Function at 0x140005e80
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x2c8]
sub rsp, 0x3b0
mov rax, qword [0x14005b178]
xor rax, rsp
mov qword [rbp + 0x2a0], rax
mov edi, 0x104
lea rcx, [rbp + 0x81]
xor ebx, ebx
mov r8d, edi
xor edx, edx
mov byte [rbp + 0x80], bl
call fcn.140018a40
lea rcx, [rbp + 0x191]
mov r8d, edi
xor edx, edx
mov byte [rbp + 0x190], bl
call fcn.140018a40
mov qword [rsp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea r8d, [rdi + 0x28]
lea rcx, [rsp + 0x34]
xor edx, edx
mov r12d, eax
mov dword [rsp + 0x30], ebx
call fcn.140018a40
lea ecx, [rbx + 2]
mov r14d, ebx
call fcn.140007580
or rsi, 0xffffffffffffffff
mov r15, rax
cmp rax, rsi
je 0x1400060ec
xor eax, eax
lea rdi, [rsp + 0x30]
mov ecx, 0x130
rep stosb byte [rdi], al
lea rdx, [rsp + 0x30]
mov rcx, r15
mov dword [rsp + 0x30], 0x130
call fcn.1400075c0
test eax, eax
je 0x140005f6b
cmp r12d, dword [rsp + 0x38]
je 0x140005f66
lea rdx, [rsp + 0x30]
mov rcx, r15
call fcn.140007608
jmp 0x140005f4c
mov r14d, dword [rsp + 0x50]
lea rcx, [rsp + 0x30]
mov edx, 0x130
call fcn.140010a84
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test r14d, r14d
je 0x1400060ec
lea rdx, [rbp + 0x80]
mov ecx, r14d
call fcn.140005d48
test eax, eax
je 0x1400060ec
lea rax, [rbp + 0x80]
mov rdx, rsi
inc rdx
cmp byte [rax + rdx], bl
jne 0x140005fad
test rdx, rdx
je 0x1400060ec
lea rax, [rbp + 0x80]
mov ecx, ebx
test rax, rax
je 0x140005fed
test edx, edx
je 0x140005fed
lea rdi, [rbp + 0x80]
mov r8d, edx
movsx eax, byte [rdi]
imul ecx, ecx, 0x811c9dc5
inc rdi
xor ecx, eax
dec r8
jne 0x140005fda
shr ecx, 1
mov rdi, rbx
add dword [0x1400a0710], ecx
test rdx, rdx
je 0x140006028
movsx ecx, byte [rbp + rdi + 0x80]
call fcn.140012d58
inc rdi
lea rcx, [rbp + 0x80]
mov byte [rbp + rdi + 0x7f], al
mov rax, rsi
inc rax
cmp byte [rcx + rax], bl
jne 0x14000601b
cmp rdi, rax
jb 0x140005ffd
xor edi, edi
lea rax, [rbp + 0x80]
lea r14d, [rdi + 0x14]
mov edx, edi
mov qword [rbp + 0x60], rdi
mov r8d, edi
mov dword [rbp + 0x70], edi
mov qword [rsp + 0x20], r14
mov qword [rbp + 0x68], rdx
inc rsi
cmp byte [rax + rsi], bl
jne 0x14000604a
lea rax, [rbp + 0x80]
test rax, rax
je 0x140006084
lea r9, [rsp + 0x20]
lea r8, [rbp + 0x60]
lea rcx, [rbp + 0x80]
mov rdx, rsi
call fcn.140011790
mov r8d, dword [rbp + 0x70]
mov rdx, qword [rbp + 0x68]
mov rdi, qword [rbp + 0x60]
jmp 0x140006086
mov eax, ebx
test eax, eax
je 0x1400060bb
lea rax, [0x140064680]
mov rcx, rbx
cmp qword [rax], rdi
jne 0x1400060a5
cmp qword [rax + 8], rdx
jne 0x1400060a5
cmp dword [rax + 0x10], r8d
je 0x1400060b6
add rcx, r14
add rax, r14
cmp rcx, 0xdc
jae 0x1400060bb
jmp 0x140006094
mov ebx, 1
mov edi, 0x105
lea rcx, [rbp + 0x80]
mov edx, edi
call fcn.140010a84
lea rcx, [rbp + 0x190]
mov edx, edi
call fcn.140010a84
lea rcx, [rbp + 0x60]
mov rdx, r14
call fcn.140010a84
mov eax, ebx
jmp 0x1400060ee
xor eax, eax
mov rcx, qword [rbp + 0x2a0]
xor rcx, rsp
call fcn.140012b40
lea r11, [rsp + 0x3b0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret