Function at 0x140024520
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using murmur2
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rdi
push r12
sub rsp, 0x98
mov rax, qword [0x140188020]
xor rax, rsp
mov qword [rsp + 0x80], rax
mov cl, 0x72
mov dword [rsp + 0x70], 0x9c4000
movsx ebx, cl
xor eax, eax
mov byte [rsp + 0x30], cl
mov r12, rdx
mov ecx, ebx
mov dword [rsp + 0x60], 0x1061701
mov dword [rsp + 0x64], 0x1d19111d
mov word [rsp + 0x68], 0x602
mov byte [rsp + 0x6a], al
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140024588
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x140024597
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rsp + 0x34]
mov edi, 8
mov r9d, edi
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
xor ebp, ebp
mov edx, ebp
nop dword [rax]
mov eax, r10d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x1400245c0
mov r9d, 0xa
lea r8, [rsp + 0x34]
lea rdx, [rsp + 0x60]
call fcn.14011c9b0
movsx ebx, byte [rsp + 0x30]
mov ecx, ebx
mov qword [rsp + 0x58], rax
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140024630
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x14002463f
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rsp + 0x34]
mov edx, ebp
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r9d, ecx, 0x5bd1e995
nop word [rax + rax]
mov eax, r9d
lea r8, [r8 + 4]
xor eax, edx
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub rdi, 1
jne 0x140024660
mov r9d, dword [0x140196874]
lea r8, [rsp + 0x34]
mov rdx, qword [rsp + 0x58]
call fcn.14011cb00
mov rbx, rax
test rax, rax
jne 0x1400246bc
mov rbx, rbp
jmp 0x1400246e2
movzx eax, byte [rsp + 0x30]
xor byte [rbx], al
xor byte [rbx + 1], al
xor byte [rbx + 2], al
xor byte [rbx + 3], al
xor byte [rbx + 4], al
xor byte [rbx + 5], al
xor byte [rbx + 6], al
xor byte [rbx + 7], al
xor byte [rbx + 8], al
xor byte [rbx + 9], al
mov byte [rbx + 0xa], bpl
mov rax, qword gs:[0x60]
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], r14
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x90], r15
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], rbp
je 0x1400247cc
mov r13d, 0x5a4d
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x140024840
cmp word [r11], r13w
jne 0x1400247cc
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x1400247cc
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x1400247cc
mov r14d, dword [r11 + rcx + 0x1c]
lea rax, [r11 + rcx]
mov r10d, dword [rax + 0x20]
add r14, r11
mov r15d, dword [rax + 0x24]
add r10, r11
mov esi, dword [rax + 0x18]
add r15, r11
mov r9d, ebp
test esi, esi
je 0x140024840
nop dword [rax]
mov eax, dword [r10]
xor dl, dl
add rax, r11
cmp byte [rax], dl
je 0x140024830
mov r8, rbx
sub r8, rax
movzx ecx, byte [rax + r8]
test cl, cl
je 0x14002482c
cmp byte [rax], cl
jne 0x140024830
inc rax
mov dl, 1
cmp byte [rax], bpl
jne 0x1400247a6
movsxd rax, r9d
movzx ecx, word [r15 + rax*2]
mov ebp, dword [r14 + rcx*4]
add rbp, r11
lea r9, [rsp + 0x70]
mov qword [rsp + 0x20], 4
mov edx, 0xffff
mov r8d, 0x1002
mov rcx, r12
call rbp
mov r15, qword [rsp + 0x90]
test eax, eax
mov r14, qword [rsp + 0xd8]
mov r13, qword [rsp + 0xd0]
sete al
mov rsi, qword [rsp + 0xc0]
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.14012b8f0
add rsp, 0x98
pop r12
pop rdi
pop rbp
pop rbx
ret
test dl, dl
jne 0x1400247bd
inc r9d
add r10, 4
cmp r9d, esi
jb 0x140024790
cmp qword [rdi + 0x60], rbp
jne 0x140024730
jmp 0x1400247cc