Function at 0x14003b270
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x118]
sub rsp, 0x1f0
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x140343f10]
xor rax, rsp
mov qword [rbp + 0xa0], rax
xor edi, edi
mov r12d, edi
mov dword [rbp - 0x30], edi
cmp qword [0x14034db58], rdi
je 0x14003bd9f
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x20], xmm1
mov qword [rbp + 0x30], rdi
mov r8, qword [0x14034db70]
add r8, 0x148
movsxd rdx, dword [0x14034db80]
mov qword [rbp - 0x18], rdi
mov dword [rsp + 0x20], 8
lea r9, [rbp - 0x18]
call fcn.140037fb0
mov r14d, edi
mov ebx, edi
mov dword [rbp - 0x30], ebx
mov r8, qword [0x14034db70]
add r8, 0x150
movsxd rdx, dword [0x14034db80]
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x30]
call fcn.140037fb0
cmp dword [rsp + 0x30], edi
jbe 0x14003bbce
xorps xmm7, xmm7
movss xmm9, dword [0x14030e028]
movsd xmm8, qword [0x14030e0a8]
nop word [rax + rax]
movsxd rcx, dword [0x14034db80]
mov qword [rbp - 0x20], rdi
movsxd rax, ebx
mov rdx, qword [rbp - 0x18]
lea r8, [rdx + rax*8]
mov dword [rsp + 0x20], 8
lea r9, [rbp - 0x20]
mov edx, ecx
call fcn.140037fb0
mov esi, edi
movsxd rdx, dword [0x14034db80]
mov dword [rsp + 0x30], edi
mov rdi, qword [rbp - 0x20]
lea r13, [rdi + 0xa0]
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x30]
mov r8, r13
call fcn.140037fb0
cmp dword [rsp + 0x30], 0
jbe 0x14003bb92
xor ebx, ebx
cmp r14d, 0x28
jge 0x14003bb8f
movsxd rdx, dword [0x14034db80]
mov qword [rsp + 0x30], rbx
lea r8, [rdi + 0x98]
mov dword [rsp + 0x20], 8
lea r9, [rsp + 0x30]
call fcn.140037fb0
movsxd rdx, dword [0x14034db80]
mov qword [rbp - 0x28], rbx
movsxd rcx, esi
mov rax, qword [rsp + 0x30]
lea r8, [rax + rcx*8]
mov dword [rsp + 0x20], 8
lea r9, [rbp - 0x28]
call fcn.140037fb0
movsxd rdx, dword [0x14034db80]
mov qword [rsp + 0x30], rbx
mov r15, qword [rbp - 0x28]
lea r8, [r15 + 0x188]
mov dword [rsp + 0x20], 8
lea r9, [rsp + 0x30]
call fcn.140037fb0
movsxd rdx, dword [0x14034db80]
xorps xmm0, xmm0
movups xmmword [rbp + 0x38], xmm0
movsd qword [rbp + 0x48], xmm7
mov r8, qword [rsp + 0x30]
add r8, 0x128
mov dword [rsp + 0x20], 0x18
lea r9, [rbp + 0x38]
call fcn.140037fb0
movsd xmm0, qword [rbp + 0x40]
subsd xmm0, qword [0x14034de68]
cvtpd2ps xmm0, xmm0
movaps xmm1, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
movaps xmm6, xmm0
movsd xmm0, qword [rbp + 0x38]
subsd xmm0, qword [0x14034de60]
cvtpd2ps xmm0, xmm0
movaps xmm1, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
movsd xmm1, qword [rbp + 0x48]
subsd xmm1, qword [0x14034de70]
cvtpd2ps xmm0, xmm1
movaps xmm1, xmm9
call sub.api_ms_win_crt_math_l1_1_0.dll_powf
addss xmm6, xmm0
xorps xmm1, xmm1
ucomiss xmm1, xmm6
ja 0x14003b4dd
xorps xmm0, xmm0
sqrtss xmm0, xmm6
jmp 0x14003b4e5
movaps xmm0, xmm6
call sub.api_ms_win_crt_math_l1_1_0.dll_sqrtf
cvtss2sd xmm0, xmm0
divsd xmm0, xmm8
xorps xmm1, xmm1
cvtsd2ss xmm1, xmm0
movd xmm0, dword [0x140343fc8]
cvtdq2ps xmm0, xmm0
comiss xmm0, xmm1
jbe 0x14003bb63
movsxd rdx, dword [0x14034db80]
mov dword [rsp + 0x30], ebx
lea r8, [r15 + 0x18]
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x30]
call fcn.140037fb0
mov ebx, dword [rsp + 0x30]
mov eax, ebx
sar eax, 0x10
lea ecx, [rax*8]
mov r8, qword [0x14034db78]
add r8, 0xc42d210
add r8, rcx
movsxd rdx, dword [0x14034db80]
mov qword [rbp - 0x28], 0
mov dword [rsp + 0x20], 8
lea r9, [rbp - 0x28]
call fcn.140037fb0
movzx ecx, bx
mov rax, qword [rbp - 0x28]
lea rdi, [rax + rcx*4]
movsxd rdx, dword [0x14034db80]
xor ecx, ecx
mov word [rsp + 0x30], cx
mov dword [rsp + 0x20], 2
lea r9, [rsp + 0x30]
mov r8, rdi
call fcn.140037fb0
or r12d, 1
cmp word [rsp + 0x30], 0x40
jae 0x14003b5d7
movsxd rdx, dword [0x14034db80]
xor ebx, ebx
mov dword [rsp + 0x30], ebx
lea r8, [rdi + 4]
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x30]
call fcn.140037fb0
mov edx, dword [rsp + 0x30]
lea rcx, [rbp]
call fcn.140038770
jmp 0x14003b5e4
mov edx, ebx
lea rcx, [rbp]
call fcn.140038770
xor ebx, ebx
mov dword [rsp + 0x60], 0x37312417
mov dword [rsp + 0x64], 0x34332417
mov dword [rsp + 0x68], 0x2f2e29
mov byte [rsp + 0x6c], 1
mov rcx, rbx
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x40]
xor byte [rsp + rcx + 0x60], al
inc rcx
cmp rcx, 0xb
jb 0x14003b610
mov byte [rsp + 0x6c], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rsp + 0x60]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14003ba45
cmp byte [0x14034db97], al
je 0x14003b6a5
movdqa xmm0, xmmword [0x14030e330]
movdqu xmmword [rbp + 0x38], xmm0
mov word [rbp + 0x48], pe_nt_image_headers64
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rbp + rcx + 0x38], al
inc rcx
cmp rcx, 0x10
jb 0x14003b670
mov byte [rbp + 0x49], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rbp + 0x38]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14003ba45
mov dword [rbp - 0x80], 0x2e3e330d
mov dword [rbp - 0x7c], 0x23003a38
mov dword [rbp - 0x78], 0x10100709
mov word [rbp - 0x74], pe_nt_image_headers64
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x80], al
inc rcx
cmp rcx, 0xc
jb 0x14003b6d0
mov byte [rbp - 0x73], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rbp - 0x80]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14003ba45
mov dword [rsp + 0x40], 0x29282918
mov dword [rsp + 0x44], 0x2b323c
mov byte [rsp + 0x48], 1
mov rcx, rbx
nop dword [rax]
lea eax, [rcx + 0x59]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 7
jb 0x14003b720
mov byte [rsp + 0x48], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rsp + 0x40]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14003ba45
mov dword [rbp - 0x10], 0x39332e18
mov dword [rbp - 0xc], 0x33003f33
mov dword [rbp - 8], 0x8060b09
mov dword [rbp - 4], 0x1001501
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x10], al
inc rcx
cmp rcx, 0xe
jb 0x14003b780
mov byte [rbp - 1], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rbp - 0x10]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14003ba45
mov dword [rsp + 0x70], 0x31272814
mov dword [rsp + 0x74], 0x6192121
mov dword [rsp + 0x78], 0x252425
mov byte [rsp + 0x7c], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x40]
xor byte [rsp + rcx + 0x70], al
inc rcx
cmp rcx, 0xb
jb 0x14003b7e0
mov byte [rsp + 0x7c], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rsp + 0x70]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14003ba45
cmp byte [0x14034db2a], al
je 0x14003b877
mov dword [rsp + 0x38], 0x35333f0f
mov dword [rsp + 0x3c], 0x100323e
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rsp + rcx + 0x38], al
inc rcx
cmp rcx, 6
jb 0x14003b840
mov byte [rsp + 0x3f], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rsp + 0x38]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14003ba45
mov dword [rsp + 0x50], 0x39373b0f
mov dword [rsp + 0x54], 0x10b0129
mov dword [rsp + 0x58], 0x1000b19
mov rcx, rbx
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rsp + rcx + 0x50], al
inc rcx
cmp rcx, 0xa
jb 0x14003b8a0
mov byte [rsp + 0x5b], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rsp + 0x50]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14003ba45
mov dword [rbp - 0x70], 0x39373b0f
mov dword [rbp - 0x6c], 0x91d0129
mov dword [rbp - 0x68], 0x30a3006
mov word [rbp - 0x64], pe_nt_image_headers64
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x70], al
inc rcx
cmp rcx, 0xc
jb 0x14003b900
mov byte [rbp - 0x63], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rbp - 0x70]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14003ba45
mov dword [rbp - 0x50], 0x39373b0f
mov dword [rbp - 0x4c], 0x11d0129
mov dword [rbp - 0x48], 0x30000b12
mov word [rbp - 0x44], 0x17
mov byte [rbp - 0x42], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xd
jb 0x14003b960
mov byte [rbp - 0x42], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rbp - 0x50]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14003ba45
mov dword [rbp - 0x40], 0x39373b0f
mov dword [rbp - 0x3c], 0x100c0129
mov dword [rbp - 0x38], 0x1717100e
mov word [rbp - 0x34], 0x26
mov byte [rbp - 0x32], 1
mov rcx, rbx
nop word [rax + rax]
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0xd
jb 0x14003b9c0
mov byte [rbp - 0x32], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rbp - 0x40]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14003ba45
mov dword [rbp - 0x60], 0x39373b0f
mov dword [rbp - 0x5c], 0x11d0129
mov dword [rbp - 0x58], 0x27000b12
mov word [rbp - 0x54], pe_nt_image_headers64
mov rcx, rbx
nop
lea eax, [rcx + 0x59]
xor byte [rbp + rcx - 0x60], al
inc rcx
cmp rcx, 0xc
jb 0x14003ba10
mov byte [rbp - 0x53], 0
lea rcx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rcx, qword [rbp]
lea rdx, [rbp - 0x60]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x14003bb24
xor eax, eax
mov qword [rbp + 0x50], rax
mov qword [rbp + 0x58], rbx
mov qword [rbp + 0x68], rbx
mov qword [rbp + 0x70], 0xf
mov byte [rbp + 0x58], al
xorps xmm0, xmm0
movaps xmmword [rbp + 0x80], xmm0
movsd qword [rbp + 0x90], xmm7
mov qword [rbp + 0x78], r15
lea rdx, [rbp]
cmp qword [rbp + 0x18], 0x10
cmovae rdx, qword [rbp]
mov r8, qword [rbp + 0x10]
lea rcx, [rbp + 0x58]
call fcn.1400046f0
mov rbx, qword [rbp + 0x28]
cmp rbx, qword [rbp + 0x30]
je 0x14003bad4
mov rax, qword [rbp + 0x50]
mov qword [rbx], rax
lea rcx, [rbx + 8]
lea rdx, [rbp + 0x58]
call fcn.140004610
mov rax, qword [rbp + 0x78]
mov qword [rbx + 0x28], rax
movaps xmm0, xmmword [rbp + 0x80]
movups xmmword [rbx + 0x30], xmm0
movsd xmm1, qword [rbp + 0x90]
movsd qword [rbx + 0x40], xmm1
add qword [rbp + 0x28], 0x48
jmp 0x14003bae4
lea r8, [rbp + 0x50]
mov rdx, rbx
lea rcx, [rbp + 0x20]
call fcn.140048ab0
inc r14d
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x14003bb22
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003bb1d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bc1a
call fcn.14007e4ac
xor ebx, ebx
mov rdx, qword [rbp + 0x18]
cmp rdx, 0x10
jb 0x14003bb5f
inc rdx
mov rcx, qword [rbp]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003bb5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14003bc21
call fcn.14007e4ac
mov rdi, qword [rbp - 0x20]
inc esi
movsxd rdx, dword [0x14034db80]
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x30]
mov r8, r13
call fcn.140037fb0
cmp esi, dword [rsp + 0x30]
jb 0x14003b3c3
mov ebx, dword [rbp - 0x30]
inc ebx
mov dword [rbp - 0x30], ebx
mov r8, qword [0x14034db70]
add r8, 0x150
movsxd rdx, dword [0x14034db80]
xor edi, edi
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x20], 4
lea r9, [rsp + 0x30]
call fcn.140037fb0
cmp ebx, dword [rsp + 0x30]
jb 0x14003b360
mov rdx, qword [0x14034dd18]
mov rcx, qword [0x14034dd10]
call fcn.140048f00
mov rax, qword [0x14034dd10]
mov qword [0x14034dd18], rax
mov r8, qword [rbp + 0x28]
mov rdx, qword [rbp + 0x20]
call fcn.1400492b0
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14003bc28
imul rdi, rax, 0x64
jmp 0x14003bc43
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cqo
idiv rbx
imul rdi, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rdi, rax
movabs rax, 0x7ffffffffff0bdbf
cmp rdi, rax
jge 0x14003bc5b
add rdi, 0xf4240
jmp 0x14003bc65
movabs rdi, 0x7fffffffffffffff
movabs rsi, 0x311cdad160000
movabs r14, 0x112e0be826d694b3
movsd xmm6, qword [0x14030e190]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x14003bc9f
imul rbx, rax, 0x64
jmp 0x14003bcbb
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
lea rbx, [rax + rcx]
cmp rbx, rdi
jge 0x14003bd2f
call qword [sym.imp.MSVCP140.dll__Xtime_get_ticks]
imul rcx, rax, 0x64
mov rax, rdi
sub rax, rbx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
comisd xmm0, xmm6
seta r9b
test r9b, r9b
lea r8, [rcx + rsi]
jne 0x14003bced
lea r8, [rax + rcx]
add rax, rcx
lea rdx, [rcx + rsi]
test r9b, r9b
cmove rdx, rax
mov rax, r14
imul rdx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [rbp - 0x10], rdx
imul eax, edx, 0x3b9aca00
sub r8d, eax
mov dword [rbp - 8], r8d
lea rcx, [rbp - 0x10]
call qword [sym.imp.MSVCP140.dll__Thrd_sleep]
jmp 0x14003bc81
mov rcx, qword [rbp + 0x20]
test rcx, rcx
je 0x14003bd9f
mov rdx, qword [rbp + 0x28]
call fcn.140048f00
mov rcx, qword [rbp + 0x30]
mov r8, qword [rbp + 0x20]
sub rcx, r8
movabs rax, 0xe38e38e38e38e39
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*8]
shl rdx, 3
mov rax, r8
cmp rdx, 0x1000
jb 0x14003bd97
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14003bd97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r8
call fcn.14007e4ac
mov rcx, qword [rbp + 0xa0]
xor rcx, rsp
call fcn.14007e450
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret