Function at 0x180009f00
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x180009f9b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x180009f9b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180009f8f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180009f70
cmp edx, 0xdc3250cb
je 0x180009fa0
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x180009f50
mov rdi, qword [rdi]
jmp 0x180009f20
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x1801afaa0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000a04b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000a04b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000a03f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000a020
cmp edx, 0x615a11c1
je 0x18000a050
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000a000
mov rdi, qword [rdi]
jmp 0x180009fd0
mov eax, dword [rbx + 0x24]
mov ecx, dword [rbx + 0x1c]
add rax, r10
add rcx, r10
movzx edx, word [rax + r9*2]
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x1801afaa8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000a0fb
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000a0fb
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000a0ef
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000a0d0
cmp edx, 0xd1f79bec
je 0x18000a100
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000a0b0
mov rdi, qword [rdi]
jmp 0x18000a080
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1801afad8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000a1ab
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000a1ab
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000a19f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000a180
cmp edx, 0x9332acfd
je 0x18000a1b0
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000a160
mov rdi, qword [rdi]
jmp 0x18000a130
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1801afab8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000a25b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000a25b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000a24f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000a230
cmp edx, 0x2a654126
je 0x18000a260
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000a210
mov rdi, qword [rdi]
jmp 0x18000a1e0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1801afad0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000a30b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000a30b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000a2ff
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000a2e0
cmp edx, 0xde4cdca5
je 0x18000a310
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000a2c0
mov rdi, qword [rdi]
jmp 0x18000a290
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1801afae8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000a3bb
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000a3bb
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000a3af
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000a390
cmp edx, 0xa5356f67
je 0x18000a3c0
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000a370
mov rdi, qword [rdi]
jmp 0x18000a340
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1801afab0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000a46b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000a46b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov eax, dword [r8]
mov edx, 0x811c9dc5
add rax, r10
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x18000a45f
nop word [rax + rax]
movsx ecx, cl
lea rax, [rax + 1]
xor ecx, edx
imul edx, ecx, 0x1000193
movzx ecx, byte [rax - 1]
test cl, cl
jne 0x18000a440
cmp edx, 0xd697c396
je 0x18000a470
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000a420
mov rdi, qword [rdi]
jmp 0x18000a3f0
mov ecx, dword [rbx + 0x24]
mov rdi, qword [rsp + 0x10]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
mov rbx, qword [rsp + 8]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1801afae0], rax
ret