Function at 0x1401893b4
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x78]
sub rsp, 0x150
movdqa xmm0, xmmword [0x1404d04c0]
xor eax, eax
xor edi, edi
mov dword [rsp + 0x30], 0x66667064
movdqu xmmword [rsp + 0x20], xmm0
mov word [rsp + 0x34], 0x2f67
mov ecx, edi
lea edx, [rax + 0x16]
mov byte [rsp + 0x36], al
movsxd rax, ecx
xor byte [rsp + rax + 0x20], cl
inc ecx
cmp ecx, edx
jb 0x140189401
lea rcx, [rsp + 0x20]
mov byte [rsp + 0x36], dil
call fcn.14016a8e4
movss xmm1, dword [0x1404cebcc]
xorps xmm0, xmm0
call fcn.140151d50
call fcn.140141298
cmp dword [rax + 0xc], edi
jne 0x14018947a
xor eax, eax
mov dword [rsp + 0x20], 0x62716864
mov dword [rsp + 0x24], 0x63636966
mov ecx, edi
mov byte [rsp + 0x28], al
lea edx, [rax + 8]
movsxd rax, ecx
xor byte [rsp + rax + 0x20], cl
inc ecx
cmp ecx, edx
jb 0x140189452
mov byte [rsp + 0x28], dil
lea rdx, [rsp + 0x20]
lea rcx, [0x1404f95a8]
call fcn.14016a960
jmp 0x140189860
call fcn.140141298
mov ecx, 2
cmp dword [rax + 0xc], ecx
jne 0x1401894cc
xor eax, eax
mov dword [rsp + 0x20], 0x23766e6e
mov dword [rsp + 0x24], 0x61686a67
mov ecx, edi
mov dword [rsp + 0x28], 0x797f6e61
mov word [rsp + 0x2c], 0x6969
lea edx, [rax + 0xe]
mov byte [rsp + 0x2e], al
movsxd rax, ecx
xor byte [rsp + rax + 0x20], cl
inc ecx
cmp ecx, edx
jb 0x1401894b3
mov byte [rsp + 0x2e], dil
lea rdx, [rsp + 0x20]
jmp 0x140189469
call fcn.140141298
cmp dword [rax + 0xc], 1
jne 0x140189860
movdqa xmm0, xmmword [0x1404cf210]
xor eax, eax
movdqa xmm1, xmmword [0x1404d0040]
mov ecx, edi
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x40], 0x464e4341
lea r15d, [rax + 0x24]
mov byte [rsp + 0x44], al
movdqu xmmword [rsp + 0x30], xmm1
movsxd rax, ecx
xor byte [rsp + rax + 0x20], cl
inc ecx
cmp ecx, r15d
jb 0x14018950b
lea rdx, [rsp + 0x20]
mov byte [rsp + 0x44], dil
lea rcx, [0x140548d88]
call fcn.14016a960
xor ecx, ecx
call fcn.140146f68
xor ecx, ecx
test al, al
je 0x14018983e
mov edx, 0x7f89
call qword [sym.imp.user32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.user32.dll_SetCursor]
movups xmm0, xmmword [0x1404f9598]
movups xmmword [0x140548d88], xmm0
call fcn.140141298
call fcn.14019d858
test al, al
je 0x140189860
call fcn.140202890
call fcn.140202570
mov ebx, eax
call fcn.140141298
xor esi, esi
mov dword [rsp + 0x46], 0x6e0043
mov dword [rsp + 0x4a], 0x660070
mov ecx, esi
mov dword [rsp + 0x4e], 0x6c0024
mov dword [rax + 0xc], ebx
xor eax, eax
mov word [rbp + 0x4e], ax
lea r14d, [rsi + 6]
mov dword [rsp + 0x52], 0x680075
mov dword [rsp + 0x56], 0x680064
mov dword [rsp + 0x5a], 0x62007e
mov dword [rsp + 0x5e], 0x630063
mov dword [rsp + 0x62], 0x6b002e
mov dword [rsp + 0x66], 0x620079
mov dword [rsp + 0x6a], 0x710073
mov dword [rsp + 0x6e], 0x700078
mov dword [rsp + 0x72], 0x370072
mov dword [rsp + 0x76], 0x770079
mov dword [rsp + 0x7a], 0x3b007e
mov dword [rsp + 0x7e], 0x780072
mov dword [rbp - 0x7e], 0x7b007b
mov dword [rbp - 0x7a], 0x530000
mov dword [rbp - 0x76], 0x410047
mov dword [rbp - 0x72], 0x4a004b
mov dword [rbp - 0x6e], 0x70052
mov dword [rbp - 0x6a], 0x6a0078
mov dword [rbp - 0x66], 0xb0004
mov dword [rbp - 0x62], 0x42006f
mov dword [rbp - 0x5e], 0x5c0040
mov dword [rbp - 0x5a], 0x550059
mov dword [rbp - 0x56], 0x410057
mov dword [rbp - 0x52], 0x530014
mov dword [rbp - 0x4e], 0x450059
mov dword [rbp - 0x4a], 0x570018
mov dword [rbp - 0x46], 0x43005f
mov dword [rbp - 0x42], 0x1d0048
mov dword [rbp - 0x3e], 0x56004a
mov dword [rbp - 0x3a], 0x24002d
mov dword [rbp - 0x36], 0x270062
mov dword [rbp - 0x32], 0x36002d
mov dword [rbp - 0x2e], 0x250027
mov dword [rbp - 0x2a], 0x2c0024
mov dword [rbp - 0x26], 0x3d006a
mov dword [rbp - 0x22], 0x3f0025
mov dword [rbp - 0x1e], 0x3a003a
mov dword [rbp - 0x1a], 0x3d0031
mov dword [rbp - 0x16], 0x29003b
mov dword [rbp - 0x12], 0x210035
mov dword [rbp - 0xe], 0x38003f
mov dword [rbp - 0xa], 0x790036
mov dword [rbp - 6], 0x350033
mov dword [rbp - 2], 0x29007c
mov dword [rbp + 2], 0x3a0036
mov dword [rbp + 6], 0x230040
mov dword [rbp + 0xa], 0x2c002b
mov dword [rbp + 0xe], 0x450037
mov dword [rbp + 0x12], 0x80000
mov dword [rbp + 0x16], 0x49001a
mov dword [rbp + 0x1a], 0xe0008
mov dword [rbp + 0x1e], 0x190018
mov dword [rbp + 0x22], 0x1d000b
mov dword [rbp + 0x26], 0x100050
mov dword [rbp + 0x2a], 0x17001c
mov dword [rbp + 0x2e], 0x60054
mov dword [rbp + 0x32], 0x160002
mov dword [rbp + 0x36], 0x15001a
mov dword [rbp + 0x3a], 0x5b001f
mov dword [rbp + 0x3e], 0x1b0019
mov dword [rbp + 0x42], 0x1a0018
mov dword [rbp + 0x46], 0xf500e3
mov dword [rbp + 0x4a], 0xad00f1
movsxd rax, ecx
xor word [rsp + rax*2 + 0x46], cx
inc ecx
cmp ecx, 0x84
jb 0x140189773
lea rdx, [rsp + 0x46]
mov word [rbp + 0x4e], si
mov ecx, 1
call fcn.1401a8110
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r10d, dword [rcx + r9 + 0x88]
add r10, r9
cmp r10, r9
je 0x14018980f
mov r8d, dword [r10 + 0x18]
test r8d, r8d
je 0x14018980f
mov edi, dword [r10 + 0x20]
dec r8d
mov r11d, 0x1c37fb4c
lea rcx, [rdi + r8*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov cl, byte [rdx]
inc rdx
test cl, cl
je 0x14018980a
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x1401897eb
cmp r11d, 0x7875bd4
je 0x140189814
test r8d, r8d
jne 0x1401897ce
mov rax, qword [rax]
jmp 0x1401897a9
mov edx, dword [r10 + 0x24]
mov ecx, r14d
add rdx, r9
movzx r8d, word [rdx + r8*2]
mov edx, dword [r10 + 0x1c]
add rdx, r9
mov eax, dword [rdx + r8*4]
mov edx, 0x10000
add rax, r9
call qword [case.0x140173169.0]
jmp 0x140189860
mov edx, 0x7f00
call qword [sym.imp.user32.dll_LoadCursorW]
mov rcx, rax
call qword [sym.imp.user32.dll_SetCursor]
movups xmm0, xmmword [0x1404c0618]
movups xmmword [0x140548d88], xmm0
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret