Function at 0x14001b560
Capabilities:
Access peb ldr_data
Encode data using xor
Generate random numbers using a mersenne twister
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x1370]
mov eax, 0x1470
call fcn.140022c20
sub rsp, rax
mov rax, qword [0x140044040]
xor rax, rsp
mov qword [rbp + 0x1360], rax
xor r14d, r14d
call qword [sym.imp.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_]
mov dword [rbp + 0x1354], 0xffffffff
mov dword [rbp - 0x2c], eax
mov edx, 1
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 - 0x2c], eax
inc rdx
cmp rdx, 0x270
jb 0x14001b5c0
mov dword [rbp - 0x30], 0x270
xorps xmm0, xmm0
movups xmmword [rbp - 0x58], xmm0
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
xor r8d, r8d
lea rdx, [0x14003d9de]
lea rcx, [rbp - 0x58]
call fcn.140008b70
nop
movdqa xmm0, xmmword [0x14003e5a0]
movdqu xmmword [rsp + 0x48], xmm0
movdqa xmm1, xmmword [0x14003e4c0]
movdqu xmmword [rsp + 0x58], xmm1
movdqa xmm0, xmmword [0x14003e500]
movdqu xmmword [rsp + 0x68], xmm0
mov dword [rsp + 0x78], 0x5a595857
mov r15d, 0x80000000
movabs r12, 0x7fffffffffffffff
nop dword [rax + rax]
lea rcx, [rbp - 0x30]
call fcn.14001ea60
mov ecx, eax
imul rax, rcx, 0x34
cmp eax, 0x2f
ja 0x14001b678
lea rcx, [rbp - 0x30]
call fcn.14001ea60
mov ecx, eax
imul rax, rcx, 0x34
cmp eax, 0x30
jb 0x14001b664
shr rax, 0x20
sub rax, r15
xor rax, 0xffffffff80000000
movzx eax, byte [rsp + rax + 0x48]
mov byte [rbp - 0x60], al
mov rax, qword [rbp - 0x48]
cmp rax, r12
je 0x14001b859
lea r9, [rbp - 0x58]
cmp qword [rbp - 0x40], 0xf
cmova r9, qword [rbp - 0x58]
mov qword [rsp + 0x30], 1
lea rcx, [rbp - 0x60]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea rcx, [rbp - 0x80]
call fcn.14000c700
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x14001b703
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b6fe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001b81d
call fcn.140021940
movups xmm0, xmmword [rbp - 0x80]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rbp - 0x70]
movups xmmword [rbp - 0x48], xmm1
lea rsi, [rbp - 0x58]
movq rcx, xmm0
psrldq xmm1, 8
movq rax, xmm1
cmp rax, 0xf
cmova rsi, rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14001b7b6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14001b7b6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0xff753e3c
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14001b7b1
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14001b790
cmp r8d, 0xeacc3b40
je 0x14001b7bb
test r9d, r9d
jne 0x14001b770
mov rax, qword [rax]
jmp 0x14001b740
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
inc r14d
cmp r14d, 0xf
jl 0x14001b650
mov rdx, qword [rbp - 0x40]
cmp rdx, 0xf
jbe 0x14001b829
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001b824
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14001b824
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140021940
mov rcx, qword [rbp + 0x1360]
xor rcx, rsp
call fcn.140021920
lea r11, [rsp + 0x1470]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.140002340
nop
int3