Function at 0x1400020b3
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov esi, ecx
mov dword [rsp + 0x34], 0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x1400020da
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x1400020da
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov edi, dword [r9 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x14000213c
add rdi, r10
mov ebp, 0x818abe23
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x140002120
cmp ebp, 0xea05c0ed
je 0x140002143
test r11, r11
jne 0x140002107
jmp 0x1400020da
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r10d, dword [rcx + rdx*4]
add r10, rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 1
lea rdx, [rsp + 0x34]
xor ecx, ecx
mov r8d, 1
mov r9d, 2
call r10
cmp eax, 0x7a
jne 0x140002465
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x14000219d
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x14000219d
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov edi, dword [r9 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x1400021ff
add rdi, r10
mov ebp, 0x928f5614
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x1400021e3
cmp ebp, 0x9a5cef60
je 0x140002206
test r11, r11
jne 0x1400021ca
jmp 0x14000219d
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov ecx, dword [rsp + 0x34]
call rdx
test rax, rax
je 0x140002465
mov rdi, rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140002242
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140002242
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov ebx, dword [r9 + r11*4]
mov bpl, byte [rax + rbx]
test bpl, bpl
je 0x1400022ad
add rbx, r10
mov r14d, 0x25fb80a8
movsx ebp, bpl
xor ebp, r14d
imul r14d, ebp, 0x1000193
mov bpl, byte [rbx]
inc rbx
test bpl, bpl
jne 0x14000228b
cmp r14d, 0xd9eb6f0
je 0x1400022b4
test r11, r11
jne 0x14000226f
jmp 0x140002242
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r10d, dword [rcx + rdx*4]
add r10, rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 1
lea rdx, [rsp + 0x34]
mov rcx, rdi
mov r8d, 1
mov r9d, 2
call r10
test eax, eax
jne 0x1400023cd
cmp dword [rdi], 0
je 0x1400023cd
xor ebx, ebx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140002319
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140002319
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r11, [rax + 1]
dec r8
mov r10d, r8d
mov r14d, dword [r9 + r10*4]
mov bpl, byte [rax + r14]
test bpl, bpl
je 0x140002384
add r14, r11
mov r15d, 0x98e71af9
movsx ebp, bpl
xor ebp, r15d
imul r15d, ebp, 0x1000193
mov bpl, byte [r14]
inc r14
test bpl, bpl
jne 0x140002362
cmp r15d, 0x906969a5
je 0x14000238b
test r10, r10
jne 0x140002346
jmp 0x140002319
lea r14, [rbx + rbx*2]
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r10*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
movzx ecx, word [rdi + r14*4 + 8]
call rdx
cmp ax, si
jne 0x1400023bf
mov ecx, dword [rdi + r14*4 + 0xc]
call fcn.140001ea8
inc rbx
mov eax, dword [rdi]
cmp rbx, rax
jb 0x140002308
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x1400023de
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x1400023de
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140002440
add rsi, r10
mov ebp, 0x720b7e75
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140002424
cmp ebp, 0x27b8262b
je 0x140002447
test r11, r11
jne 0x14000240b
jmp 0x1400023de
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, rdi
call rdx
nop
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret