Function at 0x14000495c
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Hash data using murmur3
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x48
mov dword [rbp + 0x48], 0x71836ff4
mov dword [rbp + 0x4c], 0x6a83b33f
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov ecx, 0x1a0
mov eax, dword [rcx + rbx]
mov edi, 0x1c8
xor r13d, r13d
test al, 1
jne 0x1400049d7
or eax, 1
mov dword [rcx + rbx], eax
lea r8, [rbx + rdi]
mov byte [r8 + 8], 1
mov edx, r13d
mov rcx, rdx
and ecx, 7
mov al, byte [rbp + rcx + 0x48]
mov byte [rcx + r8], al
inc rdx
cmp rdx, 0x7a0
jb 0x1400049b0
lea rcx, [0x140007a34]
call fcn.140006738
nop
lea r10, [rbx + rdi]
movabs r15, 0xff51afd7ed558ccd
movabs r12, 0xc4ceb9fe1a85ec53
cmp byte [r10 + 8], r13b
je 0x140004b54
movabs r9, 0xad3517ed55ed4d31
mov rbx, r13
movabs r8, 0x101010101010101
mov rdi, r13
mov r11, r9
and r11d, 0xf
lea rsi, [r11*8]
test rsi, rsi
je 0x140004b05
mov r14, r13
movabs r13, 0x101010101010101
mov rax, r14
shr rax, 0x1b
xor rax, r14
imul rax, r15
mov rcx, rax
shr rcx, 0x21
xor rcx, rax
imul rcx, r12
mov rax, rcx
shr rax, 0x1b
xor rax, rcx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, r13
mov r8, rdi
and r8d, 7
xor edx, edx
mov rax, rdi
div r11
mov rax, rdx
imul rax, r9
xor edx, edx
div rcx
movzx eax, dil
movzx ecx, dl
imul ecx, eax
and cl, 0x1f
mov rax, r9
shr rax, cl
xor byte [r8 + r10], al
inc rdi
add r14, r11
xor edx, edx
lea eax, [rdx + 8]
div rdi
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, r15
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, r12
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, r13
mov rax, r11
imul rax, rcx
xor rax, rdi
xor r9, rax
cmp rdi, rsi
jb 0x140004a38
xor r13d, r13d
movabs r8, 0x101010101010101
inc rbx
mov rax, rbx
xor rax, r9
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, r15
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, r12
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rdx, rax, 0x32
or rdx, r8
xor r9, rdx
cmp rbx, 2
jb 0x140004a10
mov byte [r10 + 8], r13b
mov rcx, r10
call fcn.140004554
mov ebx, eax
test eax, eax
jne 0x140004b6c
call fcn.140005284
jmp 0x140005273
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
or esi, 0xffffffff
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r11d, dword [rcx + r8 + 0x88]
add r11, r8
cmp r11, r8
je 0x140004be4
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x140004be4
mov edi, dword [r11 + 0x20]
add r10d, esi
lea rdx, [rdi + r10*4]
mov r9d, dword [rdx + r8]
add r9, r8
mov edx, 0x4bc7bade
mov cl, byte [r9]
inc r9
test cl, cl
je 0x140004bdf
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r9]
inc r9
test cl, cl
jne 0x140004bc2
cmp edx, 0x36f0e33
je 0x140004be9
test r10d, r10d
jne 0x140004ba5
mov rax, qword [rax]
jmp 0x140004b80
mov edx, dword [r11 + 0x1c]
add rdx, r8
mov ecx, dword [r11 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov eax, dword [rdx + rcx*4]
add rax, r8
mov r8d, ebx
xor edx, edx
mov ecx, 0x1fffff
call rax
test rax, rax
jne 0x140004c1d
call fcn.140005908
jmp 0x140005273
mov rcx, rax
call fcn.140004860
test al, al
jne 0x140004c33
call fcn.140005f80
jmp 0x140005273
mov dword [rbp - 0x18], 0xd3d3c5e3
mov dword [rbp - 0x14], 0xbac3c3d5
mov byte [rbp - 0x10], 0xb0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x19c
mov eax, dword [rdx + rcx]
mov ebx, 0x1d8
movabs r10, 0xe38e38e38e38e38f
test al, 1
jne 0x140004cbb
or eax, 1
mov dword [rdx + rcx], eax
mov r9d, ebx
add r9, rcx
mov byte [r9 + 9], 1
mov r8, r13
mov rax, r10
mul r8
shr rdx, 3
lea rax, [rdx + rdx*8]
mov rdx, r8
sub rdx, rax
mov rcx, r9
sub rcx, rax
mov al, byte [rbp + rdx - 0x18]
mov byte [rcx + r8], al
inc r8
cmp r8, 0x7fb
jb 0x140004c80
lea rcx, [0x14000795c]
call fcn.140006738
nop
mov rax, qword gs:[0x58]
add rbx, qword [rax]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r11d, dword [rcx + r8 + 0x88]
add r11, r8
cmp r11, r8
je 0x140004d3c
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x140004d3c
mov edi, dword [r11 + 0x20]
add r10d, esi
lea rdx, [r8 + r10*4]
mov r9d, dword [rdx + rdi]
add r9, r8
mov edx, 0xf4d03cec
mov cl, byte [r9]
inc r9
test cl, cl
je 0x140004d37
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r9]
inc r9
test cl, cl
jne 0x140004d1a
cmp edx, 0x7913e92c
je 0x140004d41
test r10d, r10d
jne 0x140004cfd
mov rax, qword [rax]
jmp 0x140004cd8
mov edx, dword [r11 + 0x1c]
add rdx, r8
mov ecx, dword [r11 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov eax, dword [rdx + rcx*4]
add rax, r8
mov ecx, 1
call rax
mov r12, rax
mov qword [rbp + 0x60], rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov r8, qword [rcx + 0x30]
movsxd rdx, dword [r8 + 0x3c]
mov r11d, dword [rdx + r8 + 0x88]
add r11, r8
cmp r11, r8
je 0x140004ddd
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x140004ddd
mov edi, dword [r11 + 0x20]
add r10d, esi
lea rdx, [r8 + r10*4]
mov r9d, dword [rdx + rdi]
add r9, r8
mov edx, 0xf7d041a5
mov al, byte [r9]
inc r9
test al, al
je 0x140004dd8
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [r9]
inc r9
test al, al
jne 0x140004dbb
cmp edx, 0x88f27222
je 0x140004de2
test r10d, r10d
jne 0x140004d9e
mov rcx, qword [rcx]
jmp 0x140004d79
mov edx, dword [r11 + 0x1c]
add rdx, r8
mov ecx, dword [r11 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov edi, dword [rdx + rcx*4]
add rdi, r8
mov qword [rbp + 0x58], rdi
cmp byte [rbx + 9], r13b
je 0x140004fa2
movabs r10, 0xe583e5136fb9b921
mov r11, r13
mov qword [rbp + 0x50], r13
movabs r12, 0xc4ceb9fe1a85ec53
mov r14, r13
mov r9, r10
and r9d, 0xf
lea rsi, [r9 + r9*8]
test rsi, rsi
je 0x140004f3a
mov r15, r13
movabs rdi, 0x101010101010101
movabs r13, 0xff51afd7ed558ccd
movabs r11, 0xe38e38e38e38e38f
mov rax, r15
shr rax, 0x1b
xor rax, r15
imul rax, r13
mov rcx, rax
shr rcx, 0x21
xor rcx, rax
imul rcx, r12
mov rax, rcx
shr rax, 0x1b
xor rax, rcx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, rdi
mov rax, r11
mul r14
shr rdx, 3
lea rax, [rdx + rdx*8]
mov r8, r14
sub r8, rax
xor edx, edx
mov rax, r14
div r9
mov rax, rdx
imul rax, r10
xor edx, edx
div rcx
movzx eax, r14b
movzx ecx, dl
imul ecx, eax
and cl, 0x1f
mov rax, r10
shr rax, cl
xor byte [r8 + rbx], al
inc r14
add r15, r9
xor edx, edx
lea eax, [rdx + 9]
div r14
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, r13
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, r12
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, rdi
mov rax, r9
imul rax, rcx
xor rax, r14
xor r10, rax
cmp r14, rsi
jb 0x140004e5c
mov r11, qword [rbp + 0x50]
xor r13d, r13d
movabs r15, 0xff51afd7ed558ccd
inc r11
mov qword [rbp + 0x50], r11
mov rax, r11
xor rax, r10
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, r15
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, r12
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
movabs rax, 0x101010101010101
or rcx, rax
xor r10, rcx
cmp r11, 3
jb 0x140004e24
mov byte [rbx + 9], r13b
mov rdi, qword [rbp + 0x58]
mov r12, qword [rbp + 0x60]
or esi, 0xffffffff
mov qword [rsp + 0x20], r13
xor r9d, r9d
mov r8, rbx
mov rdx, r12
xor ecx, ecx
call rdi
mov dword [rbp + 0x48], 0x5ca8be32
mov word [rbp + 0x4c], 0x72f3
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x200
mov eax, dword [rdx + rcx]
mov ebx, 0x1a8
movabs r10, 0xaaaaaaaaaaaaaaab
test al, 1
jne 0x140005034
or eax, 1
mov dword [rdx + rcx], eax
mov r9d, ebx
add r9, rcx
mov byte [r9 + 6], 1
mov r8, r13
mov rax, r10
mul r8
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov rcx, r8
sub rcx, rax
mov al, byte [rbp + rcx + 0x48]
mov byte [r9 + rcx], al
inc r8
cmp r8, 0x12c
jb 0x140004ffc
lea rcx, [0x140007940]
call fcn.140006738
nop
mov r11d, ebx
mov rax, qword gs:[0x58]
add r11, qword [rax]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov ebx, dword [rcx + r8 + 0x88]
add rbx, r8
cmp rbx, r8
je 0x1400050b7
mov r10d, dword [rbx + 0x18]
test r10d, r10d
je 0x1400050b7
mov edi, dword [rbx + 0x20]
add r10d, esi
lea rdx, [r8 + r10*4]
mov r9d, dword [rdx + rdi]
add r9, r8
mov edx, 0xe26ccf02
mov cl, byte [r9]
inc r9
test cl, cl
je 0x1400050b2
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r9]
inc r9
test cl, cl
jne 0x140005095
cmp edx, 0xf7cb286b
je 0x1400050bc
test r10d, r10d
jne 0x140005078
mov rax, qword [rax]
jmp 0x140005054
mov eax, dword [rbx + 0x24]
add rax, r8
movzx edx, word [rax + r10*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r8
mov edi, dword [rcx + rdx*4]
add rdi, r8
mov qword [rbp + 0x50], rdi
cmp byte [r11 + 6], r13b
je 0x14000526c
movabs r10, 0x7a97dcf55ade7f1
mov rbx, r13
mov qword [rbp + 0x48], rbx
movabs rdi, 0xc4ceb9fe1a85ec53
mov r14, r13
mov r9, r10
and r9d, 0xf
lea rsi, [r9 + r9*2]
add rsi, rsi
je 0x14000520b
mov r15, r13
movabs rbx, 0xaaaaaaaaaaaaaaab
movabs r12, 0xff51afd7ed558ccd
movabs r13, 0x101010101010101
mov rax, r15
shr rax, 0x1b
xor rax, r15
imul rax, r12
mov rcx, rax
shr rcx, 0x21
xor rcx, rax
imul rcx, rdi
mov rax, rbx
mul r14
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov r8, r14
sub r8, rax
mov rax, rcx
shr rax, 0x1b
xor rax, rcx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, r13
xor edx, edx
mov rax, r14
div r9
mov rax, rdx
imul rax, r10
xor edx, edx
div rcx
movzx eax, r14b
movzx ecx, dl
imul ecx, eax
and cl, 0x1f
mov rax, r10
shr rax, cl
xor byte [r8 + r11], al
inc r14
add r15, r9
xor edx, edx
lea eax, [rdx + 6]
div r14
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, r12
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, rdi
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, r13
imul rcx, r9
xor rcx, r14
xor r10, rcx
cmp r14, rsi
jb 0x140005134
mov rbx, qword [rbp + 0x48]
xor r13d, r13d
mov r15, r12
inc rbx
mov qword [rbp + 0x48], rbx
mov rax, rbx
xor rax, r10
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, r15
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, rdi
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rdx, rax, 0x32
movabs rax, 0x101010101010101
or rdx, rax
xor r10, rdx
cmp rbx, 4
jb 0x1400050fc
mov byte [r11 + 6], r13b
mov rdi, qword [rbp + 0x50]
mov rcx, r11
call rdi
xor eax, eax
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret