Function at 0x14007b080
Capabilities:
Access peb ldr_data
Encode data using xor
Get kernel32 base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x280
mov rax, qword [0x140285040]
xor rax, rsp
mov qword [rsp + 0x270], rax
mov r14, rcx
mov qword [rsp + 0x20], rcx
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14007b136
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14007b136
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xb38fbc96
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14007b131
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14007b110
cmp r8d, 0x85c5a7ce
je 0x14007b13b
test r9d, r9d
jne 0x14007b0f0
mov rax, qword [rax]
jmp 0x14007b0c0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
xor edx, edx
mov ecx, 2
call r8
mov rbp, rax
test rax, rax
je 0x14007b3d8
cmp rax, 0xffffffffffffffff
je 0x14007b3d8
cmp rax, 0x18
je 0x14007b3d8
mov dword [rsp + 0x30], 0x238
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14007b216
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14007b216
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rax, [r10 + r9*4]
mov edx, dword [rax + rdi]
add rdx, r10
mov r8d, 0x43e4e650
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x14007b211
nop dword [rax]
movsx eax, al
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
test al, al
jne 0x14007b1f0
cmp r8d, 0x8691d5a3
je 0x14007b21b
test r9d, r9d
jne 0x14007b1d0
mov rcx, qword [rcx]
jmp 0x14007b1a0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
lea rdx, [rsp + 0x30]
mov rcx, rbp
call r8
test eax, eax
je 0x14007b550
mov rdx, r14
cmp qword [r14 + 0x18], 7
jbe 0x14007b253
mov rdx, qword [r14]
lea rcx, [rsp + 0x5c]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
je 0x14007b451
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14007b2f6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14007b2f6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rdi]
add rcx, r10
mov r8d, 0x68577b1a
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14007b2f1
nop dword [rax]
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14007b2d0
cmp r8d, 0x2e408ff0
je 0x14007b2fb
test r9d, r9d
jne 0x14007b2b0
mov rax, qword [rax]
jmp 0x14007b280
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
lea rdx, [rsp + 0x30]
mov rcx, rbp
call r8
test eax, eax
jne 0x14007b246
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14007b3b6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14007b3b6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xdf522641
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14007b3b1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14007b390
cmp r8d, 0xfb0b0ae1
je 0x14007b3bb
test r9d, r9d
jne 0x14007b370
mov rax, qword [rax]
jmp 0x14007b340
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, rbp
call rdx
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 7
jbe 0x14007b417
lea rdx, [rdx*2 + 2]
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x14007b412
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007b5ef
mov rcx, r8
call fcn.14007d254
xor eax, eax
mov word [r14], ax
mov qword [r14 + 0x18], 7
mov qword [r14 + 0x10], rax
mov rcx, qword [rsp + 0x270]
xor rcx, rsp
call fcn.14007cfb0
lea r11, [rsp + 0x280]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
mov esi, dword [rsp + 0x38]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14007b4d6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14007b4d6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xa874c124
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14007b4d1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14007b4b0
cmp r8d, 0xfb3fb6ee
je 0x14007b4db
test r9d, r9d
jne 0x14007b490
mov rax, qword [rax]
jmp 0x14007b460
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, rbp
call rdx
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 7
jbe 0x14007b537
lea rdx, [rdx*2 + 2]
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x14007b532
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007b5ef
mov rcx, r8
call fcn.14007d254
xor eax, eax
mov qword [r14 + 0x10], rax
mov qword [r14 + 0x18], 7
mov word [r14], ax
mov eax, esi
jmp 0x14007b429
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14007b5ea
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14007b5ea
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xa7f844d8
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14007b5e5
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14007b5c0
cmp r8d, 0x29e077c2
je 0x14007b3bb
test r9d, r9d
jne 0x14007b5a0
mov rax, qword [rax]
jmp 0x14007b570
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3