Function at 0x1400e1050
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x98
mov r11, rcx
mov rax, qword [rcx + 8]
mov rdi, qword [rcx + 0x10]
mov qword [rsp + 0x40], rax
add rax, 3
mov rcx, rdi
mov qword [rsp + 0x28], r11
jmp 0x1400e10d3
movzx r9d, byte [rax - 2]
movzx r10d, byte [rax]
movzx r11d, dl
movzx esi, r8b
cmp dl, r8b
cmova esi, r11d
mov r11, qword [rsp + 0x28]
movzx edx, sil
movzx r8d, r9b
movzx r9d, r10b
cmp r8b, r9b
cmovb r9d, r8d
movzx r8d, r9b
inc r8d
add rax, 2
dec rcx
cmp r8d, edx
jae 0x1400e10fb
cmp rcx, 2
jb 0x1400e18e8
movzx edx, byte [rax - 3]
movzx r8d, byte [rax - 1]
cmp dl, r8b
jb 0x1400e1090
jne 0x1400e10fb
movzx r9d, byte [rax - 2]
movzx r10d, byte [rax]
cmp r9b, r10b
jb 0x1400e1099
cmp rdi, 0x15
jae 0x1400e1128
cmp rdi, 1
jbe 0x1400e17ca
mov r8d, 1
mov rcx, qword [rsp + 0x40]
mov rdx, rdi
call fcn.1400de700
mov r11, qword [rsp + 0x28]
jmp 0x1400e17d3
movabs rax, 0x7ffffffffffffffe
mov rdx, rdi
and rdx, rax
movzx eax, byte [0x140188180]
xor ecx, ecx
call fcn.1400f2120
test rax, rax
je 0x1400e18fc
mov r12, rax
movzx eax, byte [0x140188180]
mov edx, 0x100
xor ecx, ecx
call fcn.1400f2120
test rax, rax
je 0x1400e18fc
mov rbp, rax
mov rax, qword [rsp + 0x40]
lea rcx, [rax + 3]
mov qword [rsp + 0x68], rcx
lea rcx, [rax - 1]
mov qword [rsp + 0x60], rcx
add rax, 0xfffffffffffffffe
mov qword [rsp + 0x70], rax
mov eax, 0x10
mov qword [rsp + 0x58], rax
xor r15d, r15d
xor r13d, r13d
mov qword [rsp + 0x50], rdi
jmp 0x1400e11c4
mov r13d, 1
mov r15, qword [rsp + 0x20]
cmp r15, rdi
jae 0x1400e17a3
mov rax, rdi
sub rax, r15
mov rcx, qword [rsp + 0x40]
lea rcx, [rcx + r15*2]
cmp rax, 2
jae 0x1400e11f0
mov r8, rax
lea rax, [r8 + r15]
jmp 0x1400e1390
movzx edx, byte [rcx + 2]
cmp dl, byte [rcx]
jb 0x1400e1205
jne 0x1400e1246
movzx r8d, byte [rcx + 1]
cmp byte [rcx + 3], r8b
jae 0x1400e1246
mov r8d, 2
cmp rax, 3
jae 0x1400e1228
jmp 0x1400e1294
inc r8
cmp rax, r8
je 0x1400e1291
mov r9d, edx
movzx edx, byte [rcx + r8*2]
cmp dl, r9b
jb 0x1400e1220
jne 0x1400e1294
movzx r9d, byte [rcx + r8*2 - 1]
cmp byte [rcx + r8*2 + 1], r9b
jb 0x1400e1220
jmp 0x1400e1294
mov r8d, 2
cmp rax, 3
jae 0x1400e126c
jmp 0x1400e11dc
inc r8
cmp rax, r8
je 0x1400e11d9
mov r9d, edx
movzx edx, byte [rcx + r8*2]
cmp dl, r9b
jb 0x1400e11dc
jne 0x1400e1260
movzx r9d, byte [rcx + r8*2 - 1]
cmp byte [rcx + r8*2 + 1], r9b
jae 0x1400e1260
jmp 0x1400e11dc
mov r8, rax
mov rax, r8
add rax, r15
jb 0x1400e18fc
cmp rax, rdi
ja 0x1400e18fc
cmp r8, 2
jb 0x1400e1390
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x48], rbp
mov rax, r8
shr rax, 1
lea rdx, [rcx + r8*2]
mov r9, r8
and r9, 0xfffffffffffffffe
sub rdx, r9
cmp rax, 1
jne 0x1400e12dc
xor r9d, r9d
jmp 0x1400e1359
mov r10, rax
movabs r14, 0x7ffffffffffffffe
and r10, r14
mov r9, qword [rsp + 0x68]
lea r11, [r9 + r15*2]
mov r9, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x20]
lea rsi, [r9 + rsi*2]
xor r9d, r9d
nop word cs:[rax + rax]
movzx ebx, word [r11 + r9*2 - 3]
movzx ebp, word [rsi - 1]
mov word [r11 + r9*2 - 3], bp
mov word [rsi - 1], bx
mov rbx, r9
xor rbx, r14
add rbx, rax
movzx ebp, word [r11 + r9*2 - 1]
movzx r14d, word [rdx + rbx*2]
mov word [r11 + r9*2 - 1], r14w
movabs r14, 0x7ffffffffffffffe
mov word [rdx + rbx*2], bp
add r9, 2
add rsi, 0xfffffffffffffffc
cmp r10, r9
jne 0x1400e1310
test r8b, 2
je 0x1400e137c
mov r10, r9
not r10
add rax, r10
movzx r10d, word [rcx + r9*2]
movzx r11d, word [rdx + rax*2]
mov word [rcx + r9*2], r11w
mov word [rdx + rax*2], r10w
mov rdi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
mov rax, qword [rsp + 0x20]
nop dword [rax + rax]
mov rsi, rax
sub rsi, r15
jb 0x1400e18fc
cmp rax, rdi
ja 0x1400e18fc
jae 0x1400e13e0
cmp r8, 0xa
jae 0x1400e13e0
lea rsi, [r15 + 0xa]
cmp rsi, rdi
cmovae rsi, rdi
mov qword [rsp + 0x20], rsi
sub rsi, r15
jb 0x1400e18fc
cmp r8, 1
adc r8, 0
mov rdx, rsi
call fcn.1400de700
cmp r13, qword [rsp + 0x58]
je 0x1400e13ec
jmp 0x1400e1442
mov qword [rsp + 0x20], rax
cmp r13, qword [rsp + 0x58]
jne 0x1400e1442
mov rdx, r13
shl rdx, 5
movzx eax, byte [0x140188180]
xor ecx, ecx
call fcn.1400f2120
test rax, rax
je 0x1400e18fc
mov rbx, r13
mov r13, rax
lea rax, [rbx + rbx]
mov qword [rsp + 0x58], rax
mov r8, rbx
shl r8, 4
mov rcx, r13
mov rdx, rbp
call sub.msvcrt.dll_memcpy
mov rcx, qword [0x140188170]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
mov rbp, r13
mov r13, rbx
mov rax, r13
shl rax, 4
mov qword [rbp + rax], rsi
mov qword [rbp + rax + 8], r15
inc r13
mov rax, r13
cmp r13, 2
mov qword [rsp + 0x48], rbp
jae 0x1400e14df
jmp 0x1400e11b6
mov r12, r14
mov rdx, r14
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
mov r15, rcx
nop dword [rax]
sub r8, rdx
mov rcx, rsi
call sub.msvcrt.dll_memcpy
mov rax, qword [rsp + 0x78]
add rax, r15
mov qword [rbx], rax
mov rax, qword [rsp + 0x80]
mov qword [rbx + 8], rax
lea rdx, [r14 + 0x10]
mov rax, qword [rsp + 0x88]
not rax
add rdi, rax
shl rdi, 4
mov rcx, r14
mov r8, rdi
call sub.msvcrt.dll_memmove
mov rax, qword [rsp + 0x90]
cmp rax, 1
mov rdi, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x48]
jbe 0x1400e11b0
mov r13, rax
lea r10, [rax - 1]
mov rcx, r10
shl rcx, 4
mov rax, qword [rbp + rcx]
mov rcx, qword [rbp + rcx + 8]
add rcx, rax
cmp rcx, rdi
je 0x1400e1550
mov rdx, r13
shl rdx, 4
mov r8, qword [rdx + rbp - 0x20]
cmp r8, rax
jbe 0x1400e1550
cmp r13, 2
jbe 0x1400e178d
lea r11, [r13 - 3]
mov rcx, r11
shl rcx, 4
mov rcx, qword [rbp + rcx]
lea r9, [r8 + rax]
cmp rcx, r9
jbe 0x1400e1566
cmp r13, 3
jbe 0x1400e1798
add r8, rcx
cmp qword [rdx + rbp - 0x40], r8
jbe 0x1400e1566
jmp 0x1400e11b6
cmp r13, 3
jb 0x1400e156b
lea r11, [r13 - 3]
mov rcx, r11
shl rcx, 4
mov rcx, qword [rbp + rcx]
cmp rcx, rax
jb 0x1400e156f
lea r11, [r13 - 2]
cmp r13, r11
jbe 0x1400e18fc
lea rbx, [r11 + 1]
mov qword [rsp + 0x38], r13
cmp r13, rbx
jbe 0x1400e18fc
mov r14, r12
mov rax, r11
shl rax, 4
mov rcx, qword [rbp + rax + 8]
shl rbx, 4
mov rdx, qword [rbp + rbx]
mov r13, qword [rbp + rbx + 8]
add r13, rdx
mov r12, r13
sub r12, rcx
jb 0x1400e18fc
cmp r13, rdi
ja 0x1400e18fc
mov qword [rsp + 0x78], rdx
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x90], r10
lea rdx, [rax + rbp]
mov qword [rsp + 0x30], rdx
mov r15, qword [rbp + rax]
add rbx, rbp
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x80], rcx
lea rsi, [rax + rcx*2]
lea rbp, [rsi + r15*2]
mov rdi, r12
sub rdi, r15
cmp rdi, r15
jae 0x1400e16b0
lea r8, [rdi + rdi]
mov r12, r14
mov rcx, r14
mov rdx, rbp
call sub.msvcrt.dll_memcpy
lea r8, [r14 + rdi*2]
test r15, r15
jle 0x1400e1770
test rdi, rdi
jle 0x1400e1770
mov rax, qword [rsp + 0x70]
lea rax, [rax + r13*2]
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
nop word cs:[rax + rax]
movzx ecx, byte [rbp - 2]
cmp byte [r8 - 2], cl
jae 0x1400e1660
add rbp, 0xfffffffffffffffe
jmp 0x1400e168c
movzx ecx, byte [r8 - 1]
sete dl
cmp cl, byte [rbp - 1]
setb cl
and cl, dl
movzx ecx, cl
sub rbp, rcx
sub rbp, rcx
xor cl, 1
movzx edx, cl
sub r8, rdx
sub r8, rdx
mov rcx, r8
test dl, dl
jne 0x1400e168f
mov rcx, rbp
movzx ecx, word [rcx]
mov word [rax], cx
cmp rbp, rsi
jbe 0x1400e16a3
add rax, 0xfffffffffffffffe
cmp r8, r12
ja 0x1400e1650
mov rsi, rbp
mov rdx, r12
jmp 0x1400e1480
lea r8, [r15 + r15]
mov rdi, r14
mov rcx, r14
mov rdx, rsi
call sub.msvcrt.dll_memcpy
lea r8, [r14 + r15*2]
test r15, r15
jle 0x1400e1778
mov rcx, r15
cmp r12, r15
jle 0x1400e1469
mov rax, qword [rsp + 0x40]
lea rax, [rax + r13*2]
mov r12, r14
mov rdx, r14
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
mov r15, rcx
nop word [rax + rax]
movzx r9d, byte [rbp]
movzx r10d, byte [rdx]
cmp r9b, r10b
jb 0x1400e1729
movzx ecx, byte [rbp + 1]
cmp cl, byte [rdx + 1]
setb r11b
xor ecx, ecx
cmp r9b, r10b
jne 0x1400e1764
mov r9, rdx
test r11b, 1
je 0x1400e172e
mov cl, 1
mov r9, rbp
movzx r9d, word [r9]
mov word [rsi], r9w
add rsi, 2
mov r9d, ecx
xor r9b, 1
movzx r9d, r9b
lea rdx, [rdx + r9*2]
cmp rdx, r8
jae 0x1400e1480
movzx ecx, cl
lea rbp, [rbp + rcx*2]
cmp rbp, rax
jb 0x1400e1700
jmp 0x1400e1480
mov r9, rdx
jmp 0x1400e172e
mov rsi, rbp
mov rdx, r12
jmp 0x1400e177e
mov r12, r14
mov rdx, r14
mov rdi, qword [rsp + 0x38]
mov r14, qword [rsp + 0x30]
jmp 0x1400e1480
mov r13d, 2
jmp 0x1400e11b6
mov r13d, 3
jmp 0x1400e11b6
mov rcx, qword [0x140188170]
xor edx, edx
mov r8, rbp
call sub.KERNEL32.dll_HeapFree
mov rcx, qword [0x140188170]
xor edx, edx
mov r8, r12
call sub.KERNEL32.dll_HeapFree
mov r11, qword [rsp + 0x28]
test rdi, rdi
je 0x1400e18fc
mov rsi, qword [r11 + 0x10]
xor eax, eax
jmp 0x1400e17fb
mov byte [rcx + rsi*2], bl
mov byte [rcx + rsi*2 + 1], bpl
inc rsi
mov qword [r11 + 0x10], rsi
mov rax, r14
cmp rdi, r14
je 0x1400e18c5
lea r14, [rax + 1]
cmp rsi, rdi
jbe 0x1400e1844
mov rcx, qword [r11 + 8]
movzx r8d, byte [rcx + rsi*2 - 2]
movzx edx, byte [rcx + rsi*2 - 1]
movzx r10d, byte [rcx + rax*2]
movzx r9d, byte [rcx + r14*2 - 1]
cmp r8b, r10b
mov r11d, r10d
cmova r11d, r8d
cmp dl, r9b
mov ebx, r9d
cmovb ebx, edx
movzx r11d, r11b
movzx ebx, bl
inc ebx
cmp ebx, r11d
mov r11, qword [rsp + 0x28]
jae 0x1400e1880
cmp rax, rsi
jae 0x1400e18fc
mov rcx, qword [r11 + 8]
movzx ebx, byte [rcx + rax*2]
movzx ebp, byte [rcx + r14*2 - 1]
cmp rsi, qword [r11]
jne 0x1400e17e0
mov rcx, r11
mov rdx, rsi
call fcn.14004b450
mov r11, qword [rsp + 0x28]
mov rcx, qword [r11 + 8]
mov rsi, qword [r11 + 0x10]
jmp 0x1400e17e0
movzx eax, r8b
movzx r11d, r10b
cmp r8b, r10b
cmovb r11d, eax
movzx eax, dl
movzx r8d, r9b
cmp dl, r9b
cmova r8d, eax
cmp r11b, r8b
mov eax, r8d
cmova r8d, r11d
cmovb eax, r11d
mov r11, qword [rsp + 0x28]
mov byte [rcx + rsi*2 - 2], al
mov byte [rcx + rsi*2 - 1], r8b
mov rax, r14
cmp rdi, r14
jne 0x1400e17fb
sub rsi, rdi
jb 0x1400e18fc
mov qword [r11 + 0x10], 0
je 0x1400e18e8
lea rdx, [rcx + rdi*2]
lea r8, [rsi + rsi]
mov rdi, r11
call sub.msvcrt.dll_memmove
mov qword [rdi + 0x10], rsi
add rsp, 0x98
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2