Function at 0x14000b390
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rax, qword [0x14009b080]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov r13, rcx
mov ecx, r8d
mov r12d, r8d
mov r15, rdx
test r8d, r8d
je 0x14000b55e
sub ecx, 1
je 0x14000b49e
cmp ecx, 1
jne 0x14000b647
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, qword gs:[0x60]
mov r14, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000b48a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000b48a
mov ebp, dword [rsi + 0x20]
dec r11d
mov r10d, 0xae669173
lea rax, [rbx + r11*4]
mov r9d, dword [rax + rbp]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000b485
nop dword [rax]
nop word [rax + rax]
movsx eax, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000b450
cmp r10d, 0x35ba4bb7
je 0x14000b492
test r11d, r11d
jne 0x14000b423
mov rcx, qword [rcx]
jmp 0x14000b400
lea r8, [0x14009bf68]
jmp 0x14000b619
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, qword gs:[0x60]
mov r14, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000b54a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000b54a
mov ebp, dword [rsi + 0x20]
dec r11d
mov r10d, 0xffa30ced
lea rax, [rbx + r11*4]
mov r9d, dword [rax + rbp]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000b545
nop dword [rax]
nop word [rax + rax]
movsx eax, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000b510
cmp r10d, 0x8ad19bad
je 0x14000b552
test r11d, r11d
jne 0x14000b4e3
mov rcx, qword [rcx]
jmp 0x14000b4c0
lea r8, [0x14009bf98]
jmp 0x14000b619
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, qword gs:[0x60]
mov r14, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000b60a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000b60a
mov ebp, dword [rsi + 0x20]
dec r11d
mov r10d, 0xbd5781dc
lea rax, [rbx + r11*4]
mov r9d, dword [rax + rbp]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000b605
nop dword [rax]
nop word [rax + rax]
movsx eax, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000b5d0
cmp r10d, 0x96823d6
je 0x14000b612
test r11d, r11d
jne 0x14000b5a3
mov rcx, qword [rcx]
jmp 0x14000b580
lea r8, [0x14009bf30]
mov ecx, dword [rsi + 0x24]
mov r9d, 5
add rcx, rbx
mov qword [rsp + 0x20], 0
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
mov rdx, r13
add rax, rbx
mov rcx, r14
call rax
mov rcx, r13
call fcn.14000ae30
mov rdx, r15
mov rcx, rax
mov rbp, rax
call fcn.14000b190
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000b6fa
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000b6fa
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x548457d
lea rax, [r14 + r11*4]
mov r9d, dword [rax + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000b6f5
movsx eax, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000b6c0
cmp r10d, 0x5118b59b
je 0x14000b702
test r11d, r11d
jne 0x14000b6a0
mov rcx, qword [rcx]
jmp 0x14000b670
mov ecx, dword [rsi + 0x24]
lea r9, [rsp + 0x30]
add rcx, rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_32
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
mov edx, 0x1000
add rax, rbx
mov rcx, rbp
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000b7ca
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000b7ca
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x86b8d0e9
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000b7c5
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000b790
cmp r10d, 0x9e2f1b07
je 0x14000b7d2
test r11d, r11d
jne 0x14000b770
mov rax, qword [rax]
jmp 0x14000b740
mov ecx, dword [rsi + 0x24]
lea r9, [rsp + 0x34]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
mov edx, 5
add rax, rbx
mov rcx, r13
lea r8d, [rdx + 0x3b]
call rax
mov dword [rsp + 0x48], 0xe9
sub rbp, r13
mov byte [rsp + 0x4c], 0
sub rbp, 5
mov qword [rsp + 0x40], rbp
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000b8ba
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000b8ba
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x28d2464c
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000b8b5
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000b880
cmp r10d, 0xd3fd4565
je 0x14000b8c2
test r11d, r11d
jne 0x14000b860
mov rax, qword [rax]
jmp 0x14000b830
mov ecx, dword [rsi + 0x24]
mov r8d, 4
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rdx, [rsp + 0x40]
add rax, rbx
lea rcx, [rsp + 0x49]
call rax
test r12d, r12d
je 0x14000baa2
sub r12d, 1
je 0x14000b9d2
cmp r12d, 1
jne 0x14000bb7d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000b9aa
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000b9aa
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x5e693b74
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000b9a5
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000b970
cmp r10d, 0x52f1981d
je 0x14000b9b2
test r11d, r11d
jne 0x14000b950
mov rax, qword [rax]
jmp 0x14000b920
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [0x14009bf90]
jmp 0x14000bb6d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000ba7a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000ba7a
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0xe39f23ac
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000ba75
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000ba40
cmp r10d, 0x71e953c5
je 0x14000ba82
test r11d, r11d
jne 0x14000ba20
mov rax, qword [rax]
jmp 0x14000b9f0
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [0x14009bf28]
jmp 0x14000bb6d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000bb4a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000bb4a
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x35070e4e
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000bb45
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000bb10
cmp r10d, 0x533e2023
je 0x14000bb52
test r11d, r11d
jne 0x14000baf0
mov rax, qword [rax]
jmp 0x14000bac0
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [0x14009bf70]
mov r8d, 5
lea rdx, [rsp + 0x48]
add rax, rbx
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000bc1a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000bc1a
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x25ce0e41
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000bc15
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000bbe0
cmp r10d, 0x67d9ce18
je 0x14000bc22
test r11d, r11d
jne 0x14000bbc0
mov rax, qword [rax]
jmp 0x14000bb90
mov ecx, dword [rsi + 0x24]
mov r8d, 5
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rdx, [rsp + 0x48]
add rax, rbx
mov rcx, r13
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000bcdb
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000bcdb
mov ebp, dword [rsi + 0x20]
dec r11d
mov r10d, 0x73ccae17
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rbp]
add r9, rbx
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x14000bcd6
movsx edx, cl
lea r9, [r9 + 1]
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
movzx ecx, byte [r9 - 1]
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
test cl, cl
jne 0x14000bca2
cmp r10d, 0x825946b1
je 0x14000bce0
test r11d, r11d
jne 0x14000bc83
mov rax, qword [rax]
jmp 0x14000bc60
mov r9d, dword [rsi + 0x24]
mov edx, 5
add r9, rbx
mov rcx, r13
lea r8d, [rdx + 0x1b]
movzx r10d, word [r9 + r11*2]
mov r9d, dword [rsi + 0x1c]
add r9, rbx
mov eax, dword [r9 + r10*4]
lea r9, [rsp + 0x38]
add rax, rbx
call rax
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.140075200
mov rbx, qword [rsp + 0xb0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret