Function at 0x1400e8038
Capabilities:
Access peb ldr_data
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
xor ebx, ebx
mov edi, 0xa589072e
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov r13d, 0x4764996c
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x1400e80c4
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0x36b89960
jmp 0x1400e80b6
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, r13d
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x1400e8099
cmp r9d, ebx
jne 0x1400e81c4
mov r9, qword [rax + 0x30]
movsxd rcx, dword [r9 + 0x3c]
mov rcx, qword [rcx + r9 + 0x88]
mov r11d, ecx
add r11, r9
shr rcx, 0x20
cmp r11, r9
je 0x1400e81c4
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x1400e81c4
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r10d, dword [rdx + r9]
add r10, r9
mov r14d, 0x36b89960
jmp 0x1400e8127
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, r13d
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r10]
inc r10
test dl, dl
jne 0x1400e810c
cmp r14d, edi
je 0x1400e813f
test esi, esi
jne 0x1400e80f7
jmp 0x1400e81c4
mov edx, dword [r11 + 0x1c]
add rdx, r9
mov eax, dword [r11 + 0x24]
add rax, r9
movzx eax, word [rax + rsi*2]
mov r8d, dword [rdx + rax*4]
add r8, r9
cmp r8, r11
jbe 0x1400e81cc
lea rax, [r11 + rcx]
cmp r8, rax
jae 0x1400e81cc
mov ebx, 0x36b89960
mov edi, ebx
jmp 0x1400e8189
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, r13d
mov eax, ebx
xor eax, ecx
mov ebx, edx
imul ebx, eax
inc r8
mov al, byte [r8]
cmp al, 0x2e
jne 0x1400e816f
jmp 0x1400e81a9
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, r13d
mov eax, edi
xor eax, ecx
mov edi, edx
imul edi, eax
inc r8
mov al, byte [r8]
test al, al
jne 0x1400e8192
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x1400e806d
and dword [rbp + 0x48], 0
mov dword [rbp + 0x48], 0x2b03f473
mov eax, 0x573759f5
sub eax, dword [0x14035f058]
sub eax, dword [0x14035f050]
xor eax, 0xba67d415
sub eax, dword [0x14035f048]
mov rcx, qword [0x14035f040]
add eax, 0x7492dc81
add eax, ecx
xor eax, 0xf4d5d18
add eax, 0x5dd1e45c
xor eax, 0x135637c3
lea edx, [rcx - 0x1baa5334]
add edx, eax
not edx
mov eax, dword [0x14035f038]
xor eax, 0xcb30093e
sub edx, eax
mov ecx, dword [0x14035f030]
xor ecx, 0x34cff6c1
add ecx, 0xc2cffb4b
add ecx, edx
xor ecx, 0x693a8bbe
mov dword [rbp + 0x48], ecx
movsxd rcx, ecx
call r8
mov qword [rbp + 0x58], rax
and dword [rbp + 0x48], 0
movabs rdi, 0xbef404ed51f68a61
movabs rax, 0xab2c0c567a904000
movabs r11, 0xd6f5e9c137b0af84
mov r14, qword [0x14035f070]
imul r14, rax
movabs rax, 0x8a9dccc25648f000
xor r14, rax
mov r13, r14
imul r13, rdi
movabs r9, 0xaaaaaaaaaaaaaaab
mov rax, r9
mul r13
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov rcx, r13
sub rcx, rax
lea r12, [0x14035f060]
mov r10, r14
and r10, rdi
imul r10, qword [r12 + rcx*8]
movabs rax, 0xa8519aa3c4714dc0
imul r10, rax
movabs rax, 0x768be29ec8281af8
xor r10, rax
shr r10, 3
movabs rax, 0xffffff57d84915a3
mov rsi, r14
imul rsi, rax
sub rsi, 0x10babe90
xor rsi, r10
xor rsi, qword [0x14035f060]
mov rax, r10
imul rax, qword [0x14035f070]
movabs rcx, 0xb9de928bd1faaa82
imul rax, rcx
not rax
and rsi, rax
ror rsi, 0x12
shr rsi, 8
movabs r8, 0x410bfb12ae09759f
lea rcx, [r14 + r8]
xor rcx, 0xffffffffef74a18f
mov rax, r9
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movabs rax, 0x9095828c8c60d1a0
mov rbx, qword [r12 + rcx*8]
imul rbx, rax
sub rbx, r8
movabs rcx, 0x626acb03159ea410
mov rax, r10
imul rax, rcx
xor rbx, rax
shr rbx, 0x1f
not rbx
mov r15, rbx
xor r15, r14
lea rcx, [rbx + r8]
mov rax, r9
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movzx eax, bl
movzx ecx, byte [r12 + rcx*8]
imul ecx, eax
movzx ecx, cl
xor ecx, 0x93
and ecx, 0x8000003f
jge 0x1400e83c4
dec ecx
or ecx, 0xffffffc0
inc ecx
ror r15, cl
not r15
imul r15, r10
imul r12, r15, 0xffffffffef454170
add r8, r12
mov r9, rbx
imul r9, rsi
sub r9, r8
xor r9, r11
mov cl, r8b
xor cl, 0xfc
and cl, 0xf
rol r9, cl
mov rax, r8
sub rax, qword [0x14035f078]
xor r9, rax
movabs rax, 0x118821e650242b70
imul r15, rax
movabs rax, 0x55f530999f38b8c1
sub r15, rax
xor r9, r15
xor r9, r10
xor r9, r14
mov rax, r9
mov r15b, 0x3f
and eax, 1
je 0x1400e8767
sub rax, 1
je 0x1400e8637
sub rax, 1
je 0x1400e8542
cmp rax, 1
jne 0x1400e8817
mov r11, r8
imul r11, rbx
movabs rax, 0xb6f7ab33871eb93d
add rax, r9
xor r11, rax
ror r11, 0x28
shr r11, 0xc
xor r11, r14
not r11
movabs rcx, 0x8357330ba488
mov rdx, qword [0x14035f088]
add rdx, rcx
movabs rax, 0x41897e6ad619f19d
xor rdx, rax
movzx eax, r11b
movzx ecx, r9b
imul ecx, eax
and cl, r15b
ror rdx, cl
shl rdx, 0xf
movabs rax, 0xf7ca7db96beb487b
sub rax, rbx
mov rbx, rdx
xor rbx, rax
mov rcx, rbx
imul rcx, rdi
mov eax, 0xba309a91
add rcx, rax
movabs r15, 0xaaaaaaaaaaaaaaab
mov rax, r15
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
lea r13, [0x14035f060]
mov cl, byte [r13 + rcx*8]
and cl, 0xf
movabs rdi, 0xf417a1063c3c330e
sub rdi, r11
shr rdi, cl
movabs rcx, 0x41141f9af6be5ffd
add rcx, r12
mov rax, r15
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov rax, r9
imul rax, qword [r13 + rcx*8]
imul rax, r9
sub rax, rsi
xor rdi, rax
jmp 0x1400e8817
movabs rax, 0xaaaaaa1aba2967af
mov rcx, r9
xor rcx, rax
movabs rax, 0x1206ed7824bbe3
imul rcx, rax
movabs rdx, 0xfff17ca86d4b51d3
mov rax, r10
xor rax, rdx
sub rcx, rax
movabs rax, 0xffff7e8a9c395573
imul r12, rax
movabs rbx, 0x7f53a93602edf6e0
add rbx, rcx
add rbx, r12
movabs rax, 0x277cd7be68f9b0cf
mov rcx, rbx
xor rcx, rax
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
mov r8, rbx
not r8
lea rdx, [0x14035f060]
imul r8, qword [rdx + rcx*8]
xor r8, 0xffffffffef7cb17f
lea ecx, [r9 - 0x13]
and cl, r15b
rol r8, cl
movabs rax, 0xdb8dea3f79844431
xor r13, rax
movabs rax, 0x7c7a7dc6867bbbce
and r13, rax
imul r8, r13
mov rcx, r8
ror rcx, 0x36
not rcx
movabs rax, 0x9b2de6b29c54cba0
imul rcx, rax
mov rax, rbx
sub rax, r8
lea rdx, [rcx + rax*4]
mov cl, sil
and cl, r15b
ror rdx, cl
mov rax, rdi
mov rdi, rdx
imul rdi, rax
jmp 0x1400e8817
movabs rax, 0x456bed62a1e4156f
imul r9, rax
movabs rax, 0xd79435e50d79435f
mul r9
shr rdx, 4
movzx eax, dl
imul edx, eax, 0x13
mov cl, r9b
sub cl, dl
movabs rdx, 0x410bfb12ae09759e
mov rax, r14
imul rax, rdx
xor rax, r11
not rax
shl rax, cl
xor r10, rax
mov cl, r8b
and cl, r15b
rol r10, cl
movabs rcx, 0x410bfb12ae09759f
add rcx, r9
movabs rax, 0xaaaaaaaaaaaaaaab
mul rcx
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub rcx, rax
movabs rdx, 0x4ed51f68a61
lea rax, [0x14035f060]
mov rax, qword [rax + rcx*8]
imul rax, rdx
xor r10, rax
movabs rax, 0xffffc7a7e6ed1182
or r10, rax
mov rdi, qword [0x14035f070]
imul rdi, r11
sub rdi, r8
mov rax, rsi
sub rax, r10
xor rdi, rax
movabs rax, 0xc7a7c6a6b7e5118f
xor rdi, rax
movabs rax, 0xcccccccccccccccd
mul r14
shr rdx, 3
lea rax, [rdx + rdx*4]
add rax, rax
mov rcx, r14
sub rcx, rax
or rcx, 1
xor edx, edx
mov rax, rdi
div rcx
mov rcx, rdx
mov rdx, r9
imul rdx, r8
imul rdx, rdi
shr rdx, cl
mov rax, rbx
sub rax, rdx
sub rax, r14
movabs r14, 0x789589478b75d95
add r14, rax
xor r14, rsi
movzx eax, bl
imul ecx, eax, 0xea
and cl, r15b
rol r14, cl
not r14
jmp 0x1400e8817
movabs rax, 0xaaaaaaaaaaaaaaab
mul r10
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
mov rcx, r10
sub rcx, rax
mov rax, r9
imul rax, qword [0x14035f080]
lea rdx, [0x14035f060]
mov rdx, qword [rdx + rcx*8]
and rdx, rax
xor rdx, r10
and r10b, r15b
mov cl, r10b
mov r10, rdx
ror r10, cl
imul r10, r8
not rsi
imul rsi, rbx
movabs rax, 0x7cd8a7de6a14406e
imul rsi, rax
mov rax, r10
imul rax, r14
mov r14, rsi
xor r14, rax
imul rsi, qword [0x14035f060], 0xffffffffef454170
mov rdx, qword [0x14035f068]
sub rsi, rdx
mov al, r14b
not al
movzx ecx, al
movzx eax, dl
xor ecx, eax
and ecx, 0x8000003f
jge 0x1400e8804
dec ecx
or ecx, 0xffffffc0
inc ecx
ror rsi, cl
movabs rax, 0x410bfb12ae09759f
add rsi, rax
add rsi, r12
movabs rcx, 0xff055d7b9a5f4aa3
xor r11, rcx
movabs rax, 0xaaaaaaaaaaaaaaab
mul r11
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
sub r11, rax
xor r10, r14
lea rax, [0x14035f060]
imul r10, qword [rax + r11*8]
not r8
imul r8, r9
imul r8, rsi
imul r8, rdi
movabs rcx, 0xf5ed7e879dec007f
xor rcx, rbx
not rcx
xor rcx, r8
sub rcx, r10
call fcn.1400e74c0
mov qword [0x14036d9e8], rax
and dword [rbp + 0x50], 0
mov dword [rbp + 0x50], 0x351b7938
mov eax, 0xa1026321
sub eax, dword [0x14035f058]
sub eax, dword [0x14035f050]
xor eax, 0xc2f2c135
sub eax, dword [0x14035f048]
mov r12, qword [0x14035f040]
add eax, 0x7ffdc5bd
add eax, r12d
xor eax, 0x18e57338
add eax, 0x5bb81bbc
xor eax, 0x578b1f0d
lea ecx, [r12 - 0x137bec2c]
add ecx, eax
not ecx
mov eax, dword [0x14035f038]
xor eax, 0xcb0e641e
sub ecx, eax
mov r15d, dword [0x14035f030]
xor r15d, 0x34f19be1
add r15d, 0xa148f62b
add r15d, ecx
xor r15d, 0x8682285e
mov dword [rbp + 0x50], r15d
movdqa xmm0, xmmword [0x140336800]
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x10], 0x6be5
xor r13d, r13d
xor edx, edx
mov rax, r13
movabs rcx, 0x13cce94adba2b9c0
div rcx
add dl, 0x39
mov r14b, dl
sar r14b, 7
or r14b, dl
mov sil, r14b
shl sil, 6
mov al, r14b
sar al, 2
or sil, al
mov r8b, r14b
sar r8b, 5
mov al, r14b
shl al, 3
or r8b, al
mov r10b, r14b
sar r10b, 3
mov al, r14b
shl al, 5
or r10b, al
mov dl, r14b
sar dl, 4
mov al, r14b
shl al, 4
or dl, al
mov r9b, r14b
add r9b, r9b
mov r11b, r14b
sar r11b, 7
mov bl, r14b
not bl
mov dil, byte [rbp + r13 - 0x20]
sub dil, sil
sub dil, 2
mov eax, 4
sub al, sil
xor dil, al
mov cl, r14b
shl cl, 7
mov al, r14b
sar al, 1
or cl, al
sub dil, cl
sub dil, byte [0x14035f050]
sub dil, byte [0x14035f058]
sub dil, 0x3f
add dil, sil
add dil, r14b
lea eax, [rsi + 7]
add al, r14b
xor dil, al
sub dil, r8b
sub dil, r14b
sub dil, byte [0x14035f048]
sub dil, 0x50
add dil, r12b
add dil, sil
mov al, dl
sub al, r8b
add al, sil
add al, r14b
xor dil, al
mov al, r14b
sub al, dl
xor al, r14b
sub dil, al
sub dil, r10b
add dil, 0x30
add dil, r14b
mov al, r11b
or al, r9b
sub al, 0x50
add al, r10b
xor dil, al
add sil, sil
add dil, sil
sub dil, r9b
add dil, 0x51
add dil, r12b
not dil
or r11b, r14b
sub dil, r11b
mov al, bl
xor al, byte [0x14035f038]
sub dil, al
mov al, r14b
xor al, 0x40
sub dil, al
mov al, r14b
xor al, byte [0x14035f030]
add dil, al
movsx eax, r14b
movsx ecx, bl
imul ecx, eax
xor cl, dil
mov byte [rbp + r13 - 0x20], cl
inc r13
cmp r13, 0x12
jb 0x1400e8916
lea rax, [rbp - 0x20]
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x28], 0x12
and dword [rbp + 0x48], 0
mov dword [rbp + 0x48], 0x6f90cf9a
mov eax, 0x66db4431
sub eax, dword [0x14035f058]
sub eax, dword [0x14035f050]
xor eax, 0x8e2c1e15
sub eax, dword [0x14035f048]
mov rcx, qword [0x14035f040]
add eax, 0x39744941
add eax, ecx
xor eax, 0xdd9ff718
add eax, 0x7fe5765c
xor eax, 0xfd8e1b57
lea edx, [rcx - 0x4606f4b4]
add edx, eax
not edx
mov eax, dword [0x14035f038]
xor eax, 0xcbde3f3e
sub edx, eax
mov ecx, dword [0x14035f030]
xor ecx, 0x3421c0c1
add ecx, 0x71f4294b
add ecx, edx
xor ecx, 0x20fa2dbe
mov dword [rbp + 0x48], ecx
movsxd rdx, ecx
mov r9d, r15d
lea r8, [rbp - 0x20]
mov r13, qword [rbp + 0x58]
mov rcx, r13
call fcn.140053908
nop
and dword [rbp + 0x48], 0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x10], ax
and dword [rbp + 0x50], eax
and dword [rbp + 0x58], eax
mov dword [rbp + 0x58], 0x13f9867f
mov eax, 0x3f2307c5
sub eax, dword [0x14035f058]
sub eax, dword [0x14035f050]
xor eax, 0xf7a3a11f
sub eax, dword [0x14035f048]
mov rcx, qword [0x14035f040]
add eax, 0x866a2c16
add eax, ecx
xor eax, 0x54127e72
add eax, 0x274f0c42
xor eax, 0x457d6b58
lea edx, [rcx - 0x6105bb26]
add edx, eax
not edx
mov eax, dword [0x14035f038]
xor eax, 0xca3edeb4
sub edx, eax
mov ecx, dword [0x14035f030]
xor ecx, 0x35c1214b
add ecx, 0xd0b5fec0
add ecx, edx
xor ecx, 0x84d472bc
mov dword [rbp + 0x58], ecx
call fcn.1402ae5b0
mov rdx, rax
mov rcx, r13
call fcn.1402ae744
nop
and dword [rbp + 0x58], 0
xor ebx, ebx
mov edi, 0xad3013aa
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
movups xmm0, xmmword [rax + 0x58]
movd ecx, xmm0
sub cx, 8
test ebx, ebx
je 0x1400e8c1d
psrldq xmm0, 8
movq r8, xmm0
movzx ecx, cx
shr rcx, 1
lea r10, [r8 + rcx*2]
mov r9d, 0x162266a2
jmp 0x1400e8c0f
movsx edx, byte [r8]
mov ecx, edx
imul ecx, edx
add ecx, 0x31
xor ecx, 0x4764996c
xor edx, r9d
mov r9d, ecx
imul r9d, edx
add r8, 2
cmp r8, r10
jne 0x1400e8bef
cmp r9d, ebx
jne 0x1400e8d27
mov r10, qword [rax + 0x30]
movsxd rcx, dword [r10 + 0x3c]
mov rcx, qword [rcx + r10 + 0x88]
mov r11d, ecx
add r11, r10
shr rcx, 0x20
cmp r11, r10
je 0x1400e8d27
mov esi, dword [r11 + 0x18]
test esi, esi
je 0x1400e8d27
mov r12d, dword [r11 + 0x20]
dec esi
lea rdx, [r12 + rsi*4]
mov r9d, dword [rdx + r10]
add r9, r10
mov r14d, 0x162266a2
jmp 0x1400e8c83
movsx r8d, dl
mov edx, r8d
imul edx, r8d
add edx, 0x31
xor edx, 0x4764996c
xor r8d, r14d
mov r14d, edx
imul r14d, r8d
mov dl, byte [r9]
inc r9
test dl, dl
jne 0x1400e8c65
cmp r14d, edi
je 0x1400e8c9b
test esi, esi
jne 0x1400e8c50
jmp 0x1400e8d27
mov edx, dword [r11 + 0x24]
add rdx, r10
movzx r8d, word [rdx + rsi*2]
mov edx, dword [r11 + 0x1c]
add rdx, r10
mov r9d, dword [rdx + r8*4]
add r9, r10
cmp r9, r11
jbe 0x1400e8d2f
lea rax, [r11 + rcx]
cmp r9, rax
jae 0x1400e8d2f
mov ebx, 0x162266a2
mov edi, ebx
jmp 0x1400e8ce9
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, ebx
xor eax, ecx
mov ebx, edx
imul ebx, eax
inc r9
mov al, byte [r9]
cmp al, 0x2e
jne 0x1400e8ccc
jmp 0x1400e8d0c
movsx ecx, al
mov edx, ecx
imul edx, ecx
add edx, 0x31
xor edx, 0x4764996c
mov eax, edi
xor eax, ecx
mov edi, edx
imul edi, eax
inc r9
mov al, byte [r9]
test al, al
jne 0x1400e8cf2
mov rax, qword gs:[0x60]
mov rax, qword [rax + 0x18]
mov rax, qword [rax + 0x10]
mov rax, qword [rax]
jmp 0x1400e8bc3
mov rcx, r13
mov rbx, qword [rsp + 0x90]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp r9