Function at 0x140037cb0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140093070]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor ebx, ebx
mov dword [rbp - 0x40], 0x1c631c6f
mov word [rbp - 0x20], bx
mov ecx, ebx
mov dword [rbp - 0x3c], 0x1c131c69
mov edi, 0x1c26
mov dword [rbp - 0x38], 0x1c7a1c0a
mov dword [rbp - 0x34], 0x1c441c59
mov dword [rbp - 0x30], 0x1c441c4d
mov dword [rbp - 0x2c], 0x1c421c10
mov dword [rbp - 0x28], 0x1c521c46
mov dword [rbp - 0x24], 0x1c411c46
mov byte [rbp - 0x1e], 1
nop word [rax + rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x40], ax
inc rcx
cmp rcx, 0x10
jb 0x140037d30
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x1e], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140037d8c
xor r8d, r8d
lea r9, [rbp - 0x18]
mov dl, 1
lea ecx, [r8 + 0x13]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp - 0x14]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 6
mov ecx, 0xc0000420
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov dword [rbp - 0x40], 0x1c421c6b
mov rcx, rbx
mov dword [rbp - 0x3c], 0x1c461c45
mov dword [rbp - 0x38], 0x1c521c58
mov dword [rbp - 0x34], 0x1c7b1c0c
mov dword [rbp - 0x30], 0x1c4a1c47
mov dword [rbp - 0x2c], 0x1c541c47
mov dword [rbp - 0x28], 0x1c40
mov byte [rbp - 0x24], 1
nop dword [rax]
nop dword [rax + rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x40], ax
inc rcx
cmp rcx, 0xd
jb 0x140037dd0
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x24], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140037e2c
xor r8d, r8d
lea r9, [rbp - 0x18]
mov dl, 1
lea ecx, [r8 + 0x13]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp - 0x14]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 6
mov ecx, 0xc0000420
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov dword [rbp - 0x40], 0x1c551c76
mov rcx, rbx
mov dword [rbp - 0x3c], 0x1c4a1c47
mov dword [rbp - 0x38], 0x1c581c4f
mov dword [rbp - 0x34], 0x1c0d1c5f
mov dword [rbp - 0x30], 0x1c461c62
mov dword [rbp - 0x2c], 0x1c451c43
mov word [rbp - 0x28], bx
mov byte [rbp - 0x26], 1
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x40], ax
inc rcx
cmp rcx, 0xc
jb 0x140037e61
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x26], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140037ebd
xor r8d, r8d
lea r9, [rbp - 0x18]
mov dl, 1
lea ecx, [r8 + 0x13]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp - 0x14]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 6
mov ecx, 0xc0000420
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov dword [rbp - 0x40], 0x1c541c6d
mov dword [rbp - 0x3c], 0x1c5c1c6c
mov dword [rbp - 0x38], 0x1c5b1c47
mov dword [rbp - 0x34], 0x1c5f1c49
mov word [rbp - 0x30], bx
mov byte [rbp - 0x2e], 1
lea eax, [rdi + rbx]
xor word [rbp + rbx*2 - 0x40], ax
inc rbx
cmp rbx, 8
jb 0x140037ee1
lea rdx, [rbp - 0x40]
mov byte [rbp - 0x2e], 0
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140037f3e
xor r8d, r8d
lea r9, [rbp - 0x18]
mov dl, 1
lea ecx, [r8 + 0x13]
call qword [sym.imp.ntdll.dll_RtlAdjustPrivilege]
lea rax, [rbp - 0x14]
xor r9d, r9d
mov qword [rsp + 0x28], rax
xor r8d, r8d
xor edx, edx
mov dword [rsp + 0x20], 6
mov ecx, 0xc0000420
call qword [sym.imp.ntdll.dll_NtRaiseHardError]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14003c8e0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret