Function at 0x1400029c4
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x210
call fcn.140003386
xor eax, eax
mov dword [rsp + 0x64], eax
mov qword [rsp + 0x78], 0
mov dword [rsp + 0x68], eax
mov word [rsp + 0x6c], 0x500
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140002a01
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140002a01
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140002a63
add rsi, r10
mov edi, 0x422ab2ee
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140002a47
cmp edi, 0x5a0a57f0
je 0x140002a6a
test r11, r11
jne 0x140002a2e
jmp 0x140002a01
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r10d, dword [rcx + rdx*4]
add r10, rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x50], rax
xor edi, edi
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
lea rcx, [rsp + 0x68]
mov dl, 2
mov r8d, 0x20
mov r9d, 0x220
call r10
test eax, eax
je 0x140002c0c
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140002ad7
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140002ad7
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140002b39
add rsi, r10
mov edi, 0xcd42a1dc
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140002b1d
cmp edi, 0xc2d6d235
je 0x140002b40
test r11, r11
jne 0x140002b04
jmp 0x140002ad7
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r9d, dword [rcx + rdx*4]
add r9, rax
mov rdx, qword [rsp + 0x78]
lea r8, [rsp + 0x64]
xor ecx, ecx
call r9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140002b7a
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140002b7a
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140002bdc
add rsi, r10
mov edi, 0xca471a51
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140002bc0
cmp edi, 0x8b392569
je 0x140002be3
test r11, r11
jne 0x140002ba7
jmp 0x140002b7a
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, qword [rsp + 0x78]
call rdx
cmp dword [rsp + 0x64], 0
setne dil
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140002c1d
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140002c1d
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140002c7f
add rsi, r10
mov ebp, 0x8dddfeba
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140002c63
cmp ebp, 0x1a731a58
je 0x140002c86
test r11, r11
jne 0x140002c4a
jmp 0x140002c1d
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r8d, dword [rcx + rdx*4]
add r8, rax
lea rdx, [rsp + 0x78]
mov cx, 0x202
call r8
mov esi, 1
test eax, eax
jne 0x14000329f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140002cca
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140002cca
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov ebx, dword [r9 + r11*4]
mov bpl, byte [rax + rbx]
test bpl, bpl
je 0x140002d35
add rbx, r10
mov r14d, 0x676aeb31
movsx ebp, bpl
xor ebp, r14d
imul r14d, ebp, 0x1000193
mov bpl, byte [rbx]
inc rbx
test bpl, bpl
jne 0x140002d13
cmp r14d, 0xdd34a30a
je 0x140002d3c
test r11, r11
jne 0x140002cf7
jmp 0x140002cca
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r9d, dword [rcx + rdx*4]
add r9, rax
lea rcx, [0x1400060b8]
mov r8d, 0xcd
xor edx, edx
call r9
mov byte [0x14000617c], dil
call fcn.1400042b0
mov dword [0x140006181], eax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140002d8b
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140002d8b
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov edi, dword [r9 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x140002ded
add rdi, r10
mov ebp, 0xd4b4deff
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x140002dd1
cmp ebp, 0xc9a115de
je 0x140002df4
test r11, r11
jne 0x140002db8
jmp 0x140002d8b
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r8d, dword [rcx + rdx*4]
add r8, rax
lea rcx, [0x1400060fc]
mov edx, 0x40
call r8
mov dword [rsp + 0x68], 0x40
mov ecx, 3
call fcn.140003352
movsxd rcx, dword [rax + 0x3c]
mov ecx, dword [rax + rcx + 0x88]
mov edx, dword [rax + rcx + 0x20]
add rdx, rax
lea r9, [rax + 1]
xor r8d, r8d
mov r10d, dword [rdx + r8*4]
mov r11b, byte [rax + r10]
test r11b, r11b
je 0x140002e7e
add r10, r9
mov edi, 0xee843613
movsx r11d, r11b
xor r11d, edi
imul edi, r11d, 0x1000193
mov r11b, byte [r10]
inc r10
test r11b, r11b
jne 0x140002e5d
cmp edi, 0x3e01d5b6
je 0x140002e83
inc r8
jmp 0x140002e48
mov edx, r8d
mov r8d, dword [rax + rcx + 0x1c]
mov ecx, dword [rax + rcx + 0x24]
add r8, rax
add rcx, rax
movzx ecx, word [rcx + rdx*2]
mov r8d, dword [r8 + rcx*4]
add r8, rax
lea rcx, [0x1400060bc]
lea rdi, [rsp + 0x68]
mov rdx, rdi
call r8
mov dword [rdi], 0x40
mov ecx, 5
call fcn.140003352
movsxd rcx, dword [rax + 0x3c]
mov ecx, dword [rax + rcx + 0x88]
mov edx, dword [rax + rcx + 0x20]
add rdx, rax
lea r9, [rax + 1]
xor r8d, r8d
mov r10d, dword [rdx + r8*4]
mov r11b, byte [rax + r10]
test r11b, r11b
je 0x140002f11
add r10, r9
mov edi, 0xdf73849c
movsx r11d, r11b
xor r11d, edi
imul edi, r11d, 0x1000193
mov r11b, byte [r10]
inc r10
test r11b, r11b
jne 0x140002ef0
cmp edi, 0x3abab8c3
je 0x140002f16
inc r8
jmp 0x140002edb
mov edx, r8d
mov r8d, dword [rax + rcx + 0x1c]
mov ecx, dword [rax + rcx + 0x24]
add r8, rax
add rcx, rax
movzx ecx, word [rcx + rdx*2]
mov r8d, dword [r8 + rcx*4]
add r8, rax
lea rcx, [0x14000613c]
lea rdx, [rsp + 0x68]
call r8
call fcn.140001cc4
mov cx, 0xdf68
call fcn.140002474
test al, al
je 0x14000329f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140002f69
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140002f69
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140002fcb
add rsi, r10
mov edi, 0xa9bb219e
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140002faf
cmp edi, 0x14af399f
je 0x140002fd2
test r11, r11
jne 0x140002f96
jmp 0x140002f69
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r9d, dword [rcx + rdx*4]
add r9, rax
mov esi, 1
mov ecx, 2
mov edx, 1
xor r8d, r8d
call r9
mov rdi, rax
cmp edi, 0xffffffff
je 0x14000329f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x14000301e
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x14000301e
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140003080
add rsi, r10
mov ebp, 0x4fdb74c1
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140003064
cmp ebp, 0xf3b7685c
je 0x140003087
test r11, r11
jne 0x14000304b
jmp 0x14000301e
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov ecx, 0x1010101
call rdx
mov dword [rsp + 0x6c], eax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x1400030bc
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x1400030bc
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x14000311e
add rsi, r10
mov ebp, 0xab1e74c5
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140003102
cmp ebp, 0x75059415
je 0x140003125
test r11, r11
jne 0x1400030e9
jmp 0x1400030bc
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov cx, 0x163
call rdx
mov word [rsp + 0x6a], ax
mov word [rsp + 0x68], 2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140003161
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140003161
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x1400031c3
add rsi, r10
mov ebp, 0x8e4102e3
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x1400031a7
cmp ebp, 0xb9bb44b7
je 0x1400031ca
test r11, r11
jne 0x14000318e
jmp 0x140003161
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r9d, dword [rcx + rdx*4]
add r9, rax
movsxd rdi, edi
lea rdx, [rsp + 0x68]
mov rcx, rdi
mov r8d, 0x10
call r9
xor esi, esi
test eax, eax
jg 0x14000329f
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140003213
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140003213
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140003275
add rsi, r10
mov ebp, 0x698d2294
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140003259
cmp ebp, 0x1ac28e91
je 0x14000327c
test r11, r11
jne 0x140003240
jmp 0x140003213
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, rdi
call rdx
mov esi, 1
mov eax, esi
add rsp, 0x210
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret