Function at 0x1400b5860
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov eax, dword [0x1406dfde0]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete al
cmp dword [0x1406dfde4], 0xa
setl cl
or cl, al
mov byte [rsp + 7], cl
mov eax, dword [0x1406f0b34]
mov qword [rsp + 0x28], rax
mov eax, dword [0x1406f0b30]
mov dword [rsp + 0x10], eax
mov eax, dword [0x1406f0b90]
mov qword [rsp + 0x20], rax
mov eax, dword [0x1406f0b94]
mov dword [rsp + 0xc], eax
mov eax, dword [0x1406f0b28]
mov qword [rsp + 0x18], rax
mov eax, dword [0x1406f0b2c]
mov dword [rsp + 8], eax
je 0x1400b5b62
mov rbp, qword gs:[0x60]
mov rax, qword [rsp + 0x28]
lea r12d, [rax - 1]
imul r12d, eax
and r12d, 1
mov rax, qword [rsp + 0x20]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
mov dword [rsp + 0x14], ecx
sete dl
cmp dword [rsp + 0xc], 0xa
setl cl
mov rax, qword [rsp + 0x18]
lea r13d, [rax - 1]
imul r13d, eax
and r13d, 1
sete bl
cmp dword [rsp + 8], 0xa
setl al
cmp dword [rsp + 0x10], 0xa
jl 0x1400b593a
test r12d, r12d
jne 0x1400b5a20
or cl, dl
or al, bl
mov rdx, qword [rbp + 0x18]
mov rdx, qword [rdx + 0x10]
mov rsi, qword [rdx + 0x30]
movsxd rbp, dword [rsi + 0x3c]
mov ebp, dword [rbp + rsi + 0x88]
test rbp, rbp
je 0x1400b59d0
test cl, cl
je 0x1400b5a10
mov edi, dword [rsi + rbp + 0x18]
lea r9, [rsi + 1]
mov r10, rdi
jmp 0x1400b5986
mov r14d, 0x811c9dc5
mov rdi, r10
cmp r14d, 0x9bc5a608
je 0x1400b5a22
sub r10, 1
jb 0x1400b59d0
mov r8d, edi
add r8d, 0xffffffff
mov ebx, dword [rsi + rbp + 0x20]
add rbx, rsi
mov r11d, dword [rbx + r8*4]
mov r15b, byte [rsi + r11]
test r15b, r15b
je 0x1400b5970
add r11, r9
mov r14d, 0x811c9dc5
movsx edi, r15b
xor edi, r14d
imul r14d, edi, 0x1000193
movzx r15d, byte [r11]
add r11, 1
test r15b, r15b
jne 0x1400b59b0
jmp 0x1400b5976
test cl, cl
jne 0x1400b59f0
jmp 0x1400b5a00
mov rdx, qword [rdx]
nop word cs:[rax + rax]
nop dword [rax]
test al, al
je 0x1400b59f0
mov rdx, qword [rdx]
test cl, cl
jne 0x1400b5946
nop
test al, al
je 0x1400b5a00
jmp 0x1400b59e0
jmp 0x1400b5a10
jmp 0x1400b5a20
cmp byte [rsp + 7], 0
mov ecx, dword [rsp + 0x14]
jne 0x1400b5b97
mov rax, qword gs:[0x60]
test ecx, ecx
sete cl
cmp dword [rsp + 0xc], 0xa
setl r8b
test r13d, r13d
sete dl
cmp dword [rsp + 8], 0xa
setl r10b
cmp dword [rsp + 0x10], 0xa
jl 0x1400b5a67
test r12d, r12d
jne 0x1400b5b60
or r8b, cl
or r10b, dl
mov rax, qword [rax + 0x18]
mov r9, qword [rax + 0x10]
mov rsi, qword [r9 + 0x30]
movsxd rax, dword [rsi + 0x3c]
mov edi, dword [rax + rsi + 0x88]
test rdi, rdi
je 0x1400b5b00
test r8b, r8b
je 0x1400b5b50
mov eax, dword [rsi + rdi + 0x18]
lea rbp, [rsi + 1]
mov rbx, rax
jmp 0x1400b5ab4
mov edx, 0x811c9dc5
mov rax, rbx
cmp edx, 0x9bc5a608
je 0x1400b58d7
sub rbx, 1
jb 0x1400b5b00
add eax, 0xffffffff
mov ecx, dword [rsi + rdi + 0x20]
add rcx, rsi
mov ecx, dword [rcx + rax*4]
mov al, byte [rsi + rcx]
test al, al
je 0x1400b5aa0
add rcx, rbp
mov edx, 0x811c9dc5
nop word cs:[rax + rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
add rcx, 1
test al, al
jne 0x1400b5ae0
jmp 0x1400b5aa5
test r8b, r8b
jne 0x1400b5b20
jmp 0x1400b5b40
mov r9, qword [r9]
nop word cs:[rax + rax]
nop dword [rax]
test r10b, r10b
je 0x1400b5b20
mov r9, qword [r9]
test r8b, r8b
jne 0x1400b5a75
nop word cs:[rax + rax]
nop dword [rax + rax]
test r10b, r10b
je 0x1400b5b40
jmp 0x1400b5b10
jmp 0x1400b5b50
jmp 0x1400b5b60
mov rax, qword [rsp + 0x28]
lea r12d, [rax - 1]
imul r12d, eax
and r12d, 1
mov rax, qword [rsp + 0x20]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
mov rax, qword [rsp + 0x18]
lea r13d, [rax - 1]
imul r13d, eax
and r13d, 1
jmp 0x1400b5a31
mov eax, dword [rsi + rbp + 0x1c]
mov ecx, dword [rsi + rbp + 0x24]
add rax, rsi
add rcx, rsi
movzx ecx, word [rcx + r8*2]
mov eax, dword [rax + rcx*4]
add rax, rsi
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp rax