Function at 0x180011290
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180011327
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180011327
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18001131f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180011300
cmp edx, 0xdc3250cb
je 0x18001132c
inc r8d
cmp r8d, r10d
jb 0x1800112e0
mov rdi, qword [rdi]
jmp 0x1800112b0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285c30], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1800113d7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x1800113d7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800113cf
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1800113b0
cmp edx, 0x52d556ee
je 0x1800113dc
inc r8d
cmp r8d, r10d
jb 0x180011390
mov rdi, qword [rdi]
jmp 0x180011360
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285be8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180011487
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180011487
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18001147f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180011460
cmp edx, 0x2d4afd64
je 0x18001148c
inc r8d
cmp r8d, r10d
jb 0x180011440
mov rdi, qword [rdi]
jmp 0x180011410
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285bf8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180011537
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180011537
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18001152f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180011510
cmp edx, 0x615a11c1
je 0x18001153c
inc r8d
cmp r8d, r10d
jb 0x1800114f0
mov rdi, qword [rdi]
jmp 0x1800114c0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285c28], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1800115e7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x1800115e7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800115df
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1800115c0
cmp edx, 0xd1f79bec
je 0x1800115ec
inc r8d
cmp r8d, r10d
jb 0x1800115a0
mov rdi, qword [rdi]
jmp 0x180011570
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285ca0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180011697
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180011697
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18001168f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180011670
cmp edx, 0x9332acfd
je 0x18001169c
inc r8d
cmp r8d, r10d
jb 0x180011650
mov rdi, qword [rdi]
jmp 0x180011620
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285c18], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180011747
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180011747
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18001173f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180011720
cmp edx, 0xb544ab00
je 0x18001174c
inc r8d
cmp r8d, r10d
jb 0x180011700
mov rdi, qword [rdi]
jmp 0x1800116d0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285c20], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1800117f7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x1800117f7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800117ef
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1800117d0
cmp edx, 0x2a654126
je 0x1800117fc
inc r8d
cmp r8d, r10d
jb 0x1800117b0
mov rdi, qword [rdi]
jmp 0x180011780
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285c78], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1800118a7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x1800118a7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18001189f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180011880
cmp edx, 0xde4cdca5
je 0x1800118ac
inc r8d
cmp r8d, r10d
jb 0x180011860
mov rdi, qword [rdi]
jmp 0x180011830
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285f68], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180011957
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180011957
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18001194f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180011930
cmp edx, 0xa5356f67
je 0x18001195c
inc r8d
cmp r8d, r10d
jb 0x180011910
mov rdi, qword [rdi]
jmp 0x1800118e0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285c00], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180011a07
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180011a07
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800119ff
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1800119e0
cmp edx, 0xd697c396
je 0x180011a0c
inc r8d
cmp r8d, r10d
jb 0x1800119c0
mov rdi, qword [rdi]
jmp 0x180011990
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285cc8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180011ab7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180011ab7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180011aaf
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180011a90
cmp edx, 0xda09a27f
je 0x180011abc
inc r8d
cmp r8d, r10d
jb 0x180011a70
mov rdi, qword [rdi]
jmp 0x180011a40
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285c08], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180011b67
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180011b67
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [r9 + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + rsi]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180011b5f
nop dword [rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180011b40
cmp edx, 0xb0640550
je 0x180011b6c
inc r8d
cmp r8d, r10d
jb 0x180011b20
mov rdi, qword [rdi]
jmp 0x180011af0
mov ecx, dword [rbx + 0x24]
mov rsi, qword [rsp + 0x10]
add rcx, r9
mov rdi, qword [rsp + 0x18]
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
mov rbx, qword [rsp + 8]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180285c10], rax
ret