Function at 0x180031dd0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x30
mov rax, qword [0x1802ea050]
test rax, rax
jne 0x1800320f7
mov qword [rsp + 0x68], r13
movabs r13, 0x890318928edd1225
mov rcx, r13
call fcn.180053a90
mov qword [0x1802ea050], rax
test rax, rax
jne 0x1800320f2
mov r8, r13
lea rdx, str.failed_to_resolve_schema__llx
lea rcx, [0x1802ecc10]
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081b50
mov r8, r13
lea rdx, str.failed_to_resolve_schema__llx_n
lea rcx, [0x1802ecc10]
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081550
mov r8, r13
lea rdx, str.failed_to_resolve_schema__llx
lea rcx, [0x1802ecc10]
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081b50
mov r8, r13
lea rdx, str.failed_to_resolve_schema__llx_n
lea rcx, [0x1802ecc10]
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081550
mov rdx, qword [0x1802ea088]
test rdx, rdx
jne 0x1800320e6
mov ebp, 0x89eabb08
xor r15d, r15d
nop dword [rax]
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov r14, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [r14 + 0x58]
movd eax, xmm0
movups xmmword [rsp + 0x20], xmm0
sub ax, 8
test r15d, r15d
je 0x180031f3f
mov r8, qword [rsp + 0x28]
mov r9d, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r10, [r8 + rax*2]
cmp r8, r10
je 0x180031f36
movsx eax, byte [r8]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
add r8, 2
xor edx, r9d
imul r9d, edx, 0x1000193
cmp r8, r10
jne 0x180031f11
cmp r9d, r15d
jne 0x180031fd6
mov rbx, qword [r14 + 0x30]
movsxd rax, dword [rbx + 0x3c]
mov rcx, qword [rax + rbx + 0x88]
mov r12, rcx
mov esi, ecx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x180031fd6
mov edi, dword [rsi + 0x18]
xor r11d, r11d
test edi, edi
je 0x180031fd6
mov r10d, dword [rsi + 0x20]
add r10, rbx
nop dword [rax]
nop word [rax + rax]
mov r8d, dword [r10]
mov r9d, 0x811c9dc5
add r8, rbx
movzx eax, byte [r8]
test al, al
je 0x180031fc5
nop dword [rax]
nop dword [rax + rax]
movsx ecx, al
lea r8, [r8 + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [r8]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test al, al
jne 0x180031fa0
cmp r9d, ebp
je 0x180031fde
inc r11d
add r10, 4
cmp r11d, edi
jb 0x180031f80
mov r14, qword [r14]
jmp 0x180031ee0
mov eax, dword [rsi + 0x24]
mov ecx, dword [rsi + 0x1c]
add rax, rbx
add rcx, rbx
movzx edx, word [rax + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rbx
cmp rdx, rsi
jbe 0x1800320ae
lea rax, [r12 + rsi]
cmp rdx, rax
jae 0x1800320ae
movzx r8d, byte [rdx]
mov r15d, 0x811c9dc5
mov dword [rsp + 0x60], r15d
mov r9d, r15d
mov dword [rsp + 0x64], r15d
cmp r8b, 0x2e
je 0x180032061
nop dword [rax + rax]
movsx eax, r8b
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rdx + 1]
cmova ecx, eax
inc rdx
xor ecx, r15d
imul r15d, ecx, 0x1000193
cmp r8b, 0x2e
jne 0x180032030
mov dword [rsp + 0x60], r15d
movzx r8d, byte [rdx + 1]
inc rdx
test r8b, r8b
je 0x1800320a0
nop
movsx eax, r8b
lea rdx, [rdx + 1]
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rdx]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test r8b, r8b
jne 0x180032070
mov dword [rsp + 0x64], r9d
mov rbp, qword [rsp + 0x60]
shr rbp, 0x20
jmp 0x180031ec0
mov qword [0x1802ea088], rdx
test rdx, rdx
jne 0x1800320e6
mov r8d, 0x89eabb08
lea rdx, str.tried_to_resolve_invalid_import_0x_X_n
lea rcx, [0x1802ecc10]
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081550
mov rdx, qword [0x1802ea088]
mov ecx, 0x3e8
call rdx
jmp 0x180031e61
mov r13, qword [rsp + 0x68]
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret