Function at 0x1400430c4
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rsi
mov qword [r11 + 0x18], rdi
mov qword [r11 + 0x20], r14
push r15
sub rsp, 0x190
mov rax, qword [0x14010c0c0]
xor rax, rsp
mov qword [rsp + 0x188], rax
xor r15d, r15d
mov dword [r11 - 0x20], 0x342b3d1c
mov dword [r11 - 0x1c], 0x6c6e303e
mov dword [r11 - 0x18], 0xe0d0471
xor eax, eax
mov byte [r11 - 0x14], al
mov edx, r15d
movsxd rcx, edx
lea eax, [rdx + 0x57]
xor byte [rsp + rcx + 0x178], al
inc edx
cmp edx, 0xc
jb 0x140043116
mov byte [rsp + 0x184], r15b
lea rcx, [rsp + 0x178]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdi, rax
test rax, rax
jne 0x140043162
lea rcx, [rsp + 0x178]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x140043ad7
movdqa xmm0, xmmword [0x1400fc470]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x140], 0x1e
mov edx, r15d
movsxd rcx, edx
lea eax, [rdx + 0x57]
xor byte [rsp + rcx + 0x130], al
inc edx
cmp edx, 0x11
jb 0x140043180
mov byte [rsp + 0x141], r15b
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
or rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp byte [rax + r8], r15b
jne 0x1400431c2
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140010a04
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [0x1401204c8], rax
mov rdx, qword [rsp + 0x160]
mov r14d, 0x1000
cmp rdx, 0xf
jbe 0x140043252
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, r14
jb 0x14004324d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043af2
call fcn.1400826b0
test rbx, rbx
je 0x140043af8
movdqa xmm0, xmmword [0x1400fc440]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x140], 0x1115
xor eax, eax
mov byte [rsp + 0x142], al
mov edx, r15d
movsxd rcx, edx
lea eax, [rdx + 0x57]
xor byte [rsp + rcx + 0x130], al
inc edx
cmp edx, 0x12
jb 0x140043282
mov byte [rsp + 0x142], r15b
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rsi
inc r8
cmp byte [rax + r8], r15b
jne 0x1400432c0
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140010a04
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [0x1401204d0], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x14004334a
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, r14
jb 0x140043345
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043b13
call fcn.1400826b0
test rbx, rbx
je 0x140043b19
movdqa xmm0, xmmword [0x1400fc420]
movdqu xmmword [rsp + 0x130], xmm0
mov word [rsp + 0x140], 0xc06
xor eax, eax
mov byte [rsp + 0x142], al
mov edx, r15d
movsxd rcx, edx
lea eax, [rdx + 0x57]
xor byte [rsp + rcx + 0x130], al
inc edx
cmp edx, 0x12
jb 0x14004337a
mov byte [rsp + 0x142], r15b
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rsi
inc r8
cmp byte [rax + r8], r15b
jne 0x1400433b8
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140010a04
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [0x1401204d8], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x140043442
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, r14
jb 0x14004343d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043b34
call fcn.1400826b0
test rbx, rbx
je 0x140043b3a
mov dword [rsp + 0x130], 0x2e2b3101
mov dword [rsp + 0x134], 0x1f313d2e
mov dword [rsp + 0x138], 0x10e0c33
mov word [rsp + 0x13c], 0x1c26
xor eax, eax
mov byte [rsp + 0x13e], al
mov edx, r15d
movsxd rcx, edx
lea eax, [rdx + 0x57]
xor byte [rsp + rcx + 0x130], al
inc edx
cmp edx, 0xe
jb 0x140043482
mov byte [rsp + 0x13e], r15b
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rsi
inc r8
cmp byte [rax + r8], r15b
jne 0x1400434c0
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140010a04
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [0x1401204e0], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x14004354a
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, r14
jb 0x140043545
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043b55
call fcn.1400826b0
test rbx, rbx
je 0x140043b5b
mov dword [rsp + 0x130], 0x2e2b3101
mov dword [rsp + 0x134], 0x18313d2e
mov dword [rsp + 0x138], 0x2704052d
mov word [rsp + 0x13c], 0x1b
mov edx, r15d
movsxd rcx, edx
lea eax, [rdx + 0x57]
xor byte [rsp + rcx + 0x130], al
inc edx
cmp edx, 0xd
jb 0x140043581
mov byte [rsp + 0x13d], r15b
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rsi
inc r8
cmp byte [rax + r8], r15b
jne 0x1400435bf
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140010a04
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [0x1401204e8], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x140043649
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, r14
jb 0x140043644
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043b7c
call fcn.1400826b0
test rbx, rbx
je 0x140043b82
mov dword [rsp + 0x130], 0x2e2b3101
mov dword [rsp + 0x134], 0xf313d2e
mov dword [rsp + 0x138], 0x1b13052a
mov word [rsp + 0x13c], 0x1c26
xor eax, eax
mov byte [rsp + 0x13e], al
mov edx, r15d
movsxd rcx, edx
lea eax, [rdx + 0x57]
xor byte [rsp + rcx + 0x130], al
inc edx
cmp edx, 0xe
jb 0x140043689
mov byte [rsp + 0x13e], r15b
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rsi
inc r8
cmp byte [rax + r8], r15b
jne 0x1400436c7
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140010a04
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [0x1401204f0], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x140043751
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, r14
jb 0x14004374c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043ba3
call fcn.1400826b0
test rbx, rbx
je 0x140043ba9
movdqa xmm0, xmmword [0x1400fc480]
movdqu xmmword [rsp + 0x130], xmm0
xor eax, eax
mov byte [rsp + 0x140], al
mov edx, r15d
movsxd rcx, edx
lea eax, [rdx + 0x57]
xor byte [rsp + rcx + 0x130], al
inc edx
cmp edx, 0x10
jb 0x140043777
mov byte [rsp + 0x140], r15b
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rsi
inc r8
cmp byte [rax + r8], r15b
jne 0x1400437b5
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140010a04
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [0x140120528], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x14004383f
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, r14
jb 0x14004383a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043bca
call fcn.1400826b0
test rbx, rbx
je 0x140043bd0
mov dword [rsp + 0x168], 0x283c2b02
mov dword [rsp + 0x16c], 0x3a736e68
mov word [rsp + 0x170], 0xc33
xor eax, eax
mov byte [rsp + 0x172], al
mov edx, r15d
movsxd rcx, edx
lea eax, [rdx + 0x57]
xor byte [rsp + rcx + 0x168], al
inc edx
cmp edx, 0xa
jb 0x140043874
mov byte [rsp + 0x172], r15b
lea rcx, [rsp + 0x168]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
test rax, rax
jne 0x1400438c0
lea rcx, [rsp + 0x168]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
test rax, rax
je 0x140043bf1
mov dword [rsp + 0x130], 0x3e373111
mov dword [rsp + 0x134], 0x3a33350c
mov dword [rsp + 0x138], 0x361730
mov edx, r15d
movsxd rcx, edx
lea eax, [rdx + 0x57]
xor byte [rsp + rcx + 0x130], al
inc edx
cmp edx, 0xb
jb 0x1400438e4
mov byte [rsp + 0x13b], r15b
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
mov r8, rsi
inc r8
cmp byte [rax + r8], r15b
jne 0x140043922
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140010a04
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [0x140120590], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x1400439ac
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, r14
jb 0x1400439a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043c12
call fcn.1400826b0
test rdi, rdi
je 0x140043c18
movdqa xmm0, xmmword [0x1400fc410]
movdqu xmmword [rsp + 0x130], xmm0
xor eax, eax
mov byte [rsp + 0x140], al
mov edx, r15d
movsxd rcx, edx
lea eax, [rdx + 0x57]
xor byte [rsp + rcx + 0x130], al
inc edx
cmp edx, 0x10
jb 0x1400439d2
mov byte [rsp + 0x140], r15b
xorps xmm0, xmm0
movups xmmword [rsp + 0x148], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x158], xmm1
lea rax, [rsp + 0x130]
inc rsi
cmp byte [rax + rsi], r15b
jne 0x140043a0d
mov r8, rsi
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x148]
call fcn.140010a04
lea rdx, [rsp + 0x148]
cmp qword [rsp + 0x160], 0xf
cmova rdx, qword [rsp + 0x148]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
mov qword [0x140120598], rax
mov rdx, qword [rsp + 0x160]
cmp rdx, 0xf
jbe 0x140043a9a
inc rdx
mov rcx, qword [rsp + 0x148]
mov rax, rcx
cmp rdx, r14
jb 0x140043a95
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140043c39
call fcn.1400826b0
test rbx, rbx
je 0x140043c3f
mov al, 1
jmp 0x140043aa9
mov rcx, qword [rsp + 0x188]
xor rcx, rsp
call fcn.140082690
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop r15
ret
lea rcx, [rsp + 0x28]
call fcn.140041980
lea rdx, [0x14010a618]
lea rcx, [rsp + 0x28]
call fcn.140084840
call fcn.1400897a0
int3
lea rcx, [rsp + 0x40]
call fcn.140041980
lea rdx, [0x14010a618]
lea rcx, [rsp + 0x40]
call fcn.140084840
call fcn.1400897a0
int3
lea rcx, [rsp + 0x58]
call fcn.140041980
lea rdx, [0x14010a618]
lea rcx, [rsp + 0x58]
call fcn.140084840
call fcn.1400897a0
int3
lea rcx, [rsp + 0x70]
call fcn.140041980
lea rdx, [0x14010a618]
lea rcx, [rsp + 0x70]
call fcn.140084840
call fcn.1400897a0
int3
lea rcx, [rsp + 0x88]
call fcn.140041980
lea rdx, [0x14010a618]
lea rcx, [rsp + 0x88]
call fcn.140084840
call fcn.1400897a0
int3
lea rcx, [rsp + 0xa0]
call fcn.140041980
lea rdx, [0x14010a618]
lea rcx, [rsp + 0xa0]
call fcn.140084840
call fcn.1400897a0
int3
lea rcx, [rsp + 0xb8]
call fcn.140041980
lea rdx, [0x14010a618]
lea rcx, [rsp + 0xb8]
call fcn.140084840
call fcn.1400897a0
int3
lea rcx, [rsp + 0xd0]
call fcn.140041980
lea rdx, [0x14010a618]
lea rcx, [rsp + 0xd0]
call fcn.140084840
lea rcx, [rsp + 0xe8]
call fcn.140041980
lea rdx, [0x14010a618]
lea rcx, [rsp + 0xe8]
call fcn.140084840
call fcn.1400897a0
int3
lea rcx, [rsp + 0x100]
call fcn.140041980
lea rdx, [0x14010a618]
lea rcx, [rsp + 0x100]
call fcn.140084840
call fcn.1400897a0
int3
lea rcx, [rsp + 0x118]
call fcn.140041980
lea rdx, [0x14010a618]
lea rcx, [rsp + 0x118]
call fcn.140084840
int3