Function at 0x140085b44
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb4c0]
mov eax, 0xb5c0
call fcn.1400eea70
sub rsp, rax
mov qword [rbp - 0x20], 0xfffffffffffffffe
mov qword [rsp + 0xb5f8], rbx
mov qword [rsp + 0xb600], rsi
mov qword [rsp + 0xb608], rdi
mov rax, qword [0x14013f2b0]
xor rax, rsp
mov qword [rbp + 0xb4b0], rax
mov rsi, rcx
lea rdx, [rsp + 0x40]
call fcn.140085a88
cmp eax, 3
jne 0x14008672b
mov rdx, qword [rsi + 0x22c8]
lea rcx, [rbp + 0x2e0]
call fcn.14004f890
nop
xor r9d, r9d
lea r8d, [r9 + 2]
lea rdx, [rbp + 0x2e0]
mov rcx, rsi
call fcn.140082b78
xor ebx, ebx
test al, al
jne 0x140085be2
mov r14d, ebx
jmp 0x14008671c
mov qword [rbp + 0x260], rbx
mov dword [rbp + 0x268], SHRestricted
lea rcx, [rbp + 0x200]
call fcn.14008f9cc
mov qword [rbp - 0x30], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov qword [rbp - 0x28], rax
lea rdx, [0x1401146e0]
mov rcx, rsi
call fcn.140056e14
mov r14d, 1
test rax, rax
je 0x140085ca9
cmp byte [rsi + 0x7f80], bl
jne 0x140085ca9
xor edx, edx
lea rcx, [rbp + 0x200]
call fcn.14007ca18
nop
mov r8, qword [rsi + 0x68a0]
mov rdx, qword [rsi + 0x6898]
lea rcx, [rbp + 0x200]
call fcn.14007cd84
lea r8d, [r14 + 7]
lea rdx, [rbp + 0x92a0]
lea rcx, [rbp + 0x200]
call fcn.14007cb74
lea rcx, [rbp + 0x200]
call fcn.14007cafc
mov r13d, eax
lea rcx, [rbp + 0x200]
call fcn.14007cb44
mov r15, rax
mov qword [rsp + 0x60], rax
mov dil, r14b
lea rcx, [rbp + 0x200]
call fcn.1400040ec
jmp 0x140085fbe
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsi + 0x7f78]
mov rcx, rsi
call qword [rax + 0x20]
mov edx, 0x78
mov rcx, rsi
call fcn.140056cd4
test rax, rax
je 0x140085cf2
cmp byte [rsi + 0x7f80], bl
jne 0x140085cf2
movzx r13d, word [rsi + 0x7bce]
mov r15d, dword [rsi + 0x7bd0]
mov qword [rsp + 0x60], r15
mov dil, bl
jmp 0x140085fbe
cmp byte [rsp + 0x40], bl
je 0x140085d16
cmp byte [rsi + 0x7f74], bl
je 0x140085d16
lea r8, [rsi + 0x26]
mov rdx, r14
xor ecx, ecx
call fcn.1400867f0
mov r14d, ebx
jmp 0x1400866fe
mov qword [rsp + 0x50], rbx
mov qword [rsi + 0x7f58], rbx
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov rax, qword [rsi]
mov r8d, 0x2000
lea rdx, [rbp + 0x94b0]
mov rcx, rsi
call qword [rax + 0x18]
mov ecx, eax
mov r13d, dword [rsp + 0x4c]
mov r15, qword [rsp + 0x68]
mov dil, byte [rsp + 0x40]
test eax, eax
je 0x140085f7f
mov byte [rsp + 0x40], dil
mov eax, ebx
mov dword [rsp + 0x44], ebx
lea r12d, [rcx - 0x32]
mov dword [rsp + 0x48], r12d
test r12d, r12d
jle 0x140085f45
lea r12, [rbp + 0x94b2]
mov ecx, dword [rsp + 0x48]
cmp byte [r12], 0x7a
jne 0x140085dd3
mov rax, qword [r12 + 0x20]
cmp rax, qword [str.Protect]
jne 0x140085dcf
movzx ebx, byte [r12 - 1]
movzx edi, byte [r12 - 2]
mov r8d, 0x34
mov rdx, r12
or ecx, 0xffffffff
call fcn.14005eab8
mov edx, ebx
shl edx, 8
add edx, edi
not edx
xor eax, edx
movzx eax, ax
xor ebx, ebx
test eax, eax
je 0x140085e39
jmp 0x140085e1a
mov eax, dword [rsp + 0x44]
cmp byte [r12], 0x78
jne 0x140085e22
mov rax, qword [r12 + 0x10]
cmp rax, qword [str.Protect_]
jne 0x140085e1e
movzx ecx, byte [r12 - 1]
shl ecx, 8
movzx eax, byte [r12 - 2]
add ecx, eax
not ecx
movzx ebx, cx
mov r8d, 0x18
mov rdx, r12
or ecx, 0xffffffff
call fcn.14005eab8
movzx ecx, ax
cmp ebx, ecx
je 0x140085ee2
mov ecx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x44]
add eax, r14d
mov dword [rsp + 0x44], eax
add r12, r14
cmp eax, ecx
jge 0x140085f3e
jmp 0x140085d87
movzx r13d, byte [r12 + 0x2b]
shl r13d, 8
movzx eax, byte [r12 + 0x2a]
add r13d, eax
shl r13d, 8
movzx eax, byte [r12 + 0x29]
add r13d, eax
shl r13d, 8
movzx eax, byte [r12 + 0x28]
add r13d, eax
movzx ecx, byte [r12 + 0x33]
shl rcx, 8
movzx eax, byte [r12 + 0x32]
add rcx, rax
shl rcx, 8
movzx eax, byte [r12 + 0x31]
add rcx, rax
shl rcx, 8
movzx eax, byte [r12 + 0x30]
add rcx, rax
movzx r15d, byte [r12 + 0x2f]
shl r15, 8
movzx eax, byte [r12 + 0x2e]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0x2d]
add r15, rax
shl r15, 8
shl rcx, 0x20
add r15, rcx
movzx eax, byte [r12 + 0x2c]
add r15, rax
movsxd rax, dword [rsp + 0x44]
add rax, qword [rsp + 0x50]
mov qword [rsi + 0x7f58], rax
mov dil, r14b
mov byte [rsp + 0x40], r14b
jmp 0x140085f45
movzx r13d, byte [r12 + 0xb]
shl r13d, 8
movzx eax, byte [r12 + 0xa]
add r13d, eax
movzx r15d, byte [r12 + 0xf]
shl r15, 8
movzx eax, byte [r12 + 0xe]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0xd]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0xc]
add r15, rax
movsxd rax, dword [rsp + 0x44]
add rax, qword [rsp + 0x50]
mov qword [rsi + 0x7f58], rax
xor ebx, ebx
mov dil, bl
mov byte [rsp + 0x40], bl
jmp 0x140085f45
mov dil, byte [rsp + 0x40]
xor ebx, ebx
add qword [rsp + 0x50], 0x1fce
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsp + 0x50]
mov rcx, rsi
call qword [rax + 0x20]
mov rax, qword [rsi]
mov r8d, 0x2000
lea rdx, [rbp + 0x94b0]
mov rcx, rsi
call qword [rax + 0x18]
mov ecx, eax
test eax, eax
jne 0x140085d64
mov qword [rsp + 0x60], r15
cmp qword [rsi + 0x7f58], rbx
jne 0x140085fbe
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
and qword [rbp + 0x260], 0
mov dword [rbp + 0x268], SHRestricted
lea rcx, [rbp + 0x200]
call fcn.14008f9cc
jmp 0x1400866fe
xor r8d, r8d
xor edx, edx
mov cl, r14b
call fcn.1400867f0
mov rbx, qword [rsi + 0x7f58]
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x78], rbx
xor r12d, r12d
neg dil
sbb ecx, ecx
and ecx, 0x1c
add ecx, 0x1a
xor edi, edi
cmp byte [rsi + 0x7f74], dil
je 0x140086004
mov eax, ecx
not eax
add eax, r14d
and eax, 0xf
add eax, 8
add ecx, eax
mov eax, ecx
add rax, rbx
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x38], dil
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rdi
mov byte [rbp - 0x60], dil
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x58]
mov rcx, rsi
call fcn.140083c8c
mov edx, r13d
shl edx, 9
lea rcx, [rbp + 0x200]
call fcn.140004018
nop
mov r8, qword [rbp + 0x208]
xor edx, edx
mov rcx, qword [rbp + 0x200]
call fcn.1400efd00
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov qword [rbp + 0x2d0], rdi
mov dword [rbp + 0x2d8], SHRestricted
lea rcx, [rbp + 0x270]
call fcn.14008f9cc
xor edx, edx
movabs r8, 0x7fffffff7fffffff
mov rcx, rsi
call fcn.14008688c
mov dword [rsp + 0x4c], edi
test rbx, rbx
jle 0x14008619b
mov r15d, edi
call fcn.14008eb7c
mov rdx, qword [rsp + 0x78]
sub rdx, rbx
mov r8, qword [rsp + 0x78]
mov rcx, rsi
call fcn.14008688c
mov edi, r15d
cmp rdi, qword [rbp - 0x50]
jae 0x14008612c
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rcx, qword [rbp - 0x58]
cmp rax, qword [rcx + rdi*8]
jl 0x14008612c
mov rax, qword [rsi]
mov rcx, qword [rbp - 0x80]
movsxd rdx, dword [rcx + rdi*4]
mov r8d, r14d
mov rcx, rsi
call qword [rax + 0x20]
mov rcx, qword [rbp - 0x80]
movsxd rax, dword [rcx + rdi*4]
sub rbx, rax
mov qword [rsp + 0x50], rbx
add r15d, r14d
mov byte [rsp + 0x20], r14b
lea r9, [rsp + 0x50]
mov r8d, 0x200
lea rdx, [rbp + 0x92b0]
mov rcx, rsi
call fcn.140084798
mov ecx, r12d
shl ecx, 9
add rcx, qword [rbp + 0x200]
xor edi, edi
mov edx, edi
lea r8, [rbp + 0x92b0]
sub r8, rcx
mov al, byte [r8 + rcx]
xor byte [rcx], al
add edx, r14d
add rcx, r14
cmp edx, 0x200
jb 0x140086166
lea eax, [r12 + 1]
cmp eax, r13d
sbb r12d, r12d
and r12d, eax
mov rbx, qword [rsp + 0x50]
test rbx, rbx
jg 0x1400860cf
mov r15, qword [rsp + 0x60]
mov eax, reloc.SHELL32.dll_SHRestricted
mov r8d, eax
mov edx, eax
mov rcx, rsi
call fcn.14008688c
mov rax, qword [rsi]
mov rcx, qword [rsp + 0x70]
lea rdx, [rcx + r15*2]
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x20]
test r13d, r13d
je 0x14008620e
mov rbx, qword [rbp + 0x200]
lea rdi, [rbp + 0x92b0]
sub rdi, rbx
mov r15d, r13d
mov r12d, 0x200
mov rax, qword [rsi]
mov r8, r12
lea rdx, [rbp + 0x92b0]
mov rcx, rsi
call qword [rax + 0x18]
mov rcx, r12
mov al, byte [rdi + rbx]
xor byte [rbx], al
add rbx, r14
sub rcx, r14
jne 0x1400861f7
sub rdi, r12
sub r15, r14
jne 0x1400861e1
xor edi, edi
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov r15, qword [rsp + 0x78]
mov rbx, r15
mov qword [rsp + 0x50], rbx
mov r12d, edi
mov dword [rsp + 0x48], edi
or edi, 0xffffffff
mov dword [rsp + 0x44], edi
and dword [rsp + 0x4c], 0
lea rdx, [rbp + 0x306]
mov ecx, 0x5f
call fcn.14004a31c
xor edx, edx
movabs r8, 0x7fffffff7fffffff
mov rcx, rsi
call fcn.14008688c
and dword [rsp + 0x60], 0
test r15, r15
jle 0x140086659
call fcn.14008eb7c
mov rdx, r15
sub rdx, rbx
mov r8, r15
mov rcx, rsi
call fcn.14008688c
mov r15d, dword [rsp + 0x60]
cmp r15, qword [rbp - 0x50]
jae 0x1400862cc
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rcx, qword [rbp - 0x58]
cmp rax, qword [rcx + r15*8]
jl 0x1400862cc
mov rax, qword [rsi]
mov rcx, qword [rbp - 0x80]
movsxd rdx, dword [rcx + r15*4]
mov r8d, r14d
mov rcx, rsi
call qword [rax + 0x20]
mov rcx, qword [rbp - 0x80]
movsxd rax, dword [rcx + r15*4]
sub rbx, rax
mov qword [rsp + 0x50], rbx
add dword [rsp + 0x60], r14d
mov byte [rsp + 0x20], r14b
lea r9, [rsp + 0x50]
mov ebx, 0x200
mov r8d, ebx
lea rdx, [rbp + 0x92b0]
mov rcx, rsi
call fcn.140084798
mov eax, eax
mov qword [rbp + 0x92a0], rax
mov r8d, eax
lea rdx, [rbp + 0x92b0]
lea rcx, [rbp + 0x2e0]
call fcn.140068504
mov r8d, ebx
lea rdx, [rbp + 0x92b0]
or ecx, 0xffffffff
call fcn.14005eab8
movzx r15d, ax
mov qword [rbp - 0x18], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rbx, rax
mov qword [rbp - 0x10], rax
mov r9, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsp + 0x70]
mov rcx, rsi
call qword [r9 + 0x20]
mov rcx, rsi
call fcn.140067e4c
movzx eax, al
mov dword [rsp + 0x58], eax
mov rcx, rsi
call fcn.140067e4c
movzx ecx, al
shl ecx, 8
add dword [rsp + 0x58], ecx
add qword [rsp + 0x70], 2
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x30]
test al, al
je 0x14008638b
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, rbx
mov rcx, rsi
call qword [rax + 0x20]
mov ebx, dword [rsp + 0x58]
cmp ebx, r15d
jne 0x1400863ab
mov r9b, r14b
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.14008675c
jmp 0x14008662e
lea rax, [rbp]
lea rcx, [rbp + 0x92b0]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x1400863bf
mov r15d, dword [rsp + 0x4c]
shl r15d, 9
add r15, qword [rbp + 0x200]
lea rcx, [rbp + 0x92b0]
lea rax, [rbp + 0x92b0]
sub r15, rax
mov al, byte [r15 + rcx]
xor byte [rcx], al
add edx, r14d
add rcx, r14
mov eax, 0x200
cmp edx, eax
jb 0x14008642a
mov r8d, eax
lea rdx, [rbp + 0x92b0]
or ecx, 0xffffffff
call fcn.14005eab8
movzx ecx, ax
cmp ebx, ecx
je 0x1400865c8
mov ebx, 0x40
lea rax, [rbp + 0x92f0]
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x92b0]
lea rcx, [rbp]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x140086481
test ebx, ebx
jle 0x1400864e6
lea rcx, [rbp + 0x92b0]
mov edx, ebx
mov al, byte [rcx + r15]
xor byte [rcx], al
add rcx, r14
sub rdx, r14
jne 0x1400864d8
mov r8d, 0x200
lea rdx, [rbp + 0x92b0]
or ecx, 0xffffffff
call fcn.14005eab8
movzx ecx, ax
cmp dword [rsp + 0x58], ecx
je 0x1400865c8
lea rax, [rbp + 0x92b0]
lea rcx, [rbp]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x14008651c
mov edx, ebx
mov r8d, 0x200
cmp ebx, r8d
jae 0x140086589
mov rcx, qword [rsp + 0x68]
mov al, byte [rcx + r15]
xor byte [rcx], al
add edx, r14d
add rcx, r14
cmp edx, r8d
jb 0x140086578
lea rdx, [rbp + 0x92b0]
or ecx, 0xffffffff
call fcn.14005eab8
movzx ecx, ax
cmp dword [rsp + 0x58], ecx
je 0x1400865c8
add ebx, 0x40
add qword [rsp + 0x68], 0x40
cmp ebx, 0x100
jl 0x14008646d
add dword [rsp + 0x48], r14d
cmp edi, 0xffffffff
cmove edi, r12d
mov dword [rsp + 0x44], edi
jmp 0x140086632
mov r9b, r14b
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.14008675c
lea edx, [r12 + 1]
xor r9d, r9d
lea r8, [rsp + 0x44]
mov ecx, r12d
call fcn.14008675c
lea rcx, [rbp + 0x2e0]
call fcn.14005276c
sub rax, qword [rbp + 0x92a0]
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x2e0]
call fcn.1400526e0
mov r8, qword [rbp + 0x92a0]
lea rdx, [rbp + 0x92b0]
lea rcx, [rbp + 0x2e0]
call fcn.140068504
mov edi, dword [rsp + 0x44]
add r12d, r14d
mov eax, dword [rsp + 0x4c]
inc eax
cmp eax, r13d
sbb ecx, ecx
and ecx, eax
mov dword [rsp + 0x4c], ecx
mov rbx, qword [rsp + 0x50]
test rbx, rbx
mov r15, qword [rsp + 0x78]
jg 0x14008626f
mov r9b, r14b
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.14008675c
mov edx, reloc.SHELL32.dll_SHRestricted
mov r8d, edx
mov rcx, rsi
call fcn.14008688c
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, r15
mov rcx, rsi
call qword [rax + 0x20]
movabs r8, 0x7fffffff7fffffff
lea rdx, [rbp + 0x2e0]
mov rcx, rsi
call fcn.140067a4c
lea rcx, [rbp + 0x2e0]
call fcn.140067dc4
test rax, rax
jle 0x1400866d1
lea rdx, [rbp + 0x306]
mov ecx, 0x8d
call fcn.14004a31c
lea rcx, [rbp + 0x2e0]
call fcn.1400679e4
neg dword [rsp + 0x48]
sbb eax, eax
and eax, 2
mov r14d, eax
lea rcx, [rbp + 0x200]
call fcn.1400040ec
nop
lea rcx, [rbp - 0x80]
call fcn.140081cd0
nop
lea rcx, [rbp - 0x58]
call fcn.14001c1d4
nop
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x30]
test al, al
je 0x14008671c
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rbp - 0x28]
mov rcx, rsi
call qword [rax + 0x20]
nop
lea rcx, [rbp + 0x2e0]
call fcn.14004fac4
mov eax, r14d
mov rcx, qword [rbp + 0xb4b0]
xor rcx, rsp
call fcn.1400eeae0
lea r11, [rsp + 0xb5c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret