Function at 0x1400463e0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Parse pe header
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb8]
sub rsp, 0x1b8
mov r14, rdx
mov r15, rcx
vpxor xmm0, xmm0, xmm0
vmovups ymmword [rsp + 0x60], ymm0
vmovups ymmword [rbp - 0x80], ymm0
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp - 0x60]
vzeroupper
call sub.VCRUNTIME140.dll_memset
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x1400464b6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400464b6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400464b1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140046490
cmp r8d, 0x9750505
je 0x1400464bb
test r9d, r9d
jne 0x140046470
mov rax, qword [rax]
jmp 0x140046440
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
lea rax, [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r8, [rsp + 0x60]
mov rdx, r14
mov rcx, r15
call r10
test eax, eax
je 0x140046c3c
mov eax, 0x5a4d
cmp word [rsp + 0x60], ax
jne 0x140046c3c
movsxd rsi, dword [rbp - 0x64]
add rsi, r14
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x1400465a6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400465a6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400465a1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140046580
cmp r8d, 0x9750505
je 0x1400465ab
test r9d, r9d
jne 0x140046560
mov rax, qword [rax]
jmp 0x140046530
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
lea rax, [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov r9d, 0x108
lea r8, [rbp - 0x60]
mov rdx, rsi
mov rcx, r15
call r10
test eax, eax
je 0x140046c3c
cmp dword [rbp - 0x60], 0x4550
jne 0x140046c3c
mov esi, dword [rbp + 0x28]
test esi, esi
je 0x140046c3c
cmp dword [rbp + 0x2c], 0
je 0x140046c3c
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140046696
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140046696
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140046691
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140046670
cmp r8d, 0x3285501
je 0x14004669b
test r9d, r9d
jne 0x140046650
mov rax, qword [rax]
jmp 0x140046620
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov r14d, dword [rbp + 0x2c]
mov qword [rsp + 0x50], r14
mov r9d, 4
mov r8d, 0x3000
mov edx, r14d
xor ecx, ecx
call r10
mov r12, rax
mov qword [rbp + 0x100], rax
test rax, rax
je 0x140046c3c
mov r13, rsi
mov rsi, qword [rbp + 0x108]
add rsi, r13
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rcx + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140046786
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140046786
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [rbx + r9*4]
mov edx, dword [rax + r11]
add rdx, r11
mov r8d, 0x811c9dc5
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x140046781
nop
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x140046760
cmp r8d, 0x9750505
je 0x14004678b
test r9d, r9d
jne 0x140046740
mov rcx, qword [rcx]
jmp 0x140046710
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
lea rax, [rbp + 0x118]
mov qword [rsp + 0x20], rax
mov r9, r14
mov r8, r12
mov rdx, rsi
mov rcx, r15
call r10
test eax, eax
jne 0x140046877
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140046856
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140046856
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140046851
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140046830
cmp r8d, 0x3a9acc72
je 0x14004685b
test r9d, r9d
jne 0x140046810
mov rax, qword [rax]
jmp 0x1400467e0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov rcx, r12
jmp 0x140046c2f
mov rsi, r12
sub rsi, r13
mov r14d, dword [r12 + 0x20]
add r14, rsi
mov r15d, dword [r12 + 0x24]
add r15, rsi
mov r12d, dword [r12 + 0x1c]
add r12, rsi
xor ecx, ecx
mov ebx, ecx
mov rax, qword [rbp + 0x100]
cmp dword [rax + 0x18], ecx
jbe 0x140046963
nop dword [rax]
mov edi, ebx
mov edx, dword [r14 + rdi*4]
add rdx, rsi
vpxor xmm0, xmm0, xmm0
vmovups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x48], rcx
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x1400468d4
lea rcx, [rsp + 0x30]
call fcn.1400030d0
nop
lea rcx, [rsp + 0x30]
cmp qword [rsp + 0x48], 0xf
cmova rcx, qword [rsp + 0x30]
mov rdx, qword [rbp + 0x110]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__stricmp]
test eax, eax
je 0x1400469ff
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x14004694c
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046947
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140046b47
call fcn.140181b28
inc ebx
mov rax, qword [rbp + 0x100]
cmp ebx, dword [rax + 0x18]
mov ecx, 0
jb 0x1400468b0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400469fa
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400469fa
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1400469f5
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x1400469d0
cmp r8d, 0x3a9acc72
je 0x140046c14
test r9d, r9d
jne 0x1400469b0
mov rax, qword [rax]
jmp 0x140046980
movzx eax, word [r15 + rdi*2]
mov ecx, dword [r12 + rax*4]
cmp ecx, 0x1000
jbe 0x140046b05
mov esi, ecx
mov rcx, qword [rbp + 0x108]
add rsi, rcx
lea rax, [rcx + r13]
cmp rsi, rax
jb 0x140046b4e
mov rax, qword [rsp + 0x50]
add rax, r13
add rax, rcx
cmp rsi, rax
ja 0x140046b4e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140046ad6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140046ad6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140046ad1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140046ab0
cmp r8d, 0x3a9acc72
je 0x140046adb
test r9d, r9d
jne 0x140046a90
mov rax, qword [rax]
jmp 0x140046a60
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r9d, dword [rcx + rax*4]
add r9, r10
xor edx, edx
mov r8d, 0x8000
mov rcx, qword [rbp + 0x100]
call r9
xor esi, esi
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x140046c0f
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046c0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046c0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140046bd6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140046bd6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x811c9dc5
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140046bd1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140046bb0
cmp r8d, 0x3a9acc72
je 0x140046bdb
test r9d, r9d
jne 0x140046b90
mov rax, qword [rax]
jmp 0x140046b60
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r9d, dword [rcx + rax*4]
add r9, r10
xor edx, edx
mov r8d, 0x8000
mov rcx, qword [rbp + 0x100]
call r9
jmp 0x140046b07
call fcn.140181b28
mov rax, rsi
jmp 0x140046c3e
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov rcx, qword [rbp + 0x100]
mov r8d, 0x8000
xor edx, edx
add rax, r10
call rax
xor eax, eax
add rsp, 0x1b8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret