Function at 0x180029070
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop word [rax + rax]
mov rcx, qword [rax + 0x60]
mov r10d, 0x4837a05e
movzx edx, word [rax + 0x58]
shr rdx, 1
lea r11, [rcx + rdx*2]
cmp rcx, r11
je 0x1800290e3
nop word [rax + rax]
movsx edx, byte [rcx]
mov r8d, edx
sub dl, 0x41
mov r9d, r8d
or r9d, 0x20
cmp dl, 0x19
cmova r9d, r8d
add rcx, 2
xor r9d, r10d
imul r10d, r9d, 0x1000193
cmp rcx, r11
jne 0x1800290b0
cmp r10d, 0x61695371
je 0x1800290e8
mov rax, qword [rax]
jmp 0x180029090
mov r10, qword [rax + 0x30]
xor ebx, ebx
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x48], r14
test r10, r10
je 0x180029191
movsxd rax, dword [r10 + 0x3c]
mov ebp, dword [rax + r10 + 0x88]
add rbp, r10
cmp rbp, r10
je 0x180029191
mov esi, dword [rbp + 0x18]
mov r9d, ebx
test esi, esi
je 0x180029191
mov r14d, dword [rbp + 0x20]
nop dword [rax]
mov edi, r9d
mov r11d, 0x79644e5a
lea rax, [r14 + rdi*4]
mov edx, dword [rax + r10]
add rdx, r10
movzx r8d, byte [rdx]
inc rdx
test r8b, r8b
je 0x180029189
movsx eax, r8b
lea rdx, [rdx + 1]
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rdx - 1]
cmova ecx, eax
xor ecx, r11d
imul r11d, ecx, 0x1000193
test r8b, r8b
jne 0x180029150
cmp r11d, 0x4c8c8111
je 0x180029208
inc r9d
cmp r9d, esi
jne 0x180029130
mov rax, rbx
call rax
mov qword [0x18009d4b0], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r9, qword [rax + 0x60]
mov r10d, 0x4837a05e
movzx ecx, word [rax + 0x58]
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x180029203
nop word [rax + rax]
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x1800291d0
cmp r10d, 0x61695371
je 0x180029223
mov rax, qword [rax]
jmp 0x1800291b0
mov ecx, dword [rbp + 0x24]
add rcx, r10
movzx edx, word [rcx + rdi*2]
mov ecx, dword [rbp + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
jmp 0x180029194
mov r11, qword [rax + 0x30]
test r11, r11
je 0x1800292b3
movsxd rax, dword [r11 + 0x3c]
mov ebp, dword [rax + r11 + 0x88]
add rbp, r11
cmp rbp, r11
je 0x1800292b3
mov esi, dword [rbp + 0x18]
mov r9d, ebx
test esi, esi
je 0x1800292b3
mov r14d, dword [rbp + 0x20]
mov edi, r9d
mov r10d, 0x20829189
lea rax, [r14 + rdi*4]
mov edx, dword [rax + r11]
add rdx, r11
movzx r8d, byte [rdx]
inc rdx
test r8b, r8b
je 0x1800292ab
movsx eax, r8b
lea rdx, [rdx + 1]
sub r8b, 0x41
mov ecx, eax
or ecx, 0x20
cmp r8b, 0x19
movzx r8d, byte [rdx - 1]
cmova ecx, eax
xor ecx, r10d
imul r10d, ecx, 0x1000193
test r8b, r8b
jne 0x180029272
cmp r10d, 0xa20ed7f9
je 0x180029328
inc r9d
cmp r9d, esi
jne 0x180029252
mov rax, rbx
call rax
mov qword [0x18009d4b8], rax
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r9, qword [rax + 0x60]
mov r10d, 0x4837a05e
movzx ecx, word [rax + 0x58]
shr rcx, 1
lea r11, [r9 + rcx*2]
cmp r9, r11
je 0x180029323
nop word [rax + rax]
movsx ecx, byte [r9]
mov edx, ecx
sub cl, 0x41
mov r8d, edx
or r8d, 0x20
cmp cl, 0x19
cmova r8d, edx
add r9, 2
xor r8d, r10d
imul r10d, r8d, 0x1000193
cmp r9, r11
jne 0x1800292f0
cmp r10d, 0x61695371
je 0x180029343
mov rax, qword [rax]
jmp 0x1800292d0
mov ecx, dword [rbp + 0x24]
add rcx, r11
movzx edx, word [rcx + rdi*2]
mov ecx, dword [rbp + 0x1c]
add rcx, r11
mov eax, dword [rcx + rdx*4]
add rax, r11
jmp 0x1800292b6
mov r11, qword [rax + 0x30]
test r11, r11
je 0x1800293f1
movsxd rax, dword [r11 + 0x3c]
mov ebp, dword [rax + r11 + 0x88]
add rbp, r11
cmp rbp, r11
je 0x1800293f1
mov esi, dword [rbp + 0x18]
mov r10d, ebx
test esi, esi
je 0x1800293f1
mov r14d, dword [rbp + 0x20]
nop word [rax + rax]
mov edi, r10d
mov r9d, 0xc5c7a09d
lea rax, [r14 + rdi*4]
mov r8d, dword [rax + r11]
add r8, r11
movzx edx, byte [r8]
inc r8
test dl, dl
je 0x1800293d1
nop
movsx eax, dl
lea r8, [r8 + 1]
sub dl, 0x41
mov ecx, eax
or ecx, 0x20
cmp dl, 0x19
movzx edx, byte [r8 - 1]
cmova ecx, eax
xor ecx, r9d
imul r9d, ecx, 0x1000193
test dl, dl
jne 0x1800293a0
cmp r9d, 0x254c5b5e
je 0x1800293db
inc r10d
cmp r10d, esi
jne 0x180029380
jmp 0x1800293f1
mov ecx, dword [rbp + 0x24]
add rcx, r11
movzx edx, word [rcx + rdi*2]
mov ecx, dword [rbp + 0x1c]
add rcx, r11
mov ebx, dword [rcx + rdx*4]
add rbx, r11
call rbx
mov rcx, qword [0x18009d4b0]
lea r9, [0x18000cff0]
mov qword [0x18009d4c0], rax
mov r8, rax
mov rdx, qword [rcx]
mov r10, qword [rdx + 0xb8]
mov rdx, qword [0x18009d4b8]
call r10
mov rcx, qword [0x18009d4b0]
lea r8, [0x18000d010]
mov rdx, qword [0x18009d4c0]
mov qword [0x18009d4c8], rax
mov rax, qword [rcx]
call qword [rax + 0x48]
mov r14, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x30]
mov qword [0x18009d4d0], rax
add rsp, 0x20
pop rbx
ret