Function at 0x18004409c
Capabilities:
Access peb ldr_data
Encode data using xor
Get number of processors
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [rcx + 0x10]
mov rbx, rcx
mov r13d, 1
mov r9, qword [rax - 8]
test r9, r9
je 0x18004413f
sub rax, qword [rcx + 8]
mov rcx, qword [rcx + 0xa8]
sar rax, 3
sub eax, r13d
mov byte [rbp + 0x40], r13b
mov dword [rbp + 0x48], eax
test rcx, rcx
je 0x1800443cd
mov rax, qword [rcx]
lea r8, [rbp + 0x40]
lea rdx, [rbp + 0x48]
call qword [rax + 0x10]
test al, al
jne 0x18004413f
lea rdx, [rbx + 0xb8]
lea rcx, [rbp - 0x60]
call fcn.180022c8c
mov rcx, qword [rbx + 0x10]
mov r9, rax
mov r8, qword [rcx - 8]
mov cl, byte [rax]
mov dl, byte [r8]
mov byte [r8], cl
lea rcx, [rax + 8]
mov byte [rax], dl
mov rdx, qword [rcx]
mov rax, qword [r8 + 8]
mov qword [r8 + 8], rdx
mov qword [rcx], rax
mov dl, byte [r9]
call fcn.180042a64
add qword [rbx + 0x10], 0xfffffffffffffff8
lea rcx, [rbx + 0x20]
call fcn.180045c70
mov rax, qword [rbx + 0x10]
cmp qword [rbx + 8], rax
je 0x1800443af
mov r8, qword [rax - 8]
test r8, r8
je 0x1800443af
mov al, byte [r8]
sub al, r13b
cmp al, r13b
ja 0x1800443af
movzx ecx, byte [r8]
xorps xmm0, xmm0
xor eax, eax
mov qword [rbp - 0x60], r8
xorps xmm1, xmm1
movabs r9, 0x8000000000000000
movdqu xmmword [rbp - 0x58], xmm0
movdqu xmmword [rbp - 0x50], xmm1
mov qword [rbp - 0x48], r9
cmp ecx, 5
ja 0x1800441b6
je 0x1800441b6
mov edx, ecx
test ecx, ecx
je 0x1800441b6
sub edx, r13d
je 0x1800441d6
sub edx, r13d
je 0x1800441c9
cmp ecx, 4
ja 0x1800441ec
test ecx, ecx
je 0x1800441e6
sub ecx, r13d
je 0x1800441d6
sub ecx, r13d
jne 0x1800441ec
mov rax, qword [r8 + 8]
mov rcx, qword [rax]
mov qword [rbp - 0x50], rcx
jmp 0x1800441f0
mov rax, qword [r8 + 8]
mov rcx, qword [rax]
mov rax, qword [rcx]
mov qword [rbp - 0x58], rax
jmp 0x1800441f0
mov qword [rbp - 0x48], r13
jmp 0x1800441f0
and qword [rbp - 0x48], rax
mov rdi, qword [rbp + 0x40]
mov rax, qword [rbx + 0x10]
xorps xmm0, xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm0
mov r8, qword [rax - 8]
movdqu xmmword [rbp - 0x30], xmm1
mov qword [rbp - 0x40], r8
mov qword [rbp - 0x28], r9
movzx ecx, byte [r8]
cmp ecx, 5
ja 0x18004422f
je 0x18004422f
mov edx, ecx
test ecx, ecx
je 0x18004422f
sub edx, r13d
je 0x180044250
sub edx, r13d
je 0x180044242
cmp ecx, 4
ja 0x18004425d
test ecx, ecx
je 0x18004425d
sub ecx, r13d
je 0x180044250
sub ecx, r13d
jne 0x18004425d
mov rax, qword [r8 + 8]
mov rcx, qword [rax + 8]
mov qword [rbp - 0x30], rcx
jmp 0x180044261
mov rax, qword [r8 + 8]
mov rcx, qword [rax]
mov qword [rbp - 0x38], rcx
jmp 0x180044261
mov qword [rbp - 0x28], r13
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x60]
call fcn.18001af10
test al, al
jne 0x1800443af
mov rdx, qword [rbp - 0x60]
movzx ecx, byte [rdx]
cmp ecx, 5
ja 0x1800442a8
je 0x1800442a8
test ecx, ecx
je 0x1800442a8
sub ecx, r13d
je 0x18004429b
sub ecx, r13d
jne 0x1800442a8
mov rdi, qword [rbp - 0x50]
jmp 0x180044367
mov rdi, qword [rbp - 0x58]
add rdi, 0x40
jmp 0x180044367
cmp qword [rbp - 0x48], 0
jne 0x1800442b7
mov rdi, rdx
jmp 0x180044367
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r8, qword [rax + 0x30]
movsxd rcx, dword [r8 + 0x3c]
mov r9d, dword [rcx + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x180044343
mov r10d, dword [r9 + 0x18]
test r10d, r10d
je 0x180044343
mov r12d, dword [r9 + 0x20]
dec r10d
mov r14d, 0xa29ea5ea
lea rcx, [r8 + r10*4]
mov r11d, dword [rcx + r12]
add r11, r8
mov sil, byte [r11]
add r11, r13
test sil, sil
je 0x18004433e
movsx ecx, sil
sub sil, 0x41
mov edx, ecx
or edx, 0x20
cmp sil, 0x19
mov sil, byte [r11]
cmova edx, ecx
add r11, r13
xor edx, r14d
imul r14d, edx, 0x1000193
test sil, sil
jne 0x18004430c
cmp r14d, 0x27385e7c
je 0x180044348
test r10d, r10d
jne 0x1800442ed
mov rax, qword [rax]
jmp 0x1800442c8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + r10*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
call rax
mov rdx, qword [rbp - 0x60]
cmp byte [rdi], 9
je 0x180044384
lea rcx, [rbp - 0x60]
call fcn.180023d68
movabs r9, 0x8000000000000000
jmp 0x1800441f4
mov rcx, qword [rbx + 0x10]
lea r8, [rbp - 0x40]
movups xmm0, xmmword [rbp - 0x58]
mov qword [rbp - 0x40], rdx
lea rdx, [rbp - 0x20]
movsd xmm1, qword [rbp - 0x48]
mov rcx, qword [rcx - 8]
movups xmmword [rbp - 0x38], xmm0
movsd qword [rbp - 0x28], xmm1
call fcn.18001eb48
mov rbx, qword [rsp + 0xd0]
mov al, r13b
add rsp, 0x80
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.18004170c
int3