Function at 0x140084e30
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xb440]
mov eax, 0xb540
call fcn.1400f0b10
sub rsp, rax
mov qword [rbp + 0x30], 0xfffffffffffffffe
mov qword [rsp + 0xb578], rbx
mov qword [rsp + 0xb580], rsi
mov qword [rsp + 0xb588], rdi
mov rax, qword [0x1401412b0]
xor rax, rsp
mov qword [rbp + 0xb430], rax
mov rsi, rcx
lea rdx, [rsp + 0x40]
call fcn.140084db0
cmp eax, 3
jne 0x1400859ce
mov rdx, qword [rsi + 0x22c8]
lea rcx, [rbp + 0x250]
call fcn.14004e5e8
nop
xor r9d, r9d
lea r8d, [r9 + 2]
lea rdx, [rbp + 0x250]
mov rcx, rsi
call fcn.140081f08
test al, al
jne 0x140084ecc
xor r14d, r14d
jmp 0x1400859bf
mov ecx, SHRestricted
call fcn.140015d90
mov qword [rbp + 0x20], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov qword [rbp + 0x28], rax
lea rdx, [0x140116638]
mov rcx, rsi
call fcn.140055c04
mov r14d, 1
test rax, rax
je 0x140084f6f
cmp byte [rsi + 0x7f90], 0
jne 0x140084f6f
xor edx, edx
lea rcx, [rbp - 0x30]
call fcn.14007bc50
nop
mov r8, qword [rsi + 0x68b0]
mov rdx, qword [rsi + 0x68a8]
lea rcx, [rbp - 0x30]
call fcn.14007bfbc
lea r8d, [r14 + 7]
lea rdx, [rbp + 0x9220]
lea rcx, [rbp - 0x30]
call fcn.14007bdac
lea rcx, [rbp - 0x30]
call fcn.14007bd34
mov r13d, eax
lea rcx, [rbp - 0x30]
call fcn.14007bd7c
mov r15, rax
mov qword [rsp + 0x60], rax
mov dil, r14b
lea rcx, [rbp - 0x30]
call fcn.140004154
jmp 0x14008528c
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsi + 0x7f88]
mov rcx, rsi
call qword [rax + 0x20]
mov edx, 0x78
mov rcx, rsi
call fcn.140055ac4
test rax, rax
je 0x140084fb9
cmp byte [rsi + 0x7f90], 0
jne 0x140084fb9
movzx r13d, word [rsi + 0x7bde]
mov r15d, dword [rsi + 0x7be0]
mov qword [rsp + 0x60], r15
xor dil, dil
jmp 0x14008528c
cmp byte [rsp + 0x40], 0
je 0x140084ffa
cmp byte [rsi + 0x7f84], 0
je 0x140084ffa
mov ecx, 0x65
call fcn.140015d90
lea rdx, [rsi + 0x26]
mov ecx, 0x41
call fcn.140012e40
mov edx, 0xa
lea rcx, [0x14017f1b0]
call fcn.140062400
xor r14d, r14d
jmp 0x1400859a1
and qword [rsp + 0x50], 0
and qword [rsi + 0x7f68], 0
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov rax, qword [rsi]
mov r8d, 0x2000
lea rdx, [rbp + 0x9430]
mov rcx, rsi
call qword [rax + 0x18]
mov ecx, eax
mov r13d, dword [rsp + 0x4c]
mov r15, qword [rsp + 0x68]
mov dil, byte [rsp + 0x40]
test eax, eax
je 0x140085260
mov byte [rsp + 0x40], dil
xor eax, eax
mov dword [rsp + 0x44], eax
lea r12d, [rcx - 0x32]
mov dword [rsp + 0x48], r12d
test r12d, r12d
jle 0x140085226
lea r12, [rbp + 0x9432]
mov ecx, dword [rsp + 0x48]
cmp byte [r12], 0x7a
jne 0x1400850b7
mov rax, qword [r12 + 0x20]
cmp rax, qword [str.Protect]
jne 0x1400850b3
movzx ebx, byte [r12 - 1]
movzx edi, byte [r12 - 2]
mov r8d, 0x34
mov rdx, r12
or ecx, 0xffffffff
call fcn.14005dce0
mov edx, ebx
shl edx, 8
add edx, edi
not edx
xor eax, edx
movzx eax, ax
test eax, eax
je 0x14008511d
jmp 0x1400850fe
mov eax, dword [rsp + 0x44]
cmp byte [r12], 0x78
jne 0x140085106
mov rax, qword [r12 + 0x10]
cmp rax, qword [str.Protect_]
jne 0x140085102
movzx ecx, byte [r12 - 1]
shl ecx, 8
movzx eax, byte [r12 - 2]
add ecx, eax
not ecx
movzx ebx, cx
mov r8d, 0x18
mov rdx, r12
or ecx, 0xffffffff
call fcn.14005dce0
movzx ecx, ax
cmp ebx, ecx
je 0x1400851c6
mov ecx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x44]
add eax, r14d
mov dword [rsp + 0x44], eax
add r12, r14
cmp eax, ecx
jge 0x140085221
jmp 0x14008506d
movzx r13d, byte [r12 + 0x2b]
shl r13d, 8
movzx eax, byte [r12 + 0x2a]
add r13d, eax
shl r13d, 8
movzx eax, byte [r12 + 0x29]
add r13d, eax
shl r13d, 8
movzx eax, byte [r12 + 0x28]
add r13d, eax
movzx ecx, byte [r12 + 0x33]
shl rcx, 8
movzx eax, byte [r12 + 0x32]
add rcx, rax
shl rcx, 8
movzx eax, byte [r12 + 0x31]
add rcx, rax
shl rcx, 8
movzx eax, byte [r12 + 0x30]
add rcx, rax
movzx r15d, byte [r12 + 0x2f]
shl r15, 8
movzx eax, byte [r12 + 0x2e]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0x2d]
add r15, rax
shl r15, 8
shl rcx, 0x20
add r15, rcx
movzx eax, byte [r12 + 0x2c]
add r15, rax
movsxd rax, dword [rsp + 0x44]
add rax, qword [rsp + 0x50]
mov qword [rsi + 0x7f68], rax
mov dil, r14b
mov byte [rsp + 0x40], r14b
jmp 0x140085226
movzx r13d, byte [r12 + 0xb]
shl r13d, 8
movzx eax, byte [r12 + 0xa]
add r13d, eax
movzx r15d, byte [r12 + 0xf]
shl r15, 8
movzx eax, byte [r12 + 0xe]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0xd]
add r15, rax
shl r15, 8
movzx eax, byte [r12 + 0xc]
add r15, rax
movsxd rax, dword [rsp + 0x44]
add rax, qword [rsp + 0x50]
mov qword [rsi + 0x7f68], rax
xor dil, dil
mov byte [rsp + 0x40], dil
jmp 0x140085226
mov dil, byte [rsp + 0x40]
add qword [rsp + 0x50], 0x1fce
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsp + 0x50]
mov rcx, rsi
call qword [rax + 0x20]
mov rax, qword [rsi]
mov r8d, 0x2000
lea rdx, [rbp + 0x9430]
mov rcx, rsi
call qword [rax + 0x18]
mov ecx, eax
test eax, eax
jne 0x14008504a
mov qword [rsp + 0x60], r15
cmp qword [rsi + 0x7f68], 0
jne 0x14008528c
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov ecx, 0x65
call fcn.140015d90
jmp 0x1400859a1
mov ecx, reloc.SHELL32.dll_SHRestricted
call fcn.140015d90
mov rbx, qword [rsi + 0x7f68]
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x78], rbx
xor r12d, r12d
neg dil
sbb ecx, ecx
and ecx, 0x1c
add ecx, 0x1a
xor edi, edi
cmp byte [rsi + 0x7f84], dil
je 0x1400852cf
mov eax, ecx
not eax
add eax, r14d
and eax, 0xf
add eax, 8
add ecx, eax
mov eax, ecx
add rax, rbx
mov qword [rsp + 0x70], rax
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], rdi
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x40], rdi
mov byte [rbp - 0x38], dil
mov qword [rbp - 0x80], rdi
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
mov qword [rbp - 0x68], rdi
mov byte [rbp - 0x60], dil
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], r15
mov dword [rsp + 0x20], r13d
mov r9, rax
lea r8, [rbp - 0x80]
lea rdx, [rbp - 0x58]
mov rcx, rsi
call fcn.140082fcc
mov edx, r13d
shl edx, 9
lea rcx, [rbp - 0x30]
call fcn.140004080
nop
mov r8, qword [rbp - 0x28]
xor edx, edx
mov rcx, qword [rbp - 0x30]
call fcn.1400f1d90
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov ecx, SHRestricted
call fcn.140015d90
xor edx, edx
movabs r8, 0x7fffffff7fffffff
mov rcx, rsi
call fcn.140085ad0
mov dword [rsp + 0x4c], edi
test rbx, rbx
jle 0x140085447
mov r15d, edi
call fcn.14008dda0
mov rdx, qword [rsp + 0x78]
sub rdx, rbx
mov r8, qword [rsp + 0x78]
mov rcx, rsi
call fcn.140085ad0
mov edi, r15d
cmp rdi, qword [rbp - 0x50]
jae 0x1400853db
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rcx, qword [rbp - 0x58]
cmp rax, qword [rcx + rdi*8]
jl 0x1400853db
mov rax, qword [rsi]
mov rcx, qword [rbp - 0x80]
movsxd rdx, dword [rcx + rdi*4]
mov r8d, r14d
mov rcx, rsi
call qword [rax + 0x20]
mov rcx, qword [rbp - 0x80]
movsxd rax, dword [rcx + rdi*4]
sub rbx, rax
mov qword [rsp + 0x50], rbx
add r15d, r14d
mov byte [rsp + 0x20], r14b
lea r9, [rsp + 0x50]
mov r8d, 0x200
lea rdx, [rbp + 0x9230]
mov rcx, rsi
call fcn.140083ac0
mov ecx, r12d
shl ecx, 9
add rcx, qword [rbp - 0x30]
xor edi, edi
mov edx, edi
lea r8, [rbp + 0x9230]
sub r8, rcx
mov al, byte [r8 + rcx]
xor byte [rcx], al
add edx, r14d
add rcx, r14
cmp edx, 0x200
jb 0x140085412
lea eax, [r12 + 1]
cmp eax, r13d
sbb r12d, r12d
and r12d, eax
mov rbx, qword [rsp + 0x50]
test rbx, rbx
jg 0x14008537e
mov r15, qword [rsp + 0x60]
mov edx, reloc.SHELL32.dll_SHRestricted
mov r8d, edx
mov rcx, rsi
call fcn.140085ad0
mov rax, qword [rsi]
mov rcx, qword [rsp + 0x70]
lea rdx, [rcx + r15*2]
xor r8d, r8d
mov rcx, rsi
call qword [rax + 0x20]
test r13d, r13d
je 0x1400854b5
mov rbx, qword [rbp - 0x30]
lea rdi, [rbp + 0x9230]
sub rdi, rbx
mov r15d, r13d
mov r12d, 0x200
mov rax, qword [rsi]
mov r8, r12
lea rdx, [rbp + 0x9230]
mov rcx, rsi
call qword [rax + 0x18]
mov rcx, r12
mov al, byte [rdi + rbx]
xor byte [rbx], al
add rbx, r14
sub rcx, r14
jne 0x14008549e
sub rdi, r12
sub r15, r14
jne 0x140085488
xor edi, edi
mov rax, qword [rsi]
xor r8d, r8d
xor edx, edx
mov rcx, rsi
call qword [rax + 0x20]
mov r15, qword [rsp + 0x78]
mov rbx, r15
mov qword [rsp + 0x50], rbx
mov r12d, edi
mov dword [rsp + 0x48], edi
or edi, 0xffffffff
mov dword [rsp + 0x44], edi
and dword [rsp + 0x4c], 0
lea rdx, [rbp + 0x276]
mov ecx, SHRestricted
call fcn.140012e40
xor edx, edx
movabs r8, 0x7fffffff7fffffff
mov rcx, rsi
call fcn.140085ad0
and dword [rsp + 0x60], 0
test r15, r15
jle 0x1400858fd
call fcn.14008dda0
mov rdx, r15
sub rdx, rbx
mov r8, r15
mov rcx, rsi
call fcn.140085ad0
mov r15d, dword [rsp + 0x60]
cmp r15, qword [rbp - 0x50]
jae 0x140085573
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rcx, qword [rbp - 0x58]
cmp rax, qword [rcx + r15*8]
jl 0x140085573
mov rax, qword [rsi]
mov rcx, qword [rbp - 0x80]
movsxd rdx, dword [rcx + r15*4]
mov r8d, r14d
mov rcx, rsi
call qword [rax + 0x20]
mov rcx, qword [rbp - 0x80]
movsxd rax, dword [rcx + r15*4]
sub rbx, rax
mov qword [rsp + 0x50], rbx
add dword [rsp + 0x60], r14d
mov byte [rsp + 0x20], r14b
lea r9, [rsp + 0x50]
mov ebx, 0x200
mov r8d, ebx
lea rdx, [rbp + 0x9230]
mov rcx, rsi
call fcn.140083ac0
mov eax, eax
mov qword [rbp + 0x9220], rax
mov r8d, eax
lea rdx, [rbp + 0x9230]
lea rcx, [rbp + 0x250]
call fcn.140067768
mov r8d, ebx
lea rdx, [rbp + 0x9230]
or ecx, 0xffffffff
call fcn.14005dce0
movzx r15d, ax
mov qword [rbp + 0x38], rsi
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x28]
mov rbx, rax
mov qword [rbp + 0x40], rax
mov r9, qword [rsi]
xor r8d, r8d
mov rdx, qword [rsp + 0x70]
mov rcx, rsi
call qword [r9 + 0x20]
mov rcx, rsi
call fcn.1400670b4
movzx eax, al
mov dword [rsp + 0x58], eax
mov rcx, rsi
call fcn.1400670b4
movzx ecx, al
shl ecx, 8
add dword [rsp + 0x58], ecx
add qword [rsp + 0x70], 2
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x30]
test al, al
je 0x140085632
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, rbx
mov rcx, rsi
call qword [rax + 0x20]
mov ebx, dword [rsp + 0x58]
cmp ebx, r15d
jne 0x140085652
mov r9b, r14b
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.140085a2c
jmp 0x1400858d2
lea rax, [rbp + 0x50]
lea rcx, [rbp + 0x9230]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x140085666
mov r15d, dword [rsp + 0x4c]
shl r15d, 9
add r15, qword [rbp - 0x30]
lea rcx, [rbp + 0x9230]
lea rax, [rbp + 0x9230]
sub r15, rax
mov al, byte [r15 + rcx]
xor byte [rcx], al
add edx, r14d
add rcx, r14
mov eax, 0x200
cmp edx, eax
jb 0x1400856ce
mov r8d, eax
lea rdx, [rbp + 0x9230]
or ecx, 0xffffffff
call fcn.14005dce0
movzx ecx, ax
cmp ebx, ecx
je 0x14008586c
mov ebx, 0x40
lea rax, [rbp + 0x9270]
mov qword [rsp + 0x68], rax
lea rax, [rbp + 0x9230]
lea rcx, [rbp + 0x50]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x140085725
test ebx, ebx
jle 0x14008578a
lea rcx, [rbp + 0x9230]
mov edx, ebx
mov al, byte [rcx + r15]
xor byte [rcx], al
add rcx, r14
sub rdx, r14
jne 0x14008577c
mov r8d, 0x200
lea rdx, [rbp + 0x9230]
or ecx, 0xffffffff
call fcn.14005dce0
movzx ecx, ax
cmp dword [rsp + 0x58], ecx
je 0x14008586c
lea rax, [rbp + 0x9230]
lea rcx, [rbp + 0x50]
mov edx, 4
lea r8d, [rdx + 0x7c]
movups xmm0, xmmword [rcx]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rax + 0x20], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rax + 0x30], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rax + 0x40], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rax + 0x50], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rax + 0x60], xmm0
add rax, r8
movups xmm1, xmmword [rcx + 0x70]
movups xmmword [rax - 0x10], xmm1
add rcx, r8
sub rdx, 1
jne 0x1400857c0
mov edx, ebx
mov r8d, 0x200
cmp ebx, r8d
jae 0x14008582d
mov rcx, qword [rsp + 0x68]
mov al, byte [rcx + r15]
xor byte [rcx], al
add edx, r14d
add rcx, r14
cmp edx, r8d
jb 0x14008581c
lea rdx, [rbp + 0x9230]
or ecx, 0xffffffff
call fcn.14005dce0
movzx ecx, ax
cmp dword [rsp + 0x58], ecx
je 0x14008586c
add ebx, 0x40
add qword [rsp + 0x68], 0x40
cmp ebx, 0x100
jl 0x140085711
add dword [rsp + 0x48], r14d
cmp edi, 0xffffffff
cmove edi, r12d
mov dword [rsp + 0x44], edi
jmp 0x1400858d6
mov r9b, r14b
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.140085a2c
lea edx, [r12 + 1]
xor r9d, r9d
lea r8, [rsp + 0x44]
mov ecx, r12d
call fcn.140085a2c
lea rcx, [rbp + 0x250]
call fcn.1400514e8
sub rax, qword [rbp + 0x9220]
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0x250]
call fcn.14005145c
mov r8, qword [rbp + 0x9220]
lea rdx, [rbp + 0x9230]
lea rcx, [rbp + 0x250]
call fcn.140067768
mov edi, dword [rsp + 0x44]
add r12d, r14d
mov eax, dword [rsp + 0x4c]
inc eax
cmp eax, r13d
sbb ecx, ecx
and ecx, eax
mov dword [rsp + 0x4c], ecx
mov rbx, qword [rsp + 0x50]
test rbx, rbx
mov r15, qword [rsp + 0x78]
jg 0x140085516
mov r9b, r14b
lea r8, [rsp + 0x44]
mov edx, r12d
mov ecx, edi
call fcn.140085a2c
mov eax, reloc.SHELL32.dll_SHRestricted
mov r8d, eax
mov edx, eax
mov rcx, rsi
call fcn.140085ad0
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, r15
mov rcx, rsi
call qword [rax + 0x20]
movabs r8, 0x7fffffff7fffffff
lea rdx, [rbp + 0x250]
mov rcx, rsi
call fcn.140066cb4
lea rcx, [rbp + 0x250]
call fcn.14006702c
test rax, rax
jle 0x140085977
lea rdx, [rbp + 0x276]
mov ecx, 0x8f
call fcn.140012e40
lea rcx, [rbp + 0x250]
call fcn.140066c4c
neg dword [rsp + 0x48]
sbb eax, eax
and eax, 2
mov r14d, eax
lea rcx, [rbp - 0x30]
call fcn.140004154
nop
lea rcx, [rbp - 0x80]
call fcn.140080eec
nop
lea rcx, [rbp - 0x58]
call fcn.14001a5bc
nop
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x30]
test al, al
je 0x1400859bf
mov rax, qword [rsi]
xor r8d, r8d
mov rdx, qword [rbp + 0x28]
mov rcx, rsi
call qword [rax + 0x20]
nop
lea rcx, [rbp + 0x250]
call fcn.14004e81c
mov eax, r14d
mov rcx, qword [rbp + 0xb430]
xor rcx, rsp
call fcn.1400f0b80
lea r11, [rsp + 0xb540]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret