Function at 0x140086140
Capabilities:
Encode data using xor
Write file on windows

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
movaps xmmword [rbp - 0x10], xmm7
movaps xmmword [rbp - 0x20], xmm6
mov rbx, r8
mov r14, rdx
mov eax, dword [0x141dcb288]
add eax, dword [0x141dcb28c]
mov rdi, rcx
and eax, 0x85a80841
imul eax, eax, 0x2017b793
cmp eax, 0x6e073660
jbe 0x1400861e6
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rax, rsp
movups xmm0, xmmword [0x141db6620]
movups xmmword [rax], xmm0
mov ecx, 0xffffffff
cmp rbx, rcx
cmovb rcx, rbx
sub rsp, 0x50
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov dword [rsp + 0x30], ecx
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rax
mov rcx, rdi
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ntdll.dll_NtWriteFile]
add rsp, 0x50
movups xmm6, xmmword [0x141db6620]
xorps xmm7, xmm7
mov eax, dword [0x141dcb290]
imul eax, dword [0x141dcb294]
and eax, 0x877665f2
imul r13d, eax, 0xb8eb5083
add r13d, 0x968dc904
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.1400ed360
sub rsp, rax
mov r12, rsp
movups xmmword [r12], xmm6
mov eax, 0xffffffff
cmp rbx, rax
cmovb rax, rbx
sub rsp, 0x50
movups xmmword [rsp + 0x38], xmm7
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r12
mov rcx, rdi
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ntdll.dll_NtWriteFile]
add rsp, 0x50
cmp r13d, 0xc523c3ae
jb 0x1400861f0
mov r15d, eax
cmp eax, 0x103
jne 0x140086370
mov eax, dword [0x141dcb298]
or eax, dword [0x141dcb29c]
imul eax, eax, 0x2daebf3c
xor eax, 0xa3e283c9
cmp eax, 0xcc2b1996
ja 0x1400862e1
mov eax, dword [0x141dcb2a0]
xor eax, dword [0x141dcb2a4]
and eax, 0x40b1139a
imul ebx, eax, 0x203d9677
or ebx, 0xa6bdf1f3
sub rsp, 0x20
mov rcx, rdi
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
add rsp, 0x20
cmp ebx, 0xdea4abc1
jae 0x1400862f9
sub rsp, 0x20
mov rcx, rdi
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
add rsp, 0x20
jmp 0x1400862a6
mov eax, dword [0x141dcb2a8]
xor edx, edx
div dword [0x141dcb2ac]
mov eax, 0xbc77869b
nop dword [rax]
mov ecx, dword [0x141dcb2b0]
add ecx, dword [0x141dcb2b4]
and ecx, 0x959ae07b
xor ecx, 0x52efe1b9
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x17e29c65
je 0x140086310
mov r15d, dword [r12]
nop dword [rax]
mov eax, dword [0x141dcb2b8]
xor eax, dword [0x141dcb2bc]
add eax, 0x2e5ffdde
or eax, 0xe611f175
imul eax, eax, 0x25a2e523
cmp eax, 0x1ccb174e
jb 0x140086340
cmp r15d, 0x103
je 0x140086446
mov eax, dword [0x141dcb2d0]
or eax, dword [0x141dcb2d4]
xor eax, 0x2b204084
and eax, 0x6b7740a6
imul eax, eax, 0x994e3447
cmp eax, 0x60646840
jb 0x140086370
test r15d, r15d
js 0x140086415
nop dword [rax + rax]
mov eax, dword [0x141dcb2e8]
xor edx, edx
div dword [0x141dcb2ec]
or eax, 0x17b6b3de
and eax, 0x9ff6bbde
cmp eax, 0x6d42b2a4
je 0x1400863a0
nop
mov eax, dword [0x141dcb2f0]
imul eax, dword [0x141dcb2f4]
imul eax, eax, 0xa6b483a0
cmp eax, 0xefa48fb0
je 0x1400863c0
mov rdx, qword [r12 + 8]
xor eax, eax
nop word cs:[rax + rax]
mov ecx, dword [0x141dcb2f8]
sub ecx, dword [0x141dcb2fc]
xor ecx, 0x461e000
or ecx, 0xfb121fcd
cmp ecx, 0xafd78cbd
jb 0x1400863f0
jmp 0x140086557
mov eax, dword [0x141dcb2d8]
and eax, dword [0x141dcb2dc]
xor eax, 0x282190
and eax, 0x8638edb3
imul rax, rax, 0x2233fae9
shr rax, 0x3b
cmp eax, 0xee72d16d
jbe 0x1400864f4
jmp 0x14008650d
mov eax, dword [0x141dcb2c0]
sub eax, dword [0x141dcb2c4]
or eax, 0xea5ac47b
and eax, 0xffdfd47f
lea rcx, [0x141db6680]
cmp eax, 0x7e7900e4
jae 0x140086480
mov dword [rsi], 0
mov byte [rsi + 4], 0
mov qword [rbp - 0x58], rcx
mov qword [rbp - 0x50], 1
mov eax, dword [0x141dcb2c8]
xor edx, edx
div dword [0x141dcb2cc]
add eax, 0x4ce1ef6e
and eax, 0xa4f532bb
imul rax, rax, 0x2353f829
shr rax, 0x39
mov dword [rsi], 0
mov byte [rsi + 4], 0
mov qword [rbp - 0x58], rcx
mov qword [rbp - 0x50], 1
cmp eax, 0x889ec8a3
je 0x140086480
lea rax, [rbp - 0x28]
mov qword [rbp - 0x48], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
sub rsp, 0x20
lea rdx, [rbp - 0x58]
mov rcx, rsi
call fcn.140086dc0
mov rcx, rax
call fcn.140087240
add rsp, 0x20
mov ecx, 7
int 0x29
ud2
sub rsp, 0x20
mov ecx, r15d
call qword [sym.imp.ntdll.dll_RtlNtStatusToDosError]
add rsp, 0x20
mov edx, eax
xor eax, eax
test al, al
je 0x140086520
sub rsp, 0x20
mov ecx, r15d
call qword [sym.imp.ntdll.dll_RtlNtStatusToDosError]
add rsp, 0x20
jmp 0x1400864f4
shl rdx, 0x20
or rdx, 2
nop dword [rax + rax]
mov eax, dword [0x141dcb2e0]
and eax, dword [0x141dcb2e4]
xor eax, 0xb4d14ac3
add eax, 0xf4fb2782
xor eax, 0x41b8459
cmp eax, 0xfa72a679
ja 0x140086530
mov eax, 1
movaps xmm6, xmmword [rbp - 0x20]
movaps xmm7, xmmword [rbp - 0x10]
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret