Function at 0x18000be90
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000bf27
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000bf27
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000bf1f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000bf00
cmp edx, 0xdc3250cb
je 0x18000bf2c
inc r8d
cmp r8d, r10d
jb 0x18000bee0
mov rdi, qword [rdi]
jmp 0x18000beb0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0f00], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000bfd7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000bfd7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000bfcf
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000bfb0
cmp edx, 0x52d556ee
je 0x18000bfdc
inc r8d
cmp r8d, r10d
jb 0x18000bf90
mov rdi, qword [rdi]
jmp 0x18000bf60
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ed0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c087
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c087
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c07f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c060
cmp edx, 0x2d4afd64
je 0x18000c08c
inc r8d
cmp r8d, r10d
jb 0x18000c040
mov rdi, qword [rdi]
jmp 0x18000c010
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ed8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c137
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c137
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c12f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c110
cmp edx, 0x615a11c1
je 0x18000c13c
inc r8d
cmp r8d, r10d
jb 0x18000c0f0
mov rdi, qword [rdi]
jmp 0x18000c0c0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ef8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c1e7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c1e7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c1df
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c1c0
cmp edx, 0xd1f79bec
je 0x18000c1ec
inc r8d
cmp r8d, r10d
jb 0x18000c1a0
mov rdi, qword [rdi]
jmp 0x18000c170
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0f40], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c297
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c297
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c28f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c270
cmp edx, 0x9332acfd
je 0x18000c29c
inc r8d
cmp r8d, r10d
jb 0x18000c250
mov rdi, qword [rdi]
jmp 0x18000c220
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ee8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c347
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c347
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c33f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c320
cmp edx, 0xb544ab00
je 0x18000c34c
inc r8d
cmp r8d, r10d
jb 0x18000c300
mov rdi, qword [rdi]
jmp 0x18000c2d0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ef0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c3f7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c3f7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c3ef
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c3d0
cmp edx, 0x2a654126
je 0x18000c3fc
inc r8d
cmp r8d, r10d
jb 0x18000c3b0
mov rdi, qword [rdi]
jmp 0x18000c380
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0f38], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c4a7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c4a7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c49f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c480
cmp edx, 0xde4cdca5
je 0x18000c4ac
inc r8d
cmp r8d, r10d
jb 0x18000c460
mov rdi, qword [rdi]
jmp 0x18000c430
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0f68], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c557
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c557
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c54f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c530
cmp edx, 0xa5356f67
je 0x18000c55c
inc r8d
cmp r8d, r10d
jb 0x18000c510
mov rdi, qword [rdi]
jmp 0x18000c4e0
mov ecx, dword [rbx + 0x24]
mov rsi, qword [rsp + 0x10]
add rcx, r9
mov rdi, qword [rsp + 0x18]
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
mov rbx, qword [rsp + 8]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ee0], rax
ret