Function at 0x140121e00
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov r14, rdx
mov rdx, qword [rcx + 0x18]
cmp rdx, 0xffffffffffffffff
je 0x140122806
mov r8, rcx
mov rsi, qword [rcx + 8]
lea r15, [rsi + 1]
mov rax, r15
shr rax, 3
mov rbx, r15
and rbx, 0xfffffffffffffff8
sub rbx, rax
cmp rsi, 8
mov rcx, rbx
cmovb rcx, rsi
mov rax, rcx
shr rax, 1
cmp rdx, rax
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x28], r8
jae 0x140121e92
mov rdi, qword [r8]
mov rcx, r15
shr rcx, 4
xor eax, eax
test r15b, 0xf
setne al
add rax, rcx
je 0x140122221
cmp rax, 1
jne 0x1401221b0
xor edx, edx
jmp 0x140122207
lea rax, [rdx + 1]
inc rcx
cmp rax, rcx
cmova rcx, rax
cmp rcx, 8
mov qword [rsp + 0x38], r15
jae 0x140121ebe
xor eax, eax
cmp rcx, 4
setae al
lea r15, [rax*4 + 4]
jmp 0x140121f02
mov rax, rcx
shr rax, 0x3d
jne 0x140122806
shl rcx, 3
movabs rdx, 0x2492492492492493
mov rax, rcx
mul rdx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 2
dec rcx
bsr rcx, rcx
not ecx
mov r15, 0xffffffffffffffff
shr r15, cl
inc r15
mov ecx, 0x68
mov rax, r15
mul rcx
jo 0x140122806
mov r12, rax
cmp rax, 0xfffffffffffffff0
ja 0x140122806
add r12, 0xf
and r12, 0xfffffffffffffff0
lea r13, [r15 + 0x10]
mov rbp, r12
add rbp, r13
jb 0x140122806
movabs rax, 0x7ffffffffffffff1
cmp rbp, rax
jae 0x140122806
movzx eax, byte [0x140198310]
xor ecx, ecx
mov rdx, rbp
call fcn.1400f2240
test rax, rax
je 0x14012280b
mov rdi, rax
lea rbp, [r15 - 1]
mov rax, r15
shr rax, 3
mov rbx, r15
and rbx, 0xfffffffffffffff8
sub rbx, rax
cmp r15, 9
cmovb rbx, rbp
add rdi, r12
mov rcx, rdi
mov dl, 0xff
mov r8, r13
call fcn.14011a0b0
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x140122138
mov qword [rsp + 0x30], rbx
mov rcx, qword [rsp + 0x28]
mov r15, qword [rcx]
movdqa xmm0, xmmword [r15]
pmovmskb r13d, xmm0
not r13d
lea rsi, [r15 - 0x68]
mov rcx, qword [r14]
mov qword [rsp + 0x50], rcx
mov rcx, qword [r14 + 8]
mov qword [rsp + 0x40], rcx
xor ebx, ebx
mov qword [rsp + 0x20], r15
mov r14, rax
jmp 0x14012207a
lea ecx, [r13 - 1]
and ecx, r13d
dec r14
shr rax, 0x39
lea r8, [rdx - 0x10]
and r8, rbp
mov byte [rdi + rdx], al
mov byte [rdi + r8 + 0x10], al
not r12
imul rax, r12, 0x68
not rdx
imul rdx, rdx, 0x68
mov r9, qword [rsp + 0x20]
mov r8, qword [r9 + rax + 0x60]
mov qword [rdi + rdx + 0x60], r8
movups xmm0, xmmword [r9 + rax + 0x50]
movups xmmword [rdi + rdx + 0x50], xmm0
movups xmm0, xmmword [r9 + rax + 0x40]
movups xmmword [rdi + rdx + 0x40], xmm0
movdqu xmm0, xmmword [r9 + rax]
movdqu xmm1, xmmword [r9 + rax + 0x10]
movups xmm2, xmmword [r9 + rax + 0x20]
movups xmm3, xmmword [r9 + rax + 0x30]
movups xmmword [rdi + rdx + 0x30], xmm3
movups xmmword [rdi + rdx + 0x20], xmm2
movdqu xmmword [rdi + rdx + 0x10], xmm1
movdqu xmmword [rdi + rdx], xmm0
mov r13d, ecx
test r14, r14
je 0x14012212c
test r13w, r13w
jne 0x14012209f
movdqa xmm0, xmmword [r15 + 0x10]
add r15, 0x10
pmovmskb r13d, xmm0
add rbx, 0x10
cmp r13d, 0xffff
je 0x140122080
not r13d
tzcnt r12d, r13d
add r12, rbx
mov rax, r12
neg rax
imul rax, rax, 0x68
mov r8, qword [rsi + rax + 8]
mov r9, qword [rsi + rax + 0x10]
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x40]
call fcn.14009bc00
mov rcx, rax
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x140122107
mov r8d, 0x10
nop word cs:[rax + rax]
add rcx, r8
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x1401220f0
tzcnt edx, edx
add rdx, rcx
and rdx, rbp
cmp byte [rdi + rdx], 0
js 0x140121ff0
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x140121ff0
mov rsi, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x30]
jmp 0x140122145
mov rsi, qword [rsp + 0x28]
mov rax, qword [rsi]
mov qword [rsp + 0x20], rax
sub rbx, qword [rsp + 0x48]
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
mov qword [rsi + 0x10], rbx
mov r8, qword [rsp + 0x58]
test r8, r8
je 0x1401227f2
mov ecx, 0x68
mov rax, qword [rsp + 0x38]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add r8, rax
cmp r8, 0xffffffffffffffef
je 0x1401227f2
mov r8, qword [rsp + 0x20]
sub r8, rax
mov rcx, qword [0x140198260]
xor edx, edx
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.kernel32.dll_HeapFree]
movabs rcx, 0x1ffffffffffffffe
and rcx, rax
xor r8d, r8d
movdqa xmm0, xmmword [0x140127740]
nop dword [rax + rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rdi + r8]
por xmm1, xmm0
movdqa xmmword [rdi + r8], xmm1
lea rdx, [r8 + 0x20]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rdi + r8 + 0x10]
por xmm1, xmm0
movdqa xmmword [rdi + r8 + 0x10], xmm1
mov r8, rdx
add rcx, 0xfffffffffffffffe
jne 0x1401221d0
test al, 1
je 0x140122221
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rdi + rdx]
por xmm0, xmmword [0x140127740]
movdqa xmmword [rdi + rdx], xmm0
cmp r15, 0x10
jae 0x140122242
lea rcx, [rdi + 0x10]
mov rdx, rdi
mov r8, r15
call fcn.140119a10
test r15, r15
jne 0x14012224c
xor ecx, ecx
jmp 0x1401227e4
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rdi + r15], xmm0
mov qword [rsp + 0x68], rbx
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
movabs rdx, 0x736f6d6570736575
xor rdx, rax
mov qword [rsp + 0x40], rdx
movabs rdx, 0x646f72616e646f6d
xor rdx, rcx
mov qword [rsp + 0x38], rdx
movabs rdx, 0x6c7967656e657261
xor rdx, rax
mov qword [rsp + 0x30], rdx
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x60], rax
lea rax, [rdi - 0x68]
mov qword [rsp + 0x70], rax
xor r15d, r15d
mov r12, rdi
jmp 0x1401222e7
shr rcx, 0x39
lea rax, [r15 - 0x10]
and rax, rsi
mov byte [rdi + r15], cl
mov byte [rdi + rax + 0x10], cl
lea rax, [r15 + 1]
add r12, 0xffffffffffffff98
cmp r15, rsi
mov r15, rax
je 0x1401227d7
cmp byte [rdi + r15], 0x80
jne 0x1401222d3
imul rcx, r15, 0xffffffffffffff98
mov rax, qword [rsp + 0x70]
add rax, rcx
mov qword [rsp + 0x80], rax
add rcx, rdi
mov qword [rsp + 0x78], rcx
mov rax, r15
not rax
imul r13, rax, 0x68
add r13, rdi
mov rax, r15
neg rax
imul rax, rax, 0x68
add rax, rdi
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x20], r15
jmp 0x14012240e
mov rcx, qword [r13]
mov rdx, qword [rax]
mov qword [r13], rdx
mov qword [rax], rcx
mov rcx, qword [r13 + 8]
mov rdx, qword [rax + 8]
mov qword [r13 + 8], rdx
mov qword [rax + 8], rcx
mov rcx, qword [r13 + 0x10]
mov rdx, qword [rax + 0x10]
mov qword [r13 + 0x10], rdx
mov qword [rax + 0x10], rcx
mov rcx, qword [r13 + 0x18]
mov rdx, qword [rax + 0x18]
mov qword [r13 + 0x18], rdx
mov qword [rax + 0x18], rcx
mov rcx, qword [r13 + 0x20]
mov rdx, qword [rax + 0x20]
mov qword [r13 + 0x20], rdx
mov qword [rax + 0x20], rcx
mov rcx, qword [r13 + 0x28]
mov rdx, qword [rax + 0x28]
mov qword [r13 + 0x28], rdx
mov qword [rax + 0x28], rcx
mov rcx, qword [r13 + 0x30]
mov rdx, qword [rax + 0x30]
mov qword [r13 + 0x30], rdx
mov qword [rax + 0x30], rcx
mov rcx, qword [r13 + 0x38]
mov rdx, qword [rax + 0x38]
mov qword [r13 + 0x38], rdx
mov qword [rax + 0x38], rcx
mov rcx, qword [r13 + 0x40]
mov rdx, qword [rax + 0x40]
mov qword [r13 + 0x40], rdx
mov qword [rax + 0x40], rcx
mov rcx, qword [r13 + 0x48]
mov rdx, qword [rax + 0x48]
mov qword [r13 + 0x48], rdx
mov qword [rax + 0x48], rcx
mov rcx, qword [r13 + 0x50]
mov rdx, qword [rax + 0x50]
mov qword [r13 + 0x50], rdx
mov qword [rax + 0x50], rcx
mov rcx, qword [r13 + 0x58]
mov rdx, qword [rax + 0x58]
mov qword [r13 + 0x58], rdx
mov qword [rax + 0x58], rcx
mov rcx, qword [r13 + 0x60]
mov rdx, qword [rax + 0x60]
mov qword [r13 + 0x60], rdx
mov qword [rax + 0x60], rcx
mov rax, qword [rsp + 0x50]
mov rbp, qword [rax - 0x60]
mov rbx, qword [rax - 0x58]
mov rax, rbx
and rax, 0xfffffffffffffff8
je 0x1401224b0
mov r9, qword [rsp + 0x30]
mov r8, qword [rsp + 0x38]
mov r10, qword [rsp + 0x60]
xor r11d, r11d
mov r14, qword [rsp + 0x40]
nop
mov rcx, qword [rbp + r11]
xor r10, rcx
add r14, r8
rol r8, 0xd
add r9, r10
xor r8, r14
rol r10, 0x10
xor r10, r9
rol r14, 0x20
add r9, r8
add r14, r10
rol r8, 0x11
xor r8, r9
rol r10, 0x15
rol r9, 0x20
xor r10, r14
xor r14, rcx
add r11, 8
cmp r11, rax
jb 0x140122440
mov edx, ebx
and edx, 7
cmp edx, 4
jb 0x1401224d1
mov r15d, dword [rbp + r11]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, rdx
jb 0x1401224e2
jmp 0x140122501
mov r10, qword [rsp + 0x60]
mov r8, qword [rsp + 0x38]
mov r9, qword [rsp + 0x30]
mov r14, qword [rsp + 0x40]
xor r11d, r11d
mov edx, ebx
and edx, 7
cmp edx, 4
jae 0x14012248e
xor r15d, r15d
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, rdx
jae 0x140122501
lea rcx, [rax + rbp]
movzx esi, word [r11 + rcx]
lea ecx, [rax*8]
shl rsi, cl
or r15, rsi
mov rsi, qword [rsp + 0x58]
or rax, 2
cmp rax, rdx
jae 0x140122520
add r11, rax
movzx r11d, byte [rbp + r11]
shl eax, 3
mov ecx, eax
shl r11, cl
or r15, r11
jmp 0x140122525
test rdx, rdx
je 0x140122577
lea ecx, [rdx*8]
mov eax, 0xff
shl rax, cl
or rax, r15
cmp rdx, 7
jne 0x140122580
xor r10, rax
add r14, r8
add r9, r10
rol r8, 0xd
rol r10, 0x10
xor r8, r14
xor r10, r9
rol r14, 0x20
add r9, r8
add r14, r10
rol r8, 0x11
xor r8, r9
rol r10, 0x15
xor r10, r14
rol r9, 0x20
xor r14, rax
xor eax, eax
jmp 0x140122580
mov eax, 0xff
nop dword [rax]
mov r15, qword [rsp + 0x20]
shl rbx, 0x38
movabs rcx, 0x100000000000000
add rbx, rcx
or rbx, rax
xor r10, rbx
add r14, r8
rol r8, 0xd
add r9, r10
xor r8, r14
rol r10, 0x10
xor r10, r9
rol r14, 0x20
add r9, r8
add r14, r10
rol r8, 0x11
xor r8, r9
rol r10, 0x15
rol r9, 0x20
xor r10, r14
xor r14, rbx
xor r9, 0xff
add r14, r8
add r9, r10
rol r8, 0xd
xor r8, r14
rol r10, 0x10
rol r14, 0x20
xor r10, r9
add r9, r8
rol r8, 0x11
add r14, r10
xor r8, r9
rol r10, 0x15
xor r10, r14
rol r9, 0x20
add r14, r8
add r9, r10
rol r8, 0xd
xor r8, r14
rol r10, 0x10
rol r14, 0x20
xor r10, r9
add r9, r8
rol r8, 0x11
add r14, r10
xor r8, r9
rol r10, 0x15
xor r10, r14
rol r9, 0x20
add r14, r8
add r9, r10
rol r8, 0xd
xor r8, r14
rol r10, 0x10
xor r10, r9
add r9, r8
rol r8, 0x11
rol r10, 0x15
mov rcx, r9
rol rcx, 0x20
xor rcx, r8
xor rcx, r10
xor rcx, r9
mov rax, rsi
and rax, rcx
movdqu xmm0, xmmword [rdi + rax]
pmovmskb edx, xmm0
mov r8, rax
test edx, edx
jne 0x1401226a8
mov r9d, 0x10
mov r8, rax
nop word cs:[rax + rax]
add r8, r9
and r8, rsi
movdqu xmm0, xmmword [rdi + r8]
pmovmskb edx, xmm0
add r9, 0x10
test edx, edx
je 0x140122690
tzcnt edx, edx
add rdx, r8
and rdx, rsi
cmp byte [rdi + rdx], 0
js 0x1401226c4
movdqa xmm0, xmmword [rdi]
pmovmskb edx, xmm0
tzcnt edx, edx
mov r8, r15
sub r8, rax
mov r9, rdx
sub r9, rax
xor r9, r8
and r9, rsi
cmp r9, 0x10
jb 0x1401222c0
mov rax, rdx
not rax
imul rax, rax, 0x68
add rax, rdi
movzx r8d, byte [rdi + rdx]
shr rcx, 0x39
lea r9, [rdx - 0x10]
and r9, rsi
mov byte [rdi + rdx], cl
mov byte [rdi + r9 + 0x10], cl
cmp r8b, 0xff
je 0x140122780
imul rcx, rdx, 0xffffffffffffff98
add rcx, rdi
cmp qword [rsp + 0x80], rcx
jae 0x140122340
cmp rax, qword [rsp + 0x78]
jae 0x140122340
mov rax, 0xffffffffffffff98
nop word cs:[rax + rax]
movzx edx, byte [r12 + rax]
movzx r8d, byte [rcx + rax]
mov byte [r12 + rax], r8b
mov byte [rcx + rax], dl
movzx edx, byte [r12 + rax + 1]
movzx r8d, byte [rcx + rax + 1]
mov byte [r12 + rax + 1], r8b
mov byte [rcx + rax + 1], dl
add rax, 2
jne 0x140122740
jmp 0x14012240e
lea rcx, [r15 - 0x10]
and rcx, rsi
mov byte [rdi + r15], 0xff
mov byte [rdi + rcx + 0x10], 0xff
mov rcx, qword [r13 + 0x60]
mov qword [rax + 0x60], rcx
movups xmm0, xmmword [r13 + 0x50]
movups xmmword [rax + 0x50], xmm0
movups xmm0, xmmword [r13 + 0x40]
movups xmmword [rax + 0x40], xmm0
movdqu xmm0, xmmword [r13]
movdqu xmm1, xmmword [r13 + 0x10]
movups xmm2, xmmword [r13 + 0x20]
movups xmm3, xmmword [r13 + 0x30]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
jmp 0x1401222d3
cmp rsi, 8
mov rcx, qword [rsp + 0x68]
cmovb rcx, rsi
sub rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x28]
mov qword [rax + 0x10], rcx
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140034240
mov rcx, rbp
call fcn.140034280
int3