Function at 0x140018c60
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0xb0
mov rax, qword [0x140038010]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov r15, rcx
xor r12d, r12d
mov qword [r11 - 0x58], r12
mov r14d, r12d
mov dword [r11 - 0x60], r12d
nop dword [rax]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140018d36
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140018d36
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xd676511c
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140018d31
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140018d10
cmp r8d, 0xec09eead
je 0x140018d3b
test r9d, r9d
jne 0x140018cf0
mov rax, qword [rax]
jmp 0x140018cc0
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r9d, dword [rdx + rax*4]
add r9, r10
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call r9
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140018df6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140018df6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0x7909bab9
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140018df1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140018dd0
cmp r8d, 0xef3b9cbd
je 0x140018dfb
test r9d, r9d
jne 0x140018db0
mov rax, qword [rax]
jmp 0x140018d80
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
mov edx, dword [rsp + 0x78]
xor ecx, ecx
lea r9d, [rcx + 4]
mov r8d, 0x3000
call r10
mov r14, rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x140018eb6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140018eb6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r11]
add rdx, r11
mov r8d, 0xdbfca11
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140018eb1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140018e90
cmp r8d, 0xe2b29db6
je 0x140018ebb
test r9d, r9d
jne 0x140018e70
mov rax, qword [rax]
jmp 0x140018e40
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rdi + 0x24]
add rax, r11
movzx eax, word [rax + r9*2]
mov r10d, dword [rcx + rax*4]
add r10, r11
lea r9, [rsp + 0x78]
mov r8d, dword [rsp + 0x78]
mov rdx, r14
mov ecx, 0x40
call r10
cmp eax, 0xc0000004
je 0x140018ca0
mov rbp, r12
cmp qword [r14], r12
jbe 0x140019016
lea rsi, [r14 + 0x10]
nop dword [rax]
nop word [rax + rax]
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x90], xmm0
movups xmm0, xmmword [rsi + 0x10]
movups xmmword [rsp + 0x30], xmm0
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140018fb6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140018fb6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x231b90f2
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x140018fb1
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x140018f90
cmp r8d, 0xe2b6fc89
je 0x140018fbb
test r9d, r9d
jne 0x140018f70
mov rax, qword [rax]
jmp 0x140018f40
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov ecx, dword [rcx + rax*4]
add rcx, r10
call rcx
mov ecx, eax
movups xmm1, xmmword [rsp + 0x90]
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, rcx
jne 0x140018ffc
mov rax, qword [rsp + 0x30]
cmp rax, qword [r15 + 0x40]
je 0x14001900d
inc rbp
add rsi, 0x28
cmp rbp, qword [r14]
jae 0x140019016
jmp 0x140018f10
movq qword [rsp + 0x80], xmm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400190a6
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400190a6
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
mov r8d, 0xc6197fd2
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400190a1
nop
movsx ecx, cl
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx]
lea rdx, [rdx + 1]
test cl, cl
jne 0x140019080
cmp r8d, 0x9ed32797
je 0x1400190ab
test r9d, r9d
jne 0x140019060
mov rax, qword [rax]
jmp 0x140019030
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov r9d, dword [rcx + rax*4]
add r9, r10
xor edx, edx
mov r8d, 0x8000
mov rcx, r14
call r9
xor sil, sil
mov rax, qword [rsp + 0x80]
nop dword [rax]
test rax, rax
je 0x1400194a6
lea rbp, [rax + 8]
mov r14, qword [r15 + 0x10]
test r14, r14
je 0x1400191b3
test rbp, rbp
je 0x1400191b3
mov rax, qword [r15 + 0x48]
mov rbx, qword [rax + 0x48]
mov rdi, qword [rax + 0x58]
mov ecx, 0x48
call fcn.14002d4d0
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x60]
mov qword [rax], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x68]
mov qword [rax + 8], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x70]
mov qword [rax + 0x10], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x78]
mov qword [rax + 0x18], rdx
mov qword [rax + 0x20], r14
mov qword [rax + 0x28], rbp
mov qword [rax + 0x30], 8
lea rcx, [rsp + 0x80]
mov qword [rax + 0x38], rcx
mov qword [rax + 0x40], r12
mov qword [rsp + 0x28], 0x48
mov qword [rsp + 0x20], rax
mov r9, qword [r15 + 0x70]
mov r8, qword [r15]
mov rdx, qword [r15 + 0x40]
mov rcx, qword [r15 + 0x48]
call rbx
mov rax, qword [r15 + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [r15 + 0x50]
mov qword [rsp + 0x20], rax
mov r9, qword [r15 + 0x60]
mov r8, qword [r15 + 8]
mov rdx, qword [r15 + 0x40]
mov rcx, qword [r15 + 0x48]
call rdi
mov rax, qword [rsp + 0x80]
inc sil
cmp sil, 2
jb 0x1400190e0
mov qword [rsp + 0x88], r12
lea rsi, [rax + 0x28]
mov rbp, qword [r15 + 0x10]
test rbp, rbp
je 0x1400194a6
test rsi, rsi
je 0x1400194a6
mov rax, qword [r15 + 0x48]
mov rbx, qword [rax + 0x48]
mov rdi, qword [rax + 0x58]
mov ecx, 0x48
call fcn.14002d4d0
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x60]
mov qword [rax], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x68]
mov qword [rax + 8], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x70]
mov qword [rax + 0x10], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x78]
mov qword [rax + 0x18], rdx
mov qword [rax + 0x20], rbp
mov qword [rax + 0x28], rsi
mov qword [rax + 0x30], 8
lea rcx, [rsp + 0x88]
mov qword [rax + 0x38], rcx
mov qword [rax + 0x40], r12
mov qword [rsp + 0x28], 0x48
mov qword [rsp + 0x20], rax
mov r9, qword [r15 + 0x70]
mov r8, qword [r15]
mov rdx, qword [r15 + 0x40]
mov rcx, qword [r15 + 0x48]
call rbx
mov rax, qword [r15 + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [r15 + 0x50]
mov qword [rsp + 0x20], rax
mov r9, qword [r15 + 0x60]
mov r8, qword [r15 + 8]
mov rdx, qword [r15 + 0x40]
mov rcx, qword [r15 + 0x48]
call rdi
mov rsi, qword [rsp + 0x88]
test rsi, rsi
je 0x1400194a6
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
add rsi, 0x58
mov rbp, qword [r15 + 0x10]
test rbp, rbp
je 0x140019362
test rsi, rsi
je 0x140019362
mov rax, qword [r15 + 0x48]
mov rbx, qword [rax + 0x48]
mov rdi, qword [rax + 0x58]
mov ecx, 0x48
call fcn.14002d4d0
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x60]
mov qword [rax], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x68]
mov qword [rax + 8], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x70]
mov qword [rax + 0x10], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x78]
mov qword [rax + 0x18], rdx
mov qword [rax + 0x20], rbp
mov qword [rax + 0x28], rsi
mov qword [rax + 0x30], 0x10
lea rcx, [rsp + 0x68]
mov qword [rax + 0x38], rcx
mov qword [rax + 0x40], r12
mov qword [rsp + 0x28], 0x48
mov qword [rsp + 0x20], rax
mov r9, qword [r15 + 0x70]
mov r8, qword [r15]
mov rdx, qword [r15 + 0x40]
mov rcx, qword [r15 + 0x48]
call rbx
mov rax, qword [r15 + 0x70]
mov qword [rsp + 0x28], rax
mov rax, qword [r15 + 0x50]
mov qword [rsp + 0x20], rax
mov r9, qword [r15 + 0x60]
mov r8, qword [r15 + 8]
mov rdx, qword [r15 + 0x40]
mov rcx, qword [r15 + 0x48]
call rdi
cmp qword [rsp + 0x70], r12
je 0x1400194a6
movzx ecx, word [rsp + 0x68]
shr rcx, 1
inc rcx
mov eax, 2
mul rcx
mov rbx, rax
mov rax, 0xffffffffffffffff
cmovo rbx, rax
mov rcx, rbx
call fcn.140001310
mov rsi, rax
mov r8, rbx
xor edx, edx
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x90], rsi
movzx ecx, word [rsp + 0x68]
mov qword [rsp + 0x20], rcx
mov r9, rsi
mov r8, qword [rsp + 0x70]
mov rdx, qword [r15 + 0x10]
mov rcx, r15
call fcn.140016670
mov word [rsp + 0x68], r12w
mov rbp, qword [rsp + 0x88]
add rbp, 0x58
mov r14, qword [r15 + 0x10]
test r14, r14
je 0x14001949a
test rbp, rbp
je 0x14001949a
mov rax, qword [r15 + 0x48]
mov rbx, qword [rax + 0x48]
mov rdi, qword [rax + 0x58]
mov ecx, 0x48
call fcn.14002d4d0
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x60]
mov qword [rax], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x68]
mov qword [rax + 8], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x70]
mov qword [rax + 0x10], rdx
mov rcx, qword [r15 + 0x48]
mov rdx, qword [rcx + 0x78]
mov qword [rax + 0x18], rdx
mov qword [rax + 0x20], r14
mov qword [rax + 0x28], rbp
mov qword [rax + 0x30], 0x10
lea rcx, [rsp + 0x68]
mov qword [rax + 0x38], rcx
mov qword [rax + 0x40], r12
mov qword [rsp + 0x28], 0x48
mov qword [rsp + 0x20], rax
mov r9, qword [r15 + 0x68]
mov r8, qword [r15]
mov rdx, qword [r15 + 0x40]
mov rcx, qword [r15 + 0x48]
call rbx
mov rax, qword [r15 + 0x68]
mov qword [rsp + 0x28], rax
mov rax, qword [r15 + 0x50]
mov qword [rsp + 0x20], rax
mov r9, qword [r15 + 0x58]
mov r8, qword [r15 + 8]
mov rdx, qword [r15 + 0x40]
mov rcx, qword [r15 + 0x48]
call rdi
nop
mov rcx, rsi
call fcn.14002d764
mov al, 1
jmp 0x1400194a8
xor al, al
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.14002d4b0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret