Function at 0x1800428ac
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov byte [rsp + 0x18], r8b
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor r15d, r15d
xor r13d, r13d
xor r9b, r9b
mov qword [rsp + 0x30], r15
xor ebx, ebx
xor ebp, ebp
xor r14d, r14d
mov r12b, r8b
mov rsi, rdx
mov rdi, rcx
cmp qword [rdx + 0x10], rbx
jbe 0x180042ed9
lea r10, [0x1800b3d20]
cmp qword [rsi + 0x18], 0xf
mov rcx, rsi
jbe 0x180042906
mov rcx, qword [rsi]
movzx eax, byte [rcx + r15]
movzx edx, byte [rcx + r15]
movzx r8d, byte [rax + r10]
test r9b, r9b
je 0x18004292b
mov eax, r13d
and edx, 0x3f
shl eax, 6
mov r13d, edx
or r13d, eax
jmp 0x18004293a
mov cl, r8b
mov r13d, 0xff
shr r13d, cl
and r13d, edx
movzx ecx, r9b
shl rcx, 4
add rcx, r8
movzx r9d, byte [rcx + r10 + 0x100]
mov byte [rsp + 0x98], r9b
test r9b, r9b
je 0x180042ada
cmp r9d, 1
je 0x18004298a
test r12b, r12b
jne 0x180042982
cmp qword [rsi + 0x18], 0xf
mov rax, rsi
jbe 0x180042977
mov rax, qword [rsi]
mov al, byte [rax + r15]
mov byte [rbx + rdi + 0x5a], al
inc rbx
inc r14
jmp 0x180042d9d
lea rdx, [rdi + 0x280]
mov ecx, dword [rdx]
test ecx, ecx
je 0x1800429ae
sub ecx, 1
je 0x180042a66
cmp ecx, 1
je 0x180042a66
jmp 0x180042d9d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r11d, dword [rcx + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180042a31
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x180042a31
mov r15d, dword [r11 + 0x20]
dec r10d
mov esi, 0xfa8306ff
lea rdx, [r15 + r10*4]
mov r8d, dword [rdx + r9]
add r8, r9
mov bl, byte [r8]
inc r8
test bl, bl
je 0x180042a2c
movsx ecx, bl
sub bl, 0x41
mov edx, ecx
or edx, 0x20
cmp bl, 0x19
mov bl, byte [r8]
cmova edx, ecx
inc r8
xor edx, esi
imul esi, edx, 0x1000193
test bl, bl
jne 0x180042a01
cmp esi, 0x62fcfb13
je 0x180042a36
test r10d, r10d
jne 0x1800429e4
mov rax, qword [rax]
jmp 0x1800429bf
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r10*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
call rax
mov rsi, qword [rsp + 0x88]
lea rdx, [rdi + 0x280]
mov r15, qword [rsp + 0x30]
test r14, r14
je 0x180042a6e
dec r15
cmp dword [rdx], 1
mov rbx, rbp
jne 0x180042acf
lea rbx, [rbp + 1]
test r12b, r12b
je 0x180042a97
mov byte [rdi + rbp + 0x5a], 0x5c
mov dword [rbx + rdi + 0x5a], 0x66666675
add rbx, 4
mov byte [rbx + rdi + 0x5a], 0x64
jmp 0x180042aa9
mov byte [rdi + rbp + 0x5a], 0xef
mov byte [rbx + rdi + 0x5a], 0xbf
inc rbx
mov byte [rbx + rdi + 0x5a], 0xbd
inc rbx
mov eax, 0x200
sub rax, rbx
cmp rax, 0xd
jae 0x180042acc
mov rcx, qword [rdi]
lea rdx, [rdi + 0x5a]
mov r8, rbx
mov rax, qword [rcx]
call qword [rax + 8]
xor ebx, ebx
mov rbp, rbx
xor r14d, r14d
xor r9b, r9b
jmp 0x180042d96
mov eax, r13d
sub eax, 8
je 0x180042d5d
sub eax, 1
je 0x180042d54
sub eax, 1
je 0x180042d4b
sub eax, 2
je 0x180042d42
sub eax, 1
je 0x180042d39
sub eax, 0x15
je 0x180042d30
cmp eax, 0x3a
je 0x180042d27
cmp r13d, 0x1f
jbe 0x180042b4a
test r12b, r12b
je 0x180042b2d
cmp r13d, 0x7f
jae 0x180042b4a
cmp qword [rsi + 0x18], 0xf
mov rax, rsi
jbe 0x180042b3a
mov rax, qword [rsi]
mov al, byte [rax + r15]
mov byte [rbx + rdi + 0x5a], al
inc rbx
jmp 0x180042d68
mov rax, qword gs:[0x60]
lea r15, [rdi + 0x5a]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
cmp r13d, 0xffff
ja 0x180042c2e
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov r11d, dword [rcx + r10 + 0x88]
add r11, r10
cmp r11, r10
je 0x180042be3
mov r9d, dword [r11 + 0x18]
test r9d, r9d
je 0x180042be3
mov r14d, dword [r11 + 0x20]
dec r9d
mov ebp, 0xb8e18782
lea rdx, [r10 + r9*4]
mov r8d, dword [rdx + r14]
add r8, r10
mov sil, byte [r8]
inc r8
test sil, sil
je 0x180042bde
movsx ecx, sil
sub sil, 0x41
mov edx, ecx
or edx, 0x20
cmp sil, 0x19
mov sil, byte [r8]
cmova edx, ecx
inc r8
xor edx, ebp
imul ebp, edx, 0x1000193
test sil, sil
jne 0x180042baf
cmp ebp, 0x41cc3498
je 0x180042be8
test r9d, r9d
jne 0x180042b91
mov rax, qword [rax]
jmp 0x180042b6c
mov edx, dword [r11 + 0x24]
lea r8, str.u_04x
add rdx, r10
lea rcx, [r15 + rbx]
movzx r9d, word [rdx + r9*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov eax, dword [rdx + r9*4]
mov edx, 7
add rax, r10
movzx r9d, r13w
call rax
mov rsi, qword [rsp + 0x88]
add rbx, 6
mov r15, qword [rsp + 0x30]
jmp 0x180042d68
mov ecx, 0x3ff
movzx r14d, r13w
and r14w, cx
mov r15d, r13d
mov ecx, 0x2400
shr r15d, 0xa
sub r14w, cx
mov ecx, 0x2840
sub r15w, cx
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r11d, dword [rcx + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180042ccb
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x180042ccb
mov r12d, dword [r11 + 0x20]
dec r10d
mov ebp, 0xc7114661
lea rdx, [r9 + r10*4]
mov r8d, dword [rdx + r12]
add r8, r9
mov sil, byte [r8]
inc r8
test sil, sil
je 0x180042cc6
movsx ecx, sil
sub sil, 0x41
mov edx, ecx
or edx, 0x20
cmp sil, 0x19
mov sil, byte [r8]
cmova edx, ecx
inc r8
xor edx, ebp
imul ebp, edx, 0x1000193
test sil, sil
jne 0x180042c97
cmp ebp, 0x1618585b
je 0x180042cd0
test r10d, r10d
jne 0x180042c79
mov rax, qword [rax]
jmp 0x180042c54
mov ecx, dword [r11 + 0x24]
mov edx, 0xd
add rcx, r9
movzx eax, r14w
mov dword [rsp + 0x20], eax
movzx r8d, word [rcx + r10*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov r10d, dword [rcx + r8*4]
lea rcx, [rdi + 0x5a]
add r10, r9
lea r8, str.u_04xu_04x
movzx r9d, r15w
add rcx, rbx
call r10
mov rsi, qword [rsp + 0x88]
add rbx, 0xc
mov r15, qword [rsp + 0x30]
mov r12b, byte [rsp + 0x90]
jmp 0x180042d68
mov word [rbx + rdi + 0x5a], 0x5c5c
jmp 0x180042d64
mov word [rbx + rdi + 0x5a], 0x225c
jmp 0x180042d64
mov word [rbx + rdi + 0x5a], 0x725c
jmp 0x180042d64
mov word [rbx + rdi + 0x5a], 0x665c
jmp 0x180042d64
mov word [rbx + rdi + 0x5a], 0x6e5c
jmp 0x180042d64
mov word [rbx + rdi + 0x5a], 0x745c
jmp 0x180042d64
mov word [rbx + rdi + 0x5a], 0x625c
add rbx, 2
mov eax, 0x200
sub rax, rbx
cmp rax, 0xd
jae 0x180042d88
mov rcx, qword [rdi]
lea rdx, [rdi + 0x5a]
mov r8, rbx
mov rax, qword [rcx]
call qword [rax + 8]
xor ebx, ebx
mov r9b, byte [rsp + 0x98]
mov rbp, rbx
xor r14d, r14d
lea r10, [0x1800b3d20]
inc r15
mov qword [rsp + 0x30], r15
cmp r15, qword [rsi + 0x10]
jb 0x1800428f9
test r9b, r9b
jne 0x180042dc5
test rbx, rbx
je 0x180042ed9
mov r8, rbx
jmp 0x180042ecc
mov ecx, dword [rdi + 0x280]
test ecx, ecx
je 0x180042e25
sub ecx, 1
je 0x180042de2
cmp ecx, 1
je 0x180042ec9
jmp 0x180042ed9
mov rcx, qword [rdi]
lea rdx, [rdi + 0x5a]
mov r8, rbp
mov rax, qword [rcx]
call qword [rax + 8]
mov rcx, qword [rdi]
mov rax, qword [rcx]
mov r9, qword [rax + 8]
test r12b, r12b
je 0x180042e10
mov r8d, 6
lea rdx, str.ufffd
jmp 0x180042e1d
mov r8d, 3
lea rdx, [0x1800b3d10]
call r9
jmp 0x180042ed9
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov r11d, dword [rcx + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180042ea8
mov r10d, dword [r11 + 0x18]
test r10d, r10d
je 0x180042ea8
mov r14d, dword [r11 + 0x20]
dec r10d
mov esi, 0xecedf360
lea rdx, [r9 + r10*4]
mov r8d, dword [rdx + r14]
add r8, r9
mov bl, byte [r8]
inc r8
test bl, bl
je 0x180042ea3
movsx ecx, bl
sub bl, 0x41
mov edx, ecx
or edx, 0x20
cmp bl, 0x19
mov bl, byte [r8]
cmova edx, ecx
inc r8
xor edx, esi
imul esi, edx, 0x1000193
test bl, bl
jne 0x180042e78
cmp esi, 0xf263a062
je 0x180042ead
test r10d, r10d
jne 0x180042e5b
mov rax, qword [rax]
jmp 0x180042e36
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx r8d, word [rcx + r10*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + r8*4]
add rax, r9
call rax
mov r8, rbp
mov rcx, qword [rdi]
lea rdx, [rdi + 0x5a]
mov rax, qword [rcx]
call qword [rax + 8]
mov rbx, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret