Function at 0x140002240
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rsi
sub rsp, 0x20
mov rax, qword [rcx + 8]
mov rsi, rcx
cmp rax, qword [rcx + 0x10]
je 0x14000225b
mov qword [rcx + 0x10], rax
cmp byte [0x14019cd40], 0
mov qword [rsp + 0x38], rdi
je 0x140002534
mov ecx, dword [0x14019cd38]
test ecx, ecx
je 0x140002534
sub ecx, 1
je 0x140002524
sub ecx, 1
je 0x14000244d
sub ecx, 1
je 0x140002375
cmp ecx, 1
jne 0x140002534
mov rax, qword [0x1401945b0]
test rax, rax
jne 0x14000235a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
test r10, r10
je 0x140002337
cmp word [rax + 0x48], 0
je 0x140002337
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140002337
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140002337
mov edi, dword [rbx + 0x20]
dec r9d
mov r8d, 0xe34409c0
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140002332
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140002310
cmp r8d, 0x9b49240c
je 0x14000233c
test r9d, r9d
jne 0x1400022f0
mov rax, qword [rax]
jmp 0x1400022c0
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x1401945b0], rax
mov ecx, dword [0x14019cd34]
call rax
movsx rcx, ax
shr rcx, 0x10
test cx, cx
sete al
jmp 0x140002520
mov rax, qword [0x140194d58]
test rax, rax
jne 0x14000243d
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r10, qword [rax + 0x30]
test r10, r10
je 0x140002417
cmp word [rax + 0x48], 0
je 0x140002417
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x140002417
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x140002417
mov edi, dword [rbx + 0x20]
nop word [rax + rax]
dec r9d
mov r8d, 0xe641cfe2
lea rcx, [rdi + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140002412
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400023f0
cmp r8d, 0x37cb6086
je 0x14000241f
test r9d, r9d
jne 0x1400023d0
mov rax, qword [rax]
jmp 0x140002396
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x140194d58], rax
mov ecx, dword [0x14019cd34]
call rax
test ax, ax
jmp 0x14000251d
mov rax, qword [0x140194578]
test rax, rax
jne 0x14000250a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
test r10, r10
je 0x1400024e7
cmp word [rax + 0x48], 0
je 0x1400024e7
movsxd rcx, dword [r10 + 0x3c]
mov ebx, dword [rcx + r10 + 0x88]
add rbx, r10
cmp rbx, r10
je 0x1400024e7
mov r9d, dword [rbx + 0x18]
test r9d, r9d
je 0x1400024e7
mov edi, dword [rbx + 0x20]
dec r9d
mov r8d, 0xf93faf34
lea rcx, [rdi + r9*4]
mov ecx, dword [rcx + r10]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1400024e2
nop
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x1400024c0
cmp r8d, 0x4201a40
je 0x1400024ec
test r9d, r9d
jne 0x1400024a0
mov rax, qword [rax]
jmp 0x140002470
mov ecx, dword [rbx + 0x24]
add rcx, r10
movzx edx, word [rcx + r9*2]
mov ecx, dword [rbx + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
add rax, r10
mov qword [0x140194578], rax
mov ecx, dword [0x14019cd34]
call rax
movsx rcx, ax
shr rcx, 0x10
test cx, cx
setne al
test al, al
je 0x140002534
movsxd rax, dword [rsi]
lea rbx, [rax + rax*2]
lea rax, [0x14019cd50]
jmp 0x140002542
movsxd rax, dword [rsi]
lea rbx, [rax + rax*4]
lea rax, [0x14019c0b8]
mov rdi, qword [rsp + 0x38]
shl rbx, 4
add rbx, rax
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
sub rax, rcx
sar rax, 2
test rax, rax
je 0x1400026be
cmp dword [rcx], 0
je 0x1400025c4
mov rdx, qword [rsi + 0x10]
lea rcx, [rsi + 8]
mov dword [rsp + 0x30], 6
cmp rdx, qword [rsi + 0x18]
je 0x14000258d
mov dword [rdx], 6
add qword [rcx + 8], 4
jmp 0x140002597
lea r8, [rsp + 0x30]
call fcn.140005e30
mov rdx, qword [rsi + 0x10]
lea rcx, [rsi + 8]
mov dword [rsp + 0x30], 5
cmp rdx, qword [rsi + 0x18]
je 0x1400025ba
mov dword [rdx], 5
add qword [rcx + 8], 4
jmp 0x1400025c4
lea r8, [rsp + 0x30]
call fcn.140005e30
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
sub rax, rcx
sar rax, 2
cmp rax, 1
jbe 0x1400026be
cmp dword [rcx + 4], 0
je 0x14000263c
mov rdx, qword [rsi + 0x10]
lea rcx, [rsi + 8]
mov dword [rsp + 0x30], 4
cmp rdx, qword [rsi + 0x18]
je 0x140002605
mov dword [rdx], 4
add qword [rcx + 8], 4
jmp 0x14000260f
lea r8, [rsp + 0x30]
call fcn.140005e30
mov rdx, qword [rsi + 0x10]
lea rcx, [rsi + 8]
mov dword [rsp + 0x30], 3
cmp rdx, qword [rsi + 0x18]
je 0x140002632
mov dword [rdx], 3
add qword [rcx + 8], 4
jmp 0x14000263c
lea r8, [rsp + 0x30]
call fcn.140005e30
mov rcx, qword [rbx]
mov rax, qword [rbx + 8]
sub rax, rcx
sar rax, 2
cmp rax, 2
jbe 0x1400026be
cmp dword [rcx + 8], 0
je 0x14000269e
mov rdx, qword [rsi + 0x10]
lea rcx, [rsi + 8]
xor eax, eax
mov dword [rsp + 0x30], eax
cmp rdx, qword [rsi + 0x18]
je 0x140002673
mov dword [rdx], eax
add qword [rcx + 8], 4
jmp 0x14000267d
lea r8, [rsp + 0x30]
call fcn.140005e30
mov rdx, qword [rsi + 0x10]
lea rcx, [rsi + 8]
mov dword [rsp + 0x30], 2
cmp rdx, qword [rsi + 0x18]
je 0x1400026a9
mov dword [rdx], 2
add qword [rcx + 8], 4
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
ret
lea r8, [rsp + 0x30]
call fcn.140005e30
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rsi
ret
call fcn.140005800
int3