Function at 0x140047420
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x190
mov rax, qword [0x1400f8480]
xor rax, rsp
mov qword [rsp + 0x188], rax
mov r15, rcx
xor ebx, ebx
mov dword [r11 - 0x30], 0xbca3b584
mov dword [r11 - 0x2c], 0xe4e6b8b6
mov dword [r11 - 0x28], 0xb6b5bcf9
xor eax, eax
mov byte [r11 - 0x24], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x178]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xc
jb 0x140047470
mov byte [rsp + 0x184], 0
lea rcx, [rsp + 0x178]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov r14, rax
test rax, rax
jne 0x1400474c2
lea rcx, [rsp + 0x178]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
je 0x140047eba
movdqa xmm0, xmmword [0x1400c24b0]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x140], 0xa6
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0x11
jb 0x1400474e0
mov byte [rsp + 0x141], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov rdi, 0xffffffffffffffff
mov r8, rdi
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140047530
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140004100
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 8], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400475bc
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400475b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047ed5
call fcn.14008f518
test rsi, rsi
je 0x140047edb
movdqa xmm0, xmmword [0x1400c24d0]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x140], 0x99ad
xor eax, eax
mov byte [rsp + 0x142], al
mov edx, ebx
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0x12
jb 0x1400475f0
mov byte [rsp + 0x142], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140047634
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140004100
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x10], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400476c0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400476bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047ef6
call fcn.14008f518
test rsi, rsi
je 0x140047efc
movdqa xmm0, xmmword [0x1400c2510]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x140], 0x84be
xor eax, eax
mov byte [rsp + 0x142], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0x12
jb 0x1400476f0
mov byte [rsp + 0x142], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140047734
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140004100
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x18], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400477c0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400477bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047f17
call fcn.14008f518
test rsi, rsi
je 0x140047f1d
mov dword [rsp + 0x130], 0xa6a3b999
mov dword [rsp + 0x134], 0x97b9b5a6
mov dword [rsp + 0x138], 0xb9b6b4bb
mov word [rsp + 0x13c], 0xa49e
xor eax, eax
mov byte [rsp + 0x13e], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x140047800
mov byte [rsp + 0x13e], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140047844
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140004100
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x20], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400478d0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400478cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047f38
call fcn.14008f518
test rsi, rsi
je 0x140047f3e
mov dword [rsp + 0x130], 0xa6a3b999
mov dword [rsp + 0x134], 0x90b9b5a6
mov dword [rsp + 0x138], 0x9fbcbda5
mov word [rsp + 0x13c], 0xa3
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xd
jb 0x140047910
mov byte [rsp + 0x13d], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140047954
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140004100
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x28], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400479e0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400479db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047f5f
call fcn.14008f518
test rsi, rsi
je 0x140047f65
mov dword [rsp + 0x130], 0xa6a3b999
mov dword [rsp + 0x134], 0x87b9b5a6
mov dword [rsp + 0x138], 0xa3abbda2
mov word [rsp + 0x13c], 0xa49e
xor eax, eax
mov byte [rsp + 0x13e], al
mov edx, ebx
nop
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xe
jb 0x140047a20
mov byte [rsp + 0x13e], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140047a64
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140004100
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x30], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x140047af0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047aeb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047f86
call fcn.14008f518
test rsi, rsi
je 0x140047f8c
movdqa xmm0, xmmword [0x1400c24a0]
movdqu xmmword [rsp + 0x130], xmm0
xor eax, eax
mov byte [rsp + 0x140], al
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0x10
jb 0x140047b20
mov byte [rsp + 0x140], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140047b64
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140004100
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, rax
mov qword [r15 + 0x68], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x140047bf0
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047beb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047fad
call fcn.14008f518
test rsi, rsi
je 0x140047fb3
mov dword [rsp + 0x168], 0xa0b4a39a
mov dword [rsp + 0x16c], 0xb2fbe6e0
mov word [rsp + 0x170], 0xb4bb
xor eax, eax
mov byte [rsp + 0x172], al
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x168]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xa
jb 0x140047c30
mov byte [rsp + 0x172], 0
lea rcx, [rsp + 0x168]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
test rax, rax
jne 0x140047c82
lea rcx, [rsp + 0x168]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rsi, rax
test rax, rax
je 0x140047fd4
mov dword [rsp + 0x130], 0xb6bfb989
mov dword [rsp + 0x134], 0xb2bbbd84
mov dword [rsp + 0x138], 0x8eafb8
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rdx - 0x31]
xor byte [rcx], al
inc edx
cmp edx, 0xb
jb 0x140047cb0
mov byte [rsp + 0x13b], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rdi
inc r8
cmp byte [rax + r8], 0
jne 0x140047cf4
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140004100
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov qword [r15 + 0xd0], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x140047d83
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047d7e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140047ff5
call fcn.14008f518
test r14, r14
je 0x140047ffb
movdqa xmm0, xmmword [0x1400c2500]
movdqu xmmword [rsp + 0x130], xmm0
xor eax, eax
mov byte [rsp + 0x140], al
nop word [rax + rax]
movsxd rax, ebx
lea rcx, [rsp + 0x130]
add rcx, rax
lea eax, [rbx - 0x31]
xor byte [rcx], al
inc ebx
cmp ebx, 0x10
jb 0x140047db0
mov byte [rsp + 0x140], 0
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140047df1
mov r8, rdi
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140004100
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [r15 + 0xd8], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x140047e82
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047e7d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004801c
call fcn.14008f518
test rbx, rbx
je 0x140048022
mov al, 1
jmp 0x140047e91
mov rcx, qword [rsp + 0x188]
xor rcx, rsp
call fcn.14008f990
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
lea rcx, [rsp + 0x28]
call fcn.140040020
lea rdx, [0x1400f6278]
lea rcx, [rsp + 0x28]
call fcn.1400908f0
call fcn.140096334
int3
lea rcx, [rsp + 0x40]
call fcn.140040020
lea rdx, [0x1400f6278]
lea rcx, [rsp + 0x40]
call fcn.1400908f0
call fcn.140096334
int3
lea rcx, [rsp + 0x58]
call fcn.140040020
lea rdx, [0x1400f6278]
lea rcx, [rsp + 0x58]
call fcn.1400908f0
call fcn.140096334
int3
lea rcx, [rsp + 0x70]
call fcn.140040020
lea rdx, [0x1400f6278]
lea rcx, [rsp + 0x70]
call fcn.1400908f0
call fcn.140096334
int3
lea rcx, [rsp + 0x88]
call fcn.140040020
lea rdx, [0x1400f6278]
lea rcx, [rsp + 0x88]
call fcn.1400908f0
call fcn.140096334
int3
lea rcx, [rsp + 0xa0]
call fcn.140040020
lea rdx, [0x1400f6278]
lea rcx, [rsp + 0xa0]
call fcn.1400908f0
call fcn.140096334
int3
lea rcx, [rsp + 0xb8]
call fcn.140040020
lea rdx, [0x1400f6278]
lea rcx, [rsp + 0xb8]
call fcn.1400908f0
call fcn.140096334
int3
lea rcx, [rsp + 0xd0]
call fcn.140040020
lea rdx, [0x1400f6278]
lea rcx, [rsp + 0xd0]
call fcn.1400908f0
lea rcx, [rsp + 0xe8]
call fcn.140040020
lea rdx, [0x1400f6278]
lea rcx, [rsp + 0xe8]
call fcn.1400908f0
call fcn.140096334
int3
lea rcx, [rsp + 0x100]
call fcn.140040020
lea rdx, [0x1400f6278]
lea rcx, [rsp + 0x100]
call fcn.1400908f0
call fcn.140096334
int3
lea rcx, [rsp + 0x118]
call fcn.140040020
lea rdx, [0x1400f6278]
lea rcx, [rsp + 0x118]
call fcn.1400908f0
int3