Function at 0x140497e70
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
xchg rdi, rax
mov rdi, rsp
xchg rdi, rax
mov byte [rax + 0x10], dl
mov qword [rax + 8], rcx
mov dword [rsp - 0x20], 0x71848237
nop
mov qword [rsp - 8], rbp
sub rsp, 8
push rdi
mov dword [rsp - 0x30], esi
lea rbp, [rax - 0x148]
add rsp, 0xfffffffffffffdc8
xchg rbx, r10
mov qword [rax + 0x18], r10
xchg r10, rbx
movabs rdi, 0x751530330d0c844b
add rdi, 0x641646a5
sub rdi, 0x58917db2
sub rdi, 0x15762726
mov qword [rax - 0x18], rsi
movzx ebx, r8b
mov rsp, rsp
xchg r8, r12
mov qword [rax - 0x20], r8
xchg r12, r8
mov qword [rax - 0x28], r13
xchg r10, r13
mov r10, rcx
xchg r13, r10
mov rcx, qword [rcx]
mov dword [rsp - 0x40], 0x186258ca
xchg r13, r14
mov qword [rax - 0x30], r13
xchg r14, r13
xor rcx, rdi
mov dword [rsp - 0x44], esi
xchg r15, rcx
mov qword [rax - 0x38], rcx
xchg r15, rcx
movzx r14d, dl
xchg r15, r15
mov byte [rsp + 0x58], 0x1b
sub byte [rsp + 0x58], 7
add byte [rsp + 0x58], 0x1e
xor byte [rsp + 0x58], 0x1f
xor byte [rsp + 0x58], 0x2d
lea rdx, [rsp + 0x58]
xchg rbp, rdi
mov qword [rsp + 0x60], rbp
xchg rdi, rbp
mov dword [rsp + 0x68], 0x6b80dc64
add dword [rsp + 0x68], 0x5898670
xor dword [rsp + 0x68], 0x69c6aa6c
add dword [rsp + 0x68], 0x5f3334d5
xor dword [rsp + 0x68], 0x6b4b89a5
mov dword [rsp + 0x6c], 0x362c673b
add dword [rsp + 0x6c], 0x17c2f05e
xor dword [rsp + 0x6c], 0x6ca6683
sub dword [rsp + 0x6c], 0x2e70bcf2
mov rax, qword [rcx]
xchg r9, r9
call qword [rax + 0x10]
test al, al
jne 0x140497fc3
mov dword [rsp - 0x38], esp
mov edi, 0x5ef6522b
sub edi, 0x13113cd6
add edi, 0x2417d8f8
sub edi, 0x35fe5a92
add edi, 0x86016d47
jmp 0x140498b23
xchg r10, r12
mov r10, qword [rsp + 0x60]
xchg r12, r10
xor r12, rdi
xchg r10, r10
mov qword [rsp + 0x30], r12
movzx eax, word [r12]
xor eax, 0x1cb47428
cmp eax, 0x1cb42e65
mov dword [rsp - 0x38], 0x5e7e587a
je 0x140498018
mov edi, 0x1b3907a3
add edi, 0x4477259b
add edi, 0x1318e6e9
xor edi, 0x2669429b
add edi, 0x6b5faa73
jmp 0x140498b23
movsxd rsi, dword [r12 + 0x3c]
mov dword [rsp - 0x1c], 0x784f2ba3
add rsi, r12
mov qword [rsp + 0x48], rsi
mov eax, dword [rsi]
mov dword [rsp - 0x24], esi
xor eax, 0x1cb47428
cmp eax, 0x1cb43178
je 0x14049805f
mov edi, 0x1b53d8ff
sub edi, 0x8a04b4b
add edi, 0x631841c2
add edi, 0x4a343105
jmp 0x140498b23
xor r15d, r15d
mov dword [rsp + 0x28], 0x76b1d60e
sub dword [rsp + 0x28], 0x3b4b7661
add dword [rsp + 0x28], 0x28850f7b
add dword [rsp + 0x28], 0x1265dcca
sub dword [rsp + 0x28], 0x76514bb2
mov qword [rsp + 0x40], r15
mov dword [rsp - 0x40], 0x398c514b
lea r9, [rbp - 0x50]
mov eax, dword [rsi + 0x50]
lea rdx, [rsp + 0x40]
xor r8d, r8d
mov rdi, rdi
xchg r13, rax
mov qword [rbp - 0x50], r13
xchg r13, rax
nop
movabs rcx, 0xffffffff5ee481c4
sub rcx, 0x27a7a66d
xor rcx, 0x745b6794
add rcx, 0x7fffffff
xor rcx, 0x3c98433d
mov dword [rsp + 0x20], 0x501ed390
sub dword [rsp + 0x20], 0x2e10b187
sub dword [rsp + 0x20], 0x57fae03
sub dword [rsp + 0x20], 0x1c8e4406
call fcn.140054170
mov rcx, rcx
mov edi, eax
test eax, eax
js 0x140498b23
mov rcx, qword [rsp + 0x40]
mov r9, r9
movabs rdx, 0x75153033117faa04
add rdx, 0x64224baf
sub rdx, 0x186c6549
add rdx, 0x262470f
sub rdx, 0x5c7cb161
mov rax, rcx
xor rax, rdx
mov qword [r13 + 8], rax
mov r12, r12
mov eax, dword [rsi + 0x50]
xor eax, 0x1cb47428
mov dword [r13 + 0x10], eax
mov dword [rsp - 0x18], 0x37b2f94
mov eax, dword [rsi + 0x28]
xor eax, 0x1cb47428
mov dword [r13 + 0x14], eax
test bl, bl
mov dword [rsp - 0x14], ebp
je 0x14049819c
mov r8d, 0x734a0d9
add r8d, 0x3dc757fa
xor r8d, 0x58dec153
xor r8d, 0x1c252980
mov rdx, r12
call fcn.140098680
mov dword [rsp - 0x14], 0x624f3764
mov edx, dword [rsi + 0x88]
test edx, edx
je 0x1404983cf
cmp dword [rsi + 0x8c], r15d
xchg r8, r8
je 0x1404983cf
xchg r12, r13
mov rcx, r13
xchg r12, r13
call fcn.140076770
xchg rdx, rdx
xchg rbx, rcx
mov rcx, rax
xchg rcx, rbx
test rax, rax
mov dword [rsp - 0x38], 0x9d9ab59
je 0x1404983cf
mov edx, dword [rax + 0x20]
xchg rsp, r12
mov rcx, rsp
xchg rsp, r12
call fcn.140076770
mov dword [rsp - 0x44], ecx
mov edx, dword [rbx + 0x24]
xchg r11, r12
mov rcx, r11
xchg r11, r12
xchg rdi, r8
mov r8, rax
xchg r8, rdi
mov qword [rsp + 0x50], rax
call fcn.140076770
mov edx, dword [rbx + 0x1c]
mov rsp, rsp
xchg rcx, r15
mov r15, r12
xchg r15, rcx
xchg r8, rax
mov qword [rbp + 0x168], r8
xchg r8, rax
call fcn.140076770
xchg rdx, r12
mov rdx, rax
xchg rdx, r12
mov esi, r15d
cmp dword [rbx + 0x18], r15d
mov rbp, rbp
jbe 0x14049837e
lea r14, [r13 + 0x18]
xchg rcx, r13
mov rcx, qword [rbp + 0x168]
xchg rcx, r13
xchg r14, rbx
mov qword [rbp - 0x48], rbx
xchg r14, rbx
nop
xchg r8, r8
xchg r10, rcx
mov r10, qword [rsp + 0x30]
xchg rcx, r10
mov r15d, esi
mov edx, dword [rdi + r15*4]
call fcn.140076770
mov rsp, rsp
mov rcx, r14
xchg rdi, rax
mov rax, rdi
xchg rdi, rax
call fcn.140497910
cmp byte [rdi], 0
pushf
mov ecx, 0x1db0b31a
add ecx, 0x24fb3fcc
add ecx, 0x1e2df36c
sub ecx, 0x58a509b3
xor ecx, 0xf7cb2360
popf
mov dword [rbp + 0x168], ecx
xchg r8, r14
mov r8, rax
xchg r8, r14
je 0x140498328
nop
mov dword [rsp - 0x30], 0x51393241
xchg rsp, rdi
mov rdx, rsp
xchg rdi, rsp
lea rcx, [rbp + 0x168]
mov dword [rsp - 0x24], 0xbc0a1b3
mov r8d, 0x324acd0a
xor r8d, 0x290c9268
add r8d, 0x36f57a1f
sub r8d, 0x523bd980
inc rdi
call fcn.140082330
mov r8, r8
cmp byte [rdi], 0
jne 0x1404982db
mov ecx, dword [rbp + 0x168]
mov rdi, qword [rsp + 0x50]
mov dword [rsp - 0x3c], esp
not ecx
mov dword [r14], ecx
inc esi
mov dword [rsp - 0x34], 0x508459af
movzx eax, word [r13 + r15*2]
mov ecx, dword [r12 + rax*4]
mov dword [r14 + 4], ecx
mov dword [rsp - 0x24], 0x39dd3482
mov r14, qword [rbp - 0x48]
cmp esi, dword [rbx + 0x18]
jb 0x140498270
mov rsi, rsi
xchg r11, r13
mov r11, qword [rbp + 0x150]
xchg r11, r13
xor r15d, r15d
movzx r14d, byte [rbp + 0x158]
cmp dword [rbx + 0x14], 0
xchg rdx, rdx
mov edi, r15d
jbe 0x1404983bc
lea rcx, [r13 + 0x38]
mov rsp, rsp
call fcn.140497a70
mov edx, dword [rbx + 0x10]
add edx, edi
mov ecx, edi
mov dword [rsp - 0xc], esp
inc edi
mov dword [rax], edx
mov edx, dword [r12 + rcx*4]
mov dword [rax + 4], edx
xchg rdi, rdi
cmp edi, dword [rbx + 0x14]
jb 0x14049838e
mov rsi, qword [rsp + 0x48]
mov r8, r8
xchg r12, rbx
mov rbx, qword [rsp + 0x30]
xchg r12, rbx
xchg rbx, rdx
mov rbx, qword [rsp + 0x40]
xchg rbx, rdx
xchg r12, rcx
mov r12, rcx
xchg rcx, r12
call fcn.1400746d0
test r14b, r14b
xchg r9, r9
je 0x140498596
mov edx, dword [rsi + 0x90]
test edx, edx
xchg r8, r8
je 0x140498596
xchg rcx, r14
mov r14, r12
xchg rcx, r14
call fcn.140076770
mov dword [rsp - 0xc], esi
lea r15, [rax + 0xc]
mov eax, dword [rax + 0xc]
test eax, eax
mov rcx, rcx
je 0x140498596
mov edx, eax
xchg rcx, rsi
mov rsi, r12
xchg rsi, rcx
call fcn.140076770
xchg rdx, rdx
xor edx, edx
mov rcx, rax
xchg r9, rax
mov rdi, r9
xchg r9, rax
call fcn.140075b10
mov dword [rsp - 0x3c], ecx
xchg r9, rax
mov r14, r9
xchg r9, rax
test rax, rax
je 0x140498967
cmp byte [rdi], 0
mov dword [rsp - 0x24], 0x7278dab
je 0x14049848f
nop
call fcn.140099dd0
xchg rsi, rsi
mov byte [rdi], al
lea rdi, [rdi + 1]
cmp byte [rdi], 0
jne 0x140498474
mov dword [rsp - 0x10], ecx
mov edx, dword [r15 + 4]
xchg rcx, rdx
mov rdx, r12
xchg rcx, rdx
call fcn.140076770
mov dword [rsp - 0x34], 0x26577153
xchg rsp, rax
mov rsi, rsp
xchg rsp, rax
mov rcx, qword [rax]
mov rbp, rbp
test rcx, rcx
je 0x140498575
mov eax, ecx
js 0x140498527
mov rsi, rsi
mov edx, eax
mov rcx, r12
call fcn.140076770
mov rcx, rcx
mov rcx, r14
lea rdi, [rax + 2]
xchg rdi, r15
mov rdx, r15
xchg r15, rdi
call fcn.140074a40
mov dword [rsp - 0x14], esp
mov rbx, rax
test rax, rax
je 0x140498929
mov r14, r14
cmp byte [rdi], 0
je 0x14049854b
call fcn.140099dd0
mov r9, r9
mov byte [rdi], al
lea rdi, [rdi + 1]
cmp byte [rdi], 0
mov rcx, rcx
jne 0x140498508
jmp 0x14049854b
movzx edx, ax
mov rcx, r14
call fcn.140075500
xchg rsp, rsp
xchg rdi, rbx
mov rdi, rax
xchg rbx, rdi
test rax, rax
mov dword [rsp - 0xc], ebp
je 0x140498945
xchg r15, rbx
mov qword [rsi], r15
xchg rbx, r15
nop
sub rsi, 0x1cbb2718
add rsi, 0x1cbb2720
mov rcx, qword [rsi]
mov dword [rsp - 0x38], edx
mov eax, ecx
test rcx, rcx
jne 0x1404984c1
mov eax, dword [r15 + 0x14]
xchg rsi, rsi
nop
add r15, 0x1e21dd78
sub r15, 0x1e21dd64
test eax, eax
jne 0x140498429
mov rcx, rcx
xchg rdx, r15
mov rdx, qword [rsp + 0x48]
xchg r15, rdx
xor edi, edi
movzx r14d, di
movzx eax, word [r15 + 0x14]
xchg r12, r12
lea rsi, [r15 + 0x18]
add rsi, rax
cmp di, word [r15 + 6]
xchg r12, r12
jae 0x140498b23
mov r13d, 0x7afb87dd
sub r13d, 0x783b6610
add r13d, 0x5918a0ba
xor r13d, 0x5bd8c278
nop word [rax + rax]
xchg r15, r15
test dword [rsi + 0x24], 0x2000000
jne 0x140498b0d
cmp dword [rsi + 8], 0
mov dword [rsp - 0x28], esi
je 0x140498b0d
xorps xmm0, xmm0
mov dword [rsp + 0x30], 0x7fbca3ab
sub dword [rsp + 0x30], 0x24dca2ea
sub dword [rsp + 0x30], 0x3c7373dd
xor dword [rsp + 0x30], 0x23b4ac88
lea rcx, [rsp + 0x78]
xchg r11, r11
mov word [rsp + 0x34], 0x3f82
xor word [rsp + 0x34], 0x459b
sub word [rsp + 0x34], 0x11ad
sub word [rsp + 0x34], 0x3736
lea rdx, [rsp + 0x78]
xchg rsi, rsi
mov qword [rsp + 0x70], rcx
mov eax, 0x6605d1b0
sub eax, 0x437995f7
add eax, 0x54005dc8
sub eax, 0x768c997b
xchg rsp, rax
mov qword [rbp - 0x58], rsp
xchg rsp, rax
xchg rsp, r15
movups xmmword [r15 + 0x78], xmm0
xchg rsp, r15
xchg rbp, rsi
movups xmmword [rsi - 0x78], xmm0
xchg rsi, rbp
xchg rbp, r13
movups xmmword [r13 - 0x68], xmm0
xchg r13, rbp
cmp rcx, rdx
je 0x1404986b4
mov dword [rsp - 0x1c], 0x42e731a
call fcn.140098180
xchg r14, rax
mov r14, qword [rbp - 0x58]
xchg r14, rax
lea rdx, [rsp + 0x78]
xorps xmm0, xmm0
xchg r12, r12
xchg rdx, r11
mov qword [rsp + 0x70], r11
xchg rdx, r11
xchg rdi, rcx
mov rdi, rcx
xchg rcx, rdi
xchg r13, rsp
movups xmmword [r13 + 0x78], xmm0
xchg r13, rsp
xchg rbx, rbp
movups xmmword [rbx - 0x78], xmm0
xchg rbx, rbp
xchg r10, rbp
movups xmmword [r10 - 0x68], xmm0
xchg r10, rbp
test rax, rax
xchg rcx, rcx
je 0x14049871e
nop
movzx eax, byte [rsp + rcx + 0x30]
mov dword [rsp - 0x10], esi
mov word [rdx + rcx*2], ax
inc rcx
cmp rcx, qword [rbp - 0x58]
jb 0x140498701
xchg rbx, rbx
mov edx, 0x3bc61363
xor edx, 0x6110bd45
sub edx, 0x366aeb5c
xor edx, 0x6988bec0
sub edx, 0x4de37c02
mov rcx, rsi
mov dword [rsp - 0x24], edi
call fcn.140099c70
xchg r15, rdi
mov r15, rax
xchg r15, rdi
lea rcx, [rbp + 8]
lea rax, [rbp + 8]
mov dword [rsp - 0x38], 0x2a031dfa
xor edx, edx
mov r8d, 0x7baad0c8
sub r8d, 0x14ab01f3
xor r8d, 0x44306164
sub r8d, 0x1cd926de
sub r8d, 0x5f687d3
mov qword [rbp], rax
call fcn.140098790
mov r15, r15
cmp rdi, 0xffffffffffffffff
jne 0x1404987ba
xchg r14, rax
mov r14, rdi
xchg r14, rax
inc rax
cmp byte [rsi + rax], 0
mov r15, r15
jne 0x1404987a1
xchg r13, rdi
mov r13, rax
xchg rdi, r13
xchg r8, rdi
mov rdi, r8
xchg r8, rdi
lea rcx, [rbp]
mov r9, r9
xchg rdx, rbp
mov rbp, rsi
xchg rdx, rbp
call fcn.140073060
mov r10, r10
mov rbx, qword [rbp]
lea rax, [rbp - 0x38]
xorps xmm0, xmm0
mov dword [rsp - 0x44], esp
xchg r10, rax
mov qword [rbp - 0x40], r10
xchg r10, rax
xchg rbp, r14
movups xmmword [r14 - 0x38], xmm0
xchg rbp, r14
nop
movabs rdx, 0xffffffff7746b0c8
sub rdx, 0x40d5d2cc
sub rdx, 0x11bee624
add rdx, 0x2ddc6950
add rdx, 0x7fffffff
add rdx, 0x2d719ed8
movups xmmword [rbp - 0x28], xmm0
mov dword [rsp - 0x24], 0x4e8f4271
movups xmmword [rbp - 0x18], xmm0
inc rdx
cmp word [rbx + rdx*2], 0
mov dword [rsp - 0x18], esi
jne 0x14049883b
lea rcx, [rbp - 0x40]
mov qword [rbp - 8], rdx
call fcn.14000ef40
mov dword [rsp - 0x38], esp
xor edi, edi
mov edx, 0x315fe657
xor edx, 0x3728e522
xor edx, 0x9493b97
sub edx, 0x877ee44
add edx, 0x55f605a4
cmp qword [rbp - 8], rdi
jbe 0x1404988c4
sub rbx, rax
mov rcx, rcx
nop dword [rax + rax]
movzx ecx, dx
lea rax, [rax + 2]
xchg rbp, rbp
and cx, r13w
ror edx, 7
ror edx, 1
xor cx, word [rbx + rax - 2]
mov rbp, rbp
inc rdi
mov word [rax - 2], cx
cmp rdi, qword [rbp - 8]
xchg rsp, rsp
jb 0x140498895
xor r8d, r8d
lea rdx, [rsp + 0x70]
lea rcx, [rbp - 0x40]
mov r8, r8
call fcn.140053140
mov rcx, qword [rbp - 0x40]
mov ebx, eax
lea rax, [rbp - 0x38]
mov dword [rsp - 0x18], 0x128d52f8
cmp rcx, rax
jne 0x140498989
lea rdi, [rbp - 0x38]
xor eax, eax
mov dword [rsp - 0xc], ebx
mov ecx, 0x2430e733
xor ecx, 0x34429408
add ecx, 0x38a07b1d
sub ecx, 0x1ddebe97
sub ecx, 0x2b342f91
rep stosb byte [rdi], al
mov dword [rsp - 0x30], 0x67061a0b
jmp 0x14049898e
mov edi, 0x3b1f7ffc
sub edi, 0x22c4036e
xor edi, 0xb734fbd
add edi, 0xacd7cd47
jmp 0x140498b23
mov edi, 0x1426b715
xor edi, 0x303507ee
xor edi, 0x5983f7fe
xor edi, 0x2fb0e0ae
xor edi, 0x9220a693
jmp 0x140498b23
mov edi, 0x2ab5fa40
xor edi, 0x1e6e14e4
add edi, 0x1e804ead
sub edi, 0x3a03aa81
add edi, 0xa6a76e65
jmp 0x140498b23
call fcn.140098180
xchg rdi, rcx
mov rdi, qword [rbp]
xchg rcx, rdi
lea rax, [rbp + 8]
cmp rcx, rax
mov r9, r9
jne 0x1404989d5
lea rdi, [rbp + 8]
xor eax, eax
xchg rdi, rdi
mov ecx, 0x4eb13104
sub ecx, 0x408b7ba9
add ecx, 0x927a795
add ecx, 0x57d4f475
sub ecx, 0x6f225065
rep stosb byte [rdi], al
jmp 0x1404989de
call fcn.140098180
mov dword [rsp - 0x28], ebx
xchg rbx, rcx
mov rbx, qword [rsp + 0x70]
xchg rcx, rbx
lea rax, [rsp + 0x78]
mov rdi, rdi
cmp rcx, rax
jne 0x140498a25
lea rdi, [rsp + 0x78]
mov r12, r12
xor eax, eax
mov ecx, 0x76463af9
xor ecx, 0x1b12aba3
sub ecx, 0x5a8f058
sub ecx, 0x67aba0d2
rep stosb byte [rdi], al
xchg r12, r12
jmp 0x140498a2a
call fcn.140098180
test ebx, ebx
je 0x140498b07
mov dword [rsp - 0x24], edx
mov eax, dword [rsi + 0xc]
mov rdx, rsi
add rax, qword [rsp + 0x40]
xchg rcx, r15
mov r15, rcx
xchg rcx, r15
mov qword [rbp + 0x168], rax
mov dword [rsp - 0x44], edx
call fcn.140076c60
mov eax, eax
xchg rsi, rdx
mov rcx, rdx
xchg rsi, rdx
xchg r14, rax
mov qword [rsp + 0x50], r14
xchg r14, rax
call fcn.14007ad40
mov edx, dword [rsi + 0x14]
mov rsp, rsp
mov r8d, dword [rsi + 0x10]
add rdx, r12
xchg rcx, r10
mov r10, qword [rbp + 0x168]
xchg rcx, r10
mov dword [rbp + 0x150], eax
call fcn.140098680
mov dword [rsp - 0x14], 0x3541d956
mov r9d, dword [rbp + 0x150]
lea rax, [rbp + 0x150]
lea r8, [rsp + 0x50]
xchg rsi, rsi
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 0x168]
nop
movabs rcx, 0xffffffff78b8de46
sub rcx, 0x74a41c0
add rcx, 0xb0bf6f3
xor rcx, 0x57aacc7a
add rcx, 0x7fffffff
xor rcx, 0x542fa0fd
call fcn.140054260
mov edi, eax
mov dword [rsp - 0x28], 0xc62848b
test eax, eax
js 0x140498b23
xor edi, edi
mov dword [rsp - 0x3c], esp
inc r14w
add rsi, 0x28
cmp r14w, word [r15 + 6]
xchg r15, r15
jb 0x1404985eb
cmp byte [rsp + 0x58], 0
xchg r10, r15
mov r10, qword [rsp + 0x210]
xchg r15, r10
mov r14, qword [rsp + 0x218]
mov dword [rsp - 0x34], 0x18d79c18
xchg r13, r10
mov r10, qword [rsp + 0x220]
xchg r10, r13
xchg r12, r8
mov r8, qword [rsp + 0x228]
xchg r12, r8
xchg rsi, r9
mov r9, qword [rsp + 0x230]
xchg r9, rsi
xchg rdi, rbx
mov rdi, qword [rsp + 0x260]
xchg rdi, rbx
je 0x140498bce
mov rcx, qword [rsp + 0x60]
mov dword [rsp - 0x1c], esp
movabs rax, 0x75153033661517e1
sub rax, 0x3b8a494c
xor rax, 0xd9df688
sub rax, 0x23fc1205
xor rcx, rax
xchg rbp, rbp
mov edx, 0x329cc871
xor edx, 0x5774247b
sub edx, 0x4d951721
sub edx, 0x1853d4e8
call fcn.140098020
mov r9, r9
mov eax, edi
add rsp, 0x51751238
sub rsp, 0x51751000
pop rdi
pop rbp
ret