Function at 0x140006a20
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1402f9980]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x69]
call fcn.1400022b0
xor r13d, r13d
mov r9, rax
cmp byte [rax + 0x3e], r13b
je 0x140006bfd
cmp dword [0x1402f99d0], 2
mov ecx, r13d
jl 0x140006bc4
movdqa xmm0, xmmword [0x140013b80]
mov rdx, rax
movdqa xmm5, xmmword [0x140013170]
movdqa xmm4, xmmword [0x140013c30]
movdqa xmm6, xmmword [str.1111]
movdqa xmmword [rsp + 0x20], xmm0
mov r8d, dword [rsp + 0x20]
nop word [rax + rax]
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x140013b00]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 8], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140013b00]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
cmp ecx, 0x38
jl 0x140006ac0
cmp ecx, 0x3f
jge 0x140006bfd
movsxd r8, ecx
add r8, r9
nop word [rax + rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, cl
inc ecx
sub al, dl
add al, 0x33
xor byte [r8 - 1], al
cmp ecx, 0x3f
jl 0x140006bd0
mov rdx, r9
mov rcx, rbx
call fcn.140001a90
mov rcx, qword [0x1402fa180]
test rcx, rcx
jne 0x140006d7e
mov rax, qword gs:[0x60]
mov r14d, r13d
mov ebx, 0x9bc5a608
mov rcx, qword [rax + 0x18]
mov r12, qword [rcx + 0x10]
mov rdi, r12
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rdi + 0x58]
movd eax, xmm0
sub ax, 8
test r14d, r14d
je 0x140006c8d
psrldq xmm0, 8
mov edx, 0x811c9dc5
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x140006c84
nop
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x140006c70
cmp edx, r14d
jne 0x140006d65
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r15, rcx
mov r11d, ecx
shr r15, 0x20
add r11, r9
cmp r11, r9
je 0x140006d65
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x140006d65
mov esi, dword [r11 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rsi + r8*4]
mov eax, dword [rax + r9]
add rax, r9
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x140006d07
nop dword [rax]
movsx ecx, cl
lea rax, [rax + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax - 1]
test cl, cl
jne 0x140006cf0
cmp edx, ebx
je 0x140006d12
test r8d, r8d
jne 0x140006cd0
jmp 0x140006d65
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov ecx, dword [rcx + rdx*4]
add rcx, r9
cmp rcx, r11
jbe 0x140006d77
lea rax, [r15 + r11]
cmp rcx, rax
jae 0x140006d77
cmp byte [rcx], 0x2e
mov r14d, 0x811c9dc5
mov dword [rbp - 0x61], r14d
mov dword [rbp - 0x5d], r14d
je 0x140006d5a
nop dword [rax]
cmp byte [rcx + 1], 0x2e
lea rcx, [rcx + 1]
jne 0x140006d50
mov rbx, qword [rbp - 0x61]
mov rdi, r12
shr rbx, 0x20
mov rax, qword [rdi]
mov rdi, rax
cmp rax, r12
jne 0x140006c40
mov rcx, r13
mov qword [0x1402fa180], rcx
call rcx
mov rcx, rax
call fcn.1400057f0
call fcn.140007b50
call fcn.1400052d0
call fcn.140002850
call fcn.1400037c0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x140006e60
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
mov qword [rbp - 0x41], rcx
mov ecx, 8
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [rbp - 0x41]
mov edi, r13d
movzx eax, word [rcx + 0x14]
lea rbx, [rcx + 0x18]
add rbx, rax
cmp r13w, word [rcx + 6]
jae 0x140006e2e
nop dword [rax]
mov edx, 0x28
lea r9, [rbp + 7]
mov rcx, rbx
lea r8d, [rdx + 0x18]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov r8d, dword [rbp + 7]
lea r9, [rbp + 7]
mov edx, 0x28
mov byte [rbx], al
mov rcx, rbx
mov byte [rbx + 1], r13b
mov qword [rbx + 8], r13
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rax, qword [rbp - 0x41]
inc edi
add rbx, 0x28
movzx ecx, word [rax + 6]
cmp edi, ecx
jb 0x140006de0
mov edx, 8
lea r9, [rbp + 0xb]
lea rcx, [rbp - 0x41]
lea r8d, [rdx + 0x38]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov r8d, dword [rbp + 0xb]
lea r9, [rbp + 0xb]
mov edx, 8
mov qword [rbp - 0x41], r13
lea rcx, [rbp - 0x41]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
call fcn.140009850
call fcn.140006420
call fcn.140004af0
call fcn.140004ee0
mov rcx, r13
mov dword [rsp + 0x30], 0x48524852
mov dword [rsp + 0x34], 0x4f594547
mov dword [rsp + 0x38], 0x4a564802
mov word [rsp + 0x3c], 0x100
nop word [rax + rax]
lea eax, [rcx + 0x24]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0xc
jb 0x140006ea0
lea rcx, [rsp + 0x30]
call fcn.140004710
test al, al
je 0x140006ecd
mov eax, 1
movabs qword [0], rax
mov dword [rbp - 0x79], 0x46514852
mov rcx, r13
mov dword [rbp - 0x75], 0x595e4c5a
mov dword [rbp - 0x71], 0x4a00544d
mov dword [rbp - 0x6d], 0x1005448
nop dword [rax]
lea eax, [rcx + 0x24]
xor byte [rbp + rcx - 0x79], al
inc rcx
cmp rcx, 0xe
jb 0x140006ef0
lea rcx, [rbp - 0x79]
call fcn.140004710
test al, al
je 0x140006f1c
mov eax, 1
movabs qword [0], rax
mov dword [rsp + 0x20], 0x46514852
mov rcx, r13
mov dword [rsp + 0x24], 0x585f4c5a
mov dword [rsp + 0x28], 0x4a005f49
mov dword [rsp + 0x2c], 0x1005448
nop
lea eax, [rcx + 0x24]
xor byte [rsp + rcx + 0x20], al
inc rcx
cmp rcx, 0xe
jb 0x140006f40
lea rcx, [rsp + 0x20]
call fcn.140004710
test al, al
je 0x140006f6d
mov eax, 1
movabs qword [0], rax
movdqa xmm0, xmmword [0x140013c10]
mov rcx, r13
movdqu xmmword [rbp - 0x59], xmm0
mov word [rbp - 0x49], 0x51
mov byte [rbp - 0x47], 1
nop word [rax + rax]
lea eax, [rcx + 0x24]
xor byte [rbp + rcx - 0x59], al
inc rcx
cmp rcx, 0x11
jb 0x140006f90
lea rcx, [rbp - 0x59]
call fcn.140004710
test al, al
je 0x140006fbc
mov eax, 1
movabs qword [0], rax
mov dword [rsp + 0x40], 0x44474852
mov rcx, r13
mov dword [rsp + 0x44], 0x5b46415c
mov dword [rsp + 0x48], 0x4a564802
mov word [rbp - 0x7d], 0x100
nop dword [rax]
lea eax, [rcx + 0x24]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xc
jb 0x140006fe0
lea rcx, [rsp + 0x40]
call fcn.140004710
test al, al
je 0x14000700d
mov eax, 1
movabs qword [0], rax
call fcn.1400080d0
call fcn.1400095e0
call fcn.140002b30
test al, al
je 0x140007025
call fcn.1400027a0
call fcn.140003300
test al, al
je 0x140007033
call fcn.1400027a0
call fcn.140005d00
test eax, eax
je 0x140007041
call fcn.1400027a0
call fcn.1400043c0
test al, al
je 0x14000704f
call fcn.1400027a0
call fcn.140007770
test eax, eax
je 0x14000705d
call fcn.1400027a0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r8d, 0x30
lea rdx, [rbp - 0x39]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x140007099
mov rdx, qword [rbp - 0x21]
lea r9, [rbp + 0xf]
mov rcx, qword [rbp - 0x39]
mov r8d, 2
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
jne 0x14000709e
call fcn.1400027a0
call fcn.1400066f0
test eax, eax
je 0x1400070ac
call fcn.1400027a0
lea rcx, [rbp - 0x61]
mov qword [rbp - 0x61], 1
call fcn.140001f40
jmp 0x140006d92