Function at 0x1401e98b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
lea rbp, [rsp - 0x18]
sub rsp, 0x118
mov rax, qword [0x140549268]
lea r9, [rbp + 0x50]
xor ecx, ecx
mov rdx, 0xffffffffffffffff
mov dword [rsp + 0x30], ecx
xorps xmm0, xmm0
mov dword [rsp + 0x28], ecx
mov r8, rdx
mov dword [rsp + 0x20], ecx
mov qword [rsp + 0x50], rcx
mov rcx, rdx
movdqu xmmword [rsp + 0x40], xmm0
call rax
test eax, eax
js 0x1401e9c60
mov qword [rsp + 0x110], r12
mov eax, 0xff000
mov qword [rsp + 0x108], r13
mov qword [rsp + 0x100], r14
mov qword [rsp + 0xf8], r15
nop dword [rax]
nop dword [rax + rax]
add eax, 0x1000
mov ecx, eax
mov dword [rbp + 0x48], eax
call fcn.1403caeb8
mov r10, qword [0x1405491e0]
lea r9, [rbp + 0x48]
mov r8d, dword [rbp + 0x48]
mov rdx, rax
mov ecx, 0x40
mov qword [rbp + 0x58], rax
mov r12, rax
call r10
mov r13d, eax
test eax, eax
js 0x1401e9a4a
mov r14, qword [r12]
test r14, r14
je 0x1401e9a4a
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
mov r10, qword [rcx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1401e9a07
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1401e9a07
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xae62c5e4
lea rax, [rdi + r9*4]
mov eax, dword [rax + r10]
add rax, r10
movzx edx, byte [rax]
inc rax
test dl, dl
je 0x1401e9a02
nop
movsx edx, dl
lea rax, [rax + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rax - 1]
test dl, dl
jne 0x1401e99e0
cmp r8d, 0x2c91caf7
je 0x1401e9a0c
test r9d, r9d
jne 0x1401e99c0
mov rcx, qword [rcx]
jmp 0x1401e9990
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
call rax
lea rsi, [r12 + 0x10]
mov r15d, eax
mov rax, qword [rbp + 0x50]
mov rcx, rsi
cmp qword [rcx + 8], r15
jne 0x1401e9a40
cmp qword [rcx + 0x10], rax
je 0x1401e9a67
add rcx, 0x28
sub r14, 1
jne 0x1401e9a34
mov rcx, r12
call fcn.1403cad84
cmp r13d, 0xc0000004
jne 0x1401e9c2f
mov eax, dword [rbp + 0x48]
jmp 0x1401e9930
mov r13, qword [rcx]
mov r12, qword [r12]
mov rdi, qword [rsp + 0x48]
movaps xmmword [rsp + 0xe0], xmm6
movaps xmmword [rsp + 0xd0], xmm7
cmp r13, qword [rsi]
jne 0x1401e9c06
mov rax, qword [rsi + 8]
cmp rax, r15
je 0x1401e9c06
test dword [rsi + 0x18], 0x1fffff
je 0x1401e9c06
xor ecx, ecx
mov qword [rbp - 0x48], 7
xorps xmm0, xmm0
mov qword [rbp - 0x68], rcx
mov dword [rbp - 0x68], eax
mov qword [rbp - 0x60], rcx
mov qword [rbp - 0x50], rcx
movups xmmword [rbp - 0x40], xmm0
call fcn.1401418e8
mov r14d, dword [rsi + 8]
lea rdx, [rbp + 0x40]
mov rbx, rax
mov qword [rsp + 0x70], 7
xor eax, eax
lea rcx, [rsp + 0x58]
mov word [rbp + 0x40], ax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x68], rax
call fcn.14013edcc
mov r9, qword [rbx + 0x18]
xor ecx, ecx
mov r8d, ecx
movabs rax, 0x6d3a06d3a06d3a07
mov rcx, qword [rbx + 0x20]
sub rcx, r9
imul rcx
sar rdx, 8
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x1401e9b5d
mov rax, r9
nop dword [rax]
cmp dword [rax], r14d
je 0x1401e9b45
inc r8
add rax, 0x258
cmp r8, rdx
jb 0x1401e9b30
jmp 0x1401e9b5d
imul rax, r8, 0x258
lea rdx, [r9 + 4]
add rdx, rax
lea rcx, [rsp + 0x58]
call fcn.14013edcc
movups xmm7, xmmword [rsp + 0x68]
xor ebx, ebx
lea rcx, [rsp + 0x58]
movups xmm6, xmmword [rsp + 0x58]
mov word [rsp + 0x58], bx
movups xmmword [rbp - 0x78], xmm7
mov qword [rsp + 0x70], 7
movups xmmword [rsp + 0x78], xmm6
mov qword [rsp + 0x68], rbx
call fcn.14013ed68
lea rcx, [rbp - 0x60]
call fcn.14013ed68
lea rcx, [rsp + 0x78]
mov qword [rbp - 0x78], rbx
movups xmmword [rbp - 0x60], xmm6
mov qword [rbp - 0x70], 7
movups xmmword [rbp - 0x50], xmm7
mov word [rsp + 0x78], bx
call fcn.14013ed68
mov eax, dword [rsi + 0x18]
mov dword [rbp - 0x38], eax
mov rax, qword [rsi + 0x10]
mov qword [rbp - 0x40], rax
cmp rdi, qword [rsp + 0x50]
je 0x1401e9be7
lea rdx, [rbp - 0x68]
mov rcx, rdi
call fcn.1401f5860
add rdi, 0x38
mov qword [rsp + 0x48], rdi
jmp 0x1401e9bfd
lea r8, [rbp - 0x68]
mov rdx, rdi
lea rcx, [rsp + 0x40]
call fcn.1401f4990
mov rdi, qword [rsp + 0x48]
lea rcx, [rbp - 0x60]
call fcn.14013ed68
add rsi, 0x28
sub r12, 1
jne 0x1401e9a83
mov rcx, qword [rbp + 0x58]
call fcn.1403cad84
movaps xmm7, xmmword [rsp + 0xd0]
movaps xmm6, xmmword [rsp + 0xe0]
jmp 0x1401e9c34
mov rdi, qword [rsp + 0x48]
mov rcx, qword [rbp + 0x50]
call qword [0x140549278]
mov r15, qword [rsp + 0xf8]
mov r14, qword [rsp + 0x100]
mov r13, qword [rsp + 0x108]
mov r12, qword [rsp + 0x110]
jmp 0x1401e9c65
mov rdi, qword [rsp + 0x48]
call fcn.1401418e8
mov rsi, qword [rsp + 0x40]
lea rcx, [rsp + 0x40]
add rax, 0x48
cmp rax, rcx
je 0x1401e9c8b
mov r8, rdi
mov rdx, rsi
mov rcx, rax
call fcn.1401f5cb0
test rsi, rsi
je 0x1401e9d02
mov rbx, rsi
cmp rsi, rdi
je 0x1401e9cb2
nop dword [rax + rax]
lea rcx, [rbx + 8]
call fcn.14013ed68
add rbx, 0x38
cmp rbx, rdi
jne 0x1401e9ca0
mov rcx, qword [rsp + 0x50]
movabs rax, 0x4924924924924925
sub rcx, rsi
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, rsi
imul rdx, rdx, 0x38
cmp rdx, 0x1000
jb 0x1401e9cfa
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e9d0e
mov rcx, rsi
call fcn.1403cad84
add rsp, 0x118
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1403d7020
int3