Function at 0x140007ae0
Capabilities:
Access peb ldr_data
Encode data using xor
Get process filename
Resolve function by parsing pe exports

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x150
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x140030040]
xor rax, rsp
mov qword [rsp + 0x130], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x178]
movabs rdx, 0x7a5db90d33787107
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], rcx
mov rax, qword [rcx]
xor rax, rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x40], rax
xor r15d, r15d
mov qword [rcx], r15
lea rdx, [rsp + 0x60]
lea rcx, [0x14002b170]
movups xmm0, xmmword [rcx]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx + 0x70]
movups xmmword [rdx - 0x10], xmm0
lea rcx, [rcx + 0x80]
movups xmm1, xmmword [rcx]
movups xmmword [rdx], xmm1
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm0
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm1
movups xmm0, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm0
movzx eax, word [rcx + 0x40]
mov word [rdx + 0x40], ax
movzx eax, byte [rcx + 0x42]
mov byte [rdx + 0x42], al
mov r11d, r15d
mov r10d, 0xc3fcbbe
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop dword [rax]
nop dword [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r11d, r11d
je 0x140007c4d
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0xe34264e1
cmp rcx, r8
je 0x140007c44
nop
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0xfff5db
add rcx, 2
cmp rcx, r8
jne 0x140007c30
cmp edx, r11d
jne 0x140007d50
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov rbp, rcx
shr rbp, 0x20
mov edi, ecx
add rdi, r9
cmp rdi, r9
je 0x140007d50
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x140007d50
mov r14d, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
lea rax, [r14 + r8*4]
mov eax, dword [rax + r9]
add rax, r9
mov edx, 0xe34264e1
movzx ecx, byte [rax]
inc rax
test cl, cl
je 0x140007cc6
nop dword [rax]
movsx ecx, cl
xor ecx, edx
imul edx, ecx, 0xfff5db
movzx ecx, byte [rax]
lea rax, [rax + 1]
test cl, cl
jne 0x140007cb0
cmp edx, r10d
je 0x140007cd2
test r8d, r8d
jne 0x140007c90
jmp 0x140007d50
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov r8d, dword [rcx + rax*4]
add r8, r9
cmp r8, rdi
jbe 0x140007d69
lea rax, [rdi + rbp]
cmp r8, rax
jae 0x140007d69
mov r11d, 0xe34264e1
mov r10d, r11d
movzx eax, byte [r8]
cmp al, 0x2e
je 0x140007d28
nop dword [rax]
movsx eax, al
xor eax, r11d
imul r11d, eax, 0xfff5db
inc r8
movzx eax, byte [r8]
cmp al, 0x2e
jne 0x140007d10
inc r8
movzx eax, byte [r8]
test al, al
je 0x140007d4c
movsx eax, al
xor eax, r10d
imul r10d, eax, 0xfff5db
lea r8, [r8 + 1]
movzx eax, byte [r8]
test al, al
jne 0x140007d33
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140007d66
cmp qword [rax + 0x30], 0
jne 0x140007c00
mov r8, r15
mov ecx, r15d
movdqa xmm6, xmmword [0x14002c5e0]
mov r13d, dword [0x140030010]
cmp r13d, 2
jl 0x140007eaa
movdqa xmm4, xmmword [0x14002c560]
movdqa xmm3, xmmword [0x14002c620]
movdqa xmm5, xmmword [0x14002c590]
movdqa xmm0, xmmword [0x14002c630]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x64]
mov r9d, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 2
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r9d
psubb xmm2, xmm0
movd xmm0, dword [rdx - 4]
xorps xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm3
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 2
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
movd xmm0, r9d
psubb xmm2, xmm0
movd xmm0, dword [rdx]
xorps xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0xc0
jl 0x140007dc0
cmp ecx, 0xc3
jge 0x140007ef3
movsxd rax, ecx
lea r9, [rsp + 0x60]
add r9, rax
nop word [rax + rax]
mov eax, 0x66666667
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dl
shl al, 2
add dl, al
add dl, dl
movzx eax, cl
sub al, dl
sub al, 0x75
xor byte [r9], al
inc ecx
lea r9, [r9 + 1]
cmp ecx, 0xc3
jl 0x140007ec0
lea rcx, [rsp + 0x60]
call r8
mov r11d, r15d
mov r10d, 0xb1929368
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop dword [rax + rax]
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r11d, r11d
je 0x140007f6d
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0xa8188ea7
cmp rcx, r8
je 0x140007f64
nop
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0xfff5db
add rcx, 2
cmp rcx, r8
jne 0x140007f50
cmp edx, r11d
jne 0x14000806d
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov rbp, rcx
shr rbp, 0x20
mov edi, ecx
add rdi, r9
cmp rdi, r9
je 0x14000806d
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x14000806d
mov r14d, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
lea rax, [r14 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0xa8188ea7
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140007fe6
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0xfff5db
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140007fd0
cmp edx, r10d
je 0x140007ff2
test r8d, r8d
jne 0x140007fb0
jmp 0x14000806d
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov edx, dword [rcx + rax*4]
add rdx, r9
cmp rdx, rdi
jbe 0x140008086
lea rax, [rdi + rbp]
cmp rdx, rax
jae 0x140008086
mov r11d, 0xa8188ea7
mov r10d, r11d
movzx eax, byte [rdx]
cmp al, 0x2e
je 0x140008047
nop word [rax + rax]
movsx eax, al
xor eax, r11d
imul r11d, eax, 0xfff5db
inc rdx
movzx eax, byte [rdx]
cmp al, 0x2e
jne 0x140008030
inc rdx
movzx eax, byte [rdx]
test al, al
je 0x140008069
movsx eax, al
xor eax, r10d
imul r10d, eax, 0xfff5db
lea rdx, [rdx + 1]
movzx eax, byte [rdx]
test al, al
jne 0x140008051
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140008083
cmp qword [rax + 0x30], 0
jne 0x140007f20
mov rdx, r15
lea rcx, str.Nov_22_2024
call rdx
mov r11d, r15d
mov r10d, 0x4d6211b2
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx + 0x10]
mov r12, qword [rax]
mov rsi, r12
nop
movups xmm0, xmmword [rsi + 0x58]
movd eax, xmm0
sub ax, 8
test r11d, r11d
je 0x1400080fd
psrldq xmm0, 8
movq rcx, xmm0
movzx eax, ax
shr rax, 1
lea r8, [rcx + rax*2]
mov edx, 0xdda39c2d
cmp rcx, r8
je 0x1400080f4
nop
movsx eax, byte [rcx]
xor eax, edx
imul edx, eax, 0xfff5db
add rcx, 2
cmp rcx, r8
jne 0x1400080e0
cmp edx, r11d
jne 0x140008200
mov r9, qword [rsi + 0x30]
movsxd rax, dword [r9 + 0x3c]
mov rcx, qword [rax + r9 + 0x88]
mov rbp, rcx
shr rbp, 0x20
mov edi, ecx
add rdi, r9
cmp rdi, r9
je 0x140008200
mov r8d, dword [rdi + 0x18]
test r8d, r8d
je 0x140008200
mov r14d, dword [rdi + 0x20]
nop dword [rax]
nop word [rax + rax]
dec r8d
lea rax, [r14 + r8*4]
mov ecx, dword [rax + r9]
add rcx, r9
mov edx, 0xdda39c2d
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140008176
nop dword [rax]
movsx eax, al
xor eax, edx
imul edx, eax, 0xfff5db
movzx eax, byte [rcx]
lea rcx, [rcx + 1]
test al, al
jne 0x140008160
cmp edx, r10d
je 0x140008182
test r8d, r8d
jne 0x140008140
jmp 0x140008200
mov ecx, dword [rdi + 0x1c]
add rcx, r9
mov eax, dword [rdi + 0x24]
add rax, r9
movzx eax, word [rax + r8*2]
mov r8d, dword [rcx + rax*4]
add r8, r9
cmp r8, rdi
jbe 0x140008219
lea rax, [rdi + rbp]
cmp r8, rax
jae 0x140008219
mov r11d, 0xdda39c2d
mov r10d, r11d
movzx eax, byte [r8]
cmp al, 0x2e
je 0x1400081d8
nop dword [rax]
movsx eax, al
xor eax, r11d
imul r11d, eax, 0xfff5db
inc r8
movzx eax, byte [r8]
cmp al, 0x2e
jne 0x1400081c0
inc r8
movzx eax, byte [r8]
test al, al
je 0x1400081fc
movsx eax, al
xor eax, r10d
imul r10d, eax, 0xfff5db
lea r8, [r8 + 1]
movzx eax, byte [r8]
test al, al
jne 0x1400081e3
mov rsi, qword [r12]
mov rax, qword [rsi]
mov rsi, rax
cmp rax, r12
je 0x140008216
cmp qword [rax + 0x30], 0
jne 0x1400080b0
mov r8, r15
mov eax, dword [0x14002ab6c]
mov dword [rsp + 0x20], eax
cmp byte [0x14002ab6f], 0
je 0x1400082dc
cmp r13d, 2
jl 0x1400082a5
movdqa xmm3, xmmword [0x14002c560]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x14002c620]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x14002c620]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 2
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x14002c590]
psubd xmm3, xmm0
andps xmm3, xmm6
packuswb xmm3, xmm3
packuswb xmm3, xmm3
psubb xmm3, xmmword [0x14002c630]
movd xmm0, eax
xorps xmm3, xmm0
movd dword [rsp + 0x20], xmm3
jmp 0x1400082dc
lea rcx, [rsp + 0x20]
nop word [rax + rax]
mov eax, 0xcccccccd
mul r15d
shr edx, 3
movzx eax, dl
shl al, 2
add dl, al
add dl, dl
movzx eax, r15b
sub al, dl
sub al, 0x75
xor byte [rcx], al
inc r15d
lea rcx, [rcx + 1]
cmp r15d, 4
jl 0x1400082b0
lea rcx, [rsp + 0x20]
call r8
nop
mov rax, qword [rsp + 0x28]
movabs rcx, 0x7a5db90d33787107
xor rax, rcx
lea rcx, [rsp + 0x178]
mov qword [rcx], rax
mov rcx, qword [rsp + 0x130]
xor rcx, rsp
call fcn.140025fd0
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret