Function at 0x140085ce8
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb4c0]
mov eax, 0xb5c0
call fcn.1400eeb60
sub rsp, rax
mov qword [rbp - 0x20], 0xfffffffffffffffe
mov qword [rsp + 0xb5f8], rbx
mov qword [rsp + 0xb600], rsi
mov qword [rsp + 0xb608], rdi
mov rax, qword [0x14013f2b0]
xor rax, rsp
mov qword [rbp + 0xb4b0], rax
mov rsi, rcx
lea rdx, [rsp + 0x40]
call fcn.140085c2c
cmp eax, 3
jne 0x1400868cf
mov rdx, qword [rsi + 0x22c8]
lea rcx, [rbp + 0x2e0]
call fcn.14004f840
nop
xor r9d, r9d
lea r8d, [r9 + 2]
lea rdx, [rbp + 0x2e0]
mov rcx, rsi
call fcn.140082ce4
xor ebx, ebx
test al, al
jne 0x140085d86
mov r14d, ebx
jmp 0x1400868c0
mov qword [rbp + 0x260], rbx
mov dword [rbp + 0x268], SHRestricted
lea rcx, [rbp + 0x200]
call fcn.14008fa9c
mov qword [rbp - 0x30], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov qword [rbp - 0x28], rax
lea rdx, [0x1401146d0]
mov rcx, rsi
call fcn.140056df0
mov r14d, 1
test rax, rax
je 0x140085e4d
cmp byte [rsi + 0x7f80], bl
jne 0x140085e4d
xor edx, edx
lea rcx, [rbp + 0x200]
call fcn.14007ca74
nop
mov r8, qword [rsi + 0x68a0]
mov rdx, qword [rsi + 0x6898]
lea rcx, [rbp + 0x200]
call fcn.14007cde0
lea r8d, [r14 + 7]
lea rdx, [rbp + 0x92a0]
lea rcx, [rbp + 0x200]
call fcn.14007cbd0
lea rcx, [rbp + 0x200]
call fcn.14007cb58
mov r13d, eax
lea rcx, [rbp + 0x200]
call fcn.14007cba0
mov r15, rax
mov qword [rsp + 0x60], rax
mov dil, r14b
lea rcx, [rbp + 0x200]
call fcn.140004110
jmp 0x140086162
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsi + 0x7f78]
mov rcx, rsi
call qword [rax + 0x20]
mov edx, 0x78
mov rcx, rsi
call fcn.140056cb0
test rax, rax
je 0x140085e96
cmp byte [rsi + 0x7f80], bl
jne 0x140085e96
movzx r13d, word [rsi + 0x7bce]
mov r15d, dword [rsi + 0x7bd0]
mov qword [rsp + 0x60], r15
mov dil, bl
jmp 0x140086162
cmp byte [rsp + 0x40], bl
je 0x140085eba
cmp byte [rsi + 0x7f74], bl
je 0x140085eba
lea r8, [rsi + 0x26]
mov rdx, r14
xor ecx, ecx
call fcn.1400869c0
mov r14d, ebx
jmp 0x1400868a2
mov qword [rsp + 0x50], rbx
mov qword [rsi + 0x7f58], rbx
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov rax, qword [rsi]
mov r8d, 0x2000
lea rdx, [rbp + 0x94b0]
mov rcx, rsi
call qword [rax + 0x18]
mov ecx, eax
mov r13d, dword [rsp + 0x4c]
mov r15, qword [rsp + 0x68]
mov dil, byte [rsp + 0x40]
test eax, eax
je 0x140086123
mov byte [rsp + 0x40], dil
mov eax, ebx
mov dword [rsp + 0x44], ebx
lea r12d, [rcx - 0x32]
mov dword [rsp + 0x48], r12d
test r12d, r12d
jle 0x1400860e9
lea r12, [rbp + 0x94b2]
mov ecx, dword [rsp + 0x48]
cmp byte [r12], 0x7a
jne 0x140085f77
mov rax, qword [r12 + 0x20]
cmp rax, qword [str.Protect]
jne 0x140085f73
movzx ebx, byte [r12 - 1]
movzx edi, byte [r12 - 2]
mov r8d, 0x34
mov rdx, r12
or ecx, 0xffffffff
call fcn.14005ea94
mov edx, ebx
shl edx, 8
add edx, edi
not edx
xor eax, edx
movzx eax, ax
xor ebx, ebx
test eax, eax
je 0x140085fdd
jmp 0x140085fbe
mov eax, dword [rsp + 0x44]
cmp byte [r12], 0x78
jne 0x140085fc6
mov rax, qword [r12 + 0x10]
cmp rax, qword [str.Protect_]
jne 0x140085fc2
movzx ecx, byte [r12 - 1]
shl ecx, 8
movzx eax, byte [r12 - 2]
add ecx, eax
not ecx
movzx ebx, cx
mov r8d, 0x18
mov rdx, r12
or ecx, 0xffffffff
call fcn.14005ea94
movzx ecx, ax
cmp ebx, ecx
je 0x140086086
mov ecx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x44]
add eax, r14d
mov dword [rsp + 0x44], eax
add r12, r14
cmp eax, ecx
jge 0x1400860e2
jmp 0x140085f2b
movzx r13d, byte [r12 + 0x2b]
shl r13d, 8
movzx eax, byte [r12 + 0x2a]
add r13d, eax
shl r13d, 8
movzx eax, byte [r12 + 0x29]
add r13d, eax
shl r13d, 8
movzx eax, byte [r12 + 0x28]
add r13d, eax
movzx ecx, byte [r12 + 0x33]
shl rcx, 8
movzx eax, byte [r12 + 0x32]
add rcx, rax
shl rcx, 8
movzx eax, byte [r12 + 0x31]
add rcx, rax
shl rcx, 8
movzx eax, byte [r12 + 0x30]
add rcx, rax
movzx r15d, byte [r12 + 0x2f]
shl r15, 8
movzx eax, byte [r12 + 0x2e]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0x2d]
add r15, rax
shl r15, 8
shl rcx, 0x20
add r15, rcx
movzx eax, byte [r12 + 0x2c]
add r15, rax
movsxd rax, dword [rsp + 0x44]
add rax, qword [rsp + 0x50]
mov qword [rsi + 0x7f58], rax
mov dil, r14b
mov byte [rsp + 0x40], r14b
jmp 0x1400860e9
movzx r13d, byte [r12 + 0xb]
shl r13d, 8
movzx eax, byte [r12 + 0xa]
add r13d, eax
movzx r15d, byte [r12 + 0xf]
shl r15, 8
movzx eax, byte [r12 + 0xe]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0xd]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0xc]
add r15, rax
movsxd rax, dword [rsp + 0x44]
add rax, qword [rsp + 0x50]
mov qword [rsi + 0x7f58], rax
xor ebx, ebx
mov dil, bl
mov byte [rsp + 0x40], bl
jmp 0x1400860e9
mov dil, byte [rsp + 0x40]
xor ebx, ebx
add qword [rsp + 0x50], 0x1fce
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsp + 0x50]
mov rcx, rsi
call qword [rax + 0x20]
mov rax, qword [rsi]
mov r8d, 0x2000
lea rdx, [rbp + 0x94b0]
mov rcx, rsi
call qword [rax + 0x18]
mov ecx, eax
test eax, eax
jne 0x140085f08
mov qword [rsp + 0x60], r15
cmp qword [rsi + 0x7f58], rbx
jne 0x140086162
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
and qword [rbp + 0x260], 0
mov dword [rbp + 0x268], reloc.SHELL32.dll_SHRestricted
lea rcx, [rbp + 0x200]
call fcn.14008fa9c
jmp 0x1400868a2
xor r8d, r8d
xor edx, edx
mov cl, r14b
call fcn.1400869c0
mov rbx, qword [rsi + 0x7f58]
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x78], rbx
xor r12d, r12d
neg dil
sbb ecx, ecx
and ecx, 0x1c
add ecx, 0x1a
xor edi, edi
cmp byte [rsi + 0x7f74], dil
je 0x1400861a8
mov eax, ecx
not eax
add eax, r14d
and eax, 0xf
add eax, 8
add ecx, eax
mov eax, ecx
add rax, rbx
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x38], dil
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rdi
mov byte [rbp - 0x60], dil
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x58]
mov rcx, rsi
call fcn.140083dfc
mov edx, r13d
shl edx, 9
lea rcx, [rbp + 0x200]
call fcn.140007f4c
nop
mov r8, qword [rbp + 0x208]
xor edx, edx
mov rcx, qword [rbp + 0x200]
call fcn.1400efdf0
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov qword [rbp + 0x2d0], rdi
mov dword [rbp + 0x2d8], SHRestricted
lea rcx, [rbp + 0x270]
call fcn.14008fa9c
xor edx, edx
movabs r8, 0x7fffffff7fffffff
mov rcx, rsi
call fcn.140086a5c
mov dword [rsp + 0x4c], edi
test rbx, rbx
jle 0x14008633f
mov r15d, edi
call fcn.14008ec4c
mov rdx, qword [rsp + 0x78]
sub rdx, rbx
mov r8, qword [rsp + 0x78]
mov rcx, rsi
call fcn.140086a5c
mov edi, r15d
cmp rdi, qword [rbp - 0x50]
jae 0x1400862d0
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rcx, qword [rbp - 0x58]
cmp rax, qword [rcx + rdi*8]
jl 0x1400862d0
mov rax, qword [rsi]
mov rcx, qword [rbp - 0x80]
movsxd rdx, dword [rcx + rdi*4]
mov r8d, r14d
mov rcx, rsi
call qword [rax + 0x20]
mov rcx, qword [rbp - 0x80]
movsxd rax, dword [rcx + rdi*4]
sub rbx, rax
mov qword [rsp + 0x50], rbx
add r15d, r14d
mov byte [rsp + 0x20], r14b
lea r9, [rsp + 0x50]
mov r8d, 0x200
lea rdx, [rbp + 0x92b0]
mov rcx, rsi
call fcn.14008493c
mov ecx, r12d
shl ecx, 9
add rcx, qword [rbp + 0x200]
xor edi, edi
mov edx, edi
lea r8, [rbp + 0x92b0]
sub r8, rcx
mov al, byte [r8 + rcx]
xor byte [rcx], al
add edx, r14d
add rcx, r14
cmp edx, 0x200
jb 0x14008630a
lea eax, [r12 + 1]
cmp eax, r13d
sbb r12d, r12d
and r12d, eax
mov rbx, qword [rsp + 0x50]
test rbx, rbx
jg 0x140086273
mov r15, qword [rsp + 0x60]
mov eax, reloc.SHELL32.dll_SHRestricted
mov r8d, eax
mov edx, eax
mov rcx, rsi
call fcn.140086a5c
mov rax, qword [rsi]
mov rcx, qword [rsp + 0x70]
lea rdx, [rcx + r15*2]
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x20]
test r13d, r13d
je 0x1400863b2
mov rbx, qword [rbp + 0x200]
lea rdi, [rbp + 0x92b0]
sub rdi, rbx
mov r15d, r13d
mov r12d, 0x200
mov rax, qword [rsi]
mov r8, r12
lea rdx, [rbp + 0x92b0]
mov rcx, rsi
call qword [rax + 0x18]
mov rcx, r12
mov al, byte [rdi + rbx]
xor byte [rbx], al
add rbx, r14
sub rcx, r14
jne 0x14008639b
sub rdi, r12
sub r15, r14
jne 0x140086385
xor edi, edi
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov r15, qword [rsp + 0x78]
mov rbx, r15
mov qword [rsp + 0x50], rbx
mov r12d, edi
mov dword [rsp + 0x48], edi
or edi, 0xffffffff
mov dword [rsp + 0x44], edi
and dword [rsp + 0x4c], 0
lea rdx, [rbp + 0x306]
mov ecx, SHRestricted
call fcn.140012a54
xor edx, edx
movabs r8, 0x7fffffff7fffffff
mov rcx, rsi
call fcn.140086a5c
and dword [rsp + 0x60], 0
test r15, r15
jle 0x1400867fd
call fcn.14008ec4c
mov rdx, r15
sub rdx, rbx
mov r8, r15
mov rcx, rsi
call fcn.140086a5c
mov r15d, dword [rsp + 0x60]
cmp r15, qword [rbp - 0x50]
jae 0x140086470
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rcx, qword [rbp - 0x58]
cmp rax, qword [rcx + r15*8]
jl 0x140086470
mov rax, qword [rsi]
mov rcx, qword [rbp - 0x80]
movsxd rdx, dword [rcx + r15*4]
mov r8d, r14d
mov rcx, rsi
call qword [rax + 0x20]
mov rcx, qword [rbp - 0x80]
movsxd rax, dword [rcx + r15*4]
sub rbx, rax
mov qword [rsp + 0x50], rbx
add dword [rsp + 0x60], r14d
mov byte [rsp + 0x20], r14b
lea r9, [rsp + 0x50]
mov ebx, 0x200
mov r8d, ebx
lea rdx, [rbp + 0x92b0]
mov rcx, rsi
call fcn.14008493c
mov eax, eax
mov qword [rbp + 0x92a0], rax
mov r8d, eax
lea rdx, [rbp + 0x92b0]
lea rcx, [rbp + 0x2e0]
call fcn.14006855c
mov r8d, ebx
lea rdx, [rbp + 0x92b0]
or ecx, 0xffffffff
call fcn.14005ea94
movzx r15d, ax
mov qword [rbp - 0x18], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rbx, rax
mov qword [rbp - 0x10], rax
mov r9, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsp + 0x70]
mov rcx, rsi
call qword [r9 + 0x20]
mov rcx, rsi
call fcn.140067ea0
movzx eax, al
mov dword [rsp + 0x58], eax
mov rcx, rsi
call fcn.140067ea0
movzx ecx, al
shl ecx, 8
add dword [rsp + 0x58], ecx
add qword [rsp + 0x70], 2
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x30]
test al, al
je 0x14008652f
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, rbx
mov rcx, rsi
call qword [rax + 0x20]
mov ebx, dword [rsp + 0x58]
cmp ebx, r15d
jne 0x14008654f
mov r9b, r14b
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.14008692c
jmp 0x1400867d2
lea rax, [rbp]
lea rcx, [rbp + 0x92b0]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x140086563
mov r15d, dword [rsp + 0x4c]
shl r15d, 9
add r15, qword [rbp + 0x200]
lea rcx, [rbp + 0x92b0]
lea rax, [rbp + 0x92b0]
sub r15, rax
mov al, byte [r15 + rcx]
xor byte [rcx], al
add edx, r14d
add rcx, r14
mov eax, 0x200
cmp edx, eax
jb 0x1400865ce
mov r8d, eax
lea rdx, [rbp + 0x92b0]
or ecx, 0xffffffff
call fcn.14005ea94
movzx ecx, ax
cmp ebx, ecx
je 0x14008676c
mov ebx, 0x40
lea rax, [rbp + 0x92f0]
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x92b0]
lea rcx, [rbp]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x140086625
test ebx, ebx
jle 0x14008668a
lea rcx, [rbp + 0x92b0]
mov edx, ebx
mov al, byte [rcx + r15]
xor byte [rcx], al
add rcx, r14
sub rdx, r14
jne 0x14008667c
mov r8d, 0x200
lea rdx, [rbp + 0x92b0]
or ecx, 0xffffffff
call fcn.14005ea94
movzx ecx, ax
cmp dword [rsp + 0x58], ecx
je 0x14008676c
lea rax, [rbp + 0x92b0]
lea rcx, [rbp]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x1400866c0
mov edx, ebx
mov r8d, 0x200
cmp ebx, r8d
jae 0x14008672d
mov rcx, qword [rsp + 0x68]
mov al, byte [rcx + r15]
xor byte [rcx], al
add edx, r14d
add rcx, r14
cmp edx, r8d
jb 0x14008671c
lea rdx, [rbp + 0x92b0]
or ecx, 0xffffffff
call fcn.14005ea94
movzx ecx, ax
cmp dword [rsp + 0x58], ecx
je 0x14008676c
add ebx, 0x40
add qword [rsp + 0x68], 0x40
cmp ebx, 0x100
jl 0x140086611
add dword [rsp + 0x48], r14d
cmp edi, 0xffffffff
cmove edi, r12d
mov dword [rsp + 0x44], edi
jmp 0x1400867d6
mov r9b, r14b
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.14008692c
lea edx, [r12 + 1]
xor r9d, r9d
lea r8, [rsp + 0x44]
mov ecx, r12d
call fcn.14008692c
lea rcx, [rbp + 0x2e0]
call fcn.140052724
sub rax, qword [rbp + 0x92a0]
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x2e0]
call fcn.140052698
mov r8, qword [rbp + 0x92a0]
lea rdx, [rbp + 0x92b0]
lea rcx, [rbp + 0x2e0]
call fcn.14006855c
mov edi, dword [rsp + 0x44]
add r12d, r14d
mov eax, dword [rsp + 0x4c]
inc eax
cmp eax, r13d
sbb ecx, ecx
and ecx, eax
mov dword [rsp + 0x4c], ecx
mov rbx, qword [rsp + 0x50]
test rbx, rbx
mov r15, qword [rsp + 0x78]
jg 0x140086413
mov r9b, r14b
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.14008692c
mov edx, reloc.SHELL32.dll_SHRestricted
mov r8d, edx
mov rcx, rsi
call fcn.140086a5c
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, r15
mov rcx, rsi
call qword [rax + 0x20]
movabs r8, 0x7fffffff7fffffff
lea rdx, [rbp + 0x2e0]
mov rcx, rsi
call fcn.140067aa0
lea rcx, [rbp + 0x2e0]
call fcn.140067e18
test rax, rax
jle 0x140086875
lea rdx, [rbp + 0x306]
mov ecx, 0x8e
call fcn.140012a54
lea rcx, [rbp + 0x2e0]
call fcn.140067a38
neg dword [rsp + 0x48]
sbb eax, eax
and eax, 2
mov r14d, eax
lea rcx, [rbp + 0x200]
call fcn.140004110
nop
lea rcx, [rbp - 0x80]
call fcn.140081d34
nop
lea rcx, [rbp - 0x58]
call fcn.14001c23c
nop
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x30]
test al, al
je 0x1400868c0
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rbp - 0x28]
mov rcx, rsi
call qword [rax + 0x20]
nop
lea rcx, [rbp + 0x2e0]
call fcn.14004fa74
mov eax, r14d
mov rcx, qword [rbp + 0xb4b0]
xor rcx, rsp
call fcn.1400eebd0
lea r11, [rsp + 0xb5c0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret