Function at 0x180030dd0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbx
sub rsp, 0x30
call fcn.18000cfd0
mov rbx, rax
test byte [rax], 0x20
je 0x180030deb
xor al, al
add rsp, 0x30
pop rbx
ret
mov qword [rsp + 0x48], rsi
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x20], r15
call fcn.18000d250
cmp eax, 0xffffffff
je 0x180031055
cmp byte [rbx + 0x70], 0
jne 0x180031055
mov qword [rsp + 0x28], r14
mov r14d, 0x7f00
cmp eax, 8
ja case.0x180030e35.0
lea rdx, [0x180000000]
cdqe
mov ecx, dword [rdx + rax*4 + 0x3114c]
add rcx, rdx
jmp rcx
mov r14d, 0x7f01
jmp case.0x180030e35.0
mov r14d, 0x7f86
jmp case.0x180030e35.0
mov r14d, 0x7f84
jmp case.0x180030e35.0
mov r14d, 0x7f85
jmp case.0x180030e35.0
mov r14d, 0x7f83
jmp case.0x180030e35.0
mov r14d, 0x7f82
jmp case.0x180030e35.0
mov r14d, 0x7f89
jmp case.0x180030e35.0
mov r14d, 0x7f88
mov rsi, qword [0x180393930]
xor r15d, r15d
test rsi, rsi
jne 0x180030f37
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180030f18
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x180030f18
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0x31c62b83
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180030f13
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180030ef0
cmp edx, 0xac63136b
je 0x18003101e
test r8d, r8d
jne 0x180030ed0
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x180030f2d
cmp qword [rax + 0x30], r15
jne 0x180030ea0
mov rsi, r15
mov qword [0x180393930], rsi
mov rax, qword [0x180393928]
test rax, rax
jne 0x180031008
mov rax, qword gs:[0x60]
mov qword [rsp + 0x40], rbp
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rbp, qword [rax]
mov rbx, rbp
nop dword [rax]
nop word [rax + rax]
mov r9, qword [rbx + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov r11d, dword [rax + r9 + 0x88]
add r11, r9
cmp r11, r9
je 0x180030fe4
mov r8d, dword [r11 + 0x18]
test r8d, r8d
je 0x180030fe4
mov edi, dword [r11 + 0x20]
nop word [rax + rax]
dec r8d
mov edx, 0x32c62d16
lea rax, [r9 + r8*4]
mov ecx, dword [rax + rdi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180030fdf
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180030fc0
cmp edx, 0x3c2dc6df
je 0x18003103a
test r8d, r8d
jne 0x180030fa0
mov rax, qword [rbx]
mov rbx, rax
cmp rax, rbp
je 0x180030ff9
cmp qword [rax + 0x30], r15
jne 0x180030f70
mov rax, r15
mov rbp, qword [rsp + 0x40]
mov qword [0x180393928], rax
mov rdx, r14
xor ecx, ecx
call rax
mov rcx, rax
call rsi
mov r14, qword [rsp + 0x28]
jmp 0x180031119
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov esi, dword [rcx + rdx*4]
add rsi, r9
jmp 0x180030f30
mov ecx, dword [r11 + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [r11 + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
jmp 0x180030ffc
mov r15, qword [0x180393938]
test r15, r15
jne 0x180031114
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov rsi, qword [rax]
mov r11, rsi
nop dword [rax]
mov r9, qword [r11 + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1800310f4
mov r8d, dword [rbx + 0x18]
test r8d, r8d
je 0x1800310f4
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r8d
mov edx, 0xe9ad6f18
lea rax, [rdi + r8*4]
mov eax, dword [rax + r9]
add rax, r9
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x1800310ef
nop dword [rax]
movsx ecx, cl
lea rax, [rax + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax - 1]
test cl, cl
jne 0x1800310d0
cmp edx, 0xdd0c124a
je 0x180031130
test r8d, r8d
jne 0x1800310b0
mov rax, qword [r11]
mov r11, rax
cmp rax, rsi
je 0x18003110a
cmp qword [rax + 0x30], 0
jne 0x180031080
xor r15d, r15d
mov qword [0x180393938], r15
xor ecx, ecx
call r15
mov r15, qword [rsp + 0x20]
mov al, 1
mov rdi, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x48]
add rsp, 0x30
pop rbx
ret
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov r15d, dword [rcx + rdx*4]
add r15, r9
jmp 0x18003110d