Function at 0x140049940
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x50
mov rax, qword [0x1401ae6f8]
xor rax, rsp
mov qword [rsp + 0x40], rax
mov rsi, qword [rdx + 8]
xor r12d, r12d
sub rsi, qword [rdx]
xorps xmm0, xmm0
sar rsi, 2
movzx ebp, r9b
mov qword [rsp + 0x38], r12
mov r15, r8
mov r14, rdx
movdqu xmmword [rsp + 0x28], xmm0
test rsi, rsi
je 0x1400499e5
movabs rax, 0x3fffffffffffffff
cmp rsi, rax
ja 0x140049c45
mov rdx, rsi
call fcn.14000c940
mov rdx, qword [r14]
mov rdi, rax
mov rbx, qword [r14 + 8]
sub rbx, rdx
mov qword [rsp + 0x28], rax
lea rcx, [rax + rsi*4]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rcx
mov r8, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memmove
sar rbx, 2
lea r9, [rdi + rbx*4]
mov qword [rsp + 0x30], r9
jmp 0x1400499ea
mov r9, qword [rsp + 0x30]
mov r10, qword [r15]
mov edx, r12d
mov r8, qword [r15 + 8]
mov r11, r12
mov rax, r8
mov rcx, r10
sub rax, r10
cmp r10, r8
cmova rax, r12
test rax, rax
je 0x140049a77
cmp rax, 8
jb 0x140049a77
and rax, 0xfffffffffffffff8
xorps xmm2, xmm2
xorps xmm3, xmm3
nop dword [rax]
movd xmm1, dword [rcx]
xorps xmm0, xmm0
punpcklbw xmm1, xmm0
add r11, 8
punpcklwd xmm1, xmm0
paddd xmm2, xmm1
movd xmm1, dword [rcx + 4]
punpcklbw xmm1, xmm0
add rcx, 8
punpcklwd xmm1, xmm0
paddd xmm1, xmm3
movdqa xmm3, xmm1
cmp r11, rax
jne 0x140049a20
paddd xmm2, xmm1
movdqa xmm0, xmm2
psrldq xmm0, 8
paddd xmm2, xmm0
movdqa xmm0, xmm2
psrldq xmm0, 4
paddd xmm2, xmm0
movd edx, xmm2
cmp rcx, r8
je 0x140049a8d
nop dword [rax]
movzx eax, byte [rcx]
inc rcx
add edx, eax
cmp rcx, r8
jne 0x140049a80
and edx, 0x8000000f
jge 0x140049a9c
dec edx
or edx, 0xfffffff0
inc edx
mov rax, qword [rsp + 0x28]
mov r8d, edx
and r8d, 0xf
cmp rax, r9
je 0x140049abc
nop dword [rax]
xor dword [rax], r8d
add rax, 4
cmp rax, r9
jne 0x140049ab0
movsxd rax, edx
xor edx, edx
div rsi
mov r15, rdx
test bpl, bpl
jne 0x140049ada
mov rax, rsi
sub rax, rdx
xor edx, edx
div rsi
mov r15, rdx
mov rbp, r12
test rsi, rsi
je 0x140049bbe
nop word [rax + rax]
xor eax, eax
movzx ecx, bpl
and cl, 0x1f
mov dword [rsp + 0x20], eax
mov r11d, 1
mov rax, rbp
shl r11d, cl
mov r9, r12
shr rax, 5
lea rdi, [rax*4]
nop dword [rax + rax]
mov rax, qword [rsp + 0x28]
lea r10, [rsp + 0x20]
movzx ecx, r9b
and cl, 0x1f
lea rdx, [rax + r9*4]
mov rax, r9
shr rax, 5
lea r10, [r10 + rax*4]
mov eax, 1
shl eax, cl
mov ecx, dword [r10]
test dword [rdx + rdi], r11d
je 0x140049b54
or ecx, eax
jmp 0x140049b58
not eax
and ecx, eax
inc r9
mov dword [r10], ecx
cmp r9, rsi
jb 0x140049b20
mov r10, r12
nop word [rax + rax]
mov rax, qword [r14]
xor edx, edx
lea rbx, [rax + r10*4]
mov r9d, dword [rbx + rdi]
lea rax, [r10 + r15]
div rsi
movzx eax, dl
shr rdx, 5
and al, 0x1f
movzx ecx, al
mov eax, dword [rsp + rdx*4 + 0x20]
bt eax, ecx
jae 0x140049b9e
or r9d, r11d
jmp 0x140049ba6
mov eax, r11d
not eax
and r9d, eax
inc r10
mov dword [rbx + rdi], r9d
cmp r10, rsi
jb 0x140049b70
inc rbp
cmp rbp, rsi
jb 0x140049af0
mov rcx, qword [r14 + 8]
mov rax, qword [r14]
cmp rax, rcx
je 0x140049bdc
nop word [rax + rax]
xor dword [rax], r8d
add rax, 4
cmp rax, rcx
jne 0x140049bd0
mov rcx, qword [rsp + 0x28]
test rcx, rcx
je 0x140049c1f
mov rdx, qword [rsp + 0x38]
mov rax, rcx
sub rdx, rcx
and rdx, 0xfffffffffffffffc
cmp rdx, 0x1000
jb 0x140049c1a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140049c1a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140127cb0
mov rcx, qword [rsp + 0x40]
xor rcx, rsp
call fcn.140127920
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
call fcn.14000c8c0
int3