Function at 0x14003b144
Capabilities:
Access peb ldr_data
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
xor ebx, ebx
mov edi, 0xcdecd5ae
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r13d, 0x4764996c
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x14003b1d0
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0x98be34f8
jmp 0x14003b1c2
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, r13d
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x14003b1a5
cmp r9d, ebx
jne 0x14003b2d0
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov rcx, qword [rcx + r9 + 0x88]
mov r11d, ecx
add r11, r9
shr rcx, 0x20
cmp r11, r9
je 0x14003b2d0
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x14003b2d0
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r10d, dword [rdx + r9]
add r10, r9
mov r14d, 0x98be34f8
jmp 0x14003b233
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, r13d
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r10]
inc r10
test dl, dl
jne 0x14003b218
cmp r14d, edi
je 0x14003b24b
test esi, esi
jne 0x14003b203
jmp 0x14003b2d0
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + rsi*2]
mov r8d, dword [rdx + rax*4]
add r8, r9
cmp r8, r11
jbe 0x14003b2d8
lea rax, [r11 + rcx]
cmp r8, rax
jae 0x14003b2d8
mov ebx, 0x98be34f8
mov edi, ebx
jmp 0x14003b295
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, r13d
mov eax, ebx
xor eax, ecx
mov ebx, edx
imul ebx, eax
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x14003b27b
jmp 0x14003b2b5
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, r13d
mov eax, edi
xor eax, ecx
mov edi, edx
imul edi, eax
inc r8
mov al, byte [r8]
test al, al
jne 0x14003b29e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003b179
and dword [rbp + 0x48], 0
mov dword [rbp + 0x48], 0x5e4257c
mov eax, 0xbec5cb2a
sub eax, dword [0x14033a058]
sub eax, dword [0x14033a050]
xor eax, 0x79aeddeb
sub eax, dword [0x14033a048]
mov rcx, qword [0x14033a040]
add eax, 0xa087f5f6
add eax, ecx
xor eax, 0x25230d8e
add eax, 0x6763c147
xor eax, 0x15a675ee
lea edx, [rcx - 0x7a2452a5]
add edx, eax
not edx
mov eax, dword [0x14033a038]
xor eax, 0xc05e346a
sub edx, eax
mov ecx, dword [0x14033a030]
xor ecx, 0x3fa1cb95
add ecx, 0x66951ec
add ecx, edx
xor ecx, 0xb70e8fb2
mov dword [rbp + 0x48], ecx
movsxd rcx, ecx
call r8
mov qword [rbp + 0x58], rax
and dword [rbp + 0x48], 0
movabs rdi, 0x97ba03d1a5fad70c
movabs rbx, 0xfb4a08b0b816eb4d
movabs rax, 0xc000000000000000
mov r11, qword [0x14033a070]
imul r11, rax
movabs rax, 0x7000000000000000
xor r11, rax
mov rcx, r11
imul rcx, rbx
mov qword [rbp + 0x48], rcx
movabs r10, 0xaaaaaaaaaaaaaaab
mov rax, r10
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea rsi, [0x14033a060]
mov r9, r11
and r9, rbx
imul r9, qword [rsi + rcx*8]
movabs rax, 0xf16dcdbc6268b3e0
imul r9, rax
shr r9, 3
movabs rax, 0xa706705fd93a993c
xor r9, rax
movabs rax, 0xffffff57c21b317b
mov r15, r11
imul r15, rax
sub r15, 0xa5dc858
xor r15, r9
xor r15, qword [0x14033a060]
mov rax, r9
imul rax, qword [0x14033a070]
movabs rcx, 0xb9de928bcba88e5a
imul rax, rcx
not rax
and r15, rax
ror r15, 0x26
shr r15, 8
movabs r8, 0x4b5f74f47e914b3
lea rcx, [r11 + r8]
xor rcx, 0xfffffffff5268557
mov rax, r10
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movabs rax, 0xb4d0c778b1cdf530
mov r14, qword [rsi + rcx*8]
imul r14, rax
sub r14, r8
movabs rcx, 0x21a57f2d2b8aca70
mov rax, r9
imul rax, rcx
xor r14, rax
shr r14, 0x1f
not r14
mov r12, r14
xor r12, r11
lea rcx, [r14 + r8]
mov rax, r10
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movzx eax, r14b
movzx ecx, byte [rsi + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0x4b
mov eax, 0x8000003f
and ecx, eax
jge 0x14003b4cf
dec ecx
or ecx, 0xffffffc0
inc ecx
ror r12, cl
not r12
imul r12, r9
imul r13, r12, 0xfffffffff5a237a8
lea r10, [r8 + r13]
mov r8, r14
imul r8, r15
sub r8, r10
xor r8, rdi
movzx esi, r10b
mov ecx, esi
xor ecx, 4
and ecx, 0xf
and ecx, eax
jge 0x14003b508
dec ecx
or ecx, 0xffffffc0
inc ecx
rol r8, cl
mov rax, r10
sub rax, qword [0x14033a078]
xor r8, rax
movabs rax, 0xb85f2dea5351f588
imul r12, rax
movabs rax, 0x191d4e2bf9827529
sub r12, rax
xor r8, r12
xor r8, r9
xor r8, r11
mov rax, r8
mov r12b, 0x3f
and eax, 1
je 0x14003b890
sub rax, 1
je 0x14003b753
sub rax, 1
je 0x14003b65a
cmp rax, 1
jne 0x14003b940
mov rdi, r10
imul rdi, r14
movabs rax, 0x77c0fdf20c6ecf01
add rax, r8
xor rdi, rax
ror rdi, 0x1c
shr rdi, 0xc
xor rdi, r11
not rdi
movabs rcx, 0x835729598060
mov rdx, qword [0x14033a088]
add rdx, rcx
movabs rax, 0x437723725abb469
xor rdx, rax
movzx eax, r8b
movzx ecx, dil
imul ecx, eax
and cl, r12b
ror rdx, cl
shl rdx, 0xf
movabs rax, 0xf7ca7db971b96ca3
sub rax, r14
mov r14, rdx
xor r14, rax
mov rcx, r14
imul rcx, rbx
mov eax, 0xa062be49
add rcx, rax
movabs rsi, 0xaaaaaaaaaaaaaaab
mov rax, rsi
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea r12, [0x14033a060]
mov cl, byte [r12 + rcx*8]
and cl, 0xf
movabs rbx, 0xd95ece3e9f68fa12
sub rbx, rdi
shr rbx, cl
movabs rcx, 0x4be1bd79acfe339
add rcx, r13
mov rax, rsi
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov rax, r8
imul rax, qword [r12 + rcx*8]
imul rax, r8
sub rax, r15
xor rbx, rax
jmp 0x14003b940
movabs rax, 0xaaaaaa1aa07b4377
mov rcx, r8
xor rcx, rax
movabs rax, 0x1206ed62769f3b
imul rcx, rax
movabs rdx, 0xfff17ca87719750b
mov rax, r9
xor rax, rdx
sub rcx, rax
movabs rax, 0xffff7e8a866b71ab
imul r13, rax
movabs r14, 0xbc9f00fcca10483c
add r14, rcx
add r14, r13
movabs rax, 0x277cd7be72ab9417
mov rcx, r14
xor rcx, rax
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov r10, r14
not r10
lea rsi, [0x14033a060]
imul r10, qword [rsi + rcx*8]
xor r10, 0xfffffffff52e95a7
lea ecx, [r8 - 0xb]
and cl, r12b
rol r10, cl
movabs rcx, 0xcbc5a73f63d660e9
mov rax, qword [rbp + 0x48]
xor rax, rcx
movabs rcx, 0x7c7a7dc69c299f16
and rax, rcx
imul r10, rax
mov rcx, r10
ror rcx, 0x26
not rcx
movabs rax, 0x9b2de6b2f51c58c0
imul rcx, rax
mov rax, r14
sub rax, r10
lea rdx, [rcx + rax*4]
mov cl, r15b
and cl, r12b
ror rdx, cl
mov rax, rbx
mov rbx, rdx
imul rbx, rax
jmp 0x14003b940
movabs rax, 0xa60f7ec3601ad771
imul r8, rax
movabs rax, 0xd79435e50d79435f
mul r8
shr rdx, 4
movzx eax, dl
imul edx, eax, 0x13
mov cl, r8b
sub cl, dl
movabs rdx, 0x4b5f74f47e914b2
mov rax, r11
imul rax, rdx
xor rax, rdi
not rax
shl rax, cl
xor r9, rax
and esi, 0x8000003f
jge 0x14003b7a9
dec esi
or esi, 0xffffffc0
inc esi
mov cl, sil
rol r9, cl
movabs rcx, 0x4b5f74f47e914b3
add rcx, r8
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movabs rdx, 0x8b0b816eb4d
lea rsi, [0x14033a060]
mov rax, qword [rsi + rcx*8]
imul rax, rdx
xor r9, rax
movabs rax, 0xffffc7a7fcbf355a
or r9, rax
mov rbx, qword [0x14033a070]
imul rbx, rdi
sub rbx, r10
mov rax, r15
sub rax, r9
xor rbx, rax
movabs rax, 0xc7a7c6a6adb73557
xor rbx, rax
movabs rax, 0xcccccccccccccccd
mul r11
shr rdx, 3
lea rax, [rdx + rdx*4]
add rax, rax
mov rcx, r11
sub rcx, rax
or rcx, 1
xor edx, edx
mov rax, rbx
div rcx
mov rcx, rdx
mov rdx, r8
imul rdx, r10
imul rdx, rbx
shr rdx, cl
mov rax, r14
sub rax, rdx
sub rax, r11
movabs r11, 0x789589462e5794d
add r11, rax
xor r11, r15
movzx eax, r14b
imul ecx, eax, 0xf2
and cl, r12b
rol r11, cl
not r11
jmp 0x14003b940
movabs rax, 0xaaaaaaaaaaaaaaab
mul r9
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov rcx, r9
sub rcx, rax
mov rax, r8
imul rax, qword [0x14033a080]
lea rsi, [0x14033a060]
mov rdx, qword [rsi + rcx*8]
and rdx, rax
xor rdx, r9
and r9b, r12b
mov cl, r9b
mov r9, rdx
ror r9, cl
imul r9, r10
not r15
imul r15, r14
movabs rax, 0x7cd8a7de704664b6
imul r15, rax
mov rax, r9
imul rax, r11
mov r11, r15
xor r11, rax
imul rsi, qword [0x14033a060], 0xfffffffff5a237a8
mov rdx, qword [0x14033a068]
sub rsi, rdx
mov al, r11b
not al
movzx ecx, al
movzx eax, dl
xor ecx, eax
and ecx, 0x8000003f
jge 0x14003b92d
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rsi, cl
movabs r15, 0x4b5f74f47e914b3
add r15, rsi
add r15, r13
movabs rcx, 0xff055d7b800d6e7b
xor rdi, rcx
movabs rax, 0xaaaaaaaaaaaaaaab
mul rdi
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rdi, rax
xor r9, r11
lea rax, [0x14033a060]
imul r9, qword [rax + rdi*8]
not r10
imul r10, r8
imul r10, r15
imul r10, rbx
movabs rcx, 0xf5ed7e8787be24a7
xor rcx, r14
not rcx
xor rcx, r10
sub rcx, r9
call fcn.14003b0cc
mov qword [0x1403489e0], rax
and dword [rbp + 0x50], 0
mov dword [rbp + 0x50], 0xeb7a8c8
mov eax, 0xaca66241
sub eax, dword [0x14033a058]
sub eax, dword [0x14033a050]
xor eax, 0xd82b854
sub eax, dword [0x14033a048]
mov r12, qword [0x14033a040]
add eax, 0xb4e0a62e
add eax, r12d
xor eax, 0xcf18db76
sub eax, 0x729e5825
xor eax, 0x4df3cc68
mov r15d, dword [0x14033a030]
xor r15d, 0x22660a05
sub r15d, eax
mov eax, dword [0x14033a038]
xor eax, 0xdd99f5fa
sub r15d, eax
sub r15d, r12d
sub r15d, 0x4aad4078
xor r15d, 0x8d3991e2
mov dword [rbp + 0x50], r15d
movdqa xmm0, xmmword [0x140313800]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x10], 0xbfcc
xor r13d, r13d
xor edx, edx
mov rax, r13
movabs rcx, 0x13cce94adbfb7614
div rcx
add dl, 0x30
mov r14b, dl
sar r14b, 7
or r14b, dl
mov sil, r14b
shl sil, 6
mov al, r14b
sar al, 2
or sil, al
mov r8b, r14b
sar r8b, 5
mov al, r14b
shl al, 3
or r8b, al
mov r10b, r14b
sar r10b, 3
mov al, r14b
shl al, 5
or r10b, al
mov dl, r14b
sar dl, 4
mov al, r14b
shl al, 4
or dl, al
mov r9b, r14b
add r9b, r9b
mov r11b, r14b
sar r11b, 7
mov bl, r14b
not bl
mov dil, byte [rbp + r13 - 0x20]
sub dil, sil
sub dil, 2
mov eax, 4
sub al, sil
xor dil, al
mov cl, r14b
shl cl, 7
mov al, r14b
sar al, 1
or cl, al
sub dil, cl
sub dil, byte [0x14033a050]
sub dil, byte [0x14033a058]
sub dil, 0x3f
add dil, sil
add dil, r14b
lea eax, [rsi + 7]
add al, r14b
xor dil, al
sub dil, r8b
sub dil, r14b
sub dil, byte [0x14033a048]
sub dil, 0x50
add dil, r12b
add dil, sil
mov al, dl
sub al, r8b
add al, sil
add al, r14b
xor dil, al
mov al, r14b
sub al, dl
xor al, r14b
sub dil, al
sub dil, r10b
add dil, 0x30
add dil, r14b
mov al, r11b
or al, r9b
sub al, 0x50
add al, r10b
xor dil, al
add sil, sil
add dil, sil
sub dil, r9b
add dil, 0x51
add dil, r12b
not dil
or r11b, r14b
sub dil, r11b
mov al, bl
xor al, byte [0x14033a038]
sub dil, al
mov al, r14b
xor al, 0x40
sub dil, al
mov al, r14b
xor al, byte [0x14033a030]
add dil, al
movsx eax, r14b
movsx ecx, bl
imul ecx, eax
xor cl, dil
mov byte [rbp + r13 - 0x20], cl
inc r13
cmp r13, 0x12
jb 0x14003ba37
lea rax, [rbp - 0x20]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 0x12
and dword [rbp + 0x48], 0
mov dword [rbp + 0x48], 0xf5b5c6e1
mov eax, 0x1241d7d0
sub eax, dword [0x14033a058]
sub eax, dword [0x14033a050]
xor eax, 0x1003adb3
sub eax, dword [0x14033a048]
mov rdx, qword [0x14033a040]
lea ecx, [rdx + 0x6211ee21]
add ecx, eax
xor ecx, 0xb266bbd5
sub ecx, 0x444f997f
xor ecx, 0x911faba1
mov r8d, dword [0x14033a030]
xor r8d, 0x1e7fa765
sub r8d, ecx
mov eax, dword [0x14033a038]
xor eax, 0xe180589a
sub r8d, eax
sub r8d, edx
sub r8d, 0x6ddf01eb
xor r8d, 0xb1d56ac2
mov dword [rbp + 0x48], r8d
movsxd rdx, r8d
mov r9d, r15d
lea r8, [rbp - 0x20]
mov r13, qword [rbp + 0x58]
mov rcx, r13
call fcn.140052650
nop
and dword [rbp + 0x48], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x10], ax
and dword [rbp + 0x50], eax
and dword [rbp + 0x58], eax
mov dword [rbp + 0x58], 0xdb275a78
mov eax, 0xc8cf7845
sub eax, dword [0x14033a058]
sub eax, dword [0x14033a050]
xor eax, 0x4fbb51e
sub eax, dword [0x14033a048]
mov r8, qword [0x14033a040]
lea edx, [r8 + 0x697af80b]
add edx, eax
xor edx, 0xc5852a90
sub edx, 0x6fe32e77
xor edx, 0xddc0d27c
mov ecx, dword [0x14033a030]
xor ecx, 0x2244744f
sub ecx, edx
mov eax, dword [0x14033a038]
xor eax, 0xddbb8bb0
sub ecx, eax
sub ecx, r8d
add ecx, 0x5ef4bb40
xor ecx, 0xe2ebdb50
mov dword [rbp + 0x58], ecx
call fcn.14029b0c0
mov rdx, rax
mov rcx, r13
call fcn.14029b254
nop
and dword [rbp + 0x58], 0
xor ebx, ebx
mov edi, 0x78806d0a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x14003bd40
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0xda769fba
jmp 0x14003bd32
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, 0x4764996c
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x14003bd12
cmp r9d, ebx
jne 0x14003be4a
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov r11d, ecx
add r11, r10
shr rcx, 0x20
cmp r11, r10
je 0x14003be4a
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x14003be4a
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r9d, dword [rdx + r10]
add r9, r10
mov r14d, 0xda769fba
jmp 0x14003bda6
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, 0x4764996c
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r9]
inc r9
test dl, dl
jne 0x14003bd88
cmp r14d, edi
je 0x14003bdbe
test esi, esi
jne 0x14003bd73
jmp 0x14003be4a
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r8d, word [rdx + rsi*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov r9d, dword [rdx + r8*4]
add r9, r10
cmp r9, r11
jbe 0x14003be52
lea rax, [r11 + rcx]
cmp r9, rax
jae 0x14003be52
mov ebx, 0xda769fba
mov edi, ebx
jmp 0x14003be0c
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, ebx
xor eax, ecx
mov ebx, edx
imul ebx, eax
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x14003bdef
jmp 0x14003be2f
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, edi
xor eax, ecx
mov edi, edx
imul edi, eax
inc r9
mov al, byte [r9]
test al, al
jne 0x14003be15
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14003bce6
mov rcx, r13
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp r9