Function at 0x180035b50
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xc0
mov rax, qword [0x1800e3040]
xor rax, rsp
mov qword [rbp + 0x37], rax
lea r12, [0x1800e3850]
mov qword [rbp + 7], r12
mov rsi, qword [0x1800f3540]
mov rdi, qword [0x1800f3550]
mov r14, qword [0x1800f3580]
xor ebx, ebx
mov rcx, qword [rsi]
movzx r8d, word [rsi + 8]
lea rdx, [rcx + r8*8]
cmp rcx, rdx
je 0x180035bca
mov rax, qword [rcx]
cmp dword [rax + 8], 0
je 0x180035bca
inc ebx
add rcx, 8
cmp rcx, rdx
jne 0x180035bb6
cmp ebx, r8d
je 0x180035e84
mov eax, dword [r14]
inc eax
lea rcx, str.thr_
mov qword [rbp - 0x39], rcx
mov qword [rbp - 0x31], 6
mov dword [rbp - 0x11], eax
movabs rax, 0x2000000000000000
mov qword [rbp - 0x19], rax
mov qword [rbp - 0x49], 1
lea rax, [rbp - 0x19]
mov qword [rbp - 0x41], rax
movaps xmm0, xmmword [rbp - 0x49]
movdqa xmmword [rbp - 0x49], xmm0
movaps xmm1, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm1
lea r8, [rbp - 0x49]
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x17]
call fcn.18000d7a0
nop
lea r8, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova r8, qword [rbp + 0x17]
mov edx, 0x40
lea r15, [0x1800e3924]
mov rcx, r15
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
xor r10d, r10d
mov r9, 0xffffffffffffffff
nop dword [rax]
inc r9
cmp byte [r15 + r9], r10b
jne 0x180035c60
add r9, r15
cmp r15, r9
je 0x180035cb4
mov r11, r15
nop dword [rax]
nop dword [rax + rax]
movzx r8d, byte [r11]
lea edx, [r8 - 0x41]
lea eax, [r8 + 0x20]
movzx ecx, al
cmp dl, 0x19
cmova ecx, r8d
movsx eax, cl
add eax, r10d
imul r10d, eax, 0x401
mov eax, r10d
shr eax, 6
xor r10d, eax
inc r11
cmp r11, r9
jne 0x180035c80
lea ecx, [r10 + r10*8]
mov eax, ecx
shr eax, 0xb
xor ecx, eax
imul edx, ecx, 0x8001
mov dword [0x1800e3978], edx
mov rax, qword [0x1800e3850]
xor r9d, r9d
xor r8d, r8d
mov rcx, r12
call qword [rax + 8]
mov byte [0x1800e399f], 0
mov eax, dword [rdi]
test eax, eax
jne 0x180035cf6
mov dword [rdi], 1
mov eax, 1
mov dword [0x1800e3858], eax
inc dword [r14]
inc dword [rdi]
movzx ecx, bx
mov rax, qword [rsi]
mov r8, qword [rax + rcx*8]
mov qword [rbp - 0x49], r8
mov qword [rax + rcx*8], r12
mov rdx, qword [0x1800e37c0]
cmp rdx, qword [0x1800e37c8]
je 0x180035d34
mov qword [rdx], r12
mov qword [rdx + 8], r8
add qword [0x1800e37c0], 0x10
jmp 0x180035d41
lea r9, [rbp - 0x49]
lea r8, [rbp + 7]
call fcn.180037380
mov rdi, qword [0x1800e37b0]
mov ebx, dword [0x1800e3858]
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], 0
mov qword [rbp - 0x21], 0
mov r8d, 0x29
lea rdx, str.Successfully_created_thread__at_id_
lea rcx, [rbp - 0x39]
call fcn.18000bc30
lea rax, [rbp - 0x39]
mov qword [rbp + 7], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
mov r8d, 4
lea rdx, str.Info
lea rcx, [rbp - 0x19]
call fcn.18000bc30
nop
mov edx, 8
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], r15
lea r9, [rbp - 0x39]
lea r8, [rbp - 0x19]
mov rcx, rdi
call fcn.180037540
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x180035e07
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035e01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180035e01
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180090970
nop
mov rdx, qword [rbp - 0x21]
cmp rdx, 0xf
jbe 0x180035e46
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035e40
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180035e40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180090970
nop
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x180035e84
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180035e7f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180035e7f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.180090970
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1800903f0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret