Function at 0x140006eb0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r13
push r14
push r15
sub rsp, 0x120
mov rax, qword [0x14016e040]
xor rax, rsp
mov qword [rsp + 0x110], rax
mov rdx, qword [0x140233008]
test rdx, rdx
jne 0x1400070ca
xor r9d, r9d
mov dword [rsp + 0x28], r9d
mov r10d, 0xc5f6a8e5
mov dword [rsp + 0x24], r10d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rcx, qword [rax + 0x10]
mov r8, qword [rcx]
mov qword [rsp + 0x58], r8
mov r15, r8
mov qword [rsp + 0x60], r8
mov rax, r8
mov r13d, 0x811c9dc5
movups xmm0, xmmword [rax + 0x58]
movups xmmword [rsp + 0x68], xmm0
movd eax, xmm0
sub ax, 8
mov word [rsp + 0x68], ax
test r9d, r9d
je 0x140006f7c
mov rcx, qword [rsp + 0x70]
movzx eax, ax
shr rax, 1
lea r11, [rcx + rax*2]
mov edx, r13d
mov qword [rsp + 0x40], rcx
cmp rcx, r11
je 0x140006f73
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
jmp 0x140006f58
cmp edx, r9d
jne 0x1400070a2
mov rdi, qword [r8 + 0x30]
mov qword [rsp + 0x80], rdi
movsxd rax, dword [rdi + 0x3c]
mov rax, qword [rax + rdi + 0x88]
mov qword [rsp + 0x78], rax
mov ebx, eax
add rbx, rdi
mov qword [rsp + 0x88], rbx
shr rax, 0x20
mov dword [rsp + 0x90], eax
cmp rbx, rdi
je 0x1400070a2
mov r11d, dword [rbx + 0x18]
mov dword [rsp + 0x20], r11d
mov ecx, r11d
dec r11d
mov dword [rsp + 0x20], r11d
test ecx, ecx
je 0x1400070a2
mov edx, dword [rbx + 0x20]
add rdx, rdi
mov edx, dword [rdx + r11*4]
add rdx, rdi
mov qword [rsp + 0x48], rdx
mov esi, r13d
movsx ecx, byte [rdx]
inc rdx
mov qword [rsp + 0x48], rdx
test cl, cl
jne 0x140007197
cmp esi, r10d
jne 0x140007192
mov edx, dword [rbx + 0x1c]
add rdx, rdi
mov ecx, dword [rbx + 0x24]
add rcx, rdi
movzx ecx, word [rcx + r11*2]
mov r8d, dword [rdx + rcx*4]
add r8, rdi
cmp r8, rbx
jbe 0x1400070c0
lea rcx, [rbx + rax]
cmp r8, rcx
jae 0x1400070c0
mov r9d, r13d
mov dword [rsp + 0x30], r13d
mov r10d, r13d
mov dword [rsp + 0x34], r13d
mov ecx, r13d
mov qword [rsp + 0x38], r8
cmp byte [r8], 0x2e
je 0x14000706d
movsx eax, byte [r8]
xor eax, ecx
imul r9d, eax, 0x1000193
mov dword [rsp + 0x30], r9d
inc r8
mov ecx, r9d
jmp 0x140007048
inc r8
mov qword [rsp + 0x38], r8
cmp byte [r8], 0
je 0x140007090
movsx eax, byte [r8]
xor eax, r10d
imul r10d, eax, 0x1000193
mov dword [rsp + 0x34], r10d
jmp 0x14000706d
mov dword [rsp + 0x24], r10d
mov dword [rsp + 0x28], r9d
mov r8, qword [r15]
mov qword [rsp + 0x58], r8
mov r8, qword [r8]
mov rax, r8
mov qword [rsp + 0x58], r8
cmp r8, r15
je 0x1400070bd
cmp qword [r8 + 0x30], 0
jne 0x140006f2b
xor r8d, r8d
mov qword [0x140233008], r8
mov rdx, r8
movdqa xmm0, xmmword [0x140154ef0]
movdqa xmmword [rsp + 0xa0], xmm0
movdqa xmm1, xmmword [0x140154da0]
movdqa xmmword [rsp + 0xb0], xmm1
movdqa xmm0, xmmword [0x140154d10]
movdqa xmmword [rsp + 0xc0], xmm0
movdqa xmm1, xmmword [0x140154c70]
movdqa xmmword [rsp + 0xd0], xmm1
movdqa xmm0, xmmword [0x140154b50]
movdqa xmmword [rsp + 0xe0], xmm0
movdqa xmm1, xmmword [0x1401548b0]
movdqa xmmword [rsp + 0xf0], xmm1
mov dword [rsp + 0x100], 0x3e69386f
mov dword [rsp + 0x104], 0x22753c6b
mov dword [rsp + 0x108], 0x26712077
mov dword [rsp + 0x10c], 0x1002473
lea r10, [rsp + 0xa0]
xor eax, eax
xor r8d, r8d
xor r9d, r9d
xor ecx, ecx
mov qword [rsp + 0x50], rax
cmp r8, 0x6e
jae 0x1400071a4
sub al, 0x16
xor al, byte [rcx + r10]
mov byte [rcx + r10], al
lea rax, [r9 + 1]
mov rcx, rax
mov r8, rax
mov r9, rax
jmp 0x14000716e
jmp 0x140006fc3
xor ecx, esi
imul esi, ecx, 0x1000193
jmp 0x140006feb
mov byte [rsp + 0x10f], 0
mov rcx, r10
call rdx
jmp 0x1400071b3
xor eax, eax
mov rcx, qword [rsp + 0x110]
xor rcx, rsp
call fcn.140118ad0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
ret