Function at 0x180081000
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
sub rsp, 0x78
lea rdx, [0x1802ec440]
sub rdx, rcx
nop
movzx eax, byte [rcx]
mov byte [rdx + rcx], al
lea rcx, [rcx + 1]
test al, al
jne 0x180081010
cmp qword [0x1802d75d0], 0xffffffffffffffff
jne 0x180081546
mov rdx, qword [0x1802ecff8]
mov qword [rsp + 0x88], rbx
mov qword [rsp + 0x90], rbp
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x50], r15
test rdx, rdx
jne 0x18008129d
mov ebp, 0x677a31d7
xor r15d, r15d
nop dword [rax]
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov r14, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [r14 + 0x58]
movd eax, xmm0
movups xmmword [rsp + 0x40], xmm0
sub ax, 8
test r15d, r15d
je 0x1800810ef
mov r8, qword [rsp + 0x48]
mov r9d, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r10, [r8 + rax*2]
cmp r8, r10
je 0x1800810e6
movsx eax, byte [r8]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
add r8, 2
xor edx, r9d
imul r9d, edx, 0x1000193
cmp r8, r10
jne 0x1800810c1
cmp r9d, r15d
jne 0x180081188
mov rbx, qword [r14 + 0x30]
movsxd rax, dword [rbx + 0x3c]
mov rcx, qword [rax + rbx + 0x88]
mov r12, rcx
mov esi, ecx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x180081188
mov edi, dword [rsi + 0x18]
xor r11d, r11d
test edi, edi
je 0x180081188
mov r10d, dword [rsi + 0x20]
add r10, rbx
nop dword [rax]
nop word [rax + rax]
mov r8d, dword [r10]
mov r9d, 0x811c9dc5
add r8, rbx
movzx edx, byte [r8]
test dl, dl
je 0x180081177
nop dword [rax]
nop dword [rax + rax]
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x180081150
cmp r9d, ebp
je 0x180081190
inc r11d
add r10, 4
cmp r11d, edi
jb 0x180081130
mov r14, qword [r14]
jmp 0x180081090
mov eax, dword [rsi + 0x24]
mov ecx, dword [rsi + 0x1c]
add rax, rbx
add rcx, rbx
movzx edx, word [rax + r11*2]
mov edx, dword [rcx + rdx*4]
add rdx, rbx
cmp rdx, rsi
jbe 0x180081265
lea rax, [rsi + r12]
cmp rdx, rax
jae 0x180081265
movzx r8d, byte [rdx]
mov r15d, 0x811c9dc5
mov dword [rsp + 0x80], r15d
mov r9d, r15d
mov dword [rsp + 0x84], r15d
cmp r8b, 0x2e
je 0x180081214
movsx eax, r8b
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rdx + 1]
cmova ecx, eax
inc rdx
xor ecx, r15d
imul r15d, ecx, 0x1000193
cmp r8b, 0x2e
jne 0x1800811e0
mov dword [rsp + 0x80], r15d
movzx r8d, byte [rdx + 1]
inc rdx
test r8b, r8b
je 0x180081254
movsx eax, r8b
lea rdx, [rdx + 1]
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rdx]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test r8b, r8b
jne 0x180081221
mov dword [rsp + 0x84], r9d
mov rbp, qword [rsp + 0x80]
shr rbp, 0x20
jmp 0x180081070
mov qword [0x1802ecff8], rdx
test rdx, rdx
jne 0x18008129d
mov r8d, 0x677a31d7
lea rdx, str.tried_to_resolve_invalid_import_0x_X_n
lea rcx, [0x1802ecc10]
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081550
mov rdx, qword [0x1802ecff8]
lea rcx, [0x1802ec440]
call rdx
mov r10, qword [0x1802ec330]
test r10, r10
jne 0x1800814e8
mov ebp, 0xf75db66e
xor r15d, r15d
nop
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov r14, qword [rax + 0x10]
nop word [rax + rax]
movups xmm0, xmmword [r14 + 0x58]
movd eax, xmm0
movups xmmword [rsp + 0x40], xmm0
sub ax, 8
test r15d, r15d
je 0x18008133f
mov r8, qword [rsp + 0x48]
mov r9d, 0x811c9dc5
movzx eax, ax
shr rax, 1
lea r10, [r8 + rax*2]
cmp r8, r10
je 0x180081336
movsx eax, byte [r8]
mov ecx, eax
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
cmova edx, ecx
add r8, 2
xor edx, r9d
imul r9d, edx, 0x1000193
cmp r8, r10
jne 0x180081311
cmp r9d, r15d
jne 0x1800813d6
mov rbx, qword [r14 + 0x30]
movsxd rax, dword [rbx + 0x3c]
mov rcx, qword [rax + rbx + 0x88]
mov r12, rcx
mov esi, ecx
shr r12, 0x20
add rsi, rbx
cmp rsi, rbx
je 0x1800813d6
mov edi, dword [rsi + 0x18]
xor r11d, r11d
test edi, edi
je 0x1800813d6
mov r10d, dword [rsi + 0x20]
add r10, rbx
nop dword [rax]
nop word [rax + rax]
mov r8d, dword [r10]
mov r9d, 0x811c9dc5
add r8, rbx
movzx eax, byte [r8]
test al, al
je 0x1800813c5
nop dword [rax]
nop dword [rax + rax]
movsx ecx, al
lea r8, [r8 + 1]
sub al, 0x41
mov edx, ecx
or edx, 0x20
cmp al, 0x19
movzx eax, byte [r8]
cmova edx, ecx
xor edx, r9d
imul r9d, edx, 0x1000193
test al, al
jne 0x1800813a0
cmp r9d, ebp
je 0x1800813de
inc r11d
add r10, 4
cmp r11d, edi
jb 0x180081380
mov r14, qword [r14]
jmp 0x1800812e0
mov eax, dword [rsi + 0x24]
mov ecx, dword [rsi + 0x1c]
add rax, rbx
add rcx, rbx
movzx edx, word [rax + r11*2]
mov r10d, dword [rcx + rdx*4]
add r10, rbx
cmp r10, rsi
jbe 0x1800814b0
lea rax, [r12 + rsi]
cmp r10, rax
jae 0x1800814b0
movzx edx, byte [r10]
mov r15d, 0x811c9dc5
mov dword [rsp + 0x80], r15d
mov r8d, r15d
mov dword [rsp + 0x84], r15d
cmp dl, 0x2e
je 0x180081460
nop
movsx eax, dl
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10 + 1]
cmova ecx, eax
inc r10
xor ecx, r15d
imul r15d, ecx, 0x1000193
cmp dl, 0x2e
jne 0x180081430
mov dword [rsp + 0x80], r15d
movzx edx, byte [r10 + 1]
inc r10
test dl, dl
je 0x18008149f
nop dword [rax]
movsx eax, dl
lea r10, [r10 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r10]
cmova ecx, eax
xor ecx, r8d
imul r8d, ecx, 0x1000193
test dl, dl
jne 0x180081470
mov dword [rsp + 0x84], r8d
mov rbp, qword [rsp + 0x80]
shr rbp, 0x20
jmp 0x1800812c0
mov qword [0x1802ec330], r10
test r10, r10
jne 0x1800814e8
mov r8d, 0xf75db66e
lea rdx, str.tried_to_resolve_invalid_import_0x_X_n
lea rcx, [0x1802ecc10]
call fcn.180044770
lea rcx, [0x1802ecc10]
call fcn.180081550
mov r10, qword [0x1802ec330]
xor r9d, r9d
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
lea rcx, [0x1802ec440]
mov dword [rsp + 0x20], 2
lea edx, [r9 + 2]
lea r8d, [r9 + 1]
call r10
mov r15, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
mov r12, qword [rsp + 0x60]
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x88]
mov qword [0x1802d75d0], rax
add rsp, 0x78
ret