Function at 0x140001b00
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x1403e7140]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r13, rcx
mov qword [rbp + 0x27], rcx
xor esi, esi
mov dword [rsp + 0x20], 0x80012
mov dword [rsp + 0x24], 0xf0000
mov dword [rsp + 0x28], 8
mov dword [rbp - 0x7d], 0x80008
mov dword [rbp - 0x79], 0xb0010
mov dword [rbp - 0x75], 0x100008
mov dword [rbp - 0x71], Ordinal_41
mov qword [rbp - 0x6d], reloc.WS2_32.dll_recv
mov dword [rbp - 0x65], esi
mov dword [rbp - 0x61], 0xa9ef0000
mov dword [rbp - 0x5d], 0x30500d6
mov word [rbp - 0x59], 0xef
mov r11d, esi
lea r9, [rbp - 0x6b]
nop word [rax + rax]
lea ebx, [r11 + r11*2]
movzx ecx, word [rsp + rbx*2 + 0x20]
mov word [r9], cx
movzx eax, r11w
add ax, ax
lea edi, [rax + r11]
movzx r8d, byte [rbp - 0x5d]
add r8w, di
xor r8w, cx
mov word [r9], r8w
xor dl, dl
lea eax, [rbx + 1]
movzx r10d, word [rsp + rax*2 + 0x20]
nop dword [rax]
nop dword [rax + rax]
movzx ecx, dl
movzx eax, r10w
shr ax, cl
test al, 1
jne 0x140001bf7
inc dl
cmp dl, 4
jne 0x140001be0
jmp 0x140001c07
movzx r8d, r8w
movzx eax, byte [rbp - 0x5a]
btc r8d, eax
mov word [r9], r8w
mov dl, 5
lea eax, [rbx + 2]
lea rbx, [rsp + 0x20]
lea rbx, [rbx + rax*2]
movzx r10d, word [rbx]
nop dword [rax]
movzx ecx, dl
movzx eax, r10w
shr ax, cl
test al, 1
jne 0x140001c37
inc dl
cmp dl, 8
jne 0x140001c20
jmp 0x140001c4a
movzx ecx, r8w
movzx eax, byte [rbp - 0x5b]
btc ecx, eax
movzx r8d, cx
mov word [r9], cx
xor cl, cl
movzx edx, word [rbx]
nop
movzx eax, dx
shr ax, cl
test al, 1
jne 0x140001c63
inc cl
cmp cl, 5
jne 0x140001c50
jmp 0x140001c76
movzx ecx, r8w
movzx eax, byte [rbp - 0x5c]
btc ecx, eax
movzx r8d, cx
mov word [r9], cx
movzx eax, byte [rbp - 0x5e]
add ax, di
xor ax, r8w
mov word [r9], ax
inc r11d
add r9, 2
cmp r11d, 5
jne 0x140001ba0
xorps xmm0, xmm0
movups xmmword [rbp - 0x51], xmm0
mov qword [rbp - 0x41], rsi
mov qword [rbp - 0x39], rsi
lea rax, [rbp - 0x6b]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x140001cb0
lea rdx, [rbp - 0x6b]
lea rcx, [rbp - 0x51]
call fcn.14008e5f0
nop
lea rdx, [rbp - 0x51]
cmp qword [rbp - 0x39], 7
cmova rdx, qword [rbp - 0x51]
movabs r9, 0xcbf29ce484222325
mov rax, qword [rbp - 0x41]
lea r8, [rax + rax]
mov rcx, rsi
test r8, r8
je 0x140001d13
movabs r10, 0x100000001b3
nop dword [rax + rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x140001d00
lea r8, [rbp - 0x51]
lea rdx, [rbp - 9]
lea rcx, [0x1403e7e90]
call fcn.140302950
mov rcx, qword [rax + 8]
mov rbx, qword [0x1403e7e98]
test rcx, rcx
cmovne rbx, rcx
cmp rbx, qword [0x1403e7e98]
je 0x140001d48
add rbx, 0x30
jmp 0x140001d4c
lea rbx, [rbp - 0x51]
mov r8d, reloc.WLDAP32.dll_Ordinal_32
lea rdx, [0x1403e7d58]
lea rcx, [rbp + 7]
call fcn.14006c280
nop
mov r8, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 7
jbe 0x140001d71
mov rbx, qword [rbx]
mov rdx, rbx
mov rcx, rax
call fcn.14008ed30
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x19], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x29], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x19], xmm1
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], 7
mov word [rax], si
lea r12, [rbp - 0x29]
cmp qword [rbp - 0x11], 7
cmova r12, qword [rbp - 0x29]
mov r15, r13
cmp qword [r13 + 0x18], 7
jbe 0x140001dc5
mov r15, qword [r13]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rbx, qword [rax + 0x30]
movsxd rcx, dword [rbx + 0x3c]
mov r14d, dword [rcx + rbx + 0x88]
add r14, rbx
cmp r14, rbx
je 0x140001e68
mov r11d, dword [r14 + 0x18]
test r11d, r11d
je 0x140001e68
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r11d
lea rcx, [rsi + r11*4]
mov r9d, dword [rcx + rbx]
add r9, rbx
mov r10d, 0x84e4b344
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x140001e63
nop
movsx edx, cl
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
movzx ecx, byte [r9]
lea r9, [r9 + 1]
test cl, cl
jne 0x140001e30
cmp r10d, 0x6116b4c9
je 0x140001e70
test r11d, r11d
jne 0x140001e10
mov rax, qword [rax]
jmp 0x140001de0
mov ecx, dword [r14 + 0x1c]
add rcx, rbx
mov eax, dword [r14 + 0x24]
add rax, rbx
movzx eax, word [rax + r11*2]
mov r10d, dword [rcx + rax*4]
add r10, rbx
xor r9d, r9d
mov r8, r12
mov rdx, r15
xor ecx, ecx
call r10
nop
lea rcx, [rbp - 0x29]
call fcn.1400808f0
nop
lea rcx, [rbp + 7]
call fcn.1400808f0
nop
lea rcx, [rbp - 0x51]
call fcn.1400808f0
nop
mov rcx, r13
call fcn.1400808f0
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.140360560
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret