Function at 0x1400034d0
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
push rbp
mov rbp, rsp
sub rsp, 0x60
call fcn.1400030e0
mov rcx, rax
call fcn.140003430
call fcn.1400030e0
xor ebx, ebx
cmp qword [rax + 0x20], 0xffffffffffffffff
jne 0x140003649
movdqa xmm0, xmmword [0x1400392e0]
xor eax, eax
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x2c], al
mov edx, ebx
mov dword [rbp - 0x30], 0xf1f0f3b9
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rdx - 0x34]
inc edx
xor byte [rcx], al
cmp edx, 0x14
jb 0x140003520
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x2c], bl
call fcn.140004770
mov rcx, rax
call fcn.140004a50
xor eax, eax
mov dword [rbp - 0x40], 0xf7bef7e2
mov word [rbp - 0x38], ax
mov edx, ebx
mov dword [rbp - 0x3c], 0xf7bcf7b7
mov r8d, 0x834
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x40]
lea rcx, [rcx + rax*2]
movzx eax, dx
sub ax, r8w
inc edx
xor word [rcx], ax
cmp edx, 4
jb 0x140003570
movdqa xmm0, xmmword [0x140039290]
lea rax, [rbp - 0x40]
movdqu xmmword [rbp - 0x10], xmm0
mov word [rbp - 0x38], bx
mov r8, 0xffffffffffffffff
mov qword [rbp - 0x20], rbx
nop dword [rax]
inc r8
cmp word [rax + r8*2], bx
jne 0x1400035b0
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.140003f60
lea rdx, [rbp - 0x20]
lea rcx, [rbp - 0x40]
call fcn.140002880
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.140003cd0
mov rcx, rax
call fcn.1400024d0
lea rdx, [rbp - 0x40]
lea rcx, [rbp - 0x20]
call fcn.140003cd0
mov rcx, rax
call fcn.140002a50
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x140003649
mov rcx, qword [rbp - 0x40]
lea rdx, [rdx*2 + 2]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003644
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140003722
call fcn.140007b1c
call fcn.1400030e0
mov rcx, rax
call fcn.140003430
call fcn.1400030e0
movdqa xmm0, xmmword [0x1400392e0]
movdqu xmmword [rbp - 0x40], xmm0
cmp qword [rax + 0x20], 0xffffffffffffffff
je 0x1400036b6
mov dword [rbp - 0x30], 0xffb9b9
nop word [rax + rax]
movsxd rax, ebx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rbx - 0x34]
inc ebx
xor byte [rcx], al
cmp ebx, 0x13
jb 0x140003680
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x2d], 0
call fcn.140004770
mov rcx, rax
call fcn.140004a50
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rbp
ret
xor eax, eax
mov dword [rbp - 0x30], 0xadbbfdb9
mov byte [rbp - 0x26], al
mov dword [rbp - 0x2c], 0xc3908e92
mov word [rbp - 0x28], 0xd9d9
nop
movsxd rax, ebx
lea rcx, [rbp - 0x40]
add rcx, rax
lea eax, [rbx - 0x34]
inc ebx
xor byte [rcx], al
cmp ebx, 0x1a
jb case.default.0x14000371b
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x26], 0
call fcn.140004770
mov rcx, rax
call fcn.140004a50
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
xor edx, edx
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rbp
jmp qword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.140010fa4
int3
pop rbp
invalid
cmpsd dword [rsi], dword [rdi]
invalid
retf
pop rbp
cli
invalid
or dl, ch
push 0xffffffffffffffdb
invalid
invalid
sahf
cld
jo 0x1400685c3
push rbp
test byte [rbx], al
insd dword [rdi], dx
sbb byte [rdx], dh
invalid
mov byte [rax - 0x26], dl
jg 0x140068535
and eax, 0xdc970c37
and eax, 0xdc970c37
or edi, edi
cli
movsb byte [rdi], byte [rsi]
invalid
jnp 0x1400685ab
nop
add dword [rax + 0x6d], 0x6a
mov dl, 0x2e
cdq
inc byte [rbp + 2]
clc
js 0x1400685ae
jle 0x1400685b1
pop rbx
or al, 0xa9
push rbx
bt ecx, eax
cwde
jnp 0x1400685d5
scasd eax, dword [rdi]
jne 0x1400685c3
mov dh, 0xe2
jns 0x14006860f
xlatb
invalid
in al, 0xa5
ret
iret
imul esp, ecx, 0xffffffba
mov esp, 0x124db522
or al, 0xce
invalid
fnstcw word [rcx - 0x17e5beca]
mov ebx, 0x81cf5989
invalid
add byte [rcx + 0x7919d8c6], al
movabs al, byte [0x1246f6ea65baea28]
invalid
add ebp, dword [rcx - 6]
insd dword [rdi], dx
xchg edi, eax
insb byte [rdi], dx
jne 0x14006873d
invalid
in eax, 0x61
sahf
jmp 0x140068709
push rax
movabs dword [0xff133cde1029cc96], eax
adc edi, edi
adc edi, edi
jge 0x14006871a
vpsubsb xmm3, xmm13, xmm7
add dword [r14], 0x45991df7
invalid
cdq
lahf
cdq
lahf
nop
jl 0x140068775
xrelease xchg dword [rax], ecx
and byte [rbp - 0x5d], cl
mov ebx, 0x2296a350
out 0xc9, eax
leave
xchg ecx, eax
jae 0x1400686fc
pop rdx
adc byte [rsi - 0x363a5ab3], ah
imul edi, dword [0x160c1c104], 0x28
and byte [rax], ch
out dx, al
cmp al, byte [rdi + riz - 0x360cebe8]
shl byte [rbx], 1
or eax, 0x8706910f
setno byte [rsi]
xchg eax, edx
test al, 0x1c
jns 0x140068744
xor bh, byte [rdi]
setno byte [rsi]
xchg eax, edx
test al, 0x1c
jns 0x140068744
invalid
sub eax, 0x999d3eee
cmpsd dword [rsi], dword [rdi]
invalid
invalid
pop rbx
jb 0x140068b62
nop
invalid
jno 0x140068b03
outsd dx, dword [rsi]
invalid
push rdx
invalid
adc eax, edi
xor dh, byte [rbx]
or byte [rax + rsi*2], bl
mov dl, 0x76
cmpsb byte [rsi], byte [rdi]
in eax, 0x36
std
fdivr qword [rbx - 0x6f]
invalid