Function at 0x1401ba3cc
Capabilities:
Access peb ldr_data
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
xor ebx, ebx
mov edi, 0xe242cd0e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r13d, 0x4764996c
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x1401ba458
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0x892395ca
jmp 0x1401ba44a
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, r13d
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x1401ba42d
cmp r9d, ebx
jne 0x1401ba558
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov r11d, ecx
add r11, r10
shr rcx, 0x20
cmp r11, r10
je 0x1401ba558
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x1401ba558
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r9d, dword [rdx + r10]
add r9, r10
mov r14d, 0x892395ca
jmp 0x1401ba4bb
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, r13d
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r9]
inc r9
test dl, dl
jne 0x1401ba4a0
cmp r14d, edi
je 0x1401ba4d3
test esi, esi
jne 0x1401ba48b
jmp 0x1401ba558
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov eax, dword [r11 + 0x24]
add rax, r10
movzx eax, word [rax + rsi*2]
mov r9d, dword [rdx + rax*4]
add r9, r10
cmp r9, r11
jbe 0x1401ba560
lea rax, [r11 + rcx]
cmp r9, rax
jae 0x1401ba560
mov ebx, 0x892395ca
mov edi, ebx
jmp 0x1401ba51d
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, r13d
mov eax, ebx
xor eax, ecx
mov ebx, edx
imul ebx, eax
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x1401ba503
jmp 0x1401ba53d
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, r13d
mov eax, edi
xor eax, ecx
mov edi, edx
imul edi, eax
inc r9
mov al, byte [r9]
test al, al
jne 0x1401ba526
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x1401ba401
and dword [rbp + 0x48], 0
mov dword [rbp + 0x48], 0x2532dc94
mov eax, 0x3bd593f3
sub eax, dword [0x140301058]
sub eax, dword [0x140301050]
xor eax, 0x8579002
sub eax, dword [0x140301048]
mov rdx, qword [0x140301040]
lea ecx, [rdx + 0x290be3fb]
add ecx, eax
xor ecx, 0xc3f08c3
sub ecx, 0xa52fdc8
xor ecx, 0xbf09b73a
mov r8d, dword [0x140301030]
xor r8d, 0xab034b9
sub r8d, ecx
mov eax, dword [0x140301038]
xor eax, 0xf54fcb46
sub r8d, eax
sub r8d, edx
sub r8d, 0x592af953
xor r8d, 0xf8141d96
mov dword [rbp + 0x48], r8d
movsxd rcx, r8d
call r9
mov r13, rax
and dword [rbp + 0x48], 0
movabs rax, 0xd95b9a55f9e714b6
mov rsi, qword [0x140301070]
mov r9, rsi
imul r9, rax
not r9
movabs rax, 0xa4dc2739dfc9dc81
mov r14, qword [0x140301060]
mov rcx, r14
xor rcx, rax
and r9, rcx
ror r9, 0x13
shr r9, 8
mov rdi, qword [0x140301068]
movabs rax, 0x9c0a0cd752c2a540
mov r8, rdi
imul r8, rax
movabs r10, 0x6f397da5b47512ac
sub r8, r10
movabs rax, 0xdf7e593dffffffff
xor r8, rax
shr r8, 0x1f
not r8
lea rcx, [r8 + r10]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea rdx, [0x140301060]
movzx eax, r8b
movzx ecx, byte [rdx + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0xe7
mov r12d, 0x8000003f
and ecx, r12d
jge 0x1401ba6ab
dec ecx
or ecx, 0xffffffc0
inc ecx
mov rax, r8
ror rax, cl
not rax
movabs rcx, 0x971359bd00e9f020
mov rbx, rax
imul rbx, rcx
lea rdx, [rbx + r10]
mov r11, r8
imul r11, r9
sub r11, rdx
movabs rcx, 0x679ddcc0b1a6a8df
xor r11, rcx
mov cl, dl
xor cl, 0xf8
and cl, 0xf
rol r11, cl
movabs rcx, 0x12831e91b1506a80
imul rax, rcx
movabs r15, 0x150d1e7c0d6b5c70
add rax, r15
xor r11, rax
mov rax, rdx
sub rax, qword [0x140301078]
xor r11, rax
movabs rax, 0x5b23d8c6024980a1
xor r11, rax
mov r10, r11
imul r10, qword [0x140301080]
and r10, rdi
xor r10, rax
ror r10, 0x21
imul r10, rdx
not r9
imul r9, r8
movabs rax, 0x7cd8a7de546fd01a
imul r9, rax
imul rdx, r14, 0xffffffffdd805c20
sub rdx, rdi
mov al, r9b
not al
movzx ecx, al
movzx eax, dil
xor ecx, eax
and ecx, r12d
jge 0x1401ba775
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rdx, cl
lea rcx, [rbx + rdx]
movabs rax, 0x90c6825a4b8aed54
imul rcx, rax
add rcx, r15
movabs rax, 0x90c6825a4b8aed53
sub rax, rbx
imul rcx, rax
imul rcx, r11
movabs rax, 0xf5ed7e87a397900b
xor r8, rax
not r8
xor rcx, r8
xor r10, r9
imul r10, rsi
sub rcx, r10
call fcn.1401968c4
mov qword [0x14030af70], rax
movdqa xmm0, xmmword [0x1402dd3b0]
movdqu xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [0x1402dd290]
movdqu xmmword [rbp - 0x30], xmm1
movdqa xmm0, xmmword [0x1402dd3d0]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0xc9ac3ee0
mov word [rbp - 0xc], 0x6149
xor r15d, r15d
mov r12, qword [0x140301040]
xor edx, edx
mov rax, r15
movabs rcx, 0x13cce94adbcd969a
div rcx
add dl, 0x35
mov r14b, dl
sar r14b, 7
or r14b, dl
mov al, r14b
sar al, 2
mov sil, r14b
shl sil, 6
mov r11b, sil
or r11b, al
movsx rcx, r14b
or sil, al
mov r9b, r14b
sar r9b, 5
mov al, r14b
shl al, 3
or r9b, al
mov r10b, r14b
sar r10b, 3
mov al, r14b
shl al, 5
or r10b, al
mov r8b, r14b
sar r8b, 4
mov al, r14b
shl al, 4
or r8b, al
mov bl, r14b
not bl
mov dil, r14b
ror dil, 7
lea eax, [r10 - 0x50]
add dil, al
mov dl, byte [rbp + r15 - 0x40]
sub dl, r11b
sub dl, 2
mov eax, 4
sub al, sil
xor dl, al
sar rcx, 1
mov al, r14b
shl al, 7
or cl, al
sub dl, cl
sub dl, byte [0x140301050]
sub dl, byte [0x140301058]
sub dl, 0x3f
add dl, sil
add dl, r14b
lea eax, [r11 + 7]
add al, r14b
xor dl, al
sub dl, r9b
sub dl, r14b
sub dl, byte [0x140301048]
sub dl, 0x50
add dl, sil
add dl, r12b
mov al, r8b
sub al, r9b
add al, r11b
add al, r14b
xor dl, al
mov al, r14b
sub al, r8b
xor al, r14b
sub dl, al
sub dl, r10b
add dl, 0x30
add dl, r14b
xor dil, dl
mov al, r14b
add al, al
sub dil, al
add sil, sil
add dil, 0x51
add dil, sil
add dil, r12b
not dil
mov al, r14b
sar al, 7
or al, r14b
sub dil, al
mov al, bl
xor al, byte [0x140301038]
sub dil, al
mov al, r14b
xor al, byte [0x140301030]
add dil, al
mov al, r14b
xor al, 0x40
sub dil, al
movsx eax, r14b
movsx ecx, bl
imul ecx, eax
xor dil, cl
mov byte [rbp + r15 - 0x40], dil
inc r15
cmp r15, 0x36
jb 0x1401ba809
lea rax, [rbp - 0x40]
mov qword [rbp - 0x50], rax
mov qword [rbp - 0x48], 0x36
and dword [rbp + 0x50], 0
mov dword [rbp + 0x50], 0x82029ead
mov eax, 0x1123581a
sub eax, dword [0x140301058]
sub eax, dword [0x140301050]
xor eax, 0x52716f9b
sub eax, dword [0x140301048]
mov rdx, qword [0x140301040]
lea ecx, [rdx - 0xa118754]
add ecx, eax
xor ecx, 0x3ff5b12c
add ecx, 0x13451833
xor ecx, 0x997741ab
mov r8d, dword [0x140301030]
xor r8d, 0x7e3cdd3
sub r8d, ecx
mov eax, dword [0x140301038]
xor eax, 0xf81c322c
sub r8d, eax
sub r8d, edx
sub r8d, 0x5bc3a67b
xor r8d, 0xc46e9644
mov dword [rbp + 0x50], r8d
movsxd rdx, r8d
lea r8, [rbp - 0x40]
mov rcx, r13
call fcn.1400f2e64
nop
and dword [rbp + 0x50], 0
xor eax, eax
and dword [rbp + 0x58], eax
mov dword [rbp + 0x58], 0x13e17a2e
mov eax, 0xae4fefbc
sub eax, dword [0x140301058]
sub eax, dword [0x140301050]
xor eax, 0x14dbf86d
sub eax, dword [0x140301048]
mov r8, qword [0x140301040]
lea edx, [r8 + 0x639f5200]
add edx, eax
xor edx, 0xfacbdc8e
add edx, 0x2dbce1c5
xor edx, 0x1f23e6d4
mov ecx, dword [0x140301030]
xor ecx, 0x6f14225
sub ecx, edx
mov eax, dword [0x140301038]
xor eax, 0xf90ebdda
sub ecx, eax
sub ecx, r8d
add ecx, 0x32b701c3
xor ecx, 0xa24da482
mov dword [rbp + 0x58], ecx
call fcn.140265450
mov rdx, rax
mov rcx, r13
call fcn.140266fe4
nop
and dword [rbp + 0x58], 0
xor ebx, ebx
mov edi, 0xd176ca6a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x1401bab05
psrldq xmm0, 8
movq r9, xmm0
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
mov r10d, 0x6f83312
jmp 0x1401baaf7
movsx edx, byte [r9]
mov r8d, edx
imul r8d, edx
add r8d, 0x31
xor r8d, 0x4764996c
mov ecx, r10d
xor ecx, edx
mov r10d, r8d
imul r10d, ecx
add r9, 2
cmp r9, r11
jne 0x1401baad1
cmp r10d, ebx
jne 0x1401bac09
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov r11d, ecx
add r11, r10
shr rcx, 0x20
cmp r11, r10
je 0x1401bac09
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x1401bac09
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r9d, dword [rdx + r10]
add r9, r10
mov r14d, 0x6f83312
jmp 0x1401bab6b
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, 0x4764996c
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r9]
inc r9
test dl, dl
jne 0x1401bab4d
cmp r14d, edi
je 0x1401bab83
test esi, esi
jne 0x1401bab38
jmp 0x1401bac09
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r8d, word [rdx + rsi*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov r9d, dword [rdx + r8*4]
add r9, r10
cmp r9, r11
jbe 0x1401bac11
lea rax, [rcx + r11]
cmp r9, rax
jae 0x1401bac11
mov ebx, 0x6f83312
mov edi, ebx
jmp 0x1401babce
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, ebx
mov ebx, eax
imul ebx, ecx
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x1401babb4
jmp 0x1401babee
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, edi
mov edi, eax
imul edi, ecx
inc r9
mov al, byte [r9]
test al, al
jne 0x1401babd7
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x1401baaa5
mov rcx, r13
mov rbx, qword [rsp + 0xb0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp r9