Function at 0x140084ab0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
sub rsp, 0x80
xor r12d, r12d
lea rax, [0x1400a9fc8]
mov rdi, rcx
mov qword [rcx], rax
mov dword [rcx + 0x278], r12d
mov qword [rcx + 0x6c8], r12
mov dword [rcx + 0x6fc], 0x20
mov qword [rcx + 0x6f0], r12
mov dword [rcx + 0x700], r12d
mov dword [rcx + 0x6f8], r12d
mov dword [rcx + 0x718], r12d
mov qword [rcx + 0x708], r12
mov dword [rcx + 0x710], r12d
mov dword [rcx + 0x71c], 0x100
mov dword [rcx + 0x714], r12d
mov qword [rcx + 0x728], r12
mov dword [rcx + 0x730], r12d
mov dword [rcx + 0x738], r12d
lea rax, [0x1400b0d98]
mov qword [rcx + 0x720], rax
mov qword [rcx + 0x790], r12
lea rax, [0x1400a96c0]
mov qword [rcx + 0x778], rax
xor eax, eax
mov dword [rcx + 0x798], eax
mov dword [rcx + 0x79c], eax
mov dword [rcx + 0x7a0], eax
mov dword [rcx + 0x7a4], eax
mov word [rcx + 0x13d4], ax
mov dword [rcx + 0x33d4], 1
mov dword [rcx + 0x33d8], 1
mov dword [rcx + 0x780], 0x72
mov dword [rcx + 0x13c8], r12d
mov dword [rcx + 0x13cc], r12d
mov ecx, 0x2a6c
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
test rax, rax
mov rbp, rax
je 0x140084c54
lea rsi, [rax + 0x10]
lea rbx, [rax + 0x21a]
lea rdx, str.GoogleChromeUser_Data
mov dword [rsi + 0x418], r12d
mov word [rsi + 0x41c], r12w
mov word [rsi + 0x626], r12w
mov dword [rsi + 0x828], r12d
mov word [rsi + 0x82c], r12w
lea rcx, [rsp + 0x20]
mov r8, rbx
mov word [rax + 0xa64], r12w
mov dword [rax + 0x2a64], 1
mov dword [rax + 0x2a68], 1
call fcn.1400a1640
sub rsi, rbx
nop
nop
nop
movzx eax, word [rbx]
add rbx, 2
test ax, ax
mov word [rsi + rbx - 2], ax
jne 0x140084c30
mov dword [rbp + 0xa60], 1
mov qword [0x1400c4850], rbp
jmp 0x140084c57
mov rbp, r12
mov ecx, 0x438
mov qword [rdi + 0x6d0], rbp
call sub.msvcrt.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
test rax, rax
mov rbx, rax
je 0x140084cd7
mov rcx, rax
call fcn.14008add0
mov dword [rbx + 0x3d0], r12d
lea rax, [0x1400a9190]
mov qword [rbx], rax
lea rax, [0x1400a92a0]
mov qword [rbx + 0x3c8], rax
mov dword [rbx + 0x420], 0x400
mov dword [rbx + 0x424], 0x100
mov dword [rbx + 0x400], r12d
mov dword [rbx + 0x404], r12d
mov qword [rbx + 0x410], r12
mov qword [rbx + 0x418], r12
mov dword [rbx + 0x428], r12d
mov dword [rbx + 0x408], r12d
jmp 0x140084cda
mov rbx, r12
mov qword [rdi + 0x6d8], rbx
mov dword [rdi + 0x2b0], r12d
mov rcx, qword [rdi + 0x6c8]
test rcx, rcx
je 0x140084d01
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [rdi + 0x6c8], r12
xor edx, edx
lea rcx, [rsp + 0x20]
lea r8d, [rdx + 0x5c]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x24], r12d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x2c], r12d
mov byte [rsp + 0x36], r12b
mov byte [rsp + 0x37], 1
mov byte [rsp + 0x38], r12b
mov byte [rsp + 0x39], r12b
mov byte [rsp + 0x3a], r12b
mov byte [rsp + 0x3b], r12b
mov dword [rsp + 0x20], InitCommonControls
mov dword [rsp + 0x30], 0x2bc
mov byte [rsp + 0x34], r12b
mov byte [rsp + 0x35], r12b
mov rcx, r12
lea rbp, [0x140000000]
nop
nop
nop
nop
movzx eax, word [rcx + rbp + 0xa9e18]
add rcx, 2
test ax, ax
mov word [rsp + rcx + 0x3a], ax
jne 0x140084d70
lea rcx, [rsp + 0x20]
call qword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov ebx, r12d
mov qword [rdi + 0x6c8], rax
mov word [rdi + 0x4c6], bx
movzx eax, byte [0x1400c0c20]
test al, al
je 0x140084df3
nop
xor al, 0x42
lea rdx, [rsp + 0xa0]
mov r8d, 1
movzx ecx, al
mov eax, 0xf2
sub ax, bx
xor cx, ax
mov word [rsp + 0xa0], cx
lea rcx, [rdi + 0x4c6]
call sub.msvcrt.dll_wcsncat
add ebx, 1
movsxd rax, ebx
mov al, byte [rax + rbp + 0xc0c20]
test al, al
jne 0x140084db0
xor ecx, ecx
mov dword [rdi + 0x2b0], r12d
mov dword [rdi + 0x2b8], r12d
mov dword [rdi + 0x2b4], r12d
mov qword [rdi + 0x2a8], r12
mov dword [rdi + 0x6e0], r12d
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, 0x65
mov rcx, rax
call qword [sym.imp.USER32.dll_LoadIconW]
lea rdx, [0x1400a8980]
lea r8, [rdi + 8]
sub r8, rdx
nop
nop
movzx ecx, word [rdx]
add rdx, 2
test cx, cx
mov word [r8 + rdx - 2], cx
jne 0x140084e40
lea r11, [rsp + 0x80]
mov qword [rdi + 0x208], rax
mov rax, rdi
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r12
pop rdi
pop rsi
ret