Function at 0x14002eb20
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x218]
sub rsp, 0x318
mov rsi, rcx
xor al, al
mov dword [rbp + 0x260], eax
movabs rcx, 0xfd9f279855b01c93
mov qword [rsp + 0x70], rcx
movabs rcx, 0x2fa60051cb1128e4
mov qword [rsp + 0x78], rcx
movabs rax, 0xfdc327a7558f1ccf
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rcx
movaps xmm0, xmmword [rsp + 0x60]
xorps xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x60], xmm0
xor edx, edx
mov r8d, 0x20a
lea rcx, [rbp - 0x10]
call fcn.1400a6950
lea rax, [rbp - 0x10]
mov qword [rbp + 0x200], rax
lea rax, [rsp + 0x60]
mov rdi, 0xffffffffffffffff
mov rbx, rdi
nop dword [rax]
inc rbx
cmp word [rax + rbx*2], 0
jne 0x14002ebc0
add rbx, rbx
mov r8, rbx
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x10]
call fcn.1400a62b0
mov rcx, qword [rbp + 0x200]
add rcx, rbx
mov qword [rbp + 0x200], rcx
mov rbx, rdi
inc rbx
cmp word [rsi + rbx*2], 0
jne 0x14002ebf2
add rbx, rbx
mov r8, rbx
mov rdx, rsi
call fcn.1400a62b0
add qword [rbp + 0x200], rbx
xor r15d, r15d
mov ebx, r15d
lea rcx, [rbp - 0x10]
lea rax, [rbp - 0x10]
nop
inc rdi
cmp word [rax + rdi*2], bx
jne 0x14002ec20
add di, di
mov word [rsp + 0x62], di
mov word [rsp + 0x60], di
mov qword [rsp + 0x68], rcx
movaps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x70], 0x30
mov qword [rbp - 0x68], r15
lea rax, [rbp - 0x80]
mov qword [rbp - 0x60], rax
mov dword [rbp - 0x58], 0x40
xorps xmm2, xmm2
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rbp - 0x60]
movups xmmword [rbp - 0x30], xmm1
movups xmmword [rbp - 0x20], xmm2
mov qword [rsp + 0x70], r15
mov esi, r15d
mov r12d, 0x6f2df779
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test esi, esi
je 0x14002ed03
psrldq xmm0, 8
movq r9, xmm0
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
mov r10d, 0x811c9dc5
cmp r9, r11
je 0x14002ecfa
nop
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
add r9, 2
cmp r9, r11
jne 0x14002ecd0
cmp r10d, esi
jne 0x14002ee9a
mov rdi, qword [rax + 0x30]
test rdi, rdi
je 0x14002eea7
movsxd rcx, dword [rdi + 0x3c]
mov rdx, qword [rcx + rdi + 0x88]
mov rcx, rdx
shr rcx, 0x20
mov qword [rsp + 0x60], rcx
mov r14d, edx
add r14, rdi
cmp r14, rdi
je 0x14002ee9a
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14002ee9a
mov r13d, dword [r14 + 0x20]
nop dword [rax + rax]
dec r11d
lea rcx, [r11*4]
add rcx, r13
mov r8d, dword [rcx + rdi]
add r8, rdi
mov r10d, 0x811c9dc5
movzx r9d, byte [r8]
inc r8
test r9b, r9b
je 0x14002edab
nop word [rax + rax]
movsx ecx, r9b
sub r9b, 0x41
mov edx, ecx
or edx, 0x20
cmp r9b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r9d, byte [r8]
lea r8, [r8 + 1]
test r9b, r9b
jne 0x14002ed80
cmp r10d, r12d
je 0x14002edbd
test r11d, r11d
jne 0x14002ed50
mov rax, qword [rax]
jmp 0x14002eca0
mov ecx, dword [r14 + 0x1c]
add rcx, rdi
mov eax, dword [r14 + 0x24]
add rax, rdi
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rdi
cmp r10, r14
jbe 0x14002eea2
mov rax, qword [rsp + 0x60]
add rax, r14
cmp r10, rax
jae 0x14002eea2
mov esi, 0x811c9dc5
mov dword [rbp + 0x278], esi
mov r8d, esi
mov dword [rbp + 0x27c], esi
movzx edx, byte [r10]
cmp dl, 0x2e
je 0x14002ee3b
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, esi
imul esi, ecx, 0x1000193
inc r10
movzx edx, byte [r10]
cmp dl, 0x2e
jne 0x14002ee10
mov dword [rbp + 0x278], esi
inc r10
movzx edx, byte [r10]
test dl, dl
je 0x14002ee7e
nop word [rax + rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r8d
imul r8d, ecx, 0x1000193
lea r10, [r10 + 1]
movzx edx, byte [r10]
test dl, dl
jne 0x14002ee50
mov dword [rbp + 0x27c], r8d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r12, qword [rbp + 0x278]
shr r12, 0x20
mov rax, qword [rax]
jmp 0x14002eca0
xor r15d, r15d
jmp 0x14002eead
xor r15d, r15d
mov r10d, r15d
mov dword [rsp + 0x50], r15d
mov qword [rsp + 0x48], r15
mov dword [rsp + 0x40], 0x60
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], 7
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x20], r15
lea r9, [rsp + 0x60]
lea r8, [rbp - 0x40]
mov edx, 0xc0100000
lea rcx, [rsp + 0x70]
call r10
test eax, eax
js 0x14002eef8
mov rbx, qword [rsp + 0x70]
test eax, eax
js 0x14002f19a
mov qword [rsp + 0x70], 0
mov esi, r15d
mov r12d, 0xb0bac3c4
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test esi, esi
je 0x14002ef93
psrldq xmm0, 8
movq r9, xmm0
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
mov r10d, 0x811c9dc5
cmp r9, r11
je 0x14002ef8a
nop
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
add r9, 2
cmp r9, r11
jne 0x14002ef60
cmp r10d, esi
jne 0x14002f12a
mov rdi, qword [rax + 0x30]
test rdi, rdi
je 0x14002f137
movsxd rcx, dword [rdi + 0x3c]
mov rdx, qword [rcx + rdi + 0x88]
mov rcx, rdx
shr rcx, 0x20
mov qword [rsp + 0x60], rcx
mov r14d, edx
add r14, rdi
cmp r14, rdi
je 0x14002f12a
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14002f12a
mov r13d, dword [r14 + 0x20]
nop dword [rax + rax]
dec r11d
lea rcx, [r11*4]
add rcx, r13
mov r8d, dword [rcx + rdi]
add r8, rdi
mov r10d, 0x811c9dc5
movzx r9d, byte [r8]
inc r8
test r9b, r9b
je 0x14002f03b
nop word [rax + rax]
movsx ecx, r9b
sub r9b, 0x41
mov edx, ecx
or edx, 0x20
cmp r9b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r9d, byte [r8]
lea r8, [r8 + 1]
test r9b, r9b
jne 0x14002f010
cmp r10d, r12d
je 0x14002f04d
test r11d, r11d
jne 0x14002efe0
mov rax, qword [rax]
jmp 0x14002ef30
mov ecx, dword [r14 + 0x1c]
add rcx, rdi
mov eax, dword [r14 + 0x24]
add rax, rdi
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rdi
cmp r10, r14
jbe 0x14002f132
mov rax, qword [rsp + 0x60]
add rax, r14
cmp r10, rax
jae 0x14002f132
mov esi, 0x811c9dc5
mov dword [rbp + 0x278], esi
mov r8d, esi
mov dword [rbp + 0x27c], esi
movzx edx, byte [r10]
cmp dl, 0x2e
je 0x14002f0cb
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, esi
imul esi, ecx, 0x1000193
inc r10
movzx edx, byte [r10]
cmp dl, 0x2e
jne 0x14002f0a0
mov dword [rbp + 0x278], esi
inc r10
movzx edx, byte [r10]
test dl, dl
je 0x14002f10e
nop word [rax + rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r8d
imul r8d, ecx, 0x1000193
lea r10, [r10 + 1]
movzx edx, byte [r10]
test dl, dl
jne 0x14002f0e0
mov dword [rbp + 0x27c], r8d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r12, qword [rbp + 0x278]
shr r12, 0x20
mov rax, qword [rax]
jmp 0x14002ef30
xor r15d, r15d
jmp 0x14002f13d
xor r15d, r15d
mov r10d, r15d
mov qword [rsp + 0x40], r15
lea rax, [rsp + 0x70]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 0x270]
mov dword [rsp + 0x30], eax
mov rax, qword [rbp + 0x268]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x80]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call r10
nop
mov r14d, dword [rbp + 0x260]
movzx r14d, r14b
mov ecx, 1
test eax, eax
cmovns r14d, ecx
mov dword [rbp + 0x260], r14d
jmp 0x14002f1a1
mov r14d, dword [rbp + 0x260]
test rbx, rbx
je 0x14002f3e6
mov esi, r15d
mov r12d, 0xe049c205
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test esi, esi
je 0x14002f233
psrldq xmm0, 8
movq r9, xmm0
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
mov r10d, 0x811c9dc5
cmp r9, r11
je 0x14002f22a
nop
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
add r9, 2
cmp r9, r11
jne 0x14002f200
cmp r10d, esi
jne 0x14002f3ce
mov rdi, qword [rax + 0x30]
test rdi, rdi
je 0x14002f3d6
movsxd rcx, dword [rdi + 0x3c]
mov rdx, qword [rcx + rdi + 0x88]
mov rcx, rdx
shr rcx, 0x20
mov qword [rsp + 0x60], rcx
mov r14d, edx
add r14, rdi
cmp r14, rdi
je 0x14002f3ce
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14002f3ce
mov r13d, dword [r14 + 0x20]
nop dword [rax + rax]
dec r11d
lea rcx, [r11*4]
add rcx, r13
mov r9d, dword [rcx + rdi]
add r9, rdi
mov r10d, 0x811c9dc5
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x14002f2da
nop word [rax + rax]
movsx edx, cl
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
movzx ecx, byte [r9]
lea r9, [r9 + 1]
test cl, cl
jne 0x14002f2b0
cmp r10d, r12d
je 0x14002f2ec
test r11d, r11d
jne 0x14002f280
mov rax, qword [rax]
jmp 0x14002f1d0
mov ecx, dword [r14 + 0x1c]
add rcx, rdi
mov eax, dword [r14 + 0x24]
add rax, rdi
movzx eax, word [rax + r11*2]
mov edx, dword [rcx + rax*4]
add rdx, rdi
cmp rdx, r14
jbe 0x14002f3d8
mov rax, qword [rsp + 0x60]
add rax, r14
cmp rdx, rax
jae 0x14002f3d8
mov esi, 0x811c9dc5
mov dword [rbp + 0x278], esi
mov r9d, esi
mov dword [rbp + 0x27c], esi
movzx r8d, byte [rdx]
cmp r8b, 0x2e
je 0x14002f36f
nop dword [rax]
movsx eax, r8b
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
cmova ecx, eax
xor ecx, esi
imul esi, ecx, 0x1000193
inc rdx
movzx r8d, byte [rdx]
cmp r8b, 0x2e
jne 0x14002f340
mov dword [rbp + 0x278], esi
inc rdx
movzx r8d, byte [rdx]
test r8b, r8b
je 0x14002f3b2
nop dword [rax + rax]
movsx eax, r8b
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
lea rdx, [rdx + 1]
movzx r8d, byte [rdx]
test r8b, r8b
jne 0x14002f380
mov dword [rbp + 0x27c], r9d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r12, qword [rbp + 0x278]
shr r12, 0x20
mov rax, qword [rax]
jmp 0x14002f1d0
xor edx, edx
mov rcx, rbx
call rdx
nop
mov eax, dword [rbp + 0x260]
jmp 0x14002f3ea
movzx eax, r14b
add rsp, 0x318
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret