Function at 0x18006dcc4
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov rax, qword [0x18008b038]
test rax, rax
jne 0x18006dd93
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18006dd6e
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x18006dd6e
mov r14d, dword [r10 + 0x20]
dec r11d
mov edi, 0xe511276a
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + r8]
add r9, r8
mov bl, byte [r9]
inc r9
test bl, bl
je 0x18006dd69
movsx ecx, bl
sub bl, 0x41
mov edx, ecx
or edx, 0x20
cmp bl, 0x19
mov bl, byte [r9]
cmova edx, ecx
inc r9
xor edx, edi
imul edi, edx, 0x1000193
test bl, bl
jne 0x18006dd3e
cmp edi, 0xac748557
je 0x18006dd73
test r11d, r11d
jne 0x18006dd21
mov rax, qword [rax]
jmp 0x18006dcfc
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r11*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x18008b038], rax
movabs rdx, 0xe9a11b7f434353e8
movabs rcx, 0x7f77a3180367d740
mov qword [rbp - 0x59], rcx
movabs r15, 0x69e9ca707e6b7c0d
mov qword [rbp - 0x31], rdx
movabs rcx, 0x516971c9429ea9f3
mov qword [rbp - 0x51], rcx
movabs r12, 0xd9fe1445c9e71efe
movdqa xmm0, xmmword [rbp - 0x59]
movabs rcx, 0x6985ca117e3d7c51
mov qword [rbp - 0x49], rcx
mov r9d, 1
mov qword [rbp + 0x1f], rdx
movabs rcx, 0xd9ad1419c9821e88
mov qword [rbp - 0x41], rcx
lea rdx, [rbp - 0x59]
movdqa xmm1, xmmword [rbp - 0x49]
movabs rcx, 0x7ac269935a0dff13
mov qword [rbp - 0x39], rcx
xor r8d, r8d
movabs rcx, 0x7f03a37e0308d713
mov qword [rbp + 7], r15
mov qword [rbp - 9], rcx
movabs rcx, 0x510c71bb42ffa984
mov qword [rbp - 1], rcx
movabs rcx, 0x7aaf69f25a68ff67
pxor xmm0, xmmword [rbp - 9]
mov qword [rbp + 0x17], rcx
lea rcx, [rbp + 0x77]
movdqa xmmword [rbp - 0x59], xmm0
movdqa xmm0, xmmword [rbp - 0x39]
pxor xmm0, xmmword [rbp + 0x17]
mov qword [rsp + 0x20], rcx
mov rcx, 0xffffffff80000001
mov qword [rbp + 0xf], r12
pxor xmm1, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x39], xmm0
movdqa xmmword [rbp - 0x49], xmm1
call rax
mov rax, qword [0x18008b030]
mov dword [rbp + 0x67], 4
test rax, rax
jne 0x18006df3c
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r10d, dword [rcx + r8 + 0x88]
add r10, r8
cmp r10, r8
je 0x18006df17
mov r11d, dword [r10 + 0x18]
test r11d, r11d
je 0x18006df17
mov r14d, dword [r10 + 0x20]
dec r11d
mov edi, 0xacd97bfd
lea rcx, [r14 + r11*4]
mov r9d, dword [rcx + r8]
add r9, r8
mov bl, byte [r9]
inc r9
test bl, bl
je 0x18006df12
movsx ecx, bl
sub bl, 0x41
mov edx, ecx
or edx, 0x20
cmp bl, 0x19
mov bl, byte [r9]
cmova edx, ecx
inc r9
xor edx, edi
imul edi, edx, 0x1000193
test bl, bl
jne 0x18006dee7
cmp edi, 0xbc89e8d9
je 0x18006df1c
test r11d, r11d
jne 0x18006deca
mov rax, qword [rax]
jmp 0x18006dea5
mov ecx, dword [r10 + 0x24]
add rcx, r8
movzx edx, word [rcx + r11*2]
mov ecx, dword [r10 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x18008b030], rax
mov qword [rbp - 0x69], r15
lea r8, [rbp - 0x79]
mov qword [rbp - 0x61], r12
movabs rcx, 0x7f62a31b037cd740
movdqa xmm1, xmmword [rbp - 0x69]
mov r9d, 0x18
mov qword [rbp - 0x79], rcx
xor edx, edx
movabs rcx, 0x516571cb42bea9e9
mov qword [rbp - 0x19], r15
mov qword [rbp - 0x71], rcx
movabs rcx, 0x7f03a37e0308d713
movdqa xmm0, xmmword [rbp - 0x79]
mov qword [rbp - 0x29], rcx
movabs rcx, 0x510c71bb42ffa984
mov qword [rbp - 0x21], rcx
lea rcx, [rbp + 0x67]
pxor xmm0, xmmword [rbp - 0x29]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x6f]
mov qword [rsp + 0x28], rcx
mov rcx, qword [rbp + 0x77]
and qword [rsp + 0x20], 0
mov qword [rbp - 0x11], r12
pxor xmm1, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x79], xmm0
movdqa xmmword [rbp - 0x69], xmm1
call rax
cmp dword [rbp + 0x6f], 0xbf62b
je 0x18006dfd6
int3
mov rax, qword [0x18008b028]
test rax, rax
jne 0x18006e08e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r9d, dword [rcx + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18006e069
mov r11d, dword [r9 + 0x18]
test r11d, r11d
je 0x18006e069
mov r14d, dword [r9 + 0x20]
dec r11d
mov edi, 0xeadc7fd1
lea rcx, [r14 + r11*4]
mov r10d, dword [rcx + r8]
add r10, r8
mov bl, byte [r10]
inc r10
test bl, bl
je 0x18006e064
movsx ecx, bl
sub bl, 0x41
mov edx, ecx
or edx, 0x20
cmp bl, 0x19
mov bl, byte [r10]
cmova edx, ecx
inc r10
xor edx, edi
imul edi, edx, 0x1000193
test bl, bl
jne 0x18006e039
cmp edi, 0x245c0a7e
je 0x18006e06e
test r11d, r11d
jne 0x18006e01c
mov rax, qword [rax]
jmp 0x18006dff7
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r11*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x18008b028], rax
mov rcx, qword [rbp + 0x77]
call rax
add rsp, 0xe0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret