Function at 0x1401f6740
Capabilities:
Access peb ldr_data
Get process heap flags
Hash data using fnv

Disassembly:
mov qword [rsp + 0x18], rbx
mov dword [rsp + 0x10], edx
mov dword [rsp + 8], ecx
push rsi
push rdi
push r14
sub rsp, 0x70
mov rax, qword [0x140601e40]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov edi, edx
mov esi, ecx
mov r8d, dword [0x14062d9a0]
mov rax, qword gs:[0x58]
mov r14d, 0x30
mov rax, qword [rax + r8*8]
xor ebx, ebx
mov eax, dword [r14 + rax]
cmp dword [0x14062c650], eax
jg 0x1401f6a18
mov ecx, dword [0x14062d9a0]
mov rax, qword gs:[0x58]
mov rax, qword [rax + rcx*8]
mov eax, dword [r14 + rax]
cmp dword [0x14062c6a0], eax
jg 0x1401f691b
test esi, esi
jne 0x1401f67c2
mov eax, edi
jmp 0x1401f68fd
movzx edx, sil
movabs r11, 0xcbf29ce484222325
xor rdx, r11
movabs r10, 0x100000001b3
imul rdx, r10
movzx eax, byte [rsp + 0x91]
xor rdx, rax
imul rdx, r10
movzx eax, byte [rsp + 0x92]
xor rdx, rax
imul rdx, r10
movzx eax, byte [rsp + 0x93]
xor rdx, rax
imul rdx, r10
and rdx, qword [0x14062c640]
lea rax, [rdx + rdx]
mov r9, qword [0x14062c628]
mov rcx, qword [r9 + rax*8 + 8]
mov r8, qword [0x14062c618]
cmp rcx, r8
je 0x1401f6850
add rdx, rdx
mov rax, qword [r9 + rdx*8]
cmp esi, dword [rcx + 0x10]
je 0x1401f6853
nop dword [rax]
cmp rcx, rax
je 0x1401f6850
mov rcx, qword [rcx + 8]
cmp esi, dword [rcx + 0x10]
jne 0x1401f6840
jmp 0x1401f6853
mov rcx, rbx
mov rax, r8
test rcx, rcx
cmovne rax, rcx
cmp rax, r8
je 0x1401f6870
mov eax, dword [rax + 0x14]
jmp 0x1401f68fd
movzx edx, dil
xor rdx, r11
imul rdx, r10
movzx eax, byte [rsp + 0x99]
xor rdx, rax
imul rdx, r10
movzx eax, byte [rsp + 0x9a]
xor rdx, rax
imul rdx, r10
movzx eax, byte [rsp + 0x9b]
xor rdx, rax
imul rdx, r10
and rdx, qword [0x14062c690]
lea rax, [rdx + rdx]
mov r9, qword [0x14062c678]
mov rcx, qword [r9 + rax*8 + 8]
mov r8, qword [0x14062c668]
cmp rcx, r8
je 0x1401f68e8
add rdx, rdx
mov rax, qword [r9 + rdx*8]
cmp edi, dword [rcx + 0x10]
je 0x1401f68e5
cmp rcx, rax
je 0x1401f68e8
mov rcx, qword [rcx + 8]
cmp edi, dword [rcx + 0x10]
jne 0x1401f68d7
mov rbx, rcx
mov rcx, r8
test rbx, rbx
cmovne rcx, rbx
mov eax, 0x63
cmp rcx, r8
cmovne eax, edi
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140284180
mov rbx, qword [rsp + 0xa0]
add rsp, 0x70
pop r14
pop rdi
pop rsi
ret
lea rcx, [0x14062c6a0]
call fcn.140284344
cmp dword [0x14062c6a0], 0xffffffff
jne 0x1401f67b7
movdqa xmm0, xmmword [0x140470a50]
movdqu xmmword [rsp + 0x38], xmm0
movdqa xmm1, xmmword [0x140470a60]
movdqu xmmword [rsp + 0x48], xmm1
mov dword [rsp + 0x58], 0x1f5
mov dword [rsp + 0x5c], 0x1f7
mov dword [rsp + 0x20], 0
mov eax, dword [rsp + 0x20]
mov dword [0x14062c660], eax
mov qword [0x14062c668], rbx
mov qword [0x14062c670], rbx
mov ecx, 0x18
call fcn.140283d70
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x14062c668], rax
mov qword [0x14062c678], rbx
xorps xmm0, xmm0
movdqa xmmword [0x14062c680], xmm0
mov qword [0x14062c690], 7
mov qword [0x14062c698], 8
mov dword [0x14062c660], 0x3f800000
mov r8, qword [0x14062c668]
mov edx, reloc.WS2_32.dll_recv
lea rcx, [0x14062c678]
call fcn.140028b70
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x38]
lea rcx, [0x14062c660]
call fcn.1401eea90
nop
lea rcx, [0x140430a30]
call fcn.140283ff0
nop
lea rcx, [0x14062c6a0]
call fcn.1402842d8
jmp 0x1401f67b7
lea rcx, [0x14062c650]
call fcn.140284344
cmp dword [0x14062c650], 0xffffffff
jne 0x1401f6794
movdqa xmm0, xmmword [0x140470a40]
movdqu xmmword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov eax, dword [rsp + 0x20]
mov dword [0x14062c610], eax
mov qword [0x14062c618], rbx
mov qword [0x14062c620], rbx
mov ecx, 0x18
call fcn.140283d70
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [0x14062c618], rax
mov qword [0x14062c628], rbx
xorps xmm0, xmm0
movdqa xmmword [0x14062c630], xmm0
mov qword [0x14062c640], 7
mov qword [0x14062c648], 8
mov dword [0x14062c610], 0x3f800000
mov r8, qword [0x14062c618]
mov edx, reloc.WS2_32.dll_recv
lea rcx, [0x14062c628]
call fcn.140028b70
nop
lea r8, [rsp + 0x38]
lea rdx, [rsp + 0x28]
lea rcx, [0x14062c610]
call fcn.1401ee780
nop
lea rcx, [0x140430a20]
call fcn.140283ff0
nop
lea rcx, [0x14062c650]
call fcn.1402842d8
jmp 0x1401f6794