Function at 0x14000d348
Capabilities:
Access peb ldr_data
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov qword [rax + 8], rcx
push r12
push r14
push r15
sub rsp, 0x30
mov rsi, r9
mov ebx, r8d
mov r9, qword [rsp + 0x70]
mov r14, rdx
mov r8, rsi
mov edx, ebx
mov rcx, r14
call fcn.14002115c
test rax, rax
je 0x14000d38c
xor eax, eax
jmp 0x14000d5fd
cmp ebx, 2
jne 0x14000d438
mov byte [0x1400b8d88], 1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r9d, dword [rcx + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x14000d412
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x14000d412
mov edi, dword [r9 + 0x20]
dec edx
mov r11d, 0xf1eaeeaa
lea rcx, [rdi + rdx*4]
mov r10d, dword [rcx + r8]
add r10, r8
mov cl, byte [r10]
inc r10
test cl, cl
je 0x14000d40e
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x37d89a
mov cl, byte [r10]
inc r10
test cl, cl
jne 0x14000d3ee
cmp r11d, 0x8c6eabc6
je 0x14000d417
test edx, edx
jne 0x14000d3d1
mov rax, qword [rax]
jmp 0x14000d3ad
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
xor ecx, ecx
add rax, r8
call rax
jmp 0x14000d385
cmp ebx, 5
jne 0x14000d5ea
cmp rsi, 1
je 0x14000d5ea
mov rax, qword gs:[0x58]
lea r15, [0x1400b9090]
mov r12d, 4
mov rdi, qword [rax]
mov eax, dword [rdi + r12]
cmp dword [0x1400b9090], eax
jle 0x14000d49f
mov rcx, r15
call fcn.14006fb00
cmp dword [0x1400b9090], 0xffffffff
jne 0x14000d49f
xorps xmm0, xmm0
xorps xmm1, xmm1
mov rcx, r15
movdqa xmmword [0x1400b9020], xmm0
movdqa xmmword [0x1400b9030], xmm1
call fcn.14006fa94
cmp qword [0x1400b9030], 0
je 0x14000d5ea
mov eax, dword [rdi + r12]
cmp dword [0x1400b9090], eax
jle 0x14000d4e8
mov rcx, r15
call fcn.14006fb00
cmp dword [0x1400b9090], 0xffffffff
jne 0x14000d4e8
xorps xmm0, xmm0
xorps xmm1, xmm1
mov rcx, r15
movdqa xmmword [0x1400b9020], xmm0
movdqa xmmword [0x1400b9030], xmm1
call fcn.14006fa94
mov rcx, qword [0x1400b9028]
test rcx, rcx
je 0x14000d4fa
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov eax, dword [rdi + r12]
cmp dword [0x1400b9090], eax
jle 0x14000d535
mov rcx, r15
call fcn.14006fb00
cmp dword [0x1400b9090], 0xffffffff
jne 0x14000d535
xorps xmm0, xmm0
xorps xmm1, xmm1
mov rcx, r15
movdqa xmmword [0x1400b9020], xmm0
movdqa xmmword [0x1400b9030], xmm1
call fcn.14006fa94
mov rcx, qword [0x1400b9038]
xor edx, edx
movzx r8d, word [rsp + 0x70]
and dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0x57
mov rax, qword [rcx]
mov r10, qword [rax + 0x68]
mov rax, qword [rsp + 0x70]
shr rax, 0x10
movzx r9d, ax
call r10
mov eax, dword [rdi + r12]
cmp dword [0x1400b9090], eax
jle 0x14000d5a3
mov rcx, r15
call fcn.14006fb00
cmp dword [0x1400b9090], 0xffffffff
jne 0x14000d5a3
xorps xmm0, xmm0
xorps xmm1, xmm1
mov rcx, r15
movdqa xmmword [0x1400b9020], xmm0
movdqa xmmword [0x1400b9030], xmm1
call fcn.14006fa94
mov rcx, qword [0x1400b9038]
lea r9, [rsp + 0x50]
lea r8, [0x1400a8ae8]
xor edx, edx
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [0x1400b9030]
lea r9, [0x1400b9028]
mov rdx, qword [rsp + 0x50]
xor r8d, r8d
mov rax, qword [rcx]
call qword [rax + 0x48]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x14000d385
mov r9, qword [rsp + 0x70]
mov r8, rsi
mov edx, ebx
mov rcx, r14
call qword [sym.imp.USER32.dll_DefWindowProcA]
mov rbx, qword [rsp + 0x58]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
add rsp, 0x30
pop r15
pop r14
pop r12
ret