Function at 0x180002f80
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3d0]
sub rsp, 0x4d0
movabs rax, 0x18a5002b84c72aec
lea r9, [rbp - 0x50]
mov qword [rsp + 0x60], rax
mov r15, r8
movabs rax, 0x64e72c667a35ed79
mov r14, rdx
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x30]
movaps xmm0, xmmword [rsp + 0x60]
xor eax, eax
mov qword [rsp + 0x28], rax
movabs rdi, 0x18e9006884982ab3
mov qword [rsp + 0x30], rdi
movabs rbx, 0x64e72c357a66ed38
mov qword [rsp + 0x38], rbx
xor r8d, r8d
xorps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x20], rax
call qword [0x1800143d8]
xor edx, edx
mov dword [rbp + 0x410], 0x400
mov r8d, 0x400
lea rcx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memset
movabs rax, 0x1880002a84d52ae0
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x70]
movabs rax, 0x64862c717a15ed57
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x38], rax
movabs r12, 0x986e25d385602eaa
movups xmm0, xmmword [rsp + 0x30]
movabs rax, 0xb891c1366b696571
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rax
movabs r13, 0xb891c1366b086505
movups xmm1, xmmword [rsp + 0x40]
mov rax, r14
mov qword [rsp + 0x70], r13
xorps xmm0, xmmword [rsp + 0x60]
sub r8, r14
mov qword [rsp + 0x78], r12
xorps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmmword [rbp - 0x70], xmm0
nop
movzx edx, word [rax]
movzx ecx, word [rax + r8]
sub edx, ecx
jne 0x1800030c4
add rax, 2
test ecx, ecx
jne 0x1800030b0
mov qword [rsp + 0x500], rsi
test edx, edx
jne 0x180003133
mov rax, qword [r15 + 8]
mov rbx, qword [rax + 0x10]
mov qword [0x1800143a0], rbx
mov eax, dword [rax + 0x18]
mov dword [0x1800143a8], eax
lea rsi, [rbx + rax]
nop dword [rax]
cmp byte [rbx], 0x7f
jne 0x1800030fb
cmp byte [rbx + 1], 4
je 0x180003129
mov rcx, rbx
call fcn.1800039a0
movzx eax, byte [rbx + 1]
add rax, rbx
mov rbx, rax
movzx eax, byte [rax + 1]
or al, byte [rbx]
je 0x180003120
movzx eax, byte [rbx + 2]
inc rbx
or al, byte [rbx]
jne 0x180003115
add rbx, 2
cmp rbx, rsi
jb 0x1800030f0
movabs rbx, 0x64e72c357a66ed38
test r15, r15
je 0x1800034e8
cmp word [r15], 8
jne 0x1800034e8
movabs rcx, 0xf27f7361ee6d427c
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x58], rcx
lea rdx, [rsp + 0x30]
mov qword [rbp - 0x78], rcx
movabs rax, 0x99bb5634f6fce5d7
mov rcx, qword [rbp - 0x48]
mov qword [rbp - 0x80], rax
movabs rax, 0x18da000684f12ae4
mov qword [rsp + 0x30], rax
movabs rax, 0x64822c7b7a39ed0a
mov qword [rsp + 0x38], rax
movabs rax, 0xb8e3c1596b7f6571
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x40], rax
movabs rax, 0x980f25b785212ec1
mov qword [rsp + 0x48], rax
movabs rax, 0x99c95651f688e5a7
movups xmm1, xmmword [rsp + 0x40]
mov qword [rsp + 0x50], rax
movups xmm2, xmmword [rsp + 0x50]
mov qword [rsp + 0x68], rbx
xorps xmm0, xmmword [rsp + 0x60]
xorps xmm2, xmmword [rbp - 0x80]
mov qword [rsp + 0x70], r13
mov qword [rsp + 0x78], r12
xorps xmm1, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x50], xmm2
movdqa xmmword [rsp + 0x30], xmm0
movdqa xmmword [rsp + 0x40], xmm1
call fcn.180002110
test eax, eax
jne 0x1800034d7
mov qword [rsp + 0x48], r12
lea rdx, [rsp + 0x30]
movabs rax, 0x18a8002b84d92afe
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x30], rax
mov rcx, r14
movabs rax, 0x64822c477a02ed5c
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x38], rax
movabs rax, 0xb891c1366b7b6576
movups xmm0, xmmword [rsp + 0x30]
mov qword [rsp + 0x40], rax
movups xmm1, xmmword [rsp + 0x40]
mov qword [rsp + 0x70], r13
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x78], r12
movdqa xmm0, xmmword [rsp + 0x70]
xorps xmm0, xmm1
movdqa xmmword [rsp + 0x40], xmm0
call fcn.180002110
test eax, eax
jne 0x1800034d7
mov rax, qword [0x180014460]
test rax, rax
jne 0x18000336d
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r14, qword [rcx + 0x10]
mov rsi, r14
nop
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov ebx, dword [rax + r11 + 0x88]
add rbx, r11
cmp rbx, r11
je 0x18000333a
mov r10d, dword [rbx + 0x18]
test r10d, r10d
je 0x18000333a
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
mov r9d, 0x811c9dc5
lea rcx, [rdi + r10*4]
mov r8d, dword [rcx + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x180003335
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x180003300
cmp r9d, 0x6b4e8f57
je 0x18000350d
test r10d, r10d
jne 0x1800032e0
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r14
je 0x180003350
cmp qword [rax + 0x30], 0
jne 0x1800032b0
xor eax, eax
mov qword [0x180014460], rax
movabs rbx, 0x64e72c357a66ed38
movabs rdi, 0x18e9006884982ab3
mov rcx, r15
call rax
mov qword [rsp + 0x30], rdi
lea r8, [rbp + 0x410]
mov qword [rsp + 0x38], rbx
lea rdx, [rbp - 0x30]
movdqa xmm0, xmmword [rsp + 0x30]
lea rcx, [rsp + 0x30]
movabs rax, 0x18e9006884982afe
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x60], rax
xorps xmm0, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x30], xmm0
mov word [r15], 8
call fcn.180002a70
mov rdi, qword [0x180014458]
test rdi, rdi
jne 0x180003487
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r14, qword [rcx + 0x10]
mov rsi, r14
mov r11, qword [rsi + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov ebx, dword [rax + r11 + 0x88]
add rbx, r11
cmp rbx, r11
je 0x180003468
mov r10d, dword [rbx + 0x18]
test r10d, r10d
je 0x180003468
mov edi, dword [rbx + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
mov r9d, 0x811c9dc5
lea rcx, [rdi + r10*4]
mov r8d, dword [rcx + r11]
add r8, r11
movzx eax, byte [r8]
inc r8
test al, al
je 0x180003463
nop
movsx ecx, al
lea r8, [r8 + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [r8 - 1]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test al, al
jne 0x180003430
cmp r9d, 0x9b846262
je 0x18000352a
test r10d, r10d
jne 0x180003410
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r14
je 0x18000347e
cmp qword [rax + 0x30], 0
jne 0x1800033e0
xor edi, edi
mov qword [0x180014458], rdi
lea rcx, [rbp - 0x30]
call fcn.1800021a0
inc eax
movsxd rcx, eax
mov eax, 2
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.180005c04
lea rcx, [rbp - 0x30]
mov rbx, rax
call fcn.1800021a0
inc eax
lea rdx, [rbp - 0x30]
movsxd r8, eax
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_mbstowcs]
mov rcx, rbx
call rdi
mov qword [r15 + 8], rax
xor edx, edx
lea rcx, [rbp - 0x30]
mov r8d, 0x400
call fcn.180002090
mov rsi, qword [rsp + 0x500]
lea r11, [rsp + 0x4d0]
mov rbx, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, dword [rbx + 0x24]
add rcx, r11
movzx r8d, word [rcx + r10*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r11
mov eax, dword [rcx + r8*4]
add rax, r11
jmp 0x180003352
mov ecx, dword [rbx + 0x24]
add rcx, r11
movzx r8d, word [rcx + r10*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r11
mov edi, dword [rcx + r8*4]
add rdi, r11
jmp 0x180003480