Function at 0x14000b8c0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0x6d0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x140017040]
xor rax, rsp
mov qword [rbp + 0x540], rax
xorps xmm0, xmm0
movups xmmword [rbp + 0xe0], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0xe0], xmm1
movups xmmword [rbp + 0xf0], xmm0
movdqu xmmword [rbp + 0xf0], xmm1
movups xmmword [rbp + 0x100], xmm0
movdqu xmmword [rbp + 0x100], xmm1
movups xmmword [rbp + 0x110], xmm0
movdqu xmmword [rbp + 0x110], xmm1
movups xmmword [rbp + 0x120], xmm0
movdqu xmmword [rbp + 0x120], xmm1
movups xmmword [rbp + 0x130], xmm0
movdqu xmmword [rbp + 0x130], xmm1
movups xmmword [rbp + 0x140], xmm0
movdqu xmmword [rbp + 0x140], xmm1
movups xmmword [rbp + 0x150], xmm0
movdqu xmmword [rbp + 0x150], xmm1
movups xmmword [rbp + 0x160], xmm0
movdqu xmmword [rbp + 0x160], xmm1
movups xmmword [rbp + 0x180], xmm0
movdqu xmmword [rbp + 0x180], xmm1
movups xmmword [rbp + 0x170], xmm0
movdqu xmmword [rbp + 0x170], xmm1
movups xmmword [rbp + 0x190], xmm0
movdqu xmmword [rbp + 0x190], xmm1
movups xmmword [rbp + 0x1a0], xmm0
movdqu xmmword [rbp + 0x1a0], xmm1
movups xmmword [rbp + 0x1b0], xmm0
movdqu xmmword [rbp + 0x1b0], xmm1
movups xmmword [rbp + 0x1c0], xmm0
movdqu xmmword [rbp + 0x1c0], xmm1
movups xmmword [rbp + 0x1d0], xmm0
movdqu xmmword [rbp + 0x1d0], xmm1
movups xmmword [rbp + 0x1e0], xmm0
movdqu xmmword [rbp + 0x1e0], xmm1
movups xmmword [rbp + 0x1f0], xmm0
movdqu xmmword [rbp + 0x1f0], xmm1
movups xmmword [rbp + 0x200], xmm0
movdqu xmmword [rbp + 0x200], xmm1
movups xmmword [rbp + 0x210], xmm0
movdqu xmmword [rbp + 0x210], xmm1
movups xmmword [rbp + 0x220], xmm0
movdqu xmmword [rbp + 0x220], xmm1
movups xmmword [rbp + 0x230], xmm0
movdqu xmmword [rbp + 0x230], xmm1
movups xmmword [rbp + 0x240], xmm0
movdqu xmmword [rbp + 0x240], xmm1
movups xmmword [rbp + 0x250], xmm0
movdqu xmmword [rbp + 0x250], xmm1
movups xmmword [rbp + 0x260], xmm0
movdqu xmmword [rbp + 0x260], xmm1
movups xmmword [rbp + 0x270], xmm0
movdqu xmmword [rbp + 0x270], xmm1
movups xmmword [rbp + 0x280], xmm0
movdqu xmmword [rbp + 0x280], xmm1
movups xmmword [rbp + 0x310], xmm0
movdqu xmmword [rbp + 0x310], xmm1
movups xmmword [rbp + 0x300], xmm0
movdqu xmmword [rbp + 0x300], xmm1
movups xmmword [rbp + 0x2f0], xmm0
movdqu xmmword [rbp + 0x2f0], xmm1
movups xmmword [rbp + 0x320], xmm0
movdqu xmmword [rbp + 0x320], xmm1
movups xmmword [rbp + 0x2e0], xmm0
movdqu xmmword [rbp + 0x2e0], xmm1
movups xmmword [rbp + 0x2d0], xmm0
movdqu xmmword [rbp + 0x2d0], xmm1
movups xmmword [rbp + 0x2c0], xmm0
movdqu xmmword [rbp + 0x2c0], xmm1
movups xmmword [rbp + 0x2b0], xmm0
movdqu xmmword [rbp + 0x2b0], xmm1
movups xmmword [rbp + 0x2a0], xmm0
movdqu xmmword [rbp + 0x2a0], xmm1
movups xmmword [rbp + 0x290], xmm0
movdqu xmmword [rbp + 0x290], xmm1
movups xmmword [rbp + 0x330], xmm0
movdqu xmmword [rbp + 0x330], xmm1
movups xmmword [rbp + 0x340], xmm0
movdqu xmmword [rbp + 0x340], xmm1
movups xmmword [rbp + 0x350], xmm0
movdqu xmmword [rbp + 0x350], xmm1
movabs rax, 0x6c628b1befd515f4
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x60], rax
movabs rax, 0xd96593f892e65e62
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x68], rax
movabs rax, 0xdc0cab33d90b1dad
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x70], rax
movabs rsi, 0x2cebba0658dfcd54
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x78], rax
movabs r13, 0x1807e5698aa17bbd
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x380], rax
movabs r12, 0xbc17fc94e29e1b42
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x388], rax
movabs rax, 0xdc0cab33d90b1ddf
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x390], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x398], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x380]
vmovdqa ymmword [rbp + 0x60], ymm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
vzeroupper
nop
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r11d, dword [rcx + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x14000d9d1
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x14000d9d1
mov edi, dword [r11 + 0x20]
nop dword [rax]
dec r10d
lea rcx, [rdi + r10*4]
mov edx, dword [rcx + r9]
add rdx, r9
mov r8d, 0xdf6b8a26
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14000d9c8
nop dword [rax]
nop word [rax + rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14000bc90
cmp r8d, 0xc79bce8a
jne 0x14000d9c8
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + r10*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
lea rcx, [rbp + 0x60]
call rdx
mov r15d, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [r15 + rcx]
cmp dword [0x1400179fc], eax
jle 0x14000bed2
lea rcx, [0x1400179fc]
call fcn.14000f250
cmp dword [0x1400179fc], 0xffffffff
jne 0x14000bed2
movabs rax, 0x18629d0ca49308de
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x10], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x18], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x360], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x368], rax
movdqa xmm0, xmmword [rbp + 0x10]
xorps xmm0, xmmword [rbp + 0x360]
movdqa xmmword [rbp + 0x10], xmm0
xorps xmm0, xmm0
movups xmmword [rbp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x30], xmm1
lea rax, [rbp + 0x10]
mov rsi, 0xffffffffffffffff
nop word [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14000bd80
movabs r14, 0x7fffffffffffffff
cmp rsi, r14
ja 0x14000d9d9
cmp rsi, 0xf
ja 0x14000bdc8
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], 0xf
mov r8, rsi
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x20]
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbp + rsi + 0x20], 0
jmp 0x14000be5c
mov rbx, rsi
or rbx, 0xf
cmp rbx, r14
jbe 0x14000be04
mov rbx, r14
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14000f2c8
test rax, rax
je 0x14000be9d
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000be3d
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14000be2c
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000d9de
jmp 0x14000bde5
test rcx, rcx
je 0x14000be3b
call fcn.14000f2c8
mov rdi, rax
jmp 0x14000be3d
xor edi, edi
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x30], rsi
mov qword [rbp + 0x38], rbx
mov r8, rsi
lea rdx, [rbp + 0x10]
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
lea rcx, [rbp + 0x20]
call fcn.1400025e0
mov dword [0x140017a08], eax
mov rdx, qword [rbp + 0x38]
cmp rdx, 0xf
jbe 0x14000bea9
inc rdx
mov rcx, qword [rbp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000bea4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000bea4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000f1a0
movdqa xmm0, xmmword [0x140013700]
movdqu xmmword [rbp + 0x30], xmm0
mov byte [rbp + 0x20], 0
lea rcx, [0x1400179fc]
call fcn.14000f1e4
movabs rsi, 0x2cebba0658dfcd54
jmp 0x14000bedc
movabs r14, 0x7fffffffffffffff
cmp dword [0x140017a08], 0
jne 0x14000beec
xor al, al
jmp 0x14000c2c4
movabs rax, 0x7b689719aadc50c6
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x80], rax
movabs rax, 0xd26293f2c2ed6827
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x88], rax
movabs rax, 0xdc0cab33d90b1dbb
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x90], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x98], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3a0], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3a8], rax
movabs rbx, 0xdc0cab33d90b1ddf
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3b0], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3b8], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x3a0]
vmovdqa ymmword [rbp + 0x80], ymm1
lea rcx, [rbp + 0x80]
vzeroupper
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [r15 + rcx]
cmp dword [0x1400179f8], eax
jle 0x14000bfff
lea rcx, [0x1400179f8]
call fcn.14000f250
cmp dword [0x1400179f8], 0xffffffff
jne 0x14000bfff
mov ecx, dword [0x140017a08]
call fcn.140001c00
mov qword [0x1400179f0], rax
lea rcx, [0x1400179f8]
call fcn.14000f1e4
cmp qword [0x1400179f0], 0
jne 0x14000c010
xor al, al
jmp 0x14000c2c4
movabs rax, 0x7c698401aadc50c6
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xa0], rax
movabs rax, 0xd5729ff190be7e2e
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xa8], rax
movabs rax, 0xdc0cab33d96f78a9
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xb0], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0xb8], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3c0], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3c8], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3d0], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3d8], rax
vmovdqu ymm0, ymmword [rbp + 0xa0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3c0]
vmovdqa ymmword [rbp + 0xa0], ymm1
lea rcx, [rbp + 0xa0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
movabs rax, 0x186b890da49308de
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0x50], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x58], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x370], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x378], rax
movdqa xmm0, xmmword [rbp + 0x50]
xorps xmm0, xmmword [rbp + 0x370]
movdqa xmmword [rbp + 0x50], xmm0
lea rdx, [rbp + 0x50]
mov rcx, qword [0x1400179f0]
call fcn.140002a20
test al, al
jne 0x14000c13a
xor al, al
jmp 0x14000c2c4
movabs rax, 0x7d638a0aaadc50c6
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xc0], rax
movabs rax, 0xd57995b491ff6c62
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xc8], rax
movabs rax, 0xb869d15ab56a74ab
mov qword [rbp + 8], rax
mov rax, qword [rbp + 8]
mov qword [rbp + 0xd0], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0xd8], rax
mov qword [rbp + 8], r13
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3e0], rax
mov qword [rbp + 8], r12
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3e8], rax
mov qword [rbp + 8], rbx
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3f0], rax
mov qword [rbp + 8], rsi
mov rax, qword [rbp + 8]
mov qword [rbp + 0x3f8], rax
vmovdqu ymm0, ymmword [rbp + 0xc0]
vpxor ymm1, ymm0, ymmword [rbp + 0x3e0]
vmovdqa ymmword [rbp + 0xc0], ymm1
lea rcx, [rbp + 0xc0]
vzeroupper
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_puts]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
mov r9, rax
cmp rbx, 0x989680
jne 0x14000c219
imul rax, r9, 0x64
jmp 0x14000c292
cmp rbx, 0x16e3600
jne 0x14000c277
movabs r10, 0xb2f4fc0794908cf3
mov rax, r10
imul r9
add rdx, r9
sar rdx, 0x18
mov rcx, rdx
shr rcx, 0x3f
add rdx, rcx
imul r8, rdx, 0x3b9aca00
imul rcx, rdx, 0x16e3600
sub r9, rcx
imul rcx, r9, 0x3b9aca00
mov rax, r10
imul rcx
add rdx, rcx
sar rdx, 0x18
mov rax, rdx
shr rax, 0x3f
add rax, rdx
add rax, r8
jmp 0x14000c292
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7ffffffed5fa0dff
cmp rax, rcx
jge 0x14000c2b4
movabs rcx, 0x12a05f200
add rcx, rax
mov qword [rbp + 0x40], rcx
jmp 0x14000c2b8
mov qword [rbp + 0x40], r14
lea rcx, [rbp + 0x40]
call fcn.14000efd0
nop
xor al, al
mov rcx, qword [rbp + 0x540]
xor rcx, rsp
call fcn.14000f180
lea r11, [rsp + 0x6d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
test r10d, r10d
jne 0x14000bc60
mov rax, qword [rax]
jmp 0x14000bc30
call fcn.1400011b0
call fcn.140001110
int3