Function at 0x140183630
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
lea rbp, [rsp - 0x47]
sub rsp, 0x90
xor esi, esi
mov dword [rbp - 0x29], 0x75006e
mov ecx, esi
mov dword [rbp - 0x25], 0x6f0066
mov dword [rbp - 0x21], 0x2b0068
mov dword [rbp - 0x1d], 0x6b0062
mov dword [rbp - 0x19], 0x64
movsxd rax, ecx
xor word [rbp + rax*2 - 0x29], cx
inc ecx
cmp ecx, 9
jb 0x14018366b
mov word [rbp - 0x17], si
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x1401836f5
mov r9d, dword [r10 + 0x18]
test r9d, r9d
je 0x1401836f5
mov ebx, dword [r10 + 0x20]
dec r9d
mov r11d, 0x5d5728a5
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r8]
add rdx, r8
mov cl, byte [rdx]
inc rdx
test cl, cl
je 0x1401836f0
movsx ecx, cl
xor ecx, r11d
imul r11d, ecx, 0x1000193
mov cl, byte [rdx]
inc rdx
test cl, cl
jne 0x1401836d1
cmp r11d, 0x9bf730d9
je 0x1401836fa
test r9d, r9d
jne 0x1401836b4
mov rax, qword [rax]
jmp 0x14018368f
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r9*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0x29]
add rax, r8
call qword [case.0x140173169.0]
mov rbx, rax
mov edi, 0x10
test rax, rax
jne 0x140183791
mov dword [rbp + 0x67], 0x6c707345
mov ecx, esi
mov word [rbp + 0x6b], 0x76
movsxd rax, ecx
xor byte [rbp + rax + 0x67], cl
inc ecx
cmp ecx, 5
jb 0x140183739
movdqa xmm0, xmmword [0x1404d0560]
mov ecx, esi
movdqu xmmword [rbp - 0x15], xmm0
mov byte [rbp + 0x6c], sil
mov word [rbp - 5], 0x3e
movsxd rax, ecx
xor byte [rbp + rax - 0x15], cl
inc ecx
cmp ecx, 0x11
jb 0x140183760
mov r9d, edi
mov byte [rbp - 4], sil
lea r8, [rbp + 0x67]
xor ecx, ecx
lea rdx, [rbp - 0x15]
call qword [sym.imp.user32.dll_MessageBoxA]
xor edx, edx
or rcx, 0xffffffffffffffff
call qword [sym.imp.kernel32.dll_TerminateProcess]
movdqa xmm0, xmmword [0x1404cfa40]
mov ecx, esi
movdqa xmm1, xmmword [0x1404d0080]
movdqu xmmword [rbp + 0xf], xmm0
mov dword [rbp + 0x3f], 0x56465f45
movdqa xmm0, xmmword [0x1404cf630]
movdqu xmmword [rbp + 0x2f], xmm0
mov word [rbp + 0x43], 0x46
movdqu xmmword [rbp + 0x1f], xmm1
movsxd rax, ecx
xor byte [rbp + rax + 0xf], cl
inc ecx
cmp ecx, 0x35
jb 0x1401837c7
lea rdx, [rbp + 0xf]
mov byte [rbp + 0x44], sil
mov rcx, rbx
call qword [sym.imp.kernel32.dll_GetProcAddress]
mov qword [0x140548a28], rax
test rax, rax
jne 0x140183859
mov dword [rbp + 0x6f], 0x6c707345
mov ecx, esi
mov word [rbp + 0x73], 0x76
movsxd rax, ecx
xor byte [rbp + rax + 0x6f], cl
inc ecx
cmp ecx, 5
jb 0x140183801
movdqa xmm0, xmmword [0x1404d0560]
mov edx, esi
movdqu xmmword [rbp - 3], xmm0
mov byte [rbp + 0x74], sil
mov word [rbp + 0xd], 0x3e
movsxd rax, edx
xor byte [rbp + rax - 3], dl
inc edx
cmp edx, 0x11
jb 0x140183828
mov r9d, edi
mov byte [rbp + 0xe], sil
lea r8, [rbp + 0x6f]
xor ecx, ecx
lea rdx, [rbp - 3]
call qword [sym.imp.user32.dll_MessageBoxA]
xor edx, edx
or rcx, 0xffffffffffffffff
call qword [sym.imp.kernel32.dll_TerminateProcess]
mov rbx, qword [rsp + 0xc0]
add rsp, 0x90
pop rdi
pop rsi
pop rbp
ret