Function at 0x140101900
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x30
mov rdi, qword [0x1401ae350]
test rdi, rdi
jne 0x1401019e6
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax]
nop word [rax + rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1401019c7
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1401019c7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0x4c1c1682
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1401019c2
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1401019a0
cmp edx, 0x7c9860f4
je 0x140101b7f
test r8d, r8d
jne 0x140101980
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x1401019dd
cmp qword [rax + 0x30], 0
jne 0x140101950
xor edi, edi
mov qword [0x1401ae350], rdi
mov rax, qword gs:[0x58]
mov r14, qword [rax]
mov ecx, 0x89c
mov eax, dword [rcx + r14]
mov ebx, 0x8a0
add rbx, r14
test al, 1
jne 0x140101a35
or eax, 1
mov dword [rcx + r14], eax
mov dword [rbx + 0xa], 0x12d2795
mov dword [rbx], 0x2a8f6d26
mov dword [rbx + 4], 0xf723a5d
mov word [rbx + 8], 0x6d49
lea rcx, [0x14015f2d0]
call fcn.140106ffc
nop
cmp byte [rbx + 0xd], 0
je 0x140101a72
xor byte [rbx], 0x67
xor byte [rbx + 1], 9
xor byte [rbx + 2], 0xf9
xor byte [rbx + 3], 0x4b
xor byte [rbx + 4], 0x2d
xor byte [rbx + 5], 0x53
xor byte [rbx + 6], 0x41
xor byte [rbx + 7], 0x3d
xor byte [rbx + 8], 0x67
xor byte [rbx + 9], 9
xor byte [rbx + 0xa], 0xf9
xor byte [rbx + 0xb], 0x4b
xor byte [rbx + 0xc], 0x2d
mov byte [rbx + 0xd], 0
mov rcx, rbx
call rdi
mov rdi, qword [0x1401ae310]
test rdi, rdi
jne 0x140101b36
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140101b17
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140101b17
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0x4d1e56ac
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140101b12
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140101af0
cmp edx, 0xf6ede77e
je 0x140101b9b
test r8d, r8d
jne 0x140101ad0
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x140101b2d
cmp qword [rax + 0x30], 0
jne 0x140101aa0
xor edi, edi
mov qword [0x1401ae310], rdi
mov ecx, 0x8b0
mov eax, dword [rcx + r14]
mov edx, 0x8c8
test al, 1
jne 0x140101bb7
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [rdx + r14]
mov word [rbx + 0xb], 0x131
mov dword [rbx], 0x434c627e
mov dword [rbx + 4], 0x41630d6e
mov word [rbx + 8], 0x7d4f
mov byte [rbx + 0xa], 0x45
lea rcx, [0x14015f2b0]
call fcn.140106ffc
nop
jmp 0x140101bbb
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edi, dword [rcx + rax*4]
add rdi, r9
jmp 0x1401019df
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edi, dword [rcx + rax*4]
add rdi, r9
jmp 0x140101b2f
lea rbx, [rdx + r14]
cmp byte [rbx + 0xc], 0
je 0x140101bf4
xor byte [rbx], 0x2b
xor byte [rbx + 1], 0x11
xor byte [rbx + 2], 0x29
xor byte [rbx + 3], 0x31
xor byte [rbx + 4], 0xb
xor byte [rbx + 5], 0x63
xor byte [rbx + 6], 0x15
xor byte [rbx + 7], 0x6f
xor byte [rbx + 8], 0x2b
xor byte [rbx + 9], 0x11
xor byte [rbx + 0xa], 0x29
xor byte [rbx + 0xb], 0x31
mov byte [rbx + 0xc], 0
mov rcx, rbx
call rdi
mov rdi, qword [0x1401ae378]
test rdi, rdi
jne 0x140101cb2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140101c93
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140101c93
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0x5a20a9ba
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140101c8e
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140101c70
cmp edx, 0x24c5969c
je 0x140101cfb
test r8d, r8d
jne 0x140101c50
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x140101ca9
cmp qword [rax + 0x30], 0
jne 0x140101c20
xor edi, edi
mov qword [0x1401ae378], rdi
mov ecx, 0x8f0
mov eax, dword [rcx + r14]
mov edx, 0x8b8
test al, 1
jne 0x140101d14
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [rdx + r14]
mov word [rbx + 0xb], 0x11d
mov dword [rbx], 0x6db03996
mov dword [rbx + 4], 0x551d7413
mov word [rbx + 8], 0x27b1
mov byte [rbx + 0xa], 0xa5
lea rcx, [0x14015f290]
call fcn.140106ffc
nop
jmp 0x140101d18
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edi, dword [rcx + rax*4]
add rdi, r9
jmp 0x140101cab
lea rbx, [r14 + rdx]
cmp byte [rbx + 0xc], 0
je 0x140101d51
xor byte [rbx], 0xd5
xor byte [rbx + 1], 0x4b
xor byte [rbx + 2], 0xc9
xor byte [rbx + 3], 0x1d
xor byte [rbx + 4], 0x67
xor byte [rbx + 5], 0x47
xor byte [rbx + 6], 0x2f
xor byte [rbx + 7], 0x7b
xor byte [rbx + 8], 0xd5
xor byte [rbx + 9], 0x4b
xor byte [rbx + 0xa], 0xc9
xor byte [rbx + 0xb], 0x1d
mov byte [rbx + 0xc], 0
mov rcx, rbx
call rdi
mov rdi, qword [0x1401ae368]
test rdi, rdi
jne 0x140101e12
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140101df3
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140101df3
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
lea rax, [rdi + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0x4f22d700
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140101dee
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140101dd0
cmp edx, 0x6192db92
je 0x140101e58
test r8d, r8d
jne 0x140101db0
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x140101e09
cmp qword [rax + 0x30], 0
jne 0x140101d80
xor edi, edi
mov qword [0x1401ae368], rdi
mov ecx, 0x8d8
mov eax, dword [rcx + r14]
mov edx, 0x8e0
test al, 1
jne 0x140101e71
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [r14 + rdx]
mov dword [rbx + 0xa], 0x1bd7dc1
mov dword [rbx], 0x7fdf34d8
mov dword [rbx + 4], 0x6100c5d8
mov word [rbx + 8], 0x35bd
lea rcx, [0x14015f270]
call fcn.140106ffc
nop
jmp 0x140101e75
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edi, dword [rcx + rax*4]
add rdi, r9
jmp 0x140101e0b
lea rbx, [r14 + rdx]
cmp byte [rbx + 0xd], 0
je 0x140101eb2
xor byte [rbx], 0x93
xor byte [rbx + 1], 0x51
xor byte [rbx + 2], 0xad
xor byte [rbx + 3], 0x11
xor byte [rbx + 4], 0xbd
xor byte [rbx + 5], 0xa9
xor byte [rbx + 6], 0x33
xor byte [rbx + 7], 0x53
xor byte [rbx + 8], 0x93
xor byte [rbx + 9], 0x51
xor byte [rbx + 0xa], 0xad
xor byte [rbx + 0xb], 0x11
xor byte [rbx + 0xc], 0xbd
mov byte [rbx + 0xd], 0
mov rcx, rbx
call rdi
mov rax, qword [0x1401ae318]
test rax, rax
jne 0x140101f76
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140101f57
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140101f57
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
mov edx, 0x8eefda6
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140101f52
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140101f30
cmp edx, 0x9588aeb6
je 0x140102161
test r8d, r8d
jne 0x140101f10
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x140101f6d
cmp qword [rax + 0x30], 0
jne 0x140101ee0
xor eax, eax
mov qword [0x1401ae318], rax
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
lea r8, [0x1401017c0]
xor edx, edx
xor ecx, ecx
call rax
mov rbp, rax
mov r8, qword [0x1401ae370]
test r8, r8
jne 0x140102067
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rsi, qword [rcx]
mov r11, rsi
nop dword [rax]
nop word [rax + rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140102047
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140102047
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
mov edx, 0xcc9dba35
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140102042
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140102020
cmp edx, 0xaf06e954
je 0x14010217d
test r8d, r8d
jne 0x140102000
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x14010205d
cmp qword [rax + 0x30], 0
jne 0x140101fd0
xor r8d, r8d
mov qword [0x1401ae370], r8
mov edx, 0xffffffff
mov rcx, rbp
call r8
mov rax, qword [0x1401ae328]
test rax, rax
jne 0x140102136
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x140102117
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x140102117
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
mov edx, 0xac098a3e
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140102112
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1401020f0
cmp edx, 0xbc8379dd
je 0x14010219a
test r8d, r8d
jne 0x1401020d0
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x14010212d
cmp qword [rax + 0x30], 0
jne 0x1401020a0
xor eax, eax
mov qword [0x1401ae328], rax
mov edx, 0xffffffff
mov rcx, qword [0x1401ae358]
call rax
xor eax, eax
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
add rsp, 0x30
pop r14
ret
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x140101f6f
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r8d, dword [rcx + rdx*4]
add r8, r9
jmp 0x140102060
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x14010212f