Function at 0x4b5350
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rsi, qword [rcx + 0x18]
mov rax, rsi
inc rax
je 0x4b5b78
mov rbp, rdx
mov rdi, qword [rcx + 8]
lea r14, [rdi + 1]
mov rdx, r14
shr rdx, 3
mov r8, r14
and r8, 0xfffffffffffffff8
sub r8, rdx
cmp rdi, 8
cmovb r8, rdi
mov rdx, r8
shr rdx, 1
cmp rax, rdx
mov qword [rsp + 0x20], rcx
jbe 0x4b53cf
inc r8
cmp rax, r8
cmova r8, rax
cmp r8, 8
mov qword [rsp + 0x28], rsi
jae 0x4b53fc
xor eax, eax
cmp r8, 4
setae al
lea rbx, [rax*4 + 4]
jmp 0x4b5455
mov rbx, qword [rcx]
mov rcx, r14
shr rcx, 4
xor eax, eax
test r14b, 0xf
setne al
add rax, rcx
je 0x4b5701
cmp rax, 1
jne 0x4b568d
xor edx, edx
jmp 0x4b56e7
movabs rax, 0x1ffffffffffffffe
add rax, 2
cmp r8, rax
jae 0x4b5b78
shl r8, 3
mov ebx, 1
cmp r8, 0xe
jb 0x4b5455
movabs rdx, 0x2492492492492493
mov rax, r8
mul rdx
sub r8, rdx
shr r8, 1
add r8, rdx
shr r8, 2
dec r8
bsr rcx, r8
not ecx
mov rbx, 0xffffffffffffffff
shr rbx, cl
inc rbx
mov ecx, 0x18
mov rax, rbx
mul rcx
jo 0x4b5b78
mov rsi, rax
add rsi, 0xf
and rsi, 0xfffffffffffffff0
lea r15, [rbx + 0x10]
mov r13, rsi
add r13, r15
jb 0x4b5b78
movabs rax, 0x7ffffffffffffff0
cmp r13, rax
ja 0x4b5b78
test r13, r13
je 0x4b54dc
movzx eax, byte [0x006101a4]
mov rcx, qword [0x00610110]
test rcx, rcx
jne 0x4b54c0
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x4b54d2
mov rcx, rax
mov qword [0x00610110], rax
xor edx, edx
mov r8, r13
call sub.kernel32.dll_HeapAlloc
mov r12, rax
test rax, rax
jne 0x4b54e2
mov rcx, r13
call dbg.alloc_err
ud2
mov r12d, 0x10
mov r13, rbp
mov qword [rsp + 0x30], r14
lea r14, [rbx - 1]
mov rax, rbx
shr rax, 3
mov rbp, rbx
and rbp, 0xfffffffffffffff8
sub rbp, rax
cmp rbx, 9
cmovb rbp, r14
add r12, rsi
mov rcx, r12
mov dl, 0xff
mov r8, r15
call sub.msvcrt.dll_memset
mov rcx, qword [rsp + 0x28]
sub rbp, rcx
mov rax, qword [rsp + 0x20]
mov rbx, qword [rax]
cmp rdi, 0xffffffffffffffff
je 0x4b5643
mov rax, r13
mov r13, qword [r13]
mov r15, qword [rax + 8]
xor esi, esi
jmp 0x4b559b
shr rax, 0x39
lea rcx, [rdx - 0x10]
and rcx, r14
mov byte [r12 + rdx], al
mov byte [rcx + r12 + 0x10], al
lea rax, [rsi*8]
lea rax, [rax + rax*2]
mov rcx, rbx
sub rcx, rax
shl rdx, 3
lea rax, [rdx + rdx*2]
mov rdx, r12
sub rdx, rax
neg rax
movdqu xmm0, xmmword [rcx - 0x18]
movdqu xmmword [r12 + rax - 0x18], xmm0
mov rax, qword [rcx - 8]
mov qword [rdx - 8], rax
lea rax, [rsi + 1]
cmp rsi, rdi
mov rsi, rax
je 0x4b5620
cmp byte [rbx + rsi], 0
js 0x4b558b
mov rax, rsi
neg rax
lea rax, [rax + rax*2]
mov r8, qword [rbx + rax*8 - 0x18]
mov r9, qword [rbx + rax*8 - 0x10]
mov rcx, r13
mov rdx, r15
call sym.core::hash::BuildHasher::hash_one::h98dc6e6e8edc0ec5
mov rcx, rax
and rcx, r14
movdqu xmm0, xmmword [r12 + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x4b55f8
mov r8d, 0x10
nop word [rax + rax]
add rcx, r8
and rcx, r14
movdqu xmm0, xmmword [r12 + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x4b55e0
tzcnt edx, edx
add rdx, rcx
and rdx, r14
cmp byte [r12 + rdx], 0
js 0x4b5540
movdqa xmm0, xmmword [r12]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x4b5540
mov rax, qword [rsp + 0x20]
mov qword [rax], r12
mov qword [rax + 8], r14
mov qword [rax + 0x10], rbp
mov rcx, qword [rsp + 0x28]
mov qword [rax + 0x18], rcx
test rdi, rdi
jne 0x4b5652
jmp 0x4b5b59
mov qword [rax], r12
mov qword [rax + 8], r14
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rcx
mov ecx, 0x18
mov rax, qword [rsp + 0x30]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add rdi, rax
cmp rdi, 0xffffffffffffffef
je 0x4b5b59
sub rbx, rax
mov rcx, qword [0x00610110]
xor edx, edx
mov r8, rbx
call fcn.00573784
jmp 0x4b5b59
movabs rcx, 0x1ffffffffffffffe
and rcx, rax
xor r8d, r8d
movdqa xmm0, xmmword [0x00579100]
nop word cs:[rax + rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r8]
por xmm1, xmm0
movdqa xmmword [rbx + r8], xmm1
lea rdx, [r8 + 0x20]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r8 + 0x10]
por xmm1, xmm0
movdqa xmmword [rbx + r8 + 0x10], xmm1
mov r8, rdx
add rcx, 0xfffffffffffffffe
jne 0x4b56b0
test al, 1
je 0x4b5701
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rbx + rdx]
por xmm0, xmmword [0x00579100]
movdqa xmmword [rbx + rdx], xmm0
cmp r14, 0x10
jae 0x4b5728
lea rcx, [rbx + 0x10]
mov rdx, rbx
mov r8, r14
call sub.msvcrt.dll_memmove
cmp rdi, 0xffffffffffffffff
jne 0x4b5732
xor eax, eax
mov r8, qword [rsp + 0x20]
jmp 0x4b5b52
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbx + r14], xmm0
mov rax, qword [rbp]
mov rcx, qword [rbp + 8]
movabs rsi, 0x736f6d6570736575
xor rsi, rax
movabs r12, 0x646f72616e646f6d
xor r12, rcx
movabs rdx, 0x6c7967656e657261
add rsi, r12
rol r12, 0xd
xor rdx, rax
mov qword [rsp + 0x60], rdx
xor r12, rsi
rol rsi, 0x20
mov rax, r12
rol rax, 0x11
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0x20]
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
xor r10d, r10d
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x40], rdi
jmp 0x4b57d3
shr rax, 0x39
lea rcx, [r10 - 0x10]
and rcx, rdi
mov byte [rbx + r10], al
mov byte [rcx + rbx + 0x10], al
lea rax, [r10 + 1]
cmp r10, rdi
mov r10, rax
je 0x4b5b2b
cmp byte [rbx + r10], 0x80
jne 0x4b57c3
lea rax, [r10*8]
lea rax, [rax + rax*2]
mov rcx, rbx
sub rcx, rax
add rcx, 0xffffffffffffffe8
mov qword [rsp + 0x38], rcx
mov rax, r10
neg rax
mov qword [rsp + 0x30], rax
mov rax, rbx
mov qword [rsp + 0x28], r10
nop dword [rax + rax]
mov rcx, qword [rsp + 0x30]
lea rcx, [rcx + rcx*2]
mov r8, qword [rax + rcx*8 - 0x18]
mov r13, qword [rax + rcx*8 - 0x10]
mov rbp, qword [rsp + 0x50]
xor rbp, r13
mov rax, qword [rsp + 0x60]
lea r15, [rax + rbp]
rol rbp, 0x10
xor rbp, r15
add r15, r12
mov r11, r15
rol r11, 0x20
lea r9, [rsi + rbp]
xor r15, qword [rsp + 0x58]
rol rbp, 0x15
xor rbp, r9
xor r9, r13
mov rax, r13
xor r10d, r10d
and rax, 0xfffffffffffffff8
je 0x4b58b4
nop word cs:[rax + rax]
add r9, r15
rol r15, 0xd
mov rcx, qword [r8 + r10 + 0x10]
xor r15, r9
rol r9, 0x20
xor rbp, rcx
add r11, rbp
rol rbp, 0x10
xor rbp, r11
add r9, rbp
rol rbp, 0x15
add r11, r15
rol r15, 0x11
xor r15, r11
rol r11, 0x20
xor rbp, r9
xor r9, rcx
add r10, 8
cmp r10, rax
jb 0x4b5870
mov edx, r13d
and edx, 7
cmp edx, 3
jbe 0x4b58e0
mov r14d, dword [r8 + r10 + 0x10]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, rdx
jb 0x4b58f1
jmp 0x4b591d
xor r14d, r14d
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, rdx
jae 0x4b591d
lea rcx, [rax + r10]
mov rdi, r12
mov r12, rsi
movzx esi, word [r8 + rcx + 0x10]
lea ecx, [rax*8]
shl rsi, cl
or r14, rsi
mov rsi, r12
mov r12, rdi
mov rdi, qword [rsp + 0x40]
or rax, 2
cmp rax, rdx
jae 0x4b5936
add r10, rax
movzx edx, byte [r8 + r10 + 0x10]
shl eax, 3
mov ecx, eax
shl rdx, cl
or r14, rdx
mov r10, qword [rsp + 0x28]
shl r13, 0x38
movabs rax, 0x800000000000000
add r13, rax
add r9, r15
rol r15, 0xd
or r13, r14
xor r15, r9
rol r9, 0x20
xor rbp, r13
add r11, rbp
rol rbp, 0x10
xor rbp, r11
add r9, rbp
rol rbp, 0x15
add r11, r15
rol r15, 0x11
xor rbp, r9
xor r15, r11
rol r11, 0x20
xor r9, r13
add r9, r15
rol r15, 0xd
xor r15, r9
rol r9, 0x20
xor r11, 0xff
add r11, rbp
rol rbp, 0x10
xor rbp, r11
add r9, rbp
rol rbp, 0x15
add r11, r15
rol r15, 0x11
xor r15, r11
rol r11, 0x20
xor rbp, r9
add r9, r15
rol r15, 0xd
xor r15, r9
rol r9, 0x20
add r11, rbp
rol rbp, 0x10
xor rbp, r11
add r9, rbp
rol rbp, 0x15
add r11, r15
rol r15, 0x11
xor r15, r11
rol r11, 0x20
xor rbp, r9
add r9, r15
rol r15, 0xd
add r11, rbp
rol rbp, 0x10
xor rbp, r11
rol rbp, 0x15
xor r15, r9
add r11, r15
rol r15, 0x11
mov rax, r11
rol rax, 0x20
xor rax, r15
xor rax, rbp
xor rax, r11
mov rcx, rdi
and rcx, rax
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
mov r8, rcx
test edx, edx
jne 0x4b5a58
mov r9d, 0x10
mov r8, rcx
nop word [rax + rax]
add r8, r9
and r8, rdi
movdqu xmm0, xmmword [rbx + r8]
pmovmskb edx, xmm0
add r9, 0x10
test edx, edx
je 0x4b5a40
tzcnt edx, edx
add rdx, r8
and rdx, rdi
cmp byte [rbx + rdx], 0
js 0x4b5a74
movdqa xmm0, xmmword [rbx]
pmovmskb edx, xmm0
tzcnt edx, edx
mov r8, r10
sub r8, rcx
mov r9, rdx
sub r9, rcx
xor r9, r8
and r9, rdi
cmp r9, 0x10
jb 0x4b57b0
lea rcx, [rdx*8]
lea rcx, [rcx + rcx*2]
neg rcx
add rcx, rbx
add rcx, 0xffffffffffffffe8
movzx r8d, byte [rbx + rdx]
shr rax, 0x39
lea r9, [rdx - 0x10]
and r9, rdi
mov byte [rbx + rdx], al
mov byte [r9 + rbx + 0x10], al
cmp r8b, 0xff
je 0x4b5b00
mov r8, qword [rsp + 0x38]
mov rax, qword [r8]
mov rdx, qword [rcx]
mov qword [r8], rdx
mov qword [rcx], rax
mov rax, qword [r8 + 8]
mov rdx, qword [rcx + 8]
mov qword [r8 + 8], rdx
mov qword [rcx + 8], rax
mov rax, qword [r8 + 0x10]
mov rdx, qword [rcx + 0x10]
mov qword [r8 + 0x10], rdx
mov qword [rcx + 0x10], rax
mov rax, qword [rsp + 0x48]
jmp 0x4b5810
lea rax, [r10 - 0x10]
and rax, rdi
mov byte [rbx + r10], 0xff
mov byte [rax + rbx + 0x10], 0xff
mov rdx, qword [rsp + 0x38]
mov rax, qword [rdx + 0x10]
mov qword [rcx + 0x10], rax
movdqu xmm0, xmmword [rdx]
movdqu xmmword [rcx], xmm0
jmp 0x4b57c3
mov r8, qword [rsp + 0x20]
mov rcx, qword [r8 + 8]
mov rsi, qword [r8 + 0x18]
lea rax, [rcx + 1]
mov rdx, rax
shr rdx, 3
and rax, 0xfffffffffffffff8
sub rax, rdx
cmp rcx, 8
cmovb rax, rcx
sub rax, rsi
mov qword [r8 + 0x10], rax
movabs rax, 0x7ffffffffffffff0
add rax, 0x11
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call dbg.capacity_overflow
ud2