Function at 0x14000cae0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rax, qword [0x140095080]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov r13, rcx
mov ecx, r8d
mov r12d, r8d
mov r15, rdx
test r8d, r8d
je 0x14000ccbe
sub ecx, 1
je 0x14000cc05
cmp ecx, 1
jne 0x14000cda7
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, qword gs:[0x60]
mov r14, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000cbda
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000cbda
mov ebp, dword [rsi + 0x20]
dec r11d
mov r10d, 0xff69892f
lea rax, [rbx + r11*4]
mov r9d, dword [rax + rbp]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000cbd5
nop dword [rax]
nop word [rax + rax]
movsx eax, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000cba0
cmp r10d, 0x236b736b
je 0x14000cbe2
test r11d, r11d
jne 0x14000cb73
mov rcx, qword [rcx]
jmp 0x14000cb50
mov ecx, dword [rsi + 0x24]
lea r8, [0x140100fd0]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
mov rcx, r14
jmp 0x14000cd90
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, qword gs:[0x60]
mov rbp, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000ccaa
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000ccaa
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x58edc0fb
lea rax, [r14 + r11*4]
mov r9d, dword [rax + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000cca5
movsx eax, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000cc70
cmp r10d, 0x8a89995f
je 0x14000ccb2
test r11d, r11d
jne 0x14000cc50
mov rcx, qword [rcx]
jmp 0x14000cc20
lea r8, [0x140101000]
jmp 0x14000cd79
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, qword gs:[0x60]
mov rbp, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax + rax]
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000cd6a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000cd6a
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x26a24f1a
lea rax, [r14 + r11*4]
mov r9d, dword [rax + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000cd65
movsx eax, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000cd30
cmp r10d, 0xa7bc6be8
je 0x14000cd72
test r11d, r11d
jne 0x14000cd10
mov rcx, qword [rcx]
jmp 0x14000cce0
lea r8, [0x140100f98]
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
mov rcx, rbp
mov r9d, 5
mov qword [rsp + 0x20], 0
mov rdx, r13
add rax, rbx
call rax
mov rcx, r13
call fcn.14000c590
mov rdx, r15
mov rcx, rax
mov rbp, rax
call fcn.14000c8e0
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop
mov rbx, qword [rcx + 0x30]
movsxd rdx, dword [rbx + 0x3c]
mov esi, dword [rdx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000ce5a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000ce5a
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x1c94ac26
lea rax, [r14 + r11*4]
mov r9d, dword [rax + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000ce55
movsx eax, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, eax
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, eax
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000ce20
cmp r10d, 0x472e28ec
je 0x14000ce62
test r11d, r11d
jne 0x14000ce00
mov rcx, qword [rcx]
jmp 0x14000cdd0
mov ecx, dword [rsi + 0x24]
lea r9, [rsp + 0x30]
add rcx, rbx
mov r8d, reloc.WLDAP32.dll_Ordinal_32
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
mov edx, 0x1000
add rax, rbx
mov rcx, rbp
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000cf2a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000cf2a
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x3902b72a
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000cf25
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000cef0
cmp r10d, 0x1e75cf00
je 0x14000cf32
test r11d, r11d
jne 0x14000ced0
mov rax, qword [rax]
jmp 0x14000cea0
mov ecx, dword [rsi + 0x24]
lea r9, [rsp + 0x34]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
mov edx, 5
add rax, rbx
mov rcx, r13
lea r8d, [rdx + 0x3b]
call rax
mov dword [rsp + 0x48], 0xe9
sub rbp, r13
mov byte [rsp + 0x4c], 0
sub rbp, 5
mov qword [rsp + 0x40], rbp
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000d01a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000d01a
mov ebp, dword [rsi + 0x20]
dec r11d
mov r10d, 0xbda4ba3f
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rbp]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000d015
nop dword [rax]
nop word [rax + rax]
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000cfe0
cmp r10d, 0x82af7c2a
je 0x14000d022
test r11d, r11d
jne 0x14000cfb3
mov rax, qword [rax]
jmp 0x14000cf90
mov ecx, dword [rsi + 0x24]
mov r8d, 4
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rdx, [rsp + 0x40]
add rax, rbx
lea rcx, [rsp + 0x49]
call rax
test r12d, r12d
je 0x14000d202
sub r12d, 1
je 0x14000d132
cmp r12d, 1
jne 0x14000d2dd
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000d10a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000d10a
mov ebp, dword [rsi + 0x20]
dec r11d
mov r10d, 0xcf49ebc5
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rbp]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000d105
nop dword [rax]
nop word [rax + rax]
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000d0d0
cmp r10d, 0x4aafca64
je 0x14000d112
test r11d, r11d
jne 0x14000d0a3
mov rax, qword [rax]
jmp 0x14000d080
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [0x140100ff8]
jmp 0x14000d2cd
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000d1da
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000d1da
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x12af81c6
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000d1d5
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000d1a0
cmp r10d, 0xb45d8c2b
je 0x14000d1e2
test r11d, r11d
jne 0x14000d180
mov rax, qword [rax]
jmp 0x14000d150
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [0x140100f90]
jmp 0x14000d2cd
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000d2aa
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000d2aa
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0xf526fe07
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000d2a5
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000d270
cmp r10d, 0x8a4ea3e2
je 0x14000d2b2
test r11d, r11d
jne 0x14000d250
mov rax, qword [rax]
jmp 0x14000d220
mov ecx, dword [rsi + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rcx, [0x140100fd8]
mov r8d, 5
lea rdx, [rsp + 0x48]
add rax, rbx
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000d37a
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000d37a
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x902da436
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000d375
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x14000d340
cmp r10d, 0x7f19cc1b
je 0x14000d382
test r11d, r11d
jne 0x14000d320
mov rax, qword [rax]
jmp 0x14000d2f0
mov ecx, dword [rsi + 0x24]
mov r8d, 5
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rsi + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rdx, [rsp + 0x48]
add rax, rbx
mov rcx, r13
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov esi, dword [rcx + rbx + 0x88]
add rsi, rbx
cmp rsi, rbx
je 0x14000d449
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000d449
mov r14d, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r11d
mov r10d, 0x77c24f0
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x14000d444
nop
movsx edx, cl
lea r9, [r9 + 1]
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
movzx ecx, byte [r9 - 1]
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
test cl, cl
jne 0x14000d410
cmp r10d, 0x88f61d92
je 0x14000d451
test r11d, r11d
jne 0x14000d3f0
mov rax, qword [rax]
jmp 0x14000d3c0
mov r9d, dword [rsi + 0x24]
mov edx, 5
add r9, rbx
mov rcx, r13
lea r8d, [rdx + 0x1b]
movzx r10d, word [r9 + r11*2]
mov r9d, dword [rsi + 0x1c]
add r9, rbx
mov eax, dword [r9 + r10*4]
lea r9, [rsp + 0x38]
add rax, rbx
call rax
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.140073450
mov rbx, qword [rsp + 0xb0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret