Function at 0x18000d0ec
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
mov rax, qword gs:[0x60]
mov ebp, 1
mov r14d, 0x811c9dc5
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov r8, qword [rdx + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d181
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d181
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov r10d, dword [rax + r8]
mov r11d, r14d
add r10, r8
mov al, byte [r10]
add r10, rbp
test al, al
je 0x18000d179
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [r10]
add r10, rbp
test al, al
jne 0x18000d159
cmp r11d, 0xdc3250cb
je 0x18000d186
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d13f
mov rdx, qword [rdx]
jmp 0x18000d11b
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180015e18], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d21a
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d21a
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000d212
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000d1f3
cmp r11d, 0xd1f79bec
je 0x18000d21f
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d1da
mov r10, qword [r10]
jmp 0x18000d1b6
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180015e38], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d2b3
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d2b3
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000d2ab
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000d28c
cmp r11d, 0x615a11c1
je 0x18000d2b8
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d273
mov r10, qword [r10]
jmp 0x18000d24f
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180015e00], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d34c
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d34c
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000d344
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000d325
cmp r11d, 0x9332acfd
je 0x18000d351
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d30c
mov r10, qword [r10]
jmp 0x18000d2e8
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180015e10], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d3e5
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d3e5
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000d3dd
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000d3be
cmp r11d, 0xb0640550
je 0x18000d3ea
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d3a5
mov r10, qword [r10]
jmp 0x18000d381
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180015e08], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d47e
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d47e
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000d476
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000d457
cmp r11d, 0xda09a27f
je 0x18000d483
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d43e
mov r10, qword [r10]
jmp 0x18000d41a
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180015e30], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d517
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d517
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000d50f
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000d4f0
cmp r11d, 0x3f2be80
je 0x18000d51c
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d4d7
mov r10, qword [r10]
jmp 0x18000d4b3
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180015df8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d5b0
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d5b0
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000d5a8
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000d589
cmp r11d, 0xcef68909
je 0x18000d5b5
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d570
mov r10, qword [r10]
jmp 0x18000d54c
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180015e28], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d649
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d649
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000d641
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000d622
cmp r11d, 0xa5356f67
je 0x18000d64e
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d609
mov r10, qword [r10]
jmp 0x18000d5e5
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180015e20], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d6e1
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d6e1
mov edi, dword [r9 + 0x20]
lea rax, [r8 + rcx*4]
mov ebx, ecx
mov edx, dword [rax + rdi]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000d6d9
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000d6ba
cmp r11d, 0xcb03686c
je 0x18000d6e6
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d6a2
mov r10, qword [r10]
jmp 0x18000d67e
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x1800157d0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d779
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d779
mov edi, dword [r9 + 0x20]
lea rax, [r8 + rcx*4]
mov ebx, ecx
mov edx, dword [rax + rdi]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000d771
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000d752
cmp r11d, 0xd697c396
je 0x18000d77e
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d73a
mov r10, qword [r10]
jmp 0x18000d716
mov ecx, dword [r9 + 0x24]
mov rbp, qword [rsp + 0x10]
add rcx, r8
mov rdi, qword [rsp + 0x18]
mov r14, qword [rsp + 0x20]
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
mov rbx, qword [rsp + 8]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180015da0], rax
ret