Function at 0x18000d944
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
mov rax, qword gs:[0x60]
mov ebp, 1
mov r14d, 0x811c9dc5
mov rcx, qword [rax + 0x18]
mov rdx, qword [rcx + 0x10]
mov r8, qword [rdx + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000d9d9
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000d9d9
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov r10d, dword [rax + r8]
mov r11d, r14d
add r10, r8
mov al, byte [r10]
add r10, rbp
test al, al
je 0x18000d9d1
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [r10]
add r10, rbp
test al, al
jne 0x18000d9b1
cmp r11d, 0xdc3250cb
je 0x18000d9de
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000d997
mov rdx, qword [rdx]
jmp 0x18000d973
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x1800314f0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000da72
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000da72
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000da6a
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000da4b
cmp r11d, 0xd1f79bec
je 0x18000da77
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000da32
mov r10, qword [r10]
jmp 0x18000da0e
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180031510], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000db0b
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000db0b
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000db03
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000dae4
cmp r11d, 0x615a11c1
je 0x18000db10
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000dacb
mov r10, qword [r10]
jmp 0x18000daa7
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x1800314d8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000dba4
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000dba4
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000db9c
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000db7d
cmp r11d, 0x9332acfd
je 0x18000dba9
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000db64
mov r10, qword [r10]
jmp 0x18000db40
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x1800314e8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000dc3d
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000dc3d
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000dc35
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000dc16
cmp r11d, 0xb0640550
je 0x18000dc42
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000dbfd
mov r10, qword [r10]
jmp 0x18000dbd9
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x1800314e0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000dcd6
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000dcd6
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000dcce
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000dcaf
cmp r11d, 0xda09a27f
je 0x18000dcdb
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000dc96
mov r10, qword [r10]
jmp 0x18000dc72
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180031508], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000dd6f
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000dd6f
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000dd67
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000dd48
cmp r11d, 0x3f2be80
je 0x18000dd74
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000dd2f
mov r10, qword [r10]
jmp 0x18000dd0b
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x1800314d0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000de08
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000de08
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000de00
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000dde1
cmp r11d, 0xcef68909
je 0x18000de0d
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000ddc8
mov r10, qword [r10]
jmp 0x18000dda4
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x180031500], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000dea1
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000dea1
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000de99
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000de7a
cmp r11d, 0xa5356f67
je 0x18000dea6
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000de61
mov r10, qword [r10]
jmp 0x18000de3d
mov ecx, dword [r9 + 0x24]
add rcx, r8
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x1800314f8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov r10, qword [rcx + 0x10]
mov r8, qword [r10 + 0x30]
movsxd rax, dword [r8 + 0x3c]
mov r9d, dword [rax + r8 + 0x88]
add r9, r8
cmp r9, r8
je 0x18000df3a
xor ecx, ecx
cmp dword [r9 + 0x18], ecx
jbe 0x18000df3a
mov edi, dword [r9 + 0x20]
lea rax, [rdi + rcx*4]
mov ebx, ecx
mov edx, dword [rax + r8]
mov r11d, r14d
add rdx, r8
mov al, byte [rdx]
add rdx, rbp
test al, al
je 0x18000df32
movsx eax, al
xor eax, r11d
imul r11d, eax, 0x1000193
mov al, byte [rdx]
add rdx, rbp
test al, al
jne 0x18000df13
cmp r11d, 0xcb03686c
je 0x18000df3f
add ecx, ebp
cmp ecx, dword [r9 + 0x18]
jb 0x18000defa
mov r10, qword [r10]
jmp 0x18000ded6
mov ecx, dword [r9 + 0x24]
mov rbp, qword [rsp + 0x10]
add rcx, r8
mov rdi, qword [rsp + 0x18]
mov r14, qword [rsp + 0x20]
movzx edx, word [rcx + rbx*2]
mov ecx, dword [r9 + 0x1c]
mov rbx, qword [rsp + 8]
add rcx, r8
mov eax, dword [rcx + rdx*4]
add rax, r8
mov qword [0x1800310d8], rax
ret