Function at 0x1400915a4
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x848]
sub rsp, 0x920
mov rax, qword [0x14016a900]
xor rax, rsp
mov qword [rbp + 0x810], rax
mov rsi, rcx
mov qword [rsp + 0x60], rcx
mov ecx, 0x69
call fcn.140018fc8
mov rcx, qword [rsi]
call fcn.1400753f8
mov qword [rbp - 0x40], rax
xor edx, edx
movabs r8, 0x7fffffff7fffffff
mov rcx, qword [rsi]
call fcn.140094d38
and qword [rbp - 0x68], 0
xor r12d, r12d
mov qword [rbp - 0x60], r12
and qword [rbp - 0x58], r12
and qword [rbp - 0x50], r12
mov byte [rbp - 0x48], r12b
xor edi, edi
lea r15, [rsi + 0x120]
mov qword [rsp + 0x70], r15
lea r13d, [r12 + 1]
cmp qword [rsi + 0xd8], rdi
jbe 0x140091676
xor ebx, ebx
mov rcx, qword [rsi + 0xd0]
mov rax, qword [r15]
cmp qword [rcx + rbx], rax
jne 0x140091660
mov edx, dword [rcx + rbx + 8]
lea rcx, [rbp - 0x68]
call fcn.140092b34
add rdi, r13
add rbx, 0x10
cmp rdi, qword [rsi + 0xd8]
jb 0x140091643
mov r12, qword [rbp - 0x60]
jmp 0x14009167b
mov qword [rsp + 0x70], r15
mov eax, 0x818
mul r12
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.140105cf0
mov r14, rax
mov qword [rsp + 0x68], rax
lea r9, [0x1400928c0]
mov r8d, 0x20
mov rdx, qword [rsi + 0x88]
mov rcx, qword [rsi + 0x80]
call fcn.140116150
mov rdx, qword [rsi + 0xb0]
lea rcx, [rbp - 0x80]
call fcn.1400900f8
nop
xor r10d, r10d
cmp qword [rsi + 0xb0], r10
jbe 0x140091749
xor r9d, r9d
mov r14, qword [rbp - 0x80]
mov r8, qword [rsi + 0xa8]
mov rax, qword [r15]
cmp qword [r9 + r8], rax
jne 0x140091734
mov r8, qword [r9 + r8 + 8]
mov rdx, r8
shr rdx, 3
and rdx, qword [rbp - 0x70]
movzx ecx, byte [rdx + r14]
mov eax, r8d
and eax, 7
bts ecx, eax
mov byte [rdx + r14], cl
shr r8, 0x1e
mov rcx, r8
shr rcx, 3
and rcx, qword [rbp - 0x70]
movzx eax, byte [rcx + r14]
and r8d, 7
bts eax, r8d
mov byte [rcx + r14], al
add r10, r13
add r9, 0x28
cmp r10, qword [rsi + 0xb0]
jb 0x1400916e2
mov r14, qword [rsp + 0x68]
lea rcx, [rbp + 0x10]
call fcn.14006beac
xor edi, edi
mov dword [rsp + 0x4c], edi
mov r15d, 0x7fffffff
mov dword [rsp + 0x58], r15d
xor edx, edx
test r12, r12
je 0x1400917f9
xor eax, eax
mov rsi, qword [rbp - 0x68]
imul r10, rax, 0x818
mov ecx, dword [rsi + rax*4]
mov dword [r10 + r14], ecx
mov eax, ecx
cmp ecx, edi
cmovbe eax, edi
mov edi, eax
cmp ecx, r15d
cmovae ecx, r15d
mov r15d, ecx
mov byte [r10 + r14 + 0x810], 0
xor r8d, r8d
lea r9, [r14 + 8]
add r9, r10
mov ebx, 0x100
movzx eax, r8b
mov rcx, qword [rbp + rax*8 + 0x10]
cmp dword [r10 + r14], 0
jbe 0x1400917d2
mov r11d, dword [r10 + r14]
movzx eax, cl
shr rcx, 8
xor rcx, qword [rbp + rax*8 + 0x10]
sub r11, r13
jne 0x1400917c1
mov qword [r9], rcx
add r8, r13
add r9, 8
sub rbx, r13
jne 0x1400917ad
add edx, r13d
mov eax, edx
cmp rax, r12
jb 0x140091774
mov dword [rsp + 0x4c], edi
mov dword [rsp + 0x58], r15d
mov rsi, qword [rsp + 0x60]
mov ebx, 0x400000
mov ecx, ebx
call fcn.140105cf0
mov r15, rax
mov qword [rsp + 0x78], rax
mov r9, qword [rsi]
mov rcx, qword [r9]
mov rax, qword [rcx + 0x20]
xor r8d, r8d
xor edx, edx
mov rcx, r9
call qword [case.0x140092c6b.0]
mov r9, qword [rsi]
mov rcx, qword [r9]
mov rax, qword [rcx + 0x18]
mov r8d, ebx
mov rdx, r15
mov rcx, r9
call qword [case.0x140092c6b.0]
movsxd r13, eax
mov qword [rsp + 0x30], r13
xor edi, edi
test r12, r12
je 0x14009188a
xor eax, eax
lea esi, [rdi + 1]
imul rbx, rax, 0x818
mov r8d, dword [rbx + r14]
cmp r13, r8
jb 0x14009187c
mov rdx, r15
xor ecx, ecx
call fcn.14006bd2c
mov qword [rbx + r14 + 0x808], rax
mov byte [rbx + r14 + 0x810], sil
add edi, esi
mov eax, edi
cmp rax, r12
jb 0x140091852
mov rsi, qword [rsp + 0x60]
and dword [rsp + 0x48], 0
and qword [rsp + 0x68], 0
xor edx, edx
mov qword [rsp + 0x40], rdx
xor edi, edi
mov ecx, dword [rsp + 0x4c]
mov qword [rsp + 0x38], rcx
jmp 0x1400918ae
mov r13, qword [rsp + 0x30]
lea rax, [rdi + 0x40]
cmp rax, r13
jae 0x1400919c4
cmp byte [rdi + r15], 0x7b
jne 0x1400919c4
cmp byte [rdi + r15 + 1], 0x52
jne 0x1400919c4
cmp byte [rdi + r15 + 2], 0x42
jne 0x1400919c4
cmp byte [rdi + r15 + 3], 0x7d
jne 0x1400919c4
mov eax, 1
cmp byte [rdi + r15 + 0x14], al
jne 0x1400919c4
mov ebx, dword [rdi + r15 + 0xc]
lea rax, [rbx + rcx]
add rax, rdi
cmp rax, r13
jae 0x1400919c4
mov rax, qword [rsp + 0x70]
mov rax, qword [rax]
mov qword [rbp - 0x10], rax
lea rax, [rdi + rdx]
mov qword [rbp], rax
lea rax, [0x1400928c0]
mov qword [rsp + 0x20], rax
mov r9d, 0x20
mov r8, qword [rsi + 0x88]
mov rdx, qword [rsi + 0x80]
lea rcx, [rbp - 0x10]
call fcn.1401167e4
test rax, rax
je 0x1400919c4
add rdi, rbx
xor r13d, r13d
test r12, r12
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
je 0x1400918a9
xor eax, eax
lea rcx, [rdi + r15]
mov r15, rcx
lea esi, [rax + 1]
imul rbx, rax, 0x818
mov r8d, dword [rbx + r14]
mov rdx, r15
xor ecx, ecx
call fcn.14006bd2c
mov qword [rbx + r14 + 0x808], rax
mov byte [rbx + r14 + 0x810], sil
add r13d, esi
mov eax, r13d
cmp rax, r12
jb 0x140091976
mov rsi, qword [rsp + 0x60]
mov r15, qword [rsp + 0x78]
mov r13, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
jmp 0x1400918ae
xor r10d, r10d
mov dword [rsp + 0x50], r10d
xor r13b, r13b
xor ebx, ebx
test r12, r12
je 0x140091bea
xor eax, eax
mov r15, qword [rsp + 0x68]
lea r8d, [r10 + 1]
imul r9, rax, 0x818
cmp byte [r9 + r14 + 0x810], 0
je 0x140091b61
mov r8, qword [r9 + r14 + 0x808]
mov qword [rbp - 0x30], r8
mov cl, r8b
and cl, 7
mov edx, 1
shl edx, cl
mov rax, r8
shr rax, 3
and rax, qword [rbp - 0x70]
mov r11, qword [rbp - 0x80]
test byte [rax + r11], dl
je 0x140091b5b
shr r8, 0x1e
mov cl, r8b
and cl, 7
mov edx, 1
shl edx, cl
shr r8, 3
and r8, qword [rbp - 0x70]
test byte [r8 + r11], dl
je 0x140091b5b
mov rax, qword [rsp + 0x70]
mov rax, qword [rax]
mov qword [rbp - 0x38], rax
mov eax, dword [r9 + r14]
mov dword [rbp - 0x18], eax
lea rax, [0x140092860]
mov qword [rsp + 0x20], rax
mov r9d, 0x28
mov r8, qword [rsi + 0xb0]
mov rdx, qword [rsi + 0xa8]
lea rcx, [rbp - 0x38]
call fcn.1401167e4
mov r8, rax
test rax, rax
je 0x140091b56
mov rdx, qword [rax + 0x18]
mov r11, qword [rax + 0x10]
mov rcx, r11
sub rcx, rdx
mov r10, rdx
sub r10, r11
cmp rdx, r11
cmovbe r10, rcx
mov r9, qword [rsp + 0x40]
add r9, rdi
mov rax, r11
sub rax, r9
mov rcx, r9
sub rcx, r11
cmp r9, r11
cmovbe rcx, rax
movabs rax, 0x7fffffff7fffffff
cmp rdx, rax
je 0x140091ae2
cmp rcx, r10
jae 0x140091b56
mov qword [r8 + 0x18], r9
mov r10d, dword [rbp - 0x18]
mov dword [rsp + 0x50], r10d
test r15, r15
je 0x140091b20
mov eax, dword [r15 + 0x20]
cmp eax, dword [r8 + 0x20]
jne 0x140091b20
mov rcx, qword [r15 + 0x18]
add rcx, rax
cmp rcx, r9
jne 0x140091b20
mov rcx, qword [r15 + 0x10]
add rcx, rax
cmp rcx, r11
jne 0x140091b20
mov r11d, dword [rsp + 0x48]
inc r11d
jmp 0x140091b23
xor r11d, r11d
mov dword [rsp + 0x48], r11d
xor edx, edx
mov eax, dword [rsp + 0x4c]
div dword [r8 + 0x20]
inc eax
mov ecx, 5
cmp eax, ecx
cmovb eax, ecx
movzx r13d, r13b
cmp r11d, eax
mov ecx, 1
cmova r13d, ecx
mov r15, r8
mov r8d, ecx
jmp 0x140091b61
mov r10d, dword [rsp + 0x50]
mov r8d, 1
add ebx, r8d
mov eax, ebx
cmp rax, r12
jb 0x1400919e5
mov qword [rsp + 0x68], r15
mov r15, qword [rsp + 0x78]
test r13b, r13b
je 0x140091bea
mov rdx, qword [rsp + 0x38]
mov r13, qword [rsp + 0x30]
test r10d, r10d
je 0x140091bf4
mov ecx, r10d
lea rax, [rcx + rdx]
add rax, rdi
cmp rax, r13
jae 0x140091bf4
cmp byte [rdi + r15], 0
je 0x140091bf4
add rdi, rcx
xor r13d, r13d
xor eax, eax
lea rcx, [rdi + r15]
mov r15, rcx
lea esi, [rax + 1]
imul rbx, rax, 0x818
mov r8d, dword [rbx + r14]
mov rdx, r15
xor ecx, ecx
call fcn.14006bd2c
mov qword [rbx + r14 + 0x808], rax
mov byte [rbx + r14 + 0x810], sil
add r13d, esi
mov eax, r13d
cmp rax, r12
jb 0x140091bb5
jmp 0x1400919a6
mov rdx, qword [rsp + 0x38]
mov r13, qword [rsp + 0x30]
lea rax, [rdx + rdi]
cmp rax, r13
jb 0x140091c6f
mov rbx, r13
sub rbx, rdi
cmp rbx, rdx
jne 0x140091c5f
call fcn.14009d7fc
lea rdx, [rdi + r15]
mov r8, rbx
mov rcx, r15
call fcn.140106ff0
xor edi, edi
sub r13, rbx
add qword [rsp + 0x40], r13
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov r8d, 0x400000
sub r8, rbx
lea rdx, [rbx + r15]
mov rax, qword [rax + 0x18]
call qword [case.0x140092c6b.0]
movsxd r13, eax
add r13, rbx
mov qword [rsp + 0x30], r13
mov r8, qword [rbp - 0x40]
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsi]
call fcn.140094d38
mov eax, dword [rsp + 0x58]
add rax, rdi
cmp rax, r13
jae 0x140091cef
xor r10d, r10d
test r12, r12
je 0x140091ce7
xor r8d, r8d
lea esi, [r10 + 1]
imul r9, r8, 0x818
mov r11d, dword [r9 + r14]
add r11, rdi
cmp r11, r13
jae 0x140091cce
mov rdx, qword [r9 + r14 + 0x808]
movzx ecx, byte [rdi + r15]
imul rax, r8, 0x103
add rcx, rax
movzx eax, byte [r11 + r15]
xor rax, rdx
movzx eax, al
mov rcx, qword [r14 + rcx*8 + 8]
xor rcx, qword [rbp + rax*8 + 0x10]
shr rdx, 8
xor rcx, rdx
mov qword [r9 + r14 + 0x808], rcx
jmp 0x140091cd7
mov byte [r9 + r14 + 0x810], 0
add r10d, esi
mov r8d, r10d
cmp r8, r12
jb 0x140091c7e
mov rsi, qword [rsp + 0x60]
inc rdi
jmp 0x1400919b5
mov rcx, r15
call fcn.1401058a8
mov rcx, r14
call fcn.1401058a8
mov edx, reloc.SHELL32.dll_SHRestricted
mov r8d, edx
mov rcx, qword [rsi]
call fcn.140094d38
nop
mov edx, 1
mov rcx, qword [rbp - 0x80]
call fcn.1401058a8
nop
mov rbx, qword [rbp - 0x68]
test rbx, rbx
je 0x140091d46
cmp byte [rbp - 0x48], 0
je 0x140091d3e
mov rdx, qword [rbp - 0x58]
shl rdx, 2
mov rcx, rbx
call fcn.14009a3b0
mov rcx, rbx
call fcn.140110e68
mov rcx, qword [rbp + 0x810]
xor rcx, rsp
call fcn.140105c50
lea r11, [rsp + 0x920]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret