Function at 0x18000d850
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d8eb
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d8eb
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d8df
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d8c0
cmp edx, 0xdc3250cb
je 0x18000d8f0
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d8a0
mov rdi, qword [rdi]
jmp 0x18000d870
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180163180], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000d99b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000d99b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000d98f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000d970
cmp edx, 0x52d556ee
je 0x18000d9a0
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000d950
mov rdi, qword [rdi]
jmp 0x18000d920
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180163150], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000da4b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000da4b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000da3f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000da20
cmp edx, 0x2d4afd64
je 0x18000da50
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000da00
mov rdi, qword [rdi]
jmp 0x18000d9d0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180163158], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000dafb
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000dafb
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000daef
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000dad0
cmp edx, 0x615a11c1
je 0x18000db00
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000dab0
mov rdi, qword [rdi]
jmp 0x18000da80
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180163178], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000dbab
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000dbab
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000db9f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000db80
cmp edx, 0xd1f79bec
je 0x18000dbb0
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000db60
mov rdi, qword [rdi]
jmp 0x18000db30
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1801631c0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000dc5b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000dc5b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000dc4f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000dc30
cmp edx, 0x9332acfd
je 0x18000dc60
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000dc10
mov rdi, qword [rdi]
jmp 0x18000dbe0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180163168], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000dd0b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000dd0b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000dcff
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000dce0
cmp edx, 0xb544ab00
je 0x18000dd10
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000dcc0
mov rdi, qword [rdi]
jmp 0x18000dc90
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180163170], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000ddbb
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000ddbb
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000ddaf
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000dd90
cmp edx, 0x2a654126
je 0x18000ddc0
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000dd70
mov rdi, qword [rdi]
jmp 0x18000dd40
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1801631b8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000de6b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000de6b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000de5f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000de40
cmp edx, 0xde4cdca5
je 0x18000de70
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000de20
mov rdi, qword [rdi]
jmp 0x18000ddf0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x1801631e8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
mov r10, qword [rdi + 0x30]
movsxd rax, dword [r10 + 0x3c]
mov ebx, dword [rax + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x18000df1b
mov r11d, dword [rbx + 0x18]
xor r9d, r9d
test r11d, r11d
je 0x18000df1b
mov r8d, dword [rbx + 0x20]
add r8, r10
nop dword [rax + rax]
mov ecx, dword [r8]
mov edx, 0x811c9dc5
add rcx, r10
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18000df0f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x18000def0
cmp edx, 0xa5356f67
je 0x18000df20
inc r9d
add r8, 4
cmp r9d, r11d
jb 0x18000ded0
mov rdi, qword [rdi]
jmp 0x18000dea0
mov ecx, dword [rbx + 0x24]
mov rdi, qword [rsp + 0x10]
add rcx, r10
movzx r8d, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
mov rbx, qword [rsp + 8]
add rcx, r10
mov eax, dword [rcx + r8*4]
add rax, r10
mov qword [0x180163160], rax
ret