Function at 0x140073080
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x30], xmm0
lea r12, [rsp + 0x78]
movabs r13, 0xff00ff00ff00ff00
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], r12
mov rbx, qword [r12]
xor rbx, r13
mov qword [rsp + 0x30], rbx
mov qword [r12], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x100
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x1400f6c50]
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x100
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x1400f6c58]
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x100
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x1400f6c60]
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
mov edx, 0x100
call qword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov edx, reloc.WS2_32.dll_ntohs
mov rcx, qword [0x1400f6c68]
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov rcx, qword [0x1400f6cd0]
test rcx, rcx
jne 0x140073311
xor r11d, r11d
mov r10d, 0xd44fea68
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbp, qword [rax]
mov rsi, rbp
nop word [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movups xmmword [rsp + 0x20], xmm0
movd eax, xmm0
sub ax, 8
test r11d, r11d
je 0x1400731ed
mov rcx, qword [rsp + 0x28]
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0x42f3c9c6
cmp rcx, r8
je 0x1400731e4
nop
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0x1000193
add rcx, 2
cmp rcx, r8
jne 0x1400731d0
cmp edx, r11d
jne 0x1400732ed
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r15, rcx
shr r15, 0x20
mov ebx, ecx
add rbx, r9
cmp rbx, r9
je 0x1400732ed
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400732ed
mov r14d, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
lea rax, [r14 + r8*4]
mov eax, dword [rax + r9]
add rax, r9
mov edx, 0x42f3c9c6
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x140073266
nop dword [rax]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax]
lea rax, [rax + 1]
test cl, cl
jne 0x140073250
cmp edx, r10d
je 0x140073272
test r8d, r8d
jne 0x140073230
jmp 0x1400732ed
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rbx + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov ecx, dword [rcx + rax*4]
add rcx, r9
cmp rcx, rbx
jbe 0x140073305
lea rax, [r15 + rbx]
cmp rcx, rax
jae 0x140073305
mov r11d, 0x42f3c9c6
mov r10d, r11d
movzx eax, byte [rcx]
cmp al, 0x2e
je 0x1400732c7
nop word [rax + rax]
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
inc rcx
movzx eax, byte [rcx]
cmp al, 0x2e
jne 0x1400732b0
inc rcx
movzx eax, byte [rcx]
test al, al
je 0x1400732e9
movsx eax, al
xor eax, r10d
imul r10d, eax, 0x1000193
lea rcx, [rcx + 1]
movzx eax, byte [rcx]
test al, al
jne 0x1400732d1
mov rsi, qword [rbp]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, rbp
je 0x140073303
cmp qword [rax + 0x30], 0
jne 0x1400731a0
xor ecx, ecx
mov qword [0x1400f6cd0], rcx
mov rbx, qword [rsp + 0x30]
call rcx
nop
xor rbx, r13
mov qword [r12], rbx
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret