Function at 0x140001360
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x130
mov rax, qword gs:[0x30]
mov rbp, rcx
test rax, rax
je 0x140001437
mov r14, qword [rax + 0x60]
test r14, r14
je 0x140001437
mov r14, qword [r14 + 0x18]
add r14, 0x10
mov rsi, qword [r14]
cmp rsi, r14
je 0x140001437
xor edi, edi
movzx ebx, word [rsi + 0x58]
shr bx, 1
cmp di, bx
jae 0x1400013f8
mov r10, qword [rsi + 0x60]
lea r9, [rsp + 0x20]
movzx r11d, bx
nop word [rax + rax]
movzx r8d, byte [r10]
lea r9, [r9 + 1]
lea r10, [r10 + 2]
lea edx, [r8 - 0x41]
cmp dl, 0x19
lea eax, [r8 + 0x20]
movzx ecx, al
cmova ecx, r8d
mov byte [r9 - 1], cl
sub r11, 1
jne 0x1400013d0
movzx eax, bx
lea rdx, [rsp + 0x20]
mov ecx, edi
mov byte [rsp + rax + 0x20], dil
movzx eax, byte [rsp + 0x20]
test al, al
je 0x14000142b
ror ecx, 0x19
lea rdx, [rdx + 1]
movsx eax, al
xor ecx, eax
movzx eax, byte [rdx]
test al, al
jne 0x140001410
cmp ecx, 0x4b1ffe8e
je 0x140001455
mov rsi, qword [rsi]
cmp rsi, r14
jne 0x1400013b1
xor eax, eax
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov r8, qword [rsi + 0x30]
test r8, r8
je 0x140001437
mov eax, dword [r8 + 0x3c]
mov r11, r8
mov ebx, dword [rax + r8 + 0x88]
mov r12d, dword [rax + r8 + 0x8c]
test ebx, ebx
je 0x1400014fb
mov r9d, dword [r8 + rbx + 0x1c]
lea rax, [r8 + rbx]
test r9d, r9d
je 0x1400015b9
mov ecx, dword [rax + 0x24]
test ecx, ecx
je 0x1400015b9
mov edx, dword [rax + 0x20]
test edx, edx
je 0x1400015b9
mov esi, dword [rax + 0x18]
lea r14, [r8 + r9]
lea r15, [r8 + rcx]
mov r9d, edi
lea r10, [r8 + rdx]
test esi, esi
je 0x1400014fb
nop dword [rax + rax]
mov edx, dword [r10]
mov ecx, edi
add rdx, r8
movzx eax, byte [rdx]
test al, al
je 0x1400014ef
nop
ror ecx, 0x19
lea rdx, [rdx + 1]
movsx eax, al
xor ecx, eax
movzx eax, byte [rdx]
test al, al
jne 0x1400014d0
cmp ecx, 0xc8ac8026
je 0x140001599
inc r9d
add r10, 4
cmp r9d, esi
jb 0x1400014c0
mov eax, dword [r11 + 0x3c]
mov r12, rdi
mov r10d, dword [rax + r11 + 0x88]
mov esi, dword [rax + r11 + 0x8c]
test r10d, r10d
je 0x140001613
mov eax, r10d
add rax, r11
mov r8d, dword [rax + 0x1c]
test r8d, r8d
je 0x140001613
mov ecx, dword [rax + 0x24]
test ecx, ecx
je 0x140001613
mov edx, dword [rax + 0x20]
test edx, edx
je 0x140001613
mov ebx, dword [rax + 0x18]
lea r14, [r11 + r8]
lea r15, [r11 + rcx]
mov r8d, edi
lea r9, [r11 + rdx]
test ebx, ebx
je 0x140001613
nop
mov edx, dword [r9]
mov ecx, edi
add rdx, r11
movzx eax, byte [rdx]
test al, al
je 0x14000158b
nop
ror ecx, 0x19
lea rdx, [rdx + 1]
movsx eax, al
xor ecx, eax
movzx eax, byte [rdx]
test al, al
jne 0x140001570
cmp ecx, 0x1fc0eaee
je 0x1400015f2
inc r8d
add r9, 4
cmp r8d, ebx
jb 0x140001560
jmp 0x140001613
mov eax, r9d
movzx ecx, word [r15 + rax*2]
mov edx, dword [r14 + rcx*4]
test edx, edx
je 0x1400014fb
cmp edx, ebx
jbe 0x1400015d5
lea eax, [r12 + rbx]
cmp edx, eax
jae 0x1400015d5
mov eax, dword [r8 + 0x3c]
mov r12, rdi
mov r10d, dword [rax + r8 + 0x88]
mov esi, dword [rax + r8 + 0x8c]
jmp 0x14000151b
mov eax, dword [r8 + 0x3c]
lea r12, [r8 + rdx]
mov r10d, dword [rax + r8 + 0x88]
mov esi, dword [rax + r8 + 0x8c]
jmp 0x14000151b
mov eax, r8d
movzx ecx, word [r15 + rax*2]
mov edx, dword [r14 + rcx*4]
test edx, edx
je 0x140001613
cmp edx, r10d
jbe 0x14000160f
lea eax, [rsi + r10]
cmp edx, eax
jb 0x140001613
lea rdi, [r11 + rdx]
test r12, r12
je 0x140001437
test rdi, rdi
je 0x140001437
mov eax, dword [rbp + 0x3c]
mov ecx, dword [rax + rbp + 0x90]
test ecx, ecx
je 0x1400016ac
lea r14, [rbp + 0xc]
add r14, rcx
mov eax, dword [r14]
test eax, eax
je 0x1400016ac
mov r15d, 0xf0000000
mov ecx, eax
add rcx, rbp
call r12
mov rsi, rax
test rax, rax
je 0x140001437
mov ebx, dword [r14 + 4]
add rbx, rbp
mov rcx, qword [rbx]
test rcx, rcx
je 0x1400016a0
nop word [rax + rax]
test r15, rcx
mov rcx, rsi
je 0x14000167d
movzx edx, word [rbx]
jmp 0x140001686
mov edx, dword [rbx]
add rdx, 2
add rdx, rbp
call rdi
test rax, rax
je 0x140001437
mov qword [rbx], rax
add rbx, 8
mov rcx, qword [rbx]
test rcx, rcx
jne 0x140001670
mov eax, dword [r14 + 0x14]
add r14, 0x14
test eax, eax
jne 0x140001647
mov eax, 1
jmp 0x140001439