Function at 0x140070e10
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x140340610]
xor rax, rsp
mov qword [rbp + 8], rax
mov dword [rsp + 0x50], 0x342a26
mov byte [rsp + 0x54], 1
xor ebx, ebx
mov ecx, ebx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 3
jb 0x140070e50
mov byte [rsp + 0x54], bl
lea rcx, [rsp + 0x50]
call fcn.140242b70
mov dword [rsp + 0x50], 0x3a223510
mov dword [rsp + 0x54], 0x100787a
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x45]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 6
jb 0x140070e90
mov byte [rsp + 0x57], bl
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [rsp + 0x50], 0x3e2e3421
mov dword [rsp + 0x54], 0x2428382c
mov dword [rsp + 0x58], 0x242d28
mov byte [rsp + 0x5c], 1
mov rcx, rbx
nop
lea eax, [rcx + 0x45]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0xb
jb 0x140070ed0
mov byte [rsp + 0x5c], bl
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GlobalFindAtomA]
test ax, ax
jne 0x14007106f
mov dword [rsp + 0x50], 0x4674c4f
mov dword [rsp + 0x54], 0x252f2b26
mov dword [rsp + 0x58], 0x7e612923
mov word [rsp + 0x5c], 0x7f
mov byte [rsp + 0x5e], 1
mov rcx, rbx
nop
lea eax, [rcx + 0x45]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x140070f20
mov byte [rsp + 0x5e], bl
lea rdx, [rsp + 0x50]
call fcn.140078e70
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], rax
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rbx
lea r8d, [rax + 6]
lea rdx, str.731809
lea rcx, [rbp - 0x30]
call fcn.140061b70
lea r8, [rbp - 0x30]
lea rdx, [rbp - 0x10]
lea rcx, [0x14034a420]
call fcn.14006bc00
nop
call fcn.14005c800
mov rbx, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400710b1
mov rdx, qword [rbp - 0x10]
mov rcx, rax
call fcn.140062490
test rax, rax
jne 0x14007102d
movdqa xmm0, xmmword [0x1403160f0]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [str.efgjuz08__]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [0x140315d80]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1403161b0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1403161d0]
movdqa xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0xecb7f2fb
mov dword [rbp - 0x3c], 0xfdbbe3eb
mov dword [rbp - 0x38], 0xcef6fffa
mov word [rbp - 0x34], 0x100
lea rdx, [rsp + 0x70]
call fcn.140071170
mov rcx, rbx
call fcn.14005cb10
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call fcn.140238028
int3
mov rcx, rbx
call fcn.14005cb10
mov dword [rsp + 0x50], 0x3e2e3421
mov dword [rsp + 0x54], 0x2428382c
mov dword [rsp + 0x58], 0x242d28
mov byte [rsp + 0x5c], 1
lea rcx, [rsp + 0x50]
call fcn.140069b30
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GlobalAddAtomA]
nop
lea rcx, [rbp - 0x10]
call fcn.140075f20
movdqa xmm0, xmmword [0x140315f70]
movdqu xmmword [rsp + 0x50], xmm0
mov dword [rsp + 0x60], 0x76333333
mov word [rsp + 0x64], 0x100
lea rcx, [rsp + 0x50]
call fcn.1400711b0
mov rcx, rax
call fcn.140062f40
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call fcn.140238028
nop
movdqa xmm0, xmmword [0x1403160f0]
movdqa xmmword [rsp + 0x70], xmm0
movdqa xmm1, xmmword [str.efgiuz08__]
movdqa xmmword [rbp - 0x80], xmm1
movdqa xmm0, xmmword [0x140315d80]
movdqa xmmword [rbp - 0x70], xmm0
movdqa xmm1, xmmword [0x1403161b0]
movdqa xmmword [rbp - 0x60], xmm1
movdqa xmm0, xmmword [0x1403161d0]
movdqa xmmword [rbp - 0x50], xmm0
mov dword [rbp - 0x40], 0xecb7f2fb
mov dword [rbp - 0x3c], 0xfdbbe3eb
mov dword [rbp - 0x38], 0xcef6fffa
mov word [rbp - 0x34], 0x100
lea rdx, [rsp + 0x70]
call fcn.140071170
mov ecx, 0xdac
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call fcn.140238028
int3