Function at 0x18000be40
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000bed7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000bed7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000becf
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000beb0
cmp edx, 0xdc3250cb
je 0x18000bedc
inc r8d
cmp r8d, r10d
jb 0x18000be90
mov rdi, qword [rdi]
jmp 0x18000be60
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0f00], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000bf87
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000bf87
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000bf7f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000bf60
cmp edx, 0x52d556ee
je 0x18000bf8c
inc r8d
cmp r8d, r10d
jb 0x18000bf40
mov rdi, qword [rdi]
jmp 0x18000bf10
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ed0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c037
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c037
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c02f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c010
cmp edx, 0x2d4afd64
je 0x18000c03c
inc r8d
cmp r8d, r10d
jb 0x18000bff0
mov rdi, qword [rdi]
jmp 0x18000bfc0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ed8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c0e7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c0e7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c0df
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c0c0
cmp edx, 0x615a11c1
je 0x18000c0ec
inc r8d
cmp r8d, r10d
jb 0x18000c0a0
mov rdi, qword [rdi]
jmp 0x18000c070
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ef8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c197
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c197
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c18f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c170
cmp edx, 0xd1f79bec
je 0x18000c19c
inc r8d
cmp r8d, r10d
jb 0x18000c150
mov rdi, qword [rdi]
jmp 0x18000c120
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0f40], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c247
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c247
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c23f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c220
cmp edx, 0x9332acfd
je 0x18000c24c
inc r8d
cmp r8d, r10d
jb 0x18000c200
mov rdi, qword [rdi]
jmp 0x18000c1d0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ee8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c2f7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c2f7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c2ef
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c2d0
cmp edx, 0xb544ab00
je 0x18000c2fc
inc r8d
cmp r8d, r10d
jb 0x18000c2b0
mov rdi, qword [rdi]
jmp 0x18000c280
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ef0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c3a7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c3a7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c39f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c380
cmp edx, 0x2a654126
je 0x18000c3ac
inc r8d
cmp r8d, r10d
jb 0x18000c360
mov rdi, qword [rdi]
jmp 0x18000c330
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0f38], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c457
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c457
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c44f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c430
cmp edx, 0xde4cdca5
je 0x18000c45c
inc r8d
cmp r8d, r10d
jb 0x18000c410
mov rdi, qword [rdi]
jmp 0x18000c3e0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0f68], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x18000c507
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x18000c507
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000c4ff
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000c4e0
cmp edx, 0xa5356f67
je 0x18000c50c
inc r8d
cmp r8d, r10d
jb 0x18000c4c0
mov rdi, qword [rdi]
jmp 0x18000c490
mov ecx, dword [rbx + 0x24]
mov rsi, qword [rsp + 0x10]
add rcx, r9
mov rdi, qword [rsp + 0x18]
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
mov rbx, qword [rsp + 8]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802e0ee0], rax
ret