Function at 0x18000d874
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
mov rax, qword gs:[0x60]
mov ebp, 1
mov r14d, 0x811c9dc5
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov r8, qword [rdx + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d909
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d909
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov r10d, dword [rax + r8]
mov r11d, r14d
add r10, r8
mov al, byte [r10]
add r10, rbp
test al, al
je 0x18000d901
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [r10]
add r10, rbp
test al, al
jne 0x18000d8e1
cmp r11d, 0xdc3250cb
je 0x18000d90e
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d8c7
mov rdx, qword [rdx]
jmp 0x18000d8a3
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180030470], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d9a2
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d9a2
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000d99a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000d97b
cmp r11d, 0xd1f79bec
je 0x18000d9a7
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d962
mov r10, qword [r10]
jmp 0x18000d93e
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180030490], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000da3b
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000da3b
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000da33
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000da14
cmp r11d, 0x615a11c1
je 0x18000da40
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d9fb
mov r10, qword [r10]
jmp 0x18000d9d7
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180030458], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000dad4
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000dad4
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000dacc
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000daad
cmp r11d, 0x9332acfd
je 0x18000dad9
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000da94
mov r10, qword [r10]
jmp 0x18000da70
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180030468], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000db6d
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000db6d
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000db65
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000db46
cmp r11d, 0xb0640550
je 0x18000db72
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000db2d
mov r10, qword [r10]
jmp 0x18000db09
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180030460], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000dc06
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000dc06
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000dbfe
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000dbdf
cmp r11d, 0xda09a27f
je 0x18000dc0b
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000dbc6
mov r10, qword [r10]
jmp 0x18000dba2
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180030488], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000dc9f
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000dc9f
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000dc97
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000dc78
cmp r11d, 0x3f2be80
je 0x18000dca4
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000dc5f
mov r10, qword [r10]
jmp 0x18000dc3b
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180030450], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000dd38
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000dd38
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000dd30
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000dd11
cmp r11d, 0xcef68909
je 0x18000dd3d
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000dcf8
mov r10, qword [r10]
jmp 0x18000dcd4
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180030480], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000ddd1
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000ddd1
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000ddc9
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000ddaa
cmp r11d, 0xa5356f67
je 0x18000ddd6
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000dd91
mov r10, qword [r10]
jmp 0x18000dd6d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180030478], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000de6a
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000de6a
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000de62
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000de43
cmp r11d, 0xcb03686c
je 0x18000de6f
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000de2a
mov r10, qword [r10]
jmp 0x18000de06
mov ecx, dword [r9 + 0x24]
mov rbp, qword [rsp + 0x10]
add rcx, r8
mov rdi, qword [rsp + 0x18]
mov r14, qword [rsp + 0x20]
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
mov rbx, qword [rsp + 8]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180030078], rax
ret