Function at 0x1400059d0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x240
mov rax, qword [0x140046040]
xor rax, rsp
mov qword [rsp + 0x230], rax
mov eax, ecx
lea r12, [0x140000000]
mov esi, dword [r12 + rax*4 + 0x37840]
mov eax, edx
mov r12d, dword [r12 + rax*4 + 0x37880]
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov rdi, qword [rcx + 0x18]
add rdi, 0x20
mov rbx, qword [rdi]
cmp rbx, rdi
je 0x140005b5c
mov r15d, dword [0x14006a4e0]
xor r14d, r14d
nop dword [rax]
xor edx, edx
lea rax, [rsp + 0x20]
xorps xmm0, xmm0
lea ecx, [rdx + 2]
nop dword [rax]
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
lea rax, [rax + 0x80]
movups xmmword [rax - 0x10], xmm0
sub rcx, 1
jne 0x140005a60
mov r8, qword [rbx + 0x40]
mov dword [rax], edx
mov rcx, r8
mov rax, r14
cmp word [r8], ax
je 0x140005aac
nop
inc rax
lea rcx, [rcx + 2]
cmp word [rcx], dx
jne 0x140005aa0
cmp word [r8 + rax*2], 0x5c
je 0x140005ac6
test rax, rax
jle 0x140005ac6
dec rax
inc edx
cmp word [r8 + rax*2], 0x5c
jne 0x140005ab4
movsxd rcx, edx
test edx, edx
js 0x140005ae5
inc rax
lea rdx, [r8 + rax*2]
lea r8, [rcx + 1]
add r8, r8
lea rcx, [rsp + 0x20]
call fcn.140023630
movzx edx, word [rsp + 0x20]
lea rax, [rsp + 0x20]
mov ecx, r14d
test dx, dx
je 0x140005b53
nop word [rax + rax]
inc ecx
lea rax, [rax + 2]
cmp word [rax], r14w
jne 0x140005b00
test ecx, ecx
je 0x140005b53
lea r9, [rsp + 0x20]
mov r8d, r15d
nop dword [rax + rax]
movzx ecx, dx
lea r9, [r9 + 2]
sub dx, 0x61
cmp dx, 0x19
movzx edx, word [r9]
lea eax, [rcx + 0x20]
cmova ecx, eax
imul eax, ecx, 0x1000193
xor r8d, eax
test dx, dx
jne 0x140005b20
shr r8d, 2
cmp r8d, esi
je 0x140005b90
mov rbx, qword [rbx]
cmp rbx, rdi
jne 0x140005a50
xor eax, eax
mov rcx, qword [rsp + 0x230]
xor rcx, rsp
call fcn.140008cb0
lea r11, [rsp + 0x240]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r12
ret
mov rbx, qword [rbx + 0x20]
test rbx, rbx
je 0x140005b5c
movsxd rax, dword [rbx + 0x3c]
add rax, rbx
je 0x140005b5c
add rax, 0x18
je 0x140005b5c
add rax, 0x70
je 0x140005b5c
mov edi, dword [rax]
add rdi, rbx
je 0x140005b5c
mov ebp, dword [rdi + 0x24]
add rbp, rbx
je 0x140005b5c
mov r10d, dword [rdi + 0x20]
add r10, rbx
je 0x140005b5c
mov esi, dword [rdi + 0x18]
mov r11d, r14d
test esi, esi
je 0x140005c37
mov r8d, dword [r10]
mov r9d, r15d
add r8, rbx
movzx edx, byte [r8]
test dl, dl
je 0x140005c05
movsx ecx, dl
lea r8, [r8 + 1]
sub dl, 0x61
cmp dl, 0x19
movzx edx, byte [r8]
lea eax, [rcx + 0x20]
cmova ecx, eax
imul eax, ecx, 0x1000193
xor r9d, eax
test dl, dl
jne 0x140005be1
shr r9d, 2
cmp r9d, r12d
je 0x140005c22
inc r11d
add r10, 4
cmp r11d, esi
jb 0x140005bd0
mov rax, r14
jmp 0x140005b5e
mov ecx, dword [rdi + 0x1c]
add rcx, rbx
mov eax, r11d
movzx edx, word [rbp + rax*2]
mov r14d, dword [rcx + rdx*4]
add r14, rbx
mov rax, r14
jmp 0x140005b5e