Function at 0x1400b6e20
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1402f3440]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor esi, esi
mov qword [0x1402f8058], rsi
mov qword [0x1402f8050], rsi
mov qword [0x1402f8048], rsi
mov qword [0x1402f8040], rsi
mov qword [0x1402f8038], rsi
mov qword [0x1402f8030], rsi
mov rax, qword [0x1402f8798]
lea rcx, [0x1402f8030]
mov rdx, qword [0x1402f8298]
xor r9d, r9d
xor r8d, r8d
mov dword [rsp + 0x20], 1
call rax
test eax, eax
je 0x1400b6eb4
lea rcx, [0x1402f8030]
call qword [0x1402f8770]
lea rcx, [0x1402f8030]
call qword [0x1402f87a8]
call qword [0x1402f8740]
cmp rax, qword [0x1402f81c8]
jne 0x1400b6ef7
mov edx, 3
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindow]
mov rcx, qword [0x1402f8298]
xor r9d, r9d
mov dword [rsp + 0x30], 3
mov rdx, rax
mov dword [rsp + 0x28], esi
xor r8d, r8d
mov dword [rsp + 0x20], esi
call qword [0x1402f8820]
mov rax, qword [0x1402f8768]
mov ecx, dword [0x1402f81f0]
call rax
test ax, ax
je 0x1400b6fc0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400b6f97
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400b6f97
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x58ac09c
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400b6f92
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400b6f70
cmp r8d, 0x9461cc
je 0x1400b6f9c
test r9d, r9d
jne 0x1400b6f50
mov rax, qword [rax]
jmp 0x1400b6f20
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 8
add rax, r10
call rax
nop word [rax + rax]
mov rcx, qword [0x1402f81c8]
lea rdx, [rbp - 0x20]
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x20], rsi
mov qword [rbp - 0x30], rsi
call qword [0x1402f87f0]
mov rcx, qword [0x1402f81c8]
lea rdx, [rbp - 0x30]
call qword [0x1402f87f8]
mov eax, dword [rbp - 0x30]
lea rcx, [rbp - 0x28]
mov rbx, qword [0x1402f7fd0]
mov dword [rbp - 0x20], eax
mov eax, dword [rbp - 0x2c]
mov dword [rbp - 0x1c], eax
mov rax, qword [0x1402f81c8]
mov qword [rbx + 0x108], rax
mov dword [rbx + 0x18], 0x3c888889
call qword [0x1402f8748]
mov eax, dword [rbp - 0x28]
sub eax, dword [rbp - 0x30]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x118], xmm0
mov eax, dword [rbp - 0x24]
sub eax, dword [rbp - 0x2c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [rbx + 0x11c], xmm0
mov rax, qword [0x1402f8768]
mov ecx, dword [0x1402f8200]
call rax
test ax, ax
je 0x1400b707a
mov byte [rbx + 0x120], 1
mov eax, dword [rbx + 0x11c]
mov dword [rbx + 0x3dc], eax
mov byte [rbx + 0x430], 1
jmp 0x1400b7081
mov byte [rbx + 0x120], sil
mov eax, dword [0x1402f8940]
cmp dword [rbp - 0x20], eax
jne 0x1400b70ad
mov eax, dword [0x1402f8948]
cmp dword [rbp - 0x18], eax
jne 0x1400b70ad
mov eax, dword [0x1402f8944]
cmp dword [rbp - 0x1c], eax
jne 0x1400b70ad
mov eax, dword [0x1402f894c]
cmp dword [rbp - 0x14], eax
je 0x1400b710e
mov ecx, dword [0x1402f81e8]
xor edx, edx
mov eax, dword [0x1402f81b8]
movups xmm0, xmmword [rbp - 0x20]
mov r9d, dword [rbp - 0x2c]
mov r8d, dword [rbp - 0x30]
mov dword [rsp + 0x30], 8
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
mov dword [0x1402f7ff0], ecx
mov rcx, qword [0x1402f8298]
movups xmmword [0x1402f8940], xmm0
mov dword [0x1402f7ff4], eax
call qword [0x1402f8820]
mov rcx, qword [0x1402f8318]
lea rdx, [0x1402f7ff0]
mov rax, qword [rcx]
call qword [rax + 0x80]
call fcn.1400b64a0
cmp dword [0x1402f8038], 0x12
jne 0x1400b6e71
cmp qword [0x1402f8240], rsi
je 0x1400b7186
mov rcx, qword [0x1402f8248]
test rcx, rcx
je 0x1400b7142
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402f8248], rsi
mov rcx, qword [0x1402f8238]
test rcx, rcx
je 0x1400b715b
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402f8238], rsi
mov rcx, qword [0x1402f8230]
mov rbx, qword [0x1402f7fd0]
test rcx, rcx
je 0x1400b7174
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1402f8230], rsi
mov rax, qword [rbx + 0xa0]
mov qword [rax + 8], rsi
mov rbx, qword [0x1402f7fd0]
mov rcx, rbx
mov qword [0x1402f8240], rsi
mov qword [0x1402f8250], rsi
call fcn.140075e90
cmp qword [0x1402f7fd0], rbx
jne 0x1400b71b3
mov qword [0x1402f7fd0], rsi
test rbx, rbx
je 0x1400b71db
mov rcx, rbx
call fcn.140082f30
mov rax, qword [0x1402f7fd0]
test rax, rax
je 0x1400b71d2
dec dword [rax + 0x3c8]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x1402f8298]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1402352c0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret