Function at 0x14022327c
Capabilities:
Encode data using xor

Disassembly:
mov byte [rsp + 0x10], dl
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov qword [rbp + 0xf], 0xfffffffffffffffe
mov rdi, rcx
mov ecx, 4
mov rax, qword gs:[0x58]
mov rdx, qword [rax]
xor esi, esi
mov eax, dword [rcx + rdx]
cmp dword [0x1402d97a8], eax
jle 0x1402234d5
lea rcx, [0x1402d97a8]
call fcn.14027b540
cmp dword [0x1402d97a8], 0xffffffff
jne 0x1402234d5
lea rax, [rbp - 0x11]
mov qword [rbp + 0x77], rax
mov dword [rbp - 0x49], 0x72
mov byte [rbp - 0x45], 0x31
mov byte [rbp - 0x44], sil
mov byte [rbp - 0x43], 0x17
mov byte [rbp - 0x42], 0x13
mov byte [rbp - 0x41], 6
mov byte [rbp - 0x40], 0x17
mov byte [rbp - 0x3f], 0x26
mov byte [rbp - 0x3e], 0x1a
mov byte [rbp - 0x3d], sil
mov byte [rbp - 0x3c], 0x17
mov byte [rbp - 0x3b], 0x13
mov byte [rbp - 0x3a], 0x16
xor eax, eax
mov byte [rbp - 0x39], al
mov al, byte [rbp - 0x45]
mov edx, esi
mov al, byte [rbp + rdx - 0x45]
mov ecx, dword [rbp - 0x49]
xor cl, al
mov byte [rbp + rdx - 0x45], cl
inc rdx
cmp rdx, 0xc
jb 0x140223321
mov byte [rbp - 0x39], sil
mov qword [rbp - 0x11], rsi
mov qword [rbp - 1], rsi
mov r14d, 0xf
mov qword [rbp + 7], r14
lea rax, [rbp - 0x45]
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], sil
jne 0x140223355
lea rcx, [rbp - 0x11]
cmp rbx, r14
ja 0x14022337f
mov qword [rbp - 1], rbx
mov r8, rbx
lea rdx, [rbp - 0x45]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + rbx - 0x11], sil
jmp 0x14022338c
lea r9, [rbp - 0x45]
mov rdx, rbx
call fcn.1400ada10
nop
mov dword [rbp - 0x59], 0x2a
mov byte [rbp - 0x55], 0x41
mov byte [rbp - 0x54], 0x4f
mov byte [rbp - 0x53], 0x58
mov byte [rbp - 0x52], 0x44
mov byte [rbp - 0x51], 0x4f
mov byte [rbp - 0x50], 0x46
mov byte [rbp - 0x4f], 0x19
mov byte [rbp - 0x4e], 0x18
xor eax, eax
mov byte [rbp - 0x4d], al
mov al, byte [rbp - 0x55]
mov rdx, rsi
mov al, byte [rbp + rdx - 0x55]
mov ecx, dword [rbp - 0x59]
xor cl, al
mov byte [rbp + rdx - 0x55], cl
inc rdx
cmp rdx, 8
jb 0x1402233be
mov byte [rbp - 0x4d], sil
mov qword [rbp - 0x31], rsi
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x19], r14
mov byte [rbp - 0x31], sil
lea rax, [rbp - 0x55]
or rbx, 0xffffffffffffffff
inc rbx
cmp byte [rax + rbx], sil
jne 0x1402233f0
lea rcx, [rbp - 0x31]
cmp rbx, r14
ja 0x14022341a
mov qword [rbp - 0x21], rbx
mov r8, rbx
lea rdx, [rbp - 0x55]
call qword [sym.imp.VCRUNTIME140.dll_memmove]
mov byte [rbp + rbx - 0x31], sil
jmp 0x140223427
lea r9, [rbp - 0x55]
mov rdx, rbx
call fcn.1400ada10
nop
lea rdx, [rbp - 0x31]
lea rcx, [rbp + 0x17]
call fcn.1401a82ac
nop
mov qword [rsp + 0x20], rsi
mov r9b, 1
lea r8, [rbp - 0x11]
mov rdx, rax
lea rcx, [0x1402d8fc0]
call fcn.1401d83b0
nop
mov rdx, qword [rbp - 0x19]
cmp rdx, 0x10
jb 0x14022348f
inc rdx
mov rcx, qword [rbp - 0x31]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14022348a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14022348a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14027b384
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x19], r14
mov byte [rbp - 0x31], sil
xor edx, edx
lea r8d, [rdx + 9]
lea rcx, [rbp - 0x55]
call qword [sym.imp.VCRUNTIME140.dll_memset]
nop
xor edx, edx
lea r8d, [rdx + 0xd]
lea rcx, [rbp - 0x45]
call qword [sym.imp.VCRUNTIME140.dll_memset]
lea rcx, [0x14028f564]
call fcn.14027b36c
nop
lea rcx, [0x1402d97a8]
call fcn.14027b4e0
lea rax, [rbp + 0x6f]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rdi
lea r9, [0x140221ce0]
lea rcx, [0x1402d8fc0]
call fcn.140264084
mov rbx, rax
cmp rax, 0xffffffffffffffff
je 0x14022352a
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
call fcn.14021f614
test al, al
je 0x14022352a
or edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp qword [0x1402c61b8], rsi
ja 0x140223538
add rsp, 0xd0
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140173fa4
int3