Function at 0x7ff787351650
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x10], rdx
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xf0
call sub.kernel32.dll___chkstk
sub rsp, rax
xor esi, esi
mov rdi, r9
mov r15d, esi
mov r13, r8
mov r12, rdx
mov rbx, rcx
call fcn.7ff78721c550
mov rcx, rbx
mov qword [rsp + 0x70], rax
call fcn.7ff787249450
mov rcx, rax
mov r14, rax
call fcn.7ff787222490
mov rcx, rbx
mov qword [rsp + 0xd0], rax
call fcn.7ff7872029d0
mov rcx, r12
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x68], rsi
mov ebp, esi
mov qword [rsp + 0x78], rsi
mov qword [rsp + 0x60], rsi
call fcn.7ff787202b20
mov rcx, rbx
mov dword [rsp + 0x58], eax
mov qword [rsp + 0xa8], rsi
call fcn.7ff7871a02b0
mov rcx, rbx
mov qword [rsp + 0xe0], rax
mov r12, rax
call fcn.7ff78726d9d0
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xc0], rsi
cmp qword [rsp + 0x70], rsi
je 0x7ff787351f2e
cmp dword [rsp + 0x58], esi
jle 0x7ff787351f2e
mov rcx, r14
call fcn.7ff787350ce0
mov rbx, rax
test rax, rax
jne 0x7ff787351771
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0x94
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
lea ecx, [rsi + 0x35]
mov edx, 0xc0103
call fcn.7ff7872039c0
mov ebx, esi
jmp 0x7ff787351929
mov rcx, r14
call fcn.7ff78727eba0
mov rcx, r14
mov qword [rsp + 0x68], rax
call fcn.7ff78727eba0
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x68], rsi
je 0x7ff787351ef8
test rax, rax
je 0x7ff787351ef8
mov rcx, r12
call fcn.7ff787273990
mov r15, rax
test rax, rax
jne 0x7ff7873517e5
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0xa0
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
lea ecx, [r15 + 0x35]
mov edx, 0x80003
call fcn.7ff7872039c0
mov rbx, rsi
jmp 0x7ff787351929
mov rcx, r15
call fcn.7ff787273ab0
mov rcx, r15
call fcn.7ff787273790
mov rcx, r15
mov r12, rax
call fcn.7ff787273790
mov rcx, r15
mov qword [rsp + 0x98], rax
call fcn.7ff787273790
mov rcx, r15
mov qword [rsp + 0x88], rax
call fcn.7ff787273790
mov rcx, r15
mov qword [rsp + 0xa0], rax
call fcn.7ff787273790
mov qword [rsp + 0x80], rax
test rax, rax
jne 0x7ff787351873
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0xac
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
mov edx, 0x80003
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
mov rbx, rsi
jmp 0x7ff787351929
lea rcx, [rbx + rbx]
mov r8d, 0xb0
lea rdx, [0x7ff78742ad48]
call fcn.7ff7871fcf70
movsxd rcx, dword [rsp + 0x58]
lea rdx, [0x7ff78742ad48]
mov r8d, 0xb1
mov qword [rsp + 0x60], rax
call fcn.7ff7871fcf70
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x60], rsi
je 0x7ff787351f64
test rax, rax
je 0x7ff787351f64
mov rax, qword [rsp + 0x148]
xor edx, edx
mov rcx, qword [rsp + 0x140]
mov r8, qword [rax]
call sub.ntdll.dll_memset
mov rdx, qword [rsp + 0xd0]
mov r9, r15
xor r8d, r8d
mov rcx, r12
call fcn.7ff78731fe50
test eax, eax
jne 0x7ff7873519da
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0xb9
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
mov edx, 0xc0103
xor r8d, r8d
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
mov rbx, qword [rsp + 0x50]
mov rcx, qword [rsp + 0xa8]
call fcn.7ff78721c660
mov rcx, qword [rsp + 0xc8]
call fcn.7ff78721ad00
mov rcx, qword [rsp + 0xc0]
call fcn.7ff78721ad00
mov r8d, 0x104
lea rdx, [0x7ff78742ad48]
mov rcx, rbp
call fcn.7ff7871fcce0
mov rcx, qword [rsp + 0x60]
lea rdx, [0x7ff78742ad48]
mov r8d, 0x105
call fcn.7ff7871fcce0
mov r8d, 0x106
lea rdx, [0x7ff78742ad48]
mov rcx, rbx
call fcn.7ff7871fcce0
mov rcx, qword [rsp + 0x70]
call fcn.7ff78721c4a0
mov rcx, r15
call fcn.7ff7872736d0
mov rcx, qword [rsp + 0x68]
call fcn.7ff78727e620
mov rcx, qword [rsp + 0x78]
call fcn.7ff78727e620
lea r11, [rsp + 0xf0]
mov eax, esi
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rdx, qword [rsp + 0x68]
xor r9d, r9d
mov qword [rsp + 0x28], r15
mov r8, r12
mov rcx, r14
mov qword [rsp + 0x20], rsi
call fcn.7ff78727ea00
test eax, eax
je 0x7ff787351ed1
mov r9, qword [rsp + 0xa0]
mov rcx, r14
mov r8, qword [rsp + 0x98]
mov rdx, qword [rsp + 0x68]
mov qword [rsp + 0x20], r15
call fcn.7ff78727e660
test eax, eax
je 0x7ff787351ed1
mov r9, qword [rsp + 0xd8]
xor r8d, r8d
mov rdx, qword [rsp + 0x78]
mov rcx, r14
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r12
call fcn.7ff78727ea00
test eax, eax
je 0x7ff787351ed1
mov r12, qword [rsp + 0x80]
mov rcx, r14
mov r8, qword [rsp + 0x88]
mov r9, r12
mov rdx, qword [rsp + 0x78]
mov qword [rsp + 0x20], r15
call fcn.7ff78727e660
test eax, eax
je 0x7ff787351ed1
mov r14, qword [rsp + 0x60]
mov r8d, ebx
mov rcx, qword [rsp + 0x88]
mov rdx, r14
call fcn.7ff7872133f0
test eax, eax
js 0x7ff787351ebb
lea rax, [rbx + r14]
mov r8d, ebx
mov rdx, rax
mov qword [rsp + 0x80], rax
mov rcx, r12
call fcn.7ff7872133f0
test eax, eax
js 0x7ff787351ebb
mov r8d, 0xcb
lea rdx, [0x7ff78742ad48]
mov rcx, rdi
call fcn.7ff7871fcf70
mov rbp, rax
test rax, rax
je 0x7ff787351924
mov rax, qword [rsp + 0x90]
lea r9, [rbx + rbx]
mov r12, qword [rsp + 0xe0]
mov r8, r14
mov qword [rsp + 0x40], rax
mov rdx, rdi
mov rax, qword [rsp + 0x128]
mov rcx, rbp
mov qword [rsp + 0x38], r12
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
call fcn.7ff787283e00
test eax, eax
jne 0x7ff787351b51
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0xd2
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
mov edx, 0x80006
jmp 0x7ff787351918
mov rdx, rsi
test rdi, rdi
je 0x7ff787351c71
cmp rdi, 8
jb 0x7ff787351c44
lea rcx, [rdi - 1]
lea rax, [r13 - 1]
add rcx, rbp
add rax, rdi
cmp rbp, rax
ja 0x7ff787351b83
cmp rcx, r13
jae 0x7ff787351c44
cmp rdi, 0x40
jb 0x7ff787351c03
mov rcx, rdi
mov r8, rdi
and ecx, 0x3f
sub r8, rcx
mov r9, r13
lea rax, [rbp + 0x10]
sub r9, rbp
nop
movdqu xmm0, xmmword [rax - 0x10]
add rdx, 0x40
movdqu xmm1, xmmword [rax + r9 - 0x10]
lea rax, [rax + 0x40]
xorps xmm1, xmm0
movdqu xmm0, xmmword [rax + r9 - 0x40]
movdqu xmmword [rax - 0x50], xmm1
movdqu xmm2, xmmword [rax - 0x40]
movdqu xmm1, xmmword [rax + r9 - 0x30]
xorps xmm2, xmm0
movdqu xmmword [rax - 0x40], xmm2
movdqu xmm0, xmmword [rax - 0x30]
xorps xmm1, xmm0
movdqu xmmword [rax - 0x30], xmm1
movdqu xmm0, xmmword [rax - 0x20]
movdqu xmm1, xmmword [rax + r9 - 0x20]
xorps xmm1, xmm0
movdqu xmmword [rax - 0x20], xmm1
cmp rdx, r8
jne 0x7ff787351ba0
cmp rcx, 8
jb 0x7ff787351c3f
mov rcx, rdi
and rcx, 0xfffffffffffffff8
mov r8, r13
lea rax, [rdx + rbp]
sub r8, rbp
nop dword [rax]
nop dword [rax + rax]
movq xmm0, qword [rax]
add rdx, 8
movq xmm1, qword [r8 + rax]
lea rax, [rax + 8]
xorps xmm1, xmm0
movq qword [rax - 8], xmm1
cmp rdx, rcx
jne 0x7ff787351c20
cmp rdx, rdi
je 0x7ff787351c71
mov r9, r13
lea rcx, [rdx + rbp]
sub r9, rbp
mov r8, rdi
sub r8, rdx
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [r9 + rcx]
xor byte [rcx], al
lea rcx, [rcx + 1]
sub r8, 1
jne 0x7ff787351c60
mov rcx, qword [rsp + 0x128]
call fcn.7ff787202a70
mov r8, qword [rsp + 0x90]
mov rdx, rax
mov rcx, r12
call fcn.7ff78721c610
mov qword [rsp + 0xa8], rax
test rax, rax
jne 0x7ff787351cb4
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0xdb
jmp 0x7ff787351907
mov r14, qword [rsp + 0x70]
mov rdx, rax
mov rcx, r14
call fcn.7ff78721bd70
test eax, eax
je 0x7ff787351e83
mov rdx, qword [rsp + 0x60]
mov r8, rbx
mov rcx, r14
call fcn.7ff78721bdf0
test eax, eax
je 0x7ff787351e83
mov rdx, r13
mov r8, rdi
mov rcx, r14
mov r13, r14
call fcn.7ff78721bdf0
test eax, eax
je 0x7ff787351e83
mov rdx, qword [rsp + 0x80]
mov r8, rbx
mov rcx, r14
call fcn.7ff78721bdf0
mov rbx, qword [rsp + 0x50]
test eax, eax
je 0x7ff787351e88
xor r8d, r8d
mov rdx, rbx
mov rcx, r14
call fcn.7ff78721b830
test eax, eax
je 0x7ff787351e88
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xa0]
mov qword [rsp + 0xb8], rax
call fcn.7ff78721ae70
mov qword [rsp + 0xc0], rax
call fcn.7ff78721ae70
mov rcx, qword [rsp + 0xc0]
mov qword [rsp + 0xc8], rax
test rcx, rcx
je 0x7ff787351e50
test rax, rax
je 0x7ff787351e50
mov r8d, dword [rsp + 0x58]
mov rdx, rbx
call fcn.7ff787240300
test eax, eax
je 0x7ff787351e1d
mov rcx, qword [rsp + 0xc8]
mov r8d, edi
mov rdx, rbp
call fcn.7ff787240300
test eax, eax
je 0x7ff787351e1d
lea r8, [0x7ff78742ace0]
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0xb0]
call fcn.7ff78723f190
test eax, eax
jns 0x7ff787351e06
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0xf9
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
mov edx, 0xc0103
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
jmp 0x7ff787351929
mov rcx, qword [rsp + 0x148]
mov esi, 1
cdqe
mov qword [rcx], rax
jmp 0x7ff787351929
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0xf2
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
mov edx, 0xc0103
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
jmp 0x7ff787351929
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0xed
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
mov edx, 0x8000d
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
jmp 0x7ff787351929
mov rbx, qword [rsp + 0x50]
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0xe3
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
mov edx, 0x80006
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
jmp 0x7ff787351929
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0xc7
jmp 0x7ff787351907
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0xc1
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
mov edx, 0x80010
jmp 0x7ff787351918
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0x9b
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
mov edx, 0x80010
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
mov rbx, rsi
jmp 0x7ff787351929
call fcn.7ff787203740
lea r8, [0x7ff78742ad60]
mov edx, 0x8e
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
mov edx, 0xc0103
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
mov rbx, rsi
jmp 0x7ff787351929
mov rbx, rax
jmp 0x7ff787351929