Function at 0x1800073ec
Capabilities:
Access peb ldr_data
Check os version
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rax, qword gs:[0x60]
mov rsi, rcx
movzx r14d, dl
xor edi, edi
mov qword [rsp + 0x28], rcx
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180007497
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180007497
mov r15d, dword [r10 + 0x20]
dec r9d
mov r11d, 0xa7f5fd85
lea rcx, [r15 + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov cl, byte [rdx]
inc rdx
test cl, cl
je 0x180007492
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x180007473
cmp r11d, 0x2be1c44a
je 0x18000749c
test r9d, r9d
jne 0x180007456
mov rax, qword [rax]
jmp 0x180007431
mov ecx, dword [r10 + 0x24]
mov ebx, r14d
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
xor edx, edx
add rax, r8
mov ecx, r14d
call rax
mov r11d, eax
cmp r14b, 1
jne 0x180007519
cmp byte [0x1800134a1], dil
movups xmm0, xmmword [str.u__H]
movzx eax, word [0x1800134a0]
mov word [rbp - 0x69], ax
movups xmmword [rbp - 0x79], xmm0
je 0x180007510
lea r8, [rbp - 0x79]
mov eax, 0x51eb851f
mul edi
shr edx, 4
movsx eax, dl
mov dl, dil
imul ecx, eax, 0x32
inc edi
sub dl, cl
add dl, 0x39
xor byte [r8], dl
inc r8
cmp edi, 0x12
jl 0x1800074eb
lea rdx, [rbp - 0x79]
jmp 0x180007784
cmp r14b, 2
jne 0x18000756f
movzx eax, word [0x180013740]
lea r8, [rbp - 0x79]
movups xmm0, xmmword [str.kSTI]
mov word [rbp - 0x69], ax
mov al, byte [0x180013742]
mov byte [rbp - 0x67], al
movups xmmword [rbp - 0x79], xmm0
mov eax, 0x51eb851f
mul edi
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, dil
inc edi
sub al, cl
add al, 0x39
xor byte [r8], al
inc r8
cmp edi, 0x13
jl 0x180007542
lea rdx, [rbp - 0x79]
jmp 0x180007784
cmp r14b, 4
jne 0x1800075c3
cmp byte [0x1800147eb], dil
movups xmm0, xmmword [str.tS_XQ_]
mov eax, dword [0x1800147e8]
mov dword [rbp - 0x69], eax
movups xmmword [rbp - 0x79], xmm0
je 0x1800075ba
lea r8, [rbp - 0x79]
mov eax, 0x51eb851f
mul edi
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, dil
inc edi
sub al, cl
add al, 0x39
xor byte [r8], al
inc r8
cmp edi, 0x14
jl 0x180007596
lea rdx, [rbp - 0x79]
jmp 0x180007784
cmp r14b, 5
jne 0x180007624
cmp byte [0x18001368d], dil
mov eax, dword [0x180013688]
movsd xmm0, qword [0x180013680]
mov dword [rbp - 0x71], eax
movzx eax, word [0x18001368c]
mov word [rbp - 0x6d], ax
movsd qword [rbp - 0x79], xmm0
je 0x18000761b
lea r8, [rbp - 0x79]
mov eax, 0x51eb851f
mul edi
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, dil
inc edi
sub al, cl
add al, 0x39
xor byte [r8], al
inc r8
cmp edi, 0xe
jl 0x1800075f7
lea rdx, [rbp - 0x79]
jmp 0x180007784
cmp r14b, 6
jne 0x18000767e
cmp byte [0x180013c1d], dil
mov eax, dword [0x180013c18]
movsd xmm0, qword [str.jS_Y]
mov dword [rbp - 0x71], eax
movzx eax, word [0x180013c1c]
mov word [rbp - 0x6d], ax
movsd qword [rbp - 0x79], xmm0
je 0x18000761b
lea r8, [rbp - 0x79]
mov eax, 0x51eb851f
mul edi
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
mov al, dil
inc edi
sub al, cl
add al, 0x39
xor byte [r8], al
inc r8
cmp edi, 0xe
jl 0x180007658
jmp 0x18000761b
cmp ebx, 0x2d
ja 0x1800076af
je 0x1800076d7
sub ebx, 0x21
je 0x1800076d7
sub ebx, 1
je 0x1800076d7
sub ebx, 1
je 0x1800076d7
sub ebx, 1
je 0x1800076d7
sub ebx, 1
je 0x1800076d7
sub ebx, 1
je 0x1800076d7
sub ebx, 1
je 0x1800076d7
cmp ebx, 1
je 0x1800076d7
jmp 0x1800076dc
sub ebx, 0x2e
je 0x1800076d7
sub ebx, 0x2d
je 0x1800076d7
sub ebx, 1
je 0x1800076d7
sub ebx, 1
je 0x1800076d7
sub ebx, 0x12
je 0x1800076d7
sub ebx, 0x21
je 0x1800076d7
sub ebx, 0x13
je 0x1800076d7
cmp ebx, 2
jne 0x1800076dc
bts r11d, 8
mov rax, qword gs:[0x60]
shl r11d, 0x10
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x180007753
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x180007753
mov r15d, dword [r10 + 0x20]
dec r9d
mov ebx, 0x838fb48b
lea rcx, [r15 + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov cl, byte [rdx]
inc rdx
test cl, cl
je 0x18000774e
movsx ecx, cl
xor ecx, ebx
imul ebx, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x180007732
cmp ebx, 0xe2bdc673
je 0x180007758
test r9d, r9d
jne 0x180007716
mov rax, qword [rax]
jmp 0x1800076f1
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
lea rdx, [rbp - 0x59]
add rax, r8
mov ecx, r11d
mov r8d, 0x80
call rax
lea rdx, [rbp - 0x59]
mov rcx, rsi
call fcn.180010dfc
mov rax, rsi
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.180011050
mov rbx, qword [rsp + 0x120]
add rsp, 0xe0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret