Function at 0x7ff787350e60
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xb8
call sub.kernel32.dll___chkstk
sub rsp, rax
xor r14d, r14d
mov rbx, rdx
mov qword [rsp + 0x60], r14
mov rsi, rcx
call fcn.7ff787249450
mov rcx, rax
mov qword [rsp + 0x70], r14
mov r12, rax
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x58], r14
call fcn.7ff787350ce0
mov rcx, rbx
mov qword [rsp + 0x88], rax
mov r13, rax
call fcn.7ff787202b20
mov rcx, rsi
mov dword [rsp + 0x68], eax
mov edi, eax
mov ebx, r14d
mov ebp, r14d
call fcn.7ff7871a02b0
mov rcx, rsi
mov qword [rsp + 0x98], rax
call fcn.7ff78726d9d0
mov r15, qword [rsp + 0x120]
mov qword [rsp + 0xa0], rax
test r13, r13
je 0x7ff787351041
test edi, edi
jle 0x7ff787351041
mov r8, qword [rsp + 0x128]
mov edx, 0xff
mov rcx, r15
mov r8, qword [r8]
call sub.ntdll.dll_memset
mov r8d, dword [rsp + 0x118]
lea r9, [0x7ff78742ace0]
lea rdx, [rsp + 0x110]
xor ecx, ecx
call fcn.7ff78723c710
mov qword [rsp + 0x80], rax
test rax, rax
jne 0x7ff787350f7e
call fcn.7ff787203740
lea r8, [0x7ff78742ad78]
mov edx, 0x12f
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
lea edx, [r14 + 0x64]
jmp 0x7ff787351035
mov rcx, qword [rax + 0x10]
cmp dword [rcx], edi
je 0x7ff787350fad
call fcn.7ff787203740
lea r8, [0x7ff78742ad78]
mov edx, 0x134
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
mov edx, 0x68
jmp 0x7ff787351035
mov rax, qword [rax + 0x18]
mov rcx, qword [rcx + 8]
mov qword [rsp + 0xa8], rcx
movsxd rdi, dword [rax]
mov rsi, qword [rax + 8]
mov r13, rdi
mov rax, qword [rsp + 0x128]
cmp qword [rax], rdi
jae 0x7ff787350ff8
call fcn.7ff787203740
lea r8, [0x7ff78742ad78]
mov edx, 0x13c
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
mov edx, 0x6b
jmp 0x7ff787351035
mov rcx, qword [rsp + 0x98]
call fcn.7ff787273990
mov qword [rsp + 0x60], rax
test rax, rax
jne 0x7ff7873510e1
call fcn.7ff787203740
lea r8, [0x7ff78742ad78]
mov edx, 0x142
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
mov edx, 0x80003
xor r8d, r8d
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
mov rdi, rbx
mov rax, qword [rsp + 0x128]
xor edx, edx
mov rcx, r15
mov r8, qword [rax]
call sub.ntdll.dll_memset
mov r8d, 0x18b
lea rdx, [0x7ff78742ad48]
mov rcx, rbx
call fcn.7ff7871fcce0
mov rcx, qword [rsp + 0x58]
lea rdx, [0x7ff78742ad48]
mov r8d, 0x18c
call fcn.7ff7871fcce0
mov r8d, 0x18d
lea rdx, [0x7ff78742ad48]
mov rcx, rdi
call fcn.7ff7871fcce0
mov rcx, qword [rsp + 0x70]
call fcn.7ff78727e620
mov rcx, qword [rsp + 0x60]
call fcn.7ff7872736d0
mov rcx, qword [rsp + 0x80]
lea rdx, [0x7ff78742ace0]
call fcn.7ff78723c2a0
mov rcx, rbp
call fcn.7ff78721c4a0
mov eax, r14d
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rcx, rax
call fcn.7ff787273ab0
mov rcx, qword [rsp + 0x60]
call fcn.7ff787273790
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x78], rax
call fcn.7ff787273790
mov qword [rsp + 0x90], rax
test rax, rax
jne 0x7ff787351125
call fcn.7ff787203740
lea r8, [0x7ff78742ad78]
mov edx, 0x14b
jmp 0x7ff787351024
mov r8d, 0x14f
lea rdx, [0x7ff78742ad48]
mov rcx, r13
call fcn.7ff7871fcf70
mov rbx, rax
lea rdx, [0x7ff78742ad48]
mov rax, qword [rsp + 0x88]
mov r8d, 0x150
lea rcx, [rax + rax]
call fcn.7ff7871fcf70
movsxd rcx, dword [rsp + 0x68]
lea rdx, [0x7ff78742ad48]
mov r8d, 0x151
mov qword [rsp + 0x58], rax
call fcn.7ff7871fcf70
mov qword [rsp + 0x50], rax
test rbx, rbx
je 0x7ff787351641
cmp qword [rsp + 0x58], rbp
je 0x7ff787351641
test rax, rax
je 0x7ff787351641
mov rcx, r12
call fcn.7ff78727eba0
mov qword [rsp + 0x70], rax
mov rcx, rax
test rax, rax
jne 0x7ff7873511e6
call fcn.7ff787203740
lea r8, [0x7ff78742ad78]
mov edx, 0x158
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
mov edx, 0x80010
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
mov rdi, qword [rsp + 0x50]
jmp 0x7ff787351044
mov rax, qword [rsp + 0x60]
mov rdx, rcx
mov qword [rsp + 0x20], rax
mov rcx, r12
mov rax, qword [rsp + 0x80]
mov r9, qword [rax + 8]
mov r8, qword [rax]
call fcn.7ff78727ed50
test eax, eax
je 0x7ff787351609
mov rcx, qword [rsp + 0x100]
call fcn.7ff7872029e0
mov rcx, qword [rsp + 0x60]
xor r8d, r8d
mov r9, qword [rsp + 0x70]
mov qword [rsp + 0x28], rcx
mov rdx, r9
mov rcx, r12
mov qword [rsp + 0x20], rax
call fcn.7ff78727ea00
test eax, eax
je 0x7ff787351609
mov rax, qword [rsp + 0x60]
mov rcx, r12
mov r9, qword [rsp + 0x90]
mov r8, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x70]
mov qword [rsp + 0x20], rax
call fcn.7ff78727e660
test eax, eax
je 0x7ff787351609
mov r12, qword [rsp + 0x88]
mov rdx, qword [rsp + 0x58]
mov r8d, r12d
mov rcx, qword [rsp + 0x78]
call fcn.7ff7872133f0
test eax, eax
js 0x7ff7873515d1
mov rax, qword [rsp + 0x58]
mov r8d, r12d
mov rcx, qword [rsp + 0x90]
add rax, r12
mov rdx, rax
mov qword [rsp + 0x78], rax
call fcn.7ff7872133f0
test eax, eax
js 0x7ff7873515d1
mov rax, qword [rsp + 0xa0]
lea r9, [r12 + r12]
mov r8, qword [rsp + 0x58]
mov rdx, r13
mov qword [rsp + 0x40], rax
mov rcx, rbx
mov rax, qword [rsp + 0x98]
mov qword [rsp + 0x38], rax
mov rax, qword [rsp + 0x108]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
call fcn.7ff787283e00
test eax, eax
je 0x7ff7873515d1
mov edx, r14d
test edi, edi
je 0x7ff787351455
cmp edi, 8
jb 0x7ff787351455
lea eax, [rdi - 1]
movsxd rcx, eax
lea rax, [rcx + rbx]
lea r8, [rcx + r15]
cmp r15, rax
ja 0x7ff78735133c
cmp r8, rbx
jae 0x7ff787351455
lea rax, [rcx + rsi]
cmp r15, rax
ja 0x7ff78735134e
cmp r8, rsi
jae 0x7ff787351455
cmp edi, 0x40
jb 0x7ff7873513ff
mov ecx, edi
and ecx, 0x8000003f
jge 0x7ff787351368
dec ecx
or ecx, 0xffffffc0
inc ecx
mov eax, edi
sub eax, ecx
mov r8, rsi
movsxd r11, eax
mov r9, r15
lea rcx, [rbx + 0x10]
sub r8, rbx
sub r9, rbx
mov r10, 0xfffffffffffffff0
sub r10, rbx
nop dword [rax]
movdqu xmm0, xmmword [rcx - 0x10]
add edx, 0x40
movdqu xmm1, xmmword [r8 + rcx - 0x10]
movdqu xmm2, xmmword [rcx]
lea rcx, [rcx + 0x40]
xorps xmm1, xmm0
lea rax, [rcx + r10]
movdqu xmm0, xmmword [r8 + rcx - 0x40]
movdqu xmmword [r9 + rcx - 0x50], xmm1
xorps xmm2, xmm0
movdqu xmm0, xmmword [rcx - 0x30]
movdqu xmm1, xmmword [r8 + rcx - 0x30]
movdqu xmmword [r9 + rcx - 0x40], xmm2
xorps xmm1, xmm0
movdqu xmm0, xmmword [rcx - 0x20]
movdqu xmm2, xmmword [r8 + rcx - 0x20]
movdqu xmmword [r9 + rcx - 0x30], xmm1
xorps xmm2, xmm0
movdqu xmmword [r9 + rcx - 0x20], xmm2
cmp rax, r11
jne 0x7ff787351390
mov eax, edi
and al, 0x3f
cmp al, 8
jb 0x7ff787351455
mov eax, edi
and eax, 0x80000007
jge 0x7ff78735140f
dec eax
or eax, 0xfffffff8
inc eax
sub edi, eax
movsxd rcx, edx
mov r8, rsi
add rcx, rbx
movsxd r10, edi
sub r8, rbx
mov r9, r15
sub r9, rbx
nop word [rax + rax]
movq xmm1, qword [rcx + r8]
add edx, 8
movq xmm0, qword [rcx]
xorps xmm1, xmm0
movq qword [r9 + rcx], xmm1
add rcx, 8
mov rax, rcx
sub rax, rbx
cmp rax, r10
jne 0x7ff787351430
movsxd rax, edx
cmp rax, r13
je 0x7ff787351484
mov r8, r15
lea rcx, [rax + rbx]
sub r8, rbx
sub rsi, rbx
mov rdx, r13
sub rdx, rax
movzx eax, byte [rcx + rsi]
xor al, byte [rcx]
mov byte [r8 + rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x7ff787351470
call fcn.7ff78721c550
mov rbp, rax
test rax, rax
jne 0x7ff7873514c8
call fcn.7ff787203740
lea r8, [0x7ff78742ad78]
mov edx, 0x172
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
lea ecx, [rbp + 0x35]
mov edx, 0x80006
call fcn.7ff7872039c0
mov rdi, qword [rsp + 0x50]
jmp 0x7ff787351044
mov rdx, qword [rsp + 0x108]
mov rcx, rbp
call fcn.7ff78721bd70
test eax, eax
je 0x7ff787351599
mov rdx, qword [rsp + 0x58]
mov r8, r12
mov rcx, rbp
call fcn.7ff78721bdf0
test eax, eax
je 0x7ff787351599
mov r8, r13
mov rdx, r15
mov rcx, rbp
call fcn.7ff78721bdf0
test eax, eax
je 0x7ff787351599
mov rdx, qword [rsp + 0x78]
mov r8, r12
mov rcx, rbp
call fcn.7ff78721bdf0
mov rdi, qword [rsp + 0x50]
test eax, eax
je 0x7ff78735159e
xor r8d, r8d
mov rdx, rdi
mov rcx, rbp
call fcn.7ff78721b830
test eax, eax
je 0x7ff78735159e
movsxd r8, dword [rsp + 0x68]
mov rcx, rdi
mov rdx, qword [rsp + 0xa8]
call fcn.7ff786ff12b0
test eax, eax
je 0x7ff787351583
call fcn.7ff787203740
lea r8, [0x7ff78742ad78]
mov edx, 0x180
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
lea edx, [r8 + 0x66]
lea ecx, [rdx - 0x31]
call fcn.7ff7872039c0
jmp 0x7ff787351044
mov rax, qword [rsp + 0x128]
mov r14d, 1
mov qword [rax], r13
jmp 0x7ff787351059
mov rdi, qword [rsp + 0x50]
call fcn.7ff787203740
lea r8, [0x7ff78742ad78]
mov edx, 0x17b
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
mov edx, 0x80006
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
jmp 0x7ff787351044
call fcn.7ff787203740
lea r8, [0x7ff78742ad78]
mov edx, 0x169
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
mov edx, 0xc0103
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
mov rdi, qword [rsp + 0x50]
jmp 0x7ff787351044
call fcn.7ff787203740
lea r8, [0x7ff78742ad78]
mov edx, 0x161
lea rcx, [0x7ff78742ad48]
call fcn.7ff787203860
xor r8d, r8d
mov edx, 0x80010
lea ecx, [r8 + 0x35]
call fcn.7ff7872039c0
mov rdi, qword [rsp + 0x50]
jmp 0x7ff787351044
mov rdi, rax
jmp 0x7ff787351044