Function at 0x18001d860
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
push rbp
push r12
lea rbp, [rax - 0x5f]
sub rsp, 0xe8
mov qword [rax + 8], rbx
lea rcx, [rbp - 0x79]
mov qword [rax + 0x10], rsi
movabs rbx, 0xa654d5b76b435db0
mov qword [rax + 0x18], rdi
movabs rsi, 0x7d4787a632d3a6d7
mov qword [rax - 0x18], r13
mov rdi, rdx
mov qword [rax - 0x20], r14
lea rdx, [rbp - 0x69]
mov qword [rax - 0x28], r15
movabs rax, 0x7d47eac346a0df84
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x69], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x61], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x79], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x69]
mov qword [rbp - 0x71], rax
movabs rax, 0x7d4787a657a7df95
xorps xmm0, xmmword [rbp - 0x79]
movdqa xmmword [rbp - 0x69], xmm0
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x79], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x71], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x19], rax
mov qword [rbp + 0x7f], rbx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x79]
mov qword [rbp - 0x11], rax
xorps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x79], xmm0
movsxd r13, r8d
call fcn.18000e700
mov rcx, qword [0x1800e14a0]
mov qword [rbp + 0x7f], rax
test rcx, rcx
jne 0x18001da23
mov rcx, qword gs:[0x60]
mov rdx, qword [rcx + 0x18]
mov rcx, qword [rdx + 0x10]
mov r12, qword [rcx]
mov r15, r12
nop dword [rax + rax]
mov r11, qword [r15 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov r14d, dword [rax + r11 + 0x88]
add r14, r11
cmp r14, r11
je 0x18001d9fa
mov r10d, dword [r14 + 0x18]
test r10d, r10d
je 0x18001d9fa
mov esi, dword [r14 + 0x20]
nop word [rax + rax]
dec r10d
mov r9d, 0x14a87d89
lea rax, [rsi + r10*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x18001d9f5
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x18001d9c0
cmp r9d, 0x5409d0b4
je 0x18001dd21
test r10d, r10d
jne 0x18001d9a0
mov rax, qword [r15]
mov r15, rax
cmp rax, r12
je 0x18001da10
cmp qword [rax + 0x30], 0
jne 0x18001d970
xor ecx, ecx
mov qword [0x1800e14a0], rcx
movabs rsi, 0x7d4787a632d3a6d7
mov qword gs:[0x130], rcx
mov edx, r13d
mov rax, qword [0x1800bb200]
mov rcx, qword [rbp + 0x7f]
mov qword gs:[0x128], rax
call fcn.1800b9160
mov rdx, r13
mov r12, rax
mov r13, qword [rsp + 0xe0]
test rdx, rdx
jle 0x18001da82
mov r8, rax
sub r8, rdi
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [rdi]
mov byte [r8 + rdi + 0x20], cl
lea rdi, [rdi + 1]
sub rdx, 1
jne 0x18001da70
movabs rax, 0x1a29c2df46bac882
movabs rdx, 0x562c65dcb2acce9d
mov qword [rbp + 0x7f], rax
movabs rcx, 0x81bc9bedaecac1ee
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x59], rax
movabs rax, 0xc327a6f6452633d9
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x51], rax
movabs rax, 0xa3c8788463b67cdd
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x49], rax
movabs rax, 0xb84014358d5e5ce0
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x41], rax
movabs rax, 0x2b7f3b5db822d016
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x39], rax
movabs rax, 0x5e0d6941c8a730ad
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x31], rax
mov qword [rbp + 0x7f], rdx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x29], rax
mov qword [rbp + 0x7f], rcx
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 0x21], rax
mov qword [rbp + 0x7f], rsi
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x7f], rbx
mov qword [rbp - 9], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp - 1], rax
movabs rax, 0x99ad14e00dc33ea9
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 7], rax
movabs rax, 0xd7325251ec3110da
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0xf], rax
movabs rax, 0x74064932d5479d7b
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x17], rax
movabs rax, 0x326c0733add35ee4
mov qword [rbp + 0x7f], rax
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x7f], rdx
mov rax, qword [rbp + 0x7f]
mov qword [rbp + 0x27], rax
mov qword [rbp + 0x7f], rcx
mov rax, qword [rbp + 0x7f]
movdqa xmm0, xmmword [rbp - 0x59]
xorps xmm0, xmmword [rbp - 9]
movdqa xmm1, xmmword [rbp - 0x49]
xorps xmm1, xmmword [rbp + 7]
movdqa xmmword [rbp - 0x59], xmm0
movdqa xmm0, xmmword [rbp - 0x39]
xorps xmm0, xmmword [rbp + 0x17]
movdqa xmmword [rbp - 0x49], xmm1
movdqa xmm1, xmmword [rbp - 0x29]
mov qword [rbp + 0x2f], rax
mov rax, qword [0x1800e1470]
xorps xmm1, xmmword [rbp + 0x27]
movdqa xmmword [rbp - 0x39], xmm0
movdqa xmmword [rbp - 0x29], xmm1
test rax, rax
jne 0x18001dcc7
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r15, qword [rax]
mov r14, r15
nop dword [rax]
mov r11, qword [r14 + 0x30]
movsxd rax, dword [r11 + 0x3c]
mov esi, dword [rax + r11 + 0x88]
add rsi, r11
cmp rsi, r11
je 0x18001dca8
mov r10d, dword [rsi + 0x18]
test r10d, r10d
je 0x18001dca8
mov edi, dword [rsi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r10d
mov r9d, 0x1c973eee
lea rax, [r11 + r10*4]
mov r8d, dword [rax + rdi]
add r8, r11
movzx eax, byte [r8]
inc r8
test al, al
je 0x18001dca3
nop
movsx ecx, al
lea r8, [r8 + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [r8 - 1]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test al, al
jne 0x18001dc70
cmp r9d, 0x7c74d987
je 0x18001dd3f
test r10d, r10d
jne 0x18001dc50
mov rax, qword [r14]
mov r14, rax
cmp rax, r15
je 0x18001dcbe
cmp qword [rax + 0x30], 0
jne 0x18001dc20
xor eax, eax
mov qword [0x1800e1470], rax
mov qword gs:[0x130], rax
lea rcx, [rbp - 0x59]
mov rax, qword [0x1800bb200]
mov qword gs:[0x128], rax
call fcn.1800b9160
mov r15, qword [rsp + 0xd0]
mov r14, qword [rsp + 0xd8]
mov rdi, qword [rsp + 0x110]
mov rsi, qword [rsp + 0x108]
mov rbx, qword [rsp + 0x100]
test rax, rax
jne 0x18001dd5b
add rsp, 0xe8
pop r12
pop rbp
ret
mov ecx, dword [r14 + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [r14 + 0x1c]
add rcx, r11
mov ecx, dword [rcx + rdx*4]
add rcx, r11
jmp 0x18001da12
mov ecx, dword [rsi + 0x24]
add rcx, r11
movzx edx, word [rcx + r10*2]
mov ecx, dword [rsi + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x18001dcc0
xor edx, edx
mov rcx, r12
call rax
add rsp, 0xe8
pop r12
pop rbp
ret