Function at 0x140036fe0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov eax, dword [0x141dc1e20]
imul eax, dword [0x141dc1e24]
add eax, 0x5bdb99b4
mov ecx, 0xe3c66c47
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x90c3c716
cmp ecx, 0xe6c6e617
jbe 0x140037097
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rsi, rsp
sub rsp, 0x20
lea rdx, [0x140082c90]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
add rsp, 0x20
mov dword [rsi], 0x5000
sub rsp, 0x20
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SetThreadStackGuarantee]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
add rsp, 0x20
mov r8, qword [0x141dbc008]
sub rsp, 0x20
lea rdx, [0x141db69a0]
mov rcx, rax
call r8
add rsp, 0x20
mov r13, qword [sym.imp.KERNEL32.dll_SetThreadStackGuarantee]
mov rdi, qword [sym.imp.KERNEL32.dll_GetCurrentThread]
lea rbx, [0x141db69a0]
nop dword [rax]
mov r12d, dword [0x141dc1e28]
sub r12d, dword [0x141dc1e2c]
or r12d, 0xed7f56ff
add r12d, 0xf10eb972
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r14, rsp
sub rsp, 0x20
xor ecx, ecx
lea rdx, [0x140082c90]
call qword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
add rsp, 0x20
mov dword [r14], 0x5000
sub rsp, 0x20
mov rcx, r14
call r13
call rdi
add rsp, 0x20
mov r8, qword [0x141dbc008]
sub rsp, 0x20
mov rcx, rax
mov rdx, rbx
call r8
add rsp, 0x20
cmp r12d, 0x102e1b54
jb 0x1400370b0
mov eax, dword [0x141dc1e30]
sub eax, dword [0x141dc1e34]
or eax, 0x88b7d3da
and eax, 0x88f7f3de
cmp eax, 0x1405f29e
je 0x140037191
mov eax, dword [0x141dc1e38]
or eax, dword [0x141dc1e3c]
xor eax, 0x1b136193
imul eax, eax, 0xc27806e6
movzx ecx, byte [0x141dd7ff8]
cmp eax, 0x8c78827e
jne 0x14003719a
movzx eax, byte [0x141dd7ff8]
jmp 0x14003716c
mov eax, dword [0x141dc1e40]
xor edx, edx
div dword [str.g3hm]
or eax, 0xa7353e3a
xor eax, 0x3c4f4db4
imul eax, eax, 0x837f92cd
cmp eax, 0x948ef6ca
jae 0x1400371e0
sub rsp, 0x20
mov edx, 0x38
xor ecx, ecx
call fcn.1400beea0
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dc1e48]
xor edx, edx
div dword [0x141dc1e4c]
mov edi, eax
add edi, 0x5d49fbbb
xor edi, 0x50ca83c5
sub rsp, 0x20
mov edx, 0x38
xor ecx, ecx
call fcn.1400beea0
add rsp, 0x20
cmp edi, 0x8d661048
ja 0x1400371e0
mov rcx, rax
test rax, rax
je 0x14003733b
mov eax, dword [0x141dc1e58]
xor eax, dword [0x141dc1e5c]
add eax, 0x9b8cdca7
xor eax, 0xecf93783
cmp eax, 0x8a07d4e0
jbe 0x140037250
mov qword [rcx], 1
mov qword [rcx + 8], 1
mov eax, dword [0x141dc1e60]
xor edx, edx
div dword [0x141dc1e64]
add eax, 0x391f3593
or eax, 0x8a80910c
imul rax, rax, 0x49701bd
shr rax, 0x3a
mov qword [rcx], 1
mov qword [rcx + 8], 1
cmp eax, 0x4fb1f78b
ja 0x140037250
mov qword [rcx + 0x10], 0
mov rax, qword [0x141dd7fc0]
nop dword [rax + rax]
mov edx, dword [0x141dc1e68]
xor edx, dword [0x141dc1e6c]
xor edx, 0x80dd411
or edx, 0xf72203cc
cmp edx, 0xd2e5b9d7
je 0x1400372a0
cmp rax, 0xffffffffffffffff
je 0x14003735a
lea rdx, [rax + 1]
lock cmpxchg qword [0x141dd7fc0], rdx
sete r8b
nop dword [rax + rax]
mov r9d, dword [0x141dc1e70]
sub r9d, dword [0x141dc1e74]
add r9d, 0xba9388ea
or r9d, 0x4c6db723
cmp r9d, 0xb353dfd0
je 0x1400372e0
test r8b, r8b
je 0x1400372c0
mov qword [rcx + 0x28], rdx
mov byte [rcx + 0x30], 0
sub rsp, 0x20
call fcn.1400837d0
call fcn.140025060
add rsp, 0x20
mov eax, dword [0x141dd7f48]
cmp eax, 3
je 0x140037440
xor eax, eax
test al, al
je 0x14003738d
jmp 0x14003739a
ud2
mov eax, dword [0x141dc1e78]
xor edx, edx
div dword [0x141dc1e7c]
imul rax, rax, 0x12963ee9
shr rax, 0x39
and eax, 0xfffffffc
or eax, 0xa7896380
cmp eax, 0x763c1880
jae 0x140037470
jmp 0x140037490
mov byte [r15], 1
mov qword [rsi], r15
xor eax, eax
test al, al
je 0x1400373a3
mov byte [r15], 1
mov qword [rsi], r15
jmp 0x14003738d
mov eax, dword [0x141dc1e90]
xor edx, edx
div dword [str.Z_R]
add eax, 0xb3151076
mov ecx, 0xb5f13bb5
imul rcx, rax
shr rcx, 0x3e
imul eax, ecx, 0xa0e8efd3
cmp eax, 0x7a897a3e
jb 0x140037416
mov eax, dword [0x141dc1e98]
add eax, dword [0x141dc1e9c]
imul edi, eax, 0x704c5753
add edi, 0xedf8d8a9
or edi, 0xb014c963
sub rsp, 0x20
lea rcx, [0x141dd7f48]
lea r9, [0x141db6388]
xor edx, edx
mov r8, rsi
call fcn.1400f7ed0
add rsp, 0x20
cmp edi, 0x69705e71
jne 0x140037440
sub rsp, 0x20
lea rcx, [0x141dd7f48]
lea r9, [0x141db6388]
xor edx, edx
mov r8, rsi
call fcn.1400f7ed0
add rsp, 0x20
jmp 0x1400373d0
mov eax, dword [0x141dc1ea0]
xor eax, dword [0x141dc1ea4]
and eax, 0x28809541
add eax, 0xd784bcc2
cmp eax, 0xaed73621
jb 0x140037440
xor eax, eax
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dc1e80]
sub eax, dword [0x141dc1e84]
imul eax, eax, 0x4b7151f7
and eax, 0xce09b053
ud2
ud2