Function at 0x140046a70
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
movaps xmmword [rax - 0x28], xmm6
mov rax, qword [0x14012e0c0]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rax, qword [0x1401304e8]
test rax, rax
jne 0x140046c1d
mov rax, qword gs:[0x60]
xor r14d, r14d
mov r11d, 0x9bc5a608
mov rcx, qword [rax + 0x18]
mov r12, qword [rcx + 0x10]
mov rdi, r12
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140046b2d
psrldq xmm0, 8
mov edx, 0x811c9dc5
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140046b24
nop
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140046b10
cmp edx, r14d
jne 0x140046c05
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r15, rcx
mov r10d, ecx
shr r15, 0x20
add r10, r9
cmp r10, r9
je 0x140046c05
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x140046c05
mov esi, dword [r10 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rsi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140046ba7
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140046b90
cmp edx, r11d
je 0x140046bb3
test r8d, r8d
jne 0x140046b70
jmp 0x140046c05
mov ecx, dword [r10 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
cmp rax, r10
jbe 0x140046c16
lea rcx, [r10 + r15]
cmp rax, rcx
jae 0x140046c16
cmp byte [rax], 0x2e
mov r14d, 0x811c9dc5
mov dword [rbp + 0x1f], r14d
mov dword [rbp + 0x23], r14d
je 0x140046bfa
nop dword [rax]
cmp byte [rax + 1], 0x2e
lea rax, [rax + 1]
jne 0x140046bf0
mov r11, qword [rbp + 0x1f]
mov rdi, r12
shr r11, 0x20
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r12
jne 0x140046ae0
xor eax, eax
mov qword [0x1401304e8], rax
call rax
mov rcx, rax
call fcn.1400421c0
call fcn.140045db0
call fcn.1400426c0
movdqa xmm6, xmmword [0x14011b5f0]
nop dword [rax]
call fcn.140041fc0
call fcn.14003fb40
call fcn.14003f380
call fcn.140044520
call fcn.140042f70
call fcn.1400466a0
call fcn.1400462c0
lea rcx, [rbp - 0x29]
call fcn.14003f690
test al, al
je 0x140046c7f
mov eax, 1
movabs qword [0], rax
lea rcx, [rbp - 0x49]
mov dword [rbp - 0x49], 0x34233e24
mov dword [rbp - 0x45], 0x2b2c3224
mov dword [rbp - 0x41], 0x3872223b
mov dword [rbp - 0x3d], 0x1003a26
call fcn.140041e40
mov rcx, rax
call fcn.14003f690
test al, al
je 0x140046cbf
mov eax, 1
movabs qword [0], rax
lea rcx, [rbp - 0x39]
mov dword [rbp - 0x39], 0x34233e24
mov dword [rbp - 0x35], 0x2a2d3224
mov dword [rbp - 0x31], 0x3872293f
mov dword [rbp - 0x2d], 0x1003a26
call fcn.140041e40
mov rcx, rax
call fcn.14003f690
test al, al
je 0x140046cff
mov eax, 1
movabs qword [0], rax
lea rcx, [rbp - 0x29]
mov word [rbp - 0x19], 7
movdqu xmmword [rbp - 0x29], xmm6
mov byte [rbp - 0x17], 1
call fcn.1400404c0
mov rcx, rax
call fcn.14003f690
test al, al
je 0x140046d32
mov eax, 1
movabs qword [0], rax
lea rcx, [rbp - 0x29]
call fcn.14003f690
test al, al
je 0x140046d4e
mov eax, 1
movabs qword [0], rax
call fcn.140040a00
call fcn.1400407c0
call fcn.140043880
test al, al
je 0x140046d66
call fcn.14003fa70
call fcn.140044050
test al, al
je 0x140046d74
call fcn.14003fa70
call fcn.140043250
test eax, eax
je 0x140046d82
call fcn.14003fa70
call fcn.140045ba0
test al, al
je 0x140046d90
call fcn.14003fa70
call fcn.140042b90
test eax, eax
je 0x140046d9e
call fcn.14003fa70
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r8d, Ordinal_50
lea rdx, [rbp - 0x11]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x140046dda
mov rdx, qword [rbp + 7]
lea r9, [rbp + 0x1f]
mov rcx, qword [rbp - 0x11]
mov r8d, 2
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x140046ddf
call fcn.14003fa70
call fcn.140043550
test eax, eax
je 0x140046ded
call fcn.14003fa70
lea rcx, [rbp - 0x29]
mov qword [rbp - 0x29], 1
call fcn.140077220
jmp 0x140046c40