Function at 0x14000fb10
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r13
push r15
sub rsp, 0x68
mov rax, qword [0x140090040]
xor rax, rsp
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x20], rdx
mov r13, rcx
xor r15d, r15d
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x2c]
mov dword [rsp + 0x2c], r15d
mov dword [rsp + 0x28], r15d
call qword [sym.imp.gdiplus.dll_GdipGetImageEncodersSize]
cmp dword [rsp + 0x28], r15d
je 0x14000fe64
mov rax, qword gs:[0x60]
mov qword [rsp + 0x90], rbx
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x58], rsi
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], r14
mov rbp, qword [rcx + 0x10]
mov rsi, rbp
nop dword [rax]
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x14000fc1a
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x14000fc1a
mov r14d, dword [rdi + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0x811c9dc5
lea rax, [r14 + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14000fc15
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14000fbe0
cmp r9d, 0x558c274d
je 0x14000fd49
test r10d, r10d
jne 0x14000fbc0
mov rax, qword [rsi]
mov rsi, rax
cmp rax, rbp
je 0x14000fc2f
cmp qword [rax + 0x30], r15
jne 0x14000fb90
mov rax, r15
mov ecx, dword [rsp + 0x28]
call rax
mov r12, rax
test rax, rax
je 0x14000fe43
mov edx, dword [rsp + 0x28]
mov r8, rax
mov ecx, dword [rsp + 0x2c]
call qword [sym.imp.gdiplus.dll_GdipGetImageEncoders]
cmp dword [rsp + 0x2c], r15d
jbe 0x14000fd8c
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rbp, qword [rcx + 0x10]
mov rsi, rbp
nop dword [rax]
nop dword [rax + rax]
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x14000fd0a
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x14000fd0a
mov r14d, dword [rdi + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0x811c9dc5
lea rax, [r14 + r10*4]
mov eax, dword [rax + r11]
add rax, r11
movzx r8d, byte [rax]
inc rax
test r8b, r8b
je 0x14000fd05
movsx ecx, r8b
lea rax, [rax + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rax - 1]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test r8b, r8b
jne 0x14000fcd0
cmp r9d, 0x28976ce8
je 0x14000fd65
test r10d, r10d
jne 0x14000fcb0
mov rax, qword [rsi]
mov rsi, rax
cmp rax, rbp
je 0x14000fd20
cmp qword [rax + 0x30], 0
jne 0x14000fc80
xor r8d, r8d
mov eax, r15d
mov rdx, r13
imul rbx, rax, 0x68
mov rcx, qword [rbx + r12 + 0x40]
call r8
test eax, eax
je 0x14000fd7f
inc r15d
cmp r15d, dword [rsp + 0x2c]
jb 0x14000fc60
jmp 0x14000fd8c
mov ecx, dword [rdi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x14000fc32
mov ecx, dword [rdi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov r8d, dword [rcx + rdx*4]
add r8, r11
jmp 0x14000fd23
mov rax, qword [rsp + 0x20]
movups xmm0, xmmword [rbx + r12]
movups xmmword [rax], xmm0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rbp, qword [rcx + 0x10]
mov rsi, rbp
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x14000fe26
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x14000fe26
mov r14d, dword [rdi + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0x811c9dc5
lea rax, [r14 + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x14000fe21
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x14000fdf0
cmp r9d, 0x99b3eedb
je 0x14000fe7a
test r10d, r10d
jne 0x14000fdd0
mov rax, qword [rsi]
mov rsi, rax
cmp rax, rbp
je 0x14000fe3c
cmp qword [rax + 0x30], 0
jne 0x14000fda0
xor eax, eax
mov rcx, r12
call rax
mov r12, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x90]
mov r14, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140049190
add rsp, 0x68
pop r15
pop r13
ret
mov ecx, dword [rdi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x14000fe3e