Function at 0x18005fd30
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xf0
lea rbp, [rsp + 0x40]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x180140080]
xor rax, rsp
mov qword [rbp + 0xa0], rax
xor eax, eax
xorps xmm0, xmm0
mov qword [rbp + 0x90], rax
movabs r9, 0x592d2589283aad72
movups xmmword [rbp + 0x80], xmm0
movabs rax, 0xcbf90561d504f7d8
movabs r8, 0xa68c690e8370929f
mov qword [rbp], rax
movabs rdx, 0x14568eb787ca9ef8
mov rax, qword [rbp]
movabs rcx, 0x3556142872c1aba9
mov qword [rbp + 0x40], rax
movabs rax, 0x753bfcd8e1a4d79d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x48], rax
movabs rax, 0x355614691caec2dd
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x50], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x58], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
movabs rax, 0xa6e2697c831592f4
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x40]
vmovdqa ymmword [rbp + 0x40], ymm1
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x20], rax
movabs rax, 0x14648e8487a69e9d
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x28], rax
movabs rax, 0x353a144472a5ab87
mov qword [rbp], rax
mov rax, qword [rbp]
mov qword [rbp + 0x30], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x38], rax
mov qword [rbp], r8
mov rax, qword [rbp]
mov qword [rbp + 0x80], rax
mov qword [rbp], rdx
mov rax, qword [rbp]
mov qword [rbp + 0x88], rax
mov qword [rbp], rcx
mov rax, qword [rbp]
mov qword [rbp + 0x90], rax
mov qword [rbp], r9
mov rax, qword [rbp]
mov qword [rbp + 0x98], rax
vmovdqu ymm0, ymmword [rbp + 0x80]
vpxor ymm1, ymm0, ymmword [rbp + 0x20]
vmovdqu ymmword [rbp + 0x20], ymm1
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
vzeroupper
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x18005ff67
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x18005ff67
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x6ee4bd49
lea rcx, [rbx + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x18005ff62
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x18005ff40
cmp r8d, 0x157cd01a
je 0x18005ff6c
test r9d, r9d
jne 0x18005ff20
mov rax, qword [rax]
jmp 0x18005fef0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp + 0x20]
add rax, r10
call rax
mov rcx, qword gs:[0x60]
mov rsi, rax
mov rcx, qword [rcx + 0x18]
mov rcx, qword [rcx + 0x10]
nop dword [rax]
mov r10, qword [rcx + 0x30]
movsxd rdx, dword [r10 + 0x3c]
mov edi, dword [rdx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x180060017
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x180060017
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x6be4b890
lea rax, [rbx + r9*4]
mov edx, dword [rax + r10]
add rdx, r10
movzx eax, byte [rdx]
inc rdx
test al, al
je 0x180060012
nop
movsx eax, al
lea rdx, [rdx + 1]
xor eax, r8d
imul r8d, eax, 0x1000193
movzx eax, byte [rdx - 1]
test al, al
jne 0x18005fff0
cmp r8d, 0xabafbbfc
je 0x18006001c
test r9d, r9d
jne 0x18005ffd0
mov rcx, qword [rcx]
jmp 0x18005ffa0
mov ecx, dword [rdi + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rdx, [rbp + 0x40]
add rax, r10
mov rcx, rsi
call rax
mov ecx, 8
mov rbx, rax
call fcn.180100f70
mov r15, rax
mov qword [rbp + 0x18], rax
mov rsi, rax
lea r14, [rax + 8]
mov qword [rax], rbx
mov qword [rbp], r14
cmp rax, r14
je 0x18006015a
movabs r12, 0x4e94914f0000
movabs r13, 0x431bde82d7b634db
nop dword [rax + rax]
mov rdi, qword [rsi]
test rdi, rdi
je 0x18006014d
movzx eax, byte [rdi]
cmp al, 0x90
jne 0x180060145
movabs r15, 0x7fffffffffffffff
movabs r14, 0x7ffffffffa0a1eff
nop dword [rax + rax]
lea rcx, [rbp + 0x10]
lea rdi, [rdi + 1]
call fcn.18005dd30
mov rbx, qword [rbp + 0x10]
cmp rbx, r14
jge 0x1800600cf
add rbx, 0x5f5e100
jmp 0x1800600d2
mov rbx, r15
lea rcx, [rbp + 8]
call fcn.18005dd30
mov rax, qword [rbp + 8]
cmp rax, rbx
jge 0x180060132
mov rcx, rbx
sub rcx, rax
cmp rcx, r12
jl 0x1800600f6
mov ecx, 0x5265c00
jmp 0x18006011b
mov rax, r13
imul rcx
sar rdx, 0x12
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0xf4240
cmp rax, rcx
jge 0x180060119
inc rdx
mov ecx, edx
call sub.KERNEL32.dll_Sleep
lea rcx, [rbp + 8]
call fcn.18005dd30
mov rax, qword [rbp + 8]
cmp rax, rbx
jl 0x1800600e4
movzx eax, byte [rdi]
cmp al, 0x90
je 0x1800600b0
mov r14, qword [rbp]
mov r15, qword [rbp + 0x18]
cmp al, 0xe9
je 0x1800601c7
cmp al, 0xc3
je 0x1800601c7
add rsi, 8
cmp rsi, r14
jne 0x180060080
xor bl, bl
test r15, r15
je 0x180060194
sub r14, r15
and r14, 0xfffffffffffffff8
cmp r14, 0x1000
jb 0x180060189
mov rcx, qword [r15 - 8]
add r14, 0x27
sub r15, rcx
lea rax, [r15 - 8]
cmp rax, 0x1f
ja 0x1800601cb
mov r15, rcx
mov rdx, r14
mov rcx, r15
call fcn.18010107c
movzx eax, bl
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.180100f50
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov bl, 1
jmp 0x18006015c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3