Function at 0x140043904
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x160
mov rax, qword [0x140322010]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov rax, qword gs:[0x60]
xor ebx, ebx
mov rbp, rcx
or r13d, 0xffffffff
mov rdx, qword [rax + 0x18]
mov rax, qword [rdx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x1400439b9
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x1400439b9
mov r14d, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x1400439b5
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x140043996
cmp r11d, 0x185776b5
je 0x1400439e4
test edx, edx
jne 0x140043979
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x1400439ca
cmp qword [rax + 0x30], rbx
jne 0x140043955
mov rax, rbx
xor edx, edx
lea ecx, [rdx + 2]
call rax
mov r15, rax
cmp rax, 0xffffffffffffffff
jne 0x1400439fe
xor eax, eax
jmp 0x140043c79
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x1400439cd
xor edx, edx
lea rcx, [rsp + 0x24]
mov r8d, Ordinal_301
call fcn.140130980
mov dword [rsp + 0x20], 0x130
mov r12b, bl
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x140043a9a
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x140043a9a
mov r14d, dword [r9 + 0x20]
add edx, r13d
mov r11d, 0x811c9dc5
lea rax, [r14 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x140043a96
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x140043a73
cmp r11d, 0xa4c8c8f
je 0x140043b95
test edx, edx
jne 0x140043a56
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x140043aab
cmp qword [rax + 0x30], rbx
jne 0x140043a32
mov rax, rbx
lea rdx, [rsp + 0x20]
mov rcx, r15
call rax
test eax, eax
je 0x140043bc3
lea rcx, [rsp + 0x4c]
or rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], bl
jne 0x140043ac9
cmp qword [rbp + 0x18], 0x10
mov rcx, rbp
jb 0x140043adf
mov rcx, qword [rbp]
mov r8, qword [rbp + 0x10]
cmp r8, rax
jne 0x140043afa
lea rdx, [rsp + 0x4c]
call fcn.140130b70
test eax, eax
je 0x140043bc0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov rdx, rdi
mov r8, qword [rdx + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x140043b77
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140043b77
mov r14d, dword [r9 + 0x20]
add r10d, r13d
mov r11d, 0x811c9dc5
lea rax, [r14 + r10*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x140043b72
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x140043b53
cmp r11d, 0x15eec872
je 0x140043bb2
test r10d, r10d
jne 0x140043b36
mov rax, qword [rdx]
mov rdx, rax
cmp rax, rdi
je 0x140043aab
cmp qword [rax + 0x30], rbx
je 0x140043aab
jmp 0x140043b11
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x140043aae
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r10*2]
jmp 0x140043ba0
mov r12b, 1
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov rdx, rdi
mov r8, qword [rdx + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x140043c3f
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x140043c3f
mov ebp, dword [r9 + 0x20]
add r10d, r13d
mov r11d, 0x811c9dc5
lea rax, [r8 + r10*4]
mov ecx, dword [rax + rbp]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x140043c3a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x140043c1b
cmp r11d, 0xfaba0065
je 0x140043c52
test r10d, r10d
jne 0x140043bff
mov rax, qword [rdx]
mov rdx, rax
cmp rax, rdi
je 0x140043c6b
cmp qword [rax + 0x30], rbx
je 0x140043c6b
jmp 0x140043bda
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r10*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov ebx, dword [rcx + rdx*4]
add rbx, r8
mov rcx, r15
call rbx
neg r12b
sbb eax, eax
and eax, dword [rsp + 0x28]
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.1400607e0
lea r11, [rsp + 0x160]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret