Function at 0x1400023b0
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
mov rbp, rsp
sub rsp, 0x38
cmp byte [0x1400072e9], 0
mov rsi, rcx
movsd xmm0, qword [str.GPYZ]
movzx eax, word [0x1400072e8]
movsd qword [rbp - 0x18], xmm0
mov word [rbp - 0x10], ax
je 0x140002410
xor byte [rbp - 0x17], 0x33
xor byte [rbp - 0x16], 0x34
xor byte [rbp - 0x15], 0x35
xor byte [rbp - 0x14], 0x36
xor byte [rbp - 0x13], 0x37
xor byte [rbp - 0x12], 0x38
xor byte [rbp - 0x11], 0x39
xor byte [rbp - 0x10], 0x3a
xor byte [rbp - 0xf], 0x3b
mov byte [rbp - 0x18], 0x6e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400024a7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400024a7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x2293fba4
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x1400024a2
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x140002480
cmp r8d, 0x175c332d
je 0x1400024ac
test r9d, r9d
jne 0x140002460
mov rax, qword [rax]
jmp 0x140002430
mov ecx, dword [rdi + 0x24]
add rcx, r10
mov qword [rsp + 0x88], r14
mov qword [rsp + 0x30], r15
movzx edx, word [rcx + r9*2]
mov ecx, dword [rdi + 0x1c]
add rcx, r10
mov eax, dword [rcx + rdx*4]
lea rcx, [rbp - 0x18]
add rax, r10
call rax
movsxd r12, dword [rsi + 0x3c]
mov r13, rax
add r12, rsi
je 0x140002730
movzx r14d, word [r12 + 0x14]
xor r15d, r15d
add r14, 0x18
mov dword [rbp + 0x40], r15d
add r14, r12
cmp r15w, word [r12 + 6]
jae 0x140002729
nop word [rax + rax]
mov eax, dword [0x140007330]
lea r8, [rbp + 0x48]
mov dword [rbp + 0x48], eax
movzx eax, word [0x140007334]
xor byte [rbp + 0x49], 0x33
xor byte [rbp + 0x4a], 0x34
xor byte [rbp + 0x4b], 0x35
mov word [rbp + 0x4c], ax
xor al, 0x36
xor byte [rbp + 0x4d], 0x37
mov byte [rbp + 0x4c], al
sub r8, r14
mov rax, r14
mov byte [rbp + 0x48], 0x2e
nop word [rax + rax]
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140002563
inc rax
test ecx, ecx
jne 0x140002550
test edx, edx
jne 0x140002719
mov rax, qword gs:[0x60]
mov esi, dword [r14 + 0xc]
add rsi, r13
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop dword [rax]
nop word [rax + rax]
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x140002607
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x140002607
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0x80f30064
lea rcx, [rbx + r9*4]
mov edx, dword [rcx + r10]
add rdx, r10
movzx ecx, byte [rdx]
inc rdx
test cl, cl
je 0x140002602
nop
movsx ecx, cl
lea rdx, [rdx + 1]
xor ecx, r8d
imul r8d, ecx, 0x1000193
movzx ecx, byte [rdx - 1]
test cl, cl
jne 0x1400025e0
cmp r8d, 0x287315d6
je 0x14000260c
test r9d, r9d
jne 0x1400025c0
mov rax, qword [rax]
jmp 0x140002590
mov edx, dword [rdi + 0x24]
mov rcx, rsi
add rdx, r10
movzx r8d, word [rdx + r9*2]
lea r9, [rbp + 0x40]
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdx + r8*4]
mov r8d, 0x40
mov edx, dword [r14 + 8]
add rax, r10
call rax
test eax, eax
je 0x140002730
mov eax, dword [r14 + 0xc]
mov rdx, qword [rbp + 0x38]
mov r8d, dword [r14 + 8]
add rdx, rax
lea rcx, [rax + r13]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword gs:[0x60]
mov esi, dword [r14 + 0xc]
add rsi, r13
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
nop
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov edi, dword [rcx + r10 + 0x88]
add rdi, r10
cmp rdi, r10
je 0x1400026e7
mov r9d, dword [rdi + 0x18]
test r9d, r9d
je 0x1400026e7
mov ebx, dword [rdi + 0x20]
nop dword [rax]
nop dword [rax + rax]
dec r9d
mov r8d, 0xbe588cf3
lea rcx, [r10 + r9*4]
mov ecx, dword [rcx + rbx]
add rcx, r10
movzx edx, byte [rcx]
inc rcx
test dl, dl
je 0x1400026e2
nop dword [rax]
movsx edx, dl
lea rcx, [rcx + 1]
xor edx, r8d
imul r8d, edx, 0x1000193
movzx edx, byte [rcx - 1]
test dl, dl
jne 0x1400026c0
cmp r8d, 0xe5aec29d
je 0x1400026ec
test r9d, r9d
jne 0x1400026a0
mov rax, qword [rax]
jmp 0x140002670
mov edx, dword [rdi + 0x24]
mov rcx, rsi
add rdx, r10
movzx r8d, word [rdx + r9*2]
lea r9, [rbp + 0x40]
mov edx, dword [rdi + 0x1c]
add rdx, r10
mov eax, dword [rdx + r8*4]
mov edx, dword [r14 + 8]
add rax, r10
mov r8d, dword [rbp + 0x40]
call rax
test eax, eax
je 0x140002730
inc r15w
cmp r15w, word [r12 + 6]
jb 0x140002510
mov eax, 1
jmp 0x140002732
xor eax, eax
mov r15, qword [rsp + 0x30]
mov r14, qword [rsp + 0x88]
add rsp, 0x38
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret