Function at 0x14000336c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rbx, qword [rsp + 0x88]
lea r14d, [r8 - 0x162f]
mov r8d, dword [rsp + 0x90]
add edx, 0xfffff5f5
mov esi, r9d
mov ebp, ecx
xor ebp, 0x9c3
add r9d, 0xfffff597
xor esi, 0x1235
mov dword [rsp + 0x60], r9d
lea edi, [r8 - 0x12d2]
lea r13d, [rdx + 0xc13]
lea eax, [rbp + 0x7b4]
cmp edi, eax
lea r15d, [r8 - 0x90f]
lea eax, [r8 + 0x496]
cmovge r13d, edx
cmp edi, eax
jge 0x140003425
cmp dword [rbx + 0x74], 0x70d9
jne 0x140003407
mov eax, dword [rbx + 0x68]
xor eax, 0x14e5f
or dword [0x1400d1064], eax
jmp 0x14000341c
mov rax, qword [section..data]
lea rcx, [0x1401096c0]
mov qword [rax + 0xb0], rcx
mov rcx, qword [section..data]
jmp 0x140003484
mov rcx, qword [section..data]
mov r12d, r14d
mov eax, dword [rcx + 0x100]
and eax, esi
xor eax, dword [rbx + 0x1c]
cmp r14d, eax
je 0x140003484
mov r8d, dword [rcx + 0x38]
mov edx, dword [rcx + 0xc0]
mov ecx, ebp
or r8d, dword [rbx + 0x14]
and edx, 0xf8a
and ecx, dword [rbx + 0x28]
or r8d, 0xfea
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov rcx, qword [section..data]
inc r12d
mov eax, dword [rcx + 0x100]
and eax, esi
xor eax, dword [rbx + 0x1c]
cmp r12d, eax
jne 0x14000343f
mov r9d, dword [rsp + 0x60]
lea eax, [r9 + 0xe74]
cmp edi, eax
jg 0x14000366d
mov eax, edi
xor eax, 0x7cc
cmp r15d, eax
jl 0x140003613
xor r8d, r8d
mov eax, dword [rbx + 0x20]
sub eax, dword [rbx + 0x84]
add eax, 0x167868
add dword [rcx + 0xd0], eax
mov rcx, qword [section..data]
mov rax, qword [rcx + 0xb0]
mov edx, dword [r8 + rax]
add r8, 4
mov eax, dword [rcx + 0x84]
add eax, dword [rbx + 0x14]
mov ecx, dword [rbx + 0x1c]
xor eax, 0x1da9c6
sub dword [rbx + 0x60], eax
sub ecx, 0x179d6a
mov eax, dword [rbx + 0x34]
imul eax, ecx
mov dword [rbx + 0x34], eax
movzx eax, dl
movzx edx, byte [rbx + 0x94]
imul edx, eax
mov rax, qword [section..data]
movsxd rcx, dword [rax + 0x9c]
mov rax, qword [0x1400d10c8]
mov byte [rcx + rax], dl
mov rax, qword [section..data]
inc dword [rax + 0x9c]
mov eax, dword [0x1400d1104]
mov ecx, dword [0x1400d10d8]
add eax, 0xb3c72
add ecx, eax
mov eax, 0xd4a54
mov dword [0x1400d1104], ecx
sub eax, dword [rbx + 0xf4]
add dword [rbx + 0xec], eax
mov eax, dword [rbx + 0x14]
xor eax, dword [0x1400d1018]
mov ecx, dword [rbx + 0x100]
sub eax, 0xb7ade
or dword [rbx + 0x68], eax
mov eax, dword [rbx + 0x68]
add eax, 0xffed3d89
or dword [rbx + 0x58], eax
sub ecx, dword [0x1400d10e0]
mov eax, dword [0x1400d1070]
add eax, 0x4dc00
add ecx, eax
mov dword [0x1400d1070], ecx
mov eax, dword [rbx + 0x80]
add eax, dword [rbx + 0xc4]
xor eax, 0x26
add dword [rbx + 0x100], eax
mov rax, qword [section..data]
mov ecx, dword [rax + 0xf0]
sub ecx, dword [rax + 0xec]
inc ecx
add dword [rbx + 0xec], ecx
mov eax, dword [0x1400d10e0]
mov ecx, dword [rbx + 0x84]
add eax, 0xfffb23ae
add dword [rbx + 0xfc], eax
add ecx, dword [rbx + 0x10]
mov eax, dword [0x1400d10fc]
add eax, 0xffdb8f64
add ecx, eax
mov dword [0x1400d10fc], ecx
cmp r8, 0x2bce0
jge 0x1400035fc
mov rcx, qword [section..data]
jmp 0x1400034a6
mov ecx, dword [rbx + 0xe8]
add ecx, 0xfff69955
add ecx, dword [rbx + 0x1c]
mov dword [rbx + 0x94], ecx
jmp 0x14000366d
sub edi, esi
cmp dword [rbx + 0x60], edi
jb 0x14000366d
mov eax, dword [0x1400d1030]
sub eax, dword [rbx + 0x58]
cmp dword [0x1400d1070], eax
ja 0x14000366d
mov r10d, dword [rbx + 0x7c]
lea edx, [r14 + 0xf23]
mov ecx, dword [rcx + 0x68]
add r10d, r9d
mov r8d, dword [rbx + 0x34]
mov r9d, r15d
sub r9d, dword [0x1400d1110]
or r8d, 0xa20
sub r8d, dword [rbx + 0x58]
sub r9d, 0x7b4
imul ecx, esi
add edx, r15d
mov dword [rsp + 0x20], r10d
call qword [sym.imp.KERNEL32.dll_LockFile]
mov rbx, qword [rsp + 0x68]
lea eax, [r13 - 0x4a4]
mov rbp, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x78]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret