Function at 0x140124af0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using murmur2
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
push rbp
push r13
lea rbp, [r11 - 0x5f]
sub rsp, 0xc8
mov rax, qword [0x140188020]
xor rax, rsp
mov qword [rbp + 0x27], rax
xor r13d, r13d
mov qword [rbp + 7], rcx
mov qword [rcx + 0xa8], r13
mov qword [rcx + 0xb8], rdx
mov byte [rcx + 0xb0], r13b
mov qword [rcx + 0x9c], r13
mov qword [rcx + 0xc4], r13
mov dword [rcx + 0xc0], r8d
test rdx, rdx
je 0x1401250bb
test r8d, r8d
je 0x1401250bb
mov qword [r11 + 0x10], rbx
xor eax, eax
mov dword [rcx + 0x70], 0x80000000
mov dword [rcx + 0x98], r8d
mov byte [rcx + 0x94], 1
mov cl, 0x67
mov qword [r11 + 0x18], rsi
movsx ebx, cl
mov byte [rbp - 0x49], cl
mov ecx, ebx
mov qword [r11 + 0x20], rdi
mov qword [r11 - 0x18], r12
mov dword [rbp - 0x19], 0x2b130220
mov dword [rbp - 0x15], 0xb060408
mov dword [rbp - 0x11], 0x20a0e33
mov byte [rbp - 0xd], al
call fcn.140013f00
add ebx, eax
cmp ebx, 0xfffffff0
jg 0x140124bb1
mov edx, 0x84
call fcn.140128630
cmp ebx, 0xffffffb7
jg 0x140124bc0
mov edx, 0x9d
call fcn.140128630
imul eax, ebx, 0x5bd1e995
lea r8, [rbp - 0x45]
mov r12d, 8
mov edx, r13d
mov r9d, r12d
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
nop dword [rax + rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140124bf0
mov ebx, 0xc
lea r8, [rbp - 0x45]
mov r9d, ebx
lea rdx, [rbp - 0x19]
call fcn.14011c9b0
movsx edi, byte [rbp - 0x49]
mov ecx, edi
mov qword [rbp - 0x21], rax
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x140124c5c
lea edx, [rbx + 0x78]
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x140124c6b
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbp - 0x45]
mov edx, r13d
mov r9, r12
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop dword [rax]
mov eax, edx
lea r8, [r8 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r8 - 4], eax
sub r9, 1
jne 0x140124c90
mov r9d, dword [0x140196874]
lea r8, [rbp - 0x45]
mov rdx, qword [rbp - 0x21]
call fcn.14011cb00
mov rsi, rax
test rax, rax
jne 0x140124cea
mov rsi, r13
jmp 0x140124d00
movzx ecx, byte [rbp - 0x49]
nop
xor byte [rax], cl
lea rax, [rax + 1]
sub rbx, 1
jne 0x140124cf0
mov byte [rsi + 0xc], r13b
mov rax, qword gs:[0x60]
mov qword [rsp + 0xb8], r14
mov qword [rsp + 0xb0], r15
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbx, qword [rax]
mov eax, 0x5a4d
cmp qword [rbx + 0x60], r13
je 0x140124df9
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rbx + 0x30]
mov rbx, qword [rbx]
test r11, r11
je 0x140124def
cmp word [r11], ax
jne 0x140124df9
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140124df9
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140124df9
mov r14d, dword [r11 + rcx + 0x1c]
lea rax, [r11 + rcx]
mov r10d, dword [rax + 0x20]
add r14, r11
mov r15d, dword [rax + 0x24]
add r10, r11
mov edi, dword [rax + 0x18]
add r15, r11
mov r9d, r13d
test edi, edi
je 0x140124dea
mov ecx, dword [r10]
xor dl, dl
add rcx, r11
cmp byte [rcx], dl
je 0x140124dde
mov r8, rsi
sub r8, rcx
movzx eax, byte [rcx + r8]
test al, al
je 0x140124dda
cmp byte [rcx], al
jne 0x140124dde
inc rcx
mov dl, 1
cmp byte [rcx], r13b
jne 0x140124db2
movsxd rax, r9d
movzx ecx, word [r15 + rax*2]
mov eax, dword [r14 + rcx*4]
add rax, r11
jmp 0x140124dfc
test dl, dl
jne 0x140124dc9
inc r9d
add r10, 4
cmp r9d, edi
jb 0x140124da0
mov eax, 0x5a4d
cmp qword [rbx + 0x60], r13
jne 0x140124d40
mov rax, r13
lea rcx, [rbp + 0x17]
call rax
lea rcx, [rbp - 0x49]
call fcn.140127ad0
mov rbx, rax
movsx edi, byte [rax]
mov ecx, edi
call fcn.140013f00
add edi, eax
cmp edi, 0xfffffff0
jg 0x140124e29
mov edx, 0x84
call fcn.140128630
cmp edi, 0xffffffb7
jg 0x140124e38
mov edx, 0x9d
call fcn.140128630
imul eax, edi, 0x5bd1e995
lea r8, [rbx + 4]
mov edx, r13d
mov r9, r8
mov ecx, eax
shr ecx, 0x18
xor ecx, eax
imul r10d, ecx, 0x5bd1e995
nop word [rax + rax]
mov eax, edx
lea r9, [r9 + 4]
xor eax, r10d
add edx, 0x5bd1e995
imul ecx, eax, 0x286a90b9
xor ecx, 0xaa2a7357
mov eax, ecx
shr eax, 0xd
xor eax, ecx
imul ecx, eax, 0x5bd1e995
mov eax, ecx
shr eax, 0xf
xor eax, ecx
mov dword [r9 - 4], eax
sub r12, 1
jne 0x140124e60
mov r9d, dword [0x140196874]
mov rdx, qword [rbx + 0x28]
call fcn.14011cb00
mov rsi, rax
test rax, rax
jne 0x140124eb6
mov rsi, r13
jmp 0x140124f13
movsx eax, byte [rbx]
mov r8, r13
movd xmm1, eax
lea rax, [rsi + 0x13]
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
pshufd xmm1, xmm1, 0
cmp rsi, rbx
ja 0x140124edb
cmp rax, rbx
jae 0x140124eed
movdqu xmm0, xmmword [rsi]
mov r8d, 0x10
pxor xmm0, xmm1
movdqu xmmword [rsi], xmm0
mov edx, 0x14
lea rcx, [r8 + rsi]
sub rdx, r8
nop dword [rax]
movzx eax, byte [rbx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x140124f00
mov byte [rsi + 0x14], r13b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
cmp qword [rdi + 0x60], r13
je 0x140124fee
mov r12d, 0x5a4d
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
mov rdi, qword [rdi]
test r11, r11
je 0x1401250ac
cmp word [r11], r12w
jne 0x140124fee
movsxd rax, dword [r11 + 0x3c]
cmp dword [rax + r11], 0x4550
jne 0x140124fee
mov ecx, dword [rax + r11 + 0x88]
test ecx, ecx
je 0x140124fee
mov r14d, dword [r11 + rcx + 0x1c]
lea rax, [r11 + rcx]
mov r9d, dword [rax + 0x20]
add r14, r11
mov r15d, dword [rax + 0x24]
add r9, r11
mov ebx, dword [rax + 0x18]
add r15, r11
mov r10d, r13d
test ebx, ebx
je 0x1401250ac
mov eax, dword [r9]
xor dl, dl
add rax, r11
cmp byte [rax], dl
je 0x14012509c
mov r8, rsi
sub r8, rax
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
test cl, cl
je 0x140125094
cmp byte [rax], cl
jne 0x14012509c
inc rax
mov dl, 1
cmp byte [rax], r13b
jne 0x140124fc0
movsxd rax, r10d
movzx ecx, word [r15 + rax*2]
mov r13d, dword [r14 + rcx*4]
add r13, r11
lea rdx, [rbp + 0xf]
lea rcx, [rbp + 0x17]
call r13
mov rcx, qword [rbp + 0xf]
lea r8, [rbp - 0x55]
lea rdx, [rbp - 0x59]
call fcn.140121060
mov r8, qword [rbp + 7]
movabs rcx, 0xfe624e212ac18000
add rcx, qword [rbp + 0xf]
movabs rax, 0xd6bf94d5e57a42bd
mov r15, qword [rsp + 0xb0]
mov r14, qword [rsp + 0xb8]
mov r12, qword [rsp + 0xc0]
mov rdi, qword [rsp + 0xf8]
mov rsi, qword [rsp + 0xf0]
mov rbx, qword [rsp + 0xe8]
imul rcx
add rdx, rcx
movzx ecx, word [rbp - 0x59]
sar rdx, 0x17
mov rax, rdx
shl ecx, 0x10
shr rax, 0x3f
add rdx, rax
movzx eax, word [rbp - 0x55]
or ecx, eax
mov qword [r8 + 0x78], rdx
mov dword [r8 + 0x90], ecx
xor eax, eax
mov qword [r8 + 0x80], rdx
mov qword [r8 + 0x88], rdx
jmp 0x1401250c0
test dl, dl
jne 0x140124fdf
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x140124fa0
cmp qword [rdi + 0x60], r13
jne 0x140124f40
jmp 0x140124fee
mov eax, 0x10000
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.14012b8f0
add rsp, 0xc8
pop r13
pop rbp
ret