Function at 0x14004ab60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x140113f00]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rbx, rdx
mov rsi, rcx
mov qword [rbp - 0x18], rdx
xor edi, edi
mov dword [rbp - 0x58], 0xccf5e2f8
mov dword [rbp - 0x54], 0xeeeefee9
mov word [rbp - 0x50], 0x100
mov ecx, edi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 8
jb 0x14004abb0
mov byte [rbp - 0x4f], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x50]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140020230
nop
cmp byte [rbx], 0
jne 0x14004abeb
mov byte [rbx], 1
call fcn.1400342e0
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x14004abff
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.14003a610
jmp 0x14004ac03
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x14004ac0e
mov r8, qword [rax + 8]
jmp 0x14004ac11
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x14004ac1e
mov rdx, qword [r8]
lea rcx, [rsi + 0x158]
mov r8, qword [r8 + 0x10]
call fcn.14002b7e0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14004ac6d
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ac68
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ac68
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d8ba8
mov dword [rbp - 0x58], 0xd6f5e2f8
mov dword [rbp - 0x54], 0xf3f5f7f4
mov dword [rbp - 0x50], 0xc4d3cafb
mov dword [rbp - 0x4c], 0x100d0d0
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 0xe
jb 0x14004ac90
mov byte [rbp - 0x49], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x4a]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140020230
nop
cmp byte [rbx], 0
jne 0x14004accb
mov byte [rbx], 1
call fcn.1400342e0
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x14004acdf
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.14003a610
jmp 0x14004ace3
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x14004acee
mov r8, qword [rax + 8]
jmp 0x14004acf1
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x14004acfe
mov rdx, qword [r8]
lea rcx, [rsi + 0x178]
mov r8, qword [r8 + 0x10]
call fcn.14002b7e0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14004ad4d
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ad48
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ad48
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d8ba8
mov dword [rbp - 0x58], 0xd2f5e2f8
mov dword [rbp - 0x54], 0xefe2ff
mov byte [rbp - 0x50], 1
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 7
jb 0x14004ad70
mov byte [rbp - 0x50], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x51]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140020230
nop
cmp byte [rbx], 0
jne 0x14004adab
mov byte [rbx], 1
call fcn.1400342e0
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x14004adbf
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.14003a610
jmp 0x14004adc3
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x14004adce
mov r8, qword [rax + 8]
jmp 0x14004add1
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x14004adde
mov rdx, qword [r8]
lea rcx, [rsi + 0x198]
mov r8, qword [r8 + 0x10]
call fcn.14002b7e0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14004ae2d
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ae28
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ae28
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d8ba8
mov dword [rbp - 0x58], 0xeaeaf2e0
mov dword [rbp - 0x54], 0xf2f4f3
mov byte [rbp - 0x50], 1
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 7
jb 0x14004ae50
mov byte [rbp - 0x50], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x51]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140020230
nop
cmp byte [rbx], 0
jne 0x14004ae8b
mov byte [rbx], 1
call fcn.1400342e0
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x14004ae9f
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.14003a610
jmp 0x14004aea3
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x14004aeae
mov r8, qword [rax + 8]
jmp 0x14004aeb1
mov r8, rdi
mov rdx, r8
cmp qword [r8 + 0x18], 0x10
jb 0x14004aebe
mov rdx, qword [r8]
lea rcx, [rsi + 0x1b8]
mov r8, qword [r8 + 0x10]
call fcn.14002b7e0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14004af0d
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004af08
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004af08
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d8ba8
movdqa xmm0, xmmword [0x1400e4690]
movdqu xmmword [rbp - 0x58], xmm0
mov word [rbp - 0x48], 0xcd
mov byte [rbp - 0x46], 1
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx - 0x6a]
xor byte [rbp + rcx - 0x58], al
inc rcx
cmp rcx, 0x11
jb 0x14004af30
mov byte [rbp - 0x46], 0
lea r9, [rbp - 0x60]
lea r8, [rbp - 0x47]
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x40]
call fcn.140020230
nop
cmp byte [rbx], 0
jne 0x14004af6b
mov byte [rbx], 1
call fcn.1400342e0
mov qword [rbx + 8], rax
cmp byte [rbx], 1
jne 0x14004af7f
lea rdx, [rbp - 0x40]
mov rcx, qword [rbx + 8]
call fcn.14003a610
jmp 0x14004af83
mov rax, qword [rbp - 0x18]
cmp byte [rax], 3
jne 0x14004af8c
mov rdi, qword [rax + 8]
mov rdx, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14004af99
mov rdx, qword [rdi]
lea rcx, [rsi + 0x1d8]
mov r8, qword [rdi + 0x10]
call fcn.14002b7e0
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x14004afe9
inc rdx
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004afe3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004afe3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400d8ba8
nop
lea rcx, [rbx + 8]
movzx edx, byte [rbx]
call fcn.1400427c0
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400d8ff0
mov rbx, qword [rsp + 0xb0]
add rsp, 0x80
pop rdi
pop rsi
pop rbp
ret