Function at 0x1400b16a0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x1b0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1403dd5f0]
xor rax, rsp
mov qword [rbp + 0x160], rax
mov rcx, qword [0x1404ede98]
test rcx, rcx
jne 0x1400b182c
mov rax, qword gs:[0x60]
xor r15d, r15d
mov edi, 0x9bc5a608
mov rcx, qword [rax + 0x18]
mov r12, qword [rcx + 0x10]
mov rbx, r12
nop word [rax + rax]
movups xmm0, xmmword [rbx + 0x58]
movd eax, xmm0
movups xmmword [rbp], xmm0
sub ax, 8
test r15d, r15d
je 0x1400b175d
mov rcx, qword [rbp + 8]
mov edx, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x1400b1754
nop dword [rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x1400b1740
cmp edx, r15d
jne 0x1400b1814
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r14, rcx
mov r11d, ecx
shr r14, 0x20
add r11, r9
cmp r11, r9
je 0x1400b1814
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1400b1814
mov esi, dword [r11 + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rsi + r8*4]
mov eax, dword [rax + r9]
add rax, r9
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x1400b17d7
nop dword [rax]
movsx ecx, cl
lea rax, [rax + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax - 1]
test cl, cl
jne 0x1400b17c0
cmp edx, edi
je 0x1400b17e2
test r8d, r8d
jne 0x1400b17a0
jmp 0x1400b1814
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov ecx, dword [rcx + rdx*4]
add rcx, r9
cmp rcx, r11
jbe 0x1400b1825
lea rax, [r14 + r11]
cmp rcx, rax
jae 0x1400b1825
mov edi, 0x811c9dc5
mov rbx, r12
mov r15d, edi
mov rax, qword [rbx]
mov rbx, rax
cmp rax, r12
jne 0x1400b1710
xor ecx, ecx
mov qword [0x1404ede98], rcx
call rcx
mov rcx, rax
call fcn.1400ad2d0
call fcn.1400b0910
call fcn.1400ad880
movzx eax, byte [0x1404eda25]
test al, al
jne 0x1400b1d0b
movabs rdi, 0x85b64cca66a08be3
movabs rsi, 0x206c28f7db570274
movabs r14, 0x206c28f7be2f675a
movabs r15, 0xa3ee733960b687b6
movabs r13, 0x7ffffffffff0bdbe
movabs r12, 0x7fffffffffffffff
movabs rbx, 0x97bcbbe44ea95acd
call fcn.1400ad080
call fcn.1400a8f20
call fcn.1400af8d0
call fcn.1400a9770
call fcn.1400ae1d0
call fcn.1400b12b0
call fcn.1400b0eb0
movabs rax, 0xe1c520a509d4e695
lea rcx, [rbp + 0x90]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0x90]
mov qword [rbp + 0x28], rax
pxor xmm0, xmmword [rbp + 0x20]
movdqa xmmword [rbp + 0x90], xmm0
call fcn.1400a9080
test al, al
je 0x1400b1922
call fcn.1400a9460
movabs rax, 0xf7c229b807d7e695
lea rcx, [rbp + 0xa0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x206c4d8fbe797b15
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xa0]
mov qword [rbp + 0x38], rax
pxor xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rbp + 0xa0], xmm0
call fcn.1400a9080
test al, al
je 0x1400b1996
call fcn.1400a9460
movabs rax, 0xf6c329b807d7e695
lea rcx, [rbp + 0xb0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x206c4d8fbe797011
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xb0]
mov qword [rbp + 0x48], rax
pxor xmm0, xmmword [rbp + 0x40]
movdqa xmmword [rbp + 0xb0], xmm0
call fcn.1400a9080
test al, al
je 0x1400b1a0a
call fcn.1400a9460
movabs rax, 0xe0e524be13e1ccb5
lea rcx, [rbp + 0x100]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x100], rax
movabs rax, 0x58090692b83e7406
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x108], rax
movabs rax, 0x97bcbbe44ea95aa8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x110], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x118], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x140], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x148], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x150], rax
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0x158], rax
call fcn.1400a9080
test al, al
je 0x1400b1ab5
call fcn.1400a9460
movabs rax, 0xf5da24be05c1e695
lea rcx, [rbp + 0xc0]
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
mov qword [rbp], r14
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
movdqa xmm0, xmmword [rbp + 0xc0]
mov qword [rbp + 0x58], rax
pxor xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp + 0xc0], xmm0
call fcn.1400a9080
test al, al
je 0x1400b1b1f
call fcn.1400a9460
call fcn.1400ab670
call fcn.1400ab3c0
lea rcx, [0x1403a4a98]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r8, rax
lea rdx, [rbp + 0xe0]
movabs rax, 0xe3d805be03f3ffad
mov qword [rbp], rax
movabs rax, 0x4e034183ba3a701b
mov rcx, qword [rbp]
mov qword [rbp + 0xe0], rcx
mov qword [rbp], rax
movabs rax, 0x97bcdf852bdb3299
mov rcx, qword [rbp]
mov qword [rbp + 0xe8], rcx
mov qword [rbp], rax
mov rcx, qword [rbp]
mov qword [rbp + 0xf0], rcx
mov rcx, r8
mov qword [rbp], r15
mov rax, qword [rbp]
mov qword [rbp + 0xf8], rax
mov qword [rbp], rdi
mov rax, qword [rbp]
mov qword [rbp + 0x120], rax
mov qword [rbp], rsi
mov rax, qword [rbp]
mov qword [rbp + 0x128], rax
mov qword [rbp], rbx
mov rax, qword [rbp]
mov qword [rbp + 0x130], rax
mov qword [rbp], r15
mov rax, qword [rbp]
vmovdqu ymm0, ymmword [rbp + 0xe0]
mov qword [rbp + 0x138], rax
vpxor ymm1, ymm0, ymmword [rbp + 0x120]
vmovdqa ymmword [rbp + 0xe0], ymm1
vzeroupper
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 0x11]
call rbx
call fcn.1400aed40
test al, al
jne 0x1400b1d3b
call fcn.1400af460
test al, al
jne 0x1400b1d3b
call fcn.1400ae770
test eax, eax
jne 0x1400b1d3b
call fcn.1400b06f0
test al, al
jne 0x1400b1d3b
call fcn.1400ade30
test eax, eax
jne 0x1400b1d3b
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r8d, Ordinal_50
lea rdx, [rbp + 0x60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_VirtualQuery]
test rax, rax
je 0x1400b1d3b
mov rdx, qword [rbp + 0x78]
lea r9, [rbp + 0x18]
mov rcx, qword [rbp + 0x60]
mov r8d, 2
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x1400b1d3b
call fcn.1400aea60
test eax, eax
jne 0x1400b1d3b
call fcn.14028d35c
mov rbx, rax
call fcn.14028d340
cmp rbx, 0x989680
jne 0x1400b1cc0
imul rax, rax, 0x64
jmp 0x1400b1cde
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r13
jg 0x1400b1cef
add rax, 0xf4240
mov qword [rbp + 0x10], rax
jmp 0x1400b1cf3
mov qword [rbp + 0x10], r12
lea rcx, [rbp + 0x10]
call fcn.1400ed2e0
movzx eax, byte [0x1404eda25]
test al, al
je 0x1400b188b
mov rcx, qword [rbp + 0x160]
xor rcx, rsp
call fcn.140290870
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400ab330
int3