Function at 0x140167aa0
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [r11 - 0x198]
sub rsp, 0x270
mov rax, qword [0x140672360]
xor rax, rsp
mov qword [rbp + 0x150], rax
mov rdi, qword [r9]
mov r12, r9
mov r10, qword [r9 + 8]
mov r15, r8
sub r10, rdi
mov qword [rsp + 0x50], r9
sar r10, 2
mov r14, rcx
mov qword [rsp + 0x48], r8
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x38], rcx
lea rax, [r10 - 0x2c]
test rax, 0xffffffffffffffe7
jne 0x140167130
cmp r10, 0x44
je 0x140167130
mov qword [r11 + 0x20], rbx
lea rcx, [rbp - 0x50]
mov qword [r11 - 0x30], rsi
xor edx, edx
lea rsi, [r10 - 4]
mov qword [r11 - 0x38], r13
mov r8d, 0x1a0
shr rsi, 2
call fcn.14035c350
lea r13, [rsi - 1]
mov qword [rbp - 0x80], r13
test r13, r13
je 0x140166af9
lea rbx, [rbp - 0x4c]
add rdi, 0x14
mov r14, r13
mov r10d, dword [rdi - 4]
lea rbx, [rbx + 0x20]
mov r8d, dword [rdi + 4]
mov ecx, dword [rdi]
lea rdi, [rdi + 0x10]
shr ecx, 1
xor ecx, r10d
and ecx, 0x55555555
xor r10d, ecx
lea r11d, [rcx + rcx]
mov ecx, dword [rdi - 8]
xor r11d, dword [rdi - 0x10]
shr ecx, 1
xor ecx, r8d
and ecx, 0x55555555
xor r8d, ecx
mov eax, r8d
shr eax, 2
xor eax, r10d
lea edx, [rcx + rcx]
xor edx, dword [rdi - 8]
and eax, 0x33333333
xor r10d, eax
mov ecx, r10d
shr ecx, 4
lea r9d, [rax*4]
xor ecx, r10d
and ecx, 0xf0f0f0f
xor r9d, r8d
mov eax, edx
shr eax, 2
xor eax, r11d
and eax, 0x33333333
xor r11d, eax
lea r8d, [rax*4]
mov eax, ecx
shl eax, 4
xor r8d, edx
xor eax, r10d
xor r10d, ecx
mov dword [rbx - 0x14], eax
mov ecx, r11d
shr ecx, 4
xor ecx, r11d
mov dword [rbx - 0x24], r10d
and ecx, 0xf0f0f0f
mov eax, ecx
shl eax, 4
xor eax, r11d
xor r11d, ecx
mov dword [rbx - 0x10], eax
mov ecx, r9d
shr ecx, 4
xor ecx, r9d
mov dword [rbx - 0x20], r11d
and ecx, 0xf0f0f0f
mov eax, ecx
shl eax, 4
xor eax, r9d
xor r9d, ecx
mov dword [rbx - 0xc], eax
mov ecx, r8d
shr ecx, 4
xor ecx, r8d
mov dword [rbx - 0x1c], r9d
and ecx, 0xf0f0f0f
mov eax, ecx
shl eax, 4
xor eax, r8d
xor r8d, ecx
mov dword [rbx - 0x18], r8d
mov dword [rbx - 8], eax
sub r14, 1
jne 0x1401669f0
mov r14, qword [rsp + 0x38]
test r15, r15
je 0x1401670f9
mov edi, dword [0x140672340]
lea rax, [rsi*4]
lea rcx, [rax*4]
mov edx, 2
mov qword [rsp + 0x58], rcx
lea rcx, [rax*4 + 4]
mov qword [rsp + 0x60], rcx
lea rcx, [rax*4 + 8]
lea rax, [rax*4 + 0xc]
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rax
nop dword [rax]
cmp r15, 2
xorps xmm0, xmm0
mov rax, r15
cmova rax, rdx
mov qword [rsp + 0x78], rax
movups xmmword [rbp - 0x78], xmm0
lea rbx, [rax*4]
movups xmmword [rbp - 0x68], xmm0
test rbx, rbx
je 0x140166bd0
mov r8, rax
lea rcx, [rbp - 0x78]
shl r8, 4
mov rdx, r14
call fcn.14035bc80
xor r8d, r8d
lea rdx, [rbp - 0x78]
xor eax, eax
cmp edi, 2
jl 0x140166bb0
movdqu xmm0, xmmword [rdx]
pshufb xmm0, xmmword [0x14060afb0]
movdqu xmmword [rdx], xmm0
jmp 0x140166bc1
mov ecx, dword [rdx + rax*4]
bswap ecx
mov dword [rdx + rax*4], ecx
inc rax
cmp rax, 4
jl 0x140166bb0
add r8, 4
add rdx, 0x10
cmp r8, rbx
jne 0x140166b92
nop
mov rdx, qword [r12]
mov r8d, dword [rbp - 0x78]
mov r9d, dword [rbp - 0x68]
mov eax, dword [rdx]
xor r8d, eax
mov r10d, dword [rdx + 4]
xor r9d, eax
mov r14d, dword [rdx + 8]
mov ecx, r10d
xor ecx, dword [rbp - 0x74]
mov ebx, r14d
mov r11d, dword [rdx + 0xc]
mov r15d, ecx
xor r10d, dword [rbp - 0x64]
mov edx, r11d
xor edx, dword [rbp - 0x6c]
mov edi, r10d
xor r11d, dword [rbp - 0x5c]
mov eax, edx
xor ebx, dword [rbp - 0x70]
xor r14d, dword [rbp - 0x60]
shr eax, 1
xor eax, ebx
shr r15d, 1
and eax, 0x55555555
shr edi, 1
xor ebx, eax
xor r15d, r8d
xor edi, r9d
and r15d, 0x55555555
and edi, 0x55555555
lea r12d, [r15 + r15]
xor r15d, r8d
xor r12d, ecx
lea esi, [rdi + rdi]
lea ecx, [rax + rax]
xor esi, r10d
xor ecx, edx
xor edi, r9d
mov eax, r11d
shr eax, 1
xor eax, r14d
and eax, 0x55555555
xor r14d, eax
lea edx, [rax + rax]
mov eax, ebx
shr eax, 2
xor edx, r11d
xor eax, r15d
and eax, 0x33333333
xor r15d, eax
lea r10d, [rax*4]
mov eax, ecx
shr eax, 2
xor r10d, ebx
xor eax, r12d
and eax, 0x33333333
xor r12d, eax
lea r11d, [rax*4]
mov eax, r14d
shr eax, 2
xor r11d, ecx
xor eax, edi
and eax, 0x33333333
xor edi, eax
mov ecx, edi
shr ecx, 4
lea r8d, [rax*4]
xor ecx, r15d
and ecx, 0xf0f0f0f
mov eax, edx
shr eax, 2
xor r8d, r14d
xor eax, esi
and eax, 0x33333333
xor esi, eax
lea r9d, [rax*4]
mov eax, ecx
shl eax, 4
xor r9d, edx
xor eax, edi
xor r15d, ecx
mov dword [rbp - 0x68], eax
mov ecx, esi
mov dword [rbp - 0x78], r15d
shr ecx, 4
movabs r14, 0x22331100223311
xor ecx, r12d
and ecx, 0xf0f0f0f
xor r12d, ecx
mov eax, ecx
shl eax, 4
mov ecx, r8d
xor eax, esi
shr ecx, 4
xor ecx, r10d
mov dword [rbp - 0x64], eax
and ecx, 0xf0f0f0f
mov dword [rbp - 0x74], r12d
xor r10d, ecx
mov eax, ecx
shl eax, 4
mov ecx, r9d
xor eax, r8d
shr ecx, 4
xor ecx, r11d
mov dword [rbp - 0x60], eax
and ecx, 0xf0f0f0f
mov dword [rbp - 0x70], r10d
xor r11d, ecx
mov eax, ecx
shl eax, 4
movabs rsi, 0x55005500550055
xor eax, r9d
mov dword [rbp - 0x6c], r11d
mov dword [rbp - 0x5c], eax
test r13, r13
je 0x140166e32
lea rbx, [rbp - 0x50]
mov rdi, r13
lea rax, [rbp - 0x78]
sub rbx, rax
nop dword [rax + rax]
lea rcx, [rbp - 0x78]
call fcn.140165b00
xor r8d, r8d
nop dword [rax]
mov eax, dword [rbp + r8*4 - 0x74]
mov edx, dword [rbp + r8*4 - 0x78]
shl rdx, 0x20
or rdx, rax
mov rcx, rdx
shr rcx, 1
xor rcx, rdx
and rcx, rsi
lea rax, [rcx + rcx]
xor rax, rcx
xor rdx, rax
mov rcx, rdx
shr rcx, 2
xor rcx, rdx
and rcx, r14
lea rax, [rcx*4]
xor rax, rcx
xor rdx, rax
mov rax, rdx
mov dword [rbp + r8*4 - 0x74], edx
shr rax, 0x20
mov dword [rbp + r8*4 - 0x78], eax
add r8, 2
cmp r8, 8
jne 0x140166d90
lea rcx, [rbp - 0x78]
call fcn.140165e10
xor ecx, ecx
nop dword [rax + rax]
movdqu xmm0, xmmword [rbp + rcx*4 - 0x78]
lea rax, [rbx + rcx*4]
movdqu xmm1, xmmword [rbp + rax - 0x78]
pxor xmm1, xmm0
movdqu xmmword [rbp + rcx*4 - 0x78], xmm1
add rcx, 4
cmp rcx, 8
jne 0x140166e00
add rbx, 0x20
sub rdi, 1
jne 0x140166d80
lea rcx, [rbp - 0x78]
call fcn.140165b00
xor r8d, r8d
nop
mov eax, dword [rbp + r8*4 - 0x74]
mov edx, dword [rbp + r8*4 - 0x78]
shl rdx, 0x20
or rdx, rax
mov rcx, rdx
shr rcx, 1
xor rcx, rdx
and rcx, rsi
lea rax, [rcx + rcx]
xor rax, rcx
xor rdx, rax
mov rcx, rdx
shr rcx, 2
xor rcx, rdx
and rcx, r14
lea rax, [rcx*4]
xor rax, rcx
xor rdx, rax
mov rax, rdx
mov dword [rbp + r8*4 - 0x74], edx
shr rax, 0x20
mov dword [rbp + r8*4 - 0x78], eax
add r8, 2
cmp r8, 8
jne 0x140166e40
mov ebx, dword [rbp - 0x78]
mov r8d, dword [rbp - 0x70]
mov r13d, dword [rbp - 0x68]
mov ecx, dword [rbp - 0x74]
shr ecx, 1
xor ecx, ebx
and ecx, 0x55555555
xor ebx, ecx
lea edx, [rcx + rcx]
mov ecx, dword [rbp - 0x6c]
xor edx, dword [rbp - 0x74]
shr ecx, 1
xor ecx, r8d
mov dword [rsp + 0x30], edx
mov edx, dword [rbp - 0x60]
and ecx, 0x55555555
xor r8d, ecx
mov eax, r8d
shr eax, 2
xor eax, ebx
lea r10d, [rcx + rcx]
xor r10d, dword [rbp - 0x6c]
and eax, 0x33333333
mov ecx, dword [rbp - 0x64]
xor ebx, eax
shr ecx, 1
xor ecx, r13d
mov dword [rsp + 0x34], ebx
lea r12d, [rax*4]
and ecx, 0x55555555
xor r13d, ecx
mov eax, r10d
shr eax, 2
xor r12d, r8d
mov r8d, dword [rsp + 0x30]
xor eax, r8d
and eax, 0x33333333
lea r11d, [rcx + rcx]
xor r11d, dword [rbp - 0x64]
xor r8d, eax
mov ecx, dword [rbp - 0x5c]
shr ecx, 1
lea esi, [rax*4]
xor ecx, edx
xor esi, r10d
and ecx, 0x55555555
xor edx, ecx
mov eax, edx
shr eax, 2
xor eax, r13d
lea r9d, [rcx + rcx]
xor r9d, dword [rbp - 0x5c]
and eax, 0x33333333
xor r13d, eax
mov r10d, r13d
shr r10d, 4
lea r15d, [rax*4]
xor r10d, ebx
mov eax, r9d
xor r15d, edx
shr eax, 2
mov ebx, r15d
xor eax, r11d
shr ebx, 4
and eax, 0x33333333
xor ebx, r12d
xor r11d, eax
and r10d, 0xf0f0f0f
mov dword [rsp + 0x30], r11d
and ebx, 0xf0f0f0f
shr r11d, 4
lea r14d, [rax*4]
xor r11d, r8d
mov rax, qword [rsp + 0x50]
xor r14d, r9d
mov edi, r14d
and r11d, 0xf0f0f0f
shr edi, 4
xor edi, esi
mov r9, qword [rax]
and edi, 0xf0f0f0f
mov rcx, qword [rsp + 0x58]
xor r8d, r11d
mov eax, dword [rsp + 0x34]
shl r11d, 4
mov ecx, dword [r9 + rcx]
xor eax, ecx
xor eax, r10d
shl r10d, 4
mov dword [rbp - 0x78], eax
xor r10d, ecx
mov rax, qword [rsp + 0x60]
lea rcx, [rbp - 0x78]
xor r10d, r13d
mov dword [rbp - 0x68], r10d
mov edx, dword [r9 + rax]
xor r8d, edx
mov rax, qword [rsp + 0x68]
xor r11d, edx
xor r11d, dword [rsp + 0x30]
mov dword [rbp - 0x74], r8d
mov dword [rbp - 0x64], r11d
mov r8d, dword [r9 + rax]
xor r12d, r8d
mov rax, qword [rsp + 0x70]
xor r12d, ebx
shl ebx, 4
xor ebx, r8d
mov dword [rbp - 0x70], r12d
mov r12, qword [rsp + 0x40]
xor ebx, r15d
mov r9d, dword [r9 + rax]
mov eax, r9d
xor eax, edi
mov dword [rbp - 0x60], ebx
mov rbx, qword [rsp + 0x78]
xor eax, esi
shl edi, 4
xor edi, r9d
mov dword [rbp - 0x6c], eax
xor edi, r14d
mov r9, r12
mov dword [rbp - 0x5c], edi
mov rdi, rbx
shl rdi, 4
mov r10, rdi
cmp rdi, 4
jb 0x140167095
mov rdx, rdi
shr rdx, 2
imul rax, rdx, 0xfffffffffffffffc
add r10, rax
nop
mov eax, dword [rcx]
add rcx, 4
bswap eax
mov dword [r9], eax
add r9, 4
sub rdx, 1
jne 0x140167080
xor r8d, r8d
test r10, r10
je 0x1401670bd
mov r11d, dword [rcx]
movzx ecx, r8b
mov edx, r11d
not cl
and cl, 3
shl cl, 3
shr edx, cl
mov byte [r8 + r9], dl
inc r8
cmp r8, r10
jne 0x1401670a0
mov r14, qword [rsp + 0x38]
add r12, rdi
mov r15, qword [rsp + 0x48]
add r14, rdi
mov edi, dword [0x140672340]
sub r15, rbx
mov r13, qword [rbp - 0x80]
mov edx, 2
mov qword [rsp + 0x40], r12
mov r12, qword [rsp + 0x50]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x38], r14
jne 0x140166b50
mov rsi, qword [rsp + 0x268]
mov rbx, qword [rsp + 0x2b8]
mov r13, qword [rsp + 0x260]
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.140359070
add rsp, 0x270
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
lea r9, str.C:workspaceproductswindows_endpointprotectionhmpa_thirdparty_botanlib_botan_x64.cpp
mov dword [rsp + 0x20], 0xf96
lea r8, str.aes_decrypt_n
lea rdx, str.Key_was_set
lea rcx, str.DK.size____44__DK.size____52__DK.size____60
call fcn.1401bfc50
int3
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x28]
mov r10, r9
lea r9, [rcx + 0x20]
mov r11, r8
mov rbx, rdx
cmp qword [r9], rax
je 0x140167acf
mov r8, r10
mov rdx, r11
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x140166940
call fcn.140179390
int3