Function at 0x140017750
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x68
mov qword [rsp + 0x48], rdx
mov rax, rcx
mov qword [rsp + 0x38], rax
mov rcx, qword [rdx + 8]
mov qword [rsp + 0x40], rcx
movabs rcx, 0xd84c30e1f0ca8ffa
movabs r8, 0xd84c30e1f0ca8ff6
xor rcx, r8
sar rdx, cl
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x50], rdx
add rax, 0x20a0
sar rcx, 0x15
mov qword [rsp + 0x58], rcx
movabs rdx, 0xf2a1a66f7bfbe256
movabs r8, 0xd5e599084041da9
xor rdx, r8
xor rcx, rdx
mov rdx, 0xffffffffffffffff
xor rdx, 0xff
mov r8, 0xffffffffffffffff
movabs r9, 0x5777af293993f3de
xor r8, r9
or rcx, rdx
movabs rdx, 0xc67b6842ad51622d
movabs r9, 0x910cc76b94c291f3
xor rdx, r9
or rdx, r8
xor rcx, 0xffffffffffffffff
and rcx, rdx
shl rcx, 3
add rax, rcx
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
cmp rax, 0
je 0x1400179d3
mov eax, dword [0x1402a8a78]
xor eax, 0x4be7c5b2
mov ecx, dword [0x1402a8a7c]
mov edx, 0x4c917d7b
xor edx, 0xa61770c5
xor ecx, edx
or eax, ecx
mov ecx, 0xbbfcdf27
xor ecx, 0xef2b3079
xor edx, edx
div ecx
mov ecx, 0xba6f78ee
xor ecx, 0x80d4c0e2
xor edx, edx
div ecx
mov ecx, eax
xor ecx, 0x3e8a0fe6
xor ecx, 0xffffffff
and ecx, 0x3e8a0fe6
shl ecx, 1
sub ecx, 0x3e8a0fe6
sub eax, ecx
cmp eax, 0xc8612433
jae 0x140017b35
mov rcx, qword [rsp + 0x30]
mov eax, dword [0x1402a8a80]
xor eax, 0x5861730
mov edx, dword [0x1402a8a84]
xor edx, 0x4729cea6
and eax, edx
mov r8d, 0x168a8149
xor r8d, 0x6f0bf47a
xor edx, edx
div r8d
mov rdx, qword [rsp + 0x58]
or eax, 0x5fc8b2c3
sub eax, 0xe0bfaf42
cmp qword [rcx + 8], rdx
sete cl
mov byte [rsp + 0x2f], cl
cmp eax, 0x4e755061
je 0x140017885
mov rax, qword [rsp + 0x30]
mov cl, byte [rsp + 0x2f]
test cl, 1
mov qword [rsp + 0x60], rax
jne 0x1400178f6
jmp 0x140017809
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x50]
mov rdx, rcx
shr rdx, 6
and rdx, 7
mov qword [rsp + 0x20], rdx
mov rdx, qword [rax + rdx*8 + 0x10]
movabs r8, 0xc2c2a59c4489f2cd
movabs r9, 0xc2c2a59c4489f2f2
xor r8, r9
and rcx, r8
movabs r8, 0x9cbd7414d6a383de
movabs r9, 0x9cbd7414d6a383df
xor r8, r9
shl r8, cl
mov rcx, qword [rsp + 0x20]
movabs r10, 0x5bcd253af4915341
movabs r9, 0xa432dac50b6eacbe
xor r10, r9
mov r9, r8
xor r9, r10
movabs r11, 0xc2486ecebdffbf8e
movabs r10, 0x3db7913142004071
xor r11, r10
mov r10, r8
xor r10, r11
or r9, r10
and r9, 0xffffffffffffffff
xor r9, 0xffffffffffffffff
mov r10, 0xffffffffffffffff
xor r10, 0xffffffffffffffff
mov r11, 0xffffffffffffffff
xor r11, 0xffffffffffffffff
or r10, r11
xor r8, 0xffffffffffffffff
xor r10, 0xffffffffffffffff
or r8, r10
and r9, r8
xor r9, 0xffffffffffffffff
mov r8, rdx
xor r8, r9
xor r8, 0xffffffffffffffff
or rdx, r9
and rdx, r8
mov qword [rax + rcx*8 + 0x10], rdx
mov rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
mov r10, qword [rax + 0x2078]
mov rdx, qword [rax + 0x2070]
mov r9, r10
sub r9, rdx
mov r9, rdx
cmovg r9, r10
mov qword [rax + 0x2078], r9
movabs r9, 0xf1be5108266204d0
sub rdx, r9
sub rdx, r8
movabs r8, 0x6cbd7b7efe7dabc6
movabs r9, 0x9d032a76d81faf16
xor r8, r9
add rdx, r8
mov qword [rax + 0x2070], rdx
xor eax, eax
mov edx, eax
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
cmp eax, 0
jne 0x140017a62
mov rax, qword [0x1402d10a0]
mov ecx, 0xa17a9a66
xor ecx, 0xa17a9a67
call rax
mov eax, dword [0x1402a8a88]
imul eax, dword [0x1402a8a8c]
xor eax, 0xe54f2622
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0xee730cc8
add eax, ecx
xor ecx, ecx
sub ecx, 0x6f3a2689
add eax, ecx
mov ecx, 0x7dcaaef0
xor ecx, 0x179fb930
cmp eax, ecx
jae 0x140017b3e
mov eax, dword [0x1402a8a90]
xor eax, 0x1702032b
mov r8d, dword [0x1402a8a94]
xor r8d, 0xd52df533
mov edx, 0x72bd1136
xor edx, 0x8d42eec9
mov ecx, eax
xor ecx, edx
mov edx, r8d
and edx, ecx
mov r9d, r8d
xor r9d, 0xffffffff
mov ecx, eax
and ecx, r9d
imul ecx, edx
mov edx, eax
and edx, r8d
or eax, r8d
imul eax, edx
add eax, ecx
mov ecx, 0x9cdd557f
xor edx, edx
div ecx
mov ecx, eax
mov edx, 0xd020dcbb
xor edx, 0x2fdf2344
mov eax, ecx
xor eax, edx
and eax, 0xf7dc7e65
mov edx, 0xffffffff
xor edx, 0xf7dc7e65
and ecx, edx
or eax, ecx
mov ecx, 0x4d7511bf
xor ecx, 0x996eb33f
imul eax, ecx
cmp eax, 0x88a5e5b8
ja 0x140017b3e
add rsp, 0x68
ret
test eax, 0xe9012afa
std
invalid
lodsd eax, dword [rsi]
scasb al, byte [rdi]
xor ecx, ebp
pop rcx
invalid