Function at 0x14004b190
Capabilities:
Check for debugger via api
Check for software breakpoints
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140074010]
xor rax, rsp
mov qword [rbp - 8], rax
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14004b5fb
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
jne 0x14004b5fb
xor ebx, ebx
mov dword [rbp - 0x10], ebx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
cmp dword [rbp - 0x10], ebx
jne 0x14004b5fb
mov dword [rbp - 0x10], ebx
mov ecx, ebx
mov dword [rbp - 0x40], 0xb2b9a8b5
mov dword [rbp - 0x3c], 0x8e85ceb3
mov word [rbp - 0x38], 0x8f
mov byte [rbp - 0x36], 1
nop
lea eax, [rcx - 0x25]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 9
jb 0x14004b210
lea rcx, [rbp - 0x40]
mov byte [rbp - 0x36], bl
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movdqa xmm0, xmmword [0x140068070]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov rdi, rax
mov dword [rbp - 0x20], 0x9cbd8284
mov dword [rbp - 0x1c], 0x81949380
mov word [rbp - 0x18], 0x80
mov byte [rbp - 0x16], 1
nop dword [rax + rax]
lea eax, [rcx - 0x25]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x19
jb 0x14004b260
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x16], bl
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x14004b2b3
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9d, 4
mov qword [rsp + 0x20], rbx
mov rcx, rax
lea r8, [rbp - 0x10]
lea edx, [r9 + 3]
call rdi
test eax, eax
jne 0x14004b2b3
cmp dword [rbp - 0x10], ebx
jne 0x14004b5fb
mov dword [rbp - 0x10], ebx
mov rcx, rbx
mov dword [rbp - 0x40], 0xb2b9a8b5
mov dword [rbp - 0x3c], 0x8e85ceb3
mov word [rbp - 0x38], 0x8f
mov byte [rbp - 0x36], 1
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x25]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 9
jb 0x14004b2e0
lea rcx, [rbp - 0x40]
mov byte [rbp - 0x36], bl
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movdqa xmm0, xmmword [0x140068070]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov rdi, rax
mov dword [rbp - 0x20], 0x9cbd8284
mov dword [rbp - 0x1c], 0x81949380
mov word [rbp - 0x18], 0x80
mov byte [rbp - 0x16], 1
nop dword [rax + rax]
lea eax, [rcx - 0x25]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x19
jb 0x14004b330
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x16], bl
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9d, 4
mov qword [rsp + 0x20], rbx
mov rcx, rax
lea r8, [rbp - 0x10]
lea edx, [r9 + 0x1b]
call rdi
test eax, eax
jne 0x14004b37e
cmp dword [rbp - 0x10], ebx
je 0x14004b5fb
mov qword [rbp - 0x10], rbx
mov rcx, rbx
mov dword [rbp - 0x40], 0xb2b9a8b5
mov dword [rbp - 0x3c], 0x8e85ceb3
mov word [rbp - 0x38], 0x8f
mov byte [rbp - 0x36], 1
nop dword [rax]
lea eax, [rcx - 0x25]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 9
jb 0x14004b3a0
lea rcx, [rbp - 0x40]
mov byte [rbp - 0x36], bl
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movdqa xmm0, xmmword [0x140068070]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov rdi, rax
mov dword [rbp - 0x20], 0x9cbd8284
mov dword [rbp - 0x1c], 0x81949380
mov word [rbp - 0x18], 0x80
mov byte [rbp - 0x16], 1
nop dword [rax + rax]
lea eax, [rcx - 0x25]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x19
jb 0x14004b3f0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x16], bl
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov r9d, 4
mov qword [rsp + 0x20], rbx
mov rcx, rax
lea r8, [rbp - 0x10]
lea edx, [r9 + 0x1a]
call rdi
test eax, eax
jne 0x14004b43f
cmp qword [rbp - 0x10], rbx
jne 0x14004b5fb
mov dword [rbp - 0x40], 0xb2b9a8b5
mov rcx, rbx
mov dword [rbp - 0x3c], 0x8e85ceb3
mov word [rbp - 0x38], 0x8f
mov byte [rbp - 0x36], 1
nop word [rax + rax]
lea eax, [rcx - 0x25]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 9
jb 0x14004b460
lea rcx, [rbp - 0x40]
mov byte [rbp - 0x36], bl
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
movdqa xmm0, xmmword [0x140068080]
mov rcx, rbx
movdqu xmmword [rbp - 0x30], xmm0
mov rdi, rax
mov dword [rbp - 0x20], 0x8b9f84bf
mov dword [rbp - 0x1c], 0x100948e
nop
lea eax, [rcx - 0x25]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x16
jb 0x14004b4a0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x19], bl
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
lea edx, [r9 + 0x11]
call rdi
test eax, eax
jne 0x14004b5fb
call fcn.14004ad90
test eax, eax
jne 0x14004b5fb
lea rcx, [0x14004adc0]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xc000008e
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_RaiseException]
mov al, 1
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.14005c2f0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret