Function at 0x14011f4e0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x100
mov rax, qword [0x140714d80]
xor rax, rsp
mov qword [rsp + 0xf0], rax
mov r15, r8
mov r14, rdx
mov rbp, rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x58], rdx
mov qword [rsp + 0x60], r8
xor r12d, r12d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rdi, rax
mov rbx, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x14011f535
mov rbx, qword [r14]
mov dword [rax], r12d
mov r8d, 0xa
lea rdx, [rsp + 0x48]
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtoll]
mov rsi, rax
cmp rbx, qword [rsp + 0x48]
je 0x14011fba0
cmp dword [rdi], 0x22
je 0x14011fbad
call sub.MSVCP140.dll__Xtime_get_ticks
mov rcx, rax
movabs rax, 0xd6bf94d5e57a42bd
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
sub rdx, rsi
cmp rdx, 0x14
jle 0x14011f649
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14011f626
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14011f626
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xf902a645
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14011f621
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14011f600
cmp r8d, 0xd64b2b05
je 0x14011f62b
test r9d, r9d
jne 0x14011f5e0
mov rax, qword [rax]
jmp 0x14011f5b0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 3
call rdx
call fcn.14013a1b0
test eax, eax
jns 0x14011f709
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14011f6e6
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14011f6e6
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xc293d8d
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14011f6e1
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14011f6c0
cmp r8d, 0x19d685ed
je 0x14011f6eb
test r9d, r9d
jne 0x14011f6a0
mov rax, qword [rax]
jmp 0x14011f670
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 4
call rdx
mov rcx, qword [r14 + 0x10]
mov rdx, qword [r15 + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rcx
cmp rax, rdx
jb 0x14011fb9a
mov r9, r14
cmp qword [r14 + 0x18], 0xf
jbe 0x14011f734
mov r9, qword [r14]
mov rax, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x14011f741
mov rax, qword [r15]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov r8, r14
movzx edx, byte [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.1400df560
nop
mov r8, rbp
cmp qword [rbp + 0x18], 0xf
jbe 0x14011f771
mov r8, qword [rbp]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
mov r9, qword [rbp + 0x10]
mov edx, 0x40
lea rcx, [rsp + 0xb0]
call fcn.14013a420
test eax, eax
je 0x14011f849
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14011f826
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14011f826
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x74dfb147
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14011f821
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14011f800
cmp r8d, 0x870d7387
je 0x14011f82b
test r9d, r9d
jne 0x14011f7e0
mov rax, qword [rax]
jmp 0x14011f7b0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 5
call rdx
lea r8, [0x1408a8828]
cmp qword [0x1408a8840], 0xf
cmova r8, qword [0x1408a8828]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r12
mov r9, qword [0x1408a8838]
mov edx, 0x20
lea rcx, [rsp + 0x88]
call fcn.14013a420
test eax, eax
je 0x14011f949
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14011f926
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14011f926
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0xaee25554
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14011f921
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14011f900
cmp r8d, 0xe4a35164
je 0x14011f92b
test r9d, r9d
jne 0x14011f8e0
mov rax, qword [rax]
jmp 0x14011f8b0
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 6
call rdx
lea rdx, [rsp + 0x68]
cmp qword [rsp + 0x80], 0xf
cmova rdx, qword [rsp + 0x68]
lea r9, [rsp + 0x88]
mov r8, qword [rsp + 0x78]
lea rcx, [rsp + 0xb0]
call fcn.14013a400
test eax, eax
je 0x14011fa2a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x14011fa06
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x14011fa06
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
mov r8d, 0x31ce74a8
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x14011fa01
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x14011f9e0
cmp r8d, 0xdbeb16f8
je 0x14011fa0b
test r9d, r9d
jne 0x14011f9c0
mov rax, qword [rax]
jmp 0x14011f990
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
mov ecx, 7
call rdx
nop
mov rdx, qword [rsp + 0x80]
cmp rdx, 0xf
jbe 0x14011fa6d
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14011fa68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14011fa68
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140224898
mov qword [rsp + 0x78], r12
mov qword [rsp + 0x80], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp + 0x18]
cmp rdx, 0xf
jbe 0x14011fabe
mov rcx, qword [rbp]
inc rdx
cmp rdx, 0x1000
jb 0x14011fab9
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14011fb85
mov rcx, r8
call fcn.140224898
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rbp], 0
mov rdx, qword [r14 + 0x18]
cmp rdx, 0xf
jbe 0x14011fb08
mov rcx, qword [r14]
inc rdx
cmp rdx, 0x1000
jb 0x14011fb03
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14011fb8c
mov rcx, r8
call fcn.140224898
mov qword [r14 + 0x10], r12
mov qword [r14 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r14], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0xf
jbe 0x14011fb4e
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14011fb49
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14011fb93
mov rcx, r8
call fcn.140224898
mov qword [r15 + 0x10], r12
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov eax, 0xa58f
mov rcx, qword [rsp + 0xf0]
xor rcx, rsp
call fcn.140225440
add rsp, 0x100
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.14006ec10
int3
lea rcx, str.invalid_stoll_argument
call sub.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_
int3
lea rcx, str.stoll_argument_out_of_range
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
int3