Function at 0x140162da0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov r14, qword [rcx + 0x18]
mov rax, r14
inc rax
je 0x140163809
mov r15, rdx
mov rdi, rcx
mov rsi, qword [rcx + 8]
lea r8, [rsi + 1]
mov rcx, r8
shr rcx, 3
mov r12, r8
and r12, 0xfffffffffffffff8
sub r12, rcx
cmp rsi, 8
cmovb r12, rsi
mov rcx, r12
shr rcx, 1
cmp rax, rcx
mov qword [rsp + 0x28], rdi
jbe 0x140162e27
inc r12
cmp rax, r12
cmova r12, rax
cmp r12, 8
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], r15
jae 0x140162e54
xor eax, eax
cmp r12, 4
setae al
lea r15, [rax*4 + 4]
jmp 0x140162ea4
mov rbx, qword [rdi]
mov rcx, r8
shr rcx, 4
xor eax, eax
test r8b, 0xf
setne al
add rax, rcx
je 0x14016315a
cmp rax, 1
jne 0x1401630f2
xor ecx, ecx
jmp 0x140163144
mov rax, r12
shr rax, 0x3d
jne 0x140163809
shl r12, 3
mov r15d, 1
cmp r12, 0xe
jb 0x140162ea4
movabs rcx, 0x2492492492492493
mov rax, r12
mul rcx
sub r12, rdx
shr r12, 1
add r12, rdx
shr r12, 2
dec r12
bsr rcx, r12
not ecx
mov r15, 0xffffffffffffffff
shr r15, cl
inc r15
mov ecx, 0x48
mov rax, r15
mul rcx
jo 0x140163809
mov r12, rax
add r12, 0xf
and r12, 0xfffffffffffffff0
lea r13, [r15 + 0x10]
mov rbp, r12
add rbp, r13
jb 0x140163809
movabs rax, 0x7ffffffffffffff1
cmp rbp, rax
jae 0x140163809
test rbp, rbp
je 0x140162f2d
movzx eax, byte [0x1402448a8]
mov rcx, qword [0x1402443c8]
test rcx, rcx
jne 0x140162f10
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x140162f23
mov rcx, rax
mov qword [0x1402443c8], rax
xor edx, edx
mov r8, rbp
call qword [sym.imp.kernel32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x140162f32
mov rcx, rbp
call fcn.140052e20
ud2
mov edi, 0x10
lea rbp, [r15 - 1]
mov rax, r15
shr rax, 3
mov rbx, r15
and rbx, 0xfffffffffffffff8
sub rbx, rax
cmp r15, 9
cmovb rbx, rbp
add rdi, r12
mov rcx, rdi
mov dl, 0xff
mov r8, r13
call sub.VCRUNTIME140.dll_memset
sub rbx, r14
mov rcx, rbx
mov rax, qword [rsp + 0x28]
mov rbx, qword [rax]
cmp rsi, 0xffffffffffffffff
je 0x1401630ab
mov qword [rsp + 0x20], rcx
lea r13, [rbx - 0x48]
mov rax, qword [rsp + 0x30]
mov r12, qword [rax]
mov r15, qword [rax + 8]
xor r14d, r14d
jmp 0x140163007
shr rax, 0x39
lea rcx, [rdx - 0x10]
and rcx, rbp
mov byte [rdi + rdx], al
mov byte [rcx + rdi + 0x10], al
mov rax, r14
not rax
lea rax, [rax + rax*8]
not rdx
lea rcx, [rdx + rdx*8]
mov rdx, qword [rbx + rax*8 + 0x40]
mov qword [rdi + rcx*8 + 0x40], rdx
movdqu xmm0, xmmword [rbx + rax*8]
movdqu xmm1, xmmword [rbx + rax*8 + 0x10]
movups xmm2, xmmword [rbx + rax*8 + 0x20]
movups xmm3, xmmword [rbx + rax*8 + 0x30]
movups xmmword [rdi + rcx*8 + 0x30], xmm3
movups xmmword [rdi + rcx*8 + 0x20], xmm2
movdqu xmmword [rdi + rcx*8 + 0x10], xmm1
movdqu xmmword [rdi + rcx*8], xmm0
lea rax, [r14 + 1]
cmp r14, rsi
mov r14, rax
je 0x14016308c
cmp byte [rbx + r14], 0
js 0x140162ff7
mov rax, r14
neg rax
lea rax, [rax + rax*8]
mov r8, qword [r13 + rax*8]
mov r9, qword [r13 + rax*8 + 0x10]
mov rcx, r12
mov rdx, r15
call fcn.140029e30
mov rcx, rax
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x140163067
mov r8d, 0x10
nop word cs:[rax + rax]
add rcx, r8
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x140163050
tzcnt edx, edx
add rdx, rcx
and rdx, rbp
cmp byte [rdi + rdx], 0
js 0x140162fa0
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x140162fa0
mov rax, qword [rsp + 0x28]
mov qword [rax], rdi
mov qword [rax + 8], rbp
mov rcx, qword [rsp + 0x20]
mov qword [rax + 0x10], rcx
test rsi, rsi
jne 0x1401630b6
jmp 0x1401637eb
mov qword [rax], rdi
mov qword [rax + 8], rbp
mov qword [rax + 0x10], rcx
mov ecx, 0x48
mov rax, qword [rsp + 0x38]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add rsi, rax
cmp rsi, 0xffffffffffffffef
je 0x1401637eb
sub rbx, rax
mov rcx, qword [0x1402443c8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x1401637eb
movabs rdx, 0x1ffffffffffffffe
and rdx, rax
xor ecx, ecx
movdqa xmm0, xmmword [0x14016e160]
nop dword [rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + rcx]
por xmm1, xmm0
movdqa xmmword [rbx + rcx], xmm1
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + rcx + 0x10]
por xmm1, xmm0
movdqa xmmword [rbx + rcx + 0x10], xmm1
add rcx, 0x20
add rdx, 0xfffffffffffffffe
jne 0x140163110
test al, 1
je 0x14016315a
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rbx + rcx]
por xmm0, xmmword [0x14016e160]
movdqa xmmword [rbx + rcx], xmm0
cmp r8, 0x10
jae 0x140163179
lea rcx, [rbx + 0x10]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
cmp rsi, 0xffffffffffffffff
jne 0x140163183
xor eax, eax
jmp 0x1401637e4
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbx + r8], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], r14
lea rax, [rbx - 0x48]
mov qword [rsp + 0x70], rax
mov rax, qword [r15]
mov rcx, qword [r15 + 8]
movabs rdx, 0x736f6d6570736575
xor rdx, rax
mov qword [rsp + 0x20], rdx
movabs rdx, 0x646f72616e646f6d
xor rdx, rcx
mov qword [rsp + 0x58], rdx
movabs rdx, 0x6c7967656e657261
xor rdx, rax
mov qword [rsp + 0x50], rdx
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x48], rax
mov r13, rbx
xor r11d, r11d
jmp 0x140163217
shr rax, 0x39
lea rcx, [r11 - 0x10]
and rcx, rsi
mov byte [rbx + r11], al
mov byte [rcx + rbx + 0x10], al
lea rax, [r11 + 1]
add r13, 0xffffffffffffffb8
cmp r11, rsi
mov r11, rax
je 0x1401637d5
cmp byte [rbx + r11], 0x80
jne 0x140163203
lea rax, [r11*8]
lea rax, [rax + rax*8]
mov rcx, rbx
sub rcx, rax
mov qword [rsp + 0x78], rcx
neg rax
add rax, rbx
add rax, 0xffffffffffffffb8
mov qword [rsp + 0x80], rax
mov rax, r11
not rax
lea rax, [rax + rax*8]
lea rax, [rbx + rax*8]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], r11
mov rax, r11
neg rax
lea rax, [rax + rax*8]
mov rcx, qword [rsp + 0x70]
lea rax, [rcx + rax*8]
mov qword [rsp + 0x30], rax
jmp 0x140163311
mov r8, qword [rsp + 0x40]
mov rax, qword [r8]
mov rdx, qword [rcx]
mov qword [r8], rdx
mov qword [rcx], rax
mov rax, qword [r8 + 8]
mov rdx, qword [rcx + 8]
mov qword [r8 + 8], rdx
mov qword [rcx + 8], rax
mov rax, qword [r8 + 0x10]
mov rdx, qword [rcx + 0x10]
mov qword [r8 + 0x10], rdx
mov qword [rcx + 0x10], rax
mov rax, qword [r8 + 0x18]
mov rdx, qword [rcx + 0x18]
mov qword [r8 + 0x18], rdx
mov qword [rcx + 0x18], rax
mov rax, qword [r8 + 0x20]
mov rdx, qword [rcx + 0x20]
mov qword [r8 + 0x20], rdx
mov qword [rcx + 0x20], rax
mov rax, qword [r8 + 0x28]
mov rdx, qword [rcx + 0x28]
mov qword [r8 + 0x28], rdx
mov qword [rcx + 0x28], rax
mov rax, qword [r8 + 0x30]
mov rdx, qword [rcx + 0x30]
mov qword [r8 + 0x30], rdx
mov qword [rcx + 0x30], rax
mov rax, qword [r8 + 0x38]
mov rdx, qword [rcx + 0x38]
mov qword [r8 + 0x38], rdx
mov qword [rcx + 0x38], rax
mov rax, qword [r8 + 0x40]
mov rdx, qword [rcx + 0x40]
mov qword [r8 + 0x40], rdx
mov qword [rcx + 0x40], rax
mov rax, qword [rsp + 0x30]
mov rdi, qword [rax]
mov rbp, qword [rax + 0x10]
mov rax, rbp
and rax, 0xfffffffffffffff8
je 0x1401633c0
mov r10, qword [rsp + 0x50]
mov r9, qword [rsp + 0x58]
mov r11, qword [rsp + 0x48]
xor r15d, r15d
mov r8, qword [rsp + 0x20]
nop word cs:[rax + rax]
add r8, r9
rol r9, 0xd
mov rcx, qword [rdi + r15]
xor r9, r8
rol r8, 0x20
xor r11, rcx
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r8
xor r8, rcx
add r15, 8
cmp r15, rax
jb 0x140163350
mov r14d, ebp
and r14d, 7
cmp r14d, 3
jbe 0x1401633e4
mov r12d, dword [rdi + r15]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, r14
jb 0x1401633f5
jmp 0x14016340e
mov r11, qword [rsp + 0x48]
mov r9, qword [rsp + 0x58]
mov r10, qword [rsp + 0x50]
mov r8, qword [rsp + 0x20]
xor r15d, r15d
mov r14d, ebp
and r14d, 7
cmp r14d, 3
ja 0x1401633a0
xor r12d, r12d
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, r14
jae 0x14016340e
lea rcx, [rax + r15]
movzx edx, word [rdi + rcx]
lea ecx, [rax*8]
shl rdx, cl
or r12, rdx
or rax, 2
cmp rax, r14
jae 0x140163430
add r15, rax
movzx edx, byte [rdi + r15]
shl eax, 3
mov ecx, eax
shl rdx, cl
or r12, rdx
jmp 0x140163435
test r14, r14
je 0x140163492
lea ecx, [r14*8]
mov edi, 0xff
shl rdi, cl
or rdi, r12
cmp r14, 7
jne 0x140163570
mov ecx, 8
add r8, r9
rol r9, 0xd
sub rcx, r14
xor r9, r8
rol r8, 0x20
xor r11, rdi
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
xor r11, r8
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r8, rdi
jmp 0x140163494
xor ecx, ecx
mov edi, 1
sub rdi, rcx
mov eax, edi
and eax, 7
and rdi, 0xfffffffffffffff8
cmp rcx, rdi
jae 0x140163520
nop word [rax + rax]
add r8, r9
rol r9, 0xd
xor r9, r8
rol r8, 0x20
xor r11, 0xff
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r8
xor r8, 0xff
add rcx, 8
cmp rcx, rdi
jb 0x1401634b0
xor edi, edi
cmp rax, 4
setae dil
cmp eax, 4
mov r14d, 0
mov ecx, 0xff
cmovae r14, rcx
shl rdi, 2
jmp 0x140163525
xor r14d, r14d
xor edi, edi
mov rdx, rdi
lea ecx, [rdi*8]
mov r15d, 0xff
shl r15, cl
or rdx, 1
mov r12, rdi
or r12, 2
cmp rdx, rax
mov edx, 0
cmovae r15, rdx
cmovae r12, rdi
or r15, r14
lea ecx, [r12*8]
mov edi, 0xff
shl rdi, cl
cmp r12, rax
cmovae rdi, rdx
or rdi, r15
shl rbp, 0x38
movabs rax, 0x100000000000000
add rbp, rax
add r8, r9
rol r9, 0xd
or rbp, rdi
xor r9, r8
rol r8, 0x20
xor r11, rbp
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r11, r8
xor r9, r10
rol r10, 0x20
xor r8, rbp
add r8, r9
rol r9, 0xd
xor r9, r8
rol r8, 0x20
xor r10, 0xff
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r8
add r8, r9
rol r9, 0xd
xor r9, r8
rol r8, 0x20
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r8
add r8, r9
rol r9, 0xd
add r10, r11
rol r11, 0x10
xor r11, r10
rol r11, 0x15
xor r9, r8
add r10, r9
rol r9, 0x11
mov rax, r10
rol rax, 0x20
xor rax, r9
xor rax, r11
xor rax, r10
mov rcx, rax
and rcx, rsi
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb r8d, xmm0
mov r9, rcx
test r8d, r8d
mov r11, qword [rsp + 0x38]
jne 0x14016369a
mov r10d, 0x10
mov r9, rcx
nop word cs:[rax + rax]
add r9, r10
and r9, rsi
movdqu xmm0, xmmword [rbx + r9]
pmovmskb r8d, xmm0
add r10, 0x10
test r8d, r8d
je 0x140163680
tzcnt r8d, r8d
add r8, r9
and r8, rsi
cmp byte [rbx + r8], 0
js 0x1401636b9
movdqa xmm0, xmmword [rbx]
pmovmskb edx, xmm0
tzcnt r8d, edx
mov rdx, r11
sub rdx, rcx
mov r9, r8
sub r9, rcx
xor r9, rdx
and r9, rsi
cmp r9, 0x10
jb 0x1401631f0
mov rcx, r8
not rcx
lea rcx, [rcx + rcx*8]
lea rcx, [rbx + rcx*8]
movzx edx, byte [rbx + r8]
shr rax, 0x39
lea r9, [r8 - 0x10]
and r9, rsi
mov byte [rbx + r8], al
mov byte [r9 + rbx + 0x10], al
cmp dl, 0xff
je 0x140163790
shl r8, 3
lea rdx, [r8 + r8*8]
mov rax, rbx
sub rax, rdx
cmp qword [rsp + 0x80], rax
jae 0x140163280
cmp rcx, qword [rsp + 0x78]
jae 0x140163280
mov rcx, 0xffffffffffffffb8
nop word cs:[rax + rax]
movzx edx, byte [r13 + rcx]
movzx r8d, byte [rax + rcx]
mov byte [r13 + rcx], r8b
mov byte [rax + rcx], dl
movzx edx, byte [r13 + rcx + 1]
movzx r8d, byte [rax + rcx + 1]
mov byte [r13 + rcx + 1], r8b
mov byte [rax + rcx + 1], dl
movzx edx, byte [r13 + rcx + 2]
movzx r8d, byte [rax + rcx + 2]
mov byte [r13 + rcx + 2], r8b
mov byte [rax + rcx + 2], dl
add rcx, 3
jne 0x140163740
jmp 0x140163311
lea rax, [r11 - 0x10]
and rax, rsi
mov byte [rbx + r11], 0xff
mov byte [rax + rbx + 0x10], 0xff
mov rdx, qword [rsp + 0x40]
mov rax, qword [rdx + 0x40]
mov qword [rcx + 0x40], rax
movdqu xmm0, xmmword [rdx]
movdqu xmm1, xmmword [rdx + 0x10]
movups xmm2, xmmword [rdx + 0x20]
movups xmm3, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm3
movups xmmword [rcx + 0x20], xmm2
movdqu xmmword [rcx + 0x10], xmm1
movdqu xmmword [rcx], xmm0
jmp 0x140163203
mov rdi, qword [rsp + 0x28]
mov r14, qword [rsp + 0x68]
mov rax, qword [rsp + 0x60]
sub rax, r14
mov qword [rdi + 0x10], rax
movabs rax, 0x8000000000000001
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140052de0
ud2