Function at 0x140057c20
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Hash data using murmur3
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x30
mov r15d, dword [rcx + 0x40]
mov r13, rcx
mov dword [rbp + 0x40], 0x363530
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x140057cda
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140057cda
mov r14d, dword [rsi + 0x20]
nop word [rax + rax]
dec r11d
mov r10d, 0x3a2ce5ea
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140057cd5
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x140057ca0
cmp r10d, 0x2cdf3a5b
je 0x140057ce2
test r11d, r11d
jne 0x140057c80
mov rax, qword [rax]
jmp 0x140057c51
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp + 0x41]
add rax, rbx
call rax
cmp dword [r13 + 0x40], eax
jae 0x140057dd6
mov dword [rbp + 0x48], 0x363557
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x140057daa
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140057daa
mov r14d, dword [rsi + 0x20]
nop word [rax + rax]
dec r11d
mov r10d, 0x342cdc78
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140057da5
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x140057d70
cmp r10d, 0x5bc0a5ad
je 0x140057db2
test r11d, r11d
jne 0x140057d50
mov rax, qword [rax]
jmp 0x140057d21
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp + 0x49]
add rax, rbx
call rax
mov ecx, eax
jmp 0x140057ea2
mov dword [rbp + 0x50], 0x343608
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x140057e7a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140057e7a
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x362cdf9e
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140057e75
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x140057e40
cmp r10d, 0x3edae8ef
je 0x140057e82
test r11d, r11d
jne 0x140057e20
mov rax, qword [rax]
jmp 0x140057df0
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp + 0x51]
add rax, rbx
call rax
movzx ecx, al
lea rax, [r15 + 1]
movzx r8d, cl
mov byte [r15 + r13], pe_nt_image_headers64
cmp rax, r8
jae 0x140057ec2
sub r8, rax
lea rcx, [rax + r13]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov dword [rbp + 0x58], 0x36356f
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x140057f69
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x140057f69
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x2a2a8e23
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x140057f64
nop
movsx edx, cl
lea r9, [r9 + 1]
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
movzx ecx, byte [r9 - 1]
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
test cl, cl
jne 0x140057f30
cmp r10d, 0x7e332216
je 0x140057f71
test r11d, r11d
jne 0x140057f10
mov rax, qword [rax]
jmp 0x140057ee0
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp + 0x59]
add rax, rbx
call rax
cmp dword [r13 + 0x40], eax
jb 0x140057fb4
mov rcx, r13
call fcn.1400579f0
xorps xmm2, xmm2
xor eax, eax
movups xmmword [r13], xmm2
movups xmmword [r13 + 0x10], xmm2
movups xmmword [r13 + 0x20], xmm2
mov qword [r13 + 0x30], rax
mov r15d, dword [r13 + 0x40]
mov dword [rbp - 0x10], 0x333639
shl r15d, 3
add r15, qword [r13 + 0x48]
mov qword [r13 + 0x48], r15
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14005806a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14005806a
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x9abdcdba
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + r14]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140058065
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x140058030
cmp r10d, 0xc904bacb
je 0x140058072
test r11d, r11d
jne 0x140058010
mov rax, qword [rax]
jmp 0x140057fe0
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0xf]
add rax, rbx
call rax
movsxd rcx, eax
mov dword [rbp - 0xc], 0x313609
mov byte [rcx + r13], r15b
mov r15, qword [r13 + 0x48]
mov rax, r15
shr rax, 8
mov byte [r13 + 0x3e], al
mov rax, qword gs:[0x60]
shr r15, 0x10
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14005814a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14005814a
mov r14d, dword [rsi + 0x20]
nop word [rax + rax]
dec r11d
mov r10d, 0xdada8496
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + r14]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140058145
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x140058110
cmp r10d, 0x10fc3dc7
je 0x140058152
test r11d, r11d
jne 0x1400580f0
mov rax, qword [rax]
jmp 0x1400580c1
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0xb]
add rax, rbx
call rax
movsxd rcx, eax
mov byte [rcx + r13], r15b
mov rcx, qword [r13 + 0x48]
mov rax, rcx
shr rax, 0x18
mov byte [r13 + 0x3c], al
mov rax, rcx
shr rax, 0x20
mov byte [r13 + 0x3b], al
mov rax, rcx
shr rax, 0x28
mov byte [r13 + 0x3a], al
mov rax, rcx
shr rcx, 0x38
mov byte [r13 + 0x38], cl
mov rcx, r13
shr rax, 0x30
mov byte [r13 + 0x39], al
add rsp, 0x30
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
jmp fcn.1400579f0