Function at 0x1800012d0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
sub rsp, 0x1f0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x1a0], rax
mov rax, qword [0x180004680]
test rax, rax
jne 0x1800013ca
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1800013a7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1800013a7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x80d6eaea
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1800013a2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x180001380
cmp r8d, 0x262964e0
je 0x1800013ac
test r9d, r9d
jne 0x180001360
mov rax, qword [rax]
jmp 0x180001330
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x180004680], rax
call rax
mov rax, qword [0x180004690]
test rax, rax
jne 0x18000148a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001467
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001467
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xeacf4303
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180001462
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x180001440
cmp r8d, 0x75d396dd
je 0x18000146c
test r9d, r9d
jne 0x180001420
mov rax, qword [rax]
jmp 0x1800013f0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x180004690], rax
mov ecx, 1
call rax
mov r11, qword [0x180004688]
mov rsi, rax
test r11, r11
jne 0x18000155b
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop word [rax + rax]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov ebx, dword [rdx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001537
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001537
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xe9cf4170
lea rax, [rdi + r9*4]
mov edx, dword [rax + r10]
add rdx, r10
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x180001532
nop
movsx eax, al
lea rdx, [rdx + 1]
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test al, al
jne 0x180001510
cmp r8d, 0x582c3655
je 0x18000153c
test r9d, r9d
jne 0x1800014f0
mov rcx, qword [rcx]
jmp 0x1800014c0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov r11d, dword [rcx + rdx*4]
add r11, r10
mov qword [0x180004688], r11
mov r9, rsi
lea r8, [0x180003190]
lea rdx, str.CONOUT_
lea rcx, [0x1800046c0]
call r11
mov rax, qword [0x1800046b8]
test rax, rax
jne 0x1800018df
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r9, r10
nop dword [rax]
mov rcx, qword [r9 + 0x60]
mov edx, 0x9bd3fd53
movzx eax, word [r9 + 0x58]
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x1800015e0
nop word [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x1800015c0
cmp edx, 0x18add536
je 0x1800017cc
mov rax, qword [r9]
mov r9, rax
cmp rax, r10
je 0x1800015f2
cmp qword [rax + 0x30], 0
jne 0x1800015a0
xor eax, eax
mov qword [0x1800046b8], rax
test rax, rax
jne 0x1800018df
movabs rax, 0x785ecc4d3997569c
movabs rcx, 0x5f8571f193419e1c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0xcdbfb3b1089cc0ab
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x60b73c54bf5b02b5
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x32d5fa858f4fd3a3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x7d693fa1d6bc0524
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x5803ab385bf212c7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xa2d193d564e9afe8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x497583ad63d22c1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x5ff59ef7e02ca0ca
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x7d631ec4bac9614b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
movdqa xmm2, xmmword [rbp + 0x40]
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
mov qword [rbp + 0x88], rax
vxorps xmm2, xmm2, xmmword [rbp + 0x80]
mov rax, qword [0x180004698]
vmovdqa ymmword [rbp + 0x20], ymm1
vmovdqa xmmword [rbp + 0x40], xmm2
test rax, rax
vzeroupper
jne 0x1800017f3
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1800017c7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1800017c7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x132b739
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1800017c2
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1800017a0
cmp r8d, 0xf7f5ca7d
je 0x1800017d5
test r9d, r9d
jne 0x180001780
mov rax, qword [rax]
jmp 0x180001750
mov rax, qword [r9 + 0x30]
jmp 0x1800015f4
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x180004698], rax
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xa0]
call rax
mov rax, qword [0x1800046a0]
test rax, rax
jne 0x1800018ca
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1800018a7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1800018a7
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x32b5a6
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rdi]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1800018a2
nop dword [rax]
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x180001880
cmp r8d, 0xbefe8686
je 0x1800018ac
test r9d, r9d
jne 0x180001860
mov rax, qword [rax]
jmp 0x180001830
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x1800046a0], rax
mov rdx, qword [0x1800046c0]
lea rcx, [rbp + 0xa0]
call rax
jmp 0x180001d94
lea rsi, [rax + 0x17cc0]
movabs rax, 0x785ecc4d3997569c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x82a5fdb0178cddb8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x24e42b5fa4594680
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
movabs rax, 0x5ff59ef7e026d8ef
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
movabs rax, 0x5803ab385bf212c7
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0xa2d193d564e9afe8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x497583ad63d22c1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0x5ff59ef7e02ca0ca
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
mov rax, qword [0x1800046a8]
vmovdqa ymmword [rbp + 0x20], ymm1
test rax, rax
vzeroupper
jne 0x180001a6a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001a47
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001a47
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x87247fa1
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180001a42
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x180001a20
cmp r8d, 0x4df22e75
je 0x180001a4c
test r9d, r9d
jne 0x180001a00
mov rax, qword [rax]
jmp 0x1800019d0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x1800046a8], rax
mov r8, rsi
lea rdx, [rbp + 0x20]
lea rcx, [rbp + 0xa0]
call rax
mov rax, qword [0x1800046b0]
test rax, rax
jne 0x180001b3a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180001b17
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180001b17
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x86247e0e
lea rcx, [r10 + r9*4]
mov edx, dword [rcx + rdi]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180001b12
nop dword [rax]
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x180001af0
cmp r8d, 0x3d3696de
je 0x180001b1c
test r9d, r9d
jne 0x180001ad0
mov rax, qword [rax]
jmp 0x180001aa0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x1800046b0], rax
mov rdx, qword [0x1800046c0]
lea rcx, [rbp + 0xa0]
call rax
mov rax, qword [0x1800046b8]
test rax, rax
jne 0x180001bd0
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r9, r10
nop dword [rax]
mov rcx, qword [r9 + 0x60]
mov edx, 0x9bd3fd53
movzx eax, word [r9 + 0x58]
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x180001bb0
nop word [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x180001b90
cmp edx, 0x18add536
je 0x180001dbc
mov rax, qword [r9]
mov r9, rax
cmp rax, r10
je 0x180001bc2
cmp qword [rax + 0x30], 0
jne 0x180001b70
xor eax, eax
mov qword [0x1800046b8], rax
test rax, rax
je 0x180001be7
add rax, 0x53b00
mov rcx, rsi
call rax
mov rax, qword [0x1800046b8]
test rax, rax
jne 0x180001c60
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r9, r10
nop
mov rcx, qword [r9 + 0x60]
mov edx, 0x9bd3fd53
movzx eax, word [r9 + 0x58]
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x180001c40
nop word [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x180001c20
cmp edx, 0x18add536
je 0x180001dc5
mov rax, qword [r9]
mov r9, rax
cmp rax, r10
je 0x180001c52
cmp qword [rax + 0x30], 0
jne 0x180001c00
xor eax, eax
mov qword [0x1800046b8], rax
test rax, rax
je 0x180001c85
add rax, 0x53890
lea r8, [0x1800046c8]
lea rdx, section..text
mov rcx, rsi
call rax
mov rax, qword [0x1800046b8]
test rax, rax
jne 0x180001d00
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r9, r10
nop dword [rax]
mov rcx, qword [r9 + 0x60]
mov edx, 0x9bd3fd53
movzx eax, word [r9 + 0x58]
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x180001ce0
nop word [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x180001cc0
cmp edx, 0x18add536
je 0x180001dce
mov rax, qword [r9]
mov r9, rax
cmp rax, r10
je 0x180001cf2
cmp qword [rax + 0x30], 0
jne 0x180001ca0
xor eax, eax
mov qword [0x1800046b8], rax
test rax, rax
je 0x180001d17
add rax, 0x54210
mov rcx, rsi
call rax
mov rax, qword [0x1800046b8]
test rax, rax
jne 0x180001d8c
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r10, qword [rax]
mov r9, r10
nop
mov rcx, qword [r9 + 0x60]
mov edx, 0x9bd3fd53
movzx eax, word [r9 + 0x58]
shr rax, 1
lea r8, [rcx + rax*2]
cmp rcx, r8
je 0x180001d6c
nop word [rax + rax]
movsx eax, byte [rcx]
add rcx, 2
xor eax, edx
imul edx, eax, 0x1000193
cmp rcx, r8
jne 0x180001d50
cmp edx, 0x18add536
je 0x180001dd7
mov rax, qword [r9]
mov r9, rax
cmp rax, r10
je 0x180001d7e
cmp qword [rax + 0x30], 0
jne 0x180001d30
xor eax, eax
mov qword [0x1800046b8], rax
test rax, rax
je 0x180001d94
add rax, 0x54300
call rax
mov rcx, qword [rbp + 0x1a0]
xor rcx, rsp
call fcn.180001e10
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
mov rax, qword [r9 + 0x30]
jmp 0x180001bc4
mov rax, qword [r9 + 0x30]
jmp 0x180001c54
mov rax, qword [r9 + 0x30]
jmp 0x180001cf4
mov rax, qword [r9 + 0x30]
jmp 0x180001d80