Function at 0x18006e014
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
movaps xmmword [rax - 0x38], xmm6
xor r12d, r12d
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x180181010]
mov rbx, qword [rax]
test rbx, rbx
je 0x18006ea1c
mov rbx, qword [rbx + 8]
test rbx, rbx
je 0x18006ea1c
mov r15, qword [rbx + 0x30]
test r15, r15
je 0x18006ea1c
mov rax, qword [0x180181018]
mov rcx, qword [rax]
test rcx, rcx
je 0x18006ea1c
cmp qword [rcx + 0x10], r12
je 0x18006ea1c
cmp byte [0x180181890], r12b
movsd xmm0, qword [rbx + 0x90]
mov eax, dword [rbx + 0x98]
movsd qword [rbp - 0x50], xmm0
mov dword [rbp - 0x48], eax
je 0x18006e0d9
cmp byte [0x180181069], r12b
mov eax, dword [0x180181040]
movss xmm0, dword [0x180180224]
mov rcx, qword [rax + rbx]
je 0x18006e0d1
movss dword [rcx + 0xd40], xmm0
jmp 0x18006e0d9
movss dword [rcx + 0xcf0], xmm0
mov eax, dword [0x180181060]
cmp byte [rax + rbx], 0x40
je 0x18006ea1c
movss xmm0, dword [0x1800c4b2c]
comiss xmm0, dword [rbx + 0x280]
ja 0x18006ea1c
mov rax, qword [0x1801818d0]
test rax, rax
jne 0x18006e1a7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18006e18c
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18006e18c
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18006e188
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18006e165
cmp r11d, 0x95466b05
je 0x18006e2b8
test edx, edx
jne 0x18006e149
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18006e19d
cmp qword [rax + 0x30], r12
jne 0x18006e125
mov rax, r12
mov qword [0x1801818d0], rax
mov ecx, 0xa0
call rax
cmp byte [0x180181895], r12b
mov byte [0x1801818b0], 1
je 0x18006ea1c
xorps xmm0, xmm0
movdqu xmmword [r15 + 0x30], xmm0
mov rax, qword [0x1801818d0]
test rax, rax
jne 0x18006e274
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18006e259
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18006e259
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18006e255
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18006e232
cmp r11d, 0x95466b05
je 0x18006e2d5
test edx, edx
jne 0x18006e216
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18006e26a
cmp qword [rax + 0x30], r12
jne 0x18006e1f2
mov rax, r12
mov qword [0x1801818d0], rax
mov ecx, dword [str.WADS]
call rax
movss xmm9, dword [rbp - 0x48]
xorps xmm6, xmm6
movss xmm8, dword [rbp - 0x4c]
movss xmm7, dword [rbp - 0x50]
test ax, ax
jns 0x18006e3a6
mov qword [rbx + 0x320], r12
mov dword [rbx + 0x328], r12d
mov rcx, qword [0x180181020]
test rcx, rcx
je 0x18006e2f2
mov rcx, qword [rcx]
jmp 0x18006e2f6
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18006e1a0
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18006e26d
mov rcx, qword [rbp + 0x30]
mov rax, qword [rbx + 0x30]
mov dword [rax + 0x30], 0x3f800000
movsd xmm0, qword [rcx + 0x3d0]
mov eax, dword [rcx + 0x3d8]
movsd qword [rbp - 0x50], xmm0
movss xmm3, dword [rbp - 0x50]
ucomiss xmm3, xmm6
mov dword [rbp - 0x48], eax
jp 0x18006e350
jne 0x18006e350
movss xmm0, dword [rbp - 0x4c]
ucomiss xmm0, xmm6
jp 0x18006e350
jne 0x18006e350
movd xmm2, eax
ucomiss xmm2, xmm6
jp 0x18006e355
jne 0x18006e355
movsd xmm0, qword [rcx + 0x40]
movss xmm2, dword [rcx + 0x48]
movsd qword [rbp - 0x50], xmm0
movss xmm3, dword [rbp - 0x50]
jmp 0x18006e355
movss xmm2, dword [rbp - 0x48]
movss xmm0, dword [0x180180238]
movss xmm1, dword [rbp - 0x4c]
mulss xmm3, xmm0
mulss xmm1, xmm0
mulss xmm2, xmm0
addss xmm3, xmm7
addss xmm1, xmm8
addss xmm2, xmm9
movss dword [rbx + 0x90], xmm3
movaps xmm0, xmm3
movss dword [rbx + 0x94], xmm1
unpcklps xmm0, xmm1
movss dword [rbx + 0x98], xmm2
movsd qword [r15 + 0x50], xmm0
movss dword [r15 + 0x58], xmm2
mov rax, qword [0x1801818d0]
test rax, rax
jne 0x18006e44b
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18006e430
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18006e430
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18006e42c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18006e40d
cmp r11d, 0x95466b05
je 0x18006e47b
test edx, edx
jne 0x18006e3f1
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18006e441
cmp qword [rax + 0x30], r12
jne 0x18006e3cd
mov rax, r12
mov qword [0x1801818d0], rax
mov ecx, dword [0x180180234]
call rax
test ax, ax
jns 0x18006e552
mov qword [rbx + 0x320], r12
mov dword [rbx + 0x328], r12d
mov rcx, qword [0x180181020]
test rcx, rcx
je 0x18006e495
mov rcx, qword [rcx]
jmp 0x18006e499
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18006e444
mov rcx, qword [rbp + 0x30]
mov rax, qword [rbx + 0x30]
mov dword [rax + 0x30], 0x3f800000
movsd xmm0, qword [rcx + 0x3d0]
mov eax, dword [rcx + 0x3d8]
movsd qword [rbp - 0x50], xmm0
movss xmm2, dword [rbp - 0x50]
ucomiss xmm2, xmm6
mov dword [rbp - 0x48], eax
jp 0x18006e4f3
jne 0x18006e4f3
movss xmm0, dword [rbp - 0x4c]
ucomiss xmm0, xmm6
jp 0x18006e4f3
jne 0x18006e4f3
movd xmm5, eax
ucomiss xmm5, xmm6
jp 0x18006e4f8
jne 0x18006e4f8
movsd xmm0, qword [rcx + 0x40]
movss xmm5, dword [rcx + 0x48]
movsd qword [rbp - 0x50], xmm0
movss xmm2, dword [rbp - 0x50]
jmp 0x18006e4f8
movss xmm5, dword [rbp - 0x48]
movss xmm1, dword [0x180180238]
movaps xmm4, xmm7
movss xmm0, dword [rbp - 0x4c]
movaps xmm3, xmm8
mulss xmm2, xmm1
mulss xmm0, xmm1
subss xmm4, xmm2
mulss xmm5, xmm1
subss xmm3, xmm0
movaps xmm2, xmm9
subss xmm2, xmm5
movss dword [rbx + 0x90], xmm4
movaps xmm0, xmm4
movss dword [rbx + 0x94], xmm3
unpcklps xmm0, xmm3
movss dword [rbx + 0x98], xmm2
movsd qword [r15 + 0x50], xmm0
movss dword [r15 + 0x58], xmm2
mov rax, qword [0x1801818d0]
test rax, rax
jne 0x18006e5f7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18006e5dc
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18006e5dc
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18006e5d8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18006e5b9
cmp r11d, 0x95466b05
je 0x18006e627
test edx, edx
jne 0x18006e59d
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18006e5ed
cmp qword [rax + 0x30], r12
jne 0x18006e579
mov rax, r12
mov qword [0x1801818d0], rax
mov ecx, dword [0x18018022c]
call rax
test ax, ax
jns 0x18006e6f8
mov qword [rbx + 0x320], r12
mov dword [rbx + 0x328], r12d
mov rcx, qword [0x180181020]
test rcx, rcx
je 0x18006e641
mov rcx, qword [rcx]
jmp 0x18006e645
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18006e5f0
mov rcx, qword [rbp + 0x30]
mov rax, qword [rbx + 0x30]
mov dword [rax + 0x30], 0x3f800000
movsd xmm0, qword [rcx + 0x3d0]
mov eax, dword [rcx + 0x3d8]
movsd qword [rbp - 0x50], xmm0
movss xmm4, dword [rbp - 0x50]
ucomiss xmm4, xmm6
mov dword [rbp - 0x48], eax
jp 0x18006e69f
jne 0x18006e69f
movss xmm0, dword [rbp - 0x4c]
ucomiss xmm0, xmm6
jp 0x18006e69f
jne 0x18006e69f
movd xmm3, eax
ucomiss xmm3, xmm6
jp 0x18006e6a4
jne 0x18006e6a4
movsd xmm0, qword [rcx + 0x40]
movss xmm3, dword [rcx + 0x48]
movsd qword [rbp - 0x50], xmm0
movss xmm4, dword [rbp - 0x50]
jmp 0x18006e6a4
movss xmm3, dword [rbp - 0x48]
movss xmm1, dword [0x180180238]
movaps xmm2, xmm7
movss xmm0, dword [rbp - 0x4c]
mulss xmm0, xmm1
mulss xmm4, xmm1
subss xmm2, xmm0
mulss xmm3, xmm1
addss xmm4, xmm8
addss xmm3, xmm9
movss dword [rbx + 0x90], xmm2
movaps xmm0, xmm2
movss dword [rbx + 0x94], xmm4
unpcklps xmm0, xmm4
movss dword [rbx + 0x98], xmm3
movsd qword [r15 + 0x50], xmm0
movss dword [r15 + 0x58], xmm3
mov rax, qword [0x1801818d0]
test rax, rax
jne 0x18006e79d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rdi, qword [rax]
mov r10, rdi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18006e782
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18006e782
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18006e77e
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18006e75f
cmp r11d, 0x95466b05
je 0x18006e7cd
test edx, edx
jne 0x18006e743
mov rax, qword [r10]
mov r10, rax
cmp rax, rdi
je 0x18006e793
cmp qword [rax + 0x30], r12
jne 0x18006e71f
mov rax, r12
mov qword [0x1801818d0], rax
mov ecx, dword [0x180180230]
call rax
test ax, ax
jns 0x18006e8a1
mov qword [rbx + 0x320], r12
mov dword [rbx + 0x328], r12d
mov rcx, qword [0x180181020]
test rcx, rcx
je 0x18006e7e7
mov rcx, qword [rcx]
jmp 0x18006e7eb
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18006e796
mov rcx, qword [rbp + 0x30]
mov rax, qword [rbx + 0x30]
mov dword [rax + 0x30], 0x3f800000
movsd xmm0, qword [rcx + 0x3d0]
mov eax, dword [rcx + 0x3d8]
movsd qword [rbp - 0x50], xmm0
movss xmm1, dword [rbp - 0x50]
ucomiss xmm1, xmm6
mov dword [rbp - 0x48], eax
jp 0x18006e845
jne 0x18006e845
movss xmm0, dword [rbp - 0x4c]
ucomiss xmm0, xmm6
jp 0x18006e845
jne 0x18006e845
movd xmm4, eax
ucomiss xmm4, xmm6
jp 0x18006e84a
jne 0x18006e84a
movsd xmm0, qword [rcx + 0x40]
movss xmm4, dword [rcx + 0x48]
movsd qword [rbp - 0x50], xmm0
movss xmm1, dword [rbp - 0x50]
jmp 0x18006e84a
movss xmm4, dword [rbp - 0x48]
movss xmm0, dword [0x180180238]
movaps xmm2, xmm8
movss xmm3, dword [rbp - 0x4c]
mulss xmm1, xmm0
mulss xmm3, xmm0
subss xmm2, xmm1
mulss xmm4, xmm0
addss xmm3, xmm7
movaps xmm1, xmm9
subss xmm1, xmm4
movss dword [rbx + 0x90], xmm3
movaps xmm0, xmm3
movss dword [rbx + 0x94], xmm2
movss dword [rbx + 0x98], xmm1
unpcklps xmm0, xmm2
movsd qword [r15 + 0x50], xmm0
movss dword [r15 + 0x58], xmm1
mov rax, qword [0x1801818d0]
test rax, rax
jne 0x18006e946
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18006e92b
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x18006e92b
mov r14d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r8 + rdx*4]
mov ecx, dword [rax + r14]
add rcx, r8
mov al, byte [rcx]
inc rcx
test al, al
je 0x18006e927
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
inc rcx
test al, al
jne 0x18006e908
cmp r11d, 0x95466b05
je 0x18006e975
test edx, edx
jne 0x18006e8ec
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x18006e93c
cmp qword [rax + 0x30], r12
jne 0x18006e8c8
mov rax, r12
mov qword [0x1801818d0], rax
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call rax
test ax, ax
jns 0x18006ea1c
mov qword [rbx + 0x320], r12
mov dword [rbx + 0x328], r12d
mov rcx, qword [0x180181020]
test rcx, rcx
je 0x18006e98f
mov rcx, qword [rcx]
jmp 0x18006e993
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x18006e93f
mov rcx, qword [rbp + 0x30]
mov rax, qword [rbx + 0x30]
mov dword [rax + 0x30], 0x3f800000
movsd xmm0, qword [rcx + 0x3d0]
mov eax, dword [rcx + 0x3d8]
movsd qword [rbp - 0x50], xmm0
movss xmm0, dword [rbp - 0x50]
ucomiss xmm0, xmm6
mov dword [rbp - 0x48], eax
jp 0x18006e9de
jne 0x18006e9de
movss xmm0, dword [rbp - 0x4c]
ucomiss xmm0, xmm6
jp 0x18006e9de
jne 0x18006e9de
movd xmm1, eax
ucomiss xmm1, xmm6
jp 0x18006e9e3
jne 0x18006e9e3
movss xmm1, dword [rcx + 0x48]
jmp 0x18006e9e3
movss xmm1, dword [rbp - 0x48]
mulss xmm1, dword [0x180180238]
movaps xmm0, xmm7
movss dword [rbx + 0x90], xmm7
movss dword [rbx + 0x94], xmm8
addss xmm1, xmm9
unpcklps xmm0, xmm8
movss dword [rbx + 0x98], xmm1
movsd qword [r15 + 0x50], xmm0
movss dword [r15 + 0x58], xmm1
movaps xmm6, xmmword [rsp + 0x60]
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm7, xmmword [rsp + 0x50]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret