Function at 0x140005220
Capabilities:
Accept command line arguments
Encode data using xor
Enumerate gui resources
Hash data using fnv

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r12
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x140049020]
xor rax, rsp
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rsp + 0x68]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov r15, rax
mov qword [rsp + 0x40], rax
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
xor r12d, r12d
mov qword [rsp + 0x60], r12
mov ebx, 1
nop dword [rax]
cmp ebx, dword [rsp + 0x68]
jge 0x14000534f
movsxd rax, ebx
mov rdx, qword [r15 + rax*8]
mov qword [rsp + 0x20], r12
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x38], 7
mov word [rsp + 0x20], r12w
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x1400052b1
lea rcx, [rsp + 0x20]
call fcn.140002520
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, qword [rsp + 0x60]
je 0x1400052f7
movups xmm0, xmmword [rsp + 0x20]
movups xmmword [rdx], xmm0
movups xmm1, xmmword [rsp + 0x30]
movups xmmword [rdx + 0x10], xmm1
mov eax, 7
mov word [rsp + 0x20], r12w
add qword [rsp + 0x58], 0x20
jmp 0x14000530b
lea r8, [rsp + 0x20]
lea rcx, [rsp + 0x50]
call fcn.1400026a0
mov rax, qword [rsp + 0x38]
cmp rax, 8
jb 0x140005348
lea rdx, [rax*2 + 2]
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005343
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400055bc
call fcn.14000e0f8
inc ebx
jmp 0x140005280
mov r10, qword [rsp + 0x50]
cmp r10, qword [rsp + 0x58]
je 0x140005535
mov r8, r10
cmp qword [r10 + 0x18], 8
jb 0x14000536c
mov r8, qword [r10]
movabs r11, 0xcbf29ce484222325
mov rcx, r11
mov rbx, qword [r10 + 0x10]
lea r9, [rbx + rbx]
mov rdx, r12
movabs r14, 0x100000001b3
test r9, r9
je 0x1400053b4
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [rdx + r8]
xor rcx, rax
imul rcx, r14
inc rdx
cmp rdx, r9
jb 0x1400053a0
and rcx, qword [0x14004bba0]
add rcx, rcx
mov rax, qword [0x14004bb88]
mov rdx, qword [rax + rcx*8 + 8]
mov rdi, qword [0x14004bb78]
cmp rdx, rdi
je 0x140005446
mov rsi, qword [rax + rcx*8]
nop word [rax + rax]
lea rcx, [rdx + 0x10]
cmp qword [rdx + 0x28], 8
jb 0x1400053ef
mov rcx, qword [rdx + 0x10]
mov r9, r10
cmp qword [r10 + 0x18], 8
jb 0x1400053fc
mov r9, qword [r10]
cmp rbx, qword [rdx + 0x20]
jne 0x14000543b
mov r8, rbx
test rbx, rbx
je 0x140005424
sub r9, rcx
nop dword [rax]
movzx eax, word [rcx]
cmp word [r9 + rcx], ax
jne 0x14000543b
add rcx, 2
sub r8, 1
jne 0x140005410
test rdx, rdx
je 0x140005446
cmp rdx, rdi
je 0x140005446
lea rcx, [rsp + 0x50]
call qword [rdx + 0x30]
jmp 0x140005527
cmp rdx, rsi
je 0x140005446
mov rdx, qword [rdx + 8]
jmp 0x1400053e0
mov rdx, r10
cmp qword [r10 + 0x18], 8
jb 0x140005453
mov rdx, qword [r10]
lea r8, [rbx + rbx]
mov rcx, r12
test r8, r8
je 0x140005473
nop
movzx eax, byte [rcx + rdx]
xor r11, rax
imul r11, r14
inc rcx
cmp rcx, r8
jb 0x140005460
and r11, qword [0x14004bbe0]
add r11, r11
mov rax, qword [0x14004bbc8]
mov r9, qword [rax + r11*8 + 8]
mov rdi, qword [0x14004bbb8]
cmp r9, rdi
je 0x14000550c
mov r11, qword [rax + r11*8]
nop dword [rax]
lea rcx, [r9 + 0x10]
cmp qword [r9 + 0x28], 8
jb 0x1400054af
mov rcx, qword [r9 + 0x10]
mov r8, r10
cmp qword [r10 + 0x18], 8
jb 0x1400054bc
mov r8, qword [r10]
cmp rbx, qword [r9 + 0x20]
jne 0x140005501
mov rdx, rbx
test rbx, rbx
je 0x1400054e4
sub r8, rcx
nop dword [rax]
movzx eax, word [rcx]
cmp word [r8 + rcx], ax
jne 0x140005501
add rcx, 2
sub rdx, 1
jne 0x1400054d0
test r9, r9
je 0x14000550c
cmp r9, rdi
je 0x14000550c
movsxd rdx, dword [r9 + 0x30]
lea rcx, [0x140003750]
call qword [sym.imp.USER32.dll_EnumWindows]
jmp 0x140005527
cmp r9, r11
je 0x14000550c
mov r9, qword [r9 + 8]
jmp 0x1400054a0
lea rdx, str.Input_not_supported
lea rcx, [0x14004a500]
call fcn.1400091c0
mov rcx, rax
call fcn.1400094a0
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov r10, qword [rsp + 0x50]
test r10, r10
je 0x14000558c
mov rdx, qword [rsp + 0x58]
mov rcx, r10
call fcn.140002990
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x50]
sub rdx, rcx
and rdx, 0xffffffffffffffe0
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005579
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400055c2
call fcn.14000e0f8
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r12
mov eax, 1
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.14000dbb0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop r12
ret
call fcn.140014610
nop
call fcn.140014610
int3