Function at 0x18006e0a8
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x18008b020]
test rax, rax
jne 0x18006e17e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18006e159
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x18006e159
mov r14d, dword [r10 + 0x20]
dec r11d
mov edi, 0x4e094b9c
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + r8]
add r9, r8
mov bl, byte [r9]
inc r9
test bl, bl
je 0x18006e154
movsx ecx, bl
sub bl, 0x41
mov edx, ecx
or edx, 0x20
cmp bl, 0x19
mov bl, byte [r9]
cmova edx, ecx
inc r9
xor edx, edi
imul edi, edx, 0x1000193
test bl, bl
jne 0x18006e129
cmp edi, 0x43a99cfd
je 0x18006e15e
test r11d, r11d
jne 0x18006e10c
mov rax, qword [rax]
jmp 0x18006e0e7
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r11*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x18008b020], rax
movabs rdx, 0xe9a11b7f434353e8
movabs rcx, 0x7f77a3180367d740
mov qword [rbp - 0x49], rcx
movabs r15, 0x69e9ca707e6b7c0d
mov qword [rbp - 0x21], rdx
movabs rcx, 0x516971c9429ea9f3
mov qword [rbp - 0x41], rcx
movabs r12, 0xd9fe1445c9e71efe
movdqa xmm0, xmmword [rbp - 0x49]
movabs rcx, 0x6985ca117e3d7c51
mov qword [rbp - 0x39], rcx
mov r9d, 2
mov qword [rbp + 0x2f], rdx
movabs rcx, 0xd9ad1419c9821e88
mov qword [rbp - 0x31], rcx
lea rdx, [rbp - 0x49]
movdqa xmm1, xmmword [rbp - 0x39]
movabs rcx, 0x7ac269935a0dff13
mov qword [rbp - 0x29], rcx
xor r8d, r8d
movabs rcx, 0x7f03a37e0308d713
mov qword [rbp + 0x17], r15
mov qword [rbp + 7], rcx
movabs rcx, 0x510c71bb42ffa984
mov qword [rbp + 0xf], rcx
movabs rcx, 0x7aaf69f25a68ff67
pxor xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x27], rcx
lea rcx, [rbp + 0x67]
movdqa xmmword [rbp - 0x49], xmm0
movdqa xmm0, xmmword [rbp - 0x29]
pxor xmm0, xmmword [rbp + 0x27]
mov qword [rsp + 0x20], rcx
mov rcx, 0xffffffff80000001
mov qword [rbp + 0x1f], r12
pxor xmm1, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x29], xmm0
movdqa xmmword [rbp - 0x39], xmm1
call rax
mov rax, qword [0x18008b018]
test rax, rax
jne 0x18006e320
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18006e2fb
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x18006e2fb
mov r14d, dword [r10 + 0x20]
dec r11d
mov edi, 0xbbb41ebc
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + r8]
add r9, r8
mov bl, byte [r9]
inc r9
test bl, bl
je 0x18006e2f6
movsx ecx, bl
sub bl, 0x41
mov edx, ecx
or edx, 0x20
cmp bl, 0x19
mov bl, byte [r9]
cmova edx, ecx
inc r9
xor edx, edi
imul edi, edx, 0x1000193
test bl, bl
jne 0x18006e2cb
cmp edi, 0x4eb42b23
je 0x18006e300
test r11d, r11d
jne 0x18006e2ae
mov rax, qword [rax]
jmp 0x18006e289
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r11*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x18008b018], rax
mov qword [rbp - 0x59], r15
lea rdx, [rbp - 0x69]
mov qword [rbp - 0x51], r12
movabs rcx, 0x7f62a31b037cd740
movdqa xmm1, xmmword [rbp - 0x59]
mov qword [rbp - 0x69], rcx
movabs rcx, 0x516571cb42bea9e9
mov qword [rbp - 0x61], rcx
movabs rcx, 0x7f03a37e0308d713
movdqa xmm0, xmmword [rbp - 0x69]
mov qword [rbp - 0x19], rcx
movabs rcx, 0x510c71bb42ffa984
mov qword [rbp - 0x11], rcx
pxor xmm0, xmmword [rbp - 0x19]
mov rcx, qword [rbp + 0x67]
mov qword [rbp - 9], r15
mov qword [rbp - 1], r12
pxor xmm1, xmmword [rbp - 9]
movdqa xmmword [rbp - 0x69], xmm0
movdqa xmmword [rbp - 0x59], xmm1
call rax
mov rax, qword [0x18008b010]
test rax, rax
jne 0x18006e448
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r9d, dword [rcx + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18006e423
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x18006e423
mov r14d, dword [r9 + 0x20]
dec r11d
mov edi, 0x3137ef04
lea rcx, [r14 + r11*4]
mov r10d, dword [rcx + r8]
add r10, r8
mov bl, byte [r10]
inc r10
test bl, bl
je 0x18006e41e
movsx ecx, bl
sub bl, 0x41
mov edx, ecx
or edx, 0x20
cmp bl, 0x19
mov bl, byte [r10]
cmova edx, ecx
inc r10
xor edx, edi
imul edi, edx, 0x1000193
test bl, bl
jne 0x18006e3f3
cmp edi, 0x1f4d77c9
je 0x18006e428
test r11d, r11d
jne 0x18006e3d6
mov rax, qword [rax]
jmp 0x18006e3b1
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r11*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x18008b010], rax
mov rcx, qword [rbp + 0x67]
call rax
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret