Function at 0x18001b120
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
push rbp
lea rbp, [r11 - 0x38]
sub rsp, 0x130
mov rax, qword [0x1801bfcc0]
xor rax, rsp
mov qword [rbp - 0x30], rax
cmp byte [0x1801c0934], 0
je 0x18001b59c
mov rax, qword [0x1801c0d90]
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
test rax, rax
jne 0x18001b217
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x18001b1f8
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x18001b1f8
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x811c9dc5
lea rax, [rbx + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18001b1f3
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18001b1d0
cmp edx, 0x95466b05
je 0x18001b2d6
test r8d, r8d
jne 0x18001b1b0
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x18001b20e
cmp qword [rax + 0x30], 0
jne 0x18001b180
xor eax, eax
mov qword [0x1801c0d90], rax
mov ecx, dword [reloc.WS2_32.dll_bind]
call rax
test ax, ax
jns 0x18001b584
movaps xmmword [rsp + 0x120], xmm6
movaps xmmword [rsp + 0x110], xmm7
movaps xmmword [rsp + 0xf0], xmm9
call fcn.18003e740
movss xmm9, dword [rax + 8]
mulss xmm9, dword [0x18015a9b0]
call fcn.18003e740
movss xmm7, dword [rax + 0xc]
mulss xmm7, dword [0x18015a9b0]
call fcn.18001a530
mov rdi, rax
test rax, rax
je 0x18001b56b
movaps xmmword [rsp + 0x100], xmm8
lea rdx, [rbp - 0x40]
mov r8d, 0x796e
movaps xmmword [rsp + 0xe0], xmm10
mov rcx, rax
call qword [0x1801c08a8]
movaps xmm2, xmmword [rbp - 0x40]
mov ecx, dword [0x1801c093c]
movaps xmm0, xmm2
shufps xmm0, xmm2, 0x55
movaps xmm1, xmm2
shufps xmm1, xmm2, 0xaa
sub ecx, 1
je 0x18001b30c
sub ecx, 1
je 0x18001b304
sub ecx, 1
je 0x18001b2fc
sub ecx, 1
je 0x18001b2f4
cmp ecx, 1
jne 0x18001b331
mov r8d, 0xb1
jmp 0x18001b312
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x18001b210
mov r8d, 0x9d4d
jmp 0x18001b312
mov r8d, 0x9000
jmp 0x18001b312
mov r8d, 0xf9bb
jmp 0x18001b312
mov r8d, 0x60f2
lea rdx, [rbp - 0x60]
mov rcx, rdi
call qword [0x1801c08a8]
movaps xmm1, xmmword [rbp - 0x60]
movaps xmm0, xmm1
movaps xmm2, xmm1
shufps xmm0, xmm1, 0x55
shufps xmm1, xmm1, 0xaa
movaps xmm10, xmm2
movd esi, xmm1
unpcklps xmm10, xmm0
movsd qword [rbp - 0x80], xmm10
mov dword [rbp - 0x78], esi
call fcn.18003e740
lea r8, [rbp - 0x6c]
mov qword [rbp - 0x70], 0
lea rdx, [rbp - 0x70]
mov rbx, rax
lea rcx, [rbp - 0x80]
call qword [0x1801c08a0]
movss xmm0, dword [rbp - 0x6c]
movss xmm8, dword [rbp - 0x70]
mulss xmm8, dword [rbx + 8]
cvtps2pd xmm1, xmm7
movss dword [rbp - 0x70], xmm8
mulss xmm0, dword [rbx + 0xc]
movss dword [rbp - 0x6c], xmm0
cvtps2pd xmm0, xmm0
subsd xmm0, xmm1
movsd xmm1, qword [0x18015a9f8]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [0x18015a9f8]
movaps xmm7, xmm0
cvtps2pd xmm0, xmm8
cvtps2pd xmm2, xmm9
subsd xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movaps xmm8, xmmword [rsp + 0x100]
addsd xmm7, xmm0
xorps xmm0, xmm0
xorps xmm1, xmm1
cvtsd2ss xmm0, xmm7
ucomiss xmm1, xmm0
ja 0x18001b3e1
xorps xmm1, xmm1
sqrtss xmm1, xmm0
jmp 0x18001b3e9
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm1, xmm0
mov ecx, dword [0x1801c0940]
test ecx, ecx
je 0x18001b55a
sub ecx, 1
je 0x18001b52c
cmp ecx, 1
jne 0x18001b562
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x18001b562
movabs rcx, 0xd80958fc74e988a6
call fcn.180016e10
mov edx, eax
movabs rcx, 0xa6db4965674d243
mov ebx, eax
call fcn.180016eb0
xor r8d, r8d
mov edx, eax
movabs rcx, 0x3133b907d8b32053
mov edi, eax
call fcn.180017190
movaps xmm6, xmm0
call fcn.18001a530
test rax, rax
je 0x18001b562
mov edx, ebx
movabs rcx, 0x34616828cd07f1a1
call fcn.180016eb0
test eax, eax
je 0x18001b562
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
movsxd rcx, dword [reloc.WS2_32.dll_recv]
xor edx, edx
div rcx
cmp rdx, 1
jne 0x18001b51d
call fcn.18001a530
test rax, rax
je 0x18001b562
movsd xmm1, qword [rax + 0x90]
xor ecx, ecx
movss xmm3, dword [rax + 0x98]
movaps xmm2, xmm1
movss xmm0, dword [0x18015aa08]
movaps xmm4, xmm3
subss xmm4, dword [0x18015a9b4]
addss xmm3, dword [0x18015a9f0]
movss dword [rsp + 0x68], xmm0
mov dword [rsp + 0x60], ecx
mov dword [rsp + 0x58], 1
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x40], ecx
movabs rcx, 0x867654cbc7606f2c
cvttss2si eax, xmm6
shufps xmm2, xmm2, 0x55
mov dword [rsp + 0x38], eax
movss dword [rsp + 0x30], xmm4
movss dword [rsp + 0x28], xmm2
movss dword [rsp + 0x20], xmm1
call fcn.180017da0
call qword [sym.imp.KERNEL32.dll_GetTickCount64]
mov qword [0x1801c0520], rax
jmp 0x18001b562
mov eax, dword [reloc.WLDAP32.dll_Ordinal_30]
lea ecx, [rax + rax*4]
add ecx, ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
jbe 0x18001b562
lea rcx, [rsp + 0x70]
movsd qword [rsp + 0x70], xmm10
mov dword [rsp + 0x78], esi
call fcn.180019760
jmp 0x18001b562
mov rcx, rdi
call fcn.180025c20
movaps xmm10, xmmword [rsp + 0xe0]
movaps xmm7, xmmword [rsp + 0x110]
movaps xmm6, xmmword [rsp + 0x120]
movaps xmm9, xmmword [rsp + 0xf0]
mov rsi, qword [rsp + 0x148]
mov rbx, qword [rsp + 0x140]
mov rdi, qword [rsp + 0x150]
mov rcx, qword [rbp - 0x30]
xor rcx, rsp
call fcn.1800e2cb0
add rsp, 0x130
pop rbp
ret