Function at 0x140001ba4
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x210
call fcn.140002562
xor eax, eax
mov dword [rsp + 0x64], eax
mov qword [rsp + 0x78], 0
mov dword [rsp + 0x68], eax
mov word [rsp + 0x6c], 0x500
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001be1
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001be1
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140001c43
add rsi, r10
mov edi, 0x191df183
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140001c27
cmp edi, 0xa5b26b41
je 0x140001c4a
test r11, r11
jne 0x140001c0e
jmp 0x140001be1
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r10d, dword [rcx + rdx*4]
add r10, rax
lea rax, [rsp + 0x78]
mov qword [rsp + 0x50], rax
xor edi, edi
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x40], edi
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
lea rcx, [rsp + 0x68]
mov dl, 2
mov r8d, 0x20
mov r9d, 0x220
call r10
test eax, eax
je 0x140001dec
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001cb7
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001cb7
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140001d19
add rsi, r10
mov edi, 0x1606d8ad
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140001cfd
cmp edi, 0x84031edc
je 0x140001d20
test r11, r11
jne 0x140001ce4
jmp 0x140001cb7
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r9d, dword [rcx + rdx*4]
add r9, rax
mov rdx, qword [rsp + 0x78]
lea r8, [rsp + 0x64]
xor ecx, ecx
call r9
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001d5a
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001d5a
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140001dbc
add rsi, r10
mov edi, 0x110b4dfc
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140001da0
cmp edi, 0xf707cede
je 0x140001dc3
test r11, r11
jne 0x140001d87
jmp 0x140001d5a
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, qword [rsp + 0x78]
call rdx
cmp dword [rsp + 0x64], 0
setne dil
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001dfd
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001dfd
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140001e5f
add rsi, r10
mov ebp, 0x59fc431b
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140001e43
cmp ebp, 0xa451cdbd
je 0x140001e66
test r11, r11
jne 0x140001e2a
jmp 0x140001dfd
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r8d, dword [rcx + rdx*4]
add r8, rax
lea rdx, [rsp + 0x78]
mov cx, 0x202
call r8
mov esi, 1
test eax, eax
jne 0x14000247a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001eaa
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001eaa
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov ebx, dword [r9 + r11*4]
mov bpl, byte [rax + rbx]
test bpl, bpl
je 0x140001f15
add rbx, r10
mov r14d, 0x692d8e42
movsx ebp, bpl
xor ebp, r14d
imul r14d, ebp, 0x1000193
mov bpl, byte [rbx]
inc rbx
test bpl, bpl
jne 0x140001ef3
cmp r14d, 0x390c68e5
je 0x140001f1c
test r11, r11
jne 0x140001ed7
jmp 0x140001eaa
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r9d, dword [rcx + rdx*4]
add r9, rax
lea rcx, [0x1400050b8]
mov r8d, 0xcd
xor edx, edx
call r9
mov byte [0x14000517c], dil
call fcn.140002f00
mov dword [0x140005181], eax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140001f6b
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140001f6b
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov edi, dword [r9 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x140001fcd
add rdi, r10
mov ebp, 0xe14d098
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x140001fb1
cmp ebp, 0xaee8d24f
je 0x140001fd4
test r11, r11
jne 0x140001f98
jmp 0x140001f6b
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r8d, dword [rcx + rdx*4]
add r8, rax
lea rcx, [0x1400050fc]
mov edx, 0x40
call r8
mov dword [rsp + 0x68], 0x40
mov ecx, 3
call fcn.14000252e
movsxd rcx, dword [rax + 0x3c]
mov ecx, dword [rax + rcx + 0x88]
mov edx, dword [rax + rcx + 0x20]
add rdx, rax
lea r9, [rax + 1]
xor r8d, r8d
mov r10d, dword [rdx + r8*4]
mov r11b, byte [rax + r10]
test r11b, r11b
je 0x14000205e
add r10, r9
mov edi, 0x5e137394
movsx r11d, r11b
xor r11d, edi
imul edi, r11d, 0x1000193
mov r11b, byte [r10]
inc r10
test r11b, r11b
jne 0x14000203d
cmp edi, 0x2970b6d1
je 0x140002063
inc r8
jmp 0x140002028
mov edx, r8d
mov r8d, dword [rax + rcx + 0x1c]
mov ecx, dword [rax + rcx + 0x24]
add r8, rax
add rcx, rax
movzx ecx, word [rcx + rdx*2]
mov r8d, dword [r8 + rcx*4]
add r8, rax
lea rcx, [0x1400050bc]
lea rdi, [rsp + 0x68]
mov rdx, rdi
call r8
mov dword [rdi], 0x40
mov ecx, 5
call fcn.14000252e
movsxd rcx, dword [rax + 0x3c]
mov ecx, dword [rax + rcx + 0x88]
mov edx, dword [rax + rcx + 0x20]
add rdx, rax
lea r9, [rax + 1]
xor r8d, r8d
mov r10d, dword [rdx + r8*4]
mov r11b, byte [rax + r10]
test r11b, r11b
je 0x1400020f1
add r10, r9
mov edi, 0xb1d96e7f
movsx r11d, r11b
xor r11d, edi
imul edi, r11d, 0x1000193
mov r11b, byte [r10]
inc r10
test r11b, r11b
jne 0x1400020d0
cmp edi, 0x79b0bb8c
je 0x1400020f6
inc r8
jmp 0x1400020bb
mov edx, r8d
mov r8d, dword [rax + rcx + 0x1c]
mov ecx, dword [rax + rcx + 0x24]
add r8, rax
add rcx, rax
movzx ecx, word [rcx + rdx*2]
mov r8d, dword [r8 + rcx*4]
add r8, rax
lea rcx, [0x14000513c]
lea rdx, [rsp + 0x68]
call r8
mov cx, 0xdf68
call fcn.140001654
test al, al
je 0x14000247a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140002144
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140002144
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x1400021a6
add rsi, r10
mov edi, 0x62e44a4e
movsx ebx, bl
xor ebx, edi
imul edi, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x14000218a
cmp edi, 0x3d898ecf
je 0x1400021ad
test r11, r11
jne 0x140002171
jmp 0x140002144
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r9d, dword [rcx + rdx*4]
add r9, rax
mov esi, 1
mov ecx, 2
mov edx, 1
xor r8d, r8d
call r9
mov rdi, rax
cmp edi, 0xffffffff
je 0x14000247a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x1400021f9
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x1400021f9
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x14000225b
add rsi, r10
mov ebp, 0x2c4ff7b5
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x14000223f
cmp ebp, 0xb428ee8
je 0x140002262
test r11, r11
jne 0x140002226
jmp 0x1400021f9
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov ecx, 0x1010101
call rdx
mov dword [rsp + 0x6c], eax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x140002297
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x140002297
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x1400022f9
add rsi, r10
mov ebp, 0x1a2ad6db
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x1400022dd
cmp ebp, 0x79302c3
je 0x140002300
test r11, r11
jne 0x1400022c4
jmp 0x140002297
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov cx, 0x163
call rdx
mov word [rsp + 0x6a], ax
mov word [rsp + 0x68], 2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x14000233c
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x14000233c
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x14000239e
add rsi, r10
mov ebp, 0x1c75f7f
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140002382
cmp ebp, 0xf7ecf043
je 0x1400023a5
test r11, r11
jne 0x140002369
jmp 0x14000233c
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov r9d, dword [rcx + rdx*4]
add r9, rax
movsxd rdi, edi
lea rdx, [rsp + 0x68]
mov rcx, rdi
mov r8d, 0x10
call r9
xor esi, esi
test eax, eax
jg 0x14000247a
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd rdx, dword [rax + 0x3c]
mov edx, dword [rax + rdx + 0x88]
test rdx, rdx
je 0x1400023ee
mov r8d, dword [rax + rdx + 0x18]
test r8, r8
je 0x1400023ee
mov r9d, dword [rax + rdx + 0x20]
add r9, rax
lea r10, [rax + 1]
dec r8
mov r11d, r8d
mov esi, dword [r9 + r11*4]
mov bl, byte [rax + rsi]
test bl, bl
je 0x140002450
add rsi, r10
mov ebp, 0xcd45be26
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rsi]
inc rsi
test bl, bl
jne 0x140002434
cmp ebp, 0x152b1e6b
je 0x140002457
test r11, r11
jne 0x14000241b
jmp 0x1400023ee
mov ecx, dword [rax + rdx + 0x1c]
mov edx, dword [rax + rdx + 0x24]
add rcx, rax
add rdx, rax
movzx edx, word [rdx + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rax
mov rcx, rdi
call rdx
mov esi, 1
mov eax, esi
add rsp, 0x210
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
ret