Function at 0x14014c710
Capabilities:
Access peb ldr_data
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
xchg r14, rsi
mov qword [rsp + 0x20], r14
xchg rsi, r14
nop
mov qword [rsp - 8], rbp
sub rsp, 8
push rdi
nop
mov qword [rsp - 8], r12
sub rsp, 8
push r14
nop
sub rsp, 8
mov qword [rsp], r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
xchg rcx, rbx
mov rcx, rbx
xchg rcx, rbx
xor r14d, r14d
mov qword [rcx + 0x10], r14
mov qword [rcx + 0x20], r14
mov qword [rcx + 0x30], r14
mov qword [rcx + 0x40], r14
mov qword [rcx + 0x50], r14
mov qword [rcx + 0x60], r14
mov qword [rcx + 0x70], r14
xchg rdi, r14
mov qword [rcx + 0x80], rdi
xchg rdi, r14
mov qword [rcx + 0x90], r14
mov qword [rcx + 0xa0], r14
xchg r9, r14
mov qword [rcx + 0xb0], r9
xchg r14, r9
mov qword [rcx + 0xc0], r14
xchg r14, rdi
mov qword [rcx + 0xd0], rdi
xchg r14, rdi
xchg r9, r14
mov qword [rcx + 0xe0], r9
xchg r9, r14
mov qword [rcx + 0xf0], r14
xchg r14, rbp
mov qword [rcx + 0x100], rbp
xchg rbp, r14
mov rax, qword gs:[0x30]
mov rcx, qword [rax + 0x60]
mov rax, qword [rcx + 0x18]
mov rcx, qword [rax + 0x20]
mov rax, qword [rcx]
xchg rdx, r15
mov r15, qword [rax + 0x20]
xchg r15, rdx
xchg r13, rdx
mov qword [rbx], r13
xchg r13, rdx
lea r15, [0x140002b18]
mov qword [rbp - 0x70], r15
lea r12, [0x14014e5a0]
mov qword [rbp - 0x68], r12
lea rax, [rbp - 0x70]
mov qword [rbp - 0x38], rax
lea r9, [rbp - 0x70]
xor r8d, r8d
xchg rbx, r15
mov rcx, r15
xchg rbx, r15
call fcn.14014e300
mov dword [rsp + 0x30], 0xd8622bf
xor dword [rsp + 0x30], 0x7232d4d
add dword [rsp + 0x30], 0x2191d0b
add dword [rsp + 0x30], 0x2f1ea89
xor dword [rsp + 0x30], 0x7945ddf8
sub dword [rsp + 0x30], 0x123f14f3
add dword [rsp + 0x30], 0x5a080933
mov dword [rsp + 0x50], 0x4e2d616b
sub dword [rsp + 0x50], 0x2e99273c
add dword [rsp + 0x50], 0x433c1321
sub dword [rsp + 0x50], 0xd919800
sub dword [rsp + 0x50], 0x4ec609f7
add dword [rsp + 0x50], 0xf91d5445
mov dword [rsp + 0x54], 0x59ada1ce
add dword [rsp + 0x54], 0xa5ec662
xor dword [rsp + 0x54], 0x3feb9620
sub dword [rsp + 0x54], 0x393eaac7
add dword [rsp + 0x54], 0x641d0eb
xor dword [rsp + 0x54], 0x43dabd0a
xor dword [rsp + 0x54], 0x5795d4b3
add dword [rsp + 0x54], 0xc311b22e
mov dword [rsp + 0x34], 0x3b10d56f
add dword [rsp + 0x34], 0x18d484e0
sub dword [rsp + 0x34], 0x1cfaf46f
sub dword [rsp + 0x34], 0x32b44673
xor dword [rsp + 0x34], 0x1b879ad7
sub dword [rsp + 0x34], 0xf65dcd0
add dword [rsp + 0x34], 0x5eeb1dcb
xor dword [rsp + 0x34], 0x4fe5be4b
add dword [rsp + 0x34], 0x9deb45c0
mov dword [rsp + 0x58], 0x545b12c5
xor dword [rsp + 0x58], 0x667cf256
add dword [rsp + 0x58], 0x37b8cd15
add dword [rsp + 0x58], 0x3bdcaae
sub dword [rsp + 0x58], 0x45073591
sub dword [rsp + 0x58], 0x13851b3c
xor dword [rsp + 0x58], 0x286fc1ed
xor dword [rsp + 0x58], 0xc2da19d2
mov dword [rsp + 0x5c], 0x50e9796a
add dword [rsp + 0x5c], 0x15d892de
xor dword [rsp + 0x5c], 0x65fc63a1
add dword [rsp + 0x5c], 0x55b5db83
xor dword [rsp + 0x5c], 0x6d5e74f6
add dword [rsp + 0x5c], 0x1fdb0acd
add dword [rsp + 0x5c], 0xaa0fb548
mov dword [rsp + 0x38], 0x3ecb612c
sub dword [rsp + 0x38], 0x30396a91
xor dword [rsp + 0x38], 0x59db194f
sub dword [rsp + 0x38], 0x3c26fb7d
add dword [rsp + 0x38], 0x1da1954
sub dword [rsp + 0x38], 0xf964d0d
add dword [rsp + 0x38], 0xb156fe20
mov dword [rsp + 0x60], 0x1d055c46
add dword [rsp + 0x60], 0xf1db31f
add dword [rsp + 0x60], 0x20789352
xor dword [rsp + 0x60], 0x5cbd59de
add dword [rsp + 0x60], 0x67717127
sub dword [rsp + 0x60], 0x1b6841c
xor dword [rsp + 0x60], 0x7509b9fa
xor dword [rsp + 0x60], 0x372af1e3
add dword [rsp + 0x60], 0xc7ef5f44
mov dword [rsp + 0x64], 0x29f3416d
add dword [rsp + 0x64], 0x38b64695
xor dword [rsp + 0x64], 0x2ba3fe47
sub dword [rsp + 0x64], 0x4759d07a
xor dword [rsp + 0x64], 0x61f4523c
add dword [rsp + 0x64], 0x9f5a07bf
mov dword [rsp + 0x3c], 0x4d92782e
add dword [rsp + 0x3c], 0x1fc6b3a0
sub dword [rsp + 0x3c], 0x421e3abe
sub dword [rsp + 0x3c], 0x21ea7415
add dword [rsp + 0x3c], 0x6f8e5f2b
add dword [rsp + 0x3c], 0x45dfe298
mov dword [rsp + 0x68], 0x62c9aef3
sub dword [rsp + 0x68], 0x509331c0
add dword [rsp + 0x68], 0x1d228d56
add dword [rsp + 0x68], 0x4cc94eee
sub dword [rsp + 0x68], 0x4bb28810
add dword [rsp + 0x68], 0x16d91b63
add dword [rsp + 0x68], 0xb87312eb
mov dword [rsp + 0x6c], 0x4afcdf08
sub dword [rsp + 0x6c], 0xb2ad2e6
sub dword [rsp + 0x6c], 0x3f45ec82
xor dword [rsp + 0x6c], 0x3aa6de1b
add dword [rsp + 0x6c], 0x3344042c
xor dword [rsp + 0x6c], 0x748cd3a1
add dword [rsp + 0x6c], 0xe5d4e96f
mov dword [rsp + 0x40], 0x56ded663
add dword [rsp + 0x40], 0x27886f29
sub dword [rsp + 0x40], 0x31a34cf
sub dword [rsp + 0x40], 0x56a5be9b
add dword [rsp + 0x40], 0x2310347e
xor dword [rsp + 0x40], 0x39656582
sub dword [rsp + 0x40], 0xc747be3
sub dword [rsp + 0x40], 0x20d27ff0
xor dword [rsp + 0x40], 0xef3559f1
mov dword [rsp + 0x70], 0x739fb709
xor dword [rsp + 0x70], 0x53a3c849
add dword [rsp + 0x70], 0x44f91a6c
sub dword [rsp + 0x70], 0x2b4a3bc1
xor dword [rsp + 0x70], 0x12ebca5
add dword [rsp + 0x70], 0xc758e02
add dword [rsp + 0x70], 0xba749057
mov dword [rsp + 0x74], 0x28f77894
xor dword [rsp + 0x74], 0x639f6b5
add dword [rsp + 0x74], 0x20017613
sub dword [rsp + 0x74], 0x445aab6f
add dword [rsp + 0x74], 0x73b4fd5b
sub dword [rsp + 0x74], 0x427e0efb
add dword [rsp + 0x74], 0xc3c8b850
mov dword [rsp + 0x44], 0x59a85775
sub dword [rsp + 0x44], 0x727127
sub dword [rsp + 0x44], 0x117b491b
sub dword [rsp + 0x44], 0xda0e64
xor dword [rsp + 0x44], 0x7a30b48f
xor dword [rsp + 0x44], 0x1f224eaa
add dword [rsp + 0x44], 0x9acc49d4
mov dword [rsp + 0x78], 0x53eaa8c7
sub dword [rsp + 0x78], 0x2c69325d
sub dword [rsp + 0x78], 0x4b79445
xor dword [rsp + 0x78], 0x401ac96e
sub dword [rsp + 0x78], 0x2f7a84d3
add dword [rsp + 0x78], 0x39e7f84f
sub dword [rsp + 0x78], 0x40eb9123
xor dword [rsp + 0x78], 0xd3e5f23a
mov dword [rsp + 0x7c], 0x1fd75184
xor dword [rsp + 0x7c], 0x3b618cd5
sub dword [rsp + 0x7c], 0x14da4973
xor dword [rsp + 0x7c], 0x6ebc4627
xor dword [rsp + 0x7c], 0x7eb6ff00
sub dword [rsp + 0x7c], 0x14b6ed5e
add dword [rsp + 0x7c], 0x6fde2417
add dword [rsp + 0x7c], 0x84a99e04
mov dword [rsp + 0x48], 0x1b44fec
add dword [rsp + 0x48], 0x71adf3f6
sub dword [rsp + 0x48], 0x5d737c27
add dword [rsp + 0x48], 0x168a18f5
xor dword [rsp + 0x48], 0x279bfaaf
add dword [rsp + 0x48], 0x351c6ea6
xor dword [rsp + 0x48], 0x636a7ba7
add dword [rsp + 0x48], 0xd01e67e
xor dword [rsp + 0x48], 0x8e29675e
mov dword [rbp - 0x80], 0x492b9160
xor dword [rbp - 0x80], 0x4033885e
add dword [rbp - 0x80], 0x946dd26
add dword [rbp - 0x80], 0x18e58930
xor dword [rbp - 0x80], 0x60185551
sub dword [rbp - 0x80], 0x3f081349
sub dword [rbp - 0x80], 0x60a779e
add dword [rbp - 0x80], 0xf9655fd0
mov dword [rbp - 0x7c], 0x2b1a5668
xor dword [rbp - 0x7c], 0x47c081fa
xor dword [rbp - 0x7c], 0x4d7f66a5
xor dword [rbp - 0x7c], 0x25c25d9a
xor dword [rbp - 0x7c], 0x48beed0d
sub dword [rbp - 0x7c], 0x15bbee20
add dword [rbp - 0x7c], 0x4303bfd6
sub dword [rbp - 0x7c], 0x58ff1356
add dword [rbp - 0x7c], 0xde853f70
mov word [rsp + 0x4c], 0x7ee5
xor word [rsp + 0x4c], 0x4856
xor word [rsp + 0x4c], 0x356f
xor word [rsp + 0x4c], 0x2e
add word [rsp + 0x4c], 0x4bb3
add word [rsp + 0x4c], 0x6f19
mov dword [rbp - 0x78], 0x692b86e2
xor dword [rbp - 0x78], 0x6ef4c0b4
xor dword [rbp - 0x78], 0x4cb64392
sub dword [rbp - 0x78], 0x5bfb33
add dword [rbp - 0x78], 0x2c28a90
xor dword [rbp - 0x78], 0xb2616a8f
xor eax, eax
mov word [rbp - 0x74], ax
nop word [rax + rax]
movzx ecx, word [rsp + rax*2 + 0x50]
movzx edx, byte [rsp + rax + 0x30]
add dx, cx
mov word [rsp + rax*2 + 0x50], dx
mov byte [rsp + rax + 0x30], r14b
inc rax
cmp rax, 0x1e
jb 0x14014cd7a
xor r8d, r8d
lea rdx, [rsp + 0x50]
xchg rbx, rcx
mov rbx, rcx
xchg rbx, rcx
call fcn.14014efe0
mov rdi, rax
xchg rcx, r11
mov r11, r14
xchg r11, rcx
nop word [rax + rax]
mov byte [rsp + rcx + 0x50], 0x19
add byte [rsp + rcx + 0x50], 0x25
xor byte [rsp + rcx + 0x50], 0x70
xor byte [rsp + rcx + 0x50], 0x79
add byte [rsp + rcx + 0x50], 0x20
sub byte [rsp + rcx + 0x50], 0x36
add byte [rsp + rcx + 0x50], 0x36
sub byte [rsp + rcx + 0x50], 0x57
inc rcx
cmp rcx, 0x3c
jb 0x14014cdca
mov qword [rsp + 0x28], r14
mov byte [rsp + 0x20], 0x50
xor byte [rsp + 0x20], 0x7a
xor byte [rsp + 0x20], 0x75
add byte [rsp + 0x20], 0x19
xor byte [rsp + 0x20], 0x3c
sub byte [rsp + 0x20], 0x44
xor r9d, r9d
xor r8d, r8d
mov rdx, rdi
xchg r12, rbx
mov rcx, r12
xchg rbx, r12
call fcn.140150110
xchg rdx, rax
mov qword [rbx + 8], rdx
xchg rdx, rax
mov qword [rbp + 0x40], rdi
test rdi, rdi
je 0x14014ce92
mov dword [rsp + 0x20], 0x6f921c64
xor dword [rsp + 0x20], 0x1409a82f
xor dword [rsp + 0x20], 0x7b45fe1b
xor dword [rsp + 0x20], 0xc1a7e23
add dword [rsp + 0x20], 0x146a83d8
sub dword [rsp + 0x20], 0x212e384b
xor r9d, r9d
lea r8, [rbp + 0x40]
lea rdx, [r9 - 1]
lea rcx, [rbx + 0x70]
call fcn.14014d210
xchg rdi, r15
mov qword [rbp - 0x30], rdi
xchg rdi, r15
mov qword [rbp - 0x28], r12
lea rax, [rbp - 0x30]
mov qword [rbp + 8], rax
lea r9, [rbp - 0x30]
xor r8d, r8d
xchg rdx, r15
mov r15, qword [rbx + 8]
xchg rdx, r15
xchg rdi, rbx
mov rcx, rdi
xchg rdi, rbx
call fcn.14014e300
xchg rsi, rax
mov rsi, rbx
xchg rsi, rax
lea r11, [rsp + 0x110]
xchg rbx, r10
mov r10, qword [r11 + 0x40]
xchg rbx, r10
xchg rsi, rbp
mov rbp, qword [r11 + 0x48]
xchg rbp, rsi
mov rsp, r11
nop
add rsp, 8
mov r15, qword [rsp - 8]
nop
add rsp, 8
mov r14, qword [rsp - 8]
nop
add rsp, 8
mov r12, qword [rsp - 8]
nop
mov rdi, qword [rsp]
add rsp, 8
push rax
push rbx
push rdx
push rax
push rdx
xchg qword [rsp + 0x28], rbp
add rsp, 0x30
ret