Function at 0x18001e570
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push r12
lea rbp, [rax - 0x5f]
sub rsp, 0xe8
mov qword [rax + 8], rbx
lea rcx, [rbp - 0x79]
mov qword [rax + 0x10], rsi
movabs rbx, 0x30a64123b956480c
mov qword [rax + 0x18], rdi
movabs rsi, 0x8561f7a6ac23b9c3
mov qword [rax - 0x18], r13
mov rdi, rdx
mov qword [rax - 0x20], r14
lea rdx, [rbp - 0x69]
mov qword [rax - 0x28], r15
movabs rax, 0x85619ac3d850c090
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x69], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x61], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x79], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x69]
mov qword [rbp - 0x71], rax
movabs rax, 0x8561f7a6c957c081
xorps xmm0, xmmword [rbp - 0x79]
movdqa xmmword [rbp - 0x69], xmm0
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x79], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x71], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x19], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x79]
mov qword [rbp - 0x11], rax
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x79], xmm0
movsxd r13, r8d
call fcn.18000eb10
mov rcx, qword [0x1800e7370]
mov qword [rbp + 0x7f], rax
test rcx, rcx
jne 0x18001e733
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r12, qword [rcx]
mov r15, r12
nop dword [rax + rax]
mov r11, qword [r15 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov r14d, dword [rax + r11 + 0x88]
add r14, r11
cmp r14, r11
je 0x18001e70a
mov r10d, dword [r14 + 0x18]
test r10d, r10d
je 0x18001e70a
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0xda7f7c7
lea rax, [rsi + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x18001e705
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x18001e6d0
cmp r9d, 0x6917486a
je 0x18001ea31
test r10d, r10d
jne 0x18001e6b0
mov rax, qword [r15]
mov r15, rax
cmp rax, r12
je 0x18001e720
cmp qword [rax + 0x30], 0
jne 0x18001e680
xor ecx, ecx
mov qword [0x1800e7370], rcx
movabs rsi, 0x8561f7a6ac23b9c3
mov qword gs:[0x130], rcx
mov edx, r13d
mov rax, qword [0x1800c0200]
mov rcx, qword [rbp + 0x7f]
mov qword gs:[0x128], rax
call fcn.1800be1e0
mov rdx, r13
mov r12, rax
mov r13, qword [rsp + 0xe0]
test rdx, rdx
jle 0x18001e792
mov r8, rax
sub r8, rdi
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rdi]
mov byte [r8 + rdi + 0x20], cl
lea rdi, [rdi + 1]
sub rdx, 1
jne 0x18001e780
movabs rax, 0xe20fb2dfd84ad796
movabs rdx, 0x6433047413cf37d1
mov qword [rbp + 0x7f], rax
movabs rcx, 0xaab73f694758a8ca
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x59], rax
movabs rax, 0x55d5326297332665
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x51], rax
movabs rax, 0x87e729b406a4a729
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x49], rax
movabs rax, 0x9018e891058ca68c
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x41], rax
movabs rax, 0x928fae8539e2c91a
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x39], rax
movabs rax, 0xa2f318658c012b89
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x31], rax
mov qword [rbp + 0x7f], rdx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x29], rax
mov qword [rbp + 0x7f], rcx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x21], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x7f], rbx
mov qword [rbp - 9], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 1], rax
movabs rax, 0xbd8245d068d1e55d
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 7], rax
movabs rax, 0xff6aaef564e3eab6
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0xf], rax
movabs rax, 0xcdf6dcea54878477
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x17], rax
movabs rax, 0xce927617e97545c0
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x7f], rdx
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x27], rax
mov qword [rbp + 0x7f], rcx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x59]
xorps xmm0, xmmword [rbp - 9]
movdqa xmm1, xmmword [rbp - 0x49]
xorps xmm1, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x59], xmm0
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x49], xmm1
movdqa xmm1, xmmword [rbp - 0x29]
mov qword [rbp + 0x2f], rax
mov rax, qword [0x1800e7340]
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 0x39], xmm0
movdqa xmmword [rbp - 0x29], xmm1
test rax, rax
jne 0x18001e9d7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov r14, r15
nop dword [rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x18001e9b8
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x18001e9b8
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
mov r9d, 0x2b9dc3a8
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
movzx eax, byte [r8]
inc r8
test al, al
je 0x18001e9b3
nop
movsx ecx, al
lea r8, [r8 + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [r8 - 1]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test al, al
jne 0x18001e980
cmp r9d, 0x10d2cf85
je 0x18001ea4f
test r10d, r10d
jne 0x18001e960
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x18001e9ce
cmp qword [rax + 0x30], 0
jne 0x18001e930
xor eax, eax
mov qword [0x1800e7340], rax
mov qword gs:[0x130], rax
lea rcx, [rbp - 0x59]
mov rax, qword [0x1800c0200]
mov qword gs:[0x128], rax
call fcn.1800be1e0
mov r15, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x108]
mov rbx, qword [rsp + 0x100]
test rax, rax
jne 0x18001ea6b
add rsp, 0xe8
pop r12
pop rbp
ret
mov ecx, dword [r14 + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [r14 + 0x1c]
add rcx, r11
mov ecx, dword [rcx + rdx*4]
add rcx, r11
jmp 0x18001e722
mov ecx, dword [rsi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x18001e9d0
xor edx, edx
mov rcx, r12
call rax
add rsp, 0xe8
pop r12
pop rbp
ret