Function at 0x1400017c0
Capabilities:
Access peb ldr_data
Encode data using xor
Get process filename
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov r13, rcx
mov rax, qword gs:[0x60]
mov r8, qword [rax + 0x18]
add r8, 0x10
mov r8, qword [r8]
mov rax, qword [r8 + 0x30]
movsxd rcx, dword [rax + 0x3c]
mov ebp, dword [rcx + rax + 0x88]
test rbp, rbp
je 0x1400017e4
mov edx, dword [rax + rbp + 0x18]
lea rbx, [rax + 1]
jmp 0x14000181d
mov esi, 0xa465f7bd
cmp esi, 0xb4997e14
je 0x140001858
sub rdx, 1
jb 0x1400017e4
mov ecx, dword [rax + rbp + 0x20]
add rcx, rax
mov edi, dword [rcx + rdx*4]
mov cl, byte [rax + rdi]
test cl, cl
je 0x140001810
add rdi, rbx
mov esi, 0xa465f7bd
nop dword [rax]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
movzx ecx, byte [rdi]
add rdi, 1
test cl, cl
jne 0x140001840
jmp 0x140001815
mov ecx, dword [rax + rbp + 0x1c]
mov ebp, dword [rax + rbp + 0x24]
add rcx, rax
add rbp, rax
mov edx, edx
movzx edx, word [rbp + rdx*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
xor ecx, ecx
call rdx
cmp qword [r13 + 0x38], 8
jb 0x140001884
mov rcx, qword [r13 + 0x20]
jmp 0x140001888
lea rcx, [r13 + 0x20]
movabs rdx, 0x4000000050
mov qword [r13 + 0x58], rdx
lea rdx, [0x1400016f0]
mov qword [r13 + 0x60], rdx
mov qword [r13 + 0x68], 0
mov qword [r13 + 0x70], rax
xorps xmm0, xmm0
movups xmmword [r13 + 0x78], xmm0
movups xmmword [r13 + 0x88], xmm0
mov qword [r13 + 0x98], rcx
mov qword [r13 + 0xa0], 0
mov rax, qword gs:[0x60]
mov r8, qword [rax + 0x18]
add r8, 0x10
mov r8, qword [r8]
mov rax, qword [r8 + 0x30]
movsxd rcx, dword [rax + 0x3c]
mov ebp, dword [rcx + rax + 0x88]
test rbp, rbp
je 0x1400018e0
mov edx, dword [rax + rbp + 0x18]
lea rbx, [rax + 1]
jmp 0x14000191d
mov esi, 0x6a5f444d
cmp esi, 0x6a55c0c6
je 0x140001958
sub rdx, 1
jb 0x1400018e0
mov ecx, dword [rax + rbp + 0x20]
add rcx, rax
mov edi, dword [rcx + rdx*4]
mov cl, byte [rax + rdi]
test cl, cl
je 0x140001910
add rdi, rbx
mov esi, 0x6a5f444d
nop dword [rax]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
movzx ecx, byte [rdi]
add rdi, 1
test cl, cl
jne 0x140001940
jmp 0x140001915
lea rcx, [r13 + 0x58]
mov ebx, dword [rax + rbp + 0x1c]
mov ebp, dword [rax + rbp + 0x24]
add rbx, rax
add rbp, rax
mov edx, edx
movzx edx, word [rbp + rdx*2]
mov edx, dword [rbx + rdx*4]
add rdx, rax
call rdx
lea rdi, [0x140113ff0]
mov rcx, rdi
mov edx, 0x32
mov r8d, 0x1f4
call fcn.140021cc0
mov r14d, eax
mov rcx, rdi
mov edx, 0x32
mov r8d, 0x1f4
call fcn.140021cc0
mov r15d, eax
mov rcx, rdi
mov edx, 0x32
mov r8d, 0x1f4
call fcn.140021cc0
mov r12d, eax
mov rcx, rdi
mov edx, 0x32
mov r8d, 0x1f4
call fcn.140021cc0
mov r8, qword [r13]
mov r9, qword [r13 + 0x18]
mov rcx, qword gs:[0x60]
mov r10, qword [rcx + 0x18]
add r10, 0x10
mov r10, qword [r10]
mov rcx, qword [r10 + 0x30]
movsxd rdx, dword [rcx + 0x3c]
mov ebp, dword [rdx + rcx + 0x88]
test rbp, rbp
je 0x1400019ee
mov ebx, dword [rcx + rbp + 0x18]
lea r11, [rcx + 1]
jmp 0x140001a1d
mov edi, 0xe7648642
cmp edi, 0x8e4067d8
je 0x140001a58
sub rbx, 1
jb 0x1400019ee
mov edx, dword [rcx + rbp + 0x20]
add rdx, rcx
mov esi, dword [rdx + rbx*4]
mov dl, byte [rcx + rsi]
test dl, dl
je 0x140001a10
add rsi, r11
mov edi, 0xe7648642
nop dword [rax]
movsx edx, dl
xor edx, edi
imul edi, edx, 0x1000193
movzx edx, byte [rsi]
add rsi, 1
test dl, dl
jne 0x140001a40
jmp 0x140001a15
cmp r9, 8
cmovb r8, r13
mov edx, dword [rcx + rbp + 0x1c]
mov ebp, dword [rcx + rbp + 0x24]
add rdx, rcx
add rbp, rcx
mov ebx, ebx
movzx ebp, word [rbp + rbx*2]
mov ebp, dword [rdx + rbp*4]
add rbp, rcx
mov rcx, qword [r13 + 0x70]
mov rdx, qword [r13 + 0x98]
mov qword [rsp + 0x50], rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov dword [rsp + 0x38], r14d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], eax
mov qword [rsp + 0x58], 0
xor ecx, ecx
mov r9d, 0xcf0000
call rbp
mov qword [r13 + 0x50], rax
mov rcx, qword gs:[0x60]
mov r8, qword [rcx + 0x18]
add r8, 0x10
mov r8, qword [r8]
mov rcx, qword [r8 + 0x30]
movsxd rdx, dword [rcx + 0x3c]
mov edi, dword [rdx + rcx + 0x88]
test rdi, rdi
je 0x140001ace
mov ebp, dword [rcx + rdi + 0x18]
lea r9, [rcx + 1]
jmp 0x140001afd
mov edx, 0xe45576ff
cmp edx, 0xbc07803e
je 0x140001b38
sub rbp, 1
jb 0x140001ace
mov edx, dword [rcx + rdi + 0x20]
add rdx, rcx
mov esi, dword [rdx + rbp*4]
mov bl, byte [rcx + rsi]
test bl, bl
je 0x140001af0
add rsi, r9
mov edx, 0xe45576ff
nop dword [rax]
movsx ebx, bl
xor ebx, edx
imul edx, ebx, 0x1000193
movzx ebx, byte [rsi]
add rsi, 1
test bl, bl
jne 0x140001b20
jmp 0x140001af5
mov edx, dword [rcx + rdi + 0x1c]
mov ebx, dword [rcx + rdi + 0x24]
add rdx, rcx
add rbx, rcx
mov ebp, ebp
movzx ebp, word [rbx + rbp*2]
mov ebp, dword [rdx + rbp*4]
add rbp, rcx
mov rcx, rax
xor edx, edx
call rbp
mov rax, qword gs:[0x60]
mov r8, qword [rax + 0x18]
add r8, 0x10
mov r8, qword [r8]
mov rax, qword [r8 + 0x30]
movsxd rcx, dword [rax + 0x3c]
mov ebp, dword [rcx + rax + 0x88]
test rbp, rbp
je 0x140001b6a
mov edx, dword [rax + rbp + 0x18]
lea rbx, [rax + 1]
jmp 0x140001b9d
mov esi, 0x806c7817
cmp esi, 0xaef4b5ba
je 0x140001bd8
sub rdx, 1
jb 0x140001b6a
mov ecx, dword [rax + rbp + 0x20]
add rcx, rax
mov edi, dword [rcx + rdx*4]
mov cl, byte [rax + rdi]
test cl, cl
je 0x140001b90
add rdi, rbx
mov esi, 0x806c7817
nop dword [rax]
movsx ecx, cl
xor ecx, esi
imul esi, ecx, 0x1000193
movzx ecx, byte [rdi]
add rdi, 1
test cl, cl
jne 0x140001bc0
jmp 0x140001b95
mov ecx, dword [rax + rbp + 0x1c]
mov ebp, dword [rax + rbp + 0x24]
add rcx, rax
add rbp, rax
mov edx, edx
movzx edx, word [rbp + rdx*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, qword [r13 + 0x50]
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp rdx