Function at 0x1400799a0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
push rdi
push r14
sub rsp, 0xa0
mov rax, qword [0x14009d040]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov r14, rdx
mov rsi, rcx
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x80], rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140079a66
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140079a66
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xc79a7f72
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140079a61
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140079a40
cmp r8d, 0x7d7ad3fa
je 0x140079a6b
test r9d, r9d
jne 0x140079a20
mov rax, qword [rax]
jmp 0x1400799f0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, 0xc9
mov rcx, qword [0x14009e450]
call r8
mov rdi, rax
test rax, rax
je 0x140079b17
lea rax, [rsp + 0x38]
mov qword [rsp + 0x28], rax
lea rdx, [0x14009d250]
lea rcx, [rsp + 0x38]
call fcn.14000b220
mov rbx, rax
mov rdx, r14
lea rcx, [rsp + 0x58]
call fcn.14000b220
nop
mov r8, rbx
mov rdx, rax
mov rcx, rsi
call rdi
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x140079b08
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x140079b03
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140079b10
mov rcx, r8
call fcn.14007b120
mov rax, rsi
jmp 0x140079cad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140079ba6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140079ba6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xf048418f
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140079ba1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140079b80
cmp r8d, 0xee0091f8
je 0x140079bab
test r9d, r9d
jne 0x140079b60
mov rax, qword [rax]
jmp 0x140079b30
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, qword [0x14009e450]
call rdx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140079c56
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140079c56
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x6bdfa301
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140079c51
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140079c30
cmp r8d, 0x9f33da1
je 0x140079c5b
test r9d, r9d
jne 0x140079c10
mov rax, qword [rax]
jmp 0x140079be0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x140079cad
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x140079ca8
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140079ce5
mov rcx, r8
call fcn.14007b120
mov byte [r14], 0
mov qword [r14 + 0x18], 0xf
mov qword [r14 + 0x10], 0
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.14007b100
mov rbx, qword [rsp + 0xd0]
add rsp, 0xa0
pop r14
pop rdi
pop rsi
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3