Function at 0x180029b40
Capabilities:
Access peb ldr_data
Encode data using xor
Get file size
Get process filename
Hash data using fnv
Read file on windows
Resolve function by fnv-1a hash
Resolve function by parsing pe exports

Disassembly:
push rsi
sub rsp, 0xf0
mov rax, qword [0x180035008]
xor rax, rsp
mov qword [rsp + 0xd0], rax
xorps xmm5, xmm5
lea rax, section..text
movdqa xmmword [rsp + 0x40], xmm5
mov edx, 0x271
movq xmm4, qword [rsp + 0x40]
mov ecx, edx
movdqa xmmword [rsp + 0x50], xmm5
movq xmm3, qword [rsp + 0x50]
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rax]
movq xmm1, xmm4
pshufd xmm2, xmm0, 0xd8
movdqu xmm0, xmmword [rax + 0x10]
add rax, 0x20
paddd xmm2, xmm1
movq xmm1, xmm3
movq xmm4, xmm2
pshufd xmm2, xmm0, 0xd8
paddd xmm2, xmm1
movq xmm3, xmm2
sub rcx, 1
jne 0x1800294a0
movq xmm0, xmm4
lea rcx, [fcn.180005e20]
movq xmm1, xmm3
paddd xmm1, xmm0
movq xmm0, xmm1
movq xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 8
paddd xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 4
paddd xmm2, xmm0
movd esi, xmm2
cmp rax, rcx
je 0x18002951e
add esi, dword [rax]
add rax, 8
cmp rax, rcx
jne 0x180029513
movq xmm0, xmm5
lea rcx, section..data
movdqa xmmword [rsp + 0x40], xmm0
mov rax, rdx
movq xmm3, qword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
movq xmm4, qword [rsp + 0x50]
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rcx]
movq xmm1, xmm4
pshufd xmm2, xmm0, 0xd8
movdqu xmm0, xmmword [rcx + 0x10]
add rcx, 0x20
paddd xmm2, xmm1
movq xmm1, xmm3
movq xmm4, xmm2
pshufd xmm2, xmm0, 0xd8
paddd xmm2, xmm1
movq xmm3, xmm2
sub rax, 1
jne 0x180029550
movq xmm0, xmm4
movq xmm1, xmm3
paddd xmm1, xmm0
movq xmm0, xmm1
movq xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 8
paddd xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 4
paddd xmm2, xmm0
movd eax, xmm2
add esi, eax
lea rax, [0x180028e20]
cmp rcx, rax
je 0x1800295d0
add esi, dword [rcx]
add rcx, 8
cmp rcx, rax
jne 0x1800295c5
movq xmm0, xmm5
lea rcx, section..rdata
movdqa xmmword [rsp + 0x40], xmm0
mov rax, rdx
movq xmm3, qword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
movq xmm4, qword [rsp + 0x50]
nop word [rax + rax]
movdqu xmm0, xmmword [rcx]
movq xmm1, xmm4
pshufd xmm2, xmm0, 0xd8
movdqu xmm0, xmmword [rcx + 0x10]
add rcx, 0x20
paddd xmm2, xmm1
movq xmm1, xmm3
movq xmm4, xmm2
pshufd xmm2, xmm0, 0xd8
paddd xmm2, xmm1
movq xmm3, xmm2
sub rax, 1
jne 0x180029600
movq xmm0, xmm4
movq xmm1, xmm3
paddd xmm1, xmm0
movq xmm0, xmm1
movq xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 8
paddd xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 4
paddd xmm2, xmm0
movd eax, xmm2
add esi, eax
lea rax, [0x18001ee20]
cmp rcx, rax
je 0x180029680
add esi, dword [rcx]
add rcx, 8
cmp rcx, rax
jne 0x180029675
movq xmm0, xmm5
lea rcx, [0x18001ee20]
movdqa xmmword [rsp + 0x40], xmm0
movq xmm3, qword [rsp + 0x40]
movdqa xmmword [rsp + 0x50], xmm0
movq xmm4, qword [rsp + 0x50]
movdqu xmm0, xmmword [rcx]
movq xmm1, xmm4
pshufd xmm2, xmm0, 0xd8
movdqu xmm0, xmmword [rcx + 0x10]
add rcx, 0x20
paddd xmm2, xmm1
movq xmm1, xmm3
movq xmm4, xmm2
pshufd xmm2, xmm0, 0xd8
paddd xmm2, xmm1
movq xmm3, xmm2
sub rdx, 1
jne 0x1800296a3
movq xmm0, xmm4
movq xmm1, xmm3
paddd xmm1, xmm0
movq xmm0, xmm1
movq xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 8
paddd xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 4
paddd xmm2, xmm0
movd eax, xmm2
add esi, eax
lea rax, [0x180023c40]
cmp rcx, rax
je 0x18002972b
nop dword [rax + rax]
add esi, dword [rcx]
add rcx, 8
cmp rcx, rax
jne 0x180029720
call fcn.18000c3a0
cmp dword [rax], 1
jle 0x180029aec
mov qword [rsp + 0x100], rbx
call fcn.18000c3a8
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x80
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
mov rcx, qword [rax]
lea r8d, [r9 + 1]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x180029b00
xor edx, edx
mov qword [rsp + 0x108], rbp
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebp, eax
test eax, eax
je 0x180029ad8
mov qword [rsp + 0x110], rdi
mov ecx, ebp
mov qword [rsp + 0xe8], r14
mov qword [rsp + 0xe0], r15
call fcn.18000c688
lea r9, [rsp + 0x60]
mov qword [rsp + 0x50], rax
mov r8d, ebp
mov qword [rsp + 0x20], 0
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_ReadFile]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x180029877
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180029877
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180029872
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x180029850
cmp r8d, 0x3285501
je 0x18002987c
test r9d, r9d
jne 0x180029830
mov rax, qword [rax]
jmp 0x180029800
mov ecx, dword [rdi + 0x24]
mov r8d, 0x3000
add rcx, r10
movzx edx, word [rcx + r9*2]
mov r9d, 0x40
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov rdx, rbp
add rax, r10
xor ecx, ecx
call rax
mov rcx, qword gs:[0x60]
mov r15, rax
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x180029937
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180029937
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180029932
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x180029910
cmp r8d, 0x2fa62ca8
je 0x18002993c
test r9d, r9d
jne 0x1800298f0
mov rax, qword [rax]
jmp 0x1800298c0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, 0x1770
add rax, r10
call rax
call section..pdata
mov rdx, qword [rsp + 0x50]
mov r8, rbp
mov rcx, r15
call fcn.180009b00
lea r8, [rsp + 0x50]
mov edx, ebp
lea rcx, str.___u__n___p
call fcn.180005e30
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x80], xmm0
xor ecx, ecx
mov byte [rsp + 0x87], 1
movups xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0xc0], rax
movups xmmword [rsp + 0x90], xmm0
mov dword [rsp + 0xc8], eax
movups xmmword [rsp + 0xa0], xmm0
movups xmmword [rsp + 0xb0], xmm0
call qword [sym.imp.USER32.dll_GetDC]
mov rcx, qword gs:[0x60]
mov rbp, rax
mov r14, qword [rsp + 0xe8]
mov rax, qword [rcx + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r11, qword [rax + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov edi, dword [rcx + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x180029a67
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180029a67
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x811c9dc5
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r11]
add rcx, r11
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x180029a62
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x180029a40
cmp r8d, 0x20638135
je 0x180029a6c
test r9d, r9d
jne 0x180029a20
mov rax, qword [rax]
jmp 0x1800299f0
mov edx, dword [rdi + 0x24]
mov rcx, rbp
add rdx, r11
mov dword [rsp + 0x20], 0
movzx r8d, word [rdx + r9*2]
xor r9d, r9d
mov edx, dword [rdi + 0x1c]
add rdx, r11
mov r10d, dword [rdx + r8*4]
mov r8, r15
add r10, r11
lea rdx, [rsp + 0x70]
call r10
mov r15, qword [rsp + 0xe0]
mov eax, esi
mov rdi, qword [rsp + 0x110]
mov rbp, qword [rsp + 0x108]
mov rbx, qword [rsp + 0x100]
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.180006140
add rsp, 0xf0
pop rsi
ret
lea rcx, str.Failed_to_query_input_file_size
call fcn.180005e30
xor ecx, ecx
call fcn.18000c67c
int3
lea rcx, str.Usage:__ooooo__FileName
call fcn.180005e30
xor ecx, ecx
call fcn.18000c67c
int3
lea rcx, str.Failed_to_open_input_file
call fcn.180005e30
xor ecx, ecx
call fcn.18000c67c
int3
jmp 0x180029450