Function at 0x180054fc0
Capabilities:
Access peb ldr_data
Encode data using xor
Get process filename

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x18010b040]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rax, qword gs:[0x60]
xor esi, esi
mov rbp, rcx
mov r15, qword [rax + 0x10]
movsxd rax, dword [r15 + 0x3c]
mov r12d, dword [rax + r15 + 0x50]
test r12d, r12d
jle 0x18005527b
mov r13d, dword [0x18010b090]
lea rdi, [r15 + 3]
movdqa xmm9, xmmword [0x1800f7c50]
movdqa xmm7, xmmword [0x1800f7b60]
movdqa xmm6, xmmword [0x1800f7f40]
movdqa xmm8, xmmword [0x1800f7ad0]
movzx eax, byte [rdi - 3]
sub al, 0x48
test al, 0xfb
jne 0x18005526d
cmp byte [rdi - 2], 0x8d
jne 0x18005526d
mov eax, dword [rdi]
add eax, 7
movsxd r14, esi
movsxd rbx, eax
mov rax, qword gs:[0x60]
add rbx, r14
add rbx, r15
mov rdx, qword [rax + 0x10]
cmp rbx, rdx
jbe 0x18005526d
movsxd rax, dword [rdx + 0x3c]
mov ecx, dword [rax + rdx + 0x50]
add rcx, rdx
cmp rbx, rcx
jae 0x18005526d
mov rdx, rbx
lea rcx, [rsp + 0x20]
call fcn.180024ad0
cmp word [rbp + 0x2e], 0
je 0x180055201
cmp r13d, 2
jl 0x1800551bd
xor edx, edx
mov rcx, rbp
nop dword [rax + rax]
movd xmm2, edx
lea eax, [rdx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 0x10]
paddd xmm2, xmm8
add edx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm6
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rcx - 0x10], xmm3
paddd xmm2, xmm8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm6
punpckldq xmm1, xmm2
pmuldq xmm1, xmm6
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshufhw xmm0, xmm2, 0xd8
movq xmm2, xmm9
pshuflw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rcx - 8], xmm3
cmp edx, 0x18
jl 0x1800550d0
jmp 0x180055201
mov r8, rbp
xor ecx, ecx
nop dword [rax]
nop word [rax + rax]
mov eax, 0x4bda12f7
lea r8, [r8 + 2]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul edx, eax, 0x36
movzx eax, cx
inc ecx
sub ax, dx
add ax, 0x37
xor word [r8 - 2], ax
cmp ecx, 0x18
jl 0x1800551d0
mov rax, rbp
sub rbx, rbp
nop word [rax + rax]
movzx edx, word [rax]
movzx ecx, word [rax + rbx]
sub edx, ecx
jne 0x180055223
add rax, 2
test ecx, ecx
jne 0x180055210
test edx, edx
mov rdx, qword [rsp + 0x38]
je 0x1800552bf
cmp rdx, 7
jbe 0x18005526d
mov rcx, qword [rsp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180055268
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180055304
call fcn.1800b0bc8
inc esi
inc rdi
cmp esi, r12d
jl 0x180055051
xor eax, eax
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.1800b0830
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [rsp + 0x70]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rbx, [r14 + r15]
cmp rdx, 7
jbe 0x1800552fc
mov rcx, qword [rsp + 0x20]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800552f7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180055304
call fcn.1800b0bc8
mov rax, rbx
jmp 0x18005527d
call fcn.1800b6a64
int3