Function at 0x4b79c
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xf0
mov rax, qword [0x00078100]
xor rax, rsp
mov qword [rsp + 0xe0], rax
mov rdi, rcx
lea r13, [rcx + 4]
mov ebp, r8d
mov rsi, rdx
mov r12d, 0x40
lea rcx, [r11 - 0x88]
mov r8, r12
xor edx, edx
call fcn.0005d630
xor edx, edx
mov r8d, 0x110
mov rcx, r13
call fcn.0005d630
lea r14d, [r12 + 0x40]
mov r11d, ebp
xor ebx, ebx
sub r11d, r14d
je 0x4b82f
sub r11d, r12d
je 0x4b822
cmp r11d, r12d
je 0x4b822
lea eax, [rbx - 0x24]
jmp 0x4beef
mov dword [rdi], 4
mov edi, 1
jmp 0x4b837
mov dword [rdi], 3
mov edi, ebx
mov r8, rbp
shr r8, 3
cmp r8, rbx
jbe 0x4b853
lea rcx, [rsp + 0x90]
mov rdx, rsi
call fcn.0005d130
cmp ebp, 0xc0
jne 0x4b877
mov rcx, rbx
mov al, byte [rsp + rcx + 0xa0]
inc rcx
not al
mov byte [rsp + rcx + 0xa7], al
cmp rcx, 8
jb 0x4b85e
mov rdx, rbx
lea r15, [0x00010000]
movzx eax, byte [rdx + r15 + 0x4f691]
movzx ecx, byte [rdx + r15 + 0x4f690]
add rdx, 8
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + r15 + 0x4f68a]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + r15 + 0x4f68b]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + r15 + 0x4f68d]
mov dword [rsp + rdx + 0x58], ecx
movzx ecx, byte [rdx + r15 + 0x4f68c]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + r15 + 0x4f68e]
shl ecx, 8
or ecx, eax
movzx eax, byte [rdx + r15 + 0x4f68f]
shl ecx, 8
or ecx, eax
mov dword [rsp + rdx + 0x5c], ecx
cmp rdx, 0x30
jb 0x4b881
lea rcx, [rsp + 0x20]
mov r8, r12
xor edx, edx
call fcn.0005d630
mov r11, rbx
movzx eax, byte [rsp + r11 + 0x91]
movzx ecx, byte [rsp + r11 + 0x90]
add r11, 4
shl ecx, 8
or ecx, eax
movzx eax, byte [rsp + r11 + 0x8e]
shl ecx, 8
or ecx, eax
movzx eax, byte [rsp + r11 + 0x8f]
shl ecx, 8
or ecx, eax
mov dword [rsp + r11 + 0x1c], ecx
cmp r11, 0x20
jb 0x4b90b
mov rcx, rbx
mov eax, dword [rsp + rcx*4 + 0x30]
inc rcx
xor eax, dword [rsp + rcx*4 + 0x1c]
mov dword [rsp + rcx*4 + 0x3c], eax
cmp rcx, 4
jb 0x4b950
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.0004b6a4
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x48]
call fcn.0004b6a4
mov r11, rbx
mov eax, dword [rsp + r11*4 + 0x20]
inc r11
xor dword [rsp + r11*4 + 0x3c], eax
cmp r11, 4
jb 0x4b990
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x40]
call fcn.0004b6a4
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0x48]
call fcn.0004b6a4
cmp ebp, r14d
jbe 0x4ba16
mov rcx, rbx
mov eax, dword [rsp + rcx*4 + 0x40]
inc rcx
xor eax, dword [rsp + rcx*4 + 0x2c]
mov dword [rsp + rcx*4 + 0x4c], eax
cmp rcx, 4
jb 0x4b9d3
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x80]
lea rcx, [rsp + 0x50]
call fcn.0004b6a4
lea r8, [rsp + 0x50]
lea rdx, [rsp + 0x88]
lea rcx, [rsp + 0x58]
call fcn.0004b6a4
mov eax, dword [rsp + 0x28]
mov r12d, dword [rsp + 0x20]
mov edx, dword [rsp + 0x24]
movsxd r10, edi
mov dword [rsp + 0x98], eax
mov eax, dword [rsp + 0x2c]
mov r14, r10
mov dword [rsp + 0x90], r12d
mov dword [rsp + 0x94], edx
add r14, r14
mov dword [rsp + 0x9c], eax
mov r11d, 0xf
lea rdi, [r15 + r14*8 + 0x4fac0]
lea rsi, [rsp + 0xa4]
cmp byte [rdi], bl
je 0x4baf1
mov r9, r11
mov r8d, 0x20
and r9d, 0x1f
sub r8, r9
mov rcx, r8
shr edx, cl
mov rcx, r9
shl r12d, cl
mov rcx, r8
xor edx, r12d
mov dword [rsi - 4], edx
mov edx, dword [rsp + 0x98]
mov eax, dword [rsp + 0x94]
shr edx, cl
mov rcx, r9
shl eax, cl
mov rcx, r8
xor edx, eax
mov dword [rsi], edx
mov edx, dword [rsp + 0x9c]
mov eax, dword [rsp + 0x98]
shr edx, cl
mov rcx, r9
shl eax, cl
mov rcx, r8
xor edx, eax
mov dword [rsi + 4], edx
mov edx, dword [rsp + 0x90]
mov eax, dword [rsp + 0x9c]
shr edx, cl
mov rcx, r9
shl eax, cl
xor edx, eax
mov dword [rsi + 8], edx
mov edx, dword [rsp + 0x94]
mov r12d, dword [rsp + 0x90]
add r11, 0xf
inc rdi
add rsi, 0x10
cmp r11, 0x3c
jbe 0x4ba63
lea rsi, [r10 + r10*4]
mov rdx, rbx
add rsi, rsi
lea r8, [r15 + rsi*8 + 0x4fae0]
cmp byte [r8 + rdx], 0xff
je 0x4bb30
movsx rcx, byte [r8 + rdx]
mov eax, dword [rsp + rdx*4 + 0x90]
mov dword [r13 + rcx*4], eax
inc rdx
cmp rdx, 0x14
jb 0x4bb18
cmp ebp, 0x80
jbe 0x4bc6e
mov eax, dword [rsp + 0x38]
mov r15d, dword [rsp + 0x30]
mov edx, dword [rsp + 0x34]
mov dword [rsp + 0x98], eax
mov eax, dword [rsp + 0x3c]
mov dword [rsp + 0x90], r15d
mov dword [rsp + 0x9c], eax
lea rax, [0x00010000]
mov dword [rsp + 0x94], edx
mov r11d, 0xf
lea r12, [rsp + 0xa4]
lea rdi, [rax + r14*8 + 0x4fac4]
cmp byte [rdi], bl
je 0x4bc26
mov r9, r11
mov r8d, 0x20
and r9d, 0x1f
sub r8, r9
mov rcx, r8
shr edx, cl
mov rcx, r9
shl r15d, cl
mov rcx, r8
xor edx, r15d
mov dword [r12 - 4], edx
mov edx, dword [rsp + 0x98]
mov eax, dword [rsp + 0x94]
shr edx, cl
mov rcx, r9
shl eax, cl
mov rcx, r8
xor edx, eax
mov dword [r12], edx
mov edx, dword [rsp + 0x9c]
mov eax, dword [rsp + 0x98]
shr edx, cl
mov rcx, r9
shl eax, cl
mov rcx, r8
xor edx, eax
mov dword [r12 + 4], edx
mov edx, dword [rsp + 0x90]
mov eax, dword [rsp + 0x9c]
shr edx, cl
mov rcx, r9
shl eax, cl
xor edx, eax
mov dword [r12 + 8], edx
mov edx, dword [rsp + 0x94]
mov r15d, dword [rsp + 0x90]
add r11, 0xf
inc rdi
add r12, 0x10
cmp r11, 0x3c
jbe 0x4bb90
lea rax, [0x00010000]
mov rdx, rbx
lea r8, [rax + rsi*8 + 0x4faf4]
cmp byte [r8 + rdx], 0xff
je 0x4bc65
movsx rcx, byte [r8 + rdx]
mov eax, dword [rsp + rdx*4 + 0x90]
mov dword [r13 + rcx*4], eax
inc rdx
cmp rdx, 0x14
jb 0x4bc4d
mov eax, dword [rsp + 0x48]
mov r15d, dword [rsp + 0x40]
mov edx, dword [rsp + 0x44]
mov dword [rsp + 0x98], eax
mov eax, dword [rsp + 0x4c]
mov dword [rsp + 0x90], r15d
mov dword [rsp + 0x9c], eax
lea rax, [0x00010000]
mov dword [rsp + 0x94], edx
mov r11d, 0xf
lea r12, [rsp + 0xa4]
lea rdi, [rax + r14*8 + 0x4fac8]
cmp byte [rdi], bl
je 0x4bd4f
mov r9, r11
mov r8d, 0x20
and r9d, 0x1f
sub r8, r9
mov rcx, r8
shr edx, cl
mov rcx, r9
shl r15d, cl
mov rcx, r8
xor edx, r15d
mov dword [r12 - 4], edx
mov edx, dword [rsp + 0x98]
mov eax, dword [rsp + 0x94]
shr edx, cl
mov rcx, r9
shl eax, cl
mov rcx, r8
xor edx, eax
mov dword [r12], edx
mov edx, dword [rsp + 0x9c]
mov eax, dword [rsp + 0x98]
shr edx, cl
mov rcx, r9
shl eax, cl
mov rcx, r8
xor edx, eax
mov dword [r12 + 4], edx
mov edx, dword [rsp + 0x90]
mov eax, dword [rsp + 0x9c]
shr edx, cl
mov rcx, r9
shl eax, cl
xor edx, eax
mov dword [r12 + 8], edx
mov edx, dword [rsp + 0x94]
mov r15d, dword [rsp + 0x90]
add r11, 0xf
inc rdi
add r12, 0x10
cmp r11, 0x3c
jbe 0x4bcb9
lea r15, [0x00010000]
mov rdx, rbx
lea r8, [r15 + rsi*8 + 0x4fb08]
cmp byte [r8 + rdx], 0xff
je 0x4bd8e
movsx rcx, byte [r8 + rdx]
mov eax, dword [rsp + rdx*4 + 0x90]
mov dword [r13 + rcx*4], eax
inc rdx
cmp rdx, 0x14
jb 0x4bd76
cmp ebp, 0x80
jbe 0x4beb7
mov eax, dword [rsp + 0x58]
mov r12d, dword [rsp + 0x50]
mov edx, dword [rsp + 0x54]
mov dword [rsp + 0x98], eax
mov eax, dword [rsp + 0x5c]
mov dword [rsp + 0x90], r12d
mov dword [rsp + 0x94], edx
mov r11d, 0xf
lea rdi, [r15 + r14*8 + 0x4facc]
mov dword [rsp + 0x9c], eax
lea rbp, [rsp + 0xa4]
cmp byte [rdi], bl
je 0x4be76
mov r9, r11
mov r8d, 0x20
and r9d, 0x1f
sub r8, r9
mov rcx, r8
shr edx, cl
mov rcx, r9
shl r12d, cl
mov rcx, r8
xor edx, r12d
mov dword [rbp - 4], edx
mov edx, dword [rsp + 0x98]
mov eax, dword [rsp + 0x94]
shr edx, cl
mov rcx, r9
shl eax, cl
mov rcx, r8
xor edx, eax
mov dword [rbp], edx
mov edx, dword [rsp + 0x9c]
mov eax, dword [rsp + 0x98]
shr edx, cl
mov rcx, r9
shl eax, cl
mov rcx, r8
xor edx, eax
mov dword [rbp + 4], edx
mov edx, dword [rsp + 0x90]
mov eax, dword [rsp + 0x9c]
shr edx, cl
mov rcx, r9
shl eax, cl
xor edx, eax
mov dword [rbp + 8], edx
mov edx, dword [rsp + 0x94]
mov r12d, dword [rsp + 0x90]
add r11, 0xf
inc rdi
add rbp, 0x10
cmp r11, 0x3c
jbe 0x4bde7
mov rdx, rbx
lea r8, [r15 + rsi*8 + 0x4fb1c]
cmp byte [r8 + rdx], 0xff
je 0x4beae
movsx rcx, byte [r8 + rdx]
mov eax, dword [rsp + rdx*4 + 0x90]
mov dword [r13 + rcx*4], eax
inc rdx
cmp rdx, 0x14
jb 0x4be96
lea rax, [r10 + r10*4]
lea r8, [r15 + rax*4 + 0x4fb80]
cmp byte [r8 + rbx], 0xff
je 0x4bee4
movsx rdx, byte [r8 + rbx]
lea rax, [r10 + r10*2]
lea rcx, [rbx + rax*4]
mov eax, dword [r13 + rdx*4]
mov dword [r13 + rcx*4 + 0x80], eax
inc rbx
cmp rbx, 0x14
jb 0x4bec3
xor eax, eax
mov rcx, qword [rsp + 0xe0]
xor rcx, rsp
call fcn.0005cf80
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret