Function at 0x18006de60
Capabilities:
Access peb ldr_data
Encode data using xor
Encrypt data using rc4 prga
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
sub rsp, 0x150
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x1800f0028]
xor rax, rsp
mov qword [rbp + 0x100], rax
movabs rax, 0xa58b5c2eed66f758
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x40], rax
movabs rax, 0x4898aea6e732e246
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0xdec9bf5859c74611
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
movabs rax, 0x9a9332f51e3d7203
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
movabs rax, 0x8790e800b15a61f8
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x60], rax
movabs rax, 0x7d51c90056d4c65c
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x68], rax
movabs rax, 0x7c90f3b0355c15d0
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x70], rax
movabs rax, 0xd5b7d763016e1b04
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x78], rax
movabs rax, 0x40f086ea61d0f8cb
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
movabs rcx, 0x3ad15f4f8ce5b0dc
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
movabs rax, 0xa5ea5c42ed09f70b
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa0], rax
movabs rax, 0x48f6aec7e75ee234
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xa8], rax
movabs rax, 0xdea0bf3459844675
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb0], rax
movabs rax, 0x9abe32811e537266
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xb8], rax
movabs rax, 0x87a6e86eb13361af
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc0], rax
movabs rax, 0x7d39c95356f9c668
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xc8], rax
movabs rax, 0x7cf9f3c0352c15b9
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd0], rax
movabs rax, 0xd5d2d74d01091b6a
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xd8], rax
movabs rax, 0x40f086ea61b5f8b3
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0xe0], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0xe8], rax
vmovdqu ymm0, ymmword [rbp + 0x40]
vpxor ymm1, ymm0, ymmword [rbp + 0xa0]
vmovdqa ymmword [rbp + 0x40], ymm1
vmovdqu ymm0, ymmword [rbp + 0x60]
vpxor ymm1, ymm0, ymmword [rbp + 0xc0]
vmovdqa ymmword [rbp + 0x60], ymm1
vmovdqa xmm0, xmmword [rbp + 0x80]
vxorps xmm0, xmm0, xmmword [rbp + 0xe0]
vmovdqa xmmword [rbp + 0x80], xmm0
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 8], xmm0
vxorps xmm1, xmm1, xmm1
vmovdqu xmmword [rbp + 0x18], xmm1
lea rax, [rbp + 0x40]
mov r8, 0xffffffffffffffff
vzeroupper
nop
inc r8
cmp word [rax + r8*2], 0
jne 0x18006e0c0
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 8]
call fcn.180007de0
nop
lea rsi, [rbp + 8]
cmp qword [rbp + 0x20], 8
cmovae rsi, qword [rbp + 8]
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x18006e176
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x18006e176
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
mov r8d, 0x391afa30
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x18006e171
nop
movsx edx, dl
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx]
lea rcx, [rcx + 1]
test dl, dl
jne 0x18006e150
cmp r8d, 0x65cc3e27
je 0x18006e17b
test r9d, r9d
jne 0x18006e130
mov rax, qword [rax]
jmp 0x18006e100
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdi + 0x24]
add rax, r10
movzx eax, word [rax + r9*2]
mov edx, dword [rdx + rax*4]
add rdx, r10
mov rcx, rsi
call rdx
mov rcx, rax
test rax, rax
jne 0x18006e1a3
xor bl, bl
jmp 0x18006e1ce
add rax, 0x6ed5000
mov qword [0x1801dd3e0], rax
lea rax, [rcx + 0x6ebc680]
mov qword [0x1801dd3d8], rax
lea rax, [rcx + 0x7034318]
mov qword [0x1801dd3e8], rax
mov bl, 1
mov rdx, qword [rbp + 0x20]
cmp rdx, 8
jb 0x18006e211
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18006e20c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18006e20c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18007f624
movzx eax, bl
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.18007f5c0
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret