Function at 0x14000da90
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x60
mov rax, qword [0x1400d0780]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov ebp, r8d
mov r14, rdx
mov qword [rsp + 0x40], rdx
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x7b8
mov eax, dword [rdx + rcx]
mov ebx, 0x7c8
add rbx, rcx
test al, 1
jne 0x14000db07
or eax, 1
mov dword [rdx + rcx], eax
mov dword [rbx + 0xa], 0x173bfab
mov dword [rbx], 0xbdb5ec2e
mov dword [rbx + 4], 0x6d5a2516
mov word [rbx + 8], 0xed6b
lea rcx, [0x1400a1ea0]
call fcn.14006f1a0
nop
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14000db94
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14000db94
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rdi + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x75c51091
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14000db8f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x14000db70
cmp edx, 0xdb4e2280
je 0x14000db99
test r9d, r9d
jne 0x14000db50
mov rax, qword [rax]
jmp 0x14000db20
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov edi, dword [rdx + rcx*4]
add rdi, r10
cmp byte [rbx + 0xd], 0
je 0x14000dbd3
mov edx, reloc.WS2_32.dll_listen
movabs r8, 0x5f694973d3c78945
mov rcx, rbx
call fcn.1400033f0
mov byte [rbx + 0xd], 0
mov rcx, rbx
call rdi
mov rdi, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x14000dbe5
mov rdi, qword [r14]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000dc76
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000dc76
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov ecx, dword [rdx + r10]
add rcx, r10
mov r8d, 0x591c6e65
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14000dc71
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14000dc50
cmp r8d, 0x1c825f2e
je 0x14000dc7b
test r9d, r9d
jne 0x14000dc30
mov rax, qword [rax]
jmp 0x14000dc00
mov r8d, dword [rbx + 0x1c]
add r8, r10
mov edx, dword [rbx + 0x24]
add rdx, r10
movzx edx, word [rdx + r9*2]
mov eax, dword [r8 + rdx*4]
add rax, r10
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], 3
xor r9d, r9d
mov edx, 0x80000000
mov r8d, 1
mov rcx, rdi
call rax
mov rdi, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov ebx, dword [rdx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000dd44
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000dd44
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x601eb801
movzx eax, byte [r8]
inc r8
test al, al
je 0x14000dd3f
nop
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [r8]
lea r8, [r8 + 1]
test al, al
jne 0x14000dd20
cmp edx, 0xc820ebe4
je 0x14000dd49
test r9d, r9d
jne 0x14000dd00
mov rcx, qword [rcx]
jmp 0x14000dcd0
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor edx, edx
mov r8d, 0x1000002
mov rcx, rdi
call rax
mov rdi, rax
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov r11d, dword [rdx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14000de04
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14000de04
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0xcf1717f9
movzx eax, byte [r8]
inc r8
test al, al
je 0x14000ddff
nop
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [r8]
lea r8, [r8 + 1]
test al, al
jne 0x14000dde0
cmp edx, 0x54cd135f
je 0x14000de09
test r9d, r9d
jne 0x14000ddc0
mov rcx, qword [rcx]
jmp 0x14000dd90
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
mov qword [rsp + 0x20], r15
xor r9d, r9d
xor r8d, r8d
mov edx, 4
mov rcx, rdi
call rax
mov r11, rax
test rax, rax
je 0x14000e178
mov eax, 0x5a4d
cmp word [r11], ax
jne 0x14000e178
movsxd rax, dword [r11 + 0x3c]
add rax, r11
je 0x14000e178
add rax, 0x18
je 0x14000e178
mov eax, dword [rax + 0x70]
add rax, r11
je 0x14000e178
mov edi, dword [rax + 0x1c]
add rdi, r11
mov r9d, dword [rax + 0x20]
add r9, r11
mov esi, dword [rax + 0x24]
add rsi, r11
mov r10d, r15d
mov ebx, dword [rax + 0x18]
test ebx, ebx
je 0x14000e178
nop word [rax + rax]
mov edx, dword [r9]
add rdx, r11
mov r8d, 0x25
movzx eax, byte [rdx]
test al, al
je 0x14000dede
nop dword [rax]
nop word [rax + rax]
movsx eax, al
imul ecx, eax, 0x12ca3
imul r8d, r8d, 0xd32b
xor r8d, ecx
lea rdx, [rdx + 1]
movzx eax, byte [rdx]
test al, al
jne 0x14000dec0
cmp r8d, ebp
je 0x14000def4
inc r10d
add r9, 4
cmp r10d, ebx
jb 0x14000dea0
jmp 0x14000e178
mov eax, r10d
movzx ecx, word [rsi + rax*2]
mov esi, dword [rdi + rcx*4]
add rsi, r11
je 0x14000e178
mov rdi, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x14000df14
mov rdi, qword [r14]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14000dfa4
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14000dfa4
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x99661134
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14000df9f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x14000df80
cmp edx, 0x706cebd
je 0x14000dfa9
test r9d, r9d
jne 0x14000df60
mov rax, qword [rax]
jmp 0x14000df30
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx edx, word [rdx + r9*2]
mov eax, dword [r8 + rdx*4]
add rax, r10
mov rcx, rdi
call rax
test rax, rax
je 0x14000e178
mov r8d, ebp
mov rdx, rax
call fcn.14000ff30
mov rdi, rax
mov rcx, qword [rax]
cmp rcx, qword [rsi]
jne 0x14000dff5
mov rcx, qword [rax + 8]
cmp rcx, qword [rsi + 8]
je 0x14000e178
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14000e084
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14000e084
mov r11d, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [r11 + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0x6ed3b69b
movzx eax, byte [r8]
inc r8
test al, al
je 0x14000e07f
nop
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [r8]
lea r8, [r8 + 1]
test al, al
jne 0x14000e060
cmp edx, 0x53b99875
je 0x14000e089
test r9d, r9d
jne 0x14000e040
mov rcx, qword [rcx]
jmp 0x14000e010
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [rdx + rcx*4]
add rax, r10
lea r9, [rsp + 0x48]
mov edx, reloc.WS2_32.dll_recv
mov r8d, 0x40
mov rcx, rdi
call rax
movups xmm0, xmmword [rsi]
movups xmmword [rdi], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x14000e144
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x14000e144
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r9d
lea rdx, [rbx + r9*4]
mov r8d, dword [rdx + r10]
add r8, r10
mov edx, 0xdfd8e5ac
movzx ecx, byte [r8]
inc r8
test cl, cl
je 0x14000e13f
nop
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [r8]
lea r8, [r8 + 1]
test cl, cl
jne 0x14000e120
cmp edx, 0x9a025fee
je 0x14000e149
test r9d, r9d
jne 0x14000e100
mov rax, qword [rax]
jmp 0x14000e0d0
mov r8d, dword [r11 + 0x1c]
add r8, r10
mov ecx, dword [r11 + 0x24]
add rcx, r10
movzx ecx, word [rcx + r9*2]
mov eax, dword [r8 + rcx*4]
add rax, r10
lea r9, [rsp + 0x4c]
mov r8d, dword [rsp + 0x48]
mov edx, reloc.WS2_32.dll_recv
mov rcx, rdi
call rax
nop
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x14000e1ae
inc rdx
mov rcx, qword [r14]
cmp rdx, 0x1000
jb 0x14000e1a9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000e1df
mov rcx, r8
call fcn.14006eba0
mov byte [r14], 0
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov qword [r14 + 0x10], r15
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.14006eb80
mov rbx, qword [rsp + 0x90]
add rsp, 0x60
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.140075574
int3