, dword [rcx + rbx]
mov edi, 0x1e8
xor r12d, r12d
test al, 1
jne 0x14000602f
or eax, 1
mov dword [rcx + rbx], eax
lea r9, [rdi + rbx]
mov byte [r9 + 7], 1
mov r8d, r12d
movabs r12, 0x2492492492492493
mov rax, r12
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
mov rdx, r8
sub rdx, rax
mov rcx, r9
sub rcx, rax
mov al, byte [rbp + rdx + 0x48]
mov byte [rcx + r8], al
inc r8
cmp r8, 0x24c
jb 0x140005fe5
lea rcx, [0x140007994]
call fcn.140006738
nop
xor r12d, r12d
add rbx, rdi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
or r14d, 0xffffffff
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r11d, dword [rcx + r8 + 0x88]
add r11, r8
cmp r11, r8
je 0x1400060ab
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x1400060ab
mov edi, dword [r11 + 0x20]
add r10d, r14d
lea rdx, [rdi + r10*4]
mov r9d, dword [rdx + r8]
add r9, r8
mov edx, 0x4320b18a
mov cl, byte [r9]
inc r9
test cl, cl
je 0x1400060a6
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r9]
inc r9
test cl, cl
jne 0x140006089
cmp edx, 0xcdb2f64a
je 0x1400060b0
test r10d, r10d
jne 0x14000606c
mov rax, qword [rax]
jmp 0x140006047
mov edx, dword [r11 + 0x1c]
add rdx, r8
mov ecx, dword [r11 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov eax, dword [rdx + rcx*4]
add rax, r8
mov ecx, 1
call rax
mov r13, rax
mov qword [rbp + 0x60], rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov r8, qword [rcx + 0x30]
movsxd rdx, dword [r8 + 0x3c]
mov r11d, dword [rdx + r8 + 0x88]
add r11, r8
cmp r11, r8
je 0x14000614c
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x14000614c
mov edi, dword [r11 + 0x20]
add r10d, r14d
lea rdx, [r8 + r10*4]
mov r9d, dword [rdx + rdi]
add r9, r8
mov edx, 0x4420b31d
mov al, byte [r9]
inc r9
test al, al
je 0x140006147
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [r9]
inc r9
test al, al
jne 0x14000612a
cmp edx, 0x1ff9fa7a
je 0x140006151
test r10d, r10d
jne 0x14000610d
mov rcx, qword [rcx]
jmp 0x1400060e8
mov edx, dword [r11 + 0x1c]
add rdx, r8
mov ecx, dword [r11 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov esi, dword [rdx + rcx*4]
add rsi, r8
mov qword [rbp + 0x58], rsi
movabs rdi, 0x87852513a95573f1
cmp byte [rbx + 7], r12b
je 0x140006314
mov r9, rdi
mov r11, r12
mov qword [rbp + 0x50], r12
movabs rdi, 0xff51afd7ed558ccd
movabs rsi, 0x101010101010101
movabs r13, 0xc4ceb9fe1a85ec53
mov r15, r12
mov r10, r9
and r10d, 0xf
imul r14, r10, 7
test r14, r14
je 0x1400062ab
movabs r11, 0x2492492492492493
mov rax, r12
shr rax, 0x1b
xor rax, r12
imul rax, rdi
mov rcx, rax
shr rcx, 0x21
xor rcx, rax
imul rcx, r13
mov rax, rcx
shr rax, 0x1b
xor rax, rcx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, rsi
mov rax, r11
mul r15
mov rax, r15
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 2
imul rax, rax, 7
mov r8, r15
sub r8, rax
xor edx, edx
mov rax, r15
div r10
mov rax, rdx
imul rax, r9
xor edx, edx
div rcx
movzx eax, r15b
movzx ecx, dl
imul ecx, eax
and cl, 0x1f
mov rax, r9
shr rax, cl
xor byte [r8 + rbx], al
inc r15
add r12, r10
xor edx, edx
lea eax, [rdx + 7]
div r15
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, rdi
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, r13
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, rsi
mov rax, r10
imul rax, rcx
xor rax, r15
xor r9, rax
cmp r15, r14
jb 0x1400061cb
mov r11, qword [rbp + 0x50]
xor r12d, r12d
inc r11
mov qword [rbp + 0x50], r11
mov rax, r11
xor rax, r9
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, rdi
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, r13
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, rsi
xor r9, rcx
cmp r11, 5
jb 0x1400061aa
mov byte [rbx + 7], r12b
movabs rdi, 0x87852513a95573f1
mov rsi, qword [rbp + 0x58]
mov r13, qword [rbp + 0x60]
or r14d, 0xffffffff
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8, rbx
mov rdx, r13
xor ecx, ecx
call rsi
mov dword [rbp + 0x48], 0x3bc0fc2a
mov word [rbp + 0x4c], 0x61e
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x18c
mov eax, dword [rdx + rcx]
mov ebx, 0x204
movabs r10, 0xaaaaaaaaaaaaaaab
test al, 1
jne 0x1400063a6
or eax, 1
mov dword [rdx + rcx], eax
mov r9d, ebx
add r9, rcx
mov byte [r9 + 6], 1
mov r8, r12
mov rax, r10
mul r8
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov rcx, r8
sub rcx, rax
mov al, byte [rbp + rcx + 0x48]
mov byte [rcx + r9], al
inc r8
cmp r8, 0xfc
jb 0x14000636e
lea rcx, [0x140007978]
call fcn.140006738
nop
mov r11d, ebx
mov rax, qword gs:[0x58]
add r11, qword [rax]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov ebx, dword [rcx + r8 + 0x88]
add rbx, r8
cmp rbx, r8
je 0x140006429
mov r10d, dword [rbx + 0x18]
test r10d, r10d
je 0x140006429
mov esi, dword [rbx + 0x20]
add r10d, r14d
lea rdx, [rsi + r10*4]
mov r9d, dword [rdx + r8]
add r9, r8
mov edx, 0x3e20a9ab
mov cl, byte [r9]
inc r9
test cl, cl
je 0x140006424
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r9]
inc r9
test cl, cl
jne 0x140006407
cmp edx, 0x868cd752
je 0x14000642e
test r10d, r10d
jne 0x1400063ea
mov rax, qword [rax]
jmp 0x1400063c6
mov eax, dword [rbx + 0x24]
add rax, r8
movzx edx, word [rax + r10*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r8
mov ebx, dword [rcx + rdx*4]
add rbx, r8
mov qword [rbp + 0x50], rbx
cmp byte [r11 + 6], r12b
je 0x1400065d1
mov r10, r12
mov qword [rbp + 0x48], r12
movabs rbx, 0xc4ceb9fe1a85ec53
movabs r13, 0xff51afd7ed558ccd
mov r14, r12
mov r9, rdi
and r9d, 0xf
lea rsi, [r9 + r9*2]
add rsi, rsi
je 0x140006570
mov r15, r12
movabs r12, 0x101010101010101
movabs r10, 0xaaaaaaaaaaaaaaab
mov rax, r15
shr rax, 0x1b
xor rax, r15
imul rax, r13
mov rcx, rax
shr rcx, 0x21
xor rcx, rax
imul rcx, rbx
mov rax, r10
mul r14
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov r8, r14
sub r8, rax
mov rax, rcx
shr rax, 0x1b
xor rax, rcx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, r12
xor edx, edx
mov rax, r14
div r9
mov rax, rdx
imul rax, rdi
xor edx, edx
div rcx
movzx eax, r14b
movzx ecx, dl
imul ecx, eax
and cl, 0x1f
mov rax, rdi
shr rax, cl
xor byte [r8 + r11], al
inc r14
add r15, r9
xor edx, edx
lea eax, [rdx + 6]
div r14
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, r13
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, rbx
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, r12
imul rcx, r9
xor rcx, r14
xor rdi, rcx
cmp r14, rsi
jb 0x14000649c
mov r10, qword [rbp + 0x48]
xor r12d, r12d
inc r10
mov qword [rbp + 0x48], r10
mov rax, r10
xor rax, rdi
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, r13
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, rbx
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rdx, rax, 0x32
movabs rax, 0x101010101010101
or rdx, rax
xor rdi, rdx
cmp r10, 4
jb 0x14000646e
mov byte [r11 + 6], r12b
mov rbx, qword [rbp + 0x50]
mov rcx, r11
call rbx
xor eax, eax
add rsp, 0x38
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret