Function at 0x14002b600
Capabilities:
Encode data using xor
Get common file path

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x2c0
mov rbx, rcx
xor edx, edx
lea rcx, [rsp + 0x90]
mov r8d, 0x20a
xor edi, edi
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x90]
mov ecx, 0x105
call qword [sym.imp.KERNEL32.dll_GetTempPathW]
dec eax
cmp eax, 0x104
ja 0x14002b6a7
mov r8, 0xffffffffffffffff
lea rcx, [rsp + 0x90]
mov rax, r8
cmp word [rcx + rax*2 + 2], di
lea rax, [rax + 1]
jne 0x14002b655
cmp word [rsp + rax*2 + 0x8e], 0x5c
jne 0x14002b673
mov word [rsp + rax*2 + 0x8e], di
xorps xmm0, xmm0
lea rax, [rsp + 0x90]
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], rdi
nop dword [rax]
inc r8
cmp word [rax + r8*2], di
jne 0x14002b690
lea rdx, [rsp + 0x90]
jmp 0x14002b8f2
cmp dword [0x140041010], 2
mov r8d, edi
movups xmm0, xmmword [0x14003b380]
movups xmm1, xmmword [0x14003b390]
mov eax, dword [0x14003b3d8]
movups xmmword [rsp + 0x24], xmm0
mov dword [rsp + 0x7c], eax
movups xmm0, xmmword [0x14003b3a0]
movzx eax, word [0x14003b3dc]
movups xmmword [rsp + 0x44], xmm0
mov word [rsp + 0x80], ax
movups xmm0, xmmword [0x14003b3c0]
movups xmmword [rsp + 0x64], xmm0
movsd xmm0, qword [0x14003b3d0]
movups xmmword [rsp + 0x34], xmm1
movups xmm1, xmmword [0x14003b3b0]
movsd qword [rsp + 0x74], xmm0
movups xmmword [rsp + 0x54], xmm1
jl 0x14002b851
movdqa xmm5, xmmword [0x14003b400]
lea rcx, [rsp + 0x24]
movdqa xmm4, xmmword [0x14003b4d0]
movaps xmmword [rsp + 0x2b0], xmm6
movdqa xmm6, xmmword [0x14003b430]
movaps xmmword [rsp + 0x2a0], xmm7
movdqa xmm7, xmmword [0x14003b480]
nop
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 0x10]
paddd xmm2, xmm5
add r8d, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 0x10]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
movd xmm2, eax
pshufd xmm2, xmm2, 0
xorps xmm3, xmm0
movq qword [rcx - 0x10], xmm3
paddd xmm2, xmm5
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movq xmm2, xmm7
pshufhw xmm1, xmm0, 0xd8
movq xmm0, qword [rcx - 8]
pshufd xmm3, xmm1, 0xd8
paddw xmm3, xmm2
xorps xmm3, xmm0
movq qword [rcx - 8], xmm3
cmp r8d, 0x28
jl 0x14002b750
movaps xmm7, xmmword [rsp + 0x2a0]
movaps xmm6, xmmword [rsp + 0x2b0]
cmp r8d, 0x2f
jge 0x14002b895
movsxd rax, r8d
lea r9, [rsp + 0x24]
lea r9, [r9 + rax*2]
nop dword [rax]
mov eax, 0x51eb851f
lea r9, [r9 + 2]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x32
movzx eax, r8w
inc r8d
sub ax, cx
add ax, 0x39
xor word [r9 - 2], ax
cmp r8d, 0x2f
jl 0x14002b860
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [rsp + 0x24]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x140016670]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xorps xmm0, xmm0
mov word [rsp + 0x2d8], di
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rdi
lea rax, [rsp + 0x2d8]
mov qword [rbx + 0x18], rdi
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], di
jne 0x14002b8e0
lea rdx, [rsp + 0x2d8]
mov rcx, rbx
call fcn.14001fa60
mov rax, rbx
mov rbx, qword [rsp + 0x2d0]
add rsp, 0x2c0
pop rdi
ret