Function at 0x11003bf40
Capabilities:
Create thread
Encode data using xor

Disassembly:
push rdi
sub rsp, 0x70
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rsp + 0x80], rbx
mov rax, qword [0x110109588]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110208248], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207ea8], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x1102071d0], rax
mov ecx, 0xed60
call fcn.11009af84
mov rdi, rax
mov qword [rsp + 0x30], rax
xor ebx, ebx
test rax, rax
je 0x11003bfe7
lea rax, [0x11000c7b0]
mov qword [rsp + 0x20], rax
lea r9, [0x1100286b0]
lea edx, [rbx + 0x18]
mov r8d, 0x9e4
mov rcx, rdi
call fcn.11009b7f4
jmp 0x11003bfea
mov rdi, rbx
mov qword [0x1102073a8], rdi
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207390], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207330], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207338], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207348], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207340], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207350], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207eb0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207358], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207eb8], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207360], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x1102071d8], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x1102073b8], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x1102073b0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207368], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207ec0], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207370], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207378], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110208138], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110207380], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110208140], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110208148], rax
mov ecx, 1
call fcn.11009af84
mov qword [rsp + 0x30], rax
mov qword [0x110208150], rax
cmp qword [0x110208248], 0
je 0x11003c2e8
cmp qword [0x110207ea8], 0
je 0x11003c2e8
cmp qword [0x1102073a8], 0
je 0x11003c2e8
cmp qword [0x1102071d0], 0
je 0x11003c2e8
cmp qword [0x110207390], 0
je 0x11003c2e8
cmp qword [0x110207330], 0
je 0x11003c2e8
cmp qword [0x110207338], 0
je 0x11003c2e8
cmp qword [0x110207348], 0
je 0x11003c2e8
cmp qword [0x110207350], 0
je 0x11003c2e8
cmp qword [0x110207eb0], 0
je 0x11003c2e8
cmp qword [0x110207358], 0
je 0x11003c2e8
cmp qword [0x110207eb8], 0
je 0x11003c2e8
cmp qword [0x110207360], 0
je 0x11003c2e8
cmp qword [0x1102073b8], 0
je 0x11003c2e8
cmp qword [0x1102073b0], 0
je 0x11003c2e8
cmp qword [0x110207368], 0
je 0x11003c2e8
cmp qword [0x110207ec0], 0
je 0x11003c2e8
cmp qword [0x110207370], 0
je 0x11003c2e8
cmp qword [0x110207378], 0
je 0x11003c2e8
cmp qword [0x110208138], 0
je 0x11003c2e8
cmp qword [0x110207380], 0
je 0x11003c2e8
cmp qword [0x110208140], 0
je 0x11003c2e8
cmp qword [0x110208148], 0
je 0x11003c2e8
test rax, rax
jne 0x11003c359
mov qword [rsp + 0x28], rbx
mov dword [rsp + 0x20], ebx
mov r9d, 0xbb8
lea r8, [0x11003c4c0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.kernel32.dll_CreateThread]
movdqa xmm0, xmmword [0x1100d3db0]
movdqu xmmword [rsp + 0x40], xmm0
movdqa xmm1, xmmword [0x1100d3da0]
movdqu xmmword [rsp + 0x50], xmm1
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ebx
lea rcx, [rsp + 0x40]
add rcx, rax
lea eax, [rbx + 0x47]
xor byte [rcx], al
inc ebx
cmp ebx, 0x1f
jb 0x11003c330
mov byte [rsp + 0x5f], 0
lea rdx, [rsp + 0x40]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_FatalAppExitA]
mov rcx, qword [0x1101121c8]
call fcn.1100118f0
test al, al
je 0x11003c4a5
mov rcx, qword [0x110208248]
call fcn.1100471c0
mov rcx, qword [0x110207ea8]
call fcn.11003a850
mov rcx, qword [0x1102071d0]
call fcn.110028500
mov rcx, qword [0x1102073a8]
call fcn.110034400
mov rcx, qword [0x110207390]
call fcn.110032c10
mov rcx, qword [0x110207330]
call fcn.11002f780
mov rcx, qword [0x110207338]
call fcn.11002f8a0
mov rcx, qword [0x110207348]
call fcn.110030270
mov rcx, qword [0x110207340]
call fcn.11002ff70
mov rcx, qword [0x110207350]
call fcn.110030480
mov rcx, qword [0x110207eb0]
call fcn.11003b620
mov rcx, qword [0x110207358]
call fcn.110030560
mov rcx, qword [0x110207eb8]
call fcn.11003b730
mov rcx, qword [0x110207360]
call fcn.110030700
mov rcx, qword [0x1102071d8]
call fcn.110028c10
mov rcx, qword [0x1102073b8]
call fcn.110034ab0
mov rcx, qword [0x1102073b0]
call fcn.1100344d0
mov rcx, qword [0x110207368]
call fcn.110030990
mov rcx, qword [0x110207ec0]
call fcn.11003b8f0
mov rcx, qword [0x110207370]
call fcn.110030dd0
mov rcx, qword [0x110207378]
call fcn.110031770
mov rcx, qword [0x110208138]
call fcn.1100406d0
mov rcx, qword [0x110207380]
call fcn.110031d60
mov rcx, qword [0x110208140]
call fcn.110040be0
mov rcx, qword [0x110208148]
call fcn.110041cd0
mov rcx, qword [0x110208150]
call fcn.1100429a0
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.11009af60
mov rbx, qword [rsp + 0x80]
add rsp, 0x70
pop rdi
ret