Function at 0x1400f4bb0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov r12, qword [rcx + 0x18]
mov rax, r12
inc rax
je 0x1400f4d22
mov r14, rdx
mov r9, rcx
mov r13, qword [rcx + 8]
lea r8, [r13 + 1]
mov rdx, r8
shr rdx, 3
mov rcx, r8
and rcx, 0xfffffffffffffff8
sub rcx, rdx
cmp r13, 8
cmovb rcx, r13
mov rdx, rcx
shr rdx, 1
cmp rax, rdx
mov qword [rsp + 0x28], r9
jbe 0x1400f4c2d
inc rcx
cmp rax, rcx
cmova rcx, rax
cmp rcx, 8
jae 0x1400f4c5a
xor eax, eax
cmp rcx, 4
setae al
lea rsi, [rax*4 + 4]
jmp 0x1400f4cc2
mov rbx, qword [r9]
mov rcx, r8
shr rcx, 4
xor eax, eax
test r8b, 0xf
setne al
add rax, rcx
je 0x1400f4f91
cmp rax, 1
jne 0x1400f4f1d
xor edx, edx
jmp 0x1400f4f77
movabs rax, 0x1ffffffffffffffe
add rax, 2
cmp rcx, rax
jae 0x1400f4d22
shl rcx, 3
mov esi, 1
cmp rcx, 0xe
jb 0x1400f4cc2
movabs rdx, 0x2492492492492493
mov rax, rcx
mul rdx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 2
dec rcx
bsr rcx, rcx
not ecx
mov rsi, 0xffffffffffffffff
shr rsi, cl
movabs rax, 0x7fffffffffffffe
cmp rsi, rax
ja 0x1400f4d22
inc rsi
mov rdi, rsi
shl rdi, 5
lea r15, [rsi + 0x10]
mov rbx, rdi
add rbx, r15
jb 0x1400f4d22
movabs rax, 0x7ffffffffffffff0
cmp rbx, rax
ja 0x1400f4d22
test rbx, rbx
je 0x1400f4d26
movzx eax, byte [0x1401a4170]
mov rcx, qword [0x1401a4160]
test rcx, rcx
jne 0x1400f4d10
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x1400f4d22
mov rcx, rax
mov qword [0x1401a4160], rax
xor edx, edx
mov r8, rbx
call sub.KERNEL32.dll_HeapAlloc
mov rbx, rax
test rax, rax
jne 0x1400f4d2b
ud2
mov ebx, 0x10
lea rbp, [rsi - 1]
mov rax, rsi
shr rax, 3
mov rcx, rsi
and rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rsi, 9
cmovb rcx, rbp
mov qword [rsp + 0x30], rcx
add rbx, rdi
mov rcx, rbx
mov dl, 0xff
mov r8, r15
call sub.msvcrt.dll_memset
mov rax, qword [rsp + 0x28]
mov r8, qword [rax]
test r12, r12
je 0x1400f4ec8
movdqa xmm0, xmmword [r8]
mov rax, r14
pmovmskb r14d, xmm0
not r14d
mov rcx, qword [rax]
mov qword [rsp + 0x48], rcx
mov rax, qword [rax + 8]
mov qword [rsp + 0x40], rax
xor edi, edi
mov qword [rsp + 0x38], r12
mov rsi, r12
mov r15, r8
mov qword [rsp + 0x50], r8
jmp 0x1400f4dff
lea ecx, [r14 - 1]
and ecx, r14d
dec rsi
shr rax, 0x39
lea r9, [rdx - 0x10]
and r9, rbp
mov byte [rbx + rdx], al
mov byte [r9 + rbx + 0x10], al
not r12
shl r12, 5
not rdx
shl rdx, 5
movdqu xmm0, xmmword [r8 + r12]
movdqu xmm1, xmmword [r8 + r12 + 0x10]
movdqu xmmword [rbx + rdx + 0x10], xmm1
movdqu xmmword [rbx + rdx], xmm0
mov r14d, ecx
test rsi, rsi
je 0x1400f4ec1
test r14w, r14w
jne 0x1400f4e2f
nop word cs:[rax + rax]
movdqa xmm0, xmmword [r15 + 0x10]
add r15, 0x10
pmovmskb r14d, xmm0
add rdi, 0x10
cmp r14d, 0xffff
je 0x1400f4e10
not r14d
tzcnt r12d, r14d
add r12, rdi
mov rax, r12
shl rax, 5
mov rcx, r8
sub rcx, rax
mov r8, qword [rcx - 0x20]
mov r9, qword [rcx - 0x10]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
call fcn.140090740
mov rcx, rax
and rcx, rbp
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x1400f4e97
mov r8d, 0x10
nop word cs:[rax + rax]
add rcx, r8
and rcx, rbp
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x1400f4e80
mov r8, qword [rsp + 0x50]
tzcnt edx, edx
add rdx, rcx
and rdx, rbp
cmp byte [rbx + rdx], 0
js 0x1400f4db0
movdqa xmm0, xmmword [rbx]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x1400f4db0
mov rcx, qword [rsp + 0x38]
jmp 0x1400f4eca
xor ecx, ecx
mov rdx, qword [rsp + 0x30]
sub rdx, rcx
mov rax, qword [rsp + 0x28]
mov qword [rax], rbx
mov qword [rax + 8], rbp
mov qword [rax + 0x10], rdx
mov qword [rax + 0x18], rcx
test r13, r13
je 0x1400f5686
mov rax, r13
shl rax, 5
add r13, rax
cmp r13, 0xffffffffffffffcf
je 0x1400f5686
sub r8, rax
add r8, 0xffffffffffffffe0
mov rcx, qword [0x1401a4160]
xor edx, edx
call sub.KERNEL32.dll_HeapFree
jmp 0x1400f5686
movabs rcx, 0x1ffffffffffffffe
and rcx, rax
xor r9d, r9d
movdqa xmm0, xmmword [0x140129730]
nop word cs:[rax + rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r9]
por xmm1, xmm0
movdqa xmmword [rbx + r9], xmm1
lea rdx, [r9 + 0x20]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r9 + 0x10]
por xmm1, xmm0
movdqa xmmword [rbx + r9 + 0x10], xmm1
mov r9, rdx
add rcx, 0xfffffffffffffffe
jne 0x1400f4f40
test al, 1
je 0x1400f4f91
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rbx + rdx]
por xmm0, xmmword [0x140129730]
movdqa xmmword [rbx + rdx], xmm0
cmp r8, 0x10
jae 0x1400f4fb5
lea rcx, [rbx + 0x10]
mov rdx, rbx
call sub.msvcrt.dll_memmove
cmp r13, 0xffffffffffffffff
jne 0x1400f4fbf
xor eax, eax
mov r8, qword [rsp + 0x28]
jmp 0x1400f567f
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbx + r8], xmm0
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
movabs rdx, 0x736f6d6570736575
xor rdx, rax
mov qword [rsp + 0x40], rdx
movabs rdx, 0x646f72616e646f6d
xor rdx, rcx
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6c7967656e657261
xor rdx, rax
mov qword [rsp + 0x38], rdx
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x60], rax
xor edi, edi
mov qword [rsp + 0x58], rbx
jmp 0x1400f5047
shr rcx, 0x39
lea rax, [rdi - 0x10]
and rax, r13
mov byte [rbx + rdi], cl
mov rbx, qword [rsp + 0x58]
mov byte [rax + rbx + 0x10], cl
lea rax, [rdi + 1]
cmp rdi, r13
mov rdi, rax
je 0x1400f5658
cmp byte [rbx + rdi], 0x80
jne 0x1400f5037
mov rbp, rdi
not rbp
shl rbp, 5
add rbp, rbx
mov rax, rdi
neg rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
nop word [rax + rax]
mov rax, qword [rsp + 0x50]
shl rax, 5
mov r15, qword [rbx + rax - 0x20]
mov rsi, qword [rbx + rax - 0x10]
mov rax, rsi
and rax, 0xfffffffffffffff8
je 0x1400f5120
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x30]
mov r10, qword [rsp + 0x60]
xor r11d, r11d
mov rdx, qword [rsp + 0x40]
nop word [rax + rax]
add rdx, r8
rol r8, 0xd
mov rcx, qword [r15 + r11]
xor r8, rdx
rol rdx, 0x20
xor r10, rcx
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
add r9, r8
rol r8, 0x11
xor r8, r9
rol r9, 0x20
xor r10, rdx
xor rdx, rcx
add r11, 8
cmp r11, rax
jb 0x1400f50b0
mov edi, esi
and edi, 7
cmp edi, 3
jbe 0x1400f5141
mov r14d, dword [r15 + r11]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, rdi
jb 0x1400f5152
jmp 0x1400f516c
mov r10, qword [rsp + 0x60]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x38]
mov rdx, qword [rsp + 0x40]
xor r11d, r11d
mov edi, esi
and edi, 7
cmp edi, 3
ja 0x1400f50fd
xor r14d, r14d
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, rdi
jae 0x1400f516c
lea rcx, [rax + r11]
movzx r12d, word [r15 + rcx]
lea ecx, [rax*8]
shl r12, cl
or r14, r12
or rax, 2
cmp rax, rdi
jae 0x1400f5190
add r11, rax
movzx r11d, byte [r15 + r11]
shl eax, 3
mov ecx, eax
shl r11, cl
or r14, r11
jmp 0x1400f5195
test rdi, rdi
je 0x1400f51f2
lea ecx, [rdi*8]
mov r11d, 0xff
shl r11, cl
or r11, r14
cmp rdi, 7
jne 0x1400f52d3
mov ecx, 8
add rdx, r8
rol r8, 0xd
sub rcx, rdi
xor r8, rdx
rol rdx, 0x20
xor r10, r11
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
xor r10, rdx
add r9, r8
rol r8, 0x11
xor r8, r9
rol r9, 0x20
xor rdx, r11
jmp 0x1400f51f4
xor ecx, ecx
mov r11d, 1
sub r11, rcx
mov eax, r11d
and eax, 7
and r11, 0xfffffffffffffff8
cmp rcx, r11
jae 0x1400f5280
nop dword [rax]
add rdx, r8
rol r8, 0xd
xor r8, rdx
rol rdx, 0x20
xor r10, 0xff
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
add r9, r8
rol r8, 0x11
xor r8, r9
rol r9, 0x20
xor r10, rdx
xor rdx, 0xff
add rcx, 8
cmp rcx, r11
jb 0x1400f5210
xor r11d, r11d
cmp rax, 4
setae r11b
cmp eax, 4
mov edi, 0
mov ecx, 0xff
cmovae rdi, rcx
shl r11, 2
jmp 0x1400f5285
xor edi, edi
xor r11d, r11d
mov r14, r11
lea ecx, [r11*8]
mov r15d, 0xff
shl r15, cl
or r14, 1
mov r12, r11
or r12, 2
cmp r14, rax
mov r14d, 0
cmovae r15, r14
cmovae r12, r11
or r15, rdi
lea ecx, [r12*8]
mov r11d, 0xff
shl r11, cl
cmp r12, rax
cmovae r11, r14
or r11, r15
mov rdi, qword [rsp + 0x48]
shl rsi, 0x38
movabs rax, 0x100000000000000
add rsi, rax
add rdx, r8
rol r8, 0xd
or rsi, r11
xor r8, rdx
rol rdx, 0x20
xor r10, rsi
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
add r9, r8
rol r8, 0x11
xor r10, rdx
xor r8, r9
rol r9, 0x20
xor rdx, rsi
add rdx, r8
rol r8, 0xd
xor r8, rdx
rol rdx, 0x20
xor r9, 0xff
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
add r9, r8
rol r8, 0x11
xor r8, r9
rol r9, 0x20
xor r10, rdx
add rdx, r8
rol r8, 0xd
xor r8, rdx
rol rdx, 0x20
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
add r9, r8
rol r8, 0x11
xor r8, r9
rol r9, 0x20
xor r10, rdx
add rdx, r8
rol r8, 0xd
add r9, r10
rol r10, 0x10
xor r10, r9
rol r10, 0x15
xor r8, rdx
add r9, r8
rol r8, 0x11
mov rcx, r9
rol rcx, 0x20
xor rcx, r8
xor rcx, r10
xor rcx, r9
mov rax, r13
and rax, rcx
movdqu xmm0, xmmword [rbx + rax]
pmovmskb edx, xmm0
mov r8, rax
test edx, edx
jne 0x1400f53f8
mov r9d, 0x10
mov r8, rax
nop word [rax + rax]
add r8, r9
and r8, r13
movdqu xmm0, xmmword [rbx + r8]
pmovmskb edx, xmm0
add r9, 0x10
test edx, edx
je 0x1400f53e0
tzcnt edx, edx
add rdx, r8
and rdx, r13
cmp byte [rbx + rdx], 0
js 0x1400f5414
movdqa xmm0, xmmword [rbx]
pmovmskb edx, xmm0
tzcnt edx, edx
mov r8, rdi
sub r8, rax
mov r9, rdx
sub r9, rax
xor r9, r8
and r9, r13
cmp r9, 0x10
jb 0x1400f5020
mov rax, rdx
not rax
shl rax, 5
add rax, rbx
movzx r8d, byte [rbx + rdx]
shr rcx, 0x39
lea r9, [rdx - 0x10]
and r9, r13
mov byte [rbx + rdx], cl
mov rbx, qword [rsp + 0x58]
mov byte [r9 + rbx + 0x10], cl
cmp r8b, 0xff
je 0x1400f5630
movzx ecx, byte [rbp]
movzx edx, byte [rax]
mov byte [rbp], dl
mov byte [rax], cl
movzx ecx, byte [rbp + 1]
movzx edx, byte [rax + 1]
mov byte [rbp + 1], dl
mov byte [rax + 1], cl
movzx ecx, byte [rbp + 2]
movzx edx, byte [rax + 2]
mov byte [rbp + 2], dl
mov byte [rax + 2], cl
movzx ecx, byte [rbp + 3]
movzx edx, byte [rax + 3]
mov byte [rbp + 3], dl
mov byte [rax + 3], cl
movzx ecx, byte [rbp + 4]
movzx edx, byte [rax + 4]
mov byte [rbp + 4], dl
mov byte [rax + 4], cl
movzx ecx, byte [rbp + 5]
movzx edx, byte [rax + 5]
mov byte [rbp + 5], dl
mov byte [rax + 5], cl
movzx ecx, byte [rbp + 6]
movzx edx, byte [rax + 6]
mov byte [rbp + 6], dl
mov byte [rax + 6], cl
movzx ecx, byte [rbp + 7]
movzx edx, byte [rax + 7]
mov byte [rbp + 7], dl
mov byte [rax + 7], cl
movzx ecx, byte [rbp + 8]
movzx edx, byte [rax + 8]
mov byte [rbp + 8], dl
mov byte [rax + 8], cl
movzx ecx, byte [rbp + 9]
movzx edx, byte [rax + 9]
mov byte [rbp + 9], dl
mov byte [rax + 9], cl
movzx ecx, byte [rbp + 0xa]
movzx edx, byte [rax + 0xa]
mov byte [rbp + 0xa], dl
mov byte [rax + 0xa], cl
movzx ecx, byte [rbp + 0xb]
movzx edx, byte [rax + 0xb]
mov byte [rbp + 0xb], dl
mov byte [rax + 0xb], cl
movzx ecx, byte [rbp + 0xc]
movzx edx, byte [rax + 0xc]
mov byte [rbp + 0xc], dl
mov byte [rax + 0xc], cl
movzx ecx, byte [rbp + 0xd]
movzx edx, byte [rax + 0xd]
mov byte [rbp + 0xd], dl
mov byte [rax + 0xd], cl
movzx ecx, byte [rbp + 0xe]
movzx edx, byte [rax + 0xe]
mov byte [rbp + 0xe], dl
mov byte [rax + 0xe], cl
movzx ecx, byte [rbp + 0xf]
movzx edx, byte [rax + 0xf]
mov byte [rbp + 0xf], dl
mov byte [rax + 0xf], cl
movzx ecx, byte [rbp + 0x10]
movzx edx, byte [rax + 0x10]
mov byte [rbp + 0x10], dl
mov byte [rax + 0x10], cl
movzx ecx, byte [rbp + 0x11]
movzx edx, byte [rax + 0x11]
mov byte [rbp + 0x11], dl
mov byte [rax + 0x11], cl
movzx ecx, byte [rbp + 0x12]
movzx edx, byte [rax + 0x12]
mov byte [rbp + 0x12], dl
mov byte [rax + 0x12], cl
movzx ecx, byte [rbp + 0x13]
movzx edx, byte [rax + 0x13]
mov byte [rbp + 0x13], dl
mov byte [rax + 0x13], cl
movzx ecx, byte [rbp + 0x14]
movzx edx, byte [rax + 0x14]
mov byte [rbp + 0x14], dl
mov byte [rax + 0x14], cl
movzx ecx, byte [rbp + 0x15]
movzx edx, byte [rax + 0x15]
mov byte [rbp + 0x15], dl
mov byte [rax + 0x15], cl
movzx ecx, byte [rbp + 0x16]
movzx edx, byte [rax + 0x16]
mov byte [rbp + 0x16], dl
mov byte [rax + 0x16], cl
movzx ecx, byte [rbp + 0x17]
movzx edx, byte [rax + 0x17]
mov byte [rbp + 0x17], dl
mov byte [rax + 0x17], cl
movzx ecx, byte [rbp + 0x18]
movzx edx, byte [rax + 0x18]
mov byte [rbp + 0x18], dl
mov byte [rax + 0x18], cl
movzx ecx, byte [rbp + 0x19]
movzx edx, byte [rax + 0x19]
mov byte [rbp + 0x19], dl
mov byte [rax + 0x19], cl
movzx ecx, byte [rbp + 0x1a]
movzx edx, byte [rax + 0x1a]
mov byte [rbp + 0x1a], dl
mov byte [rax + 0x1a], cl
movzx ecx, byte [rbp + 0x1b]
movzx edx, byte [rax + 0x1b]
mov byte [rbp + 0x1b], dl
mov byte [rax + 0x1b], cl
movzx ecx, byte [rbp + 0x1c]
movzx edx, byte [rax + 0x1c]
mov byte [rbp + 0x1c], dl
mov byte [rax + 0x1c], cl
movzx ecx, byte [rbp + 0x1d]
movzx edx, byte [rax + 0x1d]
mov byte [rbp + 0x1d], dl
mov byte [rax + 0x1d], cl
movzx ecx, byte [rbp + 0x1e]
movzx edx, byte [rax + 0x1e]
mov byte [rbp + 0x1e], dl
mov byte [rax + 0x1e], cl
movzx ecx, byte [rbp + 0x1f]
movzx edx, byte [rax + 0x1f]
mov byte [rbp + 0x1f], dl
mov byte [rax + 0x1f], cl
mov rax, qword [rsp + 0x28]
mov rbx, qword [rax]
jmp 0x1400f5070
lea rcx, [rdi - 0x10]
and rcx, r13
mov byte [rbx + rdi], 0xff
mov byte [rcx + rbx + 0x10], 0xff
movdqu xmm0, xmmword [rbp]
movdqu xmm1, xmmword [rbp + 0x10]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
jmp 0x1400f5037
mov r8, qword [rsp + 0x28]
mov rcx, qword [r8 + 8]
mov r12, qword [r8 + 0x18]
lea rax, [rcx + 1]
mov rdx, rax
shr rdx, 3
and rax, 0xfffffffffffffff8
sub rax, rdx
cmp rcx, 8
cmovb rax, rcx
sub rax, r12
mov qword [r8 + 0x10], rax
movabs rax, 0x7ffffffffffffff0
add rax, 0x11
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret