Function at 0x18001e640
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push r12
lea rbp, [rax - 0x5f]
sub rsp, 0xe8
mov qword [rax + 8], rbx
lea rcx, [rbp - 0x79]
mov qword [rax + 0x10], rsi
movabs rbx, 0x3dab82201e60878a
mov qword [rax + 0x18], rdi
movabs rsi, 0x51680dd99493f9ed
mov qword [rax - 0x18], r13
mov rdi, rdx
mov qword [rax - 0x20], r14
lea rdx, [rbp - 0x69]
mov qword [rax - 0x28], r15
movabs rax, 0x516860bce0e080be
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x69], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x61], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x79], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x69]
mov qword [rbp - 0x71], rax
movabs rax, 0x51680dd9f1e780af
xorps xmm0, xmmword [rbp - 0x79]
movdqa xmmword [rbp - 0x69], xmm0
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x79], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x71], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x19], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x79]
mov qword [rbp - 0x11], rax
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x79], xmm0
movsxd r13, r8d
call fcn.18000ea60
mov rcx, qword [0x1800ebc10]
mov qword [rbp + 0x7f], rax
test rcx, rcx
jne 0x18001e803
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r12, qword [rcx]
mov r15, r12
nop dword [rax + rax]
mov r11, qword [r15 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov r14d, dword [rax + r11 + 0x88]
add r14, r11
cmp r14, r11
je 0x18001e7da
mov r10d, dword [r14 + 0x18]
test r10d, r10d
je 0x18001e7da
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0x6264a94a
lea rax, [rsi + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x18001e7d5
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x18001e7a0
cmp r9d, 0x34ef9e77
je 0x18001eb01
test r10d, r10d
jne 0x18001e780
mov rax, qword [r15]
mov r15, rax
cmp rax, r12
je 0x18001e7f0
cmp qword [rax + 0x30], 0
jne 0x18001e750
xor ecx, ecx
mov qword [0x1800ebc10], rcx
movabs rsi, 0x51680dd99493f9ed
mov qword gs:[0x130], rcx
mov edx, r13d
mov rax, qword [0x1800c4210]
mov rcx, qword [rbp + 0x7f]
mov qword gs:[0x128], rax
call fcn.1800c21a0
mov rdx, r13
mov r12, rax
mov r13, qword [rsp + 0xe0]
test rdx, rdx
jle 0x18001e862
mov r8, rax
sub r8, rdi
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rdi]
mov byte [r8 + rdi + 0x20], cl
lea rdi, [rdi + 1]
sub rdx, 1
jne 0x18001e850
movabs rax, 0x360648a0e0fa97b8
movabs rdx, 0xd9aed9d70b61d173
mov qword [rbp + 0x7f], rax
movabs rcx, 0xf11a67c6b3124020
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x59], rax
movabs rax, 0x58d8f1613005e9e3
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x51], rax
movabs rax, 0x7ed04a277acc511b
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x49], rax
movabs rax, 0x9fdeb37696f27346
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x41], rax
movabs rax, 0x10cd37d28f51d87c
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x39], rax
movabs rax, 0x96949666a0a2b487
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x31], rax
mov qword [rbp + 0x7f], rdx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x29], rax
mov qword [rbp + 0x7f], rcx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x21], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x7f], rbx
mov qword [rbp - 9], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 1], rax
movabs rax, 0x44b5264314b9136f
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 7], rax
movabs rax, 0xf0acf512f79d3f7c
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0xf], rax
movabs rax, 0x4fb445bde2349511
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x17], rax
movabs rax, 0xfaf5f814c5d6dace
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x7f], rdx
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x27], rax
mov qword [rbp + 0x7f], rcx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x59]
xorps xmm0, xmmword [rbp - 9]
movdqa xmm1, xmmword [rbp - 0x49]
xorps xmm1, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x59], xmm0
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x49], xmm1
movdqa xmm1, xmmword [rbp - 0x29]
mov qword [rbp + 0x2f], rax
mov rax, qword [0x1800ebbe0]
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 0x39], xmm0
movdqa xmmword [rbp - 0x29], xmm1
test rax, rax
jne 0x18001eaa7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov r14, r15
nop dword [rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x18001ea88
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x18001ea88
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
mov r9d, 0x1ba07848
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
movzx eax, byte [r8]
inc r8
test al, al
je 0x18001ea83
nop
movsx ecx, al
lea r8, [r8 + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [r8 - 1]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test al, al
jne 0x18001ea50
cmp r9d, 0x2e1291a5
je 0x18001eb1f
test r10d, r10d
jne 0x18001ea30
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x18001ea9e
cmp qword [rax + 0x30], 0
jne 0x18001ea00
xor eax, eax
mov qword [0x1800ebbe0], rax
mov qword gs:[0x130], rax
lea rcx, [rbp - 0x59]
mov rax, qword [0x1800c4210]
mov qword gs:[0x128], rax
call fcn.1800c21a0
mov r15, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x108]
mov rbx, qword [rsp + 0x100]
test rax, rax
jne 0x18001eb3b
add rsp, 0xe8
pop r12
pop rbp
ret
mov ecx, dword [r14 + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [r14 + 0x1c]
add rcx, r11
mov ecx, dword [rcx + rdx*4]
add rcx, r11
jmp 0x18001e7f2
mov ecx, dword [rsi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x18001eaa0
xor edx, edx
mov rcx, r12
call rax
add rsp, 0xe8
pop r12
pop rbp
ret