Function at 0x140081730
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rbx, r8
mov rsi, rdx
mov rax, qword [0x140183d00]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov rcx, rdx
call fcn.140082fe0
test eax, eax
je 0x140081c04
mov edi, eax
call fcn.1400830b0
mov ecx, 0x1fffff
xor edx, edx
mov r8d, edi
call qword [sym.imp.KERNEL32.dll_OpenProcess]
test rax, rax
je 0x140081ffa
mov rsi, rax
mov dword [rsp + 0x30], 0
lea rdi, [rsp + 0x30]
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
je 0x140081ff1
mov dword [rsp + 0x2c], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rdx, [rsp + 0x2c]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_IsWow64Process]
mov eax, dword [rsp + 0x30]
cmp eax, dword [rsp + 0x2c]
jne 0x140081ff1
mov rdx, rsi
mov r8, rbx
call fcn.140083180
test al, al
jne 0x140081ff1
cmp byte [0x140186c54], 0
jne 0x140081892
mov ecx, 1
xor r8d, r8d
movabs r9, 0xf0f0f0f0f0f0f0f1
lea r10, [0x140108880]
lea r11, [0x140186c40]
nop word cs:[rax + rax]
mov rax, rcx
mul r9
mov rax, rdx
shr rax, 4
and rdx, 0xfffffffffffffff0
add rdx, rax
lea rbx, [r10 + r8]
mov r14, rbx
sub r14, rdx
mov rax, r8
mul r9
mov rax, rdx
shr rax, 4
and rdx, 0xfffffffffffffff0
add rdx, rax
sub rbx, rdx
movzx eax, byte [rbx + 0x39e]
xor al, byte [r8 + r10 + 0x3af]
mov byte [r8 + r11], al
movzx eax, byte [r14 + 0x39f]
xor al, byte [r8 + r10 + 0x3b0]
mov byte [r8 + r11 + 1], al
add r8, 2
add rcx, 2
cmp r8, 0x14
jne 0x140081820
mov byte [0x140186c54], 1
movdqa xmm0, xmmword [0x140186c40]
paddb xmm0, xmmword [0x140108fd0]
pxor xmm0, xmmword [0x140108fe0]
movdqa xmm1, xmmword [0x140186c50]
paddb xmm1, xmmword [str.uuuu]
pxor xmm1, xmmword [0x140109000]
movdqa xmmword [rsp + 0x30], xmm0
movd dword [rsp + 0x40], xmm1
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x44], xmm0
mov word [rsp + 0x54], 0
movabs rbx, 0x8cbedd79896d1dc
call fcn.140085530
mov r12, qword [rax]
call fcn.140085540
mov rcx, qword [rax]
xor eax, eax
jmp 0x14008194b
mov r8, rcx
lea ecx, [rax + 0x24227cc4]
lea r9d, [rax + rdx]
add r9d, 0x24227cc4
and ecx, edx
add ecx, ecx
sub r9d, ecx
add r9b, 0xa4
mov byte [rsp + rax + 0x30], r9b
sub rax, r12
inc r12
movzx r9d, byte [rsp + rax + 0x2e]
add rax, 0xfffffffffffffffe
mov rcx, r8
movzx edx, r9b
add rax, rcx
add rax, rdx
inc rax
cmp rax, 0x26
jae 0x140081fb9
cmp r12, rax
ja 0x140081fa7
movzx r9d, byte [rsp + rax + 0x30]
movzx edx, r9b
lea r8, [rcx + 1]
cmp r12, r8
jae 0x1400819a0
cmp rcx, rax
ja 0x140081fb1
lea r10, [r12 + rcx]
cmp r10, rax
jbe 0x1400819ca
cmp r12, r8
mov r8, r12
je 0x140081b45
lea r8, [rcx + 3]
cmp r12, r8
jne 0x140081ac4
mov r8, rcx
jmp 0x140081b45
je 0x140081934
lea r10, [rcx + 2]
cmp r12, r10
je 0x1400818fd
lea r10, [rcx + 3]
cmp r12, r10
je 0x140081a8b
lea r10, [rcx + 8]
cmp r12, r10
jne 0x140081967
jmp 0x140081b24
lea r13, [rcx + 4]
cmp r12, r13
jae 0x1400819fb
lea ebp, [rax + 0x4e8e8aa3]
lea r11d, [rax + rdx]
add r11d, 0x4e8e8aa3
and ebp, edx
add ebp, ebp
sub r11d, ebp
add r11b, 0x8b
cmp r10, 0xa
je 0x140081a8b
jmp 0x140081a3c
cmp r12, r8
je 0x140081934
mov bpl, 0x3c
movabs r15, 0xe0a20983f4f4291c
cmp r12, r13
je 0x140081ad3
lea ebp, [rax + 0x71b15f5f]
lea r11d, [rax + rdx]
add r11d, 0x71b15f5f
and ebp, edx
add ebp, ebp
sub r11d, ebp
add r11b, 0x67
cmp r10, 0xa
je 0x140081a8b
lea r15, [rcx + 0x10]
cmp r12, r15
jbe 0x140081b1f
lea r10d, [rax - 0x4808f729]
lea r11d, [rax + rdx]
add r11d, 0xb7f708d7
and r10d, edx
add r10d, r10d
sub r11d, r10d
add r11b, 0x1f
cmp r12, r8
je 0x140081934
lea r9, [rcx + 2]
cmp r12, r9
je 0x1400818fd
lea r9, [rcx + 3]
cmp r12, r9
jne 0x140081bc8
lea r9d, [rax - 0x2a6c0ddf]
lea r10d, [rdx + rax]
add r10d, 0xd593f221
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r10b, 0x19
mov byte [rsp + rax + 0x30], r10b
movzx r9d, r10b
not rcx
add rcx, rax
sub rcx, r9
mov rax, rcx
jmp 0x140081900
lea r8, [rcx + 5]
mov bpl, 0xfc
mov r15, rbx
cmp r12, r8
jne 0x140081b50
add r15d, eax
lea r8d, [r15 + rdx]
and r15d, edx
add r15d, r15d
sub r8d, r15d
add r8b, bpl
lea r9d, [rax + 0x3876dcdb]
lea r11d, [rax + rdx]
add r11d, 0x3876dcdb
and r9d, edx
add r9d, r9d
sub r11d, r9d
add r11b, r8b
add r11b, 3
mov byte [rsp + rax + 0x30], r11b
movzx edx, r8b
not rdx
add rax, rdx
mov r12, r10
jmp 0x14008193e
cmp r12, r8
jne 0x140081b6f
lea ecx, [rax - 0x64a6386b]
lea r9d, [rdx + rax]
add r9d, 0x9b59c795
and ecx, edx
add ecx, ecx
sub r9d, ecx
add r9b, 0xed
mov byte [rsp + rax + 0x30], r9b
dec rax
mov rcx, r8
jmp 0x14008193e
lea r8, [rcx + 6]
cmp r12, r8
je 0x1400818fd
lea rdx, [rcx + 9]
cmp r12, rdx
je 0x140081934
jmp 0x1400818e9
lea r15, [rcx + 2]
cmp r12, r15
je 0x140081b45
mov r14, rbx
lea rbx, [rcx + 3]
mov bpl, 0x77
movabs r15, 0x1b4d2a2a2c6b5def
cmp r12, rbx
mov rbx, r14
je 0x140081ad3
lea rbx, [rcx + 5]
cmp r12, rbx
jne 0x140081bdf
lea r9d, [rax - 0x36778ccb]
lea r8d, [rax + rdx]
add r8d, 0xc9887335
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x8d
mov rbx, r14
jmp 0x140081b0d
lea r9, [rcx + 5]
cmp r12, r9
je 0x140081b24
mov byte [rsp + rax + 0x30], r11b
jmp 0x14008193e
cmp r12, r13
jne 0x140081bef
mov r8, rcx
mov rbx, r14
jmp 0x140081900
lea r10, [rcx + 6]
cmp r12, r10
mov rbx, r14
je 0x140081934
jmp 0x140081a68
cmp byte [0x140186c34], 1
jne 0x140081c3f
movdqa xmm0, xmmword [0x140186c20]
paddb xmm0, xmmword [0x140109040]
pxor xmm0, xmmword [0x140109050]
movdqa xmm1, xmmword [0x140186c30]
paddb xmm1, xmmword [0x140109060]
pxor xmm1, xmmword [0x140109070]
jmp 0x140081c6e
movaps xmm0, xmmword [str.Process_not_foun0]
movaps xmmword [0x140186c20], xmm0
mov dword [0x140186c30], 0x203a64
mov byte [0x140186c34], 1
movdqa xmm1, xmmword [0x140109020]
movdqa xmm0, xmmword [0x140109030]
movdqa xmmword [rsp + 0x30], xmm0
movd dword [rsp + 0x40], xmm1
pxor xmm0, xmm0
movdqu xmmword [rsp + 0x44], xmm0
mov qword [rsp + 0x54], 0
lea rdi, [rsp + 0x30]
call fcn.140085530
mov rbx, qword [rax]
call fcn.140085540
mov rcx, qword [rax]
xor eax, eax
jmp 0x140081cc7
mov ebx, 1
nop dword [rax + rax]
movzx edx, r8b
add rax, rcx
add rax, rdx
inc rax
cmp rax, 0x2c
jae 0x140081f62
cmp rbx, rax
ja 0x140081f50
movzx r8d, byte [rsp + rax + 0x30]
movzx edx, r8b
lea r9, [rcx + 1]
cmp rbx, r9
jae 0x140081d30
cmp rcx, rax
ja 0x140081f5a
lea r10, [rbx + rcx]
cmp r10, rax
jbe 0x140081dc0
lea r10, [rcx + 0xa]
cmp rbx, r10
je 0x140081e69
lea r10, [rcx + 0x10]
cmp rbx, r10
je 0x140081d43
lea r9, [rcx + 0x2a]
cmp rbx, r9
je 0x140081d7a
lea rdx, [rcx + 6]
cmp rbx, rdx
je 0x140081cb0
jmp 0x140081c92
je 0x140081cb0
lea r10, [rcx + 2]
cmp rbx, r10
jne 0x140081e33
lea r8d, [rax - 0xa486622]
lea r10d, [rdx + rax]
add r10d, 0xf5b799de
and r8d, edx
add r8d, r8d
sub r10d, r8d
add r10b, 0xee
mov byte [rsp + rax + 0x30], r10b
movzx r8d, r10b
not rcx
add rcx, rax
sub rcx, r8
mov rax, rcx
mov rcx, r9
lea r8d, [rax - 0xf29f908]
lea r9d, [rax + rdx]
add r9d, 0xf0d606f8
and r8d, edx
add r8d, r8d
sub r9d, r8d
add r9b, 0x38
mov byte [rsp + rax + 0x30], r9b
sub rax, rbx
inc rbx
movzx r8d, byte [rsp + rax + 0x2e]
add rax, 0xfffffffffffffffe
jmp 0x140081cb0
lea r10, [rcx + 4]
cmp rbx, r10
jbe 0x140081e0b
lea r11d, [rax - 0x29c000ce]
lea r10d, [rax + rdx]
add r10d, 0xd63fff32
and r11d, edx
add r11d, r11d
sub r10d, r11d
add r10b, 0xa2
cmp rbx, 1
ja 0x140081ef8
cmp rbx, r9
je 0x140081ca6
cmp rcx, 0x27
ja 0x140081e10
mov byte [rsp + rax + 0x30], r10b
jmp 0x140081cba
cmp rbx, r9
jne 0x140081e60
lea ecx, [rax + 0x93de576]
lea r8d, [rax + rdx]
add r8d, 0x93de576
and ecx, edx
add ecx, ecx
sub r8d, ecx
add r8b, 0xc6
mov byte [rsp + rax + 0x30], r8b
jmp 0x140081e6c
lea r10, [rcx + 5]
cmp rbx, r10
jne 0x140081e77
lea r9d, [rax - 0x35b14fe2]
lea r8d, [rax + rdx]
add r8d, 0xca4eb01e
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x2e
jmp 0x140081f41
lea r10, [rcx + 2]
cmp rbx, r10
jne 0x140081ea5
mov r9, rcx
dec rax
mov rcx, r9
jmp 0x140081cba
lea r10, [rcx + 6]
cmp rbx, r10
jne 0x140081ce3
lea r9d, [rax - 0x3f7475ae]
lea r8d, [rax + rdx]
add r8d, 0xc08b8a52
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0xc2
jmp 0x140081f1a
lea r10, [rcx + 3]
cmp rbx, r10
jne 0x140081ecf
lea r9d, [rax - 0x5a8fbdca]
lea r8d, [rax + rdx]
add r8d, 0xa5704236
and r9d, edx
add r9d, r9d
sub r8d, r9d
add r8b, 0x86
jmp 0x140081f41
lea r11d, [rax - 0x4e192e6]
lea r10d, [rax + rdx]
add r10d, 0xfb1e6d1a
and r11d, edx
add r11d, r11d
sub r10d, r11d
add r10b, 0x4a
cmp rbx, 1
jbe 0x140081df2
lea r9d, [rax + 0x45c5290]
lea r10d, [rax + rdx]
add r10d, 0x45c5290
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r8b, r10b
add r8b, 0x10
lea r9d, [rax - 0x854056]
lea r10d, [rdx + rax]
add r10d, 0xff7abfaa
and r9d, edx
add r9d, r9d
sub r10d, r9d
add r10b, r8b
add r10b, 0x5a
mov byte [rsp + rax + 0x30], r10b
add rbx, rcx
movzx edx, r8b
not rdx
jmp 0x140081cb7
lea rdi, [rsp + 0x8fbac2]
jmp 0x140081f62
lea rdi, [rsp + 0x1714da8]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov rdx, rdi
call fcn.14005c480
mov rcx, rax
mov rdx, rsi
call fcn.14005c480
mov rsi, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rsi
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
mov rcx, rsi
mov edx, eax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::put_char____ptr64]
mov rcx, rsi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
jmp 0x140081ffa
lea rdi, [rsp + 0x113b057]
jmp 0x140081fb9
lea rdi, [rsp + 0x14525b4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov rdx, rdi
call fcn.14005c480
mov rdi, rax
mov rax, qword [rax]
movsxd rcx, dword [rax + 4]
add rcx, rdi
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_char___cdecl_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const___ptr64]
mov rcx, rdi
mov edx, eax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::put_char____ptr64]
mov rcx, rdi
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::flush_void____ptr64]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1400f0d70
nop
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret