Function at 0x7ff7873646c0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xa8
call sub.kernel32.dll___chkstk
sub rsp, rax
mov rax, qword [0x7ff78748c040]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x70], rcx
mov rdi, r9
mov rcx, r9
mov qword [rsp + 0x68], r9
mov rsi, r8
mov qword [rsp + 0x58], r8
mov rbx, rdx
xor r14d, r14d
call fcn.7ff787273ab0
mov rcx, rdi
call fcn.7ff787273790
mov rcx, rdi
mov qword [rsp + 0x38], rax
call fcn.7ff787273790
mov rcx, rdi
mov qword [rsp + 0x28], rax
call fcn.7ff787273790
mov rcx, qword [rsp + 0x68]
mov rdi, rax
mov qword [rsp + 0x60], rax
call fcn.7ff787273790
mov qword [rsp + 0x30], rax
mov r15, rax
test rax, rax
je 0x7ff787364bba
lea r8d, [r14 + 6]
mov rcx, rsi
lea rdx, [rsp + 0x78]
call fcn.7ff787365ac0
test eax, eax
je 0x7ff787364b8e
cmp eax, 6
jg 0x7ff787364b8e
lea r8, [rsp + 0x78]
mov rdx, rbx
mov rcx, rdi
call fcn.7ff787364140
test eax, eax
je 0x7ff787364bba
mov rcx, rdi
call fcn.7ff787213a70
test eax, eax
jne 0x7ff787364bba
mov rdx, rsi
mov rcx, r15
call fcn.7ff787213790
test rax, rax
je 0x7ff787364bba
mov rcx, rdi
call fcn.7ff787213b70
mov rcx, r15
mov ebp, eax
call fcn.7ff787213b70
movsxd r13, dword [rsi + 8]
mov rcx, rdi
mov edx, r13d
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x40], r13d
call fcn.7ff787214880
test rax, rax
je 0x7ff787364bba
movsxd rax, dword [rdi + 8]
mov r12, r13
mov rbx, qword [rdi]
cmp rax, r13
jge 0x7ff787364809
mov r8, r13
lea rcx, [rbx + rax*8]
sub r8, rax
xor edx, edx
shl r8, 3
call sub.ntdll.dll_memset
mov dword [rdi + 8], r13d
mov edx, r13d
mov rdi, qword [rsp + 0x38]
mov rcx, rdi
call fcn.7ff787214880
test rax, rax
je 0x7ff787364bba
mov r15, qword [rdi]
mov qword [r15], 1
cmp r13d, 1
jle 0x7ff78736484c
lea eax, [r13 - 1]
xor edx, edx
movsxd r8, eax
lea rcx, [r15 + 8]
shl r8, 3
call sub.ntdll.dll_memset
mov rcx, qword [rsp + 0x28]
mov edx, r13d
mov dword [rdi + 8], r13d
call fcn.7ff787214880
test rax, rax
je 0x7ff787364bba
mov r9, qword [rsp + 0x28]
mov rdi, qword [r9]
mov qword [rsp + 0x48], rdi
test r13d, r13d
jle 0x7ff78736488e
mov r8, r13
xor edx, edx
shl r8, 3
mov rcx, rdi
call sub.ntdll.dll_memset
mov r9, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov dword [r9 + 8], r13d
mov r11, qword [r8]
mov qword [rsp + 0x50], r11
nop
test ebp, ebp
je 0x7ff787364985
nop dword [rax + rax]
mov r9, qword [rbx]
test r9b, 1
jne 0x7ff78736496e
mov rax, qword [r15]
mov r12, r14
mov rcx, qword [rsi]
mov r10, rax
and r10d, 1
neg r10
mov rdx, qword [rcx]
lea ecx, [r13 - 1]
and rdx, r10
movsxd rdi, ecx
xor rax, rdx
test ecx, ecx
jle 0x7ff787364957
mov r13, qword [rsp + 0x58]
lea r11, [r15 + 8]
mov rsi, rbx
mov r14, 0xfffffffffffffff8
sub rsi, r15
mov r12, rdi
sub r14, r15
mov rcx, qword [r11 + rsi]
lea rdx, [r14 + r11]
shl rcx, 0x3f
lea r11, [r11 + 8]
shr r9, 1
or rcx, r9
shr rax, 1
mov r9, qword [r11 + rsi - 8]
mov qword [r11 + rsi - 0x10], rcx
mov rcx, qword [r13]
mov r8, qword [rdx + rcx + 8]
and r8, r10
xor r8, qword [r11 - 8]
mov rcx, r8
shl rcx, 0x3f
or rcx, rax
mov rax, r8
mov qword [r11 - 0x10], rcx
sub rdi, 1
jne 0x7ff787364900
mov r13d, dword [rsp + 0x40]
xor r14d, r14d
mov rsi, qword [rsp + 0x58]
shr r9, 1
shr rax, 1
mov qword [rbx + r12*8], r9
mov qword [r15 + r12*8], rax
sub ebp, 1
jne 0x7ff7873648b0
mov rdi, qword [rsp + 0x48]
mov r11, qword [rsp + 0x50]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x28]
movsxd r12, r13d
cmp ebp, 0x40
jg 0x7ff7873649a0
mov rax, qword [rbx]
test rax, rax
je 0x7ff787364bba
cmp rax, 1
je 0x7ff787364b68
mov ecx, dword [rsp + 0x20]
cmp ebp, ecx
jge 0x7ff7873649e2
mov rax, qword [rsp + 0x38]
mov rbx, r11
mov dword [rsp + 0x20], ebp
mov r15, rdi
mov ebp, ecx
mov qword [rsp + 0x38], r9
mov rcx, qword [rsp + 0x60]
mov rdi, qword [rax]
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x30], rcx
mov r11, qword [rcx]
mov qword [rsp + 0x50], r11
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x48], rdi
mov rdx, r14
test r13d, r13d
jle 0x7ff787364ac6
cmp r13d, 2
jb 0x7ff787364ac6
lea eax, [r13 - 1]
movsxd rcx, eax
lea r10, [rdi + rcx*8]
lea rax, [r15 + rcx*8]
cmp r15, r10
ja 0x7ff787364a15
cmp rax, rdi
jae 0x7ff787364ac6
lea r8, [rbx + rcx*8]
cmp r15, r8
ja 0x7ff787364a27
cmp rax, rbx
jae 0x7ff787364ac6
lea r9, [r11 + rcx*8]
cmp r15, r9
ja 0x7ff787364a39
cmp rax, r11
jae 0x7ff787364ac6
cmp rbx, r10
ja 0x7ff787364a47
cmp r8, rdi
jae 0x7ff787364ac6
lea eax, [r13 - 1]
movsxd rcx, eax
lea rax, [rbx + rcx*8]
cmp rbx, r9
ja 0x7ff787364a5c
cmp rax, r11
jae 0x7ff787364ac6
mov ecx, r13d
and ecx, 0x80000001
jge 0x7ff787364a6e
dec ecx
or ecx, 0xfffffffe
inc ecx
mov eax, r13d
mov r8, rdi
sub eax, ecx
sub r8, rbx
mov rcx, r11
movsxd r10, eax
sub rcx, rbx
mov r9, r15
sub r9, rbx
mov rax, rbx
nop dword [rax + rax]
movdqu xmm0, xmmword [rax]
add rdx, 2
movdqu xmm1, xmmword [rax + rcx]
lea rax, [rax + 0x10]
xorps xmm1, xmm0
movdqu xmm0, xmmword [r9 + rax - 0x10]
movdqu xmmword [rax - 0x10], xmm1
movdqu xmm1, xmmword [r8 + rax - 0x10]
xorps xmm1, xmm0
movdqu xmmword [r9 + rax - 0x10], xmm1
cmp rdx, r10
jl 0x7ff787364a90
cmp rdx, r12
jge 0x7ff787364afc
mov r8, r11
lea rcx, [rbx + rdx*8]
mov r9, rdi
sub r8, rbx
sub r9, rbx
mov r10, r15
sub r10, rbx
mov rax, qword [rcx + r8]
inc rdx
xor qword [rcx], rax
mov rax, qword [r9 + rcx]
xor qword [r10 + rcx], rax
lea rcx, [rcx + 8]
cmp rdx, r12
jl 0x7ff787364ae1
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x28]
cmp ebp, dword [rsp + 0x20]
jne 0x7ff7873648a0
lea eax, [rbp - 1]
cdq
and edx, 0x3f
add eax, edx
sar eax, 6
movsxd rdi, eax
mov rax, rdi
mov rcx, qword [rbx + rdi*8]
test rcx, rcx
jne 0x7ff787364b44
nop dword [rax + rax]
test rax, rax
je 0x7ff787364b44
mov rcx, qword [rbx + rax*8 - 8]
dec rax
dec edi
test rcx, rcx
je 0x7ff787364b30
call fcn.7ff787213c60
mov r11, qword [rsp + 0x50]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x28]
shl edi, 6
lea ebp, [rdi + rax]
mov rdi, qword [rsp + 0x48]
jmp 0x7ff7873648a0
mov rcx, qword [rsp + 0x38]
call fcn.7ff787214620
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x70]
call fcn.7ff787213790
test rax, rax
je 0x7ff787364bba
mov r14d, 1
jmp 0x7ff787364bba
call fcn.7ff787203740
lea r8, [0x7ff78742e750]
mov edx, 0x18e
lea rcx, [0x7ff78742e760]
call fcn.7ff787203860
xor r8d, r8d
lea edx, [r8 + 0x6a]
lea ecx, [rdx - 0x67]
call fcn.7ff7872039c0
mov rcx, qword [rsp + 0x68]
call fcn.7ff787273650
mov eax, r14d
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.7ff78718ed30
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret