Function at 0x1800363b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xd0
cmp byte [0x180226cad], 0
je 0x180036849
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rdi
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180036467
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x180036467
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xf26d842
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x180036462
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x180036440
cmp r8d, 0x2239a2fa
je 0x18003646c
test r9d, r9d
jne 0x180036420
mov rax, qword [rax]
jmp 0x1800363f0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
mov ecx, dword [reloc.WS2_32.dll_bind]
add rax, r10
call rax
mov rdi, qword [rsp + 0xf8]
test ax, ax
jns 0x180036841
mov eax, dword [0x180226cb8]
test eax, eax
jne 0x1800364cc
call fcn.180035fe0
test rax, rax
je 0x180036841
mov rcx, rax
mov rbx, qword [rsp + 0xf0]
add rsp, 0xd0
pop rbp
jmp 0x180041640
movaps xmmword [rsp + 0xc0], xmm6
movaps xmmword [rsp + 0xb0], xmm7
movaps xmmword [rsp + 0xa0], xmm8
movaps xmmword [rsp + 0x90], xmm9
cmp eax, 1
jne 0x18003664c
movss xmm9, dword [0x1802273c0]
movss xmm6, dword [0x1802273c4]
mulss xmm9, dword [0x1801a81d0]
mulss xmm6, dword [0x1801a81d0]
call fcn.180035fe0
mov rbx, rax
test rax, rax
je 0x18003681f
xor r8d, r8d
lea rcx, [rbp - 0x49]
mov rdx, rax
call fcn.180035e20
mov ecx, dword [0x180226cb4]
dec ecx
cmp ecx, 5
ja case.default.0x18003655a
lea rdx, [0x180000000]
movsxd rcx, ecx
mov eax, dword [rdx + rcx*4 + 0x36854]
add rax, rdx
jmp rax
mov r8d, 7
mov rdx, rbx
lea rcx, [rbp - 0x39]
call fcn.180035e20
movsd xmm8, qword [rbp - 0x39]
mov ebx, dword [rbp - 0x31]
jmp 0x1800365aa
mov r8d, 8
jmp 0x180036562
mov r8d, 1
jmp 0x180036562
mov r8d, 2
jmp 0x180036562
mov r8d, 5
jmp 0x180036562
mov r8d, 6
jmp 0x180036562
mov ebx, dword [rbp - 0x41]
movsd xmm8, qword [rbp - 0x49]
lea rdx, [rbp - 0x29]
movsd qword [rbp - 0x29], xmm8
lea rcx, [rbp + 0x67]
mov dword [rbp - 0x21], ebx
call fcn.18003db10
movss xmm0, dword [rbp + 0x6b]
cvtps2pd xmm1, xmm6
cvtps2pd xmm0, xmm0
subsd xmm0, xmm1
movsd xmm1, qword [0x1801a8208]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [0x1801a8208]
movaps xmm7, xmm0
movss xmm0, dword [rbp + 0x67]
cvtps2pd xmm0, xmm0
cvtps2pd xmm2, xmm9
subsd xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm7, xmm0
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm7
ucomiss xmm1, xmm0
ja 0x180036615
sqrtss xmm0, xmm0
jmp 0x18003661a
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
mov eax, dword [reloc.WLDAP32.dll_Ordinal_30]
lea ecx, [rax + rax*4]
add ecx, ecx
movd xmm1, ecx
cvtdq2ps xmm1, xmm1
comiss xmm1, xmm0
jbe 0x18003681f
lea rcx, [rbp - 0x19]
movsd qword [rbp - 0x19], xmm8
mov dword [rbp - 0x11], ebx
call fcn.180034f30
jmp 0x18003681f
cmp eax, 2
jl 0x18003681f
movss xmm6, dword [0x1802273c4]
mulss xmm6, dword [0x1801a81d0]
movaps xmmword [rsp + 0x80], xmm10
movss xmm10, dword [0x1802273c0]
mulss xmm10, dword [0x1801a81d0]
call fcn.180035fe0
mov rbx, rax
test rax, rax
je 0x180036816
xor r8d, r8d
movaps xmmword [rsp + 0x70], xmm11
mov rdx, rax
lea rcx, [rbp - 0x49]
call fcn.180035e20
mov ecx, dword [0x180226cb4]
dec ecx
cmp ecx, 5
ja case.default.0x1800366c7
lea rdx, [0x180000000]
movsxd rcx, ecx
mov eax, dword [rdx + rcx*4 + 0x3686c]
add rax, rdx
jmp rax
mov r8d, 7
mov rdx, rbx
lea rcx, [rbp - 0x39]
call fcn.180035e20
movss xmm0, dword [rbp - 0x31]
movss xmm8, dword [rbp - 0x39]
movss xmm9, dword [rbp - 0x35]
movss dword [rbp - 0x41], xmm0
jmp 0x180036727
mov r8d, 8
jmp 0x1800366cf
mov r8d, 1
jmp 0x1800366cf
mov r8d, 2
jmp 0x1800366cf
mov r8d, 5
jmp 0x1800366cf
mov r8d, 6
jmp 0x1800366cf
movss xmm9, dword [rbp - 0x45]
movss xmm8, dword [rbp - 0x49]
mov ebx, dword [rbp - 0x41]
lea rdx, [rbp - 0x19]
movaps xmm11, xmm8
mov dword [rbp - 0x11], ebx
unpcklps xmm11, xmm9
lea rcx, [rbp + 0x67]
movsd qword [rbp - 0x19], xmm11
call fcn.18003db10
movss xmm0, dword [rbp + 0x6b]
cvtps2pd xmm1, xmm6
cvtps2pd xmm0, xmm0
subsd xmm0, xmm1
movsd xmm1, qword [0x1801a8208]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [0x1801a8208]
movaps xmm7, xmm0
movss xmm0, dword [rbp + 0x67]
cvtps2pd xmm0, xmm0
cvtps2pd xmm2, xmm10
subsd xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm7, xmm0
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm7
ucomiss xmm1, xmm0
ja 0x1800367a0
xorps xmm6, xmm6
sqrtss xmm6, xmm0
jmp 0x1800367a8
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm6, xmm0
cmp byte [0x180226cac], 0
je 0x1800367e7
call fcn.180053c70
movd xmm2, dword [reloc.WS2_32.dll_getsockname]
lea rdx, [rbp + 0x6f]
cvtdq2ps xmm2, xmm2
mov r9d, 0x8c0000ff
mov rcx, rax
mov dword [rsp + 0x20], Ordinal_41
movss dword [rbp + 0x6f], xmm8
movss dword [rbp + 0x73], xmm9
call fcn.180066a10
mov eax, dword [reloc.WLDAP32.dll_Ordinal_30]
lea ecx, [rax + rax*4]
add ecx, ecx
movd xmm0, ecx
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm6
jbe 0x180036810
lea rcx, [rbp - 0x29]
movsd qword [rbp - 0x29], xmm11
mov dword [rbp - 0x21], ebx
call fcn.18003d8d0
movaps xmm11, xmmword [rsp + 0x70]
movaps xmm10, xmmword [rsp + 0x80]
movaps xmm8, xmmword [rsp + 0xa0]
movaps xmm7, xmmword [rsp + 0xb0]
movaps xmm6, xmmword [rsp + 0xc0]
movaps xmm9, xmmword [rsp + 0x90]
mov rbx, qword [rsp + 0xf0]
add rsp, 0xd0
pop rbp
ret
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
movaps xmmword [rax - 0x38], xmm9
movaps xmmword [rax - 0x48], xmm10
movaps xmmword [rax - 0x58], xmm11
movaps xmmword [rax - 0x68], xmm12
mov rax, qword [0x1802242b8]
xor rax, rsp
mov qword [rbp - 0x29], rax
mov rbx, rcx
call fcn.180054530
xor r8d, r8d
lea rcx, [rbp - 0x39]
mov rdx, rbx
mov rdi, rax
call fcn.180035e20
lea rdx, [rbp - 0x49]
mov ecx, dword [rax + 8]
movsd xmm0, qword [rax]
mov dword [rbp - 0x41], ecx
lea rcx, [rbp - 0x59]
movsd qword [rbp - 0x49], xmm0
call fcn.18003db10
mov r8d, 0x796e
lea rcx, [rbp - 0x39]
mov rdx, rbx
call fcn.180035e20
call fcn.180054530
movss xmm12, dword [rax + 8]
mulss xmm12, dword [0x1801a81d0]
call fcn.180054530
movss xmm9, dword [rbp - 0x59]
xorps xmm10, xmm10
comiss xmm10, xmm9
movss xmm11, dword [rax + 0xc]
mulss xmm11, dword [0x1801a81d0]
ja 0x1800419c5
comiss xmm9, dword [rdi + 8]
ja 0x1800419c5
movaps xmmword [rsp + 0xc0], xmm8
movss xmm8, dword [rbp - 0x55]
comiss xmm10, xmm8
ja 0x1800419bc
comiss xmm8, dword [rdi + 0xc]
ja 0x1800419bc
movsxd rax, dword [0x180226cb4]
movaps xmmword [rsp + 0xd0], xmm7
movaps xmmword [rsp + 0x70], xmm13
cmp eax, 6
ja case.default.0x18004175b
lea rcx, [0x180000000]
mov edx, dword [rcx + rax*4 + 0x419fc]
add rdx, rcx
jmp rdx
cmp byte [0x18022734c], 0
je 0x180041799
mov r8d, 0x796e
lea rdx, [rbp - 0x39]
mov rcx, rbx
call qword [0x180227368]
movaps xmm1, xmmword [rbp - 0x39]
movaps xmm0, xmm1
movss dword [rbp - 0x49], xmm1
shufps xmm0, xmm1, 0x55
shufps xmm1, xmm1, 0xaa
movss dword [rbp - 0x41], xmm1
movss dword [rbp - 0x45], xmm0
jmp 0x1800417e7
xor r8d, r8d
jmp 0x1800417cc
mov r8d, 7
jmp 0x1800417cc
mov r8d, 8
jmp 0x1800417cc
mov r8d, 1
jmp 0x1800417cc
mov r8d, 2
jmp 0x1800417cc
mov r8d, 6
jmp 0x1800417cc
mov r8d, 5
mov rdx, rbx
lea rcx, [rbp - 0x39]
call fcn.180035e20
movsd xmm0, qword [rax]
mov eax, dword [rax + 8]
movsd qword [rbp - 0x49], xmm0
mov dword [rbp - 0x41], eax
lea rdx, [rbp - 0x49]
lea rcx, [rbp - 0x59]
call fcn.18003db10
cmp byte [0x180226cac], 0
movss xmm8, dword [rbp - 0x55]
movss xmm9, dword [rbp - 0x59]
je case.default.0x18004175b
call fcn.180053c70
movd xmm2, dword [reloc.WS2_32.dll_getsockname]
lea rdx, [rbp - 0x59]
cvtdq2ps xmm2, xmm2
mov r9d, 0x8c0000ff
mov rcx, rax
mov dword [rsp + 0x20], Ordinal_41
movss dword [rbp - 0x59], xmm9
movss dword [rbp - 0x55], xmm8
call fcn.180066a10
mov eax, dword [reloc.WS2_32.dll_accept]
xorps xmm13, xmm13
cvtps2pd xmm1, xmm11
add eax, 2
cvtps2pd xmm0, xmm8
cvtsi2ss xmm13, eax
subsd xmm0, xmm1
movsd xmm1, qword [0x1801a8208]
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
movsd xmm1, qword [0x1801a8208]
movaps xmm7, xmm0
cvtps2pd xmm0, xmm9
cvtps2pd xmm2, xmm12
subsd xmm0, xmm2
call sub.api_ms_win_crt_math_l1_1_0.dll_pow
addsd xmm7, xmm0
xorps xmm1, xmm1
xorps xmm0, xmm0
cvtsd2ss xmm0, xmm7
movaps xmm7, xmmword [rsp + 0xd0]
ucomiss xmm1, xmm0
ja 0x1800418aa
xorps xmm4, xmm4
sqrtss xmm4, xmm0
jmp 0x1800418b2
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
movaps xmm4, xmm0
ucomiss xmm9, xmm10
mov eax, dword [reloc.WLDAP32.dll_Ordinal_30]
movss xmm5, dword [0x1801a8840]
xorps xmm3, xmm3
xorps xmm2, xmm2
jp 0x1800418ce
je 0x180041926
comiss xmm9, xmm12
jbe 0x180041901
movaps xmm3, xmm12
movd xmm0, eax
subss xmm3, xmm9
cvtdq2ps xmm0, xmm0
xorps xmm3, xmm5
divss xmm3, xmm13
mulss xmm0, xmm12
movaps xmm1, xmm3
addss xmm1, xmm12
comiss xmm1, xmm0
jbe 0x180041901
xorps xmm3, xmm3
comiss xmm12, xmm9
jbe 0x180041926
movaps xmm3, xmm9
subss xmm3, xmm12
divss xmm3, xmm13
movaps xmm0, xmm3
addss xmm0, xmm12
comiss xmm10, xmm0
jbe 0x180041926
xorps xmm3, xmm3
ucomiss xmm8, xmm10
jp 0x18004192e
je 0x180041986
comiss xmm8, xmm11
jbe 0x180041961
movaps xmm2, xmm11
movd xmm0, eax
subss xmm2, xmm8
cvtdq2ps xmm0, xmm0
xorps xmm2, xmm5
divss xmm2, xmm13
mulss xmm0, xmm11
movaps xmm1, xmm2
addss xmm1, xmm11
comiss xmm1, xmm0
jbe 0x180041961
xorps xmm2, xmm2
comiss xmm11, xmm8
jbe 0x180041986
movaps xmm2, xmm8
subss xmm2, xmm11
divss xmm2, xmm13
movaps xmm0, xmm2
addss xmm0, xmm11
comiss xmm10, xmm0
jbe 0x180041986
xorps xmm2, xmm2
movd xmm0, dword [reloc.WLDAP32.dll_Ordinal_30]
movaps xmm13, xmmword [rsp + 0x70]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm4
jbe 0x1800419bc
xor r9d, r9d
mov qword [rsp + 0x20], 0
cvttss2si r8, xmm2
lea ecx, [r9 + 1]
cvttss2si rdx, xmm3
call qword [sym.imp.USER32.dll_mouse_event]
movaps xmm8, xmmword [rsp + 0xc0]
mov rcx, qword [rbp - 0x29]
xor rcx, rsp
call fcn.180153af0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm9, xmmword [r11 - 0x30]
movaps xmm10, xmmword [r11 - 0x40]
movaps xmm11, xmmword [r11 - 0x50]
movaps xmm12, xmmword [r11 - 0x60]
mov rsp, r11
pop rbp
ret