Function at 0x1800065ec
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x220
mov rax, qword [0x180100010]
xor rax, rsp
mov qword [rbp + 0x110], rax
xor r12d, r12d
cmp byte [0x180101244], r12b
je 0x180006b21
mov rax, qword [0x180101290]
mov rcx, qword [rax]
test rcx, rcx
je 0x180006b21
mov rdi, qword [rcx + 8]
test rdi, rdi
je 0x180006b21
mov rdi, qword [rdi + 0xd30]
test rdi, rdi
je 0x180006b21
cmp byte [0x180101251], r12b
jne 0x180006b21
mov r15d, 0x1e0
lea rcx, [rsp + 0x30]
mov r8d, r15d
xor edx, edx
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x10]
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x10]
lea rax, [rbp + 0x10]
mov dword [rsp + 0x48], r12d
mov r13d, 0x100
mov qword [rsp + 0x30], rax
mov r8d, r13d
xor edx, edx
call sub.VCRUNTIME140.dll_memset
movabs rbx, 0xd80958fc74e988a6
lea rcx, [rsp + 0x30]
mov rdx, rbx
call fcn.180002034
mov r14d, dword [rbp + 0x10]
movabs rcx, 0x814fa8be5449445d
mov edx, r14d
call fcn.180008780
mov r8d, r15d
lea rcx, [rsp + 0x30]
xor edx, edx
mov esi, eax
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x10]
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x10]
lea rax, [rbp + 0x10]
mov dword [rsp + 0x48], r12d
mov r8d, r13d
mov qword [rsp + 0x30], rax
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.180002034
mov edx, dword [rbp + 0x10]
lea r13d, [r12 + 1]
mov r8d, r13d
movabs rcx, 0x9a9112a0fe9a4713
call fcn.18000860c
cmp byte [0x18010122c], r12b
mov ebx, eax
je 0x180006763
mov r8d, r13d
mov edx, esi
movabs rcx, 0xb664292eaecf7fa6
call fcn.18000883c
cmp byte [0x18010123c], r12b
je 0x180006783
mov r9d, r13d
mov r8d, r13d
mov edx, ebx
movabs rcx, 0x2497c4717c8b881e
call fcn.180008918
cmp byte [0x180101238], r12b
je 0x1800067a5
or r9d, 0xffffffff
mov r8d, esi
mov edx, r14d
movabs rcx, 0xf75b0d629e1c063d
call fcn.180008a24
cmp byte [0x180101239], r12b
je 0x1800068af
mov r8d, r13d
mov edx, ebx
movabs rcx, 0x3882114bde571ad4
call fcn.18000883c
mov r8, r15
lea rcx, [rsp + 0x30]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x10]
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x10]
lea rax, [rbp + 0x10]
mov dword [rsp + 0x48], r12d
xor edx, edx
mov qword [rsp + 0x30], rax
mov r8d, 0x100
call sub.VCRUNTIME140.dll_memset
mov eax, dword [rsp + 0x38]
mov ecx, 8
mov qword [rbp + rax*8 + 0x10], r12
mov eax, dword [rsp + 0x38]
mov dword [rbp + rax*8 + 0x10], ebx
mov eax, dword [rsp + 0x38]
add eax, r13d
mov dword [rsp + 0x38], eax
mov qword [rbp + rax*8 + 0x10], r12
mov eax, dword [rsp + 0x38]
mov dword [rbp + rax*8 + 0x10], r13d
sub rcx, r13
jne 0x180006818
add dword [rsp + 0x38], r13d
lea rcx, [rsp + 0x30]
movabs rdx, 0xfaee099c6f890bb8
call fcn.180002034
movabs rsi, 0xeb9dc3c7d8596c46
xor r8d, r8d
mov rcx, rsi
mov edx, ebx
call fcn.18000883c
xor r8d, r8d
mov edx, ebx
movabs rcx, 0x29b18b4fd460ca8f
call fcn.18000883c
xor r8d, r8d
mov edx, ebx
movabs rcx, 0x4c7028f78ffd3681
call fcn.18000883c
xor r8d, r8d
mov edx, ebx
mov rcx, rsi
call fcn.18000883c
mov r8d, r13d
mov edx, ebx
movabs rcx, 0x92f0cf722bc4202f
call fcn.18000883c
xor r8d, r8d
mov edx, r14d
movabs rcx, 0x997abd671d25ca0b
call fcn.18000860c
test eax, eax
je 0x180006b1a
cmp byte [0x18010122d], r12b
mov byte [0x18010123a], r13b
je 0x180006908
mov edx, ebx
movabs rcx, 0x953da1e1b12c0491
call fcn.180008554
mov dword [rdi + 0x908], 0x447a0000
mov dword [rdi + 0x840], 0x447a0000
mov byte [0x18010122d], r12b
cmp byte [0x18010123b], r12b
je 0x180006937
mov r9d, dword [0x180101224]
mov edx, ebx
mov r8d, dword [0x180101240]
movabs rcx, 0x6af0636ddedcb6dd
call fcn.180008918
mov byte [0x18010123b], r12b
cmp byte [0x18010123d], r12b
je 0x18000695c
mov rax, qword [rdi + 0x938]
test rax, rax
je 0x18000695c
movd xmm0, dword [0x18010124c]
cvtdq2ps xmm0, xmm0
movss dword [rax + 0x4c], xmm0
cmp byte [0x180101222], r12b
je 0x180006a39
mov rax, qword [0x1801011e0]
test rax, rax
jne 0x180006a18
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r10, rsi
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x1800069f7
mov edx, dword [r9 + 0x18]
test edx, edx
je 0x1800069f7
mov r15d, dword [r9 + 0x20]
dec edx
mov r11d, 0x811c9dc5
lea rax, [r15 + rdx*4]
mov ecx, dword [rax + r8]
add rcx, r8
mov al, byte [rcx]
add rcx, r13
test al, al
je 0x1800069f3
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rcx]
add rcx, r13
test al, al
jne 0x1800069d0
cmp r11d, 0x95466b05
je 0x180006afd
test edx, edx
jne 0x1800069b4
mov rax, qword [r10]
mov r10, rax
cmp rax, rsi
je 0x180006a08
cmp qword [rax + 0x30], r12
jne 0x180006990
mov rax, r12
mov qword [0x1801011e0], rax
mov r15d, 0x1e0
mov ecx, 0x10
call rax
bt ax, 0xf
jae 0x180006a39
mov rax, qword [rdi + 0x938]
test rax, rax
je 0x180006a39
mov dword [rax + 0x4c], 0x447a0000
cmp byte [0x180101245], r12b
je 0x180006a68
mov r9d, dword [0x180101228]
mov edx, ebx
mov r8d, dword [0x180101248]
movabs rcx, 0x4f1d4be3a7f24601
call fcn.180008a24
mov byte [0x180101245], r12b
cmp byte [0x180101250], r12b
je 0x180006b21
mov r8, r15
lea rcx, [rsp + 0x30]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
lea rax, [rbp + 0x10]
mov dword [rsp + 0x38], r12d
mov qword [rsp + 0x40], rax
lea rcx, [rbp + 0x10]
lea rax, [rbp + 0x10]
mov dword [rsp + 0x48], r12d
xor edx, edx
mov qword [rsp + 0x30], rax
mov r8d, 0x100
call sub.VCRUNTIME140.dll_memset
mov eax, dword [rsp + 0x38]
movabs rdx, 0x95a88f0b409cda47
mov qword [rbp + rax*8 + 0x10], r12
mov eax, dword [rsp + 0x38]
mov dword [rbp + rax*8 + 0x10], ebx
mov eax, dword [rsp + 0x38]
add eax, r13d
mov ecx, eax
mov dword [rsp + 0x38], eax
lea rax, [0x180101230]
mov qword [rbp + rcx*8 + 0x10], rax
lea rcx, [rsp + 0x30]
add dword [rsp + 0x38], r13d
call fcn.180002034
mov byte [0x180101250], r12b
jmp 0x180006b21
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rdx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
jmp 0x180006a0b
mov byte [0x18010123a], r12b
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.180046e90
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret