Function at 0x1400305b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using murmur2
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rsi
push r13
sub rsp, 0x78
xor r13d, r13d
mov qword [rsp + 0x70], r12
mov rsi, rcx
cmp byte [rcx + 0x40], r13b
jne 0x1400305d1
call fcn.140033d10
mov r13d, eax
mov r12, qword [rsi + 0x30]
mov byte [rsi + 0x40], 1
test r12, r12
je 0x1400307e3
cmp qword [rsi + 0x18], 0
je 0x1400307e3
mov qword [rsp + 0x98], rbx
lea rcx, [rsp + 0x20]
mov qword [rsp + 0xa0], rbp
mov qword [rsp + 0xa8], rdi
call fcn.140034fd0
mov rbx, rax
movsx edi, byte [rax]
mov ecx, edi
call fcn.140014160
add edi, eax
cmp edi, 0xfffffff0
jg 0x14003062d
mov edx, 0x84
call fcn.140052d80
cmp edi, 0xffffffb7
jg 0x14003063c
mov edx, 0x9d
call fcn.140052d80
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r11d, ecx, 0x5bd1e995
xor edx, edx
lea r10d, [rdx + 8]
nop dword [rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r11d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r10, 1
jne 0x140030660
mov r9d, dword [0x14018719c]
mov rdx, qword [rbx + 0x28]
call fcn.1400525a0
mov rbp, rax
test rax, rax
je 0x1400306d2
mov rcx, rbp
mov edx, 0xf
nop dword [rax]
movzx eax, byte [rbx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x1400306c0
mov byte [rbp + 0xf], dl
mov rax, qword gs:[0x60]
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x60], r15
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
cmp qword [rbx + 0x60], 0
je 0x1400307ba
mov eax, 0x5a4d
mov r11, qword [rbx + 0x30]
mov rbx, qword [rbx]
test r11, r11
je 0x1400307af
cmp word [r11], ax
jne 0x1400307ba
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400307ba
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400307ba
mov r14d, dword [r11 + rcx + 0x1c]
lea rax, [r11 + rcx]
mov r10d, dword [rax + 0x20]
add r14, r11
mov r15d, dword [rax + 0x24]
add r10, r11
mov edi, dword [rax + 0x18]
add r15, r11
xor r9d, r9d
test edi, edi
je 0x1400307aa
mov eax, dword [r10]
xor dl, dl
add rax, r11
cmp byte [rax], dl
je 0x14003079e
mov r8, rbp
sub r8, rax
movzx ecx, byte [rax + r8]
test cl, cl
je 0x14003079a
cmp byte [rax], cl
jne 0x14003079e
inc rax
mov dl, 1
cmp byte [rax], 0
jne 0x140030772
movsxd rax, r9d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x1400307bc
test dl, dl
jne 0x140030789
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140030760
mov eax, 0x5a4d
cmp qword [rbx + 0x60], 0
jne 0x140030700
xor eax, eax
mov rcx, r12
call rax
mov r15, qword [rsp + 0x60]
mov r14, qword [rsp + 0x68]
mov rdi, qword [rsp + 0xa8]
mov rbp, qword [rsp + 0xa0]
mov rbx, qword [rsp + 0x98]
mov rdx, qword [rsi + 0x18]
mov r12, qword [rsp + 0x70]
mov qword [rsi + 0x30], 0
test rdx, rdx
je 0x1400307fe
call fcn.140052f50
mov rdx, qword [rsi + 8]
mov qword [rsi + 0x18], 0
test rdx, rdx
je 0x14003081a
cmp byte [rsi + 0x10], 0
je 0x14003081a
call fcn.140052f50
mov qword [rsi + 8], 0
mov eax, r13d
mov byte [rsi + 0x10], 0
add rsp, 0x78
pop r13
pop rsi
ret