Function at 0x1400d3100
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x20
cmp dword [0x1401fef14], 0
mov rbx, rcx
je 0x1400cc16c
add rsp, 0x20
pop rbx
jmp 0x1400d3100
mov ecx, dword [rcx]
call sym.winvnc.exe_crc32_z
mov dword [rbx], eax
add rsp, 0x20
pop rbx
ret
push rbx
push rsi
push rdi
sub rsp, 0x80
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm7
movaps xmmword [rsp + 0x50], xmm8
movaps xmmword [rsp + 0x40], xmm9
mov rax, qword [0x1401f0010]
xor rax, rsp
mov qword [rsp + 0x30], rax
lea rsi, [0x1401befe0]
mov rbx, r8
mov rdi, rcx
movdqu xmm8, xmmword [rcx]
movdqu xmm9, xmmword [rcx + 0x10]
movdqu xmm7, xmmword [rcx + 0x20]
movdqu xmm6, xmmword [rcx + 0x30]
movdqu xmm5, xmmword [rcx + 0x40]
cmp r8, 0x10
jae 0x1400d3183
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
test rbx, rbx
je 0x1400d3494
lea rcx, [rsp + 0x20]
call fcn.140134230
movdqa xmm5, xmmword [rsp + 0x20]
jmp 0x1400d33ec
mov eax, edx
neg eax
and eax, 0xf
je 0x1400d3228
movdqu xmm5, xmmword [rdx]
add rdx, rax
sub rbx, rax
movdqa xmm2, xmmword [0x1401d5bb0]
movdqa xmm0, xmm9
movdqa xmm3, xmm8
add rax, rax
movdqu xmm1, xmmword [rsi + rax*8 - 0x10]
pshufb xmm0, xmm1
pxor xmm2, xmm1
pshufb xmm5, xmm1
pshufb xmm3, xmm1
pshufb xmm8, xmm2
pshufb xmm9, xmm2
por xmm8, xmm0
movdqa xmm0, xmm7
pshufb xmm0, xmm1
pshufb xmm7, xmm2
por xmm9, xmm0
movdqa xmm0, xmm6
pshufb xmm6, xmm2
pshufb xmm0, xmm1
por xmm6, xmm5
movdqa xmm1, xmm3
pclmulqdq xmm1, xmmword [0x1401d5ac0], 0x10
por xmm7, xmm0
movdqa xmm0, xmm6
movdqa xmm6, xmm3
pclmulqdq xmm6, xmmword [0x1401d5ac0], 1
xorps xmm6, xmm0
xorps xmm6, xmm1
mov rax, rbx
shr rax, 6
test rax, rax
je 0x1400d32b1
movdqa xmm1, xmmword [0x1401d5ac0]
nop dword [rax]
movdqa xmm0, xmm8
pclmulqdq xmm0, xmm1, 1
pclmulqdq xmm8, xmm1, 0x10
xorps xmm8, xmm0
movdqa xmm0, xmm9
pxor xmm8, xmmword [rdx]
pclmulqdq xmm0, xmm1, 1
pclmulqdq xmm9, xmm1, 0x10
xorps xmm9, xmm0
movdqa xmm0, xmm7
pxor xmm9, xmmword [rdx + 0x10]
pclmulqdq xmm0, xmm1, 1
pclmulqdq xmm7, xmm1, 0x10
xorps xmm7, xmm0
movdqa xmm0, xmm6
pxor xmm7, xmmword [rdx + 0x20]
pclmulqdq xmm6, xmm1, 0x10
pclmulqdq xmm0, xmm1, 1
xorps xmm6, xmm0
pxor xmm6, xmmword [rdx + 0x30]
add rdx, 0x40
sub rax, 1
jne 0x1400d3240
and ebx, 0x3f
cmp rbx, 0x30
jb 0x1400d332e
movdqa xmm0, xmmword [0x1401d5ac0]
movdqa xmm1, xmm6
movdqa xmm6, xmm7
pclmulqdq xmm7, xmm0, 1
pclmulqdq xmm6, xmm0, 0x10
xorps xmm6, xmm7
movdqa xmm7, xmm9
pxor xmm6, xmmword [rdx + 0x20]
pclmulqdq xmm9, xmm0, 1
pclmulqdq xmm7, xmm0, 0x10
xorps xmm7, xmm9
movdqa xmm9, xmm8
pxor xmm7, xmmword [rdx + 0x10]
pclmulqdq xmm9, xmm0, 0x10
pclmulqdq xmm8, xmm0, 1
xorps xmm9, xmm8
movdqa xmm8, xmm1
pxor xmm9, xmmword [rdx]
sub rbx, 0x30
je 0x1400d347a
movdqu xmm5, xmmword [rdx + 0x30]
jmp 0x1400d33ec
cmp rbx, 0x20
jb 0x1400d3394
movdqa xmm0, xmmword [0x1401d5ac0]
movdqa xmm2, xmm6
movdqa xmm1, xmm7
movdqa xmm6, xmm9
movdqa xmm7, xmm8
pclmulqdq xmm6, xmm0, 0x10
pclmulqdq xmm7, xmm0, 0x10
pclmulqdq xmm9, xmm0, 1
xorps xmm6, xmm9
movdqa xmm9, xmm2
pxor xmm6, xmmword [rdx + 0x10]
pclmulqdq xmm8, xmm0, 1
xorps xmm7, xmm8
movdqa xmm8, xmm1
pxor xmm7, xmmword [rdx]
sub rbx, 0x20
je 0x1400d347a
movdqu xmm5, xmmword [rdx + 0x20]
jmp 0x1400d33ec
cmp rbx, 0x10
jb 0x1400d33df
movdqa xmm1, xmm6
movdqa xmm6, xmm8
pclmulqdq xmm6, xmmword [0x1401d5ac0], 0x10
pclmulqdq xmm8, xmmword [0x1401d5ac0], 1
xorps xmm6, xmm8
movdqa xmm8, xmm9
pxor xmm6, xmmword [rdx]
movdqa xmm9, xmm7
movdqa xmm7, xmm1
sub rbx, 0x10
je 0x1400d347a
movdqu xmm5, xmmword [rdx + 0x10]
jmp 0x1400d33ec
test rbx, rbx
je 0x1400d347a
movdqu xmm5, xmmword [rdx]
movdqa xmm2, xmmword [0x1401d5bb0]
movdqa xmm0, xmm9
movdqa xmm3, xmm8
add rbx, rbx
movdqu xmm1, xmmword [rsi + rbx*8 - 0x10]
pshufb xmm0, xmm1
pxor xmm2, xmm1
pshufb xmm5, xmm1
pshufb xmm3, xmm1
pshufb xmm8, xmm2
pshufb xmm9, xmm2
por xmm8, xmm0
movdqa xmm0, xmm7
pshufb xmm0, xmm1
pshufb xmm7, xmm2
por xmm9, xmm0
movdqa xmm0, xmm6
pshufb xmm6, xmm2
pshufb xmm0, xmm1
por xmm6, xmm5
movdqa xmm1, xmm3
pclmulqdq xmm1, xmmword [0x1401d5ac0], 0x10
por xmm7, xmm0
movdqa xmm0, xmm6
movdqa xmm6, xmm3
pclmulqdq xmm6, xmmword [0x1401d5ac0], 1
xorps xmm6, xmm0
xorps xmm6, xmm1
movdqu xmmword [rdi], xmm8
movdqu xmmword [rdi + 0x10], xmm9
movdqu xmmword [rdi + 0x20], xmm7
movdqu xmmword [rdi + 0x30], xmm6
movdqu xmmword [rdi + 0x40], xmm5
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.140131ef0
movaps xmm6, xmmword [rsp + 0x70]
movaps xmm7, xmmword [rsp + 0x60]
movaps xmm8, xmmword [rsp + 0x50]
movaps xmm9, xmmword [rsp + 0x40]
add rsp, 0x80
pop rdi
pop rsi
pop rbx
ret