Function at 0x140330970
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
mov r9, qword [rcx + 0x18]
mov rax, r9
inc rax
je 0x1403311d2
mov rbp, rdx
mov rsi, qword [rcx + 8]
lea rbx, [rsi + 1]
mov rdx, rbx
shr rdx, 3
mov r8, rbx
and r8, 0xfffffffffffffff8
sub r8, rdx
cmp rsi, 8
cmovb r8, rsi
mov rdx, r8
shr rdx, 1
cmp rax, rdx
jbe 0x1403309ea
invalid
inc r8
cmp rax, r8
cmova r8, rax
cmp r8, 8
mov qword [rsp + 0x40], r9
jae 0x140330a1b
mov r13, rcx
xor eax, eax
cmp r8, 4
setae al
lea rdi, [rax*4 + 4]
jmp 0x140330a62
mov qword [rsp + 0x30], rcx
mov rdi, qword [rcx]
mov rcx, rbx
shr rcx, 4
xor eax, eax
test bl, 0xf
setne al
add rax, rcx
je 0x140330d71
cmp rax, 1
jne 0x140330d07
xor edx, edx
jmp 0x140330d57
mov rax, r8
shr rax, 0x3d
jne 0x1403311d2
mov r13, rcx
shl r8, 3
movabs rdx, 0x2492492492492493
mov rax, r8
mul rdx
sub r8, rdx
shr r8, 1
add r8, rdx
shr r8, 2
dec r8
bsr rcx, r8
not ecx
mov rdi, 0xffffffffffffffff
dec dword [rax - 0x2d]
out dx, eax
inc rdi
mov ecx, 0x18
mov rax, rdi
mul rcx
jo 0x1403311d2
mov r12, rax
add r12, 0xf
and r12, 0xfffffffffffffff0
lea r14, [rdi + 0x10]
mov r15, r12
add r15, r14
jb 0x1403311d2
movabs rax, 0x7ffffffffffffff1
cmp r15, rax
jae 0x1403311d2
mov qword [rsp + 0x28], rbp
test r15, r15
mov qword [rsp + 0x68], rbx
je 0x140330ad1
movzx eax, byte [0x14043f240]
xor ecx, ecx
mov rdx, r15
call fcn.1401d3670
mov rbp, rax
test rax, rax
jne 0x140330ad6
mov rcx, r15
call fcn.140052bf0
mov ebp, 0x10
lea rbx, [rdi - 1]
mov rax, rdi
shr rax, 3
mov rcx, rdi
and rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rdi, 9
cmovb rcx, rbx
mov qword [rsp + 0x38], rcx
lea r15, [rbp + r12]
mov rcx, r15
mov dl, 0xff
mov r8, r14
call sub.VCRUNTIME140.dll_memset
mov r9, qword [r13]
mov rax, qword [rsp + 0x40]
test rax, rax
je 0x140330ca0
mov qword [rsp + 0x30], r13
lea rcx, [r12 + rbp]
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x50], rcx
movdqa xmm0, xmmword [r9]
pmovmskb r13d, xmm0
not r13d
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rcx]
mov qword [rsp + 0x60], rdx
mov rcx, qword [rcx + 8]
mov qword [rsp + 0x28], rcx
lea rcx, [r9 - 0x18]
mov qword [rsp + 0x58], rcx
xor ebp, ebp
mov r12, rax
mov rdi, r9
mov qword [rsp + 0x48], r9
jmp 0x140330bcb
lea ecx, [r13 - 1]
and ecx, r13d
dec r12
shr rax, 0x39
lea r8, [rdx - 0x10]
and r8, rbx
mov byte [r15 + rdx], al
mov byte [r15 + r8 + 0x10], al
shl r14, 3
lea rax, [r14 + r14*2]
mov r8, qword [rsp + 0x58]
sub r8, rax
shl rdx, 3
lea rax, [rdx + rdx*2]
mov rdx, qword [rsp + 0x50]
sub rdx, rax
mov rax, qword [r8 + 0x10]
mov qword [rdx + 0x10], rax
movdqu xmm0, xmmword [r8]
movdqu xmmword [rdx], xmm0
mov r13d, ecx
test r12, r12
je 0x140330c94
test r13w, r13w
jne 0x140330bfe
nop word cs:[rax + rax]
movdqa xmm0, xmmword [rdi + 0x10]
add rdi, 0x10
pmovmskb r13d, xmm0
add rbp, 0x10
cmp r13d, 0xffff
je 0x140330be0
not r13d
tzcnt r14d, r13d
add r14, rbp
mov rax, r14
neg rax
lea rax, [rax + rax*2]
mov r8, qword [r9 + rax*8 - 0x18]
mov r9, qword [r9 + rax*8 - 0x10]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x28]
call fcn.140105a50
mov rcx, rax
and rcx, rbx
movdqu xmm0, xmmword [r15 + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x140330c68
mov r8d, 0x10
nop word cs:[rax + rax]
add rcx, r8
and rcx, rbx
movdqu xmm0, xmmword [r15 + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x140330c50
mov r9, qword [rsp + 0x48]
tzcnt edx, edx
add rdx, rcx
and rdx, rbx
cmp byte [r15 + rdx], 0
js 0x140330b70
movdqa xmm0, xmmword [r15]
pmovmskb ecx, xmm0
tzcnt edx, ecx
bsf edx, ecx
jmp 0x140330b70
mov r13, qword [rsp + 0x30]
mov rax, qword [rsp + 0x40]
jmp 0x140330ca2
xor eax, eax
mov rcx, qword [rsp + 0x38]
sub rcx, rax
mov qword [r13], r15
mov qword [r13 + 8], rbx
mov qword [r13 + 0x10], rcx
test rsi, rsi
je 0x1403311c1
mov ecx, 0x18
mov rax, qword [rsp + 0x68]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add rsi, rax
cmp rsi, 0xffffffffffffffef
je 0x1403311c1
loopne 0x140330ce3
add byte [rax], al
sub r9, rax
mov rcx, qword [0x14043f190]
xor edx, edx
mov r8, r9
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.kernel32.dll_HeapFree]
movabs rcx, 0x1ffffffffffffffe
and rcx, rax
xor r8d, r8d
movdqa xmm0, xmmword [0x14033aaa0]
nop
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rdi + r8]
por xmm1, xmm0
movdqa xmmword [rdi + r8], xmm1
lea rdx, [r8 + 0x20]
push rax
and byte [rsi + 0xf], ah
out dx, eax
leave
pcmpgtb xmm1, xmmword [rdi + r8 + 0x10]
por xmm1, xmm0
movdqa xmmword [rdi + r8 + 0x10], xmm1
mov r8, rdx
add rcx, 0xfffffffffffffffe
jne 0x140330d20
test al, 1
je 0x140330d71
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rdi + rdx]
por xmm0, xmmword [0x14033aaa0]
movdqa xmmword [rdi + rdx], xmm0
cmp rbx, 0x10
jae 0x140330d97
lea rcx, [rdi + 0x10]
mov rdx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memmove
test rbx, rbx
jne case.0x14008a597.2308
xor eax, eax
mov r8, qword [rsp + 0x30]
jmp 0x1403311b9
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rdi + rbx], xmm0
mov rax, qword [rbp]
mov rbp, qword [rbp + 8]
movabs r13, 0x736f6d6570736575
xor r13, rax
movabs rcx, 0x646f72616e646f6d
xor rcx, rbp
add r13, rcx
rol rcx, 0xd
xor rcx, r13
rol r13, 0x20
movabs rdx, 0x6c7967656e657261
jb 0x140330e3a
outsb dx, byte [rsi]
jns 0x140330e46
mov qword [rsp + 0x28], rcx
rol rcx, 0x11
mov qword [rsp + 0x48], rcx
xor rdx, rax
mov qword [rsp + 0x58], rdx
xor r10d, r10d
mov qword [rsp + 0x70], rsi
jmp 0x140330e23
shr rax, 0x39
lea rcx, [r10 - 0x10]
and rcx, rsi
mov byte [rdi + r10], al
mov byte [rdi + rcx + 0x10], al
lea rax, [r10 + 1]
cmp r10, rsi
mov r10, rax
je 0x140331196
cmp byte [rdi + r10], 0x80
jne 0x140330e13
lea rax, [r10*8]
lea rax, [rax + rax*2]
mov rcx, rdi
sub rcx, rax
mov qword [rsp + 0x40], rcx
neg rax
add rax, rdi
add rax, 0xffffffffffffffe8
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x50], r10
mov rax, r10
neg rax
lea rax, [rax + rax*2]
lea rax, [rdi + rax*8]
mov qword [rsp + 0x60], rax
nop dword [rax + rax]
mov rax, qword [rsp + 0x60]
mov r10, qword [rax - 0x18]
mov rbx, qword [rax - 0x10]
add r10, 0x10
mov rdx, rbp
xor rdx, rbx
movabs rax, 0x7465646279746573
xor rdx, rax
mov rax, qword [rsp + 0x58]
lea r14, [rax + rdx]
rol rdx, 0x10
xor rdx, r14
add r14, qword [rsp + 0x28]
mov r15, r14
rol r15, 0x20
lea r12, [rdx + r13]
xor r14, qword [rsp + 0x48]
rol rdx, 0x15
xor rdx, r12
xor r12, rbx
mov rax, rbx
xor r9d, r9d
and rax, 0xfffffffffffffff8
je 0x140330f13
nop
add r12, r14
rol r14, 0xd
mov rcx, qword [r10 + r9]
xor r14, r12
rol r12, 0x20
xor rdx, rcx
add r15, rdx
rol rdx, 0x10
xor rdx, r15
add r12, rdx
rol rdx, 0x15
add r15, r14
rol r14, 0x11
xor r14, r15
rol r15, 0x20
xor rdx, r12
xor r12, rcx
add r9, 8
cmp r9, rax
jb 0x140330ed0
mov r8d, ebx
and r8d, 7
cmp r8d, 4
jb 0x140330f40
mov r11d, dword [r10 + r9]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, r8
jb 0x140330f51
jmp 0x140330f7c
xor r11d, r11d
xor eax, eax
ror byte [rax - 0x77], 0xc1
or rcx, 1
cmp rcx, r8
jae 0x140330f7c
lea rcx, [r10 + rax]
mov rsi, r13
mov r13, rbp
movzx ebp, word [r9 + rcx]
lea ecx, [rax*8]
shl rbp, cl
or r11, rbp
mov rbp, r13
mov r13, rsi
mov rsi, qword [rsp + 0x70]
or rax, 2
cmp rax, r8
jae 0x140330f94
add r9, rax
movzx r8d, byte [r10 + r9]
shl eax, 3
mov ecx, eax
shl r8, cl
or r11, r8
mov r10, qword [rsp + 0x50]
shl rbx, 0x38
movabs rax, 0x800000000000000
add rbx, rax
add r12, r14
rol r14, 0xd
or rbx, r11
xor r14, r12
rol r12, 0x20
xor rdx, rbx
add r15, rdx
rol rdx, 0x10
xor rdx, r15
add r12, rdx
rol rdx, 0x15
add r15, r14
rol r14, 0x11
xor rdx, r12
xor r14, r15
rol r15, 0x20
xor r12, rbx
add r12, r14
rol r14, 0xd
xor r14, r12
rol r12, 0x20
xor r15, 0xff
add r15, rdx
rol rdx, 0x10
xor rdx, r15
add r12, rdx
rol rdx, 0x15
add r15, r14
rol r14, 0x11
xor r14, r15
rol r15, 0x20
xor rdx, r12
add r12, r14
rol r14, 0xd
xor r14, r12
rol r12, 0x20
add r15, rdx
rol rdx, 0x10
xor rdx, r15
add r12, rdx
rol rdx, 0x15
add r15, r14
rol r14, 0x11
xor r14, r15
rol r15, 0x20
xor rdx, r12
add r12, r14
rol r14, 0xd
add r15, rdx
rol rdx, 0x10
xor rdx, r15
rol rdx, 0x15
xor r14, r12
add r15, r14
rol r14, 0x11
mov rax, r15
rol rax, 0x20
xor rax, r14
xor rax, rdx
xor rax, r15
mov rcx, rsi
and rcx, rax
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
mov r8, rcx
test edx, edx
jne 0x1403310b8
mov r9d, 0x10
mov r8, rcx
nop dword [rax + rax]
add r8, r9
and r8, rsi
movdqu xmm0, xmmword [rdi + r8]
pmovmskb edx, xmm0
add r9, 0x10
test edx, edx
je 0x1403310a0
tzcnt edx, edx
add rdx, r8
and rdx, rsi
cmp byte [rdi + rdx], 0
js 0x1403310d4
movdqa xmm0, xmmword [rdi]
pmovmskb edx, xmm0
tzcnt edx, edx
mov r8, r10
sub r8, rcx
mov r9, rdx
sub r9, rcx
xor r9, r8
and r9, rsi
cmp r9, 0x10
jb 0x140330e00
lea rcx, [rdx*8]
lea rcx, [rcx + rcx*2]
movzx r8d, byte [rdi + rdx]
shr rax, 0x39
lea r9, [rdx - 0x10]
and r9, rsi
mov byte [rdi + rdx], al
mov byte [rdi + r9 + 0x10], al
cmp r8b, 0xff
je 0x140331160
mov rax, rdi
sub rax, rcx
mov r8, qword [rsp + 0x40]
mov rcx, qword [r8 - 0x18]
mov rdx, qword [rax - 0x18]
mov qword [r8 - 0x18], rdx
mov qword [rax - 0x18], rcx
mov rcx, qword [r8 - 0x10]
mov rdx, qword [rax - 0x10]
mov qword [r8 - 0x10], rdx
mov qword [rax - 0x10], rcx
mov rcx, qword [r8 - 8]
mov rdx, qword [rax - 8]
mov qword [r8 - 8], rdx
mov qword [rax - 8], rcx
jmp 0x140330e70
neg rcx
lea rax, [rdi + rcx]
add rax, 0xffffffffffffffe8
lea rcx, [r10 - 0x10]
and rcx, rsi
mov byte [rdi + r10], 0xff
mov byte [rdi + rcx + 0x10], 0xff
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rdx + 0x10]
mov qword [rax + 0x10], rcx
movdqu xmm0, xmmword [rdx]
movdqu xmmword [rax], xmm0
jmp 0x140330e13
mov r8, qword [rsp + 0x30]
mov rcx, qword [r8 + 8]
lea rax, [rcx + 1]
mov rdx, rax
shr rdx, 3
and rax, 0xfffffffffffffff8
sub rax, rdx
cmp rcx, 8
cmovb rax, rcx
sub rax, qword [r8 + 0x18]
mov qword [r8 + 0x10], rax
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140052bb0
int3