Function at 0x140039190
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x50
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r11, qword [rax]
mov rdx, r11
mov r8, qword [rdx + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x140039222
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140039222
mov esi, dword [r9 + 0x20]
dec r10d
mov ebx, 0x811c9dc5
lea rax, [rsi + r10*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x14003921d
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x1400391fd
cmp ebx, 0x53b2070f
je 0x1400393c1
test r10d, r10d
jne 0x1400391e1
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r11
je 0x140039234
cmp qword [rax + 0x30], 0
jne 0x1400391bc
xor r9d, r9d
cmp byte [reloc.WLDAP32.dll_Ordinal_60], 0
movsd xmm0, qword [str.__QZ_]
movzx eax, word [0x140120ba8]
movsd qword [rsp + 0x20], xmm0
mov word [rsp + 0x28], ax
je 0x140039292
xor r8d, r8d
lea r10, [rsp + 0x20]
mov eax, 0x29e4129f
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, r8b
inc r8d
sub al, cl
add al, 0x33
xor byte [r10], al
inc r10
cmp r8d, 0xa
jl 0x140039262
lea rcx, [rsp + 0x20]
call r9
mov rsi, rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x1400393fe
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r11, qword [rax]
mov rdx, r11
mov r8, qword [rdx + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x140039328
mov ecx, dword [r9 + 0x18]
test ecx, ecx
je 0x140039328
mov r14d, dword [r9 + 0x20]
dec ecx
mov ebx, 0x811c9dc5
mov edi, ecx
lea rax, [r14 + rcx*4]
mov r10d, dword [rax + r8]
add r10, r8
mov al, byte [r10]
inc r10
test al, al
je 0x140039324
movsx eax, al
xor eax, ebx
imul ebx, eax, 0x1000193
mov al, byte [r10]
inc r10
test al, al
jne 0x140039303
cmp ebx, 0xf8f45725
je 0x1400393e0
test ecx, ecx
jne 0x1400392e5
mov rax, qword [rdx]
mov rdx, rax
cmp rax, r11
je 0x14003933a
cmp qword [rax + 0x30], 0
jne 0x1400392c1
xor r9d, r9d
cmp byte [0x140120b99], 0
movups xmm0, xmmword [str._dCRJ_sUZRLR_5_]
movzx eax, word [0x140120b98]
mov word [rsp + 0x48], ax
movups xmmword [rsp + 0x30], xmm0
movsd xmm0, qword [0x140120b90]
movsd qword [rsp + 0x40], xmm0
je 0x1400393a4
xor r8d, r8d
lea r10, [rsp + 0x30]
mov eax, 0x29e4129f
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
mov al, r8b
inc r8d
sub al, cl
add al, 0x33
xor byte [r10], al
inc r10
cmp r8d, 0x1a
jl 0x140039374
lea rdx, [rsp + 0x30]
mov rcx, rsi
call r9
test rax, rax
je 0x1400393fe
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov eax, 1
jmp 0x140039400
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r10*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov r9d, dword [rcx + rdx*4]
add r9, r8
jmp 0x140039237
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdi*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov r9d, dword [rcx + rdx*4]
add r9, r8
jmp 0x14003933d
xor eax, eax
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
add rsp, 0x50
pop r14
ret