Function at 0x140004f30
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x118
xorps xmm0, xmm0
movaps xmmword [rsp + 0xc0], xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rsp + 0x70], xmm0
mov qword [rsp + 0xd0], 0
movsxd rax, dword [rcx + 0x3c]
mov eax, dword [rcx + rax + 0x88]
mov qword [rsp + 0x50], rcx
add rax, rcx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x30]
add rax, 0x20
mov qword [rsp + 0x68], rax
mov rax, qword [rsp + 0x68]
cmp dword [rax], 0
setne byte [rsp + 0x2f]
mov dword [rsp + 0x4c], 0x1218582b
mov eax, 1
lea rcx, [0x14000c6c0]
nop word cs:[rax + rax]
movsxd rbp, dword [rcx + rax*4 - 4]
xor dword [rsp + rbp*4 + 0x70], 0x1e27
cmp rax, 0x19
je 0x140004ff5
movsxd rbp, dword [rcx + rax*4]
xor dword [rsp + rbp*4 + 0x70], 0x1e27
add rax, 2
jmp 0x140004fd0
movabs rbx, 0xffffffff5140b93b
mov edi, 0xaebf46c4
mov rbp, qword [rsp + 0x50]
mov esi, ebp
and esi, 0xaebf46c4
mov rax, rbp
xor rax, rdi
mov rcx, rbp
or rcx, rdi
add rsi, rbp
add rsi, rax
add rsi, rbx
sub rsi, rcx
add rsi, 1
mov qword [rsp + 0x110], rsi
mov rax, rbp
not rax
or rax, 0x514d5501
mov rcx, rbp
or rcx, 0xffffffffaeb2aafe
sub rcx, rax
lea rax, [rcx + rcx]
add rax, 1
mov qword [rsp + 0x108], rax
not rcx
mov qword [rsp + 0x100], rcx
mov eax, edx
not eax
mov ebx, eax
and ebx, 0x6a78ebb9
mov ecx, edx
and ecx, 0x95871446
add ecx, edx
and eax, 0x95871446
add eax, ecx
or edx, 0x95871446
sub eax, edx
or eax, ebx
xor eax, 0x382bbfec
mov dword [rsp + 0x3c], eax
mov rax, rbp
neg rax
mov qword [rsp + 0xf8], rax
lea rax, [rbp - 1]
mov qword [rsp + 0xf0], rax
mov rax, rbp
or rax, 0x32f63c8
mov rcx, rbp
or rcx, 0xfffffffffcd09c37
lea rdx, [rax + rcx]
add rdx, 0x32f63c9
mov qword [rsp + 0xe8], rdx
not rdx
mov qword [rsp + 0xe0], rdx
add rax, rcx
add rax, 1
mov qword [rsp + 0xd8], rax
mov ecx, 0x70d1
xor eax, eax
mov qword [rsp + 0x60], rax
mov r10d, 0x3e2b
mov eax, 0
mov qword [rsp + 0x58], rax
jmp 0x140005150
mov edi, dword [rsp + 0x4c]
mov ecx, 0x7a6c60c8
add edi, ecx
mov dword [rsp + 0x28], edi
cmp byte [rsp + 0x60], 0
lea rdi, [0x14000c660]
je 0x140005160
mov ecx, dword [rsp + 0x70]
mov edi, 0x3bda
xor ecx, edi
mov dil, 1
mov qword [rsp + 0x60], rdi
jmp 0x1400051e5
mov ecx, 2
nop word cs:[rax + rax]
nop
movsxd rbp, dword [rdi + rcx*4 - 8]
xor byte [rsp + rbp*4 + 0x70], 0x26
movsxd rbp, dword [rdi + rcx*4 - 4]
xor byte [rsp + rbp*4 + 0x70], 0x26
movsxd rbp, dword [rdi + rcx*4]
xor byte [rsp + rbp*4 + 0x70], 0x26
add rcx, 3
cmp rcx, 0x1a
jne 0x140005170
jmp 0x14000513d
cmp eax, 0x98a34b84
je 0x140005545
cmp eax, 0xa0054a7d
jne 0x140005842
cmp dword [rsp + 0x48], 0
mov eax, 0xb792e189
mov ecx, 0x6aac41d4
cmove eax, ecx
mov ecx, dword [rsp + 0xc0]
nop dword [rax + rax]
xor ecx, r10d
mov r8, rbp
mov r9, r15
mov rbx, r12
mov rsi, r13
mov r11d, edi
mov edx, r14d
cmp ecx, 0x45de
jg 0x140005240
cmp ecx, 0x1dcc
jle 0x1400052a0
cmp ecx, 0x3148
jg 0x140005344
cmp ecx, 0x2fb3
jle 0x140005440
cmp ecx, 0x2fb4
je 0x1400051af
cmp ecx, 0x30a8
jne 0x1400051e5
mov ecx, dword [rsp + 0xa0]
xor ecx, r10d
mov eax, 0x84409519
jmp 0x1400051d3
cmp ecx, 0x70d0
jg 0x140005300
cmp ecx, 0x52f4
jg 0x14000537c
cmp ecx, 0x45df
je 0x14000580e
cmp ecx, 0x489b
je 0x140005545
cmp ecx, 0x5068
jne 0x1400051e5
mov dword [rsp + 0x48], edi
mov ecx, dword [rsp + 0xbc]
xor ecx, r10d
mov eax, 0xa0054a7d
jmp 0x1400051d3
cmp ecx, 0x98d
jg 0x1400053c0
cmp ecx, 0x24e
je 0x1400057a4
cmp ecx, 0x348
je 0x1400055fe
cmp ecx, 0x363
jne 0x1400051e5
lea edx, [r14 + 1]
mov ecx, dword [rsp + 0xa4]
xor ecx, r10d
mov eax, 0x738a1e72
mov r8, rbp
mov r9, r15
mov rbx, r12
mov rsi, r13
mov r11d, edi
jmp 0x1400051e5
cmp ecx, 0x7986
jg 0x140005401
cmp ecx, 0x70d1
je 0x140005120
cmp ecx, 0x72dc
je 0x140005858
cmp ecx, 0x735d
jne 0x1400051e5
mov ecx, dword [rsp + 0xa8]
xor ecx, r10d
mov eax, 0xfd763716
jmp 0x1400051d3
cmp ecx, 0x3149
je 0x140005769
cmp ecx, 0x420b
je 0x1400054ab
cmp ecx, 0x42aa
jne 0x1400051e5
mov ecx, dword [rsp + 0xcc]
xor ecx, r10d
mov eax, 0x80f98760
jmp 0x1400051d3
cmp ecx, 0x52f5
je 0x1400055a0
cmp ecx, 0x5c3b
je 0x140005751
cmp ecx, 0x6e3f
jne 0x1400051e5
mov eax, dword [rsp + 0x44]
cmp eax, 2
mov eax, 0x95954c42
mov ecx, 0xebf2a0ce
cmove eax, ecx
mov ecx, dword [rsp + 0xb0]
jmp 0x1400051d0
cmp ecx, 0x98e
je 0x14000568a
cmp ecx, 0x1ade
je 0x140005672
cmp ecx, 0x1d9a
jne 0x1400051e5
mov ecx, dword [rsp + 0xc8]
xor ecx, r10d
mov r11d, 1
mov eax, 0x80f98760
xor r8d, r8d
jmp 0x140005823
cmp ecx, 0x7987
je 0x1400057c6
cmp ecx, 0x7b6d
je 0x1400055ea
cmp ecx, 0x7e16
jne 0x1400051e5
cmp byte [rsp + 0x2f], 0
mov eax, 0x8387679
mov ecx, 0x4fa6819
cmovne eax, ecx
mov ecx, dword [rsp + 0x7c]
jmp 0x1400051d0
cmp ecx, 0x25fd
jne 0x140005834
cmp byte [rsp + 0x58], 0
lea rdx, [0x14000c730]
je 0x140005618
mov al, 1
mov qword [rsp + 0x58], rax
mov eax, dword [rsp + 0x28]
cmp eax, 0xccfa18c5
jle 0x1400055b7
cmp eax, 0x127496e7
jle 0x140005649
cmp eax, 0x69aad475
jg 0x140005787
cmp eax, 0x127496e8
je 0x1400053a0
cmp eax, 0x1b8e763c
je 0x1400055a0
cmp eax, 0x2722ec42
jne 0x140005842
mov eax, r14d
movzx eax, word [r15 + rax*2]
mov ecx, dword [r13 + rax*4]
mov rax, qword [rsp + 0x110]
mov rdx, rax
or rdx, rcx
add rdx, rcx
not rcx
or rcx, rax
lea rax, [rdx + rcx]
add rdx, rcx
add rdx, 1
mov rbx, rdx
movabs rcx, 0xffffffff5140b93b
and rbx, rcx
mov r8, rbp
mov ebp, 0xaebf46c4
sub ebp, eax
add ebp, 0x5140b93a
and ebp, 0xaebf46c4
mov rcx, rdx
mov esi, 0xaebf46c4
or rcx, rsi
not rcx
and edx, 0xaebf46c4
add rax, rsi
add rax, rdx
add rax, rbx
add rax, rbp
mov rbp, r8
lea r8, [rcx + rax]
add r8, 2
mov ecx, dword [rsp + 0x90]
xor ecx, r10d
mov r11d, 1
mov eax, 0xc8839cb9
jmp 0x140005823
mov eax, r14d
mov eax, dword [r12 + rax*4]
mov rdx, qword [rsp + 0x100]
mov ecx, edx
and ecx, eax
add rcx, qword [rsp + 0x108]
or rax, rdx
add rax, rcx
mov ecx, eax
and ecx, 0x514d5501
xor rax, 0x514d5501
lea rcx, [rax + rcx*2]
call fcn.1400023b0
cmp eax, dword [rsp + 0x3c]
mov eax, 0x1b8e763c
mov ecx, 0x2722ec42
cmove eax, ecx
mov ecx, dword [rsp + 0x8c]
mov r10d, 0x3e2b
jmp 0x1400051d0
mov ecx, dword [rsp + 0x94]
xor ecx, r10d
xor r11d, r11d
mov eax, 0xc8839cb9
jmp 0x140005820
cmp eax, 0x98a34b83
jg 0x140005729
cmp eax, 0x8c84b8f2
jle 0x1400057da
cmp eax, 0x8c84b8f3
je 0x140005425
cmp eax, 0x8e76c2ad
je 0x1400055fe
cmp eax, 0x95954c42
jne 0x140005842
mov ecx, dword [rsp + 0xb8]
xor ecx, r10d
mov eax, 0xccfa18c6
jmp 0x1400051d3
mov ecx, dword [rsp + 0x88]
xor ecx, r10d
mov r11d, 2
mov eax, 0xfd763716
jmp 0x140005820
mov eax, 1
nop dword [rax]
movsxd rcx, dword [rdx + rax*4 - 4]
xor dword [rsp + rcx*4 + 0x70], 0x52f6
cmp rax, 0x17
je 0x14000545e
movsxd rcx, dword [rdx + rax*4]
xor dword [rsp + rcx*4 + 0x70], 0x52f6
add rax, 2
jmp 0x140005620
cmp eax, 0xfd763715
jle 0x1400057fc
cmp eax, 0xfd763716
je 0x140005672
cmp eax, 0x4fa6819
je 0x14000568a
cmp eax, 0x8387679
je 0x1400053e4
jmp 0x140005842
mov dword [rsp + 0x44], edi
mov ecx, dword [rsp + 0xac]
xor ecx, r10d
mov eax, 0x127496e8
jmp 0x1400051d3
mov r8, rbp
mov r11d, edi
mov rax, qword [rsp + 0x30]
mov r9d, dword [rax + 0x24]
mov rbp, qword [rsp + 0x50]
add r9, rbp
mov rax, qword [rsp + 0x68]
mov ebx, dword [rax]
mov rax, rbx
neg rax
lea rcx, [rbx - 1]
mov rdi, qword [rsp + 0xf8]
and rcx, rdi
mov rdx, qword [rsp + 0xf0]
and rdx, rax
add rdx, rcx
xor rax, rdi
add rbx, rbp
add rbx, rax
sub rbx, rdx
mov rax, qword [rsp + 0x30]
mov esi, dword [rax + 0x1c]
mov rax, rsi
not rax
mov rdx, qword [rsp + 0xe8]
and rax, rdx
mov ecx, esi
and ecx, dword [rsp + 0xe0]
xor rdx, rsi
add rsi, qword [rsp + 0xd8]
add rsi, rax
add rsi, rcx
sub rsi, rdx
mov ecx, dword [rsp + 0x80]
xor ecx, r10d
xor edx, edx
mov eax, 0x738a1e72
mov rbp, r8
mov edi, r11d
jmp 0x1400051e5
cmp eax, 0xa40582d8
jle 0x140005199
cmp eax, 0xa40582d9
je 0x140005769
cmp eax, 0xb792e189
je 0x140005368
cmp eax, 0xc8839cb9
jne 0x140005842
mov dword [rsp + 0x40], edi
mov ecx, dword [rsp + 0x98]
xor ecx, r10d
mov eax, 0xa40582d9
jmp 0x1400051d3
cmp dword [rsp + 0x40], 0
mov eax, 0x69aad476
mov ecx, 0x896c2188
cmove eax, ecx
mov ecx, dword [rsp + 0x9c]
jmp 0x1400051d0
cmp eax, 0x69aad476
je 0x140005330
cmp eax, 0x6aac41d4
je 0x1400057c6
cmp eax, 0x738a1e72
jne 0x140005842
mov rax, qword [rsp + 0x30]
cmp r14d, dword [rax + 0x18]
mov eax, 0x8e76c2ad
mov ecx, 0x98a34b84
cmovb eax, ecx
mov ecx, dword [rsp + 0x84]
jmp 0x1400051d0
mov ecx, dword [rsp + 0xc4]
xor ecx, r10d
mov eax, 0x8387679
jmp 0x1400051d3
cmp eax, 0x84409519
je 0x1400052d0
cmp eax, 0x896c2188
je 0x140005221
cmp eax, 0x80f98760
jne 0x140005842
jmp 0x140005881
cmp eax, 0xccfa18c6
je 0x14000527c
cmp eax, 0xebf2a0ce
jne 0x140005842
mov ecx, dword [rsp + 0xb4]
xor ecx, r10d
xor r11d, r11d
mov eax, 0xccfa18c6
mov r8, rbp
mov r9, r15
mov rbx, r12
mov rsi, r13
mov edx, r14d
jmp 0x1400051e5
cmp ecx, 0x1dcd
jne 0x1400051e5
jmp 0x140005881
mov r8, rbp
mov eax, dword [rsp + 0x28]
mov r9, r15
mov rbx, r12
mov rsi, r13
mov r11d, edi
mov edx, r14d
mov ecx, dword [rsp + 0xd4]
mov ebp, 0x690a
xor ecx, ebp
mov rbp, r8
mov dword [rsp + 0x28], eax
mov r15, r9
mov r12, rbx
mov r13, rsi
mov edi, r11d
mov r14d, edx
jmp 0x1400051e5
mov rax, rbp
add rsp, 0x118
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret