Function at 0x140035ee0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1400fdec0]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rbx, rdx
mov rsi, rcx
mov qword [rbp - 0x18], rdx
xor edi, edi
mov dword [rbp - 0x58], 0xccf5e2f8
mov dword [rbp - 0x54], 0xeeeefee9
mov word [rbp - 0x50], 0x100
mov ecx, edi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 8
jb 0x140035f30
mov byte [rbp - 0x4f], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140014ec0
nop
cmp byte [rbx], 0
jne 0x140035f6b
mov byte [rbx], 1
call fcn.140021ab0
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x140035f7f
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.140026fa0
jmp 0x140035f83
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x140035f8e
mov r8, qword [rax + 8]
jmp 0x140035f91
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x140035f9e
mov rdx, qword [r8]
lea rcx, [rsi + 0x158]
mov r8, qword [r8 + 0x10]
call fcn.14001d3c0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140035fed
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140035fe8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140035fe8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c38bc
mov dword [rbp - 0x58], 0xd6f5e2f8
mov dword [rbp - 0x54], 0xf3f5f7f4
mov dword [rbp - 0x50], 0xc4d3cafb
mov dword [rbp - 0x4c], 0x100d0d0
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 0xe
jb 0x140036010
mov byte [rbp - 0x49], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x4a]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140014ec0
nop
cmp byte [rbx], 0
jne 0x14003604b
mov byte [rbx], 1
call fcn.140021ab0
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x14003605f
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.140026fa0
jmp 0x140036063
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x14003606e
mov r8, qword [rax + 8]
jmp 0x140036071
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x14003607e
mov rdx, qword [r8]
lea rcx, [rsi + 0x178]
mov r8, qword [r8 + 0x10]
call fcn.14001d3c0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1400360cd
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400360c8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400360c8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c38bc
mov dword [rbp - 0x58], 0xd2f5e2f8
mov dword [rbp - 0x54], 0xefe2ff
mov byte [rbp - 0x50], 1
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 7
jb 0x1400360f0
mov byte [rbp - 0x50], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x51]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140014ec0
nop
cmp byte [rbx], 0
jne 0x14003612b
mov byte [rbx], 1
call fcn.140021ab0
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x14003613f
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.140026fa0
jmp 0x140036143
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x14003614e
mov r8, qword [rax + 8]
jmp 0x140036151
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x14003615e
mov rdx, qword [r8]
lea rcx, [rsi + 0x198]
mov r8, qword [r8 + 0x10]
call fcn.14001d3c0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x1400361ad
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400361a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400361a8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c38bc
mov dword [rbp - 0x58], 0xeaeaf2e0
mov dword [rbp - 0x54], 0xf2f4f3
mov byte [rbp - 0x50], 1
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 7
jb 0x1400361d0
mov byte [rbp - 0x50], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x51]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140014ec0
nop
cmp byte [rbx], 0
jne 0x14003620b
mov byte [rbx], 1
call fcn.140021ab0
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x14003621f
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.140026fa0
jmp 0x140036223
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x14003622e
mov r8, qword [rax + 8]
jmp 0x140036231
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x14003623e
mov rdx, qword [r8]
lea rcx, [rsi + 0x1b8]
mov r8, qword [r8 + 0x10]
call fcn.14001d3c0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14003628d
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036288
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140036288
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c38bc
movdqa xmm0, xmmword [0x1400cafb0]
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x48], 0xcd
mov byte [rbp - 0x46], 1
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 0x11
jb 0x1400362b0
mov byte [rbp - 0x46], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x47]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140014ec0
nop
cmp byte [rbx], 0
jne 0x1400362eb
mov byte [rbx], 1
call fcn.140021ab0
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x1400362ff
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.140026fa0
jmp 0x140036303
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x14003630c
mov rdi, qword [rax + 8]
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x140036319
mov rdx, qword [rdi]
lea rcx, [rsi + 0x1d8]
mov r8, qword [rdi + 0x10]
call fcn.14001d3c0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140036369
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140036363
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140036363
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c38bc
nop
lea rcx, [rbx + 8]
movzx edx, byte [rbx]
call fcn.14002d030
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400c3860
mov rbx, qword [rsp + 0xb0]
add rsp, 0x80
pop rdi
pop rsi
pop rbp
ret