Function at 0x140001740
Capabilities:
Encode data using xor
Terminate process

Disassembly:
push rdi
sub rsp, 0x60
mov qword [0x140105130], r8
mov dword [rsp + 0x4c], 0x214c
mov dword [rsp + 0x44], 0x1e50
mov dword [rsp + 0x40], 0x214c
mov dword [rsp + 0x50], 0x23be
mov dword [rsp + 0x48], 0x214c
mov dword [rsp + 0x80], 0
mov ecx, dword [rsp + 0x4c]
mov edx, dword [rsp + 0x80]
add ecx, 0x289
mov r8d, dword [rsp + 0x40]
add edx, 0x2ace
mov eax, dword [rsp + 0x50]
sub r8d, 0xa60
mov r9, qword [section..data]
sub eax, 0x272
mov dword [rsp + 0x20], eax
call fcn.140003480
mov dword [rsp + 0x44], eax
lea rdi, [0x140105010]
mov ecx, dword [rsp + 0x80]
mov edx, dword [rsp + 0x44]
add ecx, 0x2e87
mov r9d, dword [rsp + 0x40]
xor edx, 0x3dee
mov r10d, dword [rsp + 0x4c]
add r9d, 0x289
mov r8d, dword [rsp + 0x40]
xor r10d, 0x3860
mov eax, dword [rsp + 0x80]
add r8d, 0x272
add eax, 0x2637
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r8d
mov r8, rdi
mov dword [rsp + 0x20], r10d
call fcn.1400026f0
mov dword [rsp + 0x44], eax
mov ecx, dword [rsp + 0x4c]
mov eax, dword [rsp + 0x40]
add ecx, 0x30
cmp eax, ecx
je 0x140001abf
mov ecx, dword [rsp + 0x80]
mov eax, dword [rsp + 0x48]
add ecx, 0x23be
cmp eax, ecx
je 0x14000199c
mov ecx, dword [rsp + 0x50]
mov edx, dword [rsp + 0x50]
add ecx, 0xac9
mov r8d, dword [rsp + 0x48]
add edx, 0x68c
mov r9d, dword [rsp + 0x80]
xor r8d, 0x3de3
add r9d, 0x2096
mov qword [rsp + 0x20], rdi
call fcn.14000d6d0
mov rcx, qword [section..data]
mov dword [rsp + 0x80], eax
cmp dword [rcx + 0xa0], 0xe21b
je 0x1400018ba
mov eax, dword [0x140105014]
add eax, 0x38e1941c
mov dword [0x140105080], eax
jmp 0x1400018c7
mov eax, dword [rcx + 0x28]
imul eax, dword [0x140105038]
mov dword [rcx + 0x28], eax
add dword [rsp + 0x44], 0x5f3
mov ecx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x4c]
sub ecx, 0xc7e
mov r8d, dword [rsp + 0x4c]
xor edx, 0xb06
mov r9d, dword [rsp + 0x80]
xor r8d, 0x3917
add r9d, 0x84
mov qword [rsp + 0x20], rdi
call fcn.140002100
mov dword [rsp + 0x48], eax
mov ecx, dword [rsp + 0x44]
mov edx, dword [rsp + 0x44]
xor ecx, 0x3661
mov r8d, dword [rsp + 0x48]
mov r9d, dword [rsp + 0x40]
add r8d, 0x3e7
mov r10d, dword [rsp + 0x50]
add r9d, 0xb8b
mov eax, dword [rsp + 0x50]
add eax, 0xac9
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], r10d
call fcn.140018250
mov dword [rsp + 0x48], eax
mov ecx, dword [rsp + 0x80]
mov edx, dword [rsp + 0x40]
sub ecx, 0x675
mov r8d, dword [rsp + 0x80]
add edx, 0xd3b
mov r9d, dword [rsp + 0x40]
xor r8d, 0x9f4
sub r9d, 0x2fc
mov qword [rsp + 0x20], rdi
call fcn.140017460
mov dword [rsp + 0x40], eax
jmp 0x140001abf
mov ecx, dword [rsp + 0x80]
or ecx, dword [0x140105048]
mov eax, dword [rsp + 0x44]
add eax, ecx
mov qword [rsp + 0x70], rbx
mov ebx, dword [0x140105044]
cmp ebx, eax
jb 0x140001aba
nop dword [rax]
nop word [rax + rax]
mov ecx, dword [rsp + 0x80]
mov eax, dword [rsp + 0x80]
and ecx, eax
mov r8d, dword [rsp + 0x48]
mov eax, dword [rsp + 0x44]
xor r8d, eax
mov r9d, dword [rsp + 0x40]
mov eax, dword [rsp + 0x4c]
sub r9d, dword [0x1401050a0]
mov edx, dword [0x140105050]
sub r9d, eax
mov eax, dword [0x1401050a4]
sub ecx, dword [0x1401050b0]
add eax, 0x2a4a
add edx, dword [0x14010501c]
xor r8d, dword [0x14010506c]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rdi
call fcn.140001fe0
mov ecx, dword [0x140105060]
and ecx, dword [0x14010501c]
mov dword [rsp + 0x40], eax
mov edx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x44]
mov r8d, dword [rsp + 0x4c]
or eax, 0x2ace
mov r9d, dword [rsp + 0x40]
and r8d, eax
mov eax, dword [rsp + 0x50]
and r9d, 0x23be
xor edx, dword [0x140105040]
sub r9d, eax
mov dword [rsp + 0x20], r9d
mov r9, rdi
call fcn.140018990
mov ecx, dword [0x140105014]
mov dword [rsp + 0x40], eax
or rcx, 0x2096
mov eax, dword [0x1401050a0]
and rcx, rax
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [rsp + 0x80]
add ebx, 3
or ecx, dword [0x140105048]
mov eax, dword [rsp + 0x44]
add eax, ecx
cmp ebx, eax
jae 0x1400019d0
mov rbx, qword [rsp + 0x70]
mov ecx, dword [0x1401050f0]
call qword [sym.imp.KERNEL32.dll_ExitProcess]