Function at 0x14002ae50
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
movabs rdx, 0x39e284c902fcc9c9
movabs rcx, 0xe8a3516040b383b6
mov qword [rsp + 0x60], rdx
movabs rax, 0xc01c9762aabb5f75
mov qword [rsp + 0x40], rax
movabs rsi, 0xa971e50dccc93a05
mov qword [rsp + 0x68], rcx
movabs rax, 0xb324ecc7fd6a44ac
mov qword [rsp + 0x48], rax
movabs r14, 0x935689b4884a23c2
mov qword [rbp - 0x60], rdx
movabs rax, 0x4ecaede3bf00eaf4
mov qword [rsp + 0x50], rax
lea rdx, [rsp + 0x40]
mov qword [rbp - 0x58], rcx
movabs rax, 0xbbcea680647fd8c4
mov qword [rsp + 0x58], rax
lea rcx, [0x14007f960]
mov qword [rbp - 0x80], rsi
movabs r13, 0x2dea9497da668b87
mov qword [rbp - 0x78], r14
movabs r12, 0x9be088ae0f1cbdac
movdqa xmm0, xmmword [rbp - 0x80]
pxor xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
movdqa xmm0, xmmword [rbp - 0x60]
pxor xmm0, xmmword [rsp + 0x60]
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r12
movdqa xmm1, xmmword [rbp - 0x70]
pxor xmm1, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x50], xmm1
movdqa xmmword [rsp + 0x60], xmm0
call fcn.14000d920
mov rcx, rax
call fcn.14000dbe0
call fcn.1400279c0
movabs r15, 0x8914896fadba5361
test eax, eax
je 0x14002b150
call fcn.140020e30
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14002b007
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14002b007
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14002b002
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14002afe0
cmp r8d, 0x23a979e4
je 0x14002b00c
test r9d, r9d
jne 0x14002afc0
mov rax, qword [rax]
jmp 0x14002af90
mov ecx, dword [rdi + 0x24]
lea r8, str.security
add rcx, r10
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], r14
movdqa xmm0, xmmword [rbp - 0x40]
mov qword [rbp - 0x30], r13
movzx edx, word [rcx + r9*2]
mov r9d, 0x110
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov qword [rbp - 0x28], r12
movdqa xmm1, xmmword [rbp - 0x30]
mov eax, dword [rcx + rdx*4]
movabs rcx, 0xe738e894f13942a7
mov qword [rsp + 0x28], rcx
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x20], r15
movabs rcx, 0x2d9ef5f2b205a6ee
pxor xmm0, xmmword [rsp + 0x20]
add rax, r10
mov qword [rsp + 0x30], rcx
xor ecx, ecx
mov qword [rsp + 0x38], r12
pxor xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm1
movdqa xmmword [rsp + 0x20], xmm0
call rax
call fcn.140022a10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14002b127
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14002b127
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14002b122
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14002b100
cmp r8d, 0xcded1a85
je 0x14002b12c
test r9d, r9d
jne 0x14002b0e0
mov rax, qword [rax]
jmp 0x14002b0b0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 0x45
add rax, r10
call rax
nop word [rax + rax]
mov qword [rbp - 0x48], r14
lea rdx, [rsp + 0x70]
movabs rax, 0x935689b4882942a7
mov qword [rbp - 0x50], rsi
movdqa xmm0, xmmword [rbp - 0x50]
lea rcx, [0x14007f960]
mov qword [rsp + 0x78], rax
movabs r14, 0x8915807ebfa84a0f
mov qword [rsp + 0x70], r14
pxor xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x70], xmm0
call fcn.14000d920
mov rcx, rax
call fcn.14000dbe0
call fcn.140026d10
movabs rsi, 0xf62fecd8fc3e42a0
test eax, eax
je 0x14002b38a
call fcn.140020e30
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14002b247
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14002b247
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14002b242
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14002b220
cmp r8d, 0x23a979e4
je 0x14002b24c
test r9d, r9d
jne 0x14002b200
mov rax, qword [rax]
jmp 0x14002b1d0
mov ecx, dword [rdi + 0x24]
lea r8, str.security
add rcx, r10
mov qword [rbp - 0x10], r13
mov qword [rbp - 8], r12
movzx edx, word [rcx + r9*2]
mov r9d, 0x110
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
movabs rcx, 0xa971e50dccc93a05
mov qword [rbp - 0x20], rcx
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x30], r13
movabs rcx, 0x935689b4884a23c2
mov qword [rbp - 0x18], rcx
add rax, r10
movdqa xmm0, xmmword [rbp - 0x20]
xor ecx, ecx
mov qword [rsp + 0x38], r12
movdqa xmm1, xmmword [rsp + 0x30]
pxor xmm1, xmmword [rbp - 0x10]
mov qword [rsp + 0x20], r15
mov qword [rsp + 0x28], rsi
pxor xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmmword [rsp + 0x30], xmm1
call rax
call fcn.140022a10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14002b367
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14002b367
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14002b362
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14002b340
cmp r8d, 0xcded1a85
je 0x14002b36c
test r9d, r9d
jne 0x14002b320
mov rax, qword [rax]
jmp 0x14002b2f0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 0x45
add rax, r10
call rax
mov qword [rsp + 0x30], r13
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x38], r12
lea rcx, [0x14007f960]
movdqa xmm1, xmmword [rsp + 0x30]
movabs rbx, 0xa971e50dccc93a05
mov qword [rsp + 0x20], r14
movabs rdi, 0x935689b4884a23c2
mov qword [rsp + 0x28], rsi
mov qword [rbp], rbx
mov qword [rbp + 8], rdi
movdqa xmm0, xmmword [rbp]
pxor xmm0, xmmword [rsp + 0x20]
mov qword [rbp + 0x10], r13
mov qword [rbp + 0x18], r12
pxor xmm1, xmmword [rbp + 0x10]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmmword [rsp + 0x30], xmm1
call fcn.14000d920
mov rcx, rax
call fcn.14000dbe0
call fcn.140027040
movabs rsi, 0xf724e8c1ef2442b4
test eax, eax
jne 0x14002b41d
call fcn.140027350
test eax, eax
je 0x14002b60e
call fcn.140020e30
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14002b4b7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14002b4b7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14002b4b2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14002b490
cmp r8d, 0x23a979e4
je 0x14002b4bc
test r9d, r9d
jne 0x14002b470
mov rax, qword [rax]
jmp 0x14002b440
mov ecx, dword [rdi + 0x24]
lea r8, str.security
add rcx, r10
mov qword [rbp + 0x30], r13
mov qword [rbp + 0x38], r12
movdqa xmm1, xmmword [rbp + 0x30]
movzx edx, word [rcx + r9*2]
mov r9d, 0x110
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
movabs rcx, 0xa971e50dccc93a05
mov qword [rbp + 0x20], rcx
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x20], r15
movabs rcx, 0x935689b4884a23c2
mov qword [rbp + 0x28], rcx
add rax, r10
movdqa xmm0, xmmword [rbp + 0x20]
xor ecx, ecx
mov qword [rsp + 0x28], rsi
pxor xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r12
pxor xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmmword [rsp + 0x30], xmm1
call rax
call fcn.140022a10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14002b5d7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14002b5d7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rdi]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14002b5d2
nop dword [rax]
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x14002b5b0
cmp r8d, 0xcded1a85
je 0x14002b5dc
test r9d, r9d
jne 0x14002b590
mov rax, qword [rax]
jmp 0x14002b560
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 0x45
add rax, r10
call rax
movabs rbx, 0xa971e50dccc93a05
movabs rdi, 0x935689b4884a23c2
mov qword [rsp + 0x20], r14
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x28], rsi
lea rcx, [0x14007f960]
movdqa xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r12
movdqa xmm1, xmmword [rsp + 0x30]
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], rdi
pxor xmm0, xmmword [rbp - 0x80]
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r12
pxor xmm1, xmmword [rbp - 0x70]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmmword [rsp + 0x30], xmm1
call fcn.14000d920
mov rcx, rax
call fcn.14000dbe0
mov qword [rsp + 0x38], r12
lea rdx, [rsp + 0x20]
movabs rax, 0x89089168aaa8490f
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x20], rax
lea rcx, [0x14007f960]
movabs rax, 0xf226a9dfeb2f4ba1
mov qword [rsp + 0x48], rdi
movdqa xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x28], rax
movabs rax, 0x2dea9497be03f8f4
pxor xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x58], r12
movdqa xmm1, xmmword [rsp + 0x50]
pxor xmm1, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm1
movdqa xmmword [rsp + 0x20], xmm0
call fcn.14000d920
mov rcx, rax
call fcn.14000dbe0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret