Function at 0x14020a184
Capabilities:
Access peb ldr_data
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
xor ebx, ebx
mov edi, 0x2caabc2e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r13d, 0x4764996c
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x14020a210
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0x4289d70
jmp 0x14020a202
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, r13d
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x14020a1e5
cmp r9d, ebx
jne 0x14020a310
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov r11d, ecx
add r11, r10
shr rcx, 0x20
cmp r11, r10
je 0x14020a310
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x14020a310
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r9d, dword [rdx + r10]
add r9, r10
mov r14d, 0x4289d70
jmp 0x14020a273
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, r13d
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r9]
inc r9
test dl, dl
jne 0x14020a258
cmp r14d, edi
je 0x14020a28b
test esi, esi
jne 0x14020a243
jmp 0x14020a310
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov eax, dword [r11 + 0x24]
add rax, r10
movzx eax, word [rax + rsi*2]
mov r9d, dword [rdx + rax*4]
add r9, r10
cmp r9, r11
jbe 0x14020a318
lea rax, [rcx + r11]
cmp r9, rax
jae 0x14020a318
mov ebx, 0x4289d70
mov edi, ebx
jmp 0x14020a2d5
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, r13d
mov eax, ebx
xor eax, ecx
mov ebx, edx
imul ebx, eax
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x14020a2bb
jmp 0x14020a2f5
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, r13d
mov eax, edi
xor eax, ecx
mov edi, edx
imul edi, eax
inc r9
mov al, byte [r9]
test al, al
jne 0x14020a2de
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14020a1b9
and dword [rbp + 0x48], 0
mov dword [rbp + 0x48], 0x34e00d4f
mov eax, 0x5c7d14ed
sub eax, dword [0x140333058]
sub eax, dword [0x140333050]
xor eax, 0xf0740ad3
sub eax, dword [0x140333048]
mov rdx, qword [0x140333040]
lea ecx, [rdx + 0x4b946a99]
add ecx, eax
xor ecx, 0x8323f138
sub ecx, 0x4dfb230d
xor ecx, 0x630f1fe3
mov r8d, dword [0x140333030]
xor r8d, 0x7c89426d
sub r8d, ecx
mov eax, dword [0x140333038]
xor eax, 0x8376bd92
sub r8d, eax
sub r8d, edx
sub r8d, 0x7357581b
xor r8d, 0xc1905b2a
mov dword [rbp + 0x48], r8d
movsxd rcx, r8d
call r9
mov r13, rax
and dword [rbp + 0x48], 0
movabs rax, 0x301e99d5642adb86
mov rsi, qword [0x140333070]
mov r9, rsi
imul r9, rax
not r9
movabs rax, 0xc3dc81f965129f3d
mov r14, qword [0x140333060]
mov rcx, r14
xor rcx, rax
and r9, rcx
ror r9, 0x3b
shr r9, 8
mov rdi, qword [0x140333068]
movabs rax, 0x86786b54fba68ea8
mov r8, rdi
imul r8, rax
movabs r10, 0xb63151ede7bd7c4
sub r8, r10
movabs rax, 0x6fc9e48080000000
xor r8, rax
shr r8, 0x1f
not r8
lea rcx, [r8 + r10]
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea rdx, [0x140333060]
movzx eax, r8b
movzx ecx, byte [rdx + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0xa7
mov r12d, 0x8000003f
and ecx, r12d
jge 0x14020a463
dec ecx
or ecx, 0xffffffc0
inc ecx
mov rax, r8
ror rax, cl
not rax
movabs rcx, 0xfa9e7e7b978192e4
mov rbx, rax
imul rbx, rcx
lea rdx, [rbx + r10]
mov r11, r8
imul r11, r9
sub r11, rdx
movabs rcx, 0xb554f4eb29e2e0a5
xor r11, rcx
mov cl, dl
xor cl, 0xf8
and cl, 0xf
rol r11, cl
movabs rcx, 0x134149c6e2e20d70
imul rax, rcx
movabs r15, 0xea03fef03cd31f0
add rax, r15
xor r11, rax
mov rax, rdx
sub rax, qword [0x140333078]
xor r11, rax
movabs rax, 0x3c237e06c29ee139
xor r11, rax
mov r10, r11
imul r10, qword [0x140333080]
and r10, qword [0x140333078]
xor r10, rax
ror r10, 0x39
imul r10, rdx
not r9
imul r9, r8
movabs rax, 0x83275821829b4f5a
imul r9, rax
imul rdx, r14, 0xffffffffa78c7e04
sub rdx, rdi
mov al, r9b
not al
movzx ecx, al
movzx eax, dil
xor ecx, eax
and ecx, r12d
jge 0x14020a531
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rdx, cl
lea rcx, [rbx + rdx]
movabs rax, 0xf49ceae12184283c
imul rcx, rax
add rcx, r15
movabs rax, 0xf49ceae12184283b
sub rax, rbx
imul rcx, rax
imul rcx, r11
movabs rax, 0xa12817875630f4b
xor r8, rax
not r8
xor rcx, r8
xor r10, r9
imul r10, rsi
sub rcx, r10
call fcn.1401ac89c
mov qword [0x140337f70], rax
movdqa xmm0, xmmword [0x14030e170]
movdqu xmmword [rbp - 0x20], xmm0
mov dword [rbp - 0x10], 0x50d74c4d
mov dword [rbp - 0xc], 0x46403e74
mov dword [rbp - 8], 0x2cd613a9
mov byte [rbp - 4], 0xe2
xor r15d, r15d
mov r12, qword [0x140333040]
xor edx, edx
mov rax, r15
movabs rcx, 0x13cce94adb9acf48
div rcx
add dl, 0x38
mov r14b, dl
sar r14b, 7
or r14b, dl
mov al, r14b
sar al, 2
mov sil, r14b
shl sil, 6
mov r11b, sil
or r11b, al
movsx rcx, r14b
or sil, al
mov r9b, r14b
sar r9b, 5
mov al, r14b
shl al, 3
or r9b, al
mov r10b, r14b
sar r10b, 3
mov al, r14b
shl al, 5
or r10b, al
mov r8b, r14b
sar r8b, 4
mov al, r14b
shl al, 4
or r8b, al
mov bl, r14b
not bl
mov dil, r14b
ror dil, 7
lea eax, [r10 - 0x50]
add dil, al
mov dl, byte [rbp + r15 - 0x20]
sub dl, r11b
sub dl, 2
mov eax, 4
sub al, sil
xor dl, al
sar rcx, 1
mov al, r14b
shl al, 7
or cl, al
sub dl, cl
sub dl, byte [0x140333050]
sub dl, byte [0x140333058]
sub dl, 0x3f
add dl, sil
add dl, r14b
lea eax, [r11 + 7]
add al, r14b
xor dl, al
sub dl, r9b
sub dl, byte [0x140333048]
sub dl, r14b
sub dl, 0x50
add dl, sil
add dl, r12b
mov al, r8b
sub al, r9b
add al, r11b
add al, r14b
xor dl, al
mov al, r14b
sub al, r8b
xor al, r14b
sub dl, al
sub dl, r10b
add dl, 0x30
add dl, r14b
xor dil, dl
mov al, r14b
add al, al
sub dil, al
add sil, sil
add dil, 0x51
add dil, sil
add dil, r12b
not dil
mov al, r14b
sar al, 7
or al, r14b
sub dil, al
mov al, bl
xor al, byte [0x140333038]
sub dil, al
mov al, byte [0x140333030]
xor al, r14b
add dil, al
mov al, r14b
xor al, 0x40
sub dil, al
movsx eax, r14b
movsx ecx, bl
imul ecx, eax
xor dil, cl
mov byte [rbp + r15 - 0x20], dil
inc r15
cmp r15, 0x1d
jb 0x14020a5b7
lea rax, [rbp - 0x20]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 0x1d
and dword [rbp + 0x50], 0
mov dword [rbp + 0x50], 0x8b8fc36f
mov eax, 0xf6e7b508
sub eax, dword [0x140333058]
sub eax, dword [0x140333050]
xor eax, 0x7f5bf9c3
sub eax, dword [0x140333048]
mov rdx, qword [0x140333040]
lea ecx, [rdx - 0x5f445d71]
add ecx, eax
xor ecx, 0xff14865
sub ecx, 0x21fad44f
xor ecx, 0x69e43a31
mov r8d, dword [0x140333030]
xor r8d, 0x1c45ef75
sub r8d, ecx
mov eax, dword [0x140333038]
xor eax, 0xe3ba108a
sub r8d, eax
sub r8d, edx
add r8d, 0x589be023
xor r8d, 0x56ac6512
mov dword [rbp + 0x50], r8d
movsxd rdx, r8d
lea r8, [rbp - 0x20]
mov rcx, r13
call fcn.140052aa4
nop
and dword [rbp + 0x50], 0
xor eax, eax
and dword [rbp + 0x58], eax
mov dword [rbp + 0x58], 0x1cf602e0
mov eax, 0xe24eb61f
sub eax, dword [0x140333058]
sub eax, dword [0x140333050]
xor eax, 0x4db15da5
sub eax, dword [0x140333048]
mov r8, qword [0x140333040]
lea edx, [r8 - 0x531a1703]
add edx, eax
xor edx, 0xfc17309e
sub edx, 0x6dc88d6f
xor edx, 0xf6e5ee10
mov ecx, dword [0x140333030]
xor ecx, 0xfc17309f
sub ecx, edx
mov eax, dword [0x140333038]
xor eax, 0x3e8cf60
sub ecx, eax
sub ecx, r8d
add ecx, 0x17e622eb
xor ecx, 0x361acca0
mov dword [rbp + 0x58], ecx
call fcn.140294a20
mov rdx, rax
mov rcx, r13
call fcn.140294bb4
nop
and dword [rbp + 0x58], 0
xor ebx, ebx
mov edi, 0x2526504a
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x14020a8b3
psrldq xmm0, 8
movq r9, xmm0
movzx ecx, cx
shr rcx, 1
lea r11, [r9 + rcx*2]
mov r10d, 0x1c1ebcca
jmp 0x14020a8a5
movsx edx, byte [r9]
mov r8d, edx
imul r8d, edx
add r8d, 0x31
xor r8d, 0x4764996c
mov ecx, r10d
xor ecx, edx
mov r10d, r8d
imul r10d, ecx
add r9, 2
cmp r9, r11
jne 0x14020a87f
cmp r10d, ebx
jne 0x14020a9b7
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov r11d, ecx
add r11, r10
shr rcx, 0x20
cmp r11, r10
je 0x14020a9b7
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x14020a9b7
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r9d, dword [rdx + r10]
add r9, r10
mov r14d, 0x1c1ebcca
jmp 0x14020a919
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, 0x4764996c
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r9]
inc r9
test dl, dl
jne 0x14020a8fb
cmp r14d, edi
je 0x14020a931
test esi, esi
jne 0x14020a8e6
jmp 0x14020a9b7
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r8d, word [rdx + rsi*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov r9d, dword [rdx + r8*4]
add r9, r10
cmp r9, r11
jbe 0x14020a9bf
lea rax, [rcx + r11]
cmp r9, rax
jae 0x14020a9bf
mov ebx, 0x1c1ebcca
mov edi, ebx
jmp 0x14020a97c
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, ebx
mov ebx, eax
imul ebx, ecx
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x14020a962
jmp 0x14020a99c
movsx ecx, al
mov eax, ecx
imul eax, ecx
add eax, 0x31
xor eax, 0x4764996c
xor ecx, edi
mov edi, eax
imul edi, ecx
inc r9
mov al, byte [r9]
test al, al
jne 0x14020a985
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x14020a853
mov rcx, r13
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp r9