Function at 0x1800209f0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
lea rdx, str.48_83_EC_48_48_8B_05_________48_63_90________
lea rcx, [0x18006be30]
call fcn.180063b30
mov qword [0x1802026b0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop word [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180020aa7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180020aa7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180020a9f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180020a80
cmp edx, 0x595fa990
je 0x180020aac
inc r8d
cmp r8d, r10d
jb 0x180020a60
mov rdi, qword [rdi]
jmp 0x180020a30
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802026f8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180020b57
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180020b57
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180020b4f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180020b30
cmp edx, 0xdc3250cb
je 0x180020b5c
inc r8d
cmp r8d, r10d
jb 0x180020b10
mov rdi, qword [rdi]
jmp 0x180020ae0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180202540], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180020c07
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180020c07
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180020bff
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180020be0
cmp edx, 0x52d556ee
je 0x180020c0c
inc r8d
cmp r8d, r10d
jb 0x180020bc0
mov rdi, qword [rdi]
jmp 0x180020b90
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180202518], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180020cb7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180020cb7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180020caf
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180020c90
cmp edx, 0x2d4afd64
je 0x180020cbc
inc r8d
cmp r8d, r10d
jb 0x180020c70
mov rdi, qword [rdi]
jmp 0x180020c40
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180202598], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180020d67
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180020d67
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180020d5f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180020d40
cmp edx, 0x615a11c1
je 0x180020d6c
inc r8d
cmp r8d, r10d
jb 0x180020d20
mov rdi, qword [rdi]
jmp 0x180020cf0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802025a0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180020e17
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180020e17
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180020e0f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180020df0
cmp edx, 0xd1f79bec
je 0x180020e1c
inc r8d
cmp r8d, r10d
jb 0x180020dd0
mov rdi, qword [rdi]
jmp 0x180020da0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802026d0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180020ec7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180020ec7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180020ebf
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180020ea0
cmp edx, 0x9332acfd
je 0x180020ecc
inc r8d
cmp r8d, r10d
jb 0x180020e80
mov rdi, qword [rdi]
jmp 0x180020e50
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180202670], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180020f77
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180020f77
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x180020f6f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180020f50
cmp edx, 0xb544ab00
je 0x180020f7c
inc r8d
cmp r8d, r10d
jb 0x180020f30
mov rdi, qword [rdi]
jmp 0x180020f00
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180202508], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180021027
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180021027
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18002101f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180021000
cmp edx, 0x2a654126
je 0x18002102c
inc r8d
cmp r8d, r10d
jb 0x180020fe0
mov rdi, qword [rdi]
jmp 0x180020fb0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802026b8], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1800210d7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x1800210d7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800210cf
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1800210b0
cmp edx, 0xde4cdca5
je 0x1800210dc
inc r8d
cmp r8d, r10d
jb 0x180021090
mov rdi, qword [rdi]
jmp 0x180021060
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180202728], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180021187
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180021187
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18002117f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180021160
cmp edx, 0xa5356f67
je 0x18002118c
inc r8d
cmp r8d, r10d
jb 0x180021140
mov rdi, qword [rdi]
jmp 0x180021110
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802025e0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x180021237
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x180021237
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x18002122f
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x180021210
cmp edx, 0xd697c396
je 0x18002123c
inc r8d
cmp r8d, r10d
jb 0x1800211f0
mov rdi, qword [rdi]
jmp 0x1800211c0
mov ecx, dword [rbx + 0x24]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x1802026f0], rax
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rdi, qword [rcx + 0x10]
nop dword [rax + rax]
mov r9, qword [rdi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov ebx, dword [rax + r9 + 0x88]
add rbx, r9
cmp rbx, r9
je 0x1800212e7
mov r10d, dword [rbx + 0x18]
xor r8d, r8d
test r10d, r10d
je 0x1800212e7
mov esi, dword [rbx + 0x20]
nop word [rax + rax]
lea rax, [rsi + r8*4]
mov edx, 0x811c9dc5
mov ecx, dword [rax + r9]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x1800212df
nop word [rax + rax]
movsx eax, al
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
movzx eax, byte [rcx - 1]
test al, al
jne 0x1800212c0
cmp edx, 0x2164fbe
je 0x1800212ec
inc r8d
cmp r8d, r10d
jb 0x1800212a0
mov rdi, qword [rdi]
jmp 0x180021270
mov ecx, dword [rbx + 0x24]
mov rsi, qword [rsp + 0x38]
add rcx, r9
movzx edx, word [rcx + r8*2]
mov ecx, dword [rbx + 0x1c]
mov rbx, qword [rsp + 0x30]
add rcx, r9
mov eax, dword [rcx + rdx*4]
add rax, r9
mov qword [0x180202530], rax
add rsp, 0x20
pop rdi
ret