Function at 0x140075ed0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rdi
sub rsp, 0x60
mov rdi, qword [0x140218718]
mov qword [rax + 0x18], rbx
mov qword [rax - 0x10], rbp
mov qword [rax - 0x18], rsi
mov qword [rax - 0x20], r12
mov qword [rax - 0x28], r13
mov qword [rax - 0x30], r14
mov qword [rax - 0x38], r15
test rdi, rdi
jne 0x1400760d9
mov rax, qword gs:[0x60]
xor esi, esi
mov r11d, 0xbc7f2092
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r13, qword [rax]
mov r14, r13
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [r14 + 0x58]
movd eax, xmm0
movups xmmword [rsp + 0x20], xmm0
sub ax, 8
test esi, esi
je 0x140075f8d
mov rdi, qword [rsp + 0x28]
mov r8d, 0xd4ade2ea
movzx eax, ax
shr rax, 1
lea r9, [rdi + rax*2]
cmp rdi, r9
je 0x140075f84
movsx eax, byte [rdi]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
add rdi, 2
xor edx, r8d
imul r8d, edx, 0x1000193
cmp rdi, r9
jne 0x140075f60
cmp r8d, esi
jne 0x1400760ba
mov r10, qword [r14 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov r12, rcx
mov ebx, ecx
shr r12, 0x20
add rbx, r10
cmp rbx, r10
je 0x1400760ba
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400760ba
mov r15d, dword [rbx + 0x20]
dec r9d
mov r8d, 0xd4ade2ea
lea rax, [r15 + r9*4]
mov edi, dword [rax + r10]
add rdi, r10
movzx eax, byte [rdi]
inc rdi
test al, al
je 0x140076006
movsx ecx, al
lea rdi, [rdi + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [rdi - 1]
cmova edx, ecx
xor edx, r8d
imul r8d, edx, 0x1000193
test al, al
jne 0x140075fe1
cmp r8d, r11d
je 0x140076015
test r9d, r9d
jne 0x140075fc3
jmp 0x1400760ba
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov edi, dword [rcx + rdx*4]
add rdi, r10
cmp rdi, rbx
jbe 0x1400760d2
lea rax, [rbx + r12]
cmp rdi, rax
jae 0x1400760d2
movzx edx, byte [rdi]
mov esi, 0xd4ade2ea
mov r11d, esi
cmp dl, 0x2e
je 0x140076077
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [rdi + 1]
cmova ecx, eax
inc rdi
xor ecx, esi
imul esi, ecx, 0x1000193
cmp dl, 0x2e
jne 0x140076052
movzx edx, byte [rdi + 1]
inc rdi
test dl, dl
je 0x1400760b6
nop dword [rax]
nop word [rax + rax]
movsx eax, dl
lea rdi, [rdi + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [rdi]
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
test dl, dl
jne 0x140076090
mov r14, qword [r13]
mov rax, qword [r14]
mov r14, rax
cmp rax, r13
je 0x1400760d0
cmp qword [rax + 0x30], 0
jne 0x140075f30
xor edi, edi
mov qword [0x140218718], rdi
mov edx, 8
xor ecx, ecx
mov r8d, 0x1000
lea r9d, [rdx - 4]
call rdi
mov rdx, rax
mov qword [rsp + 0x78], rax
mov rdi, rax
mov ecx, 0x4d0
xor eax, eax
rep stosb byte [rdi], al
mov dword [rdx + 0x30], 0x100010
mov rbx, qword [0x140218688]
test rbx, rbx
jne 0x1400762e9
mov rcx, qword gs:[0x60]
xor ebp, ebp
mov r11d, 0xa4a7d872
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r13, qword [rcx]
mov r14, r13
nop word [rax + rax]
movups xmm0, xmmword [r14 + 0x58]
movd eax, xmm0
movups xmmword [rsp + 0x20], xmm0
sub ax, 8
test ebp, ebp
je 0x14007619d
mov rdi, qword [rsp + 0x28]
mov r8d, 0x3a476051
movzx eax, ax
shr rax, 1
lea r9, [rdi + rax*2]
cmp rdi, r9
je 0x140076194
movsx eax, byte [rdi]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
add rdi, 2
xor edx, r8d
imul r8d, edx, 0x1000193
cmp rdi, r9
jne 0x140076170
cmp r8d, ebp
jne 0x1400762ca
mov r10, qword [r14 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov r12, rcx
mov esi, ecx
shr r12, 0x20
add rsi, r10
cmp rsi, r10
je 0x1400762ca
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x1400762ca
mov r15d, dword [rsi + 0x20]
dec r9d
mov r8d, 0x3a476051
lea rax, [r15 + r9*4]
mov edi, dword [rax + r10]
add rdi, r10
movzx edx, byte [rdi]
inc rdi
test dl, dl
je 0x140076218
movsx eax, dl
lea rdi, [rdi + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [rdi - 1]
cmova ecx, eax
xor ecx, r8d
imul r8d, ecx, 0x1000193
test dl, dl
jne 0x1400761f1
cmp r8d, r11d
je 0x140076227
test r9d, r9d
jne 0x1400761d3
jmp 0x1400762ca
mov ecx, dword [rsi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov ebx, dword [rcx + rdx*4]
add rbx, r10
cmp rbx, rsi
jbe 0x1400762e2
lea rax, [rsi + r12]
cmp rbx, rax
jae 0x1400762e2
movzx edx, byte [rbx]
mov ebp, 0x3a476051
mov r11d, ebp
cmp dl, 0x2e
je 0x140076295
nop dword [rax]
nop dword [rax + rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [rbx + 1]
cmova ecx, eax
inc rbx
xor ecx, ebp
imul ebp, ecx, 0x1000193
cmp dl, 0x2e
jne 0x140076270
movzx edx, byte [rbx + 1]
inc rbx
test dl, dl
je 0x1400762c6
movsx eax, dl
lea rbx, [rbx + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [rbx]
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
test dl, dl
jne 0x1400762a0
mov r14, qword [r13]
mov rax, qword [r14]
mov r14, rax
cmp rax, r13
je 0x1400762e0
cmp qword [rax + 0x30], 0
jne 0x140076140
xor ebx, ebx
mov qword [0x140218688], rbx
mov rdx, qword [0x140218720]
test rdx, rdx
jne 0x1400764f3
mov rax, qword gs:[0x60]
xor r14d, r14d
mov r11d, 0x8bb6d17e
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rax, qword [rax]
mov qword [rsp + 0x70], rax
mov r15, rax
nop
movups xmm0, xmmword [r15 + 0x58]
movd eax, xmm0
movups xmmword [rsp + 0x20], xmm0
sub ax, 8
test r14d, r14d
je 0x14007637e
mov rdi, qword [rsp + 0x28]
mov r8d, 0xaf4880ab
movzx eax, ax
shr rax, 1
lea r9, [rdi + rax*2]
cmp rdi, r9
je 0x140076375
movsx eax, byte [rdi]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
add rdi, 2
xor edx, r8d
imul r8d, edx, 0x1000193
cmp rdi, r9
jne 0x140076351
cmp r8d, r14d
jne 0x1400764d2
mov r10, qword [r15 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rcx, qword [rax + r10 + 0x88]
mov r13, rcx
mov esi, ecx
shr r13, 0x20
add rsi, r10
cmp rsi, r10
je 0x1400764d2
mov r9d, dword [rsi + 0x18]
test r9d, r9d
je 0x1400764d2
mov r12d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xaf4880ab
lea rax, [r12 + r9*4]
mov edx, dword [rax + r10]
add rdx, r10
movzx edi, byte [rdx]
inc rdx
test dil, dil
je 0x14007640b
nop
movsx eax, dil
lea rdx, [rdx + 1]
sub dil, 0x41
mov ecx, eax
or ecx, 0x20
cmp dil, 0x19
movzx edi, byte [rdx - 1]
cmova ecx, eax
xor ecx, r8d
imul r8d, ecx, 0x1000193
test dil, dil
jne 0x1400763e0
cmp r8d, r11d
je 0x14007641a
test r9d, r9d
jne 0x1400763c0
jmp 0x1400764d2
mov ecx, dword [rsi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r10
mov edx, dword [rcx + rdx*4]
add rdx, r10
cmp rdx, rsi
jbe 0x1400764ec
lea rax, [rsi + r13]
cmp rdx, rax
jae 0x1400764ec
movzx edi, byte [rdx]
mov r14d, 0xaf4880ab
mov r11d, r14d
cmp dil, 0x2e
je 0x14007648b
nop dword [rax]
movsx eax, dil
sub dil, 0x41
mov ecx, eax
or ecx, 0x20
cmp dil, 0x19
movzx edi, byte [rdx + 1]
cmova ecx, eax
inc rdx
xor ecx, r14d
imul r14d, ecx, 0x1000193
cmp dil, 0x2e
jne 0x140076460
movzx edi, byte [rdx + 1]
inc rdx
test dil, dil
je 0x1400764ca
nop word [rax + rax]
movsx eax, dil
lea rdx, [rdx + 1]
sub dil, 0x41
mov ecx, eax
or ecx, 0x20
cmp dil, 0x19
movzx edi, byte [rdx]
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
test dil, dil
jne 0x1400764a0
mov rax, qword [rsp + 0x70]
mov r15, qword [rax]
mov rax, qword [r15]
mov r15, rax
cmp rax, qword [rsp + 0x70]
je 0x1400764ea
cmp qword [rax + 0x30], 0
jne 0x140076320
xor edx, edx
mov qword [0x140218720], rdx
call rdx
mov rdi, qword [rsp + 0x78]
mov rcx, rax
mov rdx, rdi
call rbx
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
mov r13, qword [rsp + 0x40]
mov r12, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x80]
test eax, eax
je 0x140076550
cmp qword [rdi + 0x48], 0
jne 0x140076550
cmp qword [rdi + 0x50], 0
jne 0x140076550
cmp qword [rdi + 0x58], 0
jne 0x140076550
cmp qword [rdi + 0x60], 0
jne 0x140076550
xor al, al
add rsp, 0x60
pop rdi
ret
mov al, 1
add rsp, 0x60
pop rdi
ret