Function at 0x18001e8b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push r12
lea rbp, [rax - 0x5f]
sub rsp, 0xe8
mov qword [rax + 8], rbx
lea rcx, [rbp - 0x79]
mov qword [rax + 0x10], rsi
movabs rbx, 0x7fc523b739a1fe0
mov qword [rax + 0x18], rdi
movabs rsi, 0xd6fbacda51d5e7c7
mov qword [rax - 0x18], r13
mov rdi, rdx
mov qword [rax - 0x20], r14
lea rdx, [rbp - 0x69]
mov qword [rax - 0x28], r15
movabs rax, 0xd6fbc1bf25a69e94
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x69], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x61], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x79], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x69]
mov qword [rbp - 0x71], rax
movabs rax, 0xd6fbacda34a19e85
xorps xmm0, xmmword [rbp - 0x79]
movdqa xmmword [rbp - 0x69], xmm0
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x79], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x71], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x19], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x79]
mov qword [rbp - 0x11], rax
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x79], xmm0
movsxd r13, r8d
call fcn.18000eaf0
mov rcx, qword [0x1800ebc60]
mov qword [rbp + 0x7f], rax
test rcx, rcx
jne 0x18001ea73
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r12, qword [rcx]
mov r15, r12
nop dword [rax + rax]
mov r11, qword [r15 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov r14d, dword [rax + r11 + 0x88]
add r14, r11
cmp r14, r11
je 0x18001ea4a
mov r10d, dword [r14 + 0x18]
test r10d, r10d
je 0x18001ea4a
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0x2fdd3cf2
lea rax, [rsi + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x18001ea45
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x18001ea10
cmp r9d, 0x1078261f
je 0x18001ed71
test r10d, r10d
jne 0x18001e9f0
mov rax, qword [r15]
mov r15, rax
cmp rax, r12
je 0x18001ea60
cmp qword [rax + 0x30], 0
jne 0x18001e9c0
xor ecx, ecx
mov qword [0x1800ebc60], rcx
movabs rsi, 0xd6fbacda51d5e7c7
mov qword gs:[0x130], rcx
mov edx, r13d
mov rax, qword [0x1800c4210]
mov rcx, qword [rbp + 0x7f]
mov qword gs:[0x128], rax
call fcn.1800c2440
mov rdx, r13
mov r12, rax
mov r13, qword [rsp + 0xe0]
test rdx, rdx
jle 0x18001ead2
mov r8, rax
sub r8, rdi
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rdi]
mov byte [r8 + rdi + 0x20], cl
lea rdi, [rdi + 1]
sub rdx, 1
jne 0x18001eac0
movabs rax, 0xb195e9a325bc8992
movabs rdx, 0xc2d0290aac42f2d
mov qword [rbp + 0x7f], rax
movabs rcx, 0x8081cfe13a527a5e
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x59], rax
movabs rax, 0x628f217a5dff7189
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x51], rax
movabs rax, 0x1e6522f069256a4d
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x49], rax
movabs rax, 0x89e454b17c389fb0
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x41], rax
movabs rax, 0x304d11b9f9507a06
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x39], rax
movabs rax, 0xcbfb246537b5c2cd
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x31], rax
mov qword [rbp + 0x7f], rdx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x29], rax
mov qword [rbp + 0x7f], rcx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x21], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x7f], rbx
mov qword [rbp - 9], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 1], rax
movabs rax, 0x24004e9407502839
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 7], rax
movabs rax, 0xe69612d51d57d38a
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0xf], rax
movabs rax, 0x6f3463d69435376b
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x17], rax
movabs rax, 0xa79a4a1752c1ac84
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x7f], rdx
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x27], rax
mov qword [rbp + 0x7f], rcx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x59]
xorps xmm0, xmmword [rbp - 9]
movdqa xmm1, xmmword [rbp - 0x49]
xorps xmm1, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x59], xmm0
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x49], xmm1
movdqa xmm1, xmmword [rbp - 0x29]
mov qword [rbp + 0x2f], rax
mov rax, qword [0x1800ebc30]
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 0x39], xmm0
movdqa xmmword [rbp - 0x29], xmm1
test rax, rax
jne 0x18001ed17
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov r14, r15
nop dword [rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x18001ecf8
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x18001ecf8
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
mov r9d, 0xd58a1b50
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
movzx eax, byte [r8]
inc r8
test al, al
je 0x18001ecf3
nop
movsx ecx, al
lea r8, [r8 + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [r8 - 1]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test al, al
jne 0x18001ecc0
cmp r9d, 0xac5de09d
je 0x18001ed8f
test r10d, r10d
jne 0x18001eca0
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x18001ed0e
cmp qword [rax + 0x30], 0
jne 0x18001ec70
xor eax, eax
mov qword [0x1800ebc30], rax
mov qword gs:[0x130], rax
lea rcx, [rbp - 0x59]
mov rax, qword [0x1800c4210]
mov qword gs:[0x128], rax
call fcn.1800c2440
mov r15, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x108]
mov rbx, qword [rsp + 0x100]
test rax, rax
jne 0x18001edab
add rsp, 0xe8
pop r12
pop rbp
ret
mov ecx, dword [r14 + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [r14 + 0x1c]
add rcx, r11
mov ecx, dword [rcx + rdx*4]
add rcx, r11
jmp 0x18001ea62
mov ecx, dword [rsi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x18001ed10
xor edx, edx
mov rcx, r12
call rax
add rsp, 0xe8
pop r12
pop rbp
ret