Function at 0x180059d80
Capabilities:
Access peb ldr_data
Encode data using xor
Get process filename

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x80
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm7
movaps xmmword [rsp + 0x50], xmm8
mov rax, qword [0x180112020]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rax, qword gs:[0x60]
xor esi, esi
mov r14, rcx
mov rbp, qword [rax + 0x10]
movsxd rax, dword [rbp + 0x3c]
mov r12d, dword [rax + rbp + 0x50]
test r12d, r12d
jle 0x18005a00b
mov r13d, dword [0x180112028]
lea rdi, [rbp + 3]
nop dword [rax]
movzx eax, byte [rdi - 3]
sub al, 0x48
test al, 0xfb
jne 0x180059ffd
cmp byte [rdi - 2], 0x8d
jne 0x180059ffd
mov eax, dword [rdi]
add eax, 7
movsxd r15, esi
movsxd rbx, eax
mov rax, qword gs:[0x60]
add rbx, r15
add rbx, rbp
mov rdx, qword [rax + 0x10]
cmp rbx, rdx
jbe 0x180059ffd
movsxd rax, dword [rdx + 0x3c]
mov ecx, dword [rax + rdx + 0x50]
add rcx, rdx
cmp rbx, rcx
jae 0x180059ffd
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.180026de0
cmp word [r14 + 0x1a], 0
je 0x180059f91
xor ecx, ecx
cmp r13d, 2
jl 0x180059f59
movdqa xmm2, xmmword [0x1800feda0]
mov eax, 4
movdqa xmm3, xmmword [0x1800fedc0]
movdqa xmm1, xmm2
movdqa xmm4, xmmword [0x1800ff230]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov ecx, 8
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
movd xmm5, eax
mov eax, 0x1f
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movd xmm6, eax
movdqa xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1800fedf0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [r14]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
paddw xmm2, xmmword [str.44444444]
pxor xmm2, xmm0
punpckldq xmm1, xmm3
movq qword [r14], xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movdqa xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1800fedf0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [r14 + 8]
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [str.44444444]
pxor xmm2, xmm0
movq qword [r14 + 8], xmm2
movsxd rax, ecx
lea r8, [r14 + rax*2]
mov eax, 0x51eb851f
lea r8, [r8 + 2]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul edx, eax, 0x32
movzx eax, cx
inc ecx
sub ax, dx
add ax, 0x34
xor word [r8 - 2], ax
cmp ecx, 0xe
jl 0x180059f60
mov rax, r14
sub rbx, r14
nop word [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + rbx]
sub edx, ecx
jne 0x180059fb3
add rax, 2
test ecx, ecx
jne 0x180059fa0
test edx, edx
mov rdx, qword [rsp + 0x38]
je 0x18005a04a
cmp rdx, 8
jb 0x180059ffd
mov rcx, qword [rsp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180059ff8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005a08c
call fcn.1800b7ba8
inc esi
inc rdi
cmp esi, r12d
jl 0x180059df0
xor eax, eax
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.1800b7800
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [rsp + 0x70]
movaps xmm7, xmmword [rsp + 0x60]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rbx, [r15 + rbp]
cmp rdx, 8
jb 0x18005a087
mov rcx, qword [rsp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005a082
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005a08c
call fcn.1800b7ba8
mov rax, rbx
jmp 0x18005a00d
call fcn.1800be590
int3