Function at 0x1800f72b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1802407e8]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov r15, rcx
mov rdi, qword [0x18024bc18]
test rdi, rdi
jne 0x1800f7396
mov rax, qword gs:[0x60]
mov rdx, qword [rax + 0x18]
mov rax, qword [rdx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x1800f7377
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1800f7377
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [rbx + r8*4]
mov eax, dword [rax + r9]
add rax, r9
mov edx, 0xc1035723
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x1800f7372
nop dword [rax]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax]
lea rax, [rax + 1]
test cl, cl
jne 0x1800f7350
cmp edx, 0x88f08367
je 0x1800f752c
test r8d, r8d
jne 0x1800f7330
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1800f738d
cmp qword [rax + 0x30], 0
jne 0x1800f7300
xor edi, edi
mov qword [0x18024bc18], rdi
mov ecx, dword [0x180248ca8]
mov rax, qword gs:[0x58]
mov r14, qword [rax + rcx*8]
mov ecx, 0x6c8
mov eax, dword [rcx + r14]
mov ebx, 0x478
add rbx, r14
test al, 1
jne 0x1800f73e5
or eax, 1
mov dword [rcx + r14], eax
mov dword [rbx + 6], 0x1d37300
mov dword [rbx], 0xb40a889d
mov word [rbx + 4], 0x99a2
lea rcx, [0x1801e2d20]
call fcn.18015cf9c
nop
cmp byte [rbx + 9], 0
je 0x1800f7412
xor byte [rbx], 0xd3
xor byte [rbx + 1], 0xdb
xor byte [rbx + 2], 0x59
xor byte [rbx + 3], 0xeb
xor byte [rbx + 4], 0xeb
xor byte [rbx + 5], 0xf7
xor byte [rbx + 6], 0x69
xor byte [rbx + 7], 7
xor byte [rbx + 8], 0xd3
mov byte [rbx + 9], 0
mov rdx, rbx
mov rcx, qword [r15 + 0x38]
call rdi
mov qword [r15], rax
mov rdi, qword [0x18024bc70]
test rdi, rdi
jne 0x1800f74e6
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x1800f74c7
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1800f74c7
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [rbx + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0x56787f39
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800f74c2
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1800f74a0
cmp edx, 0x86f06dc1
je 0x1800f754a
test r8d, r8d
jne 0x1800f7480
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1800f74dd
cmp qword [rax + 0x30], 0
jne 0x1800f7450
xor edi, edi
mov qword [0x18024bc70], rdi
movdqa xmm0, xmmword [0x1802174b0]
mov ecx, 0x664
mov eax, dword [rcx + r14]
mov edx, 0x5d8
test al, 1
jne 0x1800f757a
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [r14 + rdx]
mov byte [rbx + 0x10], 1
lea rax, [rbx + 0xf]
lea rcx, [rsp + 0x5f]
cmp rbx, rcx
ja 0x1800f7568
lea rcx, [rsp + 0x50]
cmp rax, rcx
jb 0x1800f7568
movups xmmword [rbx], xmm0
jmp 0x1800f756b
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edi, dword [rcx + rax*4]
add rdi, r9
jmp 0x1800f738f
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edi, dword [rcx + rax*4]
add rdi, r9
jmp 0x1800f74df
movups xmmword [rbx], xmm0
lea rcx, [0x1801e2cf0]
call fcn.18015cf9c
nop
jmp 0x1800f757e
lea rbx, [rdx + r14]
cmp byte [rbx + 0x10], 0
je 0x1800f75c7
xor byte [rbx], 5
xor byte [rbx + 1], 0x35
xor byte [rbx + 2], 0xfd
xor byte [rbx + 3], 0xa9
xor byte [rbx + 4], 0xcf
xor byte [rbx + 5], 0xc1
xor byte [rbx + 6], 0x65
xor byte [rbx + 7], 0x81
xor byte [rbx + 8], 5
xor byte [rbx + 9], 0x35
xor byte [rbx + 0xa], 0xfd
xor byte [rbx + 0xb], 0xa9
xor byte [rbx + 0xc], 0xcf
xor byte [rbx + 0xd], 0xc1
xor byte [rbx + 0xe], 0x65
xor byte [rbx + 0xf], 0x81
mov byte [rbx + 0x10], 0
mov rdx, rbx
mov rcx, qword [r15 + 0x38]
call rdi
mov qword [r15 + 8], rax
mov rdi, qword [0x18024bc08]
test rdi, rdi
jne 0x1800f7692
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x1800f7673
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1800f7673
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [rbx + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0x70e8c5ae
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800f766e
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1800f7650
cmp edx, 0xc8beddfe
je 0x1800f76d8
test r8d, r8d
jne 0x1800f7630
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1800f7689
cmp qword [rax + 0x30], 0
jne 0x1800f7600
xor edi, edi
mov qword [0x18024bc08], rdi
movdqa xmm0, xmmword [0x1802173f0]
mov ecx, 0x574
mov eax, dword [rcx + r14]
mov edx, 0x760
test al, 1
jne 0x1800f7705
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [r14 + rdx]
mov byte [rbx + 0x10], 1
lea rax, [rbx + 0xf]
lea rcx, [rsp + 0x6f]
cmp rbx, rcx
ja 0x1800f76f3
lea rcx, [rsp + 0x60]
cmp rax, rcx
jb 0x1800f76f3
movups xmmword [rbx], xmm0
jmp 0x1800f76f6
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edi, dword [rcx + rax*4]
add rdi, r9
jmp 0x1800f768b
movups xmmword [rbx], xmm0
lea rcx, [0x1801e2cc0]
call fcn.18015cf9c
nop
jmp 0x1800f7709
lea rbx, [rdx + r14]
cmp byte [rbx + 0x10], 0
je 0x1800f7752
xor byte [rbx], 0xb5
xor byte [rbx + 1], 0x17
xor byte [rbx + 2], 0xfb
xor byte [rbx + 3], 0xbf
xor byte [rbx + 4], 0xd1
xor byte [rbx + 5], 0xfb
xor byte [rbx + 6], 0xdf
xor byte [rbx + 7], 0x6b
xor byte [rbx + 8], 0xb5
xor byte [rbx + 9], 0x17
xor byte [rbx + 0xa], 0xfb
xor byte [rbx + 0xb], 0xbf
xor byte [rbx + 0xc], 0xd1
xor byte [rbx + 0xd], 0xfb
xor byte [rbx + 0xe], 0xdf
xor byte [rbx + 0xf], 0x6b
mov byte [rbx + 0x10], 0
mov rdx, rbx
mov rcx, qword [r15 + 0x38]
call rdi
mov qword [r15 + 0x10], rax
mov rdi, qword [0x18024bb80]
test rdi, rdi
jne 0x1800f7822
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x1800f7803
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1800f7803
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rbx]
add rcx, r9
mov edx, 0x67e85e08
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800f77fe
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1800f77e0
cmp edx, 0x8dc552a4
je 0x1800f7878
test r8d, r8d
jne 0x1800f77c0
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1800f7819
cmp qword [rax + 0x30], 0
jne 0x1800f7790
xor edi, edi
mov qword [0x18024bb80], rdi
movdqa xmm0, xmmword [0x1802175c0]
mov word [rsp + 0x48], 0xdb96
mov ecx, 0x610
mov eax, dword [rcx + r14]
mov edx, 0x618
test al, 1
jne 0x1800f78ae
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [r14 + rdx]
mov byte [rbx + 0x12], 1
lea rax, [rbx + 0x11]
lea rcx, [rsp + 0x49]
cmp rbx, rcx
ja 0x1800f7893
lea rcx, [rsp + 0x38]
cmp rax, rcx
jb 0x1800f7893
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x48]
mov word [rbx + 0x10], ax
jmp 0x1800f789f
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edi, dword [rcx + rax*4]
add rdi, r9
jmp 0x1800f781b
movups xmmword [rbx], xmm0
movzx eax, word [rsp + 0x48]
mov word [rbx + 0x10], ax
lea rcx, [0x1801e2c90]
call fcn.18015cf9c
nop
jmp 0x1800f78b2
lea rbx, [rdx + r14]
cmp byte [rbx + 0x12], 0
je 0x1800f7903
xor byte [rbx], 0xf3
xor byte [rbx + 1], 0xdb
xor byte [rbx + 2], 0xe1
xor byte [rbx + 3], 0x13
xor byte [rbx + 4], 0x47
xor byte [rbx + 5], 0xd5
xor byte [rbx + 6], 0x85
xor byte [rbx + 7], 0xd3
xor byte [rbx + 8], 0xf3
xor byte [rbx + 9], 0xdb
xor byte [rbx + 0xa], 0xe1
xor byte [rbx + 0xb], 0x13
xor byte [rbx + 0xc], 0x47
xor byte [rbx + 0xd], 0xd5
xor byte [rbx + 0xe], 0x85
xor byte [rbx + 0xf], 0xd3
xor byte [rbx + 0x10], 0xf3
xor byte [rbx + 0x11], 0xdb
mov byte [rbx + 0x12], 0
mov rdx, rbx
mov rcx, qword [r15 + 0x38]
call rdi
mov qword [r15 + 0x18], rax
mov rdi, qword [0x18024bbf8]
test rdi, rdi
jne 0x1800f79d6
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x1800f79b7
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1800f79b7
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rbx]
add rcx, r9
mov edx, 0xf4962db2
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800f79b2
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1800f7990
cmp edx, 0x35fbf63a
je 0x1800f7a37
test r8d, r8d
jne 0x1800f7970
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1800f79cd
cmp qword [rax + 0x30], 0
jne 0x1800f7940
xor edi, edi
mov qword [0x18024bbf8], rdi
movdqa xmm0, xmmword [0x180217500]
mov dword [rsp + 0x30], 0xd6500a94
mov dword [rsp + 0x34], 0xeb952e15
mov ecx, 0x77c
mov eax, dword [rcx + r14]
mov edx, 0x408
test al, 1
jne 0x1800f7a72
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [r14 + rdx]
mov byte [rbx + 0x18], 1
lea rax, [rbx + 0x17]
lea rcx, [rsp + 0x37]
cmp rbx, rcx
ja 0x1800f7a55
lea rcx, [rsp + 0x20]
cmp rax, rcx
jb 0x1800f7a55
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x30]
movsd qword [rbx + 0x10], xmm0
jmp 0x1800f7a63
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edi, dword [rcx + rax*4]
add rdi, r9
jmp 0x1800f79cf
movups xmmword [rbx], xmm0
movsd xmm0, qword [rsp + 0x30]
movsd qword [rbx + 0x10], xmm0
lea rcx, [0x1801e2c60]
call fcn.18015cf9c
nop
jmp 0x1800f7a76
lea rbx, [rdx + r14]
cmp byte [rbx + 0x18], 0
je 0x1800f7adf
xor byte [rbx], 0xdf
xor byte [rbx + 1], 0x6f
xor byte [rbx + 2], 0x29
xor byte [rbx + 3], 0x85
xor byte [rbx + 4], 0x79
xor byte [rbx + 5], 0x41
xor byte [rbx + 6], 0xe1
xor byte [rbx + 7], 0xeb
xor byte [rbx + 8], 0xdf
xor byte [rbx + 9], 0x6f
xor byte [rbx + 0xa], 0x29
xor byte [rbx + 0xb], 0x85
xor byte [rbx + 0xc], 0x79
xor byte [rbx + 0xd], 0x41
xor byte [rbx + 0xe], 0xe1
xor byte [rbx + 0xf], 0xeb
xor byte [rbx + 0x10], 0xdf
xor byte [rbx + 0x11], 0x6f
xor byte [rbx + 0x12], 0x29
xor byte [rbx + 0x13], 0x85
xor byte [rbx + 0x14], 0x79
xor byte [rbx + 0x15], 0x41
xor byte [rbx + 0x16], 0xe1
xor byte [rbx + 0x17], 0xeb
mov byte [rbx + 0x18], 0
mov rdx, rbx
mov rcx, qword [r15 + 0x38]
call rdi
mov qword [r15 + 0x20], rax
mov rdi, qword [0x18024bc28]
test rdi, rdi
jne 0x1800f7bb2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x1800f7b93
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1800f7b93
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rbx]
add rcx, r9
mov edx, 0xeaa1b05f
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800f7b8e
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1800f7b70
cmp edx, 0x8161c1ab
je 0x1800f7bfc
test r8d, r8d
jne 0x1800f7b50
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1800f7ba9
cmp qword [rax + 0x30], 0
jne 0x1800f7b20
xor edi, edi
mov qword [0x18024bc28], rdi
mov ecx, 0x740
mov eax, dword [rcx + r14]
mov edx, 0x748
test al, 1
jne 0x1800f7c17
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [r14 + rdx]
mov word [rbx + 0xd], 0x101
mov dword [rbx], 0x22144c7d
mov dword [rbx + 4], 0xa2f47da
mov dword [rbx + 8], 0x7c495448
mov byte [rbx + 0xc], 0xf1
lea rcx, [0x1801e2c30]
call fcn.18015cf9c
nop
jmp 0x1800f7c1b
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edi, dword [rcx + rax*4]
add rdi, r9
jmp 0x1800f7bab
lea rbx, [rdx + r14]
cmp byte [rbx + 0xe], 0
je 0x1800f7c5c
xor byte [rbx], 0x2d
xor byte [rbx + 1], 7
xor byte [rbx + 2], 0x25
xor byte [rbx + 3], 0x13
xor byte [rbx + 4], 0x85
xor byte [rbx + 5], 1
xor byte [rbx + 6], 0x5d
xor byte [rbx + 7], 0x6f
xor byte [rbx + 8], 0x2d
xor byte [rbx + 9], 7
xor byte [rbx + 0xa], 0x25
xor byte [rbx + 0xb], 0x13
xor byte [rbx + 0xc], 0x85
xor byte [rbx + 0xd], 1
mov byte [rbx + 0xe], 0
mov rdx, rbx
mov rcx, qword [r15 + 0x38]
call rdi
mov qword [r15 + 0x28], rax
mov rdi, qword [0x18024bc10]
test rdi, rdi
jne 0x1800f7d22
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov rdi, rsi
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x1800f7d03
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x1800f7d03
mov ebx, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
lea rax, [rbx + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0xd62f34c5
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800f7cfe
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x1800f7ce0
cmp edx, 0xf0371625
je 0x1800f7d68
test r8d, r8d
jne 0x1800f7cc0
mov rax, qword [rdi]
mov rdi, rax
cmp rax, rsi
je 0x1800f7d19
cmp qword [rax + 0x30], 0
jne 0x1800f7c90
xor edi, edi
mov qword [0x18024bc10], rdi
mov ecx, 0x650
mov eax, dword [rcx + r14]
mov edx, 0x5a0
test al, 1
jne 0x1800f7d83
or eax, 1
mov dword [rcx + r14], eax
lea rbx, [r14 + rdx]
mov dword [rbx + 0xa], 0x15dbb46
mov dword [rbx], 0x8a626625
mov dword [rbx + 4], 0x2f9ce10e
mov word [rbx + 8], 0x5a0f
lea rcx, [0x1801e2c00]
call fcn.18015cf9c
nop
jmp 0x1800f7d87
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edi, dword [rcx + rax*4]
add rdi, r9
jmp 0x1800f7d1b
lea rbx, [rdx + r14]
cmp byte [rbx + 0xd], 0
je 0x1800f7dc4
xor byte [rbx], 0x6b
xor byte [rbx + 1], 0x35
xor byte [rbx + 2], 0x31
xor byte [rbx + 3], 0xd5
xor byte [rbx + 4], 0x5d
xor byte [rbx + 5], 0x89
xor byte [rbx + 6], 0xe9
xor byte [rbx + 7], 0x5b
xor byte [rbx + 8], 0x6b
xor byte [rbx + 9], 0x35
xor byte [rbx + 0xa], 0x31
xor byte [rbx + 0xb], 0xd5
xor byte [rbx + 0xc], 0x5d
mov byte [rbx + 0xd], 0
mov rdx, rbx
mov rcx, qword [r15 + 0x38]
call rdi
mov qword [r15 + 0x30], rax
xor eax, eax
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.18015c7e0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret