Function at 0x140039f20
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rax, qword [rcx + 0x18]
mov qword [rsp + 0x28], rax
add rdx, rax
jb 0x14003a92a
mov r14, r8
mov r12, qword [rcx + 8]
lea r15, [r12 + 1]
mov rax, r15
shr rax, 3
mov r8, r15
and r8, 0xfffffffffffffff8
sub r8, rax
cmp r12, 8
cmovb r8, r12
mov rax, r8
shr rax, 1
cmp rdx, rax
mov qword [rsp + 0x48], rcx
jbe 0x140039f9d
inc r8
cmp rdx, r8
cmova r8, rdx
cmp r8, 8
jae 0x140039fcf
xor eax, eax
cmp r8, 4
setae al
lea r13, [rax*4 + 4]
jmp 0x14003a032
mov qword [rsp + 0x58], r8
mov rbx, qword [rcx]
mov rcx, r15
shr rcx, 4
xor eax, eax
test r15b, 0xf
setne al
add rax, rcx
je 0x14003a2fa
cmp rax, 1
jne 0x14003a293
xor ecx, ecx
jmp 0x14003a2e4
mov rax, r8
shr rax, 0x3d
jne 0x14003a92a
shl r8, 3
mov r13d, 1
cmp r8, 0xe
jb 0x14003a032
movabs rcx, 0x2492492492492493
mov rax, r8
mul rcx
sub r8, rdx
shr r8, 1
add r8, rdx
shr r8, 2
dec r8
bsr rcx, r8
not ecx
mov r13, 0xffffffffffffffff
shr r13, cl
movabs rax, 0x7fffffffffffffe
cmp r13, rax
ja 0x14003a92a
inc r13
mov rbp, r13
shl rbp, 5
lea rbx, [r13 + 0x10]
mov r15, rbp
add r15, rbx
jb 0x14003a92a
movabs rax, 0x7ffffffffffffff1
cmp r15, rax
jae 0x14003a92a
test r15, r15
je 0x14003a0a6
movzx eax, byte [0x14004b1f0]
mov rcx, qword [0x14004b178]
test rcx, rcx
jne 0x14003a089
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x14003a09c
mov rcx, rax
mov qword [0x14004b178], rax
xor edx, edx
mov r8, r15
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x14003a0ab
mov rcx, r15
call fcn.14000f830
ud2
mov edi, 0x10
lea rsi, [r13 - 1]
mov rax, r13
shr rax, 3
mov rcx, r13
and rcx, 0xfffffffffffffff8
sub rcx, rax
cmp r13, 9
cmovb rcx, rsi
mov qword [rsp + 0x30], rcx
add rdi, rbp
mov rcx, rdi
mov dl, 0xff
mov r8, rbx
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x48]
mov rax, qword [rax]
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x28], 0
je 0x14003a23c
mov rbx, qword [rsp + 0x20]
movdqa xmm0, xmmword [rbx]
pmovmskb r15d, xmm0
not r15d
lea rax, [rbx - 0x20]
mov qword [rsp + 0x50], rax
mov rax, qword [r14]
mov qword [rsp + 0x40], rax
mov rax, qword [r14 + 8]
mov qword [rsp + 0x38], rax
xor r13d, r13d
mov rbp, qword [rsp + 0x28]
jmp 0x14003a184
lea ecx, [r15 - 1]
and ecx, r15d
dec rbp
shr rax, 0x39
lea r8, [rdx - 0x10]
and r8, rsi
mov byte [rdi + rdx], al
mov byte [r8 + rdi + 0x10], al
mov rax, qword [rsp + 0x20]
sub rax, r14
shl rdx, 5
mov r8, rdi
sub r8, rdx
neg rdx
movdqu xmm0, xmmword [rax - 0x20]
movdqu xmm1, xmmword [rax - 0x10]
movdqu xmmword [rdi + rdx - 0x20], xmm0
movdqu xmmword [r8 - 0x10], xmm1
mov r15d, ecx
test rbp, rbp
je 0x14003a23c
test r15w, r15w
jne 0x14003a1ae
nop word [rax + rax]
movdqa xmm0, xmmword [rbx + 0x10]
add rbx, 0x10
pmovmskb r15d, xmm0
add r13, 0x10
cmp r15d, 0xffff
je 0x14003a190
not r15d
tzcnt r14d, r15d
add r14, r13
shl r14, 5
mov rax, qword [rsp + 0x50]
sub rax, r14
mov r8, qword [rax]
mov r9, qword [rax + 8]
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
call fcn.1400030a0
mov rcx, rax
and rcx, rsi
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x14003a217
mov r8d, 0x10
nop word cs:[rax + rax]
add rcx, r8
and rcx, rsi
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x14003a200
tzcnt edx, edx
add rdx, rcx
and rdx, rsi
cmp byte [rdi + rdx], 0
js 0x14003a130
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x14003a130
mov rcx, qword [rsp + 0x30]
sub rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x48]
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rcx
test r12, r12
je 0x14003a327
mov rax, r12
shl rax, 5
add r12, rax
cmp r12, 0xffffffffffffffcf
je 0x14003a327
mov r8, qword [rsp + 0x20]
sub r8, rax
add r8, 0xffffffffffffffe0
mov rcx, qword [0x14004b178]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x14003a327
movabs rdx, 0x1ffffffffffffffe
and rdx, rax
xor ecx, ecx
movdqa xmm0, xmmword [0x14003d3c0]
nop word [rax + rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + rcx]
por xmm1, xmm0
movdqa xmmword [rbx + rcx], xmm1
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + rcx + 0x10]
por xmm1, xmm0
movdqa xmmword [rbx + rcx + 0x10], xmm1
add rcx, 0x20
add rdx, 0xfffffffffffffffe
jne 0x14003a2b0
test al, 1
je 0x14003a2fa
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rbx + rcx]
por xmm0, xmmword [0x14003d3c0]
movdqa xmmword [rbx + rcx], xmm0
cmp r15, 0x10
jae 0x14003a342
lea rcx, [rbx + 0x10]
mov rdx, rbx
mov r8, r15
call sub.VCRUNTIME140.dll_memmove
test r15, r15
jne 0x14003a34c
mov rcx, qword [rsp + 0x58]
sub rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x48]
mov qword [rax + 0x10], rcx
movabs rax, 0x8000000000000001
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbx + r15], xmm0
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
movabs r15, 0x736f6d6570736575
xor r15, rax
movabs rdx, 0x646f72616e646f6d
xor rdx, rcx
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6c7967656e657261
xor rdx, rax
mov qword [rsp + 0x38], rdx
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x30], rax
xor r11d, r11d
mov qword [rsp + 0x60], rbx
jmp 0x14003a3c3
shr rcx, 0x39
lea rax, [r11 - 0x10]
and rax, r12
mov byte [rbx + r11], cl
mov byte [rax + rbx + 0x10], cl
lea rax, [r11 + 1]
cmp r11, r12
mov r11, rax
je 0x14003a314
cmp byte [rbx + r11], 0x80
jne 0x14003a3b3
mov rax, r11
shl rax, 5
mov rcx, rbx
sub rcx, rax
mov qword [rsp + 0x50], rcx
lea r14, [rcx - 0x20]
mov qword [rsp + 0x20], r11
nop word cs:[rax + rax]
mov rax, qword [rsp + 0x50]
mov rsi, qword [rax - 0x20]
mov r13, qword [rax - 0x18]
mov rax, r13
and rax, 0xfffffffffffffff8
je 0x14003a490
mov rbp, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
mov r10, qword [rsp + 0x30]
xor r9d, r9d
mov rdx, r15
nop
add rdx, r8
rol r8, 0xd
mov rcx, qword [rsi + r9]
xor r8, rdx
rol rdx, 0x20
xor r10, rcx
add rbp, r10
rol r10, 0x10
xor r10, rbp
add rdx, r10
rol r10, 0x15
add rbp, r8
rol r8, 0x11
xor r8, rbp
rol rbp, 0x20
xor r10, rdx
xor rdx, rcx
add r9, 8
cmp r9, rax
jb 0x14003a420
mov edi, r13d
and edi, 7
cmp edi, 3
jbe 0x14003a4b0
mov r11d, dword [rsi + r9]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, rdi
jb 0x14003a4c1
jmp 0x14003a4ec
mov r10, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x38]
mov rdx, r15
xor r9d, r9d
mov edi, r13d
and edi, 7
cmp edi, 3
ja 0x14003a46e
xor r11d, r11d
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, rdi
jae 0x14003a4ec
lea rcx, [rax + r9]
mov rbx, r12
mov r12, r15
movzx r15d, word [rsi + rcx]
lea ecx, [rax*8]
shl r15, cl
or r11, r15
mov r15, r12
mov r12, rbx
mov rbx, qword [rsp + 0x60]
or rax, 2
cmp rax, rdi
jae 0x14003a510
add r9, rax
movzx r9d, byte [rsi + r9]
shl eax, 3
mov ecx, eax
shl r9, cl
or r11, r9
inc r13
jmp 0x14003a518
inc r13
test rdi, rdi
je 0x14003a56a
lea ecx, [rdi*8]
mov eax, 0xff
shl rax, cl
or rax, r11
cmp rdi, 7
jne 0x14003a570
add rdx, r8
rol r8, 0xd
xor r10, rax
xor r8, rdx
rol rdx, 0x20
add rbp, r10
rol r10, 0x10
xor r10, rbp
add rdx, r10
rol r10, 0x15
xor r10, rdx
add rbp, r8
rol r8, 0x11
xor r8, rbp
rol rbp, 0x20
xor rdx, rax
xor eax, eax
jmp 0x14003a570
mov eax, 0xff
nop
mov r11, qword [rsp + 0x20]
shl r13, 0x38
add rdx, r8
rol r8, 0xd
or r13, rax
xor r8, rdx
rol rdx, 0x20
xor r10, r13
add rbp, r10
rol r10, 0x10
xor r10, rbp
add rdx, r10
rol r10, 0x15
add rbp, r8
rol r8, 0x11
xor r10, rdx
xor r8, rbp
rol rbp, 0x20
xor rdx, r13
add rdx, r8
rol r8, 0xd
xor r8, rdx
rol rdx, 0x20
xor rbp, 0xff
add rbp, r10
rol r10, 0x10
xor r10, rbp
add rdx, r10
rol r10, 0x15
add rbp, r8
rol r8, 0x11
xor r8, rbp
rol rbp, 0x20
xor r10, rdx
add rdx, r8
rol r8, 0xd
xor r8, rdx
rol rdx, 0x20
add rbp, r10
rol r10, 0x10
xor r10, rbp
add rdx, r10
rol r10, 0x15
add rbp, r8
rol r8, 0x11
xor r8, rbp
rol rbp, 0x20
xor r10, rdx
add rdx, r8
rol r8, 0xd
add rbp, r10
rol r10, 0x10
xor r10, rbp
rol r10, 0x15
xor r8, rdx
add rbp, r8
rol r8, 0x11
mov rcx, rbp
rol rcx, 0x20
xor rcx, r8
xor rcx, r10
xor rcx, rbp
mov rax, rcx
and rax, r12
movdqu xmm0, xmmword [rbx + rax]
pmovmskb edx, xmm0
mov r8, rax
test edx, edx
jne 0x14003a688
mov r9d, 0x10
mov r8, rax
nop word [rax + rax]
add r8, r9
and r8, r12
movdqu xmm0, xmmword [rbx + r8]
pmovmskb edx, xmm0
add r9, 0x10
test edx, edx
je 0x14003a670
tzcnt edx, edx
add rdx, r8
and rdx, r12
cmp byte [rbx + rdx], 0
js 0x14003a6a4
movdqa xmm0, xmmword [rbx]
pmovmskb edx, xmm0
tzcnt edx, edx
mov r8, r11
sub r8, rax
mov r9, rdx
sub r9, rax
xor r9, r8
and r9, r12
cmp r9, 0x10
jb 0x14003a3a0
mov rax, rdx
shl rax, 5
neg rax
add rax, rbx
add rax, 0xffffffffffffffe0
movzx r8d, byte [rbx + rdx]
shr rcx, 0x39
lea r9, [rdx - 0x10]
and r9, r12
mov byte [rbx + rdx], cl
mov byte [r9 + rbx + 0x10], cl
cmp r8b, 0xff
je 0x14003a900
movzx ecx, byte [r14]
movzx edx, byte [rax]
mov byte [r14], dl
mov byte [rax], cl
movzx ecx, byte [r14 + 1]
movzx edx, byte [rax + 1]
mov byte [r14 + 1], dl
mov byte [rax + 1], cl
movzx ecx, byte [r14 + 2]
movzx edx, byte [rax + 2]
mov byte [r14 + 2], dl
mov byte [rax + 2], cl
movzx ecx, byte [r14 + 3]
movzx edx, byte [rax + 3]
mov byte [r14 + 3], dl
mov byte [rax + 3], cl
movzx ecx, byte [r14 + 4]
movzx edx, byte [rax + 4]
mov byte [r14 + 4], dl
mov byte [rax + 4], cl
movzx ecx, byte [r14 + 5]
movzx edx, byte [rax + 5]
mov byte [r14 + 5], dl
mov byte [rax + 5], cl
movzx ecx, byte [r14 + 6]
movzx edx, byte [rax + 6]
mov byte [r14 + 6], dl
mov byte [rax + 6], cl
movzx ecx, byte [r14 + 7]
movzx edx, byte [rax + 7]
mov byte [r14 + 7], dl
mov byte [rax + 7], cl
movzx ecx, byte [r14 + 8]
movzx edx, byte [rax + 8]
mov byte [r14 + 8], dl
mov byte [rax + 8], cl
movzx ecx, byte [r14 + 9]
movzx edx, byte [rax + 9]
mov byte [r14 + 9], dl
mov byte [rax + 9], cl
movzx ecx, byte [r14 + 0xa]
movzx edx, byte [rax + 0xa]
mov byte [r14 + 0xa], dl
mov byte [rax + 0xa], cl
movzx ecx, byte [r14 + 0xb]
movzx edx, byte [rax + 0xb]
mov byte [r14 + 0xb], dl
mov byte [rax + 0xb], cl
movzx ecx, byte [r14 + 0xc]
movzx edx, byte [rax + 0xc]
mov byte [r14 + 0xc], dl
mov byte [rax + 0xc], cl
movzx ecx, byte [r14 + 0xd]
movzx edx, byte [rax + 0xd]
mov byte [r14 + 0xd], dl
mov byte [rax + 0xd], cl
movzx ecx, byte [r14 + 0xe]
movzx edx, byte [rax + 0xe]
mov byte [r14 + 0xe], dl
mov byte [rax + 0xe], cl
movzx ecx, byte [r14 + 0xf]
movzx edx, byte [rax + 0xf]
mov byte [r14 + 0xf], dl
mov byte [rax + 0xf], cl
movzx ecx, byte [r14 + 0x10]
movzx edx, byte [rax + 0x10]
mov byte [r14 + 0x10], dl
mov byte [rax + 0x10], cl
movzx ecx, byte [r14 + 0x11]
movzx edx, byte [rax + 0x11]
mov byte [r14 + 0x11], dl
mov byte [rax + 0x11], cl
movzx ecx, byte [r14 + 0x12]
movzx edx, byte [rax + 0x12]
mov byte [r14 + 0x12], dl
mov byte [rax + 0x12], cl
movzx ecx, byte [r14 + 0x13]
movzx edx, byte [rax + 0x13]
mov byte [r14 + 0x13], dl
mov byte [rax + 0x13], cl
movzx ecx, byte [r14 + 0x14]
movzx edx, byte [rax + 0x14]
mov byte [r14 + 0x14], dl
mov byte [rax + 0x14], cl
movzx ecx, byte [r14 + 0x15]
movzx edx, byte [rax + 0x15]
mov byte [r14 + 0x15], dl
mov byte [rax + 0x15], cl
movzx ecx, byte [r14 + 0x16]
movzx edx, byte [rax + 0x16]
mov byte [r14 + 0x16], dl
mov byte [rax + 0x16], cl
movzx ecx, byte [r14 + 0x17]
movzx edx, byte [rax + 0x17]
mov byte [r14 + 0x17], dl
mov byte [rax + 0x17], cl
movzx ecx, byte [r14 + 0x18]
movzx edx, byte [rax + 0x18]
mov byte [r14 + 0x18], dl
mov byte [rax + 0x18], cl
movzx ecx, byte [r14 + 0x19]
movzx edx, byte [rax + 0x19]
mov byte [r14 + 0x19], dl
mov byte [rax + 0x19], cl
movzx ecx, byte [r14 + 0x1a]
movzx edx, byte [rax + 0x1a]
mov byte [r14 + 0x1a], dl
mov byte [rax + 0x1a], cl
movzx ecx, byte [r14 + 0x1b]
movzx edx, byte [rax + 0x1b]
mov byte [r14 + 0x1b], dl
mov byte [rax + 0x1b], cl
movzx ecx, byte [r14 + 0x1c]
movzx edx, byte [rax + 0x1c]
mov byte [r14 + 0x1c], dl
mov byte [rax + 0x1c], cl
movzx ecx, byte [r14 + 0x1d]
movzx edx, byte [rax + 0x1d]
mov byte [r14 + 0x1d], dl
mov byte [rax + 0x1d], cl
movzx ecx, byte [r14 + 0x1e]
movzx edx, byte [rax + 0x1e]
mov byte [r14 + 0x1e], dl
mov byte [rax + 0x1e], cl
movzx ecx, byte [r14 + 0x1f]
movzx edx, byte [rax + 0x1f]
mov byte [r14 + 0x1f], dl
mov byte [rax + 0x1f], cl
jmp 0x14003a3f0
lea rcx, [r11 - 0x10]
and rcx, r12
mov byte [rbx + r11], 0xff
mov byte [rcx + rbx + 0x10], 0xff
movdqu xmm0, xmmword [r14]
movdqu xmm1, xmmword [r14 + 0x10]
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
jmp 0x14003a3b3
call fcn.14000f7f0
ud2