Function at 0x14034aa50
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x148
lea rbp, [rsp + 0x80]
mov rbx, qword [rbp + 0x138]
mov edi, dword [rbp + 0x130]
mov rax, qword [0x14077ee28]
xor rax, rbp
mov qword [rbp + 0xc0], rax
mov eax, edi
and eax, 0xf
je 0x14034aaf9
mov r15, r8
mov r14, rdx
mov r13, rcx
cmp eax, 6
jbe 0x14034ab9a
cmp eax, 0xa
jae 0x14034abc9
cmp eax, 7
je 0x14034ad54
cmp eax, 9
jne 0x14034ad6e
sub rsp, 0x20
call fcn.140326ce0
add rsp, 0x20
mov rcx, qword [0x14074aa70]
mov edx, dword [0x14074aa60]
add eax, edx
add eax, 0xffff44c3
cdqe
add rax, rcx
sub rsp, 0x20
call qword [0x140704440]
add rsp, 0x20
xor r15d, r15d
jmp 0x14034b6f6
lea rcx, [rbp - 0x5c]
sub rsp, 0x20
xor r15d, r15d
mov r8d, 0x118
xor edx, edx
call fcn.1405c44a0
add rsp, 0x20
mov dword [rbp - 0x60], 0x11c
mov byte [rbp + 0xba], 1
sub rsp, 0x20
xor ecx, ecx
mov edx, 0x80
mov r8b, 1
call fcn.140326750
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
call fcn.140326cd0
add rsp, 0x20
mov rcx, qword [0x14074aba0]
mov edx, dword [0x14074ab80]
mov ebx, 0xffff00bd
sub ebx, eax
sub edx, ebx
movsxd rax, edx
add rax, rcx
sub rsp, 0x20
lea rcx, [rbp - 0x60]
mov edx, 0x80
mov r8, rsi
call qword [0x140704440]
add rsp, 0x20
test eax, eax
jne 0x14034b6f6
test dil, 0x10
jne 0x14034ad0f
xor r15d, r15d
jmp 0x14034b6f6
cmp eax, 2
jbe case.default.0x14034abb0
pop rdx
add eax, 0xfffffffd
lea rcx, [0x1405fa5fc]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
sub rsp, 0x20
mov rcx, r14
mov edx, r13d
mov r8, r15
call fcn.14059d7dc
jmp 0x14034b6ef
cmp eax, 0xb
jbe 0x14034ac39
cmp eax, 0xc
jne 0x14034ae20
cmp qword [0x140791628], 0
jne 0x14034b86e
movzx eax, byte [0x1407468f9]
cmp al, 0xb6
je 0x14034b744
jmp 0x14034b60c
cmp eax, 1
jne 0x14034ac66
cmp qword [0x140791590], 0
jne 0x14034b14d
movzx eax, byte [0x1407465f8]
cmp al, 0xef
je 0x14034b038
mov cl, 0xc1
nop dword [rax]
mov al, 0xf0
lock cmpxchg byte [0x1407465f8], cl
je 0x14034b018
cmp al, 0xef
jne 0x14034ac20
jmp 0x14034b038
cmp eax, 0xa
jne 0x14034ae65
movzx ecx, byte [0x140746332]
mov eax, 1
cmp cl, 0x2f
je 0x14034b5c9
test dil, 0x20
je 0x14034ab92
jmp 0x14034ad5d
mov rcx, r15
cmp r15, r13
je 0x14034b6f6
test dil, 0x20
jne 0x14034af41
mov eax, 1
mov ecx, 0x514177b6
mov edx, 0xaebe8858
mov r8d, 0x514177b7
mov r9d, 0xaebe8857
mov r10d, 0x88888889
lea r11, [0x140746850]
lea rbx, [0x1405f9fb0]
nop dword [rax + rax]
mov esi, r9d
imul rsi, r10
shr rsi, 0x23
lea esi, [rsi + rsi*4]
lea esi, [rsi + rsi*2]
add esi, r8d
movzx esi, byte [rsi + rbx]
xor sil, 0xf7
add byte [rax + r11 - 1], sil
cmp rax, 0xf
je 0x14034af85
mov esi, edx
imul rsi, r10
shr rsi, 0x23
lea esi, [rsi + rsi*4]
lea esi, [rsi + rsi*2]
add esi, ecx
mov esi, esi
movzx esi, byte [rsi + rbx]
xor sil, 0xf7
add byte [rax + r11], sil
add rax, 2
add ecx, 0xfffffffe
add edx, 2
add r8d, 0xfffffffe
add r9d, 2
jmp 0x14034acb0
mov qword [rbp - 0x60], 0
mov rcx, qword [0x14074ab90]
mov eax, dword [0x14074ab84]
sub eax, ebx
cdqe
add rax, rcx
sub rsp, 0x20
lea r8, [rbp - 0x60]
mov cx, 6
mov dx, 1
mov r9d, 0xe3065ad6
call qword [0x140704440]
add rsp, 0x20
movzx r15d, al
jmp 0x14034b6f6
cmp r13, rbx
je 0x14034aff9
test dil, 0x10
jne 0x14034af92
xor eax, eax
jmp 0x14034b5c9
cmp qword [0x140791578], 0
jne 0x14034b46c
movzx eax, byte [0x140746559]
cmp al, 0x58
je 0x14034b091
mov cl, 2
mov al, 0x26
lock cmpxchg byte [0x140746559], cl
je 0x14034b06a
invalid
test dil, 0x40
jne 0x14034b4c9
cmp al, 0x58
jne 0x14034ad8d
jmp 0x14034b091
cmp qword [0x140791608], 0
jne 0x14034b6df
movzx eax, byte [0x140746847]
cmp al, 0xd6
je 0x14034b661
mov cl, 0x83
mov al, 0xa5
lock cmpxchg byte [0x140746847], cl
or eax, 0x3fba6e
je 0x14034b626
cmp al, 0xd6
jne 0x14034adcf
jmp 0x14034b661
cmp eax, 0xd
ja 0x14034b001
mov r14, rsp
mov qword [rbp - 0x60], 0xffffffffffffffff
mov dword [rbp - 0x6c], 0
movzx eax, byte [0x140746416]
cmp al, 0x22
je 0x14034b1bb
mov cl, 0xe6
mov al, 0xb2
lock cmpxchg byte [0x140746416], cl
je 0x14034b18d
cmp al, 0x22
jne 0x14034ae4c
jmp 0x14034b1bb
sub rsp, 0x20
mov ecx, r14d
mov rdx, r9
mov edx, ecx
call fcn.14059d92c
add rsp, 0x20
movzx r15d, ax
jmp 0x14034b6f6
lea rcx, [rbp - 0x5c]
sub rsp, 0x20
xor r15d, r15d
mov r8d, 0x118
xor edx, edx
call fcn.1405c44a0
add rsp, 0x20
mov dword [rbp - 0x60], 0x11c
mov byte [rbp + 0xba], 1
sub rsp, 0x20
xor ecx, ecx
mov edx, 0x80
mov r8b, 1
call fcn.140326750
add rsp, 0x20
mov rsi, rax
sub rsp, 0x20
call fcn.140326cc0
add rsp, 0x20
mov rcx, qword [0x14074abc8]
mov edx, dword [0x14074abb0]
mov edi, 0xffffd82f
sub edi, eax
sub edx, edi
movsxd rax, edx
add rax, rcx
sub rsp, 0x20
lea rcx, [rbp - 0x60]
mov edx, 0x80
mov r8, rsi
call qword [0x140704440]
add rsp, 0x20
test eax, eax
jne 0x14034b6f6
mov qword [rbp - 0x60], 0
mov rcx, qword [0x14074abc0]
mov eax, dword [0x14074abb4]
sub eax, edi
cdqe
add rax, rcx
sub rsp, 0x20
lea r8, [rbp - 0x60]
mov cx, 6
mov dx, 2
jmp 0x14034ad3b
mov r15, rcx
nop word cs:[rax + rax]
movzx r8d, word [r15]
mov rax, qword [rbx]
mov rax, qword [rax + 0x20]
sub rsp, 0x20
mov rcx, rbx
mov edx, r14d
call qword [0x140704440]
add rsp, 0x20
test al, al
je 0x14034b6f6
add r15, 2
cmp r15, r13
jne 0x14034af50
jmp 0x14034b6f6
mov al, 0xf8
xchg byte [0x14074685f], al
jmp 0x14034b684
add r14, 0x30
lea rsi, [rbp - 0x78]
lea r12, [rbp - 0x66]
mov rax, r13
lea r13, [rbp - 0x60]
mov rdi, r15
mov r15, rax
jmp 0x14034afc3
mov word [rdi], cx
inc r15
add rdi, 2
cmp r15, rbx
je 0x14034b6f6
movzx eax, byte [r15]
mov byte [rbp - 0x66], al
mov qword [rbp - 0x60], 0
sub rsp, 0x20
mov rcx, rsi
mov rdx, r12
mov r8, r13
mov r9, r14
call fcn.140326420
add rsp, 0x20
mov cx, 0xffff
test eax, eax
js 0x14034afb0
movzx ecx, word [rbp - 0x78]
jmp 0x14034afb0
mov r15, r13
jmp 0x14034b6f6
sub rsp, 0x20
mov rcx, r15
mov rdx, r14
mov r8, r9
call fcn.140351050
jmp 0x14034ad47
movq xmm0, qword [0x1407465f0]
paddb xmm0, xmmword [0x1405f95d0]
movq qword [0x1407465f0], xmm0
mov al, 0xef
xchg byte [0x1407465f8], al
movzx eax, byte [0x14074660c]
cmp al, 0x72
je 0x14034b0ec
mov cl, 0xb5
nop dword [rax]
mov al, 0xf1
lock cmpxchg byte [0x14074660c], cl
je 0x14034b0bb
cmp al, 0x72
jne 0x14034b050
test dil, 0x20
jne 0x14034b0ec
movq xmm0, qword [0x140746550]
paddb xmm0, xmmword [0x1405f9610]
movq qword [0x140746550], xmm0
add byte [0x140746558], 0x1e
mov al, 0x58
xchg byte [0x140746559], al
movzx eax, byte [0x14074656b]
cmp al, 0x81
je 0x14034b411
mov cl, 0x27
mov al, 0xad
lock cmpxchg byte [0x14074656b], cl
je 0x14034b3dc
cmp al, 0x81
jne 0x14034b0a2
jmp 0x14034b411
movabs rax, 0xac27c53a10cfda89
xor qword [0x140746600], rax
movq xmm0, qword [0x140746608]
pxor xmm0, xmmword [0x1405f95e0]
movd dword [0x140746608], xmm0
mov al, 0x72
xchg byte [0x14074660c], al
mov rsi, r9
mov edi, dword [0x14074aef8]
sub rsp, 0x20
lea rcx, [0x1407465f0]
call sub.KERNEL32.dll_LoadLibraryA
add rsp, 0x20
test rax, rax
je 0x14034b141
mov ecx, 0x85da450f
xor rcx, rdi
sub rsp, 0x60
mov qword [rsp + 0x58], rcx
lea rcx, [0x140746600]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x30], 0x9c00e0ac
mov r8, rax
call fcn.1403481e0
add rsp, 0x60
jmp 0x14034b143
xor eax, eax
mov r9, rsi
mov qword [0x140791590], rax
sub rsp, 0x30
mov dword [rsp + 0x20], r9d
mov rcx, r15
mov edx, ebx
mov r8, r14
mov r9, r13
call qword [0x140791590]
add rsp, 0x30
mov rsi, rax
mov rcx, qword [rbp + 0xc0]
xor rcx, rbp
sub rsp, 0x20
call fcn.14059b6c0
add rsp, 0x20
mov rax, rsi
jmp 0x14034b710
movdqa xmm0, xmmword [0x140746410]
paddb xmm0, xmmword [0x1405f95f0]
movd dword [0x140746410], xmm0
add byte [0x140746414], 0x46
add byte [0x140746415], 0x64
mov al, 0x22
xchg byte [0x140746416], al
mov r12, r9
sub rsp, 0x20
lea rcx, [0x140746410]
lea r9, [rbp - 0x66]
mov r8d, 6
mov edx, 0x50be8400
call fcn.14034b8a0
add rsp, 0x20
mov qword [rbp - 0x78], 0
sub rsp, 0x40
mov dword [rsp + 0x28], 0xb95f268f
call fcn.1403496c0
lea rcx, [rbp - 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0xe5063d81
mov r9d, 8
xor ecx, ecx
call fcn.1403496c0
add rsp, 0x40
test eax, eax
je 0x14034b38e
mov rax, qword [rbp - 0x60]
sub rsp, 0x40
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0xa99ad768
xor r15d, r15d
lea r9, [rbp - 0x6c]
mov edx, 2
xor ecx, ecx
call fcn.1403496c0
add rsp, 0x40
test eax, eax
jne 0x14034b481
sub rsp, 0x20
call fcn.14025b540
add rsp, 0x20
cmp eax, 0x7a
jne 0x14034b47e
mov ecx, dword [rbp - 0x6c]
lea rax, [rcx + 0xf]
and rax, 0xfffffffffffffff0
call fcn.14059bfe0
sub rsp, rax
mov rbx, rsp
mov rax, qword [rbp - 0x60]
sub rsp, 0x40
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0xa99ad768
lea r9, [rbp - 0x6c]
mov edx, 2
mov rcx, rbx
call fcn.1403496c0
add rsp, 0x40
test eax, eax
je 0x14034b47e
sub rsp, 0x60
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x48], 0x220
mov qword [rsp + 0x40], 2
mov qword [rsp + 0x38], 0x20
mov dword [rsp + 0x30], 0x86799901
mov qword [rsp + 0x28], 0
xor r15d, r15d
lea rcx, [rbp - 0x66]
xor edx, edx
xor r8d, r8d
xor r9d, r9d
call fcn.1403481e0
add rsp, 0x60
test eax, eax
je 0x14034b481
cmp dword [rbx], 0
je 0x14034b386
mov r15, r13
mov r13, rbx
add r13, 0x10
xor esi, esi
mov rdx, qword [rbp - 0x78]
mov rax, qword [r13 - 8]
sub rsp, 0x40
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xc53fce12
call fcn.1403496c0
add rsp, 0x40
test eax, eax
jne 0x14034b5d1
inc rsi
mov eax, dword [rbx]
add r13, 0x10
cmp rsi, rax
jb 0x14034b345
test dil, 0x10
mov r13, r15
jne 0x14034b3dc
xor r15d, r15d
jmp 0x14034b5e9
sub rsp, 0x20
call fcn.14025b540
add rsp, 0x20
cmp eax, 0x3f0
jne 0x14034b3d4
sub rsp, 0x30
mov dword [rsp + 0x20], 0xe7f053c
call fcn.14034aa50
add rsp, 0x10
lea r8, [rbp - 0x60]
mov rcx, rax
mov edx, 8
call fcn.1402f2490
add rsp, 0x20
test eax, eax
jne 0x14034b229
xor r15d, r15d
jmp 0x14034b49a
movq xmm0, qword [0x140746560]
paddb xmm0, xmmword [0x1405f9620]
movq qword [0x140746560], xmm0
add byte [0x140746568], 0xa
add byte [0x140746569], 0xc
add byte [0x14074656a], 4
mov al, 0x81
xchg byte [0x14074656b], al
mov esi, dword [0x14074aef8]
sub rsp, 0x20
lea rcx, [0x140746550]
call sub.KERNEL32.dll_LoadLibraryA
add rsp, 0x20
test rax, rax
je 0x14034b463
mov ecx, 0x85da450f
xor rcx, rsi
sub rsp, 0x60
mov qword [rsp + 0x58], rcx
lea rcx, [0x140746560]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x30], 0x9c00e0ac
mov r8, rax
call fcn.1403481e0
add rsp, 0x60
jmp 0x14034b465
xor eax, eax
mov qword [0x140791578], rax
sub rsp, 0x20
mov rcx, r13
call qword [0x140791578]
jmp 0x14034b5c5
xor r15d, r15d
mov r9, qword [rbp - 0x60]
sub rsp, 0x40
mov dword [rsp + 0x28], 0xf0cc05ac
call fcn.1403496c0
add rsp, 0x40
mov rsp, r14
jmp 0x14034b6f6
cmp al, 0xf
je 0x14034b557
mov cl, 0x76
mov al, 0x59
lock cmpxchg byte [0x1407467e4], cl
jne 0x14034b4c9
mov ecx, 0x38c93f62
xor r8d, r8d
movabs r9, 0xe38e38e38e38e38f
lea r10, [0x1405f9f70]
lea r11, [0x1407467d0]
mov rax, rcx
mul r9
shr rdx, 3
and rdx, 0xfffffffffffffffe
lea rax, [rdx + rdx*8]
mov rdx, r10
sub rdx, rax
movzx eax, byte [r8 + r11]
movzx esi, byte [r8 + r11 + 1]
xor al, byte [rdx + r8 + 0x38c93f62]
xor al, 6
mov byte [r8 + r11], al
xor sil, byte [rdx + r8 + 0x38c93f63]
xor sil, 6
mov byte [r8 + r11 + 1], sil
add r8, 2
add rcx, 2
cmp r8, 0x14
jne 0x14034b4ff
mov al, 0xf
xchg byte [0x1407467e4], al
mov esi, dword [0x14074aef8]
sub rsp, 0x20
lea rcx, [0x1407467c0]
call sub.KERNEL32.dll_LoadLibraryA
add rsp, 0x20
test rax, rax
je 0x14034b5a9
mov ecx, 0x85da450f
xor rcx, rsi
sub rsp, 0x60
mov qword [rsp + 0x58], rcx
lea rcx, [0x1407467d0]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x30], 0x9c00e0ac
mov r8, rax
call fcn.1403481e0
add rsp, 0x60
jmp 0x14034b5ab
xor eax, eax
mov qword [0x1407915f0], rax
sub rsp, 0x20
mov rcx, r13
mov edx, r15d
mov r8d, ebx
call qword [0x1407915f0]
add rsp, 0x20
mov r15, rax
jmp 0x14034b6f6
mov r15d, 1
test r12b, 1
je 0x14034b5e9
mov r15d, dword [r13]
shr r15d, 2
and r15d, 1
mov rax, qword [rbp - 0x78]
sub rsp, 0x40
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], 0xe3b778e3
call fcn.1403496c0
add rsp, 0x40
jmp 0x14034b481
mov cl, 0x14
mov al, 0x21
lock cmpxchg byte [0x1407468f9], cl
je 0x14034b724
cmp al, 0xb6
je 0x14034b744
test dil, 0x10
jne 0x14034b60c
movdqa xmm0, xmmword [0x140746840]
paddb xmm0, xmmword [0x1405f9600]
movd dword [0x140746840], xmm0
add byte [0x140746844], 0x31
add byte [0x140746845], 0xe
add byte [0x140746846], 0x21
mov al, 0xd6
xchg byte [0x140746847], al
movzx eax, byte [0x14074685f]
cmp al, 0xf8
je 0x14034b684
xor ecx, ecx
mov dl, 0xfc
mov al, 0x88
lock cmpxchg byte [0x14074685f], dl
je 0x14034ac72
cmp al, 0xf8
jne 0x14034b670
mov esi, dword [0x14074aef8]
sub rsp, 0x20
lea rcx, [0x140746840]
call sub.KERNEL32.dll_LoadLibraryA
add rsp, 0x20
test rax, rax
je 0x14034b6d6
mov ecx, 0x85da450f
xor rcx, rsi
sub rsp, 0x60
mov qword [rsp + 0x58], rcx
lea rcx, [0x140746850]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x30], 0x9c00e0ac
mov r8, rax
call fcn.1403481e0
add rsp, 0x60
jmp 0x14034b6d8
xor eax, eax
mov qword [0x140791608], rax
sub rsp, 0x20
mov rcx, r13
mov edx, r15d
call qword [0x140791608]
add rsp, 0x20
mov r15d, eax
mov rcx, qword [rbp + 0xc0]
xor rcx, rbp
sub rsp, 0x20
call fcn.14059b6c0
add rsp, 0x20
mov rax, r15
lea rsp, [rbp + 0xc8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
movabs rax, 0x5ab2f3c55bbf435a
xor qword [0x1407468f0], rax
xor byte [0x1407468f8], 0x43
mov al, 0xb6
xchg byte [0x1407468f9], al
movzx eax, byte [0x140746912]
cmp al, 0xa0
je 0x14034b813
mov cl, 0xbc
mov al, 0x65
lock cmpxchg byte [0x140746912], cl
je 0x14034b76a
cmp al, 0xa0
jne 0x14034b755
jmp 0x14034b813
mov eax, 0x4655e9d2
mov ecx, 0xb9aa1640
mov edx, 1
mov r8d, 0x4655e9d3
mov r9d, 0xb9aa163f
mov r10d, 0xaf286bcb
lea r11, [0x140746900]
lea rsi, [0x1405fa020]
mov edi, ecx
imul rdi, r10
shr rdi, 0x20
mov ebx, ecx
sub ebx, edi
shr ebx, 1
add ebx, edi
shr ebx, 4
lea edi, [rbx + rbx*8]
lea edi, [rbx + rdi*2]
add edi, eax
mov ebx, r9d
imul rbx, r10
shr rbx, 0x20
mov r14d, r9d
sub r14d, ebx
shr r14d, 1
add r14d, ebx
shr r14d, 4
lea ebx, [r14 + r14*8]
lea ebx, [r14 + rbx*2]
add ebx, r8d
movzx ebx, byte [rbx + rsi]
xor bl, 8
add byte [rdx + r11 - 1], bl
movzx ebx, byte [rdi + rsi]
xor bl, 8
add byte [rdx + r11], bl
add eax, 0xfffffffe
add ecx, 2
add rdx, 2
add r8d, 0xfffffffe
add r9d, 2
cmp rdx, 0x13
jne 0x14034b799
mov al, 0xa0
xchg byte [0x140746912], al
mov esi, dword [0x14074aef8]
sub rsp, 0x20
lea rcx, [0x1407468f0]
call sub.KERNEL32.dll_LoadLibraryA
add rsp, 0x20
test rax, rax
je 0x14034b865
mov ecx, 0x85da450f
xor rcx, rsi
sub rsp, 0x60
mov qword [rsp + 0x58], rcx
lea rcx, [0x140746900]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x30], 0x9c00e0ac
mov r8, rax
call fcn.1403481e0
add rsp, 0x60
jmp 0x14034b867
xor eax, eax
mov qword [0x140791628], rax
mov rcx, qword [rbp + 0xc0]
xor rcx, rbp
sub rsp, 0x20
call fcn.14059b6c0
nop
lea rsp, [rbp + 0xc8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
jmp qword [0x140791628]