Function at 0x14003e950
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1400da0c0]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov dword [rbp - 0x60], 0x65736f79
mov dword [rbp - 0x5c], 0x61754766
mov word [rbp - 0x58], 0x6472
mov byte [rbp - 0x56], 0
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x30]
call fcn.140040070
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xor eax, eax
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], rax
lea r15, [rbp - 0x30]
mov rdi, qword [rbp - 0x30]
mov r14, qword [rbp - 0x18]
cmp r14, 0xf
cmova r15, rdi
movabs rbx, 0x7fffffffffffffff
mov rsi, qword [rbp - 0x20]
cmp rsi, rbx
ja 0x14003ec43
cmp rsi, 0xf
ja 0x14003e9fd
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], reloc.WS2_32.dll_ntohs
movups xmm0, xmmword [r15]
movups xmmword [rbp - 0x50], xmm0
jmp 0x14003ea8c
mov rcx, rsi
or rcx, 0xf
cmp rcx, rbx
jbe 0x14003ea35
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1400bb330
mov rcx, rax
test rax, rax
je 0x14003ea60
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14003ea71
mov rbx, rcx
mov edx, reloc.WLDAP32.dll_Ordinal_22
cmp rcx, rdx
cmovb rbx, rdx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14003ea67
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14003ec49
jmp 0x14003ea17
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14003ea71
call fcn.1400bb330
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x40], rsi
mov qword [rbp - 0x38], rbx
lea r8, [rsi + 1]
mov rdx, r15
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
xor edx, edx
lea rcx, [rbp - 0x50]
call fcn.140044790
lea r15, [0x1400e27f0]
mov rcx, r15
cmp qword [0x1400e2808], 0xf
cmova rcx, qword [0x1400e27f0]
call fcn.14003e860
mov esi, eax
test eax, eax
jne 0x14003eba4
mov rcx, r15
cmp qword [0x1400e2808], 0xf
cmova rcx, qword [0x1400e27f0]
call fcn.14003e860
mov esi, eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14003eb66
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14003eb66
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rdi]
add rcx, r10
mov r8d, 0x811c9dc5
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14003eb61
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14003eb40
cmp r8d, 0x2fa62ca8
je 0x14003eb6b
test r9d, r9d
jne 0x14003eb20
mov rax, qword [rax]
jmp 0x14003eaf0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 0x7d0
call rdx
test esi, esi
je 0x14003eac0
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r14, qword [rbp - 0x18]
mov rdi, qword [rbp - 0x30]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
call fcn.140048a10
mov r9d, 0x40
lea r8, str.Anti_Debugging
lea rdx, str.Anti_Debugging_has_been_enabled_
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
cmp r14, 0xf
jbe 0x14003ec18
lea rdx, [r14 + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x14003ec10
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003ec10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rdi
call fcn.1400bb5b4
xor eax, eax
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400bb310
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.14003e710
nop
call fcn.14003e640
int3