Function at 0x140001b20
Capabilities:
Access peb ldr_data
Encode data using xor
Get ntdll base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
sub rsp, 0x68
movzx eax, word [0x14001daf8]
movups xmm0, xmmword [str.17q3n_]
mov word [rsp + 0x38], ax
movzx eax, byte [0x14001dafa]
movups xmmword [rsp + 0x20], xmm0
mov byte [rsp + 0x3a], al
movsd xmm0, qword [0x14001daf0]
movsd qword [rsp + 0x30], xmm0
mov rax, qword gs:[0x60]
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x60], rdi
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140001be7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140001be7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x5c4c3bd7
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140001be2
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x140001bc0
cmp r8d, 0x177056
je 0x140001bec
test r9d, r9d
jne 0x140001ba0
mov rax, qword [rax]
jmp 0x140001b70
mov ecx, dword [rdi + 0x24]
xor r8d, r8d
mov rbx, qword [rsp + 0x70]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
mov rdi, qword [rsp + 0x60]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
add r11, r10
cmp dword [0x140021090], 2
jl 0x140001eac
movdqa xmm5, xmmword [0x14001dd60]
movdqa xmm2, xmmword [0x14001dcd0]
movdqa xmm3, xmmword [0x14001dcf0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
movdqa xmm4, xmmword [0x14001dd40]
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
movaps xmmword [rsp + 0x50], xmm6
movdqa xmm6, xmmword [str.IIII]
movaps xmmword [rsp + 0x40], xmm7
movdqa xmm7, xmmword [0x14001dd50]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 6
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, dword [str.17q3n_]
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
xorps xmm2, xmm0
movd dword [rsp + 0x20], xmm2
movdqa xmm2, xmmword [0x14001dce0]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 6
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmulld xmm0, xmm6
psubd xmm2, xmm0
pmuldq xmm1, xmm5
movd xmm0, dword [rsp + 0x24]
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [rsp + 0x24], xmm2
movdqa xmm2, xmmword [0x14001dd00]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 6
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm6
psubd xmm3, xmm0
punpckldq xmm1, xmm2
movd xmm0, dword [rsp + 0x28]
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
pmuldq xmm1, xmm5
paddb xmm3, xmm7
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
movd dword [rsp + 0x28], xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movdqa xmm3, xmmword [0x14001dd10]
mov r8d, 0x18
psrad xmm1, 6
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmm6
psubd xmm2, xmm0
punpckldq xmm1, xmm3
movd xmm0, dword [rsp + 0x2c]
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
pmuldq xmm1, xmm5
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm5
movd dword [rsp + 0x2c], xmm2
movdqa xmm2, xmmword [0x14001dd20]
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 6
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm2
pmulld xmm0, xmm6
psubd xmm3, xmm0
punpckldq xmm1, xmm2
movd xmm0, dword [rsp + 0x30]
andps xmm3, xmm4
packuswb xmm3, xmm3
pmuldq xmm1, xmm5
packuswb xmm3, xmm3
paddb xmm3, xmm7
xorps xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm5
movd dword [rsp + 0x30], xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 6
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
movaps xmm6, xmmword [rsp + 0x50]
psubd xmm2, xmm0
movd xmm0, dword [rsp + 0x34]
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm7
movaps xmm7, xmmword [rsp + 0x40]
xorps xmm2, xmm0
movd dword [rsp + 0x34], xmm2
mov eax, r8d
lea r9, [rsp + 0x20]
add r9, rax
nop word [rax + rax]
mov eax, 0xe070381d
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 6
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x49
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x57
xor byte [r9 - 1], al
cmp r8d, 0x1b
jl 0x140001ec0
lea rcx, [rsp + 0x20]
call r11
test eax, eax
sete al
add rsp, 0x68
ret