Function at 0x14000b440
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xc0
mov rax, qword [0x140123218]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov qword [rbp - 0x41], r9
mov qword [rbp - 0x39], rdx
mov qword [rbp - 0x61], rcx
mov rcx, qword [rbp + 0x7f]
mov qword [rbp - 0x49], rcx
test rdx, rdx
je 0x14000ba5d
cmp qword [0x1401d1160], 0
je 0x14000ba5d
xor r15d, r15d
mov r14d, 0xb1ad9f86
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r11, qword [rax + 0x30]
test r11, r11
je 0x14000b678
cmp word [rax + 0x48], 0
je 0x14000b678
mov ecx, dword [rax + 0x58]
sub cx, 8
test r15d, r15d
je 0x14000b523
mov r9, qword [rax + 0x60]
movzx ecx, cx
shr rcx, 1
lea rbx, [r9 + rcx*2]
mov r10d, 0xeddbd4b6
cmp r9, rbx
je 0x14000b51a
nop dword [rax]
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
add r9, 2
cmp r9, rbx
jne 0x14000b4f0
cmp r10d, r15d
jne 0x14000b678
movsxd rcx, dword [r11 + 0x3c]
mov rdx, qword [rcx + r11 + 0x88]
mov r13, rdx
shr r13, 0x20
mov esi, edx
add rsi, r11
cmp rsi, r11
je 0x14000b678
mov edi, dword [rsi + 0x18]
test edi, edi
je 0x14000b678
mov r8d, dword [rsi + 0x1c]
add r8, r11
mov qword [rbp - 0x59], r8
mov ecx, dword [rsi + 0x24]
add rcx, r11
mov qword [rbp - 0x51], rcx
mov r9d, dword [rsi + 0x20]
nop dword [rax + rax]
dec edi
movzx ecx, word [rcx + rdi*2]
mov ebx, dword [r8 + rcx*4]
add rbx, r11
lea rcx, [r9 + rdi*4]
mov r9d, dword [rcx + r11]
add r9, r11
cmp rbx, rsi
jbe 0x14000b59b
lea rcx, [rsi + r13]
cmp rbx, rcx
jae 0x14000b59b
mov r12b, 1
jmp 0x14000b59e
xor r12b, r12b
mov r10d, 0xeddbd4b6
movzx ecx, byte [r9]
inc r9
test cl, cl
je 0x14000b5de
nop
movsx edx, cl
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
xor r8d, r10d
imul r10d, r8d, 0x1000193
movzx ecx, byte [r9]
lea r9, [r9 + 1]
test cl, cl
jne 0x14000b5b0
mov r8, qword [rbp - 0x59]
cmp r10d, r14d
je 0x14000b5f7
test edi, edi
mov rcx, qword [rbp - 0x51]
mov r9d, dword [rsi + 0x20]
jne 0x14000b570
mov rax, qword [rax]
jmp 0x14000b4b0
test r12b, r12b
je 0x14000b680
mov r15d, 0xeddbd4b6
mov r14d, r15d
movzx edx, byte [rbx]
cmp dl, 0x2e
je 0x14000b637
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r15d
imul r15d, ecx, 0x1000193
inc rbx
movzx edx, byte [rbx]
cmp dl, 0x2e
jne 0x14000b611
inc rbx
movzx edx, byte [rbx]
test dl, dl
je 0x14000b667
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r14d
imul r14d, ecx, 0x1000193
lea rbx, [rbx + 1]
movzx edx, byte [rbx]
test dl, dl
jne 0x14000b641
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14000b4b0
test rbx, rbx
je 0x14000ba5d
mov word [rbp - 0x11], 0xb848
mov word [rbp - 7], 0xe0ff
mov rax, qword [0x1401d1160]
mov qword [rbp - 0xf], rax
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x1401d11a8], eax
jle 0x14000b9c7
lea rcx, [0x1401d11a8]
call fcn.1400cae40
cmp dword [0x1401d11a8], 0xffffffff
jne 0x14000b9c7
mov al, 0xf4
mov r8b, 0x91
mov r9b, 0xc3
mov r10b, 0xef
mov r11b, 0xee
mov dil, 0xce
mov sil, 0x9c
mov r14b, 0x9e
mov r15b, 0x9d
mov r12b, 0xd
xorps xmm0, xmm0
xor r13d, r13d
movups xmmword [rbp - 0x77], xmm0
mov word [rbp - 0x67], r13w
movzx edx, al
movzx eax, dl
and al, 0xd5
mov ecx, 1
sub cl, al
add cl, cl
add cl, dl
mov byte [rsp + 0x20], cl
movzx ecx, r8b
movzx eax, cl
and al, 0xd6
add al, al
sub cl, al
add cl, 3
mov byte [rbp - 0x80], cl
movzx edx, r9b
movzx eax, dl
and al, 0xd7
mov ecx, 2
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x7f], cl
movzx ecx, r10b
movzx eax, cl
and al, 0xd8
add al, al
sub cl, al
add cl, 5
mov byte [rbp - 0x7e], cl
movzx edx, r11b
movzx eax, dl
and al, 0xd9
mov ecx, 3
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x7d], cl
movzx ecx, dil
movzx eax, cl
and al, 0xda
add al, al
sub cl, al
add cl, 7
mov byte [rbp - 0x7c], cl
movzx edx, sil
movzx eax, dl
and al, 0xdb
mov ecx, 4
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x7b], cl
movzx ecx, r14b
movzx eax, cl
and al, 0xdc
add al, al
sub cl, al
add cl, 9
mov byte [rbp - 0x7a], cl
movzx edx, r15b
movzx eax, dl
and al, 0xdd
mov ecx, 5
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x79], cl
movzx ecx, r12b
movzx eax, cl
and al, 0xde
add al, al
sub cl, al
add cl, 0xb
mov byte [rbp - 0x78], cl
movd eax, xmm0
movzx edx, al
movzx eax, dl
and al, 0xdf
mov ecx, 6
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x77], cl
movzx ecx, byte [rbp - 0x76]
movzx eax, cl
and al, 0xe0
add al, al
sub cl, al
add cl, r12b
mov byte [rbp - 0x76], cl
movzx edx, byte [rbp - 0x75]
movzx eax, dl
and al, 0xe1
mov ecx, 7
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x75], cl
movzx ecx, byte [rbp - 0x74]
movzx eax, cl
and al, 0xe2
add al, al
sub cl, al
add cl, 0xf
mov byte [rbp - 0x74], cl
movzx edx, byte [rbp - 0x73]
movzx eax, dl
and al, 0xe3
mov ecx, 8
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x73], cl
movzx ecx, byte [rbp - 0x72]
movzx eax, cl
and al, 0xe4
add al, al
sub cl, al
add cl, 0x11
mov byte [rbp - 0x72], cl
movzx edx, byte [rbp - 0x71]
movzx eax, dl
and al, 0xe5
mov ecx, 9
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x71], cl
movzx ecx, byte [rbp - 0x70]
movzx eax, cl
and al, 0xe6
add al, al
sub cl, al
add cl, 0x13
mov byte [rbp - 0x70], cl
movzx edx, byte [rbp - 0x6f]
movzx eax, dl
and al, 0xe7
mov ecx, 0xa
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x6f], cl
movzx ecx, byte [rbp - 0x6e]
movzx eax, cl
and al, 0xe8
add al, al
sub cl, al
add cl, 0x15
mov byte [rbp - 0x6e], cl
movzx edx, byte [rbp - 0x6d]
movzx eax, dl
and al, 0xe9
mov ecx, 0xb
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x6d], cl
movzx ecx, byte [rbp - 0x6c]
movzx eax, cl
and al, 0xea
add al, al
sub cl, al
add cl, 0x17
mov byte [rbp - 0x6c], cl
movzx edx, byte [rbp - 0x6b]
movzx eax, dl
and al, 0xeb
mov ecx, recv
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x6b], cl
movzx ecx, byte [rbp - 0x6a]
movzx eax, cl
and al, 0xec
add al, al
sub cl, al
add cl, 0x19
mov byte [rbp - 0x6a], cl
movzx edx, byte [rbp - 0x69]
movzx eax, dl
and al, 0xed
mov ecx, recvfrom
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x69], cl
movzx ecx, byte [rbp - 0x68]
movzx eax, cl
and al, r11b
add al, al
sub cl, al
add cl, 0x1b
mov byte [rbp - 0x68], cl
movzx edx, r13b
movzx eax, dl
and al, r10b
mov ecx, recvfrom
sub cl, al
add cl, cl
add cl, dl
mov byte [rbp - 0x67], cl
movzx ecx, byte [rbp - 0x66]
mov eax, ecx
movabs rdx, 0xef4377b659bc19f0
and rax, rdx
imul rax, rax, 0xfffffffffffffffe
add rax, rdx
add rcx, rax
add cl, 0x2d
mov byte [rbp - 0x66], cl
movups xmmword [rbp - 0x31], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x21], xmm1
lea rax, [rsp + 0x20]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], r13b
jne 0x14000b980
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x31]
call fcn.14000c4c0
nop
lea r8, [rbp - 0x31]
mov rdi, qword [rbp - 0x61]
mov rcx, rdi
call fcn.140004420
mov qword [0x1401d1178], rax
lea rcx, [rbp - 0x31]
call fcn.140009b90
nop
lea rcx, [0x1401d11a8]
call fcn.1400cadd4
jmp 0x14000b9cb
mov rdi, qword [rbp - 0x61]
mov r8, qword [0x1401d1178]
test r8, r8
je 0x14000ba5d
mov r9d, recvfrom
lea rdx, [rbp - 1]
mov rcx, rdi
call fcn.140004120
test al, al
je 0x14000ba5d
movzx eax, byte [rbp - 0x11]
cmp byte [rbp - 1], al
jne 0x14000ba15
movzx eax, byte [rbp - 0x10]
cmp byte [rbp], al
jne 0x14000ba15
movzx eax, byte [rbp - 7]
cmp byte [rbp + 9], al
jne 0x14000ba15
movzx eax, byte [rbp - 6]
cmp byte [rbp + 0xa], al
je 0x14000ba5d
mov r9d, recvfrom
lea r8, [rbp - 0x11]
mov rdx, qword [0x1401d1178]
mov rcx, rdi
call fcn.140004330
test al, al
je 0x14000ba5d
mov rdx, qword [rbp - 0x49]
mov rcx, qword [rbp - 0x41]
call rbx
mov rdx, qword [rbp - 0x39]
mov byte [rdx], al
mov r9d, recvfrom
lea r8, [rbp - 1]
mov rdx, qword [0x1401d1178]
mov rcx, rdi
call fcn.140004330
jmp 0x14000ba5f
xor al, al
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.1400cad70
mov rbx, qword [rsp + 0x110]
add rsp, 0xc0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret