Function at 0x140002562
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
movabs rsi, 0x5d1643445642405f
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x2f], 0x3c57565d
xor eax, eax
lea ecx, [rax + 0x32]
xor byte [rsp + rax + 0x28], cl
inc rax
cmp rax, 0xb
jne 0x140002583
lea rcx, [rsp + 0x28]
call fcn.14000248c
mov qword [0x140005198], rax
test rax, rax
je 0x140002ef5
mov qword [rsp + 0x28], rsi
mov dword [rsp + 0x2f], 0x3c57565d
xor eax, eax
lea ecx, [rax + 0x32]
xor byte [rsp + rax + 0x28], cl
inc rax
cmp rax, 0xb
jne 0x1400025bc
movsxd rdx, dword [0x140005188]
inc rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd r8, dword [rax + 0x3c]
mov r8d, dword [rax + r8 + 0x88]
test r8, r8
je 0x1400025e7
mov r9d, dword [rax + r8 + 0x18]
test r9, r9
je 0x1400025e7
mov r10d, dword [rax + r8 + 0x20]
add r10, rax
lea rsi, [rax + 1]
dec r9
mov r11d, r9d
mov edi, dword [r10 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x14000264a
add rdi, rsi
mov ebp, 0x13de4e71
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x14000262e
cmp ebp, 0x8a99bcb9
je 0x140002651
test r11, r11
jne 0x140002615
jmp 0x1400025e7
shl rdx, 4
mov ecx, dword [rax + r8 + 0x1c]
mov r8d, dword [rax + r8 + 0x24]
add rcx, rax
add r8, rax
movzx r8d, word [r8 + r11*2]
mov r8d, dword [rcx + r8*4]
add r8, rax
mov rcx, qword [0x140005190]
call r8
mov qword [0x140005190], rax
test rax, rax
je 0x1400026c2
mov rcx, qword [0x140005198]
movsxd rdx, dword [0x140005188]
lea r8d, [rdx + 1]
shl rdx, 4
mov qword [rax + rdx + 8], rcx
mov rax, qword [0x140005190]
mov dword [rax + rdx + 4], 0
cmp qword [rax + rdx + 8], 0
setne byte [rax + rdx]
mov dword [0x140005188], r8d
movabs rax, 0x5d1605056a064045
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x2f], 0x3c57565d
xor eax, eax
lea ecx, [rax + 0x32]
xor byte [rsp + rax + 0x28], cl
inc rax
cmp rax, 0xb
jne 0x1400026db
movsxd rdx, dword [0x140005188]
inc rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd r8, dword [rax + 0x3c]
mov r8d, dword [rax + r8 + 0x88]
test r8, r8
je 0x140002706
mov r9d, dword [rax + r8 + 0x18]
test r9, r9
je 0x140002706
mov r10d, dword [rax + r8 + 0x20]
add r10, rax
lea rsi, [rax + 1]
dec r9
mov r11d, r9d
mov edi, dword [r10 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x140002769
add rdi, rsi
mov ebp, 0x13de4e71
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x14000274d
cmp ebp, 0x8a99bcb9
je 0x140002770
test r11, r11
jne 0x140002734
jmp 0x140002706
shl rdx, 4
mov ecx, dword [rax + r8 + 0x1c]
mov r8d, dword [rax + r8 + 0x24]
add rcx, rax
add r8, rax
movzx r8d, word [r8 + r11*2]
mov r8d, dword [rcx + r8*4]
add r8, rax
mov rcx, qword [0x140005190]
call r8
mov qword [0x140005190], rax
test rax, rax
je 0x1400027eb
lea rcx, [rsp + 0x28]
call fcn.14000248c
mov rcx, qword [0x140005190]
movsxd rdx, dword [0x140005188]
lea r8d, [rdx + 1]
shl rdx, 4
mov qword [rcx + rdx + 8], rax
mov dword [rcx + rdx + 4], 1
mov rax, qword [0x140005190]
cmp qword [rax + rdx + 8], 0
setne byte [rax + rdx]
mov dword [0x140005188], r8d
movabs rax, 0x3e51505f14504856
mov qword [rsp + 0x2d], rax
movabs rax, 0x50485646595c435b
mov qword [rsp + 0x28], rax
xor eax, eax
lea ecx, [rax + 0x32]
xor byte [rsp + rax + 0x28], cl
inc rax
cmp rax, 0xd
jne 0x14000280b
movsxd rdx, dword [0x140005188]
inc rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd r8, dword [rax + 0x3c]
mov r8d, dword [rax + r8 + 0x88]
test r8, r8
je 0x140002836
mov r9d, dword [rax + r8 + 0x18]
test r9, r9
je 0x140002836
mov r10d, dword [rax + r8 + 0x20]
add r10, rax
lea rsi, [rax + 1]
dec r9
mov r11d, r9d
mov edi, dword [r10 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x140002899
add rdi, rsi
mov ebp, 0x13de4e71
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x14000287d
cmp ebp, 0x8a99bcb9
je 0x1400028a0
test r11, r11
jne 0x140002864
jmp 0x140002836
shl rdx, 4
mov ecx, dword [rax + r8 + 0x1c]
mov r8d, dword [rax + r8 + 0x24]
add rcx, rax
add r8, rax
movzx r8d, word [r8 + r11*2]
mov r8d, dword [rcx + r8*4]
add r8, rax
mov rcx, qword [0x140005190]
call r8
mov qword [0x140005190], rax
test rax, rax
je 0x14000291b
lea rcx, [rsp + 0x28]
call fcn.14000248c
mov rcx, qword [0x140005190]
movsxd rdx, dword [0x140005188]
lea r8d, [rdx + 1]
shl rdx, 4
mov qword [rcx + rdx + 8], rax
mov dword [rcx + rdx + 4], 2
mov rax, qword [0x140005190]
cmp qword [rax + rdx + 8], 0
setne byte [rax + rdx]
mov dword [0x140005188], r8d
movabs rax, 0x3e51505f140b0b5b
mov qword [rsp + 0x2d], rax
movabs rax, 0xb0b5b535b465659
mov qword [rsp + 0x28], rax
xor eax, eax
lea ecx, [rax + 0x32]
xor byte [rsp + rax + 0x28], cl
inc rax
cmp rax, 0xd
jne 0x14000293b
movsxd rdx, dword [0x140005188]
inc rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd r8, dword [rax + 0x3c]
mov r8d, dword [rax + r8 + 0x88]
test r8, r8
je 0x140002966
mov r9d, dword [rax + r8 + 0x18]
test r9, r9
je 0x140002966
mov r10d, dword [rax + r8 + 0x20]
add r10, rax
lea rsi, [rax + 1]
dec r9
mov r11d, r9d
mov edi, dword [r10 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x1400029c9
add rdi, rsi
mov ebp, 0x13de4e71
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x1400029ad
cmp ebp, 0x8a99bcb9
je 0x1400029d0
test r11, r11
jne 0x140002994
jmp 0x140002966
shl rdx, 4
mov ecx, dword [rax + r8 + 0x1c]
mov r8d, dword [rax + r8 + 0x24]
add rcx, rax
add r8, rax
movzx r8d, word [r8 + r11*2]
mov r8d, dword [rcx + r8*4]
add r8, rax
mov rcx, qword [0x140005190]
call r8
mov qword [0x140005190], rax
test rax, rax
je 0x140002a4b
lea rcx, [rsp + 0x28]
call fcn.14000248c
mov rcx, qword [0x140005190]
movsxd rdx, dword [0x140005188]
lea r8d, [rdx + 1]
shl rdx, 4
mov qword [rcx + rdx + 8], rax
mov dword [rcx + rdx + 4], 3
mov rax, qword [0x140005190]
cmp qword [rax + rdx + 8], 0
setne byte [rax + rdx]
mov dword [0x140005188], r8d
movabs rax, 0x170a045a59515b61
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], 0x3d50575e
xor eax, eax
lea ecx, [rax + 0x32]
xor byte [rsp + rax + 0x28], cl
inc rax
cmp rax, 0xc
jne 0x140002a64
movsxd rdx, dword [0x140005188]
inc rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd r8, dword [rax + 0x3c]
mov r8d, dword [rax + r8 + 0x88]
test r8, r8
je 0x140002a8f
mov r9d, dword [rax + r8 + 0x18]
test r9, r9
je 0x140002a8f
mov r10d, dword [rax + r8 + 0x20]
add r10, rax
lea rsi, [rax + 1]
dec r9
mov r11d, r9d
mov edi, dword [r10 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x140002af2
add rdi, rsi
mov ebp, 0x13de4e71
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x140002ad6
cmp ebp, 0x8a99bcb9
je 0x140002af9
test r11, r11
jne 0x140002abd
jmp 0x140002a8f
shl rdx, 4
mov ecx, dword [rax + r8 + 0x1c]
mov r8d, dword [rax + r8 + 0x24]
add rcx, rax
add r8, rax
movzx r8d, word [r8 + r11*2]
mov r8d, dword [rcx + r8*4]
add r8, rax
mov rcx, qword [0x140005190]
call r8
mov qword [0x140005190], rax
test rax, rax
je 0x140002b74
lea rcx, [rsp + 0x28]
call fcn.14000248c
mov rcx, qword [0x140005190]
movsxd rdx, dword [0x140005188]
lea r8d, [rdx + 1]
shl rdx, 4
mov qword [rcx + rdx + 8], rax
mov dword [rcx + rdx + 4], 4
mov rax, qword [0x140005190]
cmp qword [rax + rdx + 8], 0
setne byte [rax + rdx]
mov dword [0x140005188], r8d
movabs rax, 0x3e51505f140b0b5e
mov qword [rsp + 0x2d], rax
movabs rax, 0xb0b5e4654425773
mov qword [rsp + 0x28], rax
xor eax, eax
lea ecx, [rax + 0x32]
xor byte [rsp + rax + 0x28], cl
inc rax
cmp rax, 0xd
jne 0x140002b94
movsxd rdx, dword [0x140005188]
inc rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd r8, dword [rax + 0x3c]
mov r8d, dword [rax + r8 + 0x88]
test r8, r8
je 0x140002bbf
mov r9d, dword [rax + r8 + 0x18]
test r9, r9
je 0x140002bbf
mov r10d, dword [rax + r8 + 0x20]
add r10, rax
lea rsi, [rax + 1]
dec r9
mov r11d, r9d
mov edi, dword [r10 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x140002c22
add rdi, rsi
mov ebp, 0x13de4e71
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x140002c06
cmp ebp, 0x8a99bcb9
je 0x140002c29
test r11, r11
jne 0x140002bed
jmp 0x140002bbf
shl rdx, 4
mov ecx, dword [rax + r8 + 0x1c]
mov r8d, dword [rax + r8 + 0x24]
add rcx, rax
add r8, rax
movzx r8d, word [r8 + r11*2]
mov r8d, dword [rcx + r8*4]
add r8, rax
mov rcx, qword [0x140005190]
call r8
mov qword [0x140005190], rax
test rax, rax
je 0x140002ca4
lea rcx, [rsp + 0x28]
call fcn.14000248c
mov rcx, qword [0x140005190]
movsxd rdx, dword [0x140005188]
lea r8d, [rdx + 1]
shl rdx, 4
mov qword [rcx + rdx + 8], rax
mov dword [rcx + rdx + 4], 5
mov rax, qword [0x140005190]
cmp qword [rax + rdx + 8], 0
setne byte [rax + rdx]
mov dword [0x140005188], r8d
movabs rax, 0x170a044440575661
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x30], 0x3d50575e
xor eax, eax
lea ecx, [rax + 0x32]
xor byte [rsp + rax + 0x28], cl
inc rax
cmp rax, 0xc
jne 0x140002cbd
movsxd rdx, dword [0x140005188]
inc rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd r8, dword [rax + 0x3c]
mov r8d, dword [rax + r8 + 0x88]
test r8, r8
je 0x140002ce8
mov r9d, dword [rax + r8 + 0x18]
test r9, r9
je 0x140002ce8
mov r10d, dword [rax + r8 + 0x20]
add r10, rax
lea rsi, [rax + 1]
dec r9
mov r11d, r9d
mov edi, dword [r10 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x140002d4b
add rdi, rsi
mov ebp, 0x13de4e71
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x140002d2f
cmp ebp, 0x8a99bcb9
je 0x140002d52
test r11, r11
jne 0x140002d16
jmp 0x140002ce8
shl rdx, 4
mov ecx, dword [rax + r8 + 0x1c]
mov r8d, dword [rax + r8 + 0x24]
add rcx, rax
add r8, rax
movzx r8d, word [r8 + r11*2]
mov r8d, dword [rcx + r8*4]
add r8, rax
mov rcx, qword [0x140005190]
call r8
mov qword [0x140005190], rax
test rax, rax
je 0x140002dcd
lea rcx, [rsp + 0x28]
call fcn.14000248c
mov rcx, qword [0x140005190]
movsxd rdx, dword [0x140005188]
lea r8d, [rdx + 1]
shl rdx, 4
mov qword [rcx + rdx + 8], rax
mov dword [rcx + rdx + 4], 6
mov rax, qword [0x140005190]
cmp qword [rax + rdx + 8], 0
setne byte [rax + rdx]
mov dword [0x140005188], r8d
movabs rax, 0x555c195a5950475c
mov qword [rsp + 0x28], rax
mov word [rsp + 0x30], 0x3b56
xor eax, eax
lea ecx, [rax + 0x32]
xor byte [rsp + rax + 0x28], cl
inc rax
cmp rax, 0xa
jne 0x140002de5
movsxd rdx, dword [0x140005188]
inc rdx
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
add rcx, 0x10
mov rcx, qword [rcx]
mov rax, qword [rcx + 0x30]
movsxd r8, dword [rax + 0x3c]
mov r8d, dword [rax + r8 + 0x88]
test r8, r8
je 0x140002e10
mov r9d, dword [rax + r8 + 0x18]
test r9, r9
je 0x140002e10
mov r10d, dword [rax + r8 + 0x20]
add r10, rax
lea rsi, [rax + 1]
dec r9
mov r11d, r9d
mov edi, dword [r10 + r11*4]
mov bl, byte [rax + rdi]
test bl, bl
je 0x140002e73
add rdi, rsi
mov ebp, 0x13de4e71
movsx ebx, bl
xor ebx, ebp
imul ebp, ebx, 0x1000193
mov bl, byte [rdi]
inc rdi
test bl, bl
jne 0x140002e57
cmp ebp, 0x8a99bcb9
je 0x140002e7a
test r11, r11
jne 0x140002e3e
jmp 0x140002e10
shl rdx, 4
mov ecx, dword [rax + r8 + 0x1c]
mov r8d, dword [rax + r8 + 0x24]
add rcx, rax
add r8, rax
movzx r8d, word [r8 + r11*2]
mov r8d, dword [rcx + r8*4]
add r8, rax
mov rcx, qword [0x140005190]
call r8
mov qword [0x140005190], rax
test rax, rax
je 0x140002ef5
lea rcx, [rsp + 0x28]
call fcn.14000248c
mov rcx, qword [0x140005190]
movsxd rdx, dword [0x140005188]
lea r8d, [rdx + 1]
shl rdx, 4
mov qword [rcx + rdx + 8], rax
mov dword [rcx + rdx + 4], 7
mov rax, qword [0x140005190]
cmp qword [rax + rdx + 8], 0
setne byte [rax + rdx]
mov dword [0x140005188], r8d
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
ret