Function at 0x140087a20
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
mov eax, dword [0x141f3afc0]
xor edx, edx
div dword [0x141f3afc4]
mov eax, dword [0x141f3afc8]
and eax, dword [0x141f3afcc]
or eax, 0xd88fd5fe
add eax, 0xe89c2ad0
and eax, 0xa2282241
cmp eax, 0xfcf20d4
jb 0x140087a40
nop word cs:[rax + rax]
mov eax, dword [str.6_eV]
or eax, dword [0x141f3afd4]
xor eax, 0x20804080
or eax, 0xc714a93b
xor eax, 0xf9497665
cmp eax, 0xaebba792
ja 0x140087a70
mov rax, qword [r8 + 8]
mov ecx, 0xb1b69ed5
nop dword [rax + rax]
mov edx, dword [0x141f3afd8]
or edx, dword [0x141f3afdc]
or edx, 0xb9633341
add edx, 0xd14fb278
imul rdx, rcx
shr rdx, 0x3e
cmp edx, 0xa76fba80
ja 0x140087aa0
test rax, rax
je 0x140087ba0
mov eax, 0xd74d3d4b
nop word cs:[rax + rax]
mov ecx, dword [0x141f3afe0]
xor ecx, dword [0x141f3afe4]
and ecx, 0x8d444d74
add ecx, 0x11b4c6cb
imul rcx, rax
shr rcx, 0x3d
cmp ecx, 0x61680fc6
je 0x140087ae0
cmp qword [r8 + 0x10], 0
je 0x140087bf0
mov rbx, qword [r8]
mov r14, qword [0x141f49060]
mov eax, dword [0x141f3b008]
or eax, dword [0x141f3b00c]
imul eax, eax, 0x548fa17e
add eax, 0x39d59704
cmp eax, 0x37256ce
jae 0x140087b4c
mov rcx, r14
xor edx, edx
mov r8, rbx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov r15, qword [sym.imp.KERNEL32.dll_HeapReAlloc]
nop word cs:[rax + rax]
mov ebp, dword [0x141f3b010]
and ebp, dword [0x141f3b014]
add ebp, 0x25abaf37
xor ebp, 0xa94e7010
mov rcx, r14
xor edx, edx
mov r8, rbx
mov r9, rsi
call r15
cmp ebp, 0xd42d007a
jae 0x140087b60
jmp 0x140087d7e
mov eax, dword [0x141f3b018]
and eax, dword [0x141f3b01c]
add eax, 0xb23ade60
cmp eax, 0xc9373560
ja 0x140087ba0
test rsi, rsi
je 0x140087c5e
mov eax, dword [0x141f3b020]
and eax, dword [0x141f3b024]
or eax, 0xe99cd850
imul eax, eax, 0xd249a121
imul rax, rax, 0x430d30d1
shr rax, 0x3e
cmp eax, 0x49ee4e0
je 0x140087c92
jmp 0x140087c68
mov eax, dword [0x141f3afe8]
or eax, dword [0x141f3afec]
and eax, 0x3058140
xor eax, 0x1109b241
cmp eax, 0x3a23e574
ja 0x140087bf0
nop dword [rax]
mov eax, dword [0x141f3aff0]
xor edx, edx
div dword [0x141f3aff4]
add eax, 0x296bbfc3
or eax, 0xcffdfa8f
cmp eax, 0x43ffc1a5
je 0x140087c10
test rsi, rsi
je 0x140087c5e
mov eax, dword [0x141f3aff8]
imul eax, dword [0x141f3affc]
imul eax, eax, 0x84174264
xor eax, 0x773526b
add eax, 0xd90065d
cmp eax, 0x1e878620
jb 0x140087d00
jmp 0x140087cc7
mov eax, 8
jmp 0x140087d7e
mov eax, dword [0x141f3b028]
imul eax, dword [0x141f3b02c]
add eax, 0x5a74f528
or eax, 0x6ede5b0d
add eax, 0xbebef9c4
movzx ecx, byte [0x141f49078]
cmp eax, 0xc266581f
jbe 0x140087c9b
movzx eax, byte [0x141f49078]
jmp 0x140087c68
mov eax, dword [0x141f3b030]
xor edx, edx
div dword [0x141f3b034]
imul rax, rax, 0x61db0a1d
shr rax, 0x3e
add eax, 0x3756a953
and eax, 0x20008143
cmp eax, 0xd3d2d5c9
ja 0x140087d40
jmp 0x140087d15
mov eax, dword [0x141f3b000]
add eax, dword [0x141f3b004]
imul eax, eax, 0x4fb49ab8
imul rcx, rax, 0x1a3e4401
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
or eax, 0xc1616440
movzx ecx, byte [0x141f49078]
cmp eax, 0x7a7a53b8
jae 0x140087d09
movzx eax, byte [0x141f49078]
jmp 0x140087cc7
xor ecx, ecx
mov rdx, rsi
call fcn.1400c6170
jmp 0x140087d7e
mov ebx, dword [0x141f3b038]
imul ebx, dword [0x141f3b03c]
or ebx, 0xaffff65d
add ebx, 0xb98f40fa
xor ecx, ecx
mov rdx, rsi
call fcn.1400c6170
cmp ebx, 0x831bf770
jbe 0x140087d50
xor ecx, ecx
mov rdx, rsi
call fcn.1400c6170
jmp 0x140087d15
mov ecx, dword [0x141f3b040]
or ecx, dword [0x141f3b044]
imul rdx, rcx, 0x8652d07
shr rdx, 0x20
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
add ecx, 0x9427ae7f
cmp ecx, 0xb9cf58
jb 0x140087d50
mov ecx, dword [0x141f3b048]
imul ecx, dword [0x141f3b04c]
imul ecx, ecx, 0xea1cc8c2
add ecx, 0x1ba6eb7b
and ecx, 0x6a80552b
cmp ecx, 0x4c165d3e
jne 0x140087dc1
xor ecx, ecx
test rax, rax
mov edx, 8
cmovne rdx, rax
sete cl
mov qword [rdi + 8], rdx
mov qword [rdi + 0x10], rsi
mov qword [rdi], rcx
mov ecx, 8
nop word cs:[rax + rax]
mov edx, dword [0x141f3b050]
imul edx, dword [0x141f3b054]
and edx, 0x42791649
add edx, 0xbd2973b2
xor edx, 0xea33a42
xor r8d, r8d
test rax, rax
sete r8b
mov r9, rax
cmove r9, rcx
mov qword [rdi + 8], r9
mov qword [rdi + 0x10], rsi
mov qword [rdi], r8
cmp edx, 0x194a9752
jb 0x140087dd0
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret