Function at 0x140006880
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x20
cmp byte [0x140192ceb], 0
je 0x140006904
mov ecx, 5
call fcn.14001c580
mov rdx, rax
mov ecx, reloc.WS2_32.dll_setsockopt
call fcn.140024310
mov ecx, 5
call fcn.14001c580
mov rdx, rax
mov ecx, reloc.WS2_32.dll_socket
call fcn.140024310
mov ecx, 5
call fcn.14001c580
mov rdx, rax
mov ecx, reloc.WLDAP32.dll_Ordinal_22
call fcn.140024310
lea rdx, [rbp + 0x10]
mov dword [rbp + 0x10], 0xbdcccccd
lea rcx, str.Launched
mov dword [rbp + 0x14], 0x41f00000
call fcn.140042c70
mov ecx, 3
add rsp, 0x20
pop rbp
jmp fcn.140023d00
cmp byte [0x140192cea], 0
jne 0x140006c72
cmp qword [0x140145048], 0
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], rdi
jne 0x140006a8a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400069b7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400069b7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400069b2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140006990
cmp r8d, 0x2fa62ca8
je 0x1400069bc
test r9d, r9d
jne 0x140006970
mov rax, qword [rax]
jmp 0x140006940
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 0x1388
add rax, r10
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140006a67
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140006a67
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140006a62
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140006a40
cmp r8d, 0xcded1a85
je 0x140006a6c
test r9d, r9d
jne 0x140006a20
mov rax, qword [rax]
jmp 0x1400069f0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 3
add rax, r10
call rax
cmp qword [0x140145028], 0
jne 0x140006bfa
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140006b27
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140006b27
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140006b22
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140006b00
cmp r8d, 0x2fa62ca8
je 0x140006b2c
test r9d, r9d
jne 0x140006ae0
mov rax, qword [rax]
jmp 0x140006ab0
mov edx, dword [rbx + 0x24]
mov ecx, 0x1388
add rdx, r10
movzx r8d, word [rdx + r9*2]
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov eax, dword [rdx + r8*4]
add rax, r10
call rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140006bd7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140006bd7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140006bd2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140006bb0
cmp r8d, 0xcded1a85
je 0x140006bdc
test r9d, r9d
jne 0x140006b90
mov rax, qword [rax]
jmp 0x140006b60
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 3
add rax, r10
call rax
mov eax, dword [str.xTCY_Q:]
lea rdx, [rbp + 0x18]
mov dword [rbp + 0x10], eax
lea rcx, [rbp + 0x10]
movzx eax, word [0x14011f24c]
mov r8d, 0xf0
xor byte [rbp + 0x11], 0x35
xor byte [rbp + 0x12], 0x36
xor byte [rbp + 0x13], 0x37
mov word [rbp + 0x14], ax
movzx eax, byte [0x14011f24e]
xor byte [rbp + 0x14], 0x38
xor al, 0x3a
xor byte [rbp + 0x15], 0x39
mov byte [rbp + 0x16], al
mov dword [rbp + 0x1c], 0x41f00000
mov dword [rbp + 0x18], 0xbdcccccd
mov byte [rbp + 0x10], Ordinal_79
call fcn.14000cf40
mov rdi, qword [rsp + 0x48]
mov rbx, qword [rsp + 0x40]
test al, al
je 0x140006d03
mov byte [0x140192cea], 1
add rsp, 0x20
pop rbp
ret
call fcn.140004ed0
call fcn.14001bf70
movss xmm0, dword [0x140192fd8]
movss xmm3, dword [0x140145058]
addss xmm0, dword [rax + 0x10]
comiss xmm3, xmm0
jbe 0x140006cba
call fcn.14001bf70
movss xmm0, dword [0x140192fd8]
movss xmm3, dword [0x140145058]
addss xmm0, dword [rax + 0x10]
movss dword [0x140192fd8], xmm0
jmp 0x140006cc5
movss dword [0x140192fd8], xmm3
movaps xmm0, xmm3
divss xmm0, xmm3
lea r8, [0x14011f0a1]
mov dword [rbp + 0x10], 0xbdcccccd
lea rdx, [rbp + 0x10]
mov dword [rbp + 0x14], 0x41f00000
call fcn.140046c30
movss xmm0, dword [0x140192fd8]
ucomiss xmm0, dword [0x140145058]
jp 0x140006d03
jne 0x140006d03
mov word [0x140192cea], 0x100
add rsp, 0x20
pop rbp
ret