Function at 0x140001070
Capabilities:
Encode data using xor
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rdi
push r14
lea rbp, [rsp - 0x47]
sub rsp, 0xe0
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp + 0x37], rax
movzx eax, byte [0x1400032b0]
mov r10, rdx
movsd xmm0, qword [str.Zasdwes2]
mov r11d, ecx
mov byte [rbp + 0x2f], al
mov rbx, 0xffffffffffffffff
lea rax, [rbp + 0x27]
movsd qword [rbp + 0x27], xmm0
nop dword [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x1400010c0
xor edi, edi
lea r14, [0x140005090]
mov r9d, edi
mov r8d, 2
nop dword [rax + rax]
lea eax, [r8 - 2]
cdq
idiv ebx
movsxd rax, edx
movzx ecx, byte [rbp + rax + 0x27]
lea eax, [r8 - 1]
xor byte [r9 + r14], cl
cdq
idiv ebx
movsxd rax, edx
movzx ecx, byte [rbp + rax + 0x27]
mov eax, r8d
xor byte [r9 + r14 + 1], cl
cdq
idiv ebx
movsxd rax, edx
movzx ecx, byte [rbp + rax + 0x27]
lea eax, [r8 + 1]
xor byte [r9 + r14 + 2], cl
cdq
idiv ebx
movsxd rax, edx
movzx ecx, byte [rbp + rax + 0x27]
lea eax, [r8 + 2]
xor byte [r9 + r14 + 3], cl
cdq
idiv ebx
add r8d, 5
movsxd rax, edx
movzx ecx, byte [rbp + rax + 0x27]
xor byte [r9 + r14 + 4], cl
add r9, 5
cmp r9, 0x118
jl 0x1400010e0
mov qword [rbp + 0x1f], 0x118
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x29], rdi
mov qword [rbp - 0x31], rdi
cmp r11d, 2
jge 0x1400011a1
mov rdx, qword [r10]
lea rcx, str.run_with__s:__PID_
call fcn.140001010
mov eax, 1
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400014e0
mov rbx, qword [rsp + 0x110]
add rsp, 0xe0
pop r14
pop rdi
pop rbp
ret
mov rcx, qword [r10 + 8]
mov qword [rsp + 0x100], rsi
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
xorps xmm0, xmm0
mov dword [rbp - 0x11], 0x30
mov eax, eax
lea rsi, [0x140005080]
mov qword [rbp - 0x21], rax
mov r8, 0xffffffffffffffff
mov qword [rbp - 9], rdi
movups xmmword [rbp - 1], xmm0
mov qword [rbp - 0x19], rdi
movups xmmword [rbp + 0xf], xmm0
inc r8
cmp byte [rsi + r8], dil
jne 0x1400011e1
mov r10d, edi
mov r11, rdi
test r8, r8
je 0x14000122f
mov rax, rdi
nop dword [rax + rax]
movsxd rcx, r10d
mov rdx, rdi
cmp rcx, rbx
cmovne rdx, rax
movzx eax, byte [rbp + rdx + 0x27]
xor byte [r11 + rsi], al
mov eax, edi
cmp rcx, rbx
cmovne eax, r10d
inc r11
lea r10d, [rax + 1]
lea rax, [rdx + 1]
cmp r11, r8
jb 0x140001200
lea rbx, [0x1400057d0]
mov dword [rsp + 0x28], 0x200
mov r9d, 0xffffffff
mov qword [rsp + 0x20], rbx
mov r8, rsi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
mov rcx, rdi
cmovne rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.NtCreateTimer
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rsi, qword [rsp + 0x100]
test rax, rax
jne 0x14000129b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str._GetProcAddress__failed__error:_0x_lx
call fcn.140001010
jmp 0x1400012a6
add rax, 0x12
mov qword [0x1400057c8], rax
lea rdx, str.NtOpenTimer
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x1400012d1
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str._GetProcAddress__failed__error:_0x_lx
call fcn.140001010
jmp 0x1400012dc
add rax, 0x12
mov qword [0x1400057a0], rax
lea rdx, str.NtSetTimer
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001307
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str._GetProcAddress__failed__error:_0x_lx
call fcn.140001010
jmp 0x140001312
add rax, 0x12
mov qword [0x1400057c0], rax
lea rdx, str.NtQueryTimer
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x14000133d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str._GetProcAddress__failed__error:_0x_lx
call fcn.140001010
jmp 0x140001348
add rax, 0x12
mov qword [0x140005790], rax
lea rdx, str.NtCancelTimer
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
jne 0x140001373
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str._GetProcAddress__failed__error:_0x_lx
call fcn.140001010
jmp 0x14000137e
add rax, 0x12
mov qword [0x1400057b0], rax
lea r9, [rbp - 0x21]
mov edx, 0x1fffff
lea r8, [rbp - 0x11]
lea rcx, [rbp - 0x39]
call fcn.140001470
test eax, eax
jne 0x14000117c
mov rcx, qword [rbp - 0x39]
lea r9, [rbp + 0x1f]
mov dword [rsp + 0x28], 0x40
lea rdx, [rbp - 0x31]
xor r8d, r8d
mov dword [rsp + 0x20], 0x3000
call fcn.14000147f
test eax, eax
jne 0x14000117c
mov rdx, qword [rbp - 0x31]
mov r9d, 0x118
mov rcx, qword [rbp - 0x39]
mov r8, r14
mov qword [rsp + 0x20], rdi
call fcn.14000148e
test eax, eax
jne 0x14000117c
mov rax, qword [rbp - 0x31]
lea rcx, [rbp - 0x29]
mov r9, qword [rbp - 0x39]
xor r8d, r8d
mov qword [rsp + 0x50], rdi
mov edx, 0x1fffff
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x40], rdi
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.14000149d
test eax, eax
jne 0x14000117c
mov rcx, qword [rbp - 0x29]
xor r8d, r8d
xor edx, edx
call fcn.1400014ac
test eax, eax
jne 0x14000117c
mov rcx, qword [rbp - 0x29]
test rcx, rcx
je 0x140001452
call fcn.1400014bb
mov rcx, qword [rbp - 0x39]
test rcx, rcx
je 0x140001460
call fcn.1400014bb
xor eax, eax
jmp 0x140001181