Function at 0x18000cec0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000cf5b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000cf5b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000cf4f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000cf30
cmp edx, 0xdc3250cb
je 0x18000cf60
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000cf10
mov rdi, qword [rdi]
jmp 0x18000cee0
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x180230928], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d00b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d00b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000cfff
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000cfe0
cmp edx, 0x52d556ee
je 0x18000d010
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000cfc0
mov rdi, qword [rdi]
jmp 0x18000cf90
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x1802308c8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d0bb
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d0bb
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d0af
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d090
cmp edx, 0x2d4afd64
je 0x18000d0c0
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d070
mov rdi, qword [rdi]
jmp 0x18000d040
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1802308f0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d16b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d16b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d15f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d140
cmp edx, 0x615a11c1
je 0x18000d170
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d120
mov rdi, qword [rdi]
jmp 0x18000d0f0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180230920], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d21b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d21b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d20f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d1f0
cmp edx, 0xd1f79bec
je 0x18000d220
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d1d0
mov rdi, qword [rdi]
jmp 0x18000d1a0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180230968], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d2cb
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d2cb
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d2bf
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d2a0
cmp edx, 0x9332acfd
je 0x18000d2d0
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d280
mov rdi, qword [rdi]
jmp 0x18000d250
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180230910], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d37b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d37b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d36f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d350
cmp edx, 0xb544ab00
je 0x18000d380
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d330
mov rdi, qword [rdi]
jmp 0x18000d300
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180230918], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d42b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d42b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d41f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d400
cmp edx, 0x2a654126
je 0x18000d430
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d3e0
mov rdi, qword [rdi]
jmp 0x18000d3b0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180230960], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d4db
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d4db
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d4cf
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d4b0
cmp edx, 0xde4cdca5
je 0x18000d4e0
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d490
mov rdi, qword [rdi]
jmp 0x18000d460
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1802309c0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d58b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d58b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d57f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d560
cmp edx, 0xa5356f67
je 0x18000d590
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d540
mov rdi, qword [rdi]
jmp 0x18000d510
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1802308f8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d63b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d63b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d62f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d610
cmp edx, 0xda09a27f
je 0x18000d640
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d5f0
mov rdi, qword [rdi]
jmp 0x18000d5c0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180230900], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d6eb
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d6eb
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d6df
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d6c0
cmp edx, 0xb0640550
je 0x18000d6f0
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d6a0
mov rdi, qword [rdi]
jmp 0x18000d670
mov ecx, dword [rbx + 0x24]
mov rdi, qword [rsp + 0x10]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
mov rbx, qword [rsp + 8]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180230908], rax
ret