Function at 0x140005908
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Hash data using murmur3
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x58
movdqa xmm0, xmmword [0x1400082b0]
movdqu xmmword [rbp - 0x28], xmm0
mov dword [rbp - 0x18], 0x6cc66fc0
mov word [rbp - 0x14], 0xbc0
mov byte [rbp - 0x12], 0xa6
mov rax, qword gs:[0x58]
mov rbx, qword [rax]
mov ecx, 0x198
mov eax, dword [rcx + rbx]
mov edi, 0x1b0
xor r12d, r12d
test al, 1
jne 0x1400059c4
or eax, 1
mov dword [rcx + rbx], eax
lea r9, [rdi + rbx]
mov byte [r9 + 0x17], 1
mov r8d, r12d
movabs r12, 0x642c8590b21642c9
mov rax, r12
mul r8
mov rax, r8
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0x17
mov rdx, r8
sub rdx, rax
mov rcx, r9
sub rcx, rax
mov al, byte [rbp + rdx - 0x28]
mov byte [rcx + r8], al
inc r8
cmp r8, 0x211
jb 0x14000597a
lea rcx, [0x1400079d0]
call fcn.140006738
nop
xor r12d, r12d
add rbx, rdi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
or r14d, 0xffffffff
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r11d, dword [rcx + r8 + 0x88]
add r11, r8
cmp r11, r8
je 0x140005a40
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x140005a40
mov edi, dword [r11 + 0x20]
add r10d, r14d
lea rdx, [rdi + r10*4]
mov r9d, dword [rdx + r8]
add r9, r8
mov edx, 0xc8885c1
mov cl, byte [r9]
inc r9
test cl, cl
je 0x140005a3b
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r9]
inc r9
test cl, cl
jne 0x140005a1e
cmp edx, 0xa040f273
je 0x140005a45
test r10d, r10d
jne 0x140005a01
mov rax, qword [rax]
jmp 0x1400059dc
mov edx, dword [r11 + 0x1c]
add rdx, r8
mov ecx, dword [r11 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov eax, dword [rdx + rcx*4]
add rax, r8
mov ecx, 1
call rax
mov r13, rax
mov qword [rbp + 0x60], rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov r8, qword [rcx + 0x30]
movsxd rdx, dword [r8 + 0x3c]
mov r11d, dword [rdx + r8 + 0x88]
add r11, r8
cmp r11, r8
je 0x140005ae1
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x140005ae1
mov edi, dword [r11 + 0x20]
add r10d, r14d
lea rdx, [rdi + r10*4]
mov r9d, dword [rdx + r8]
add r9, r8
mov edx, 0x48cc3353
mov al, byte [r9]
inc r9
test al, al
je 0x140005adc
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
mov al, byte [r9]
inc r9
test al, al
jne 0x140005abf
cmp edx, 0xa7a741b8
je 0x140005ae6
test r10d, r10d
jne 0x140005aa2
mov rcx, qword [rcx]
jmp 0x140005a7d
mov edx, dword [r11 + 0x1c]
add rdx, r8
mov ecx, dword [r11 + 0x24]
add rcx, r8
movzx ecx, word [rcx + r10*2]
mov esi, dword [rdx + rcx*4]
add rsi, r8
mov qword [rbp + 0x58], rsi
movabs rdi, 0xa1cf89f3b9d5ff61
cmp byte [rbx + 0x17], r12b
je 0x140005ca9
mov r9, rdi
mov r11, r12
mov qword [rbp + 0x50], r12
movabs rdi, 0xff51afd7ed558ccd
movabs rsi, 0x101010101010101
movabs r13, 0xc4ceb9fe1a85ec53
mov r15, r12
mov r10, r9
and r10d, 0xf
imul r14, r10, 0x17
test r14, r14
je 0x140005c40
movabs r11, 0x642c8590b21642c9
mov rax, r12
shr rax, 0x1b
xor rax, r12
imul rax, rdi
mov rcx, rax
shr rcx, 0x21
xor rcx, rax
imul rcx, r13
mov rax, rcx
shr rax, 0x1b
xor rax, rcx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, rsi
mov rax, r11
mul r15
mov rax, r15
sub rax, rdx
shr rax, 1
add rax, rdx
shr rax, 4
imul rax, rax, 0x17
mov r8, r15
sub r8, rax
xor edx, edx
mov rax, r15
div r10
mov rax, rdx
imul rax, r9
xor edx, edx
div rcx
movzx eax, r15b
movzx ecx, dl
imul ecx, eax
and cl, 0x1f
mov rax, r9
shr rax, cl
xor byte [r8 + rbx], al
inc r15
add r12, r10
xor edx, edx
lea eax, [rdx + 0x17]
div r15
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, rdi
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, r13
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, rsi
mov rax, r10
imul rax, rcx
xor rax, r15
xor r9, rax
cmp r15, r14
jb 0x140005b60
mov r11, qword [rbp + 0x50]
xor r12d, r12d
inc r11
mov qword [rbp + 0x50], r11
mov rax, r11
xor rax, r9
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, rdi
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, r13
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, rsi
xor r9, rcx
cmp r11, 5
jb 0x140005b3f
mov byte [rbx + 0x17], r12b
movabs rdi, 0xa1cf89f3b9d5ff61
mov rsi, qword [rbp + 0x58]
mov r13, qword [rbp + 0x60]
or r14d, 0xffffffff
mov qword [rsp + 0x20], r12
xor r9d, r9d
mov r8, rbx
mov rdx, r13
xor ecx, ecx
call rsi
mov dword [rbp + 0x48], 0x3d27bda9
mov word [rbp + 0x4c], 0xa207
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x230
mov eax, dword [rdx + rcx]
mov ebx, 0x190
movabs r10, 0xaaaaaaaaaaaaaaab
test al, 1
jne 0x140005d3b
or eax, 1
mov dword [rdx + rcx], eax
mov r9d, ebx
add r9, rcx
mov byte [r9 + 6], 1
mov r8, r12
mov rax, r10
mul r8
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov rcx, r8
sub rcx, rax
mov al, byte [rbp + rcx + 0x48]
mov byte [rcx + r9], al
inc r8
cmp r8, 0x3f6
jb 0x140005d03
lea rcx, [0x1400079b4]
call fcn.140006738
nop
mov r11d, ebx
mov rax, qword gs:[0x58]
add r11, qword [rax]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov ebx, dword [rcx + r8 + 0x88]
add rbx, r8
cmp rbx, r8
je 0x140005dbe
mov r10d, dword [rbx + 0x18]
test r10d, r10d
je 0x140005dbe
mov esi, dword [rbx + 0x20]
add r10d, r14d
lea rdx, [rsi + r10*4]
mov r9d, dword [rdx + r8]
add r9, r8
mov edx, 0xb88842e
mov cl, byte [r9]
inc r9
test cl, cl
je 0x140005db9
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
mov cl, byte [r9]
inc r9
test cl, cl
jne 0x140005d9c
cmp edx, 0x6d6a2d8f
je 0x140005dc3
test r10d, r10d
jne 0x140005d7f
mov rax, qword [rax]
jmp 0x140005d5b
mov eax, dword [rbx + 0x24]
add rax, r8
movzx edx, word [rax + r10*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r8
mov ebx, dword [rcx + rdx*4]
add rbx, r8
mov qword [rbp + 0x50], rbx
cmp byte [r11 + 6], r12b
je 0x140005f66
mov r10, r12
mov qword [rbp + 0x48], r12
movabs rbx, 0xc4ceb9fe1a85ec53
movabs r13, 0xff51afd7ed558ccd
mov r14, r12
mov r9, rdi
and r9d, 0xf
lea rsi, [r9 + r9*2]
add rsi, rsi
je 0x140005f05
mov r15, r12
movabs r12, 0x101010101010101
movabs r10, 0xaaaaaaaaaaaaaaab
mov rax, r15
shr rax, 0x1b
xor rax, r15
imul rax, r13
mov rcx, rax
shr rcx, 0x21
xor rcx, rax
imul rcx, rbx
mov rax, r10
mul r14
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov r8, r14
sub r8, rax
mov rax, rcx
shr rax, 0x1b
xor rax, rcx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, r12
xor edx, edx
mov rax, r14
div r9
mov rax, rdx
imul rax, rdi
xor edx, edx
div rcx
movzx eax, r14b
movzx ecx, dl
imul ecx, eax
and cl, 0x1f
mov rax, rdi
shr rax, cl
xor byte [r8 + r11], al
inc r14
add r15, r9
xor edx, edx
lea eax, [rdx + 6]
div r14
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, r13
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, rbx
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rcx, rax, 0x32
or rcx, r12
imul rcx, r9
xor rcx, r14
xor rdi, rcx
cmp r14, rsi
jb 0x140005e31
mov r10, qword [rbp + 0x48]
xor r12d, r12d
inc r10
mov qword [rbp + 0x48], r10
mov rax, r10
xor rax, rdi
mov rcx, rax
shr rcx, 0x1b
xor rcx, rax
imul rcx, r13
mov rdx, rcx
shr rdx, 0x21
xor rdx, rcx
imul rdx, rbx
mov rax, rdx
shr rax, 0x1b
xor rax, rdx
imul rax, rax, 0x38
xor rax, 0x50
imul rdx, rax, 0x32
movabs rax, 0x101010101010101
or rdx, rax
xor rdi, rdx
cmp r10, 4
jb 0x140005e03
mov byte [r11 + 6], r12b
mov rbx, qword [rbp + 0x50]
mov rcx, r11
call rbx
xor eax, eax
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret