Function at 0x180024210
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
movabs rax, 0x4d41a3c8c0120369
movabs rdi, 0x2334c284a561622b
mov qword [rbp + 0x67], rax
movabs rsi, 0xc6343b319ce2fa00
mov rax, qword [rbp + 0x67]
movzx ebx, dl
mov qword [rbp - 0x59], rax
mov r12d, 0x84222325
movabs rax, 0xc6343b31ee879263
mov r15, rcx
mov qword [rbp + 0x67], rax
lea rcx, [rbp - 0x59]
mov rax, qword [rbp + 0x67]
mov r8d, r12d
mov qword [rbp - 0x51], rax
mov qword [rbp + 0x67], rdi
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x39], rax
mov qword [rbp + 0x67], rsi
mov rax, qword [rbp + 0x67]
movdqa xmm0, xmmword [rbp - 0x59]
mov qword [rbp - 0x31], rax
xorps xmm0, xmmword [rbp - 0x39]
movq rdx, xmm0
movdqa xmmword [rbp - 0x59], xmm0
test dl, dl
je 0x1800242cb
nop word [rax + rax]
movsx eax, dl
lea rcx, [rcx + 1]
xor eax, r8d
imul r8d, eax, 0x1b3
movzx eax, byte [rcx]
movzx edx, al
test al, al
jne 0x1800242b0
mov rax, qword [r15]
mov edx, r12d
mov rcx, qword [rax + 0x10]
movzx eax, byte [rcx]
test al, al
je 0x1800242f6
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1b3
movzx eax, byte [rcx]
test al, al
jne 0x1800242e0
mov qword [rsp + 0xe8], r13
mov qword [rsp + 0xf0], r14
cmp edx, r8d
je 0x1800246e6
movabs rax, 0x4658a7c9c0120369
lea rcx, [rbp - 0x49]
mov qword [rbp + 0x67], rax
mov r8d, r12d
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x49], rax
movabs rax, 0xc6343b319ce2fa65
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x41], rax
mov qword [rbp + 0x67], rdi
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x39], rax
mov qword [rbp + 0x67], rsi
mov rax, qword [rbp + 0x67]
movdqa xmm0, xmmword [rbp - 0x49]
mov qword [rbp - 0x31], rax
xorps xmm0, xmmword [rbp - 0x39]
movq rdx, xmm0
movdqa xmmword [rbp - 0x49], xmm0
test dl, dl
je 0x18002438c
movsx eax, dl
lea rcx, [rcx + 1]
xor eax, r8d
imul r8d, eax, 0x1b3
movzx eax, byte [rcx]
movzx edx, al
test al, al
jne 0x180024371
mov rax, qword [r15]
mov edx, r12d
mov rcx, qword [rax + 0x10]
movzx eax, byte [rcx]
test al, al
je 0x1800243b6
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1b3
movzx eax, byte [rcx]
test al, al
jne 0x1800243a0
cmp edx, r8d
je 0x1800246e6
movabs rax, 0x514091f0cb080e6d
lea rcx, [rbp + 7]
mov qword [rbp + 0x67], rax
movabs r14, 0xbda5e92fdab306fa
mov rax, qword [rbp + 0x67]
movabs r13, 0xbe3237822ff6b9c3
mov qword [rbp + 7], rax
mov r8d, r12d
movabs rax, 0xa9445a54cb879169
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp + 0xf], rax
mov qword [rbp + 0x67], r13
mov rax, qword [rbp + 0x67]
mov qword [rbp + 0x17], rax
mov qword [rbp + 0x67], r14
mov rax, qword [rbp + 0x67]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x67], rdi
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x19], rax
mov qword [rbp + 0x67], rsi
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x11], rax
movabs rax, 0xbe3237822ff6b9ad
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp - 9], rax
mov qword [rbp + 0x67], r14
mov rax, qword [rbp + 0x67]
movdqa xmm1, xmmword [rbp + 7]
xorps xmm1, xmmword [rbp - 0x19]
movdqa xmm0, xmmword [rbp + 0x17]
movq rdx, xmm1
mov qword [rbp - 1], rax
xorps xmm0, xmmword [rbp - 9]
movdqa xmmword [rbp + 7], xmm1
movdqa xmmword [rbp + 0x17], xmm0
test dl, dl
je 0x18002449b
nop dword [rax]
movsx eax, dl
lea rcx, [rcx + 1]
xor eax, r8d
imul r8d, eax, 0x1b3
movzx eax, byte [rcx]
movzx edx, al
test al, al
jne 0x180024480
mov rax, qword [r15]
mov edx, r12d
mov rcx, qword [rax + 0x10]
movzx eax, byte [rcx]
test al, al
je 0x1800244c6
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1b3
movzx eax, byte [rcx]
test al, al
jne 0x1800244b0
cmp edx, r8d
je 0x1800246e6
movabs rax, 0x4c44a3e1f2160d69
lea rcx, [rbp - 0x39]
mov qword [rbp + 0x67], rax
mov edx, r12d
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x39], rax
movabs rax, 0xc6343b319ce2fa6e
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x31], rax
mov qword [rbp + 0x67], rdi
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x19], rax
mov qword [rbp + 0x67], rsi
mov rax, qword [rbp + 0x67]
movdqa xmm0, xmmword [rbp - 0x39]
mov qword [rbp - 0x11], rax
xorps xmm0, xmmword [rbp - 0x19]
movq r8, xmm0
movdqa xmmword [rbp - 0x39], xmm0
test r8b, r8b
je 0x180024671
nop word [rax + rax]
movsx eax, r8b
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1b3
movzx eax, byte [rcx]
movzx r8d, al
test al, al
jne 0x180024540
test edx, edx
jne 0x180024671
movabs rax, 0x545ba0f7d60e1068
lea rcx, [rbp - 0x39]
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x39], rax
movabs rax, 0xc634555eec839f57
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x31], rax
mov qword [rbp + 0x67], rdi
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x19], rax
mov qword [rbp + 0x67], rsi
mov rax, qword [rbp + 0x67]
movdqa xmm0, xmmword [rbp - 0x39]
mov qword [rbp - 0x11], rax
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x39], xmm0
call fcn.180020830
test eax, eax
jne 0x180024671
movabs rax, 0x475ab7ebd50c0d68
lea rcx, [rbp - 0x19]
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x19], rax
movabs rax, 0xa9445a54cb959542
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x11], rax
mov qword [rbp + 0x67], r13
mov rax, qword [rbp + 0x67]
mov qword [rbp - 9], rax
mov qword [rbp + 0x67], r14
mov rax, qword [rbp + 0x67]
mov qword [rbp - 1], rax
mov qword [rbp + 0x67], rdi
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x39], rax
mov qword [rbp + 0x67], rsi
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x31], rax
movabs rax, 0xbe3237822ff6b9ad
mov qword [rbp + 0x67], rax
mov rax, qword [rbp + 0x67]
mov qword [rbp - 0x29], rax
mov qword [rbp + 0x67], r14
mov rax, qword [rbp + 0x67]
movdqa xmm0, xmmword [rbp - 0x19]
movdqa xmm1, xmmword [rbp - 9]
xorps xmm0, xmmword [rbp - 0x39]
mov qword [rbp - 0x21], rax
xorps xmm1, xmmword [rbp - 0x29]
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmmword [rbp - 9], xmm1
call fcn.180020830
test eax, eax
jne 0x180024671
xor edi, edi
jmp 0x180024676
mov edi, 1
mov rax, qword [r15]
mov dword [rbp + 0x67], edi
mov rcx, qword [rax + 0x10]
movzx eax, byte [rcx]
test al, al
je 0x1800246a8
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, r12d
imul r12d, eax, 0x1b3
movzx eax, byte [rcx]
test al, al
jne 0x180024690
test bl, bl
jne 0x1800246c4
mov rcx, r15
call fcn.180012280
test al, al
jne 0x1800246e6
mov rcx, r15
call fcn.1800124b0
test al, al
jne 0x1800246e6
mov rcx, r15
call fcn.1800137b0
mov rcx, rax
call fcn.180011460
cmp dword [rax], 0
jg 0x18002470f
cmp r12d, edi
jne 0x1800246e6
mov rcx, r15
call fcn.180013230
xor al, al
mov r14, qword [rsp + 0xf0]
mov r13, qword [rsp + 0xe8]
mov rbx, qword [rsp + 0xf8]
add rsp, 0xb0
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
cmp r12d, edi
jne 0x180024740
movaps xmmword [rsp + 0xa0], xmm6
call fcn.18001b6e0
movaps xmm6, xmm0
mov rcx, r15
addss xmm6, dword [0x1800c4034]
call fcn.180011a90
movss dword [rax], xmm6
movaps xmm6, xmmword [rsp + 0xa0]
mov rcx, r15
call fcn.1800137b0
mov rcx, rax
call fcn.180011460
mov rcx, r15
dec dword [rax]
call fcn.180012a40
mov rcx, r15
call fcn.180013460
mov rcx, r15
call fcn.180011630
mov rax, qword [0x1800e6358]
test rax, rax
jne 0x180024848
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r13, qword [rax]
mov rsi, r13
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov edi, dword [rax + r11 + 0x88]
add rdi, r11
cmp rdi, r11
je 0x180024826
mov r10d, dword [rdi + 0x18]
test r10d, r10d
je 0x180024826
mov r14d, dword [rdi + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0x174f3f2
lea rax, [r14 + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x180024821
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x1800247f0
cmp r9d, 0x3e6e7869
je 0x180024896
test r10d, r10d
jne 0x1800247d0
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r13
je 0x18002483c
cmp qword [rax + 0x30], 0
jne 0x1800247a0
xor eax, eax
mov edi, dword [rbp + 0x67]
mov qword [0x1800e6358], rax
mov qword gs:[0x130], rax
lea rcx, [0x1800c3fc0]
mov rax, qword [0x1800c1210]
mov qword gs:[0x128], rax
call fcn.1800bfb20
mov r8, rax
xor edx, edx
mov rcx, r15
call fcn.18000e570
cmp r12d, edi
je 0x18002488f
mov rcx, r15
call fcn.180012e30
mov rcx, r15
call fcn.1800112a0
mov al, 1
jmp 0x1800246e8
mov ecx, dword [rdi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x18002483e