Function at 0x18000f0b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x10], rdx
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x30
mov rdi, rdx
mov ebx, r9d
mov rdx, r8
call fcn.18000ea60
cmp dword [rsp + 0x90], 0
mov r15, rax
mov qword [rsp + 0x20], rax
jne 0x18000f221
mov r12, qword [0x1800e9b88]
test r12, r12
jne 0x18000f1d2
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov rbp, qword [rcx]
mov rsi, rbp
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x18000f1a6
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x18000f1a6
mov r14d, dword [rdi + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0xc9ea2015
lea rax, [r14 + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x18000f1a1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x18000f170
cmp r9d, 0xc7b72310
je 0x18000f207
test r10d, r10d
jne 0x18000f150
mov rax, qword [rsi]
mov rsi, rax
cmp rax, rbp
je 0x18000f1bc
cmp qword [rax + 0x30], 0
jne 0x18000f120
xor r12d, r12d
mov ebx, dword [rsp + 0x88]
mov rdi, qword [rsp + 0x78]
mov qword [0x1800e9b88], r12
mov qword gs:[0x130], r12
mov r8d, ebx
mov rax, qword [0x1800c4210]
mov rdx, rdi
mov rcx, r15
mov qword gs:[0x128], rax
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
jmp fcn.1800c21a0
mov ecx, dword [rdi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov r12d, dword [rcx + rdx*4]
add r12, r11
jmp 0x18000f1bf
xor r12d, r12d
mov qword [rsp + 0x70], r13
mov r13d, r12d
mov qword [rsp + 0x28], r12
jmp 0x18000f240
mov r15, qword [rsp + 0x20]
nop dword [rax + rax]
mov rax, qword [0x1800e9bb0]
test rax, rax
jne 0x18000f323
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbp, qword [rax]
mov rsi, rbp
nop word [rax + rax]
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x18000f2f8
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x18000f2f8
mov r14d, dword [rdi + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0xbf644672
lea rax, [r14 + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx eax, byte [r8]
inc r8
test al, al
je 0x18000f2f3
nop
movsx ecx, al
lea r8, [r8 + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [r8 - 1]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test al, al
jne 0x18000f2c0
cmp r9d, 0x22671db9
je 0x18000f4a8
test r10d, r10d
jne 0x18000f2a0
mov rax, qword [rsi]
mov rsi, rax
cmp rax, rbp
je 0x18000f30d
cmp qword [rax + 0x30], r12
jne 0x18000f270
mov rax, r12
mov ebx, dword [rsp + 0x88]
mov rdi, qword [rsp + 0x78]
mov qword [0x1800e9bb0], rax
mov qword gs:[0x130], rax
lea rdx, [rsp + 0x28]
mov rax, qword [0x1800c4210]
mov rcx, r15
mov qword gs:[0x128], rax
call fcn.1800c21a0
mov r15, rax
test rax, rax
je 0x18000f4e3
mov rcx, qword [rax + 0x18]
mov r9, rdi
sub r9, rcx
nop
movzx r8d, byte [rcx]
movzx edx, byte [rcx + r9]
sub r8d, edx
jne 0x18000f375
inc rcx
test edx, edx
jne 0x18000f360
test r8d, r8d
je 0x18000f233
cmp ebx, 0xffffffff
jle 0x18000f496
mov rax, qword [0x1800e9ba8]
test rax, rax
jne 0x18000f469
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbp, qword [rax]
mov rsi, rbp
nop
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x18000f43e
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x18000f43e
mov r14d, dword [rdi + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0x4c9df99
lea rax, [r14 + r10*4]
mov edx, dword [rax + r11]
add rdx, r11
movzx r8d, byte [rdx]
inc rdx
test r8b, r8b
je 0x18000f439
movsx eax, r8b
lea rdx, [rdx + 1]
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rdx - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test r8b, r8b
jne 0x18000f400
cmp r9d, 0x3acc0a70
je 0x18000f4c4
test r10d, r10d
jne 0x18000f3e0
mov rax, qword [rsi]
mov rsi, rax
cmp rax, rbp
je 0x18000f453
cmp qword [rax + 0x30], r12
jne 0x18000f3b0
mov rax, r12
mov ebx, dword [rsp + 0x88]
mov rdi, qword [rsp + 0x78]
mov qword [0x1800e9ba8], rax
mov qword gs:[0x130], rax
mov rcx, r15
mov rax, qword [0x1800c4210]
mov qword gs:[0x128], rax
call fcn.1800c21a0
test eax, eax
js 0x18000f496
cmp eax, ebx
jne 0x18000f233
cmp r13d, dword [rsp + 0x90]
jge 0x18000f4e0
inc r13d
jmp 0x18000f233
mov ecx, dword [rdi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x18000f310
mov ecx, dword [rdi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x18000f456
mov rax, r15
mov r13, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret