Function at 0x1401bfa20
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb0
mov rax, qword [0x1402bc7c0]
xor rax, rsp
mov qword [rbp + 0xf], rax
mov qword [rbp - 0x51], r9
mov rbx, r8
mov qword [rbp - 0x49], rbx
mov r13, rcx
mov qword [rbp - 0x59], rcx
mov rsi, qword [rbp + 0x7f]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], rax
lea r8, [0x140274730]
mov rdx, rsi
lea rcx, [rbp - 0x39]
call fcn.140051790
nop
mov eax, dword [rbx + 0x10]
cdq
and edx, 7
lea edi, [rdx + rax]
sar edi, 3
lea rcx, [rbx + 0x18]
call fcn.140041740
mov r14, rax
lea rcx, [rbx + 0x18]
call fcn.140041a70
cmp eax, edi
jae 0x1401bfabe
mov rax, qword [rsi]
lea rdx, str.Not_enough_key_material_for_twofish.
mov rcx, rsi
call qword [rax + 0x28]
xor bl, bl
jmp 0x1401c006c
mov eax, edi
cdq
and edx, 7
lea r12d, [rdx + rax]
sar r12d, 3
test edi, edi
jle 0x1401bfadf
mov r8, rdi
mov rdx, r14
lea rcx, [rbp - 0x11]
call sub.VCRUNTIME140.dll_memcpy
lea r11, [0x140000000]
test r12d, r12d
jle 0x1401bfb92
lea r9, [rbp - 0x1f]
lea rax, [rbp - 0xb]
mov r10, r12
nop word [rax + rax]
movzx edx, byte [rax + 1]
movzx ecx, byte [rax - 1]
mov r8d, dword [r11 + rdx*4 + 0x274330]
xor r8d, dword [r11 + rcx*4 + 0x273b30]
movzx ecx, byte [rax - 2]
xor r8d, dword [r11 + rcx*4 + 0x273730]
movzx ecx, byte [rax - 3]
xor r8d, dword [r11 + rcx*4 + 0x273330]
movzx ecx, byte [rax - 4]
xor r8d, dword [r11 + rcx*4 + 0x272f30]
movzx ecx, byte [rax - 5]
xor r8d, dword [r11 + rcx*4 + 0x272b30]
movzx ecx, byte [rax - 6]
xor r8d, dword [r11 + rcx*4 + 0x272730]
movzx ecx, byte [rax]
xor r8d, dword [r11 + rcx*4 + 0x273f30]
mov ecx, r8d
shr ecx, 0x18
mov byte [r9 + 1], cl
mov ecx, r8d
shr ecx, 0x10
mov byte [r9], cl
mov ecx, r8d
shr ecx, 8
mov byte [r9 - 1], cl
mov byte [r9 - 2], r8b
lea r9, [r9 + 4]
lea rax, [rax + 8]
sub r10, 1
jne 0x1401bfb00
xor esi, esi
mov r14d, esi
lea r15, [r13 + 0x10b4]
nop
movzx ebx, r14b
add bl, bl
mov byte [rbp - 0x41], bl
mov byte [rbp - 0x40], bl
mov byte [rbp - 0x3f], bl
mov byte [rbp - 0x3e], bl
mov dword [rsp + 0x20], esi
mov r9d, r12d
lea r8, [rbp - 0x11]
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x41]
call fcn.1401c0d20
movzx edi, byte [rbp - 0x5e]
shl edi, 8
movzx eax, byte [rbp - 0x5f]
or edi, eax
shl edi, 8
movzx eax, byte [rbp - 0x60]
or edi, eax
shl edi, 8
movzx eax, byte [rbp - 0x61]
or edi, eax
inc bl
mov byte [rbp - 0x41], bl
mov byte [rbp - 0x40], bl
mov byte [rbp - 0x3f], bl
mov byte [rbp - 0x3e], bl
mov dword [rsp + 0x20], 1
mov r9d, r12d
lea r8, [rbp - 0x11]
lea rdx, [rbp - 0x61]
lea rcx, [rbp - 0x41]
call fcn.1401c0d20
movzx ecx, byte [rbp - 0x5e]
shl ecx, 8
movzx eax, byte [rbp - 0x5f]
or ecx, eax
shl ecx, 8
movzx eax, byte [rbp - 0x60]
or ecx, eax
shl ecx, 8
movzx eax, byte [rbp - 0x61]
or ecx, eax
rol ecx, 8
lea eax, [rcx + rdi]
mov dword [r15 - 4], eax
lea eax, [rdi + rcx*2]
rol eax, 9
mov dword [r15], eax
inc r14d
lea r15, [r15 + 8]
cmp r14d, 0x14
jl 0x1401bfba0
mov r10d, pe_nt_image_headers64
cmp r12d, 2
jne 0x1401bfd73
lea r9, [r13 + 0x4b0]
mov r11, qword [rbp - 0x1a]
mov rbx, qword [rbp - 0x1b]
mov rdi, qword [rbp - 0x1c]
mov r14, qword [rbp - 0x1d]
mov r15, qword [rbp - 0x1e]
mov r12, qword [rbp - 0x1f]
lea r13, [0x140000000]
nop dword [rax]
movzx eax, sil
movzx edx, byte [rax + r13 + 0x271530]
movzx r8d, byte [rax + r13 + 0x271630]
movzx eax, byte [rbp - 0x21]
xor rax, rdx
movzx ecx, byte [rax + r13 + 0x271530]
movzx eax, r14b
xor rcx, rax
movzx eax, byte [rcx + r13 + 0x271630]
mov eax, dword [r13 + rax*4 + 0x271730]
mov dword [r9 - 0x400], eax
movzx eax, byte [rbp - 0x20]
xor rax, r8
movzx ecx, byte [rax + r13 + 0x271530]
movzx eax, dil
xor rcx, rax
movzx eax, byte [rcx + r13 + 0x271530]
mov eax, dword [r13 + rax*4 + 0x271b30]
mov dword [r9], eax
movzx eax, r12b
xor rax, rdx
movzx ecx, byte [rax + r13 + 0x271630]
movzx eax, bl
xor rcx, rax
movzx eax, byte [rcx + r13 + 0x271630]
mov eax, dword [r13 + rax*4 + 0x271f30]
mov dword [r9 + 0x400], eax
movzx eax, r15b
xor rax, r8
movzx ecx, byte [rax + r13 + 0x271630]
movzx eax, r11b
xor rcx, rax
movzx eax, byte [rcx + r13 + 0x271530]
mov eax, dword [r13 + rax*4 + 0x272330]
mov dword [r9 + 0x800], eax
inc rsi
lea r9, [r9 + 4]
sub r10, 1
jne 0x1401bfc90
jmp 0x1401c0021
lea r11, [r13 + 0x4b0]
lea r13, [0x140000000]
cmp r12d, 3
jne 0x1401bfeb8
movzx ebx, byte [rbp - 0x16]
movzx edi, byte [rbp - 0x17]
movzx r14d, byte [rbp - 0x18]
mov r15, qword [rbp - 0x19]
mov r12, qword [rbp - 0x1a]
movzx eax, sil
movzx r9d, byte [rax + r13 + 0x271530]
movzx r8d, byte [rax + r13 + 0x271630]
movzx eax, byte [rbp - 0x21]
xor rax, r8
movzx ecx, byte [rax + r13 + 0x271530]
movzx eax, byte [rbp - 0x1d]
xor rcx, rax
movzx edx, byte [rcx + r13 + 0x271530]
movzx eax, r15b
xor rdx, rax
movzx eax, byte [rdx + r13 + 0x271630]
mov eax, dword [r13 + rax*4 + 0x271730]
mov dword [r11 - 0x400], eax
movzx eax, byte [rbp - 0x20]
xor rax, r8
movzx ecx, byte [rax + r13 + 0x271630]
movzx eax, byte [rbp - 0x1c]
xor rcx, rax
movzx edx, byte [rcx + r13 + 0x271530]
xor rdx, r14
movzx eax, byte [rdx + r13 + 0x271530]
mov eax, dword [r13 + rax*4 + 0x271b30]
mov dword [r11], eax
movzx eax, byte [rbp - 0x1f]
xor rax, r9
movzx ecx, byte [rax + r13 + 0x271530]
movzx eax, byte [rbp - 0x1b]
xor rcx, rax
movzx edx, byte [rcx + r13 + 0x271630]
xor rdx, rdi
movzx eax, byte [rdx + r13 + 0x271630]
mov eax, dword [r13 + rax*4 + 0x271f30]
mov dword [r11 + 0x400], eax
movzx eax, byte [rbp - 0x1e]
xor rax, r9
movzx ecx, byte [rax + r13 + 0x271630]
movzx eax, r12b
xor rcx, rax
movzx ecx, byte [rcx + r13 + 0x271630]
xor rcx, rbx
movzx eax, byte [rcx + r13 + 0x271530]
mov eax, dword [r13 + rax*4 + 0x272330]
mov dword [r11 + 0x800], eax
inc rsi
lea r11, [r11 + 4]
sub r10, 1
jne 0x1401bfda0
jmp 0x1401c0021
movzx ebx, byte [rbp - 0x12]
movzx edi, byte [rbp - 0x13]
movzx r14d, byte [rbp - 0x14]
movzx r15d, byte [rbp - 0x15]
movzx r12d, byte [rbp - 0x16]
nop
movzx eax, sil
movzx r8d, byte [rax + r13 + 0x271530]
movzx r9d, byte [rax + r13 + 0x271630]
mov ecx, r9d
movzx eax, byte [rbp - 0x21]
xor rcx, rax
movzx ecx, byte [rcx + r13 + 0x271630]
movzx eax, byte [rbp - 0x1d]
xor rcx, rax
movzx edx, byte [rcx + r13 + 0x271530]
movzx eax, byte [rbp - 0x19]
xor rdx, rax
movzx ecx, byte [rdx + r13 + 0x271530]
xor rcx, r15
movzx eax, byte [rcx + r13 + 0x271630]
mov eax, dword [r13 + rax*4 + 0x271730]
mov dword [r11 - 0x400], eax
mov ecx, r8d
movzx eax, byte [rbp - 0x20]
xor rcx, rax
movzx edx, byte [rcx + r13 + 0x271630]
movzx eax, byte [rbp - 0x1c]
xor rdx, rax
movzx ecx, byte [rdx + r13 + 0x271630]
movzx eax, byte [rbp - 0x18]
xor rcx, rax
movzx edx, byte [rcx + r13 + 0x271530]
xor rdx, r14
movzx eax, byte [rdx + r13 + 0x271530]
mov eax, dword [r13 + rax*4 + 0x271b30]
mov dword [r11], eax
movzx eax, byte [rbp - 0x1f]
xor r8, rax
movzx ecx, byte [r8 + r13 + 0x271530]
movzx eax, byte [rbp - 0x1b]
xor rcx, rax
movzx edx, byte [rcx + r13 + 0x271530]
movzx eax, byte [rbp - 0x17]
xor rdx, rax
movzx ecx, byte [rdx + r13 + 0x271630]
xor rcx, rdi
movzx eax, byte [rcx + r13 + 0x271630]
mov eax, dword [r13 + rax*4 + 0x271f30]
mov dword [r11 + 0x400], eax
movzx eax, byte [rbp - 0x1e]
xor r9, rax
movzx ecx, byte [r9 + r13 + 0x271530]
movzx eax, byte [rbp - 0x1a]
xor rcx, rax
movzx edx, byte [rcx + r13 + 0x271630]
xor rdx, r12
movzx ecx, byte [rdx + r13 + 0x271630]
xor rcx, rbx
movzx eax, byte [rcx + r13 + 0x271530]
mov eax, dword [r13 + rax*4 + 0x272330]
mov dword [r11 + 0x800], eax
inc rsi
lea r11, [r11 + 4]
sub r10, 1
jne 0x1401bfed0
mov r13, qword [rbp - 0x59]
mov rsi, qword [rbp - 0x51]
test rsi, rsi
je 0x1401c006a
mov rbx, qword [rbp - 0x49]
mov eax, dword [rbx + 8]
sub eax, 3
cmp eax, 1
ja 0x1401c006a
lea rcx, [rbx + 0x50]
call fcn.140041a70
mov edi, eax
lea rcx, [rbx + 0x50]
call fcn.140041740
mov rdx, rax
lea rcx, [rsi + 0x4a0]
mov r9d, dword [r13 + 0xa8]
mov r8d, edi
call fcn.1401bad50
mov bl, 1
lea rcx, [rbp - 0x39]
call fcn.1400518b0
movzx eax, bl
mov rcx, qword [rbp + 0xf]
xor rcx, rsp
call fcn.1401d75d0
mov rbx, qword [rsp + 0xf8]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret