Function at 0x14017f74c
Capabilities:
Access peb ldr_data
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
xor r9d, r9d
mov edi, r9d
mov esi, 0x6fcbce0e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test edi, edi
je 0x14017f7dc
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0x793f25a
jmp 0x14017f7cb
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, 0x4764996c
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x14017f7ab
cmp r9d, edi
jne 0x14017f901
xor r9d, r9d
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov ebx, ecx
add rbx, r10
shr rcx, 0x20
cmp rbx, r10
je 0x14017f901
mov r14d, dword [rbx + 0x18]
test r14d, r14d
je 0x14017f901
mov r13d, dword [rbx + 0x20]
dec r14d
lea rdx, [r14*4]
add rdx, r13
mov r11d, dword [rdx + r10]
add r11, r10
mov r15d, 0x793f25a
mov dl, byte [r11]
inc r11
test dl, dl
je 0x14017f868
movsx r8d, dl
mov r9d, r8d
imul r9d, r8d
add r9d, 0x31
xor r9d, 0x4764996c
mov edx, r15d
xor edx, r8d
mov r15d, r9d
imul r15d, edx
mov dl, byte [r11]
inc r11
test dl, dl
jne 0x14017f834
mov r13d, dword [rbx + 0x20]
xor r9d, r9d
cmp r15d, esi
je 0x14017f877
test r14d, r14d
jne 0x14017f80f
jmp 0x14017f901
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov eax, dword [rbx + 0x24]
add rax, r10
movzx eax, word [rax + r14*2]
mov r8d, dword [rdx + rax*4]
add r8, r10
cmp r8, rbx
jbe 0x14017f90c
lea rax, [rcx + rbx]
cmp r8, rax
jae 0x14017f90c
mov edi, 0x793f25a
mov esi, edi
jmp 0x14017f8c3
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, edi
xor eax, ecx
mov edi, edx
imul edi, eax
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x14017f8a6
jmp 0x14017f8e6
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, esi
xor eax, ecx
mov esi, edx
imul esi, eax
inc r8
mov al, byte [r8]
test al, al
jne 0x14017f8cc
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
xor r9d, r9d
jmp 0x14017f77f
mov dword [rbp + 0x48], r9d
mov dword [rbp + 0x48], 0x62b8e819
mov eax, 0xfb50aa46
sub eax, dword [0x140278058]
sub eax, dword [0x140278050]
xor eax, 0xb89572f5
sub eax, dword [0x140278048]
mov rcx, qword [0x140278040]
add eax, 0xfad5f9f
add eax, ecx
xor eax, 0x485546a9
sub eax, 0x5878ff59
xor eax, 0xab0e191b
lea edx, [rcx - 0x9b7be01]
add edx, eax
not edx
mov eax, dword [0x140278038]
xor eax, 0xa3d4bfe8
sub edx, eax
mov ecx, dword [0x140278030]
xor ecx, 0x5c2b4017
add ecx, 0x206d534d
add ecx, edx
xor ecx, 0x840f3dd8
mov dword [rbp + 0x48], ecx
movsxd rcx, ecx
call r8
mov r15, rax
mov qword [rbp - 0x30], rax
xor eax, eax
mov dword [rbp + 0x48], eax
movabs rax, 0x6e0c000000000000
mov r13, qword [0x140278060]
mov r12, r13
imul r12, rax
movabs rax, 0x878f000000000000
xor r12, rax
movabs r8, 0xffb4ea594b726b24
mov rcx, r12
imul rcx, r8
movabs r14, 0xaaaaaaaaaaaaaaab
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea r10, [0x140278060]
mov rdi, r12
and rdi, r8
imul rdi, qword [r10 + rcx*8]
movabs rax, 0x44c5f578ef7f0084
imul rdi, rax
shr rdi, 3
movabs rax, 0xf9e1d777d55233ff
xor rdi, rax
movabs rax, 0xffffff57ff0ff6a3
mov rbx, r12
imul rbx, rax
sub rbx, 0x18361374
xor rbx, rdi
xor rbx, r13
mov rax, rdi
imul rax, qword [0x140278070]
movabs rcx, 0xb9de928bf6bc4982
imul rax, rcx
not rax
and rbx, rax
ror rbx, 0x17
shr rbx, 8
movabs r8, 0x4b15a6b48d94dc
lea rcx, [r12 + r8]
xor rcx, 0xffffffffc832428f
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movabs rax, 0xd5d141e443106e88
mov r11, qword [r10 + rcx*8]
imul r11, rax
sub r11, r8
movabs rcx, 0xee92bf8cc041b830
mov rax, rdi
imul rax, rcx
xor r11, rax
shr r11, 0x1f
not r11
mov r9, r11
xor r9, r12
lea rcx, [r11 + r8]
mov rax, r14
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movzx eax, r11b
movzx ecx, byte [r10 + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0x93
and ecx, 0x8000003f
jge 0x14017fafb
dec ecx
or ecx, 0xffffffc0
inc ecx
ror r9, cl
not r9
imul r9, rdi
imul rsi, r9, 0xffffffffe7c9ec8c
add r8, rsi
mov r10, r11
imul r10, rbx
sub r10, r8
movabs rax, 0x24d3e304998f5deb
xor r10, rax
mov cl, r8b
xor cl, 0xfc
and cl, 0xf
rol r10, cl
movabs rax, 0xe6b88ac2589bc7b0
imul r9, rax
movabs rax, 0x1a488cf2b0e71d10
sub r9, rax
xor r10, r9
mov rcx, r8
sub rcx, qword [0x140278078]
xor r10, rcx
xor r10, rdi
xor r10, r12
mov rax, r14
mul rdi
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov rdx, rdi
sub rdx, rax
mov rax, r10
mov r14, qword [0x140278080]
imul rax, r14
lea r9, [0x140278060]
mov r9, qword [r9 + rdx*8]
and r9, rax
xor r9, rdi
and dil, 0x3f
mov cl, dil
ror r9, cl
imul r9, r8
not rbx
imul rbx, r11
movabs rax, 0x7cd8a7de4d52a36e
imul rbx, rax
mov rax, r9
imul rax, r12
xor rbx, rax
imul r8, r13, 0xffffffffe7c9ec8c
mov rdx, qword [0x140278068]
sub r8, rdx
mov al, bl
not al
movzx ecx, al
movzx eax, dl
xor ecx, eax
and ecx, 0x8000003f
jge 0x14017fbf2
dec ecx
or ecx, 0xffffffc0
inc ecx
ror r8, cl
lea rcx, [rsi + r8]
movabs rax, 0xffb4ea594b726b24
imul rcx, rax
movabs rax, 0x1a488cf2b0e71d10
sub rcx, rax
movabs rax, 0xffb4ea594b726b23
sub rax, rsi
imul rcx, rax
imul rcx, r10
movabs rax, 0xf5ed7e87baaae37f
xor r11, rax
not r11
xor rcx, r11
xor r9, rbx
imul r9, r14
sub rcx, r9
call fcn.140135f34
mov qword [0x140279158], rax
mov dword [rbp - 0x28], 0x730a549a
mov dword [rbp - 0x24], 0xd0fe9010
mov dword [rbp - 0x20], 0xe2669651
mov word [rbp - 0x1c], 0xbffe
xor eax, eax
mov r12d, eax
mov r13, qword [0x140278040]
xor edx, edx
mov rax, r12
movabs rcx, 0x13cce94adbbf6644
div rcx
add dl, 0x34
mov r14b, dl
sar r14b, 7
or r14b, dl
mov al, r14b
sar al, 2
mov sil, r14b
shl sil, 6
mov dil, sil
or dil, al
movsx rcx, r14b
or sil, al
mov r9b, r14b
sar r9b, 5
mov al, r14b
shl al, 3
or r9b, al
mov r10b, r14b
sar r10b, 3
mov al, r14b
shl al, 5
or r10b, al
mov r8b, r14b
sar r8b, 4
mov al, r14b
shl al, 4
or r8b, al
mov r11b, r14b
not r11b
mov bl, r14b
ror bl, 7
lea eax, [r10 - 0x50]
add bl, al
mov dl, byte [rbp + r12 - 0x28]
sub dl, dil
sub dl, 2
mov eax, 4
sub al, sil
xor dl, al
sar rcx, 1
mov al, r14b
shl al, 7
or cl, al
sub dl, cl
sub dl, byte [0x140278050]
sub dl, byte [0x140278058]
sub dl, 0x3f
add dl, sil
add dl, r14b
lea eax, [rdi + 7]
add al, r14b
xor dl, al
sub dl, r9b
sub dl, r14b
sub dl, byte [0x140278048]
sub dl, 0x50
add dl, sil
add dl, r13b
mov al, r8b
sub al, r9b
add al, dil
add al, r14b
xor dl, al
mov al, r14b
sub al, r8b
xor al, r14b
sub dl, al
sub dl, r10b
add dl, 0x30
add dl, r14b
xor bl, dl
mov al, r14b
add al, al
sub bl, al
add bl, 0x51
add bl, sil
add bl, dil
add bl, r13b
not bl
mov al, r14b
sar al, 7
or al, r14b
sub bl, al
mov al, r11b
xor al, byte [0x140278038]
sub bl, al
mov al, r14b
xor al, 0x40
sub bl, al
mov al, r14b
xor al, byte [0x140278030]
add bl, al
movsx eax, r14b
movsx ecx, r11b
imul ecx, eax
xor bl, cl
mov byte [rbp + r12 - 0x28], bl
inc r12
cmp r12, 0xe
jb 0x14017fc79
lea rax, [rbp - 0x28]
mov qword [rbp - 0x18], rax
mov qword [rbp - 0x10], 0xe
xor r12d, r12d
mov dword [rbp + 0x50], r12d
mov dword [rbp + 0x50], 0x35e10448
mov eax, 0xe3838c3d
sub eax, dword [0x140278058]
sub eax, dword [0x140278050]
xor eax, 0x2dd3c1e3
sub eax, dword [0x140278048]
mov rcx, qword [0x140278040]
add eax, 0xd0bf3823
add eax, ecx
xor eax, 0xdc3994db
add eax, 0x7259d70d
xor eax, 0xf6a632d4
lea edx, [rcx + 0xb5f27b7]
add edx, eax
not edx
mov eax, dword [0x140278038]
xor eax, 0x23c66b1a
sub edx, eax
mov ecx, dword [0x140278030]
xor ecx, 0xdc3994e5
add ecx, 0xcb5cde7f
add ecx, edx
xor ecx, 0xe732d642
mov dword [rbp + 0x50], ecx
movsxd rdx, ecx
lea r8, [rbp - 0x28]
mov rcx, r15
call fcn.14006180c
nop
mov dword [rbp + 0x50], r12d
mov dword [rbp + 0x58], r12d
mov dword [rbp + 0x58], 0xce55d82f
mov eax, 0x559d84bb
sub eax, dword [0x140278058]
sub eax, dword [0x140278050]
xor eax, 0xfe7b7ed1
sub eax, dword [0x140278048]
mov rcx, qword [0x140278040]
add eax, 0x3bde60b3
add eax, ecx
xor eax, 0x9ac5e9a4
sub eax, 0x40057bef
xor eax, 0xa4fb983c
lea edx, [rcx - 0x70215618]
add edx, eax
not edx
mov eax, dword [0x140278038]
xor eax, 0xc2436d04
sub edx, eax
mov ecx, dword [0x140278030]
xor ecx, 0x3dbc92fb
add ecx, 0xed48dd08
add ecx, edx
xor ecx, 0xef382aec
mov dword [rbp + 0x58], ecx
call fcn.1401ee548
mov rdx, rax
mov rcx, r15
call fcn.1401ee694
nop
mov dword [rbp + 0x58], r12d
mov edi, r12d
mov esi, 0xd58eaaba
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test edi, edi
je 0x14017ff6d
psrldq xmm0, 8
movq r9, xmm0
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
mov r10d, 0x9e5b72a6
jmp 0x14017ff5f
movsx edx, byte [r9]
mov r8d, edx
imul r8d, edx
add r8d, 0x31
xor r8d, 0x4764996c
mov ecx, r10d
xor ecx, edx
mov r10d, r8d
imul r10d, ecx
add r9, 2
cmp r9, r11
jne 0x14017ff39
cmp r10d, edi
jne 0x140180086
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov ebx, ecx
add rbx, r10
shr rcx, 0x20
cmp rbx, r10
je 0x140180086
mov r14d, dword [rbx + 0x18]
test r14d, r14d
je 0x140180086
mov r13d, dword [rbx + 0x20]
dec r14d
lea rdx, [r14*4]
add rdx, r13
mov r11d, dword [rdx + r10]
add r11, r10
mov r15d, 0x9e5b72a6
jmp 0x14017ffe0
movsx r8d, dl
mov r9d, r8d
imul r9d, r8d
add r9d, 0x31
xor r9d, 0x4764996c
mov edx, r15d
xor edx, r8d
mov r15d, r9d
imul r15d, edx
mov dl, byte [r11]
inc r11
test dl, dl
jne 0x14017ffbd
cmp r15d, esi
je 0x14017fffc
xor r12d, r12d
test r14d, r14d
jne 0x14017ffa0
jmp 0x140180086
mov edx, dword [rbx + 0x24]
add rdx, r10
movzx r8d, word [rdx + r14*2]
mov edx, dword [rbx + 0x1c]
add rdx, r10
mov r9d, dword [rdx + r8*4]
add r9, r10
cmp r9, rbx
jbe 0x14018008e
lea rax, [rbx + rcx]
cmp r9, rax
jae 0x14018008e
mov edi, 0x9e5b72a6
mov esi, edi
jmp 0x140180045
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, edi
mov edi, eax
imul edi, ecx
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x14018002b
inc r9
xor r12d, r12d
jmp 0x14018006e
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, esi
mov esi, eax
imul esi, ecx
inc r9
mov al, byte [r9]
test al, al
jne 0x140180054
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14017ff0d
mov rcx, qword [rbp - 0x30]
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp r9