Function at 0x140166ef0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x98
mov r14, qword [rcx + 0x18]
mov rax, r14
inc rax
je 0x1401677a6
mov r15, rdx
mov rbp, qword [rcx + 8]
lea rsi, [rbp + 1]
mov rdx, rsi
shr rdx, 3
mov r8, rsi
and r8, 0xfffffffffffffff8
sub r8, rdx
cmp rbp, 8
cmovb r8, rbp
mov rdx, r8
shr rdx, 1
cmp rax, rdx
mov qword [rsp + 0x28], rcx
jbe 0x140166f6d
inc r8
cmp rax, r8
cmova r8, rax
cmp r8, 8
jae 0x140166fa4
xor eax, eax
cmp r8, 4
setae al
lea rbx, [rax*4 + 4]
jmp 0x140166ff3
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x48], r14
mov rbx, qword [rcx]
mov rcx, rsi
shr rcx, 4
xor eax, eax
test sil, 0xf
setne al
add rax, rcx
je 0x14016728a
cmp rax, 1
jne 0x14016721a
xor ecx, ecx
jmp 0x140167274
mov rax, r8
shr rax, 0x3d
jne 0x1401677a6
shl r8, 3
mov ebx, 1
cmp r8, 0xe
jb 0x140166ff3
movabs rcx, 0x2492492492492493
mov rax, r8
mul rcx
sub r8, rdx
shr r8, 1
add r8, rdx
shr r8, 2
dec r8
bsr rcx, r8
not ecx
mov rbx, 0xffffffffffffffff
shr rbx, cl
inc rbx
mov ecx, 0x30
mov rax, rbx
mul rcx
jo 0x1401677a6
mov rdi, rax
lea r12, [rbx + 0x10]
mov r13, rax
add r13, r12
jb 0x1401677a6
movabs rax, 0x7ffffffffffffff1
cmp r13, rax
jae 0x1401677a6
test r13, r13
je 0x140167071
movzx eax, byte [0x1402448a8]
mov rcx, qword [0x1402443c8]
test rcx, rcx
jne 0x140167057
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x140167067
mov rcx, rax
mov qword [0x1402443c8], rax
xor edx, edx
mov r8, r13
call qword [sym.imp.kernel32.dll_HeapAlloc]
test rax, rax
jne 0x140167076
mov rcx, r13
call fcn.140052e20
ud2
mov eax, 0x10
mov qword [rsp + 0x20], rsi
lea rsi, [rbx - 1]
mov rcx, rbx
shr rcx, 3
mov r13, rbx
and r13, 0xfffffffffffffff8
sub r13, rcx
cmp rbx, 9
cmovb r13, rsi
add rdi, rax
mov rcx, rdi
mov dl, 0xff
mov r8, r12
call sub.VCRUNTIME140.dll_memset
sub r13, r14
mov rax, qword [rsp + 0x28]
mov rbx, qword [rax]
cmp rbp, 0xffffffffffffffff
je 0x1401671db
mov qword [rsp + 0x30], r13
lea r14, [rbx - 0x30]
mov r12, qword [r15]
mov r15, qword [r15 + 8]
xor r13d, r13d
jmp 0x14016713b
shr rax, 0x39
lea rcx, [rdx - 0x10]
and rcx, rsi
mov byte [rdi + rdx], al
mov byte [rcx + rdi + 0x10], al
mov rax, r13
not rax
lea rax, [rax + rax*2]
shl rax, 4
not rdx
lea rcx, [rdx + rdx*2]
shl rcx, 4
movdqu xmm0, xmmword [rbx + rax]
movdqu xmm1, xmmword [rbx + rax + 0x10]
movups xmm2, xmmword [rbx + rax + 0x20]
movups xmmword [rdi + rcx + 0x20], xmm2
movdqu xmmword [rdi + rcx + 0x10], xmm1
movdqu xmmword [rdi + rcx], xmm0
lea rax, [r13 + 1]
cmp r13, rbp
mov r13, rax
je 0x1401671bc
cmp byte [rbx + r13], 0
js 0x14016712b
mov rax, r13
neg rax
lea rax, [rax + rax*2]
shl rax, 4
mov r8, qword [r14 + rax]
mov r9, qword [r14 + rax + 0x10]
mov rcx, r12
mov rdx, r15
call fcn.1400cae50
mov rcx, rax
and rcx, rsi
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x140167197
mov r8d, 0x10
nop dword [rax]
add rcx, r8
and rcx, rsi
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x140167180
tzcnt edx, edx
add rdx, rcx
and rdx, rsi
cmp byte [rdi + rdx], 0
js 0x1401670e0
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x1401670e0
mov rax, qword [rsp + 0x28]
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov rcx, qword [rsp + 0x30]
mov qword [rax + 0x10], rcx
test rbp, rbp
jne 0x1401671e6
jmp 0x140167788
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], r13
mov ecx, 0x30
mov rax, qword [rsp + 0x20]
mul rcx
add rbp, rax
cmp rbp, 0xffffffffffffffef
je 0x140167788
sub rbx, rax
mov rcx, qword [0x1402443c8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x140167788
movabs rdx, 0x1ffffffffffffffe
and rdx, rax
xor ecx, ecx
movdqa xmm0, xmmword [0x14016e160]
nop word cs:[rax + rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + rcx]
por xmm1, xmm0
movdqa xmmword [rbx + rcx], xmm1
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + rcx + 0x10]
por xmm1, xmm0
movdqa xmmword [rbx + rcx + 0x10], xmm1
add rcx, 0x20
add rdx, 0xfffffffffffffffe
jne 0x140167240
test al, 1
je 0x14016728a
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rbx + rcx]
por xmm0, xmmword [0x14016e160]
movdqa xmmword [rbx + rcx], xmm0
cmp rsi, 0x10
jae 0x1401672ac
lea rcx, [rbx + 0x10]
mov rdx, rbx
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
cmp rbp, 0xffffffffffffffff
jne 0x1401672b5
xor ecx, ecx
jmp 0x14016777a
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbx + rsi], xmm0
lea rax, [rbx - 0x30]
mov qword [rsp + 0x50], rax
mov rax, qword [r15]
mov rdi, qword [r15 + 8]
movabs rcx, 0x736f6d6570736575
xor rcx, rax
movabs rdx, 0x646f72616e646f6d
xor rdx, rdi
movabs r8, 0x6c7967656e657261
add rcx, rdx
rol rdx, 0xd
xor r8, rax
mov qword [rsp + 0x80], r8
xor rdx, rcx
rol rcx, 0x20
mov qword [rsp + 0x90], rcx
mov qword [rsp + 0x88], rdx
rol rdx, 0x11
mov qword [rsp + 0x78], rdx
lea r15, [rbx - 0x2e]
xor r10d, r10d
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x60], rbp
jmp 0x140167357
shr rax, 0x39
lea rcx, [r10 - 0x10]
and rcx, rbp
mov byte [rbx + r10], al
mov byte [rcx + rbx + 0x10], al
lea rax, [r10 + 1]
add r15, 0xffffffffffffffd0
cmp r10, rbp
mov r10, rax
je 0x140167775
cmp byte [rbx + r10], 0x80
jne 0x140167343
mov rax, r10
shl rax, 4
lea rax, [rax + rax*2]
mov rcx, rbx
sub rcx, rax
mov qword [rsp + 0x68], rcx
neg rax
add rax, rbx
add rax, 0xffffffffffffffd0
mov qword [rsp + 0x70], rax
mov rax, r10
not rax
lea rax, [rax + rax*2]
shl rax, 4
add rax, rbx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x20], r10
mov rax, r10
neg rax
lea rax, [rax + rax*2]
shl rax, 4
add rax, qword [rsp + 0x50]
mov qword [rsp + 0x30], rax
jmp 0x1401673f5
mov rax, qword [rsp + 0x38]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rcx]
movups xmmword [rax], xmm1
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rax + 0x10]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rax + 0x10], xmm1
movups xmmword [rcx + 0x10], xmm0
movdqu xmm0, xmmword [rax + 0x20]
movdqu xmm1, xmmword [rcx + 0x20]
movdqu xmmword [rax + 0x20], xmm1
movdqu xmmword [rcx + 0x20], xmm0
mov rax, qword [rsp + 0x30]
mov r14, qword [rax]
mov rsi, qword [rax + 0x10]
mov r8, rdi
xor r8, rsi
movabs rax, 0x7465646279746573
xor r8, rax
mov rax, qword [rsp + 0x80]
lea rdx, [rax + r8]
rol r8, 0x10
xor r8, rdx
add rdx, qword [rsp + 0x88]
mov r11, rdx
rol r11, 0x20
mov rax, qword [rsp + 0x90]
lea r9, [r8 + rax]
xor rdx, qword [rsp + 0x78]
rol r8, 0x15
xor r8, r9
xor r9, rsi
mov rax, rsi
xor r12d, r12d
and rax, 0xfffffffffffffff8
je 0x1401674a3
nop dword [rax]
add r9, rdx
rol rdx, 0xd
mov rcx, qword [r14 + r12]
xor rdx, r9
rol r9, 0x20
xor r8, rcx
add r11, r8
rol r8, 0x10
xor r8, r11
add r9, r8
rol r8, 0x15
add r11, rdx
rol rdx, 0x11
xor rdx, r11
rol r11, 0x20
xor r8, r9
xor r9, rcx
add r12, 8
cmp r12, rax
jb 0x140167460
mov r10d, esi
and r10d, 7
cmp r10d, 3
jbe 0x1401674d0
mov r13d, dword [r14 + r12]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, r10
jb 0x1401674e1
jmp 0x140167506
xor r13d, r13d
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, r10
jae 0x140167506
lea rcx, [rax + r12]
mov rbp, rdi
movzx edi, word [r14 + rcx]
lea ecx, [rax*8]
shl rdi, cl
or r13, rdi
mov rdi, rbp
mov rbp, qword [rsp + 0x60]
or rax, 2
cmp rax, r10
jae 0x14016751e
add r12, rax
movzx r10d, byte [r14 + r12]
shl eax, 3
mov ecx, eax
shl r10, cl
or r13, r10
mov r10, qword [rsp + 0x20]
shl rsi, 0x38
movabs rax, 0x800000000000000
add rsi, rax
add r9, rdx
rol rdx, 0xd
or rsi, r13
xor rdx, r9
rol r9, 0x20
xor r8, rsi
add r11, r8
rol r8, 0x10
xor r8, r11
add r9, r8
rol r8, 0x15
add r11, rdx
rol rdx, 0x11
xor r8, r9
xor rdx, r11
rol r11, 0x20
xor r9, rsi
add r9, rdx
rol rdx, 0xd
xor rdx, r9
rol r9, 0x20
xor r11, 0xff
add r11, r8
rol r8, 0x10
xor r8, r11
add r9, r8
rol r8, 0x15
add r11, rdx
rol rdx, 0x11
xor rdx, r11
rol r11, 0x20
xor r8, r9
add r9, rdx
rol rdx, 0xd
xor rdx, r9
rol r9, 0x20
add r11, r8
rol r8, 0x10
xor r8, r11
add r9, r8
rol r8, 0x15
add r11, rdx
rol rdx, 0x11
xor rdx, r11
rol r11, 0x20
xor r8, r9
add r9, rdx
rol rdx, 0xd
add r11, r8
rol r8, 0x10
xor r8, r11
rol r8, 0x15
xor rdx, r9
add r11, rdx
rol rdx, 0x11
mov rax, r11
rol rax, 0x20
xor rax, rdx
xor rax, r8
xor rax, r11
mov rcx, rax
and rcx, rbp
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
mov r8, rcx
test edx, edx
jne 0x140167648
mov r9d, 0x10
mov r8, rcx
nop word cs:[rax + rax]
add r8, r9
and r8, rbp
movdqu xmm0, xmmword [rbx + r8]
pmovmskb edx, xmm0
add r9, 0x10
test edx, edx
je 0x140167630
tzcnt edx, edx
add rdx, r8
and rdx, rbp
cmp byte [rbx + rdx], 0
js 0x140167664
movdqa xmm0, xmmword [rbx]
pmovmskb edx, xmm0
tzcnt edx, edx
mov r8, r10
sub r8, rcx
mov r9, rdx
sub r9, rcx
xor r9, r8
and r9, rbp
cmp r9, 0x10
jb 0x140167330
mov rcx, rdx
not rcx
lea rcx, [rcx + rcx*2]
shl rcx, 4
add rcx, rbx
movzx r8d, byte [rbx + rdx]
shr rax, 0x39
lea r9, [rdx - 0x10]
and r9, rbp
mov byte [rbx + rdx], al
mov byte [r9 + rbx + 0x10], al
cmp r8b, 0xff
je 0x140167740
shl rdx, 4
lea rdx, [rdx + rdx*2]
mov rax, rbx
sub rax, rdx
cmp qword [rsp + 0x70], rax
jae 0x1401673c0
cmp rcx, qword [rsp + 0x68]
jae 0x1401673c0
mov rax, qword [rsp + 0x58]
sub rax, rdx
xor ecx, ecx
nop word cs:[rax + rax]
movzx edx, byte [r15 + rcx - 2]
movzx r8d, byte [rax + rcx - 2]
mov byte [r15 + rcx - 2], r8b
mov byte [rax + rcx - 2], dl
movzx edx, byte [r15 + rcx - 1]
movzx r8d, byte [rax + rcx - 1]
mov byte [r15 + rcx - 1], r8b
mov byte [rax + rcx - 1], dl
movzx edx, byte [r15 + rcx]
movzx r8d, byte [rax + rcx]
mov byte [r15 + rcx], r8b
mov byte [rax + rcx], dl
add rcx, 3
cmp rcx, 0x30
jne 0x1401676f0
jmp 0x1401673f5
lea rax, [r10 - 0x10]
and rax, rbp
mov byte [rbx + r10], 0xff
mov byte [rax + rbx + 0x10], 0xff
mov rax, qword [rsp + 0x38]
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movups xmm2, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm2
movdqu xmmword [rcx + 0x10], xmm1
movdqu xmmword [rcx], xmm0
jmp 0x140167343
mov rcx, qword [rsp + 0x40]
sub rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x28]
mov qword [rax + 0x10], rcx
movabs rax, 0x8000000000000001
add rsp, 0x98
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140052de0
ud2