Function at 0x180026ef0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push r12
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0x90
movabs rax, 0x3f1d6c95f1e098af
movabs r10, 0x51680dd99493f9ed
mov qword [rbp + 0x67], rax
movabs r11, 0x3dab82201e60878a
mov rax, qword [rbp + 0x67]
movzx r9d, dl
mov qword [rbp - 0x29], rax
mov r12d, 0x84222325
movabs rax, 0x3dab82206c05efe9
mov r15, rcx
mov qword [rbp + 0x67], rax
lea rcx, [rbp - 0x29]
mov rax, qword [rbp + 0x67]
mov r8d, r12d
mov qword [rbp - 0x21], rax
mov qword [rbp + 0x67], r10
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x19], rax
mov qword [rbp + 0x67], r11
mov rax, qword [rbp + 0x67]
movdqa xmm0, xmmword [rbp - 0x29]
mov qword [rbp - 0x11], rax
xorps xmm0, xmmword [rbp - 0x19]
movq rdx, xmm0
movdqa xmmword [rbp - 0x29], xmm0
test dl, dl
je 0x180026fa0
movsx eax, dl
lea rcx, [rcx + 1]
xor eax, r8d
imul r8d, eax, 0x1b3
movzx eax, byte [rcx]
movzx edx, al
test al, al
jne 0x180026f85
mov rax, qword [r15]
mov edx, r12d
mov rcx, qword [rax + 0x10]
movzx eax, byte [rcx]
test al, al
je 0x180026fc7
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1b3
movzx eax, byte [rcx]
test al, al
jne 0x180026fb1
mov qword [rsp + 0xb8], rbx
cmp edx, r8d
je 0x180027257
movabs rax, 0x3e186cbcc3e496af
lea rcx, [rbp - 0x19]
mov qword [rbp + 0x67], rax
mov edx, r12d
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x19], rax
movabs rax, 0x3dab82201e6087e4
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x11], rax
mov qword [rbp + 0x67], r10
mov rax, qword [rbp + 0x67]
mov qword [rbp + 7], rax
mov qword [rbp + 0x67], r11
mov rax, qword [rbp + 0x67]
movdqa xmm0, xmmword [rbp - 0x19]
mov qword [rbp + 0xf], rax
xorps xmm0, xmmword [rbp + 7]
movq r8, xmm0
movdqa xmmword [rbp - 0x19], xmm0
test r8b, r8b
je 0x1800271e3
nop
movsx eax, r8b
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1b3
movzx eax, byte [rcx]
movzx r8d, al
test al, al
jne 0x180027040
test edx, edx
jne 0x1800271e3
movabs rax, 0x26076faae7fc8bae
lea rcx, [rbp - 0x19]
mov qword [rbp + 0x67], rax
mov edx, r12d
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x19], rax
movabs rax, 0x3dabec4f6e01e2dd
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x11], rax
mov qword [rbp + 0x67], r10
mov rax, qword [rbp + 0x67]
mov qword [rbp + 7], rax
mov qword [rbp + 0x67], r11
mov rax, qword [rbp + 0x67]
movdqa xmm0, xmmword [rbp - 0x19]
mov qword [rbp + 0xf], rax
xorps xmm0, xmmword [rbp + 7]
movq r8, xmm0
movdqa xmmword [rbp - 0x19], xmm0
test r8b, r8b
je 0x1800271e3
nop word [rax + rax]
movsx eax, r8b
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1b3
movzx eax, byte [rcx]
movzx r8d, al
test al, al
jne 0x1800270d0
test edx, edx
jne 0x1800271e3
movabs rcx, 0xf0acf512f79d3f7c
movabs rax, 0x350678b6e4fe96ae
mov qword [rbp + 0x67], rax
mov edx, r12d
mov rax, qword [rbp + 0x67]
mov qword [rbp + 7], rax
movabs rax, 0x52dbe3454917e8c8
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp + 0xf], rax
movabs rax, 0x44b5264314b91301
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x67], rcx
mov rax, qword [rbp + 0x67]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x67], r10
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x19], rax
mov qword [rbp + 0x67], r11
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x11], rax
movabs rax, 0x44b5264314b9136f
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp - 9], rax
mov qword [rbp + 0x67], rcx
lea rcx, [rbp + 7]
mov rax, qword [rbp + 0x67]
movdqa xmm1, xmmword [rbp + 7]
xorps xmm1, xmmword [rbp - 0x19]
movdqa xmm0, xmmword [rbp + 0x17]
movq r8, xmm1
mov qword [rbp - 1], rax
xorps xmm0, xmmword [rbp - 9]
movdqa xmmword [rbp + 7], xmm1
movdqa xmmword [rbp + 0x17], xmm0
test r8b, r8b
je 0x1800271e3
nop dword [rax]
nop word [rax + rax]
movsx eax, r8b
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1b3
movzx eax, byte [rcx]
movzx r8d, al
test al, al
jne 0x1800271c0
test edx, edx
jne 0x1800271e3
xor ebx, ebx
jmp 0x1800271e8
mov ebx, 1
mov rax, qword [r15]
mov dword [rbp + 0x67], ebx
mov rcx, qword [rax + 0x10]
movzx eax, byte [rcx]
test al, al
je 0x180027218
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, r12d
imul r12d, eax, 0x1b3
movzx eax, byte [rcx]
test al, al
jne 0x180027200
test r9b, r9b
jne 0x180027235
mov rcx, r15
call fcn.180014b90
test al, al
jne 0x180027257
mov rcx, r15
call fcn.180014dc0
test al, al
jne 0x180027257
mov rcx, r15
call fcn.1800160c0
mov rcx, rax
call fcn.180013d70
cmp dword [rax], 0
jg 0x18002726e
cmp r12d, ebx
jne 0x180027257
mov rcx, r15
call fcn.180015b40
xor al, al
mov rbx, qword [rsp + 0xb8]
add rsp, 0x90
pop r15
pop r12
pop rbp
ret
cmp r12d, ebx
jne 0x180027299
movaps xmmword [rsp + 0x70], xmm6
call fcn.18001dd50
movaps xmm6, xmm0
mov rcx, r15
addss xmm6, dword [0x1800c6fb4]
call fcn.1800143a0
movss dword [rax], xmm6
movaps xmm6, xmmword [rsp + 0x70]
mov rcx, r15
call fcn.1800160c0
mov rcx, rax
call fcn.180013d70
mov rcx, r15
dec dword [rax]
call fcn.180015350
mov rcx, r15
call fcn.180015d70
mov rcx, r15
call fcn.180013f40
mov rax, qword [0x1800e9b68]
test rax, rax
jne 0x1800273dc
mov rax, qword gs:[0x60]
mov qword [rsp + 0xc0], rsi
mov qword [rsp + 0xc8], rdi
mov qword [rsp + 0x88], r13
mov rcx, qword [rax + 0x18]
mov qword [rsp + 0x80], r14
mov rax, qword [rcx + 0x10]
mov r13, qword [rax]
mov rsi, r13
nop word [rax + rax]
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x18002739a
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x18002739a
mov r14d, dword [rdi + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0xa1ca38ff
lea rax, [r14 + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x180027395
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x180027360
cmp r9d, 0xeafcb166
je 0x18002742a
test r10d, r10d
jne 0x180027340
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r13
je 0x1800273b0
cmp qword [rax + 0x30], 0
jne 0x180027310
xor eax, eax
mov ebx, dword [rbp + 0x67]
mov r14, qword [rsp + 0x80]
mov r13, qword [rsp + 0x88]
mov rdi, qword [rsp + 0xc8]
mov rsi, qword [rsp + 0xc0]
mov qword [0x1800e9b68], rax
mov qword gs:[0x130], rax
lea rcx, [0x1800c6cf0]
mov rax, qword [0x1800c4210]
mov qword gs:[0x128], rax
call fcn.1800c21a0
mov r8, rax
xor edx, edx
mov rcx, r15
call fcn.180010e80
cmp r12d, ebx
je 0x180027423
mov rcx, r15
call fcn.180015740
mov rcx, r15
call fcn.180013bb0
mov al, 1
jmp 0x180027259
mov ecx, dword [rdi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x1800273b2