Function at 0x140002a90
Capabilities:
Accept command line arguments
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
sub rsp, 0x20
mov esi, dword [rsp + 0x60]
lea r11d, [r8 - 0x445]
mov qword [rsp + 0x40], rbp
lea edi, [r8 - 0x24db]
mov r9d, edx
mov qword [rsp + 0x48], r14
xor r9d, 0x3867
lea ebp, [rdx - 0x1e50]
mov eax, r9d
lea r10d, [rsi + 0x106]
xor eax, 0x5e2
mov r14d, r8d
mov rbx, rcx
cmp r10d, eax
jle 0x140002c92
mov eax, ebp
mov qword [rsp + 0x50], r15
xor eax, 0x214c
cmp edi, eax
je 0x140002b07
mov rax, qword [section..data]
lea rcx, [0x14015d340]
mov qword [rax + 0xb8], rcx
xor r15d, r15d
nop word [rax + rax]
mov rcx, qword [section..data]
mov eax, dword [rcx + 0xc]
xor eax, dword [rcx + 0x88]
xor eax, 0x1ffd7b
mov dword [rcx + 0x88], eax
mov rax, qword [0x1401050c8]
mov rcx, qword [section..data]
mov r8d, dword [r15 + rax]
add r15, 4
mov eax, dword [0x14010506c]
imul r8d, dword [rbx + 0x70]
xor eax, 0x75f65
or dword [rcx + 0x90], eax
mov rax, qword [section..data]
mov edx, r8d
movsxd rcx, dword [rax + 0x7c]
mov rax, qword [0x1401050d8]
shr edx, 0x18
mov byte [rcx + rax], dl
mov edx, r8d
mov rax, qword [section..data]
shr edx, 0x10
inc dword [rax + 0x7c]
mov rax, qword [section..data]
mov ecx, dword [rax + 4]
mov eax, dword [rbx + 0x78]
sub ecx, 0x1fa1c
imul eax, ecx
mov dword [rbx + 0x78], eax
mov eax, dword [0x14010501c]
mov rcx, qword [section..data]
add eax, 0xffe00285
xor dword [rcx + 0x100], eax
movsxd rcx, dword [rbx + 0x7c]
mov rax, qword [rbx + 0xc8]
mov byte [rcx + rax], dl
mov edx, r8d
inc dword [rbx + 0x7c]
mov rax, qword [0x1401050d8]
movsxd rcx, dword [rbx + 0x7c]
shr edx, 8
mov byte [rcx + rax], dl
inc dword [rbx + 0x7c]
mov eax, dword [rbx + 0x100]
mov ecx, eax
xor ecx, dword [0x140105038]
xor ecx, 0x6dc5b
add ecx, eax
mov dword [rbx + 0x100], ecx
mov rcx, qword [section..data]
mov eax, dword [rcx + 0x94]
add eax, dword [rcx + 0x90]
xor eax, dword [rcx + 0x108]
xor eax, 0xd7307914
mov dword [rcx + 0x108], eax
mov eax, 0x1b8702
sub eax, dword [rbx + 0x108]
mov rcx, qword [section..data]
add dword [rcx + 0x94], eax
movsxd rcx, dword [rbx + 0x7c]
mov rax, qword [rbx + 0xc8]
mov byte [rcx + rax], r8b
inc dword [rbx + 0x7c]
mov edx, dword [0x140105118]
mov eax, dword [rbx + 0x94]
add edx, 0xffdd9ca4
add edx, dword [rbx + 0x100]
imul eax, edx
mov dword [rbx + 0x94], eax
cmp r15, 0xad478
jl 0x140002b10
mov r15, qword [rsp + 0x50]
xor r10d, 0x80c
cmp ebp, r10d
je 0x140002c92
mov eax, dword [rbx + 0x5c]
add eax, 0x68447aae
mov dword [0x140105080], eax
lea eax, [r14 - 0x82c]
mov r14, qword [rsp + 0x48]
cmp ebp, eax
mov rbp, qword [rsp + 0x40]
je 0x140002ce2
xor r11d, 0x6a1
cmp r9d, r11d
jl 0x140002d15
mov rax, qword [section..data]
cmp dword [rax + 0x90], 0x9bee
jbe 0x140002d15
lea rax, [0x140117930]
mov qword [0x1401050c8], rax
lea eax, [rsi - 0x259]
add rsp, 0x20
pop rdi
pop rsi
pop rbx
ret
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rax, qword [section..data]
or edi, 0x214c
mov ecx, dword [rax + 0xf4]
or ecx, dword [rbx + 0x38]
mov dword [rbx + 0x94], ecx
imul edi, dword [0x140105110]
mov rax, qword [section..data]
xor dword [rax + 0x38], edi
lea eax, [rsi - 0x259]
add rsp, 0x20
pop rdi
pop rsi
pop rbx
ret