Function at 0x140085e60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
mov rbp, rsp
sub rsp, 0x40
movdqa xmm0, xmmword [0x14026ee70]
xor ebx, ebx
movdqu xmmword [rbp - 0x20], xmm0
mov ecx, ebx
mov word [rbp - 0x10], 0xda
mov byte [rbp - 0xe], 1
nop dword [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x11
jb 0x140085e90
lea rcx, [rbp - 0x20]
mov byte [rbp - 0xe], bl
call fcn.14006daf0
test al, al
jne 0x1400863eb
movdqa xmm0, xmmword [0x14026efe0]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x10], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x10
jb 0x140085ed0
lea rcx, [rbp - 0x20]
mov byte [rbp - 0xf], bl
call fcn.14006daf0
test al, al
jne 0x14008641a
mov dword [rbp - 0x20], 0xc0e2fdf9
mov rcx, rbx
mov dword [rbp - 0x1c], 0xd39bd7c5
mov dword [rbp - 0x18], 0x100ddcf
nop dword [rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xa
jb 0x140085f10
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x15], bl
call fcn.14006daf0
test al, al
jne 0x140086449
mov dword [rbp - 0x20], 0xe1e4fdf9
mov rcx, rbx
mov dword [rbp - 0x1c], 0x98d6c2c1
mov dword [rbp - 0x18], 0xdcc0d2
mov byte [rbp - 0x14], 1
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xb
jb 0x140085f50
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x14], bl
call fcn.14006daf0
test al, al
jne 0x140086478
mov dword [rbp - 0x20], 0xc1dfd5d7
mov rcx, rbx
mov dword [rbp - 0x1c], 0xdfc3c6d6
mov dword [rbp - 0x18], 0xdf97ddd4
mov dword [rbp - 0x14], 0x100d9c3
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xe
jb 0x140085fa0
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x11], bl
call fcn.14006daf0
test al, al
jne 0x1400864a7
movdqa xmm0, xmmword [0x14026ebc0]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x10], 1
nop dword [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xf
jb 0x140085fe0
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x10], bl
call fcn.14006daf0
test al, al
jne 0x1400864d6
mov dword [rbp - 0x20], 0xcaded2d9
mov rcx, rbx
mov dword [rbp - 0x1c], 0xcfd4c6c7
mov dword [rbp - 0x18], 0xdfc1dd99
mov word [rbp - 0x14], 0x100
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xc
jb 0x140086030
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x13], bl
call fcn.14006daf0
test al, al
jne 0x140086505
movdqa xmm0, xmmword [0x14026ebe0]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0x10], 1
nop dword [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xf
jb 0x140086070
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x10], bl
call fcn.14006daf0
test al, al
jne 0x14008652f
mov dword [rbp - 0x20], 0xddc5ddd9
mov rcx, rbx
mov dword [rbp - 0x1c], 0xd2c6d8dc
mov dword [rbp - 0x18], 0xdfc1dd99
mov word [rbp - 0x14], 0x100
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xc
jb 0x1400860c0
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x13], bl
call fcn.14006daf0
test al, al
jne 0x14008655e
mov dword [rbp - 0x20], 0xd3c6ddd9
mov rcx, rbx
mov dword [rbp - 0x1c], 0xc4c1d1c1
mov dword [rbp - 0x18], 0xdf97c1d6
mov dword [rbp - 0x14], 0x100d9c3
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xe
jb 0x140086110
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x11], bl
call fcn.14006daf0
test al, al
jne 0x14008658d
mov dword [rbp - 0x20], 0xd3c6ddd9
mov rcx, rbx
mov dword [rbp - 0x1c], 0xc5c0d1c1
mov dword [rbp - 0x18], 0xdf97cad2
mov dword [rbp - 0x14], 0x100d9c3
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xe
jb 0x140086160
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x11], bl
call fcn.14006daf0
test al, al
jne 0x1400865bc
movdqa xmm0, xmmword [0x14026ee80]
mov rcx, rbx
movdqu xmmword [rbp - 0x20], xmm0
mov word [rbp - 0x10], 0xda
mov byte [rbp - 0xe], 1
nop
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x11
jb 0x1400861a0
lea rcx, [rbp - 0x20]
mov byte [rbp - 0xe], bl
call fcn.14006daf0
test al, al
jne 0x1400865eb
mov dword [rbp - 0x20], 0xd1d0ddd9
mov rcx, rbx
mov dword [rbp - 0x1c], 0xc6d9dcc7
mov dword [rbp - 0x18], 0xdfc1dd99
mov word [rbp - 0x14], 0x100
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xc
jb 0x1400861f0
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x13], bl
call fcn.14006daf0
test al, al
jne 0x14008661a
mov dword [rbp - 0x20], 0xc7dcd5de
mov rcx, rbx
mov dword [rbp - 0x1c], 0x98d4d39e
mov dword [rbp - 0x18], 0xdcc0d2
mov byte [rbp - 0x14], 1
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xb
jb 0x140086230
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x14], bl
call fcn.14006daf0
test al, al
jne 0x140086649
mov dword [rbp - 0x20], 0xd5d0d4d9
mov rcx, rbx
mov dword [rbp - 0x1c], 0x98c1dad6
mov dword [rbp - 0x18], 0xdcc0d2
mov byte [rbp - 0x14], 1
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xb
jb 0x140086270
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x14], bl
call fcn.14006daf0
test al, al
jne 0x140086678
mov dword [rbp - 0x20], 0xd7c2d4d9
mov rcx, rbx
mov dword [rbp - 0x1c], 0xd5dcc2c1
mov dword [rbp - 0x18], 0xc2dc96d2
mov word [rbp - 0x14], 0xde
mov byte [rbp - 0x12], 1
nop word [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xd
jb 0x1400862c0
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x12], bl
call fcn.14006daf0
test al, al
jne 0x1400866a7
mov dword [rbp - 0x20], 0xedddc2df
mov rcx, rbx
mov dword [rbp - 0x1c], 0xd39bd7d0
mov dword [rbp - 0x18], 0x100ddcf
nop dword [rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xa
jb 0x140086300
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x15], bl
call fcn.14006daf0
test al, al
jne 0x1400866d6
mov dword [rbp - 0x20], 0xedddc2df
mov rcx, rbx
mov dword [rbp - 0x1c], 0xdadadbc7
mov dword [rbp - 0x18], 0xc2dc96c4
mov word [rbp - 0x14], 0xde
mov byte [rbp - 0x12], 1
nop word [rax + rax]
lea eax, [rcx - 0x51]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0xd
jb 0x140086350
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x12], bl
call fcn.14006daf0
test al, al
jne 0x140086705
mov dword [rbp - 0x20], 0xd5d0d4d9
mov dword [rbp - 0x1c], 0x98c1dad6
mov dword [rbp - 0x18], 0xdcc0d2
mov byte [rbp - 0x14], 1
nop dword [rax]
lea eax, [rbx - 0x51]
xor byte [rbp + rbx - 0x20], al
inc rbx
cmp rbx, 0xb
jb 0x140086390
lea rcx, [rbp - 0x20]
mov byte [rbp - 0x14], 0
call fcn.14006daf0
test al, al
jne 0x1400863bc
mov rbx, qword [rsp + 0x58]
add rsp, 0x40
pop rbp
ret
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.vdagent
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.joeboxcontrol
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.joeboxserver
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.VMSrvc
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.VMUSrvc
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.xenservice
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.VBoxControl
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.vboxtray
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.vboxservice
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.vmtoolsd
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.vmwaretray
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.vmwareuser
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.VGAuthService
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.vmacthlp
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.qemu_ga
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.vdagent
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.vdservice
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.prl_cc
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3
call fcn.14006cb60
lea rcx, [0x14040d7b0]
call fcn.1400729b0
call fcn.14006cb60
lea rdx, str.prl_tools
lea rcx, [rbp - 0x20]
call fcn.140067400
mov rcx, rax
call fcn.140076380
int3