Function at 0x140037180
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x23e0]
mov eax, 0x24e0
call fcn.140049ae0
sub rsp, rax
mov rax, qword [0x140090040]
xor rax, rsp
mov qword [rbp + 0x23d0], rax
mov ecx, 0x101
mov dword [rbp - 0x10], 0x101
call fcn.140049530
mov rcx, qword gs:[0x60]
mov r14, rax
mov rdx, qword [rcx + 0x18]
mov rdi, qword [rdx + 0x10]
mov r15, rdi
nop dword [rax]
nop word [rax + rax]
mov r11, qword [rdi + 0x30]
movsxd rcx, dword [r11 + 0x3c]
mov ebx, dword [rcx + r11 + 0x88]
add rbx, r11
cmp rbx, r11
je 0x140037274
mov r10d, dword [rbx + 0x18]
test r10d, r10d
je 0x140037274
mov esi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
mov r9d, 0x811c9dc5
lea rcx, [rsi + r10*4]
mov r8d, dword [rcx + r11]
add r8, r11
movzx eax, byte [r8]
inc r8
test al, al
je 0x14003726f
nop
movsx ecx, al
lea r8, [r8 + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [r8 - 1]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test al, al
jne 0x140037240
cmp r9d, 0xdea14da
je 0x1400372e4
test r10d, r10d
jne 0x140037220
mov rdi, qword [rdi]
cmp rdi, r15
je 0x140037287
cmp qword [rdi + 0x30], 0
jne 0x1400371f0
xor eax, eax
lea rdx, [rbp - 0x10]
mov rcx, r14
call rax
mov rbx, 0xffffffffffffffff
nop dword [rax]
inc rbx
cmp byte [r14 + rbx], 0
jne 0x1400372a0
mov rax, qword [0x140090c90]
cmp rbx, rax
ja 0x1400372fd
cmp rax, 0xf
mov qword [0x140090c88], rbx
lea rdi, [0x140090c78]
mov r8, rbx
cmova rdi, qword [0x140090c78]
mov rdx, r14
mov rcx, rdi
call fcn.14006eff0
mov byte [rdi + rbx], 0
jmp 0x14003730f
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r11
add rcx, r11
movzx edx, word [rax + r10*2]
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x140037289
mov r9, r14
lea rcx, [0x140090c78]
mov rdx, rbx
call fcn.1400058f0
mov rcx, r14
call fcn.1400491b0
mov dword [rsp + 0x48], 1
lea rax, [rsp + 0x60]
mov dword [rsp + 0x40], 0xc
lea rdx, [0x140093240]
mov qword [rsp + 0x38], rax
lea rcx, [rbp]
mov byte [rsp + 0x30], 1
xor r9d, r9d
mov qword [rsp + 0x50], 0
mov r8d, 0x31fefd
movsd xmm0, qword [rsp + 0x50]
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 0
movsd qword [rsp + 0x60], xmm0
mov dword [rsp + 0x68], 0
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::cluster::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const____ptr64__unsigned_int__unsigned_int__unsigned_int__unsigned_int__bool__struct_dpp::cache_policy_t__unsigned_int__unsigned_int____ptr64]
lea rax, vtable.std::_Func_impl_no_alloc_class__int___cdecl_WinMain_struct_HINSTANCE______ptr64__struct_HINSTANCE______ptr64__char____ptr64__int_::_2::_lambda_1___void__struct_dpp::message_create_t_const____ptr64_.0
mov qword [rbp - 0x18], 0
mov qword [rsp + 0x70], rax
lea rdx, [rbp - 0x50]
lea rax, [rbp]
mov qword [rsp + 0x78], rax
lea rcx, [rsp + 0x70]
lea rax, [rsp + 0x70]
mov qword [rbp - 0x58], rax
call fcn.14003d0f0
lea rdx, [rbp - 0x50]
mov qword [rbp - 0x18], rax
lea rcx, [rbp + 0x1800]
call fcn.14003ce80
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x1400373df
mov rax, qword [rcx]
lea rdx, [rsp + 0x70]
cmp rcx, rdx
setne dl
call qword [rax + 0x20]
xor edx, edx
lea rcx, [rbp]
call qword [sym.imp.dpp.dll_public:_void___cdecl_dpp::cluster::start_bool____ptr64]
lea rcx, [rbp]
call qword [sym.imp.dpp.dll_public_virtual:_void___cdecl_dpp::cluster::destructor_void____ptr64]
mov rcx, qword [rbp + 0x23d0]
xor rcx, rsp
call fcn.140049190
lea r11, [rsp + 0x24e0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret