Function at 0x18001eaf0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push r12
lea rbp, [rax - 0x5f]
sub rsp, 0xe8
mov qword [rax + 8], rbx
lea rcx, [rbp - 0x79]
mov qword [rax + 0x10], rsi
movabs rbx, 0xc1075ecd36131414
mov qword [rax + 0x18], rdi
movabs rsi, 0x10eed3cc94530b27
mov qword [rax - 0x18], r13
mov rdi, rdx
mov qword [rax - 0x20], r14
lea rdx, [rbp - 0x69]
mov qword [rax - 0x28], r15
movabs rax, 0x10eebea9e0207274
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x69], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x61], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x79], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x69]
mov qword [rbp - 0x71], rax
movabs rax, 0x10eed3ccf1277265
xorps xmm0, xmmword [rbp - 0x79]
movdqa xmmword [rbp - 0x69], xmm0
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x79], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x71], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x19], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x79]
mov qword [rbp - 0x11], rax
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x79], xmm0
movsxd r13, r8d
call fcn.18000eaf0
mov rcx, qword [0x1800ecf90]
mov qword [rbp + 0x7f], rax
test rcx, rcx
jne 0x18001ecb3
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r12, qword [rcx]
mov r15, r12
nop dword [rax + rax]
mov r11, qword [r15 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov r14d, dword [rax + r11 + 0x88]
add r14, r11
cmp r14, r11
je 0x18001ec8a
mov r10d, dword [r14 + 0x18]
test r10d, r10d
je 0x18001ec8a
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0xcec77f48
lea rax, [rsi + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x18001ec85
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x18001ec50
cmp r9d, 0x18c742c5
je 0x18001efb1
test r10d, r10d
jne 0x18001ec30
mov rax, qword [r15]
mov r15, rax
cmp rax, r12
je 0x18001eca0
cmp qword [rax + 0x30], 0
jne 0x18001ec00
xor ecx, ecx
mov qword [0x1800ecf90], rcx
movabs rsi, 0x10eed3cc94530b27
mov qword gs:[0x130], rcx
mov edx, r13d
mov rax, qword [0x1800c5210]
mov rcx, qword [rbp + 0x7f]
mov qword gs:[0x128], rax
call fcn.1800c3200
mov rdx, r13
mov r12, rax
mov r13, qword [rsp + 0xe0]
test rdx, rdx
jle 0x18001ed12
mov r8, rax
sub r8, rdi
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rdi]
mov byte [r8 + rdi + 0x20], cl
lea rdi, [rdi + 1]
sub rdx, 1
jne 0x18001ed00
movabs rax, 0x778096b5e03a6572
movabs rdx, 0x132704e62063fa2d
mov qword [rbp + 0x7f], rax
movabs rcx, 0x3749c927b4714932
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x59], rax
movabs rax, 0xa4742d8c18767a7d
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x51], rax
movabs rax, 0x3b53a876617e6b0d
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x49], rax
movabs rax, 0xc8cdab171e04e294
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x41], rax
movabs rax, 0x565ceb0fe9cafaa6
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x39], rax
movabs rax, 0xda9cb3c3b65648a1
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x31], rax
mov qword [rbp + 0x7f], rdx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x29], rax
mov qword [rbp + 0x7f], rcx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x21], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x7f], rbx
mov qword [rbp - 9], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 1], rax
movabs rax, 0x136c4120f0b2979
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 7], rax
movabs rax, 0xa7bfed737f6baeae
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0xf], rax
movabs rax, 0x925996084afb7cb
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x17], rax
movabs rax, 0xb6fdddb1d32226e8
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x7f], rdx
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x27], rax
mov qword [rbp + 0x7f], rcx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x59]
xorps xmm0, xmmword [rbp - 9]
movdqa xmm1, xmmword [rbp - 0x49]
xorps xmm1, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x59], xmm0
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x49], xmm1
movdqa xmm1, xmmword [rbp - 0x29]
mov qword [rbp + 0x2f], rax
mov rax, qword [0x1800ecf60]
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 0x39], xmm0
movdqa xmmword [rbp - 0x29], xmm1
test rax, rax
jne 0x18001ef57
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov r14, r15
nop dword [rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x18001ef38
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x18001ef38
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
mov r9d, 0xcf127066
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
movzx eax, byte [r8]
inc r8
test al, al
je 0x18001ef33
nop
movsx ecx, al
lea r8, [r8 + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [r8 - 1]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test al, al
jne 0x18001ef00
cmp r9d, 0xe9658b4f
je 0x18001efcf
test r10d, r10d
jne 0x18001eee0
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x18001ef4e
cmp qword [rax + 0x30], 0
jne 0x18001eeb0
xor eax, eax
mov qword [0x1800ecf60], rax
mov qword gs:[0x130], rax
lea rcx, [rbp - 0x59]
mov rax, qword [0x1800c5210]
mov qword gs:[0x128], rax
call fcn.1800c3200
mov r15, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x108]
mov rbx, qword [rsp + 0x100]
test rax, rax
jne 0x18001efeb
add rsp, 0xe8
pop r12
pop rbp
ret
mov ecx, dword [r14 + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [r14 + 0x1c]
add rcx, r11
mov ecx, dword [rcx + rdx*4]
add rcx, r11
jmp 0x18001eca2
mov ecx, dword [rsi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x18001ef50
xor edx, edx
mov rcx, r12
call rax
add rsp, 0xe8
pop r12
pop rbp
ret