Function at 0x1405ed8ce
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
movzx eax, ax
setbe al
mov qword [rsp + 0x20], rdi
cmc
rol al, cl
push rbp
push r12
movsx bp, r13b
jmp 0x1405ed8ce
push r13
push r14
sub ax, cx
test rax, r9
push r15
movsx r9d, r15w
rol r9d, 0x1d
btr rbp, 0x95
lea rbp, [rsp - 0x170]
xor rax, rdx
sub rsp, 0x270
shld r9w, r13w, 5
shr ax, 0x70
mov rax, qword [0x14002c010]
xor rax, rsp
not r9w
bswap r9w
movzx r9w, r15b
mov qword [rbp + 0x168], rax
movsx r9d, r10w
mov r9, rdx
jmp 0x1405ed92d
call fcn.1405ef5c6
test eax, eax
jne 0x1405ee1d0
xor edx, edx
movsxd rdi, r14d
mov r8d, 0x488
movsxd rdi, ebx
movsx di, dl
lea rdi, [0x14002cb9c]
movsx cx, sil
mov rcx, rdi
jmp 0x1405ed960
call fcn.1400258e4
mov eax, 0x33
rol dh, cl
sar r8w, cl
shl ch, 0x97
mov word [rbp + 0x142], ax
xor r15d, r15d
movzx dx, ah
not ch
rdtsc
mov edx, r15d
movsxd rax, edx
movzx ecx, si
mov ecx, r15d
movsxd r8, r11d
lea r8, str.RACFY8OI_m
jmp 0x1405ed9a3
nop dword [rax + rax]
mov al, r9b
cwde
movzx eax, byte [rcx + r8]
jmp 0x1405ed9b6
mov byte [rbp + rcx + 0x42], al
jmp 0x1405ed9bf
inc edx
test sil, 0x16
lea rcx, [rcx + 1]
cmp r8, 0x6e8502b1
test r8b, 0xb4
cmp edx, 0x33
jmp 0x1405ed9dc
jb 0x1405ed9ac
movzx eax, word [rbp + 0x142]
mov byte [rbp + rax + 0x42], r15b
ror dl, cl
mov word [rbp + 0x40], 0xfaf9
mov byte [rbp + 0x144], 1
and cl, 0xbe
shl rax, cl
movzx cx, spl
lea rcx, [rsp + 0x30]
sal eax, cl
sar dh, 0xad
movsx edx, r15w
lea rdx, [rbp + 0x40]
movsx eax, dx
mov eax, 2
nop dword [rax + rax]
stc
movups xmm0, xmmword [rdx]
movups xmmword [rcx], xmm0
jmp 0x1405eda38
movups xmm1, xmmword [rdx + 0x10]
clc
movups xmmword [rcx + 0x10], xmm1
jmp 0x1405eda4a
movups xmm0, xmmword [rdx + 0x20]
test r15w, 0x25c2
movups xmmword [rcx + 0x20], xmm0
jmp 0x1405eda5d
movups xmm1, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rdx + 0x50]
test rbx, r11
stc
movups xmmword [rcx + 0x50], xmm1
stc
cmp ah, 0x4c
movups xmm0, xmmword [rdx + 0x60]
test edx, 0xf9c0ad2
cmc
movups xmmword [rcx + 0x60], xmm0
lea rcx, [rcx + 0x80]
stc
movups xmm1, xmmword [rdx + 0x70]
movups xmmword [rcx - 0x10], xmm1
cmc
clc
lea rdx, [rdx + 0x80]
clc
sub rax, 1
jmp 0x1405edaaf
jne 0x1405eda28
mov eax, dword [rdx]
mov dword [rcx], eax
movzx eax, word [rdx + 4]
xchg r8b, r8b
bt r8d, 0xc0
sbb r8b, 0xb
mov word [rcx + 4], ax
movzx r8d, r15w
cmp r15w, word [rbp + 0x142]
jmp 0x1405edade
jae 0x1405edb9f
nop dword [rax]
sal r9b, 0xd5
or r9b, r10b
test r15w, 0x2517
movzx r9d, r8w
xor dx, 0x236e
movzx edx, byte [rsp + r9 + 0x32]
cmp byte [rbp + 0x34], r15b
jmp 0x1405edb0d
je 0x1405edb42
sub dl, byte [rsp + 0x30]
mov cx, di
xor ch, 0x8a
mov rcx, 0x29871375
mov byte [rsp + r9 + 0x32], dl
test dl, r12b
movzx ecx, byte [rsp + 0x31]
jmp 0x1405edb36
sub cl, r9b
stc
clc
add cl, dl
jmp 0x1405edb74
movzx eax, byte [rsp + 0x30]
sub ch, 0x5e
add al, dl
cmp r12d, 0x1df1557c
sar ch, cl
mov byte [rsp + r9 + 0x32], al
cmp sp, 0x38c0
movzx ecx, r9b
sub cl, byte [rsp + 0x31]
test r13d, 0x5fac0ce2
cmp r15b, 0x28
add cl, al
mov byte [rsp + r9 + 0x32], cl
movsxd rax, ecx
nop
movsx rax, bx
inc r8w
movzx eax, word [rbp + 0x32]
stc
cmp r8w, ax
jmp 0x1405edb94
jb 0x1405edaf5
jmp 0x1405edbad
movzx eax, word [rbp + 0x32]
xadd dl, r8b
adc r9w, 0x64ed
mov byte [rbp + 0x34], r15b
xadd dl, r9b
mov r8d, 0x3f2755b3
sar dx, 0xfc
movzx r8d, ax
shrd dx, r12w, 0x30
movsx rdx, r14w
btc rdx, 0x6b
mov edx, r15d
movsxd r9, r13d
stc
movsx r9, r14w
lea r9, [0x14002c9f0]
clc
test r14b, 0x5b
cmc
test r8, r8
je 0x1405edc30
mov rcx, r15
movsxd rax, r9d
movzx rax, r13w
nop
movzx eax, byte [rsp + rcx + 0x32]
mov byte [rcx + r9 + 0x1ac], al
lahf
movsx ax, dh
inc edx
shl al, cl
rcr ah, cl
lea rcx, [rcx + 1]
btr ax, 0x64
cmovno eax, esp
movsxd rax, edx
clc
cmp rax, r8
jb 0x1405edbff
mov byte [r8 + r9 + 0x1ac], r15b
dec rax
rcr ch, cl
mov rcx, rdi
cmp r9, r8
sbb ax, r9w
movzx eax, byte [0x14002cb9c]
test al, al
jmp 0x1405edc55
je 0x1405edc7f
sub al, 5
mov byte [rcx], al
lea rcx, [rcx + 1]
rol ax, 0x15
movzx eax, byte [rcx]
jmp 0x1405edc72
test al, al
jmp 0x1405edc79
jne 0x1405edc5b
mov byte [0x14002cb98], 1
inc rax
bt ax, si
btr ax, 0x2a
mov rax, qword [0x14002d138]
test rax, rax
jne 0x1405ede39
mov rax, qword gs:[0x30]
rcl r10d, 0x65
mov rcx, qword [rax + 0x60]
sal r10d, 0xe6
and sil, r9b
bts r10w, r15w
mov rax, qword [rcx + 0x18]
xor r14w, 0x134e
sbb r10, r13
mov r14, qword [rax + 0x10]
cmc
movabs r13, 0x537b26b5227226ba
btr r10w, r15w
nop word [rax + rax]
mov r10, qword [r14 + 0x30]
movsxd rax, dword [r10 + 0x3c]
xor sil, dl
mov esi, dword [rax + r10 + 0x88]
test ebx, ebx
cmp r13w, r10w
stc
add rsi, r10
cmp rsi, r10
jmp 0x1405edd0f
je 0x1405edde5
mov r9d, r15d
ror r11w, cl
and r11w, 0x7d75
bts r11w, r10w
mov r11d, dword [rsi + 0x18]
clc
cmp r14w, 0x4c04
test r11d, r11d
jmp 0x1405edd3a
je 0x1405edde5
mov r12d, dword [rsi + 0x20]
rol ax, 0xfb
movzx r8, r10w
nop dword [rax + rax]
mov ebx, r9d
sal al, cl
rcr r8w, cl
sar rax, 0x8c
lea rax, [r12 + rbx*4]
mov edx, dword [rax + r10]
add rdx, r10
stc
mov r8, r15
xadd ah, ah
rcr ah, cl
movzx eax, byte [rdx]
jmp 0x1405edd81
test al, al
jmp 0x1405edd88
je 0x1405eddd5
nop dword [rax + rax]
and cl, r11b
movsx ecx, al
inc al
xor rcx, r8
imul r8, rcx, 0x1000193
lea rdx, [rdx + 1]
cmp r9d, 0x683416d2
sub eax, r9d
rcr ax, cl
movzx eax, byte [rdx]
cmp sil, dl
test al, al
jne 0x1405edd99
cmp r8, r13
jmp 0x1405eddcf
je 0x1405eddf2
inc r9d
cmp r8b, 0x70
cmp r9d, r11d
jb 0x1405edd54
mov r14, qword [r14]
jmp 0x1405edded
jmp 0x1405edcea
mov ecx, dword [rsi + 0x1c]
sar eax, 0x58
rcr ax, cl
add rcx, r10
rol ah, cl
mov eax, dword [rsi + 0x24]
add rax, r10
movzx eax, word [rax + rbx*2]
stc
test al, r10b
mov eax, dword [rcx + rax*4]
jmp 0x1405ede17
lea rax, [rax + r10]
jmp 0x1405ede27
mov qword [0x14002d138], rax
cmc
cmp rbx, 0x53154d21
cmp bl, r15b
sub r8d, r8d
sub edx, edx
cmc
clc
xor ecx, ecx
call rax
mov qword [0x14002d028], rax
cmc
mov qword [rbp + 0x150], r15
cmc
mov qword [rbp + 0x158], r15
mov qword [rbp + 0x160], r15
movsxd rax, r11d
and al, r10b
lea rax, [rbp + 0x150]
sbb cx, si
dec cx
btc rcx, 0x85
mov qword [rsp + 0x20], rax
rcr ch, cl
bt ecx, 0x5f
sub r9d, r9d
sar cx, 0xa0
rol ch, cl
xor r8d, r8d
xor cl, 0x4c
sub edx, edx
movsx rcx, bx
lea rcx, [0x14002c9f0]
call fcn.1405ee24d
test al, al
je 0x1405ee1ad
mov rcx, rdi
shl eax, 0xe4
sbb rax, 0xf450614
movzx eax, byte [0x14002cb9c]
clc
cmp rsp, 0x33e627eb
test al, al
jmp 0x1405eded1
je 0x1405edf01
add al, 5
clc
test r9b, dl
mov byte [rcx], al
btr ax, 0xad
jmp 0x1405edee9
lea rcx, [rcx + 1]
movzx eax, byte [rcx]
cmp r10b, 0x40
test al, al
jmp 0x1405edefb
jne 0x1405eded7
mov rdx, qword [rbp + 0x158]
movsx cx, r15b
movzx cx, al
mov ch, 0x9e
mov rcx, rdi
jmp 0x1405edf1c
call fcn.140001680
movzx eax, byte [0x14002cb9c]
clc
test al, al
jmp 0x1405edf30
je 0x1405edf66
nop dword [rax + rax]
test r15w, di
sub al, 5
clc
jmp 0x1405edf47
mov byte [rdi], al
lahf
lea rdi, [rdi + 1]
ror ax, cl
movzx eax, byte [rdi]
jmp 0x1405edf5e
test al, al
jne 0x1405edf3f
mov rcx, qword [rbp + 0x150]
clc
jmp 0x1405edf77
test rcx, rcx
jmp 0x1405edf7f
je 0x1405ee1be
mov r8, qword [rbp + 0x160]
cmp r12, r10
jmp 0x1405edf95
test r8, r8
jmp 0x1405edf9d
je 0x1405edfb6
sub edx, edx
jmp 0x1405edfaa
call fcn.1400258e4
mov rcx, qword [rbp + 0x150]
mov rax, qword [0x14002d210]
jmp 0x1405edfc2
test rax, rax
jmp 0x1405edfca
jne 0x1405ee19a
mov rax, qword gs:[0x30]
btc r12w, 0xe6
rcr r14, cl
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
bts edi, r8d
mov r14, qword [rax + 0x10]
adc r10w, 0x3af
movabs r12, 0x19c0f48bf548020e
lahf
sub dil, 0x92
nop dword [rax + rax]
add al, 0x8d
mov r10, qword [r14 + 0x30]
sal ah, cl
movsxd rdi, r12d
btc ax, 0x7f
movsxd rax, dword [r10 + 0x3c]
shrd di, r14w, 0xa8
btr di, bp
mov di, 0x374f
mov edi, dword [rax + r10 + 0x88]
add rdi, r10
cmp rdi, r10
jmp 0x1405ee044
je 0x1405ee138
mov r9d, r15d
add r11b, 0x17
mov r11d, dword [rdi + 0x18]
jmp 0x1405ee05f
test r11d, r11d
jmp 0x1405ee067
je 0x1405ee138
mov esi, dword [rdi + 0x20]
xor cl, spl
shl r8b, 0x88
inc ebx
nop word [rax + rax]
rcr ecx, 0x3b
movsxd rax, eax
test bl, r10b
mov ebx, r9d
movsx cx, bl
lea rax, [rsi + rbx*4]
mov eax, dword [rax + r10]
shr ch, 0x71
sar ch, 0x44
lea rax, [rax + r10]
mov cx, dx
sar r8w, 0xc8
mov r8, r15
bt cx, 0x46
add cl, 0x8f
btr cx, 0x28
movzx ecx, byte [rax]
cmp ah, bl
test ebp, 0x6be30e5d
test cl, cl
jmp 0x1405ee0ce
je 0x1405ee11a
nop dword [rax + rax]
add dx, 0x72ca
movsx edx, cl
xor rdx, r8
cmp r13b, r11b
imul r8, rdx, 0x1000193
lea rax, [rax + 1]
xchg cl, ch
movzx ecx, byte [rax]
jmp 0x1405ee104
test cl, cl
jne 0x1405ee0e1
cmp r8, r12
jmp 0x1405ee114
je 0x1405ee145
inc r9d
cmp r14, 0x7bef09f9
test r8w, 0x491d
cmp r9d, r11d
jmp 0x1405ee132
jb 0x1405ee08b
mov r14, qword [r14]
jmp 0x1405ee140
jmp 0x1405ee011
mov ecx, dword [rdi + 0x1c]
and al, dil
add ah, 0x88
sar al, cl
lea rcx, [rcx + r10]
rcl ax, 0x5f
btc rax, 0x80
cmp bl, 0xef
mov eax, dword [rdi + 0x24]
jmp 0x1405ee168
lea rax, [rax + r10]
movzx eax, word [rax + rbx*2]
stc
mov eax, dword [rcx + rax*4]
movzx cx, r8b
bsr cx, r15w
add rax, r10
mov qword [0x14002d210], rax
not cx
mov cl, r15b
mov rcx, qword [rbp + 0x150]
jmp 0x1405ee19a
call rax
mov qword [rbp + 0x150], r15
jmp 0x1405ee1a8
jmp 0x1405ee1be
mov r15d, 4
mov ch, 0x68
cmovns ecx, eax
jmp 0x1405ee1be
lea rcx, [rbp + 0x150]
call fcn.1405ed389
mov eax, r15d
bswap rcx
mov rcx, qword [rbp + 0x168]
stc
test rsi, r12
xor rcx, rsp
jmp 0x1405ee1e3
call fcn.140024b00
lea r11, [rsp + 0x270]
xchg di, si
movzx rsi, r14w
bswap r14
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
xchg r15b, bpl
mov r15, 0x70bb5d95
not r14b
mov rdi, qword [r11 + 0x48]
movzx r13d, bx
mov rsp, r11
movsx ebp, ax
movsxd rbp, ecx
pop r15
setns r14b
cmovp r14w, bp
movsx r14w, bpl
pop r14
pop r13
movzx r12, r12w
mov r12w, 0x4bdf
seto r12b
pop r12
xchg bpl, bpl
pop rbp
jmp 0x1405ee24c
ret