Function at 0x14022781c
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xd0
xor ebx, ebx
mov dword [rsp + 0x20], ebx
mov dword [rbp - 0x39], ebx
lea rax, [0x14033e7d8]
mov qword [rbp - 0x31], rax
lea rdx, [rbp - 0x39]
lea rcx, [rsp + 0x28]
call fcn.14027a488
mov dword [rsp + 0x20], 2
cmp dword [rbp - 0x39], ebx
jne 0x140227be5
lea rax, [rsp + 0x28]
cmp qword [rbp - 0x69], 7
cmova rax, qword [rsp + 0x28]
mov qword [rbp - 0x39], rax
mov rax, qword [rbp - 0x71]
mov qword [rbp - 0x31], rax
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x17]
call fcn.140225ee8
mov r8b, bl
mov rdx, rax
lea rcx, [rbp - 9]
call fcn.1401b3af0
nop
lea r12d, [rbx + 6]
mov dword [rsp + 0x20], r12d
lea rdx, [rbp - 0x29]
lea rcx, [rbp - 9]
call fcn.1402354c8
nop
and r12d, 0xfffffffb
mov dword [rsp + 0x20], r12d
lea rcx, [rbp - 9]
call fcn.14006f830
and r12d, 0xfffffffd
mov dword [rsp + 0x20], r12d
lea rcx, [rsp + 0x28]
call fcn.14006f830
mov dword [rsp + 0x28], 0x69a58e69
mov dword [rbp - 0x7d], 0x3b5a0860
mov dword [rbp - 0x79], 0x86df7219
mov dword [rbp - 0x75], 0xccc729eb
mov dword [rbp - 0x71], 0xf48d3b5a
mov dword [rbp - 0x6d], 0x121f9559
mov dword [rbp - 0x69], 0xf2076af0
mov dword [rbp - 0x65], 0x37975ab2
mov dword [rbp - 0x61], 0x4fec085b
mov dword [rbp - 0x5d], 0xdd4220a2
mov dword [rbp - 0x59], 0xa4a5bbd5
mov dword [rbp - 0x55], 0x2e89efb7
mov dword [rbp - 0x51], 0x2a48ce16
mov dword [rbp - 0x4d], 0x44171dcc
mov dword [rbp - 0x49], 0x657ccb6c
mov r13d, ebx
xor edx, edx
mov rax, r13
movabs rcx, 0x13cce94adb9e64d0
div rcx
lea r14d, [rdx + 0x30]
movzx r15d, r14w
ror r15w, 8
movzx esi, r15w
shr si, 0xa
movzx eax, r15w
shl ax, 6
or si, ax
movzx edi, si
ror di, 8
movzx r9d, r15w
shr r9w, 0xd
movzx eax, r15w
shl ax, 3
or r9w, ax
movzx edx, r15w
shl dx, 0xd
movzx eax, r15w
shr ax, 3
or dx, ax
movzx r11d, dx
ror r11w, 8
movzx r8d, r15w
shr r8w, 0xc
movzx eax, r15w
shl ax, 4
or r8w, ax
movzx ebx, r15w
not bx
movzx ecx, r15w
ror cx, 1
movzx r10d, word [rsp + r13*2 + 0x28]
sub r10w, si
mov eax, 0x6afe
add r10w, ax
mov eax, 0x9204
sub ax, si
xor r10w, ax
sub r10w, word [0x140336058]
sub r10w, word [0x140336050]
add r10w, di
add r10w, r15w
sub r10w, cx
mov eax, 0x6fc1
add r10w, ax
lea eax, [r15 + rsi]
mov ecx, 0x2d07
add ax, cx
xor r10w, ax
sub r10w, dx
sub r10w, r9w
sub r10w, r15w
sub r10w, word [0x140336048]
sub r10w, 0x50
add r10w, r11w
mov rcx, qword [0x140336040]
add r10w, si
add r10w, cx
movzx eax, r8w
sub ax, r9w
add ax, si
add ax, r15w
xor r10w, ax
movzx eax, r15w
sub ax, r8w
xor ax, r15w
sub r10w, ax
sub r10w, r11w
add r10w, r15w
mov eax, 0x4230
add r10w, ax
movzx eax, r15w
ror ax, 7
mov edx, 0x4050
sub r11w, dx
add ax, r11w
xor r10w, ax
mov edx, 0x9d7
add edx, r15d
add dx, dx
sub dx, r10w
movzx eax, bx
xor ax, word [0x140336038]
sub dx, ax
mov eax, 0x7100
add eax, r15d
mov r8d, 0x2440
xor ax, r8w
sub dx, ax
movzx eax, r15w
xor ax, word [0x140336030]
add dx, ax
sub dx, di
sub dx, si
sub dx, r14w
sub dx, cx
movzx eax, r15w
movzx ecx, bx
imul ecx, eax
xor dx, cx
mov word [rsp + r13*2 + 0x28], dx
inc r13
cmp r13, 0x1e
jb 0x140227952
lea rax, [rsp + 0x28]
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x31], 0x3c
lea rax, [rsp + 0x28]
mov qword [rbp + 0x6f], rax
xor r8d, r8d
lea rdx, [rbp + 0x6f]
lea rcx, [rbp - 9]
call fcn.1401b3a58
nop
xorps xmm0, xmm0
mov r13, qword [rbp + 0x67]
movups xmmword [r13], xmm0
and qword [r13 + 0x10], 0
and qword [r13 + 0x18], 0
lea rdx, [rbp - 0x29]
cmp qword [rbp - 0x11], 7
cmova rdx, qword [rbp - 0x29]
mov r8, qword [rbp - 0x19]
mov rcx, r13
call fcn.1400cb264
nop
or r12d, 0x10
mov dword [rsp + 0x20], r12d
lea rdx, [rbp - 9]
mov rcx, r13
call fcn.140225af4
and r12d, 0xffffffef
mov dword [rsp + 0x20], r12d
or r12d, 1
mov dword [rsp + 0x20], r12d
lea rcx, [rbp - 9]
call fcn.14006f830
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x28], xmm0
movups xmmword [rbp - 0x71], xmm0
movups xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], rax
mov dword [rbp - 0x49], eax
lea rcx, [rbp - 0x29]
call fcn.14006f830
mov rax, r13
mov rbx, qword [rsp + 0x120]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r8, [rsp + 0x28]
lea rdx, [rbp - 0x39]
lea rcx, str.temp_directory_path
call fcn.140226270
int3