Function at 0x18006d1e0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x1801a0080]
xor rax, rsp
mov qword [rbp + 7], rax
movabs r12, 0x4d9c645520d2d2ac
movabs r13, 0x1243017c5b125a23
cmp byte [0x1801a0bc8], 0
jne 0x18006d356
movabs rax, 0x124360153a7e3b6e
mov qword [rbp - 0x49], rax
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x49], r13
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x21], rax
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp - 0x29]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [0x1801a0bd0]
cmp qword [0x1801a0be8], 0xf
cmova rdx, qword [0x1801a0bd0]
xor r9d, r9d
lea r8, [rbp - 0x39]
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x18006d336
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x18006d336
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rbx]
add rdx, r10
mov r8d, 0x9bf14db6
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x18006d331
nop dword [rax]
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x18006d310
cmp r8d, 0x3201f653
je 0x18006d33b
test r9d, r9d
jne 0x18006d2f0
mov rax, qword [rax]
jmp 0x18006d2c0
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rcx + rax*4]
add rdx, r10
xor ecx, ecx
call rdx
call fcn.180021b50
xor ecx, ecx
call fcn.18002f070
call fcn.180021ef0
xor edi, edi
mov dword [rax + 0x10], edi
movdqa xmm0, xmmword [0x1800d4cc0]
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rax + 0x138], xmm0
movdqa xmm3, xmmword [0x1800d4c80]
movups xmmword [rbp - 0x19], xmm3
movups xmmword [rax + 0x148], xmm3
movdqa xmm2, xmmword [0x1800d4c60]
movups xmmword [rbp - 0x19], xmm2
movups xmmword [rax + 0x158], xmm2
movdqa xmm0, xmmword [0x1800ccb80]
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rax + 0x1e8], xmm0
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rax + 0x1f8], xmm0
movdqa xmm0, xmmword [0x1800d4ca0]
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rax + 0x208], xmm0
movdqa xmm1, xmmword [0x1800d4cd0]
movups xmmword [rbp - 0x19], xmm1
movups xmmword [rax + 0x218], xmm1
movups xmmword [rbp - 0x19], xmm3
movups xmmword [rax + 0x228], xmm3
movups xmmword [rbp - 0x19], xmm2
movups xmmword [rax + 0x238], xmm2
mov dword [rbp - 0x39], 0x437a0000
mov dword [rbp - 0x35], 0x437a0000
mov edx, 2
lea rcx, [rbp - 0x39]
call fcn.18002f2c0
mov qword [rbp - 0x39], rdi
call fcn.180021860
movss xmm8, dword [rax + 0xc]
subss xmm8, dword [0x1800cccbc]
mulss xmm8, dword [0x1800cca90]
call fcn.180021860
movss xmm0, dword [rax + 8]
subss xmm0, dword [0x1800cccbc]
mulss xmm0, dword [0x1800cca90]
movss dword [rbp - 0x29], xmm0
movss dword [rbp - 0x25], xmm8
lea r8, [rbp - 0x39]
xor edx, edx
lea rcx, [rbp - 0x29]
call fcn.18002f230
movabs rax, 0x124301123275354f
mov qword [rbp - 0x49], rax
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x49], r13
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x21], rax
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp - 0x29]
movdqa xmmword [rbp - 0x39], xmm0
xor edx, edx
mov r8d, 0x19f
lea rcx, [rbp - 0x39]
call fcn.180018d00
lea rcx, [rbp - 0x49]
call fcn.180022140
call fcn.180022110
mov rbx, rax
call fcn.1800210c0
call fcn.180021440
movss xmm1, dword [0x1800ccaf8]
movss xmm0, dword [0x1800ccad4]
unpcklps xmm0, xmm1
movsd qword [rbp - 0x39], xmm0
movsd qword [rbp - 0x39], xmm0
movss xmm4, dword [rbp - 0x49]
movaps xmm0, xmm4
addss xmm0, dword [0x1800ccad4]
movss dword [rbp - 0x39], xmm0
movss xmm1, dword [rbp - 0x35]
addss xmm1, dword [rbp - 0x45]
movss dword [rbp - 0x35], xmm1
movss xmm1, dword [0x1800d4c24]
movss xmm0, dword [0x1800d4c28]
unpcklps xmm0, xmm1
movsd qword [rbp - 0x29], xmm0
movsd qword [rbp - 0x29], xmm0
addss xmm4, dword [0x1800d4c28]
movss dword [rbp - 0x29], xmm4
movss xmm0, dword [rbp - 0x25]
addss xmm0, dword [rbp - 0x45]
movss dword [rbp - 0x25], xmm0
movdqa xmm0, xmmword [0x1800d4d20]
movups xmmword [rbp - 0x19], xmm0
lea rcx, [rbp - 0x19]
call fcn.18001dd60
mov dword [rsp + 0x28], edi
movss xmm0, dword [0x1800ccae4]
movss dword [rsp + 0x20], xmm0
mov r9d, eax
lea r8, [rbp - 0x29]
lea rdx, [rbp - 0x39]
mov rcx, rbx
call fcn.180037170
mov dword [rbp - 0x49], 0x42be0000
mov dword [rbp - 0x45], 0x42240000
lea rcx, [rbp - 0x49]
call fcn.18002ea20
movabs rax, 0x772e601229772976
mov qword [rbp - 0x49], rax
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x49], r13
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x21], rax
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
lea rcx, [rbp - 0x39]
call fcn.18005cd50
movss xmm6, dword [0x1800cccb8]
movaps xmm0, xmm6
call fcn.18002f210
mov dword [rbp - 0x49], 0x41c00000
mov dword [rbp - 0x45], 0x426c0000
lea rcx, [rbp - 0x49]
call fcn.18002ea20
movabs rax, 0x1243731928677900
mov qword [rbp - 0x49], rax
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x49], r13
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x21], rax
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8d, reloc.WLDAP32.dll_Ordinal_50
lea rsi, [0x1801a0790]
mov rdx, rsi
lea rcx, [rbp - 0x39]
call fcn.180056390
mov dword [rbp - 0x49], 0x42ba0000
mov dword [rbp - 0x45], 0x42a80000
lea rcx, [rbp - 0x49]
call fcn.18002ea20
movabs rax, 0x76316e0b28613b73
mov qword [rbp - 0x49], rax
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x49], r13
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x21], rax
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
lea rcx, [rbp - 0x39]
call fcn.18005cd50
movaps xmm0, xmm6
call fcn.18002f210
mov dword [rbp - 0x49], 0x41c00000
mov dword [rbp - 0x45], 0x42d00000
lea rcx, [rbp - 0x49]
call fcn.18002ea20
movabs rax, 0x1243720f3a627900
mov qword [rbp - 0x49], rax
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x49], r13
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x21], rax
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
mov r9d, 0x8000
mov r8d, reloc.WLDAP32.dll_Ordinal_50
lea r14, [0x1801a07c8]
mov rdx, r14
lea rcx, [rbp - 0x39]
call fcn.180056390
mov dword [rbp - 0x49], 0x42da0000
mov dword [rbp - 0x45], 0x43000000
lea rcx, [rbp - 0x49]
call fcn.18002ea20
movabs rax, 0x1243017c5b6b3f68
mov qword [rbp - 0x49], rax
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x49], r13
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x21], rax
movdqa xmm1, xmmword [rbp - 0x29]
xorps xmm1, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm1
lea rcx, [rbp - 0x39]
call fcn.18005cd50
movaps xmm0, xmm6
call fcn.18002f210
mov dword [rbp - 0x49], 0x41c00000
mov dword [rbp - 0x45], 0x43130000
lea rcx, [rbp - 0x49]
call fcn.18002ea20
movabs rax, 0x124301053e797900
mov qword [rbp - 0x49], rax
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x49], r13
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x49], r12
mov rax, qword [rbp - 0x49]
mov qword [rbp - 0x21], rax
movdqa xmm0, xmmword [rbp - 0x29]
xorps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rdi
xor r9d, r9d
mov r8d, 0x64
lea r15, [0x1801a0800]
mov rdx, r15
lea rcx, [rbp - 0x39]
call fcn.180056390
mov dword [rbp - 0x49], 0x41b80000
mov dword [rbp - 0x45], 0x433a0000
lea rcx, [rbp - 0x49]
call fcn.18002ea20
mov dword [rbp - 0x49], 0x42b40000
mov dword [rbp - 0x45], 0x420c0000
movabs rax, 0x124301123275356f
mov qword [rbp - 0x39], rax
mov rax, qword [rbp - 0x39]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x39], r12
mov rax, qword [rbp - 0x39]
mov qword [rbp - 0x21], rax
mov qword [rbp - 0x39], r13
mov rax, qword [rbp - 0x39]
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x39], r12
mov rax, qword [rbp - 0x39]
mov qword [rbp - 0x11], rax
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp - 0x29]
movdqa xmmword [rbp - 0x29], xmm0
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x29]
call fcn.180050270
mov rbx, 0xffffffffffffffff
test al, al
je 0x18006d9b7
lea rax, [rbp - 0x19]
mov qword [rbp - 0x49], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rdi
mov qword [rbp - 1], rdi
xor r8d, r8d
lea rdx, [0x1800e1e1b]
lea rcx, [rbp - 0x19]
call fcn.180061bd0
nop
lea rax, [rsp + 0x30]
mov qword [rbp - 0x39], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rbp - 0x79], rdi
mov qword [rbp - 0x71], rdi
mov r8, rbx
inc r8
cmp byte [r14 + r8], 0
jne 0x18006d952
mov rdx, r14
lea rcx, [rsp + 0x30]
call fcn.180061bd0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x59], rdi
mov qword [rbp - 0x51], rdi
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x18006d980
mov rdx, rsi
lea rcx, [rbp - 0x69]
call fcn.180061bd0
nop
mov r9b, 1
lea r8, [rbp - 0x19]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x69]
call fcn.180069c00
cmp eax, 1
jne 0x18006d9b7
mov byte [0x1801a07ff], al
mov dword [rbp - 0x49], 0x43050000
mov dword [rbp - 0x45], 0x433a0000
lea rcx, [rbp - 0x49]
call fcn.18002ea20
mov dword [rbp - 0x49], 0x42b40000
mov dword [rbp - 0x45], 0x420c0000
movabs rax, 0x6026750f32753f71
mov qword [rbp - 0x39], rax
mov rax, qword [rbp - 0x39]
mov qword [rbp - 0x29], rax
mov qword [rbp - 0x39], r12
mov rax, qword [rbp - 0x39]
mov qword [rbp - 0x21], rax
mov qword [rbp - 0x39], r13
mov rax, qword [rbp - 0x39]
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x39], r12
mov rax, qword [rbp - 0x39]
mov qword [rbp - 0x11], rax
movdqa xmm0, xmmword [rbp - 0x19]
xorps xmm0, xmmword [rbp - 0x29]
movdqa xmmword [rbp - 0x29], xmm0
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x29]
call fcn.180050270
test al, al
je 0x18006dae9
lea rax, [rbp - 0x69]
mov qword [rbp - 0x49], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp - 0x59], rdi
mov qword [rbp - 0x51], rdi
mov r8, rbx
inc r8
cmp byte [r15 + r8], 0
jne 0x18006da53
mov rdx, r15
lea rcx, [rbp - 0x69]
call fcn.180061bd0
nop
lea rax, [rsp + 0x30]
mov qword [rbp - 0x39], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rbp - 0x79], rdi
mov qword [rbp - 0x71], rdi
mov r8, rbx
inc r8
cmp byte [r14 + r8], 0
jne 0x18006da86
mov rdx, r14
lea rcx, [rsp + 0x30]
call fcn.180061bd0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rdi
mov qword [rbp - 1], rdi
nop dword [rax]
inc rbx
cmp byte [rsi + rbx], 0
jne 0x18006dab0
mov r8, rbx
mov rdx, rsi
lea rcx, [rbp - 0x19]
call fcn.180061bd0
nop
xor r9d, r9d
lea r8, [rbp - 0x69]
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x19]
call fcn.180069c00
cmp eax, 1
jne 0x18006dae9
mov byte [0x1801a07ff], al
call fcn.18001e970
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.1800c2340
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm8, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret