Function at 0x1400688e0
Capabilities:
Access peb ldr_data
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rax, qword gs:[0x60]
mov r8d, 0x2beaf37
mov r9d, 0x5a4d
mov qword [rsp + 0x20], rdx
mov ecx, 0x20b
mov rax, qword [rax + 0x18]
add rax, 0x10
mov qword [rsp + 0x30], rax
xor ebx, ebx
mov r13, qword [rax]
nop dword [rax]
cmp r13, rax
je 0x140068b65
cmp qword [r13 + 0x60], 0
je 0x140068a80
mov r11, qword [r13 + 0x30]
test r11, r11
je 0x140068a80
movsxd r15, dword [r11 + 0x3c]
add r15, r11
mov ebp, dword [r15 + 0x88]
add rbp, r11
cmp word [r11], r9w
jne 0x140068b42
cmp word [r15 + 0x18], cx
jne 0x140068981
cmp dword [r15 + 0x8c], 0
jbe 0x140068a7b
mov r12d, dword [rbp + 0x18]
xor edi, edi
test r12d, r12d
je 0x140068a72
mov eax, dword [rbp + 0x20]
nop dword [rax]
nop word [rax + rax]
lea rax, [rax + rdi*4]
xor r9d, r9d
mov esi, dword [rax + r11]
mov eax, r8d
add rsi, r11
movzx r10d, byte [rsi]
test r10b, r10b
je 0x140068a1a
mov r12d, 0x2beaf37
movzx r8d, r10b
sub r10b, 0x41
cmp r10b, 0x19
lea ecx, [r8 + 0x20]
movzx edx, cl
mov ecx, r9d
cmova edx, r8d
movsx r8d, dl
lea edx, [r9 + 0x2beaf37]
xor eax, r8d
imul edx, r8d
add eax, edx
test r9d, r9d
cmove ecx, r12d
inc r9d
xor ecx, r12d
imul eax, ecx
movzx r10d, byte [r9 + rsi]
add eax, r8d
test r10b, r10b
jne 0x1400689c0
mov r12d, dword [rbp + 0x18]
mov r8d, 0x2beaf37
mov rdx, qword [rsp + 0x20]
mov ecx, eax
cmp rdx, rcx
jne 0x140068a59
mov ecx, dword [rbp + 0x24]
mov rax, qword [r15 + 0x88]
add rcx, r11
movzx edx, word [rcx + rdi*2]
mov ecx, dword [rbp + 0x1c]
add rcx, r11
mov ebx, dword [rcx + rdx*4]
mov ecx, eax
add rbx, r11
add rcx, r11
cmp rbx, rcx
jb 0x140068a54
shr rax, 0x20
add rax, rcx
cmp rbx, rax
jb 0x140068a89
mov rdx, qword [rsp + 0x20]
mov eax, dword [rbp + 0x20]
inc edi
cmp edi, r12d
jb 0x1400689a0
mov ecx, 0x20b
mov r9d, 0x5a4d
test rbx, rbx
jne 0x140068b1f
mov rax, qword [rsp + 0x30]
mov r13, qword [r13]
jmp 0x140068930
movzx r8d, byte [rbx]
mov r10, rbx
test r8b, r8b
je 0x140068abe
nop word [rax + rax]
inc rbx
cmp r8b, 0x2e
mov rax, rbx
cmovne rax, r10
movzx r8d, byte [rbx]
mov r10, rax
test r8b, r8b
jne 0x140068aa0
movzx r8d, byte [rax]
xor r11d, r11d
mov ebx, 0x2beaf37
mov r9d, ebx
test r8b, r8b
je 0x140068b17
nop
movzx edx, r8b
sub r8b, 0x41
cmp r8b, 0x19
lea eax, [rdx + 0x20]
movzx ecx, al
mov eax, r11d
cmova ecx, edx
movsx edx, cl
lea ecx, [r11 + 0x2beaf37]
xor r9d, edx
imul ecx, edx
add r9d, ecx
test r11d, r11d
cmove eax, ebx
inc r11d
xor eax, ebx
imul r9d, eax
movzx r8d, byte [r11 + r10]
add r9d, edx
test r8b, r8b
jne 0x140068ad0
mov edx, r9d
jmp 0x1400688fc
mov rbp, qword [rsp + 0x78]
mov rax, rbx
mov rbx, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x80]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
lea rdx, str.DOS_header_e_magic_mismatch
lea rcx, [rsp + 0x28]
call fcn.140039780
lea rdx, [0x14009a1b8]
lea rcx, [rsp + 0x28]
call sub.VCRUNTIME140.dll__CxxThrowException
int3
lea rdx, str.Cannot_find_desired_import.
lea rcx, [rsp + 0x28]
call fcn.140039780
lea rdx, [0x14009a1b8]
lea rcx, [rsp + 0x28]
call sub.VCRUNTIME140.dll__CxxThrowException
int3