Function at 0x14035a030
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
cmp qword [0x7ffe0014], 0
je 0x14035a12c
mov qword [rax + 8], rsi
mov esi, 0x7ffe0014
nop
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14035a0f7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14035a0f7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x73fe817c
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14035a0f2
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x14035a0d0
cmp r8d, 0x6b4a19ff
je 0x14035a0fc
test r9d, r9d
jne 0x14035a0b0
mov rax, qword [rax]
jmp 0x14035a080
mov eax, dword [rdi + 0x24]
mov ecx, dword [rdi + 0x1c]
add rax, r10
add rcx, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
mov ecx, 0x2710
add rdx, r10
call rdx
cmp qword [rsi], 0
jne 0x14035a060
mov rsi, qword [rsp + 0xe0]
mov rcx, qword [0x14049bfa8]
lea r8, [rbp - 0x49]
movabs rax, 0x827ff0c45b598fde
lea rdx, [rbp + 0x37]
mov qword [rbp - 0x59], rax
mov r9d, 0x2c
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x49], rax
movabs rax, 0xcce5a1406ebd8ff2
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x41], rax
movabs rax, 0xa6c17dbda3cc004c
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x39], rax
movabs rax, 0x7c472920255e1aac
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x31], rax
movabs rax, 0x8b6471b15fff390
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x29], rax
movabs rax, 0xa107005aa836b786
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x21], rax
movabs rax, 0x6c0415c417f0fad7
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x19], rax
movabs rax, 0x5de9ddf46b645fe5
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 0x11], rax
movabs rax, 0xf10d95b70e05b59d
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 9], rax
movabs rax, 0xa9a1fd320bcedaae
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp - 1], rax
movabs rax, 0xd3a021cdccb86b3f
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp + 7], rax
movabs rax, 0x20345950447e72d8
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp + 0xf], rax
movabs rax, 0x60966a3b7d8b86f1
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp + 0x17], rax
movabs rax, 0xc0686c06db46c3f2
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp + 0x1f], rax
movabs rax, 0x1e707ba14b829fb3
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
mov qword [rbp + 0x27], rax
movabs rax, 0x5de9dd841b07719c
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 0x59]
movdqa xmm0, xmmword [rbp - 9]
pxor xmm0, xmmword [rbp - 0x49]
movdqa xmm1, xmmword [rbp + 7]
pxor xmm1, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x49], xmm0
movdqa xmm0, xmmword [rbp + 0x17]
pxor xmm0, xmmword [rbp - 0x29]
movdqa xmmword [rbp - 0x39], xmm1
mov qword [rbp + 0x2f], rax
movdqa xmm1, xmmword [rbp + 0x27]
pxor xmm1, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x29], xmm0
movdqa xmmword [rbp - 0x19], xmm1
call fcn.140398980
cmp qword [rbp + 0x4f], 0x10
lea r8, [rbp + 0x37]
mov r9, qword [rbp + 0x47]
lea rcx, [rbp - 9]
cmovae r8, qword [rbp + 0x37]
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xor edx, edx
mov qword [rbp + 7], 0
mov qword [rbp + reloc.WS2_32.dll_ntohs], 0xf
mov byte [rbp - 9], 0
call fcn.14035ab50
lea rdx, [rbp - 0x49]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], 0
movups xmmword [rbp - 0x49], xmm0
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
movups xmmword [rbp - 0x39], xmm1
mov byte [rax], 0
call fcn.14035b6c0
mov rdx, qword [rbp - 0x31]
cmp rdx, 0x10
jb 0x14035a380
mov rcx, qword [rbp - 0x49]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14035a37b
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14035a6aa
call fcn.140419458
mov rdx, qword [rbp + 0xf]
cmp rdx, 0x10
jb 0x14035a3bb
mov rcx, qword [rbp - 9]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14035a3b6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14035a6aa
call fcn.140419458
mov byte [rbp - 0x51], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x14035a447
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14035a447
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x6cfc37e0
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14035a442
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14035a420
cmp r8d, 0xcef20b6c
je 0x14035a44c
test r9d, r9d
jne 0x14035a400
mov rax, qword [rax]
jmp 0x14035a3d0
mov eax, dword [rdi + 0x24]
xor r8d, r8d
mov ecx, dword [rdi + 0x1c]
add rax, r11
add rcx, r11
mov dl, 1
movzx eax, word [rax + r9*2]
lea r9, [rbp - 0x51]
mov r10d, dword [rcx + rax*4]
lea ecx, [r8 + 0x14]
add r10, r11
call r10
mov dword [rbp - 0x4d], 1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x14035a507
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14035a507
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x6ffc3c99
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14035a502
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14035a4e0
cmp r8d, 0x3b03105e
je 0x14035a50c
test r9d, r9d
jne 0x14035a4c0
mov rax, qword [rax]
jmp 0x14035a490
mov eax, dword [rdi + 0x24]
lea r8, [rbp - 0x4d]
mov ecx, dword [rdi + 0x1c]
add rax, r11
add rcx, r11
movzx eax, word [rax + r9*2]
mov r9d, 4
mov r10d, dword [rcx + rax*4]
lea edx, [r9 + 0x19]
add r10, r11
mov rcx, 0xffffffffffffffff
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14035a5c7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14035a5c7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x6efc3b06
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14035a5c2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x14035a5a0
cmp r8d, 0x45fb09f0
je 0x14035a5cc
test r9d, r9d
jne 0x14035a580
mov rax, qword [rax]
jmp 0x14035a550
mov eax, dword [rdi + 0x24]
mov rcx, 0xffffffffffffffff
mov edx, dword [rdi + 0x1c]
add rax, r10
add rdx, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rdx + rax*4]
mov edx, dword [0x7ffe0014]
add r8, r10
call r8
mov ecx, 0xa
call fcn.140419954
lea rcx, [rax + 1]
call fcn.140419458
mov ecx, 4
call fcn.1404196c8
mov edx, 4
mov rcx, rax
mov rbx, rax
call fcn.140419458
mov ecx, 4
mov dword [rbx], 0xa
call fcn.1404196c8
mov edx, 4
mov rcx, rax
mov rbx, rax
call fcn.140419458
mov edx, 4
mov rcx, rbx
call fcn.140419458
mov ecx, dword [0x7ffe0014]
int 0x29
mov rdx, qword [rbp + 0x4f]
cmp rdx, 0x10
jb 0x14035a68f
mov rcx, qword [rbp + 0x37]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14035a68a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14035a6a4
call fcn.140419458
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.140428d2c
int3
call fcn.140428d2c
int3