Function at 0x180071ef0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
sub rsp, 0x58
call fcn.18002e130
test al, al
jne 0x180071f23
lea rdx, str.failed_to_init_bypass_n
lea rcx, [0x1802ecc10]
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081550
xor al, al
add rsp, 0x58
ret
mov rax, qword [0x1802eabc8]
lea rdx, [0x1800824e0]
xor r8d, r8d
lea rcx, [rax + 0x1078ab]
add rax, 0x1078b9
mov qword [0x1802ebcf8], rax
call fcn.18002e390
test al, al
jne 0x180071f70
lea rdx, str.midhook_failed_n
lea rcx, [0x1802ecc10]
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081550
mov rcx, qword [0x1802eabc8]
lea r8, [0x1802ebd08]
add rcx, 0xd03fc0
lea rdx, [0x1800715d0]
call fcn.18002ddb0
mov rax, qword [0x1802eac00]
lea r8, [0x1802ebd30]
lea rdx, [0x1800723b0]
mov rcx, qword [rax]
mov rcx, qword [rcx + 0x20]
call fcn.18002ddb0
mov rcx, qword [0x1802eabc8]
lea r8, [0x1802ebd40]
add rcx, 0x50ad20
lea rdx, [0x180071a00]
call fcn.18002ddb0
mov rcx, qword [0x1802eabb8]
lea r8, [0x1802ebd48]
add rcx, 0xe5030
lea rdx, [0x180071dd0]
call fcn.18002ddb0
mov rcx, qword [0x1802eabe0]
lea r8, [0x1802ebd50]
add rcx, 0x38b00
lea rdx, [0x180071d40]
call fcn.18002ddb0
mov rax, qword [0x1802eab00]
lea r8, [0x1802ebd58]
lea rdx, [0x1800718b0]
mov rcx, qword [rax]
mov rcx, qword [rcx + 0x70]
call fcn.18002ddb0
mov rax, qword [0x1802eab00]
lea r8, [0x1802ebd60]
lea rdx, [0x180071bb0]
mov rcx, qword [rax]
mov rcx, qword [rcx + 0x78]
call fcn.18002ddb0
call fcn.180059f50
call fcn.18005fe70
mov ecx, 0x70
call fcn.180042b80
test rax, rax
je 0x18007207f
mov rdx, qword [0x1802eab90]
mov rcx, rax
call fcn.1800703b0
mov qword [0x1802ebcf0], rax
call fcn.18002e620
lea rcx, [0x1802ecc10]
test al, al
jne 0x180072334
lea rdx, str.FAILED_TO_VERIFY_SECTION_CRC_n
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081550
call fcn.180081bc0
mov rdx, qword [0x1802ebe48]
test rdx, rdx
jne 0x180072329
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x70], rbp
xor ebp, ebp
mov qword [rsp + 0x50], rsi
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r14
mov r14d, 0x52a4cf3a
mov qword [rsp + 0x30], r15
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov r15, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [r15 + 0x58]
movd eax, xmm0
movups xmmword [rsp + 0x20], xmm0
sub ax, 8
test ebp, ebp
je 0x18007216e
mov r8, qword [rsp + 0x28]
mov r9d, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r10, [r8 + rax*2]
cmp r8, r10
je 0x180072165
movsx eax, byte [r8]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
add r8, 2
xor edx, r9d
imul r9d, edx, 0x1000193
cmp r8, r10
jne 0x180072140
cmp r9d, ebp
jne 0x1800721f6
mov rbx, qword [r15 + 0x30]
movsxd rax, dword [rbx + 0x3c]
mov rcx, qword [rax + rbx + 0x88]
mov r12, rcx
mov esi, ecx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x1800721f6
mov edi, dword [rsi + 0x18]
xor r11d, r11d
test edi, edi
je 0x1800721f6
mov r10d, dword [rsi + 0x20]
add r10, rbx
mov r8d, dword [r10]
mov r9d, 0x811c9dc5
add r8, rbx
movzx eax, byte [r8]
test al, al
je 0x1800721e5
nop dword [rax]
nop dword [rax + rax]
movsx ecx, al
lea r8, [r8 + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [r8]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test al, al
jne 0x1800721c0
cmp r9d, r14d
je 0x1800721fe
inc r11d
add r10, 4
cmp r11d, edi
jb 0x1800721a0
mov r15, qword [r15]
jmp 0x180072110
mov eax, dword [rsi + 0x24]
mov ecx, dword [rsi + 0x1c]
add rax, rbx
add rcx, rbx
movzx edx, word [rax + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rbx
cmp rdx, rsi
jbe 0x1800722ce
lea rax, [r12 + rsi]
cmp rdx, rax
jae 0x1800722ce
movzx r8d, byte [rdx]
mov ebp, 0x811c9dc5
mov dword [rsp + 0x60], ebp
mov r9d, ebp
mov dword [rsp + 0x64], ebp
cmp r8b, 0x2e
je 0x18007227e
nop word [rax + rax]
movsx eax, r8b
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rdx + 1]
cmova ecx, eax
inc rdx
xor ecx, ebp
imul ebp, ecx, 0x1000193
cmp r8b, 0x2e
jne 0x180072250
mov dword [rsp + 0x60], ebp
movzx r8d, byte [rdx + 1]
inc rdx
test r8b, r8b
je 0x1800722c0
nop dword [rax + rax]
movsx eax, r8b
lea rdx, [rdx + 1]
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rdx]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test r8b, r8b
jne 0x180072290
mov dword [rsp + 0x64], r9d
mov r14, qword [rsp + 0x60]
shr r14, 0x20
jmp 0x1800720f2
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x38]
mov r12, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x70]
mov rbx, qword [rsp + 0x68]
mov qword [0x1802ebe48], rdx
test rdx, rdx
jne 0x180072329
mov r8d, 0x52a4cf3a
lea rdx, str.tried_to_resolve_invalid_import_0x_X_n
lea rcx, [0x1802ecc10]
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081550
mov rdx, qword [0x1802ebe48]
xor ecx, ecx
call rdx
xor al, al
add rsp, 0x58
ret
lea rdx, str.Bypass_working_as_expected_:__all_CRC_spoofed_correctly_n
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081550
mov al, 1
add rsp, 0x58
ret