Function at 0x14038a6e0
Capabilities:
Access peb ldr_data
Encode data using xor
Get kernel32 base address
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x88]
sub rsp, 0x188
mov rsi, rdx
xor r14d, r14d
mov dword [rbp + 0xd0], r14d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14038a796
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14038a796
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x250f1153
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x14038a791
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x14038a770
cmp r8d, 0x1bf4f7b6
je 0x14038a79b
test r9d, r9d
jne 0x14038a750
mov rax, qword [rax]
jmp 0x14038a720
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
mov r13, rax
movabs rdx, 0x8bc1c19ad94e0866
movabs r8, 0xded99d93da746619
test rax, rax
jne 0x14038aea7
mov r10, qword [0x14049bfa8]
movabs rax, 0xadabf8e08f285c5a
mov qword [rbp + 0xd0], rax
mov rcx, qword [rbp + 0xd0]
mov qword [rsp + 0x70], rcx
movabs rax, 0xee859de8bc3d5d3a
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rsp + 0x78], rax
movabs rax, 0x37561c353675b660
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp - 0x80], rax
movabs rax, 0x76b69d3c17c6ed5c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp - 0x78], rax
movabs rax, 0x5144da9ff5e4c88c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp - 0x70], rax
movabs rax, 0x82f6452a6173fdde
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp - 0x68], rax
movabs rax, 0x6f366752f465de03
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp - 0x60], rax
movabs rax, 0xeae467dafc22d51f
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp - 0x58], rax
movabs rax, 0xb4d2ccfe8694583d
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp - 0x50], rax
movabs rax, 0x12763d824d18abd7
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp - 0x48], rax
mov qword [rbp + 0xd0], r8
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x30], rax
mov qword [rbp + 0xd0], rdx
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x38], rax
movabs rax, 0x423740455901dd13
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x40], rax
movabs rax, 0x2ac5ed4c76e68528
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x48], rax
movabs rax, 0x3964f7bf9d90bded
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x50], rax
movabs rax, 0xe3992976120389aa
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x58], rax
movabs rax, 0x33551521a817bb67
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x60], rax
movabs rax, 0x93900ea88941b06c
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x68], rax
movabs rax, 0xc0bbbe8be5f12b61
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x70], rax
movabs rax, 0x12763df23d7b85ae
mov qword [rbp + 0xd0], rax
mov rax, qword [rbp + 0xd0]
mov qword [rbp + 0x78], rax
movdqa xmm0, xmmword [rsp + 0x70]
pxor xmm0, xmmword [rbp + 0x30]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x80]
pxor xmm1, xmmword [rbp + 0x40]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [rbp - 0x70]
pxor xmm0, xmmword [rbp + 0x50]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [rbp - 0x60]
pxor xmm1, xmmword [rbp + 0x60]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [rbp - 0x50]
pxor xmm0, xmmword [rbp + 0x70]
movdqa xmmword [rbp - 0x50], xmm0
mov r9d, 0x1eb
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x50]
mov rcx, r10
call fcn.140398980
nop
xorps xmm0, xmm0
movups xmmword [rbp], xmm0
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp], r13b
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x30], r13b
mov dword [rbp + 0xd0], 1
lea r8, [rsp + 0x50]
cmp qword [rsp + 0x68], 0x10
cmovae r8, qword [rsp + 0x50]
mov r9, qword [rsp + 0x60]
xor edx, edx
lea rcx, [rsp + 0x30]
call fcn.14035ab50
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x30], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], r13b
mov dword [rbp + 0xd0], 5
lea rdx, [rbp - 0x40]
call fcn.14035b6c0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14038ab2a
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14038ab25
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14038b08f
call fcn.140419458
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
mov dword [rbp + 0xd0], 4
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x14038ab81
inc rdx
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14038ab7c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14038b095
call fcn.140419458
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x30], 0
mov byte [rbp + 0xd8], 0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x14038ac26
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14038ac26
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x2434cd54
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14038ac21
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14038ac00
cmp r8d, 0x4452a2d0
je 0x14038ac2b
test r9d, r9d
jne 0x14038abe0
mov rax, qword [rax]
jmp 0x14038abb0
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
lea r9, [rbp + 0xd8]
xor r8d, r8d
mov dl, 1
lea ecx, [r8 + 0x14]
call r10
mov dword [rbp + 0xe0], 1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x14038acf6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14038acf6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r11 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r11
mov r8d, 0x2534cee7
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14038acf1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14038acd0
cmp r8d, 0x26dd66ac
je 0x14038acfb
test r9d, r9d
jne 0x14038acb0
mov rax, qword [rax]
jmp 0x14038ac80
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov r9d, 4
lea r8, [rbp + 0xe0]
lea edx, [r9 + 0x19]
mov rcx, 0xffffffffffffffff
call r10
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x14038adb6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x14038adb6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x2234ca2e
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14038adb1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14038ad90
cmp r8d, 0xd22d6a8
je 0x14038adbb
test r9d, r9d
jne 0x14038ad70
mov rax, qword [rax]
jmp 0x14038ad40
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r8d, dword [rcx + rax*4]
add r8, r10
mov edx, dword [0x7ffe0014]
mov rcx, 0xffffffffffffffff
call r8
mov ecx, 0xa
call fcn.140419954
lea rcx, [rax + 1]
call fcn.140419458
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov dword [rbx], 0xa
mov ecx, 4
call fcn.1404196c8
mov rbx, rax
mov edx, 4
mov rcx, rax
call fcn.140419458
mov edx, 4
mov rcx, rbx
call fcn.140419458
mov ecx, dword [0x7ffe0014]
int 0x29
mov qword [rbp + 0x10], r14
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp], 0
mov rdx, qword [rsp + 0x68]
cmp rdx, 0x10
jb 0x14038ae94
inc rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14038ae8f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14038b09b
call fcn.140419458
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x50], 0
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1404a24f4], eax
jle 0x14038aee4
lea rcx, [0x1404a24f4]
call fcn.1404195b8
cmp dword [0x1404a24f4], 0xffffffff
jne 0x14038aee4
lea rcx, [0x1404a24f4]
call fcn.140419558
movsxd r12, dword [r13 + 0x3c]
add r12, r13
movzx eax, word [r12 + 0x14]
lea rsi, [r12 + 0x18]
add rsi, rax
mov ebx, r14d
mov r15d, r14d
cmp r14w, word [r12 + 6]
jae 0x14038b073
movabs rdi, 0xded99de7a2111237
xorps xmm0, xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], r14
mov qword [rbp - 8], r14
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x14038af30
mov rdx, rsi
lea rcx, [rbp - 0x20]
call fcn.14035aa00
mov qword [rbp + 0xe8], rdi
mov rax, qword [rbp + 0xe8]
mov qword [rsp + 0x20], rax
movabs rcx, 0x8bc1c19ad94e0866
mov qword [rbp + 0xe8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rsp + 0x28], rax
movabs rax, 0xded99d93da746619
mov qword [rbp + 0xe8], rax
mov rax, qword [rbp + 0xe8]
mov qword [rbp + 0x20], rax
mov qword [rbp + 0xe8], rcx
mov rax, qword [rbp + 0xe8]
mov qword [rbp + 0x28], rax
movdqa xmm0, xmmword [rbp + 0x20]
pxor xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea rcx, [rsp + 0x20]
mov rax, 0xffffffffffffffff
inc rax
cmp byte [rcx + rax], 0
jne 0x14038afc1
lea rcx, [rbp - 0x20]
mov rdi, qword [rbp - 0x20]
mov r14, qword [rbp - 8]
cmp r14, 0x10
cmovae rcx, rdi
mov r8, qword [rbp - 0x10]
cmp r8, rax
jne 0x14038b026
lea rdx, [rsp + 0x20]
call fcn.14041c670
test eax, eax
jne 0x14038b026
mov r8d, dword [rsi + 8]
mov ecx, dword [rsi + 0xc]
add rcx, r13
xor ebx, ebx
xor edx, edx
test r8, r8
je 0x14038b026
nop dword [rax + rax]
movzx eax, byte [rcx]
crc32 ebx, eax
inc edx
lea rcx, [rcx + 1]
movsxd rax, edx
cmp rax, r8
jb 0x14038b010
cmp r14, 0x10
jb 0x14038b059
lea rdx, [r14 + 1]
cmp rdx, 0x1000
mov rax, rdi
jb 0x14038b051
mov rdi, qword [rdi - 8]
sub rax, rdi
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14038b089
mov rcx, rdi
call fcn.140419458
inc r15d
add rsi, 0x28
movzx eax, word [r12 + 6]
cmp r15d, eax
jge 0x14038b073
xor r14d, r14d
jmp 0x14038af0b
mov eax, ebx
add rsp, 0x188
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
nop
call fcn.140428d2c
int3