Function at 0x1400012a0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1a0
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140008040]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov qword [rbp + 0x60], rcx
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_161]
movabs rax, 0x724d78d660440138
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0xf44a010009e9f5aa
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs r14, 0x166316b90d28734d
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs r15, 0xf44a010009e999c6
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movdqa xmm0, xmmword [rbp + 0x40]
xorps xmm0, xmmword [rbp + 0x100]
movdqa xmmword [rbp + 0x40], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400013d6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400013d6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x20c30d1c
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400013d1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400013b0
cmp r8d, 0x47a7460e
je 0x1400013db
test r9d, r9d
jne 0x140001390
mov rax, qword [rax]
jmp 0x140001360
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
lea rcx, [rbp + 0x40]
call rax
movabs rax, 0x385125d5614d1b3e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0xf44a01000985f5a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x110]
movdqa xmmword [rbp + 0x50], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400014e6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400014e6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0x25c55392
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400014e1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x1400014c0
cmp r8d, 0x9f6c13a4
je 0x1400014eb
test r9d, r9d
jne 0x1400014a0
mov rax, qword [rax]
jmp 0x140001470
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
lea rcx, [rbp + 0x50]
call rax
mov r8, qword [0x1400087b8]
test r8, r8
jne 0x140001588
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r9, r10
nop dword [rax + rax]
mov rcx, qword [r9 + 0x60]
movzx eax, word [r9 + 0x58]
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0xeaaf9405
cmp rcx, r8
je 0x14000156c
nop word [rax + rax]
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x140001550
cmp edx, 0x6961c14e
je 0x1400015e3
mov rax, qword [r9]
mov r9, rax
cmp rax, r10
je 0x14000157e
cmp qword [rax + 0x30], 0
jne 0x140001530
xor r8d, r8d
mov qword [0x1400087b8], r8
movsxd rax, dword [r8 + 0x3c]
mov r10d, dword [rax + r8 + 0x88]
xor r9d, r9d
mov r11d, dword [r10 + r8 + 0x20]
nop dword [rax]
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov ecx, 0xe9af9272
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x1400015de
nop word [rax + rax]
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x1400015c0
cmp ecx, 0x9e0ded17
je 0x1400015e9
inc r9d
jmp 0x1400015a0
mov r8, qword [r9 + 0x30]
jmp 0x140001581
mov eax, dword [r10 + r8 + 0x24]
add rax, r8
movzx edx, word [rax + r9*2]
mov ecx, dword [r10 + r8 + 0x1c]
add rcx, r8
mov ebx, dword [rcx + rdx*4]
add rbx, r8
movabs r12, 0x790778d05a74490e
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs r13, 0x992573684ab5eab1
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x5abe82127f57c3a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x79df924eecf8a6e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
movabs r15, 0x6e88f2670b3290c7
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
movabs r14, 0x79df924e8980c3c8
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x138], rax
vmovdqu ymm0, ymmword [rbp + 0x120]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
vzeroupper
call fcn.1400027b0
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0x20]
mov rdx, rax
xor ecx, ecx
call rbx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140001764
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140001764
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x75b72a9b
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14000175f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x140001740
cmp edx, 0xf26db8be
je 0x140001769
test r9d, r9d
jne 0x140001720
mov rax, qword [rax]
jmp 0x1400016f0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov ecx, 0x7d0
call rax
mov r10, qword [0x1400087b0]
test r10, r10
jne 0x140001847
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov rbx, rdi
nop
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x140001827
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x140001827
mov r10d, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
lea rcx, [r10 + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov ecx, 0x78b4f0bd
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x140001822
nop dword [rax]
movsx eax, al
xor eax, ecx
imul ecx, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x140001800
cmp ecx, 0xa516e587
je 0x140001bcb
test r8d, r8d
jne 0x1400017e0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rdi
je 0x14000183d
cmp qword [rax + 0x30], 0
jne 0x1400017b0
xor r10d, r10d
mov qword [0x1400087b0], r10
mov qword [rbp], r12
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], r13
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x5abe82127f57c3a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x79df924eecf8a6e6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rbx, 0x166316b90d28734d
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rdi, 0xf44a010009e999c6
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqa ymmword [rbp + 0x20], ymm1
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [rbp + 0x20]
xor edx, edx
xor ecx, ecx
vzeroupper
call r10
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x770c7a9968461c29
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x983a21216e87f0a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xbf89d476e41f1a2
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
movabs rax, 0x16bdfc27e8f2e3a6
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0x27c9a205306e5226
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x9eec86146753487f
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0x4eba827d591d7251
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
movabs rax, 0x9eec861449362f1a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
vmovdqa xmm2, xmmword [rbp + 0xa0]
vxorps xmm2, xmm2, xmmword [rbp + 0xe0]
vmovdqa xmmword [rbp + 0xa0], xmm2
lea rdx, [rbp + 0x80]
vzeroupper
call fcn.140002940
lea rdx, [0x140002b10]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movabs rax, 0x360478d07e471f2e
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rax, 0x972f72203cc9f7af
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0x6e88f2677856fea8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x80]
vmovdqa ymmword [rbp + 0x80], ymm1
lea rdx, [rbp + 0x80]
vzeroupper
call fcn.140002940
lea rdx, [0x140002b10]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140001bc6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140001bc6
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r10 + r9*4]
mov ecx, dword [rdx + r11]
add rcx, r10
mov r8d, 0xe7ad50b5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140001bc1
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140001ba0
cmp r8d, 0x3716b8f8
je 0x140001bea
test r9d, r9d
jne 0x140001b80
mov rax, qword [rax]
jmp 0x140001b50
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov r10d, dword [rcx + r8*4]
add r10, r9
jmp 0x140001840
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov ecx, 0x1388
call rax
call qword [sym.imp.SecureEngineSDK64.dll_Ordinal_561]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3