Function at 0x140086234
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb440]
mov eax, 0xb540
call fcn.1400f31b0
sub rsp, rax
mov qword [rbp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0xb578], rbx
mov qword [rsp + 0xb580], rsi
mov qword [rsp + 0xb588], rdi
mov rax, qword [0x1401542d0]
xor rax, rsp
mov qword [rbp + 0xb430], rax
mov rsi, rcx
lea rdx, [rsp + 0x40]
call fcn.1400861b4
cmp eax, 3
jne 0x140086da0
mov rdx, qword [rsi + 0x22d0]
lea rcx, [rbp + 0x250]
call fcn.14004f2b8
nop
xor r9d, r9d
lea r8d, [r9 + 2]
lea rdx, [rbp + 0x250]
mov rcx, rsi
call fcn.140083408
xor r14d, r14d
test al, al
je 0x140086d91
lea ecx, [r14 + 0x62]
call fcn.14001626c
mov qword [rbp + 0x30], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov qword [rbp + 0x38], rax
lea rdx, [0x140123198]
mov rcx, rsi
call fcn.1400568e8
test rax, rax
je 0x14008636b
cmp byte [rsi + 0x7f98], r14b
jne 0x14008636b
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14007d234
nop
mov r8, qword [rsi + 0x68b8]
mov rdx, qword [rsi + 0x68b0]
lea rcx, [rbp - 0x30]
call fcn.14007d5a0
lea r8d, [r14 + 8]
lea rdx, [rbp + 0x9220]
lea rcx, [rbp - 0x30]
call fcn.14007d390
lea rcx, [rbp - 0x30]
call fcn.14007d318
mov r13d, eax
lea rcx, [rbp - 0x30]
call fcn.14007d360
mov r15, rax
mov qword [rsp + 0x58], rax
mov dil, 1
lea rcx, [rbp - 0x30]
call fcn.1400040dc
jmp 0x140086688
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsi + 0x7f90]
mov rcx, rsi
call qword [rax + 0x20]
mov edx, 0x78
mov rcx, rsi
call fcn.1400567a8
test rax, rax
je 0x1400863b5
cmp byte [rsi + 0x7f98], r14b
jne 0x1400863b5
movzx r13d, word [rsi + 0x7be6]
mov r15d, dword [rsi + 0x7be8]
mov qword [rsp + 0x58], r15
mov dil, r14b
jmp 0x140086688
cmp byte [rsp + 0x40], r14b
je 0x1400863f3
cmp byte [rsi + 0x7f8c], r14b
je 0x1400863f3
mov ecx, 0x65
call fcn.14001626c
lea rdx, [rsi + 0x26]
mov ecx, 0x41
call fcn.1400131dc
mov edx, 0xa
lea rcx, [0x14018fe18]
call fcn.140063384
jmp 0x140086d87
mov qword [rsp + 0x50], r14
mov qword [rsi + 0x7f70], r14
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov rax, qword [rsi]
mov r8d, 0x2000
lea rdx, [rbp + 0x9430]
mov rcx, rsi
call qword [rax + 0x18]
mov ecx, eax
mov r13d, dword [rsp + 0x4c]
mov r15, qword [rsp + 0x68]
mov dil, byte [rsp + 0x40]
test eax, eax
je 0x140086657
mov byte [rsp + 0x40], dil
mov eax, r14d
mov dword [rsp + 0x44], eax
lea r12d, [rcx - 0x32]
mov dword [rsp + 0x48], r12d
test r12d, r12d
jle 0x14008661d
lea r12, [rbp + 0x9432]
mov ecx, dword [rsp + 0x48]
cmp byte [r12], 0x7a
jne 0x1400864af
mov rax, qword [r12 + 0x20]
cmp rax, qword [str.Protect]
jne 0x1400864ab
movzx ebx, byte [r12 - 1]
movzx edi, byte [r12 - 2]
mov r8d, 0x34
mov rdx, r12
or ecx, 0xffffffff
call fcn.14005ec64
mov edx, ebx
shl edx, 8
add edx, edi
not edx
xor eax, edx
movzx eax, ax
test eax, eax
je 0x140086514
jmp 0x1400864f6
mov eax, dword [rsp + 0x44]
cmp byte [r12], 0x78
jne 0x1400864fe
mov rax, qword [r12 + 0x10]
cmp rax, qword [str.Protect_]
jne 0x1400864fa
movzx ecx, byte [r12 - 1]
shl ecx, 8
movzx eax, byte [r12 - 2]
add ecx, eax
not ecx
movzx ebx, cx
mov r8d, 0x18
mov rdx, r12
or ecx, 0xffffffff
call fcn.14005ec64
movzx ecx, ax
cmp ebx, ecx
je 0x1400865bd
mov ecx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x44]
inc eax
mov dword [rsp + 0x44], eax
inc r12
cmp eax, ecx
jge 0x140086618
jmp 0x140086465
movzx r13d, byte [r12 + 0x2b]
shl r13d, 8
movzx eax, byte [r12 + 0x2a]
add r13d, eax
shl r13d, 8
movzx eax, byte [r12 + 0x29]
add r13d, eax
shl r13d, 8
movzx eax, byte [r12 + 0x28]
add r13d, eax
movzx ecx, byte [r12 + 0x33]
shl rcx, 8
movzx eax, byte [r12 + 0x32]
add rcx, rax
shl rcx, 8
movzx eax, byte [r12 + 0x31]
add rcx, rax
shl rcx, 8
movzx eax, byte [r12 + 0x30]
add rcx, rax
movzx r15d, byte [r12 + 0x2f]
shl r15, 8
movzx eax, byte [r12 + 0x2e]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0x2d]
add r15, rax
shl r15, 8
shl rcx, 0x20
add r15, rcx
movzx eax, byte [r12 + 0x2c]
add r15, rax
movsxd rax, dword [rsp + 0x44]
add rax, qword [rsp + 0x50]
mov qword [rsi + 0x7f70], rax
mov dil, 1
mov byte [rsp + 0x40], dil
jmp 0x14008661d
movzx r13d, byte [r12 + 0xb]
shl r13d, 8
movzx eax, byte [r12 + 0xa]
add r13d, eax
movzx r15d, byte [r12 + 0xf]
shl r15, 8
movzx eax, byte [r12 + 0xe]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0xd]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0xc]
add r15, rax
movsxd rax, dword [rsp + 0x44]
add rax, qword [rsp + 0x50]
mov qword [rsi + 0x7f70], rax
mov dil, r14b
mov byte [rsp + 0x40], r14b
jmp 0x14008661d
mov dil, byte [rsp + 0x40]
add qword [rsp + 0x50], 0x1fce
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsp + 0x50]
mov rcx, rsi
call qword [rax + 0x20]
mov rax, qword [rsi]
mov r8d, 0x2000
lea rdx, [rbp + 0x9430]
mov rcx, rsi
call qword [rax + 0x18]
mov ecx, eax
test eax, eax
jne 0x140086441
mov qword [rsp + 0x58], r15
cmp qword [rsi + 0x7f70], r14
jne 0x140086688
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov ecx, 0x65
call fcn.14001626c
mov r14d, 1
jmp 0x140086d87
mov ecx, reloc.SHELL32.dll_SHRestricted
call fcn.14001626c
mov rbx, qword [rsi + 0x7f70]
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x78], rbx
mov r12d, r14d
neg dil
sbb ecx, ecx
and ecx, 0x1c
add ecx, 0x1a
cmp byte [rsi + 0x7f8c], r14b
je 0x1400866c8
mov eax, ecx
not eax
inc eax
and eax, 0xf
add eax, 8
add ecx, eax
mov eax, ecx
add rax, rbx
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
mov qword [rbp - 0x40], r14
mov byte [rbp - 0x38], r14b
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
mov byte [rbp - 0x60], r14b
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x58]
mov rcx, rsi
call fcn.140084428
mov edx, r13d
shl edx, 9
lea rcx, [rbp - 0x30]
call fcn.140008060
nop
mov r8, qword [rbp - 0x28]
xor edx, edx
mov rcx, qword [rbp - 0x30]
call fcn.1400f4420
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov ecx, SHRestricted
call fcn.14001626c
xor edx, edx
movabs r8, 0x7fffffff7fffffff
mov rcx, rsi
call fcn.140086ea0
mov dword [rsp + 0x4c], r14d
test rbx, rbx
jle 0x140086842
mov r15d, r14d
call fcn.14008fc64
mov rdx, qword [rsp + 0x78]
sub rdx, rbx
mov r8, qword [rsp + 0x78]
mov rcx, rsi
call fcn.140086ea0
mov edi, r15d
cmp rdi, qword [rbp - 0x50]
jae 0x1400867d8
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rcx, qword [rbp - 0x58]
cmp rax, qword [rcx + rdi*8]
jl 0x1400867d8
mov rax, qword [rsi]
mov rcx, qword [rbp - 0x80]
movsxd rdx, dword [rcx + rdi*4]
mov r8d, 1
mov rcx, rsi
call qword [rax + 0x20]
mov rcx, qword [rbp - 0x80]
movsxd rax, dword [rcx + rdi*4]
sub rbx, rax
mov qword [rsp + 0x50], rbx
inc r15d
mov byte [rsp + 0x20], 1
lea r9, [rsp + 0x50]
mov r8d, 0x200
lea rdx, [rbp + 0x9230]
mov rcx, rsi
call fcn.140084ec4
mov ecx, r12d
shl ecx, 9
add rcx, qword [rbp - 0x30]
mov edx, r14d
lea r8, [rbp + 0x9230]
sub r8, rcx
mov al, byte [r8 + rcx]
xor byte [rcx], al
inc edx
inc rcx
cmp edx, 0x200
jb 0x14008680e
lea eax, [r12 + 1]
cmp eax, r13d
sbb r12d, r12d
and r12d, eax
mov rbx, qword [rsp + 0x50]
test rbx, rbx
jg 0x140086778
mov r15, qword [rsp + 0x58]
mov edx, reloc.SHELL32.dll_SHRestricted
mov r8d, edx
mov rcx, rsi
call fcn.140086ea0
mov rax, qword [rsi]
mov rcx, qword [rsp + 0x70]
lea rdx, [rcx + r15*2]
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x20]
test r13d, r13d
je 0x1400868b0
mov rbx, qword [rbp - 0x30]
lea rdi, [rbp + 0x9230]
sub rdi, rbx
mov r15d, r13d
mov r12d, 0x200
mov rax, qword [rsi]
mov r8, r12
lea rdx, [rbp + 0x9230]
mov rcx, rsi
call qword [rax + 0x18]
mov rcx, r12
mov al, byte [rdi + rbx]
xor byte [rbx], al
inc rbx
sub rcx, 1
jne 0x140086899
sub rdi, r12
sub r15, 1
jne 0x140086883
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov r15, qword [rsp + 0x78]
mov rbx, r15
mov qword [rsp + 0x50], rbx
mov r12d, r14d
mov dword [rsp + 0x48], r14d
or edi, 0xffffffff
mov dword [rsp + 0x44], edi
mov dword [rsp + 0x4c], r14d
lea rdx, [rbp + 0x276]
mov ecx, SHRestricted
call fcn.1400131dc
xor edx, edx
movabs r8, 0x7fffffff7fffffff
mov rcx, rsi
call fcn.140086ea0
mov dword [rsp + 0x60], r14d
test r15, r15
jle 0x140086ce3
call fcn.14008fc64
mov rdx, r15
sub rdx, rbx
mov r8, r15
mov rcx, rsi
call fcn.140086ea0
mov r15d, dword [rsp + 0x60]
cmp r15, qword [rbp - 0x50]
jae 0x140086971
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rcx, qword [rbp - 0x58]
cmp rax, qword [rcx + r15*8]
jl 0x140086971
mov rax, qword [rsi]
mov rcx, qword [rbp - 0x80]
movsxd rdx, dword [rcx + r15*4]
mov r8d, 1
mov rcx, rsi
call qword [rax + 0x20]
mov rcx, qword [rbp - 0x80]
movsxd rax, dword [rcx + r15*4]
sub rbx, rax
mov qword [rsp + 0x50], rbx
inc dword [rsp + 0x60]
mov byte [rsp + 0x20], 1
lea r9, [rsp + 0x50]
mov ebx, 0x200
mov r8d, ebx
lea rdx, [rbp + 0x9230]
mov rcx, rsi
call fcn.140084ec4
mov eax, eax
mov qword [rbp + 0x9220], rax
mov r8d, eax
lea rdx, [rbp + 0x9230]
lea rcx, [rbp + 0x250]
call fcn.1400687a0
mov r8d, ebx
lea rdx, [rbp + 0x9230]
or ecx, 0xffffffff
call fcn.14005ec64
movzx ebx, ax
mov qword [rbp + 0x20], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov qword [rbp + 0x28], rax
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsp + 0x70]
mov rcx, rsi
call qword [rax + 0x20]
mov rcx, rsi
call fcn.1400680b4
movzx r15d, al
mov rcx, rsi
call fcn.1400680b4
movzx eax, al
shl eax, 8
add r15d, eax
mov dword [rsp + 0x58], r15d
add qword [rsp + 0x70], 2
lea rcx, [rbp + 0x20]
call fcn.14004f5c8
cmp r15d, ebx
jne 0x140086a35
mov r9b, 1
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.140086dfc
jmp 0x140086cb8
lea rax, [rbp + 0x50]
lea rcx, [rbp + 0x9230]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x140086a49
mov r15d, dword [rsp + 0x4c]
shl r15d, 9
add r15, qword [rbp - 0x30]
mov edx, r14d
lea rcx, [rbp + 0x9230]
lea rax, [rbp + 0x9230]
sub r15, rax
mov al, byte [r15 + rcx]
xor byte [rcx], al
inc edx
inc rcx
mov eax, 0x200
cmp edx, eax
jb 0x140086ab4
mov r8d, eax
lea rdx, [rbp + 0x9230]
or ecx, 0xffffffff
call fcn.14005ec64
movzx ecx, ax
cmp dword [rsp + 0x58], ecx
je 0x140086c52
mov ebx, 0x40
lea rax, [rbp + 0x9270]
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x9230]
lea rcx, [rbp + 0x50]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x140086b0c
test ebx, ebx
jle 0x140086b72
lea rcx, [rbp + 0x9230]
mov edx, ebx
mov al, byte [rcx + r15]
xor byte [rcx], al
inc rcx
sub rdx, 1
jne 0x140086b63
mov r8d, 0x200
lea rdx, [rbp + 0x9230]
or ecx, 0xffffffff
call fcn.14005ec64
movzx ecx, ax
cmp dword [rsp + 0x58], ecx
je 0x140086c52
lea rax, [rbp + 0x9230]
lea rcx, [rbp + 0x50]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x140086ba8
mov edx, ebx
mov r8d, 0x200
cmp ebx, r8d
jae 0x140086c14
mov rcx, qword [rsp + 0x68]
mov al, byte [rcx + r15]
xor byte [rcx], al
inc edx
inc rcx
cmp edx, r8d
jb 0x140086c04
lea rdx, [rbp + 0x9230]
or ecx, 0xffffffff
call fcn.14005ec64
movzx ecx, ax
cmp dword [rsp + 0x58], ecx
je 0x140086c52
add ebx, 0x40
add qword [rsp + 0x68], 0x40
cmp ebx, 0x100
jl 0x140086af8
inc dword [rsp + 0x48]
cmp edi, 0xffffffff
cmove edi, r12d
mov dword [rsp + 0x44], edi
jmp 0x140086cbc
mov r9b, 1
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.140086dfc
lea edx, [r12 + 1]
xor r9d, r9d
lea r8, [rsp + 0x44]
mov ecx, r12d
call fcn.140086dfc
lea rcx, [rbp + 0x250]
call fcn.140052174
sub rax, qword [rbp + 0x9220]
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x250]
call fcn.1400520e8
mov r8, qword [rbp + 0x9220]
lea rdx, [rbp + 0x9230]
lea rcx, [rbp + 0x250]
call fcn.1400687a0
mov edi, dword [rsp + 0x44]
inc r12d
mov eax, dword [rsp + 0x4c]
inc eax
cmp eax, r13d
sbb ecx, ecx
and ecx, eax
mov dword [rsp + 0x4c], ecx
mov rbx, qword [rsp + 0x50]
test rbx, rbx
mov r15, qword [rsp + 0x78]
jg 0x140086912
mov r9b, 1
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.140086dfc
mov eax, reloc.SHELL32.dll_SHRestricted
mov r8d, eax
mov edx, eax
mov rcx, rsi
call fcn.140086ea0
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, r15
mov rcx, rsi
call qword [rax + 0x20]
movabs r8, 0x7fffffff7fffffff
lea rdx, [rbp + 0x250]
mov rcx, rsi
call fcn.140067ce0
lea rcx, [rbp + 0x250]
call fcn.140068058
test rax, rax
jle 0x140086d5d
lea rdx, [rbp + 0x276]
mov ecx, 0x8f
call fcn.1400131dc
lea rcx, [rbp + 0x250]
call fcn.140067c78
neg dword [rsp + 0x48]
sbb eax, eax
and eax, 2
mov r14d, eax
lea rcx, [rbp - 0x30]
call fcn.1400040dc
nop
lea rcx, [rbp - 0x80]
call fcn.1400825fc
nop
lea rcx, [rbp - 0x58]
call fcn.14001ab4c
nop
lea rcx, [rbp + 0x30]
call fcn.14004f5c8
nop
lea rcx, [rbp + 0x250]
call fcn.14004f4f4
mov eax, r14d
mov rcx, qword [rbp + 0xb430]
xor rcx, rsp
call fcn.1400f3220
lea r11, [rsp + 0xb540]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret