Function at 0x1401688c0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov rbx, qword [rcx + 0x18]
mov rax, rbx
inc rax
je 0x1401692f9
mov r15, rdx
mov rsi, rcx
mov r11, qword [rcx + 8]
lea r8, [r11 + 1]
mov rcx, r8
shr rcx, 3
mov r9, r8
and r9, 0xfffffffffffffff8
sub r9, rcx
cmp r11, 8
cmovb r9, r11
mov rcx, r9
shr rcx, 1
cmp rax, rcx
mov qword [rsp + 0x20], r11
mov qword [rsp + 0x38], rbx
jbe 0x14016894a
inc r9
cmp rax, r9
cmova r9, rax
cmp r9, 8
mov qword [rsp + 0x30], r8
jae 0x14016897c
xor eax, eax
cmp r9, 4
setae al
lea r14, [rax*4 + 4]
jmp 0x1401689cc
mov qword [rsp + 0x68], r9
mov rdi, qword [rsi]
mov rcx, r8
shr rcx, 4
xor eax, eax
test r8b, 0xf
setne al
add rax, rcx
je 0x140168c7a
cmp rax, 1
jne 0x140168c10
xor ecx, ecx
jmp 0x140168c64
mov rax, r9
shr rax, 0x3d
jne 0x1401692f9
shl r9, 3
mov r14d, 1
cmp r9, 0xe
jb 0x1401689cc
movabs rcx, 0x2492492492492493
mov rax, r9
mul rcx
sub r9, rdx
shr r9, 1
add r9, rdx
shr r9, 2
dec r9
bsr rcx, r9
not ecx
mov r14, 0xffffffffffffffff
shr r14, cl
inc r14
mov ecx, 0x88
mov rax, r14
mul rcx
jo 0x1401692f9
mov r12, rax
add r12, 0xf
and r12, 0xfffffffffffffff0
lea r13, [r14 + 0x10]
mov rbp, r12
add rbp, r13
jb 0x1401692f9
movabs rax, 0x7ffffffffffffff1
cmp rbp, rax
jae 0x1401692f9
test rbp, rbp
je 0x140168a55
movzx eax, byte [0x1402448a8]
mov rcx, qword [0x1402443c8]
test rcx, rcx
jne 0x140168a38
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x140168a4b
mov rcx, rax
mov qword [0x1402443c8], rax
xor edx, edx
mov r8, rbp
call qword [sym.imp.kernel32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x140168a5a
mov rcx, rbp
call fcn.140052e20
ud2
mov edi, 0x10
lea rbp, [r14 - 1]
mov rax, r14
shr rax, 3
mov rbx, r14
and rbx, 0xfffffffffffffff8
sub rbx, rax
cmp r14, 9
cmovb rbx, rbp
add rdi, r12
mov rcx, rdi
mov dl, 0xff
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rax, rbx
sub rax, qword [rsp + 0x38]
mov rbx, qword [rsi]
mov r8, qword [rsp + 0x20]
cmp r8, 0xffffffffffffffff
je 0x140168bc9
mov qword [rsp + 0x28], rax
lea r13, [rbx - 0x88]
mov r12, qword [r15]
mov r15, qword [r15 + 8]
xor r14d, r14d
jmp 0x140168b18
shr rax, 0x39
lea rcx, [r8 - 0x10]
and rcx, rbp
mov byte [rdi + r8], al
mov byte [rcx + rdi + 0x10], al
mov rax, r14
not rax
mov rcx, rax
shl rcx, 7
lea rdx, [rcx + rax*8]
add rdx, rbx
not r8
mov rax, r8
shl rax, 7
lea rcx, [rax + r8*8]
add rcx, rdi
mov r8d, 0x88
call sub.VCRUNTIME140.dll_memcpy
mov r8, qword [rsp + 0x20]
lea rax, [r14 + 1]
cmp r14, r8
mov r14, rax
je 0x140168baf
cmp byte [rbx + r14], 0
js 0x140168b08
mov rax, r14
neg rax
lea rcx, [r14*8]
shl rax, 7
sub rax, rcx
mov r8, qword [r13 + rax]
mov r9, qword [r13 + rax + 0x10]
mov rcx, r12
mov rdx, r15
call fcn.140029e30
mov rcx, rax
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x140168b87
mov r8d, 0x10
nop word cs:[rax + rax]
add rcx, r8
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x140168b70
tzcnt r8d, edx
add r8, rcx
and r8, rbp
cmp byte [rdi + r8], 0
js 0x140168ac0
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
tzcnt r8d, ecx
jmp 0x140168ac0
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
mov rax, qword [rsp + 0x28]
mov qword [rsi + 0x10], rax
test r8, r8
jne 0x140168bd4
jmp 0x1401692db
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
mov qword [rsi + 0x10], rax
mov ecx, 0x88
mov rax, qword [rsp + 0x30]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add r8, rax
cmp r8, 0xffffffffffffffef
je 0x1401692db
sub rbx, rax
mov rcx, qword [0x1402443c8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x1401692db
movabs rdx, 0x1ffffffffffffffe
and rdx, rax
xor ecx, ecx
movdqa xmm0, xmmword [0x14016e160]
nop word [rax + rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rdi + rcx]
por xmm1, xmm0
movdqa xmmword [rdi + rcx], xmm1
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rdi + rcx + 0x10]
por xmm1, xmm0
movdqa xmmword [rdi + rcx + 0x10], xmm1
add rcx, 0x20
add rdx, 0xfffffffffffffffe
jne 0x140168c30
test al, 1
je 0x140168c7a
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rdi + rcx]
por xmm0, xmmword [0x14016e160]
movdqa xmmword [rdi + rcx], xmm0
cmp r8, 0x10
jae 0x140168c9e
lea rcx, [rdi + 0x10]
mov rdx, rdi
call sub.VCRUNTIME140.dll_memmove
mov r11, qword [rsp + 0x20]
cmp r11, 0xffffffffffffffff
jne 0x140168ca8
xor eax, eax
jmp 0x1401692d4
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rdi + r8], xmm0
mov qword [rsp + 0x60], rsi
lea rax, [rdi - 0x88]
mov qword [rsp + 0x70], rax
mov rax, qword [r15]
mov rcx, qword [r15 + 8]
movabs rdx, 0x736f6d6570736575
xor rdx, rax
mov qword [rsp + 0x58], rdx
movabs rdx, 0x646f72616e646f6d
xor rdx, rcx
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6c7967656e657261
xor rdx, rax
mov qword [rsp + 0x48], rdx
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x40], rax
mov rbx, rdi
xor esi, esi
jmp 0x140168d39
shr rax, 0x39
lea rcx, [rsi - 0x10]
and rcx, r11
mov byte [rdi + rsi], al
mov byte [rcx + rdi + 0x10], al
lea rax, [rsi + 1]
add rbx, 0xffffffffffffff78
cmp rsi, r11
mov rsi, rax
je 0x1401692c5
cmp byte [rdi + rsi], 0x80
jne 0x140168d22
imul rax, rsi, 0xffffffffffffff78
lea rcx, [rdi + rax]
add rcx, 0xffffffffffffff78
mov qword [rsp + 0x80], rcx
add rax, rdi
mov qword [rsp + 0x78], rax
mov rax, rsi
not rax
mov rcx, rax
shl rcx, 7
lea rdx, [rcx + rax*8]
add rdx, rdi
mov rcx, rsi
neg rcx
mov qword [rsp + 0x30], rsi
lea rax, [rsi*8]
shl rcx, 7
sub rcx, rax
add rcx, qword [rsp + 0x70]
mov qword [rsp + 0x28], rcx
jmp 0x140168e3c
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rdx + 0x10]
movups xmm2, xmmword [rcx]
movups xmm3, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm2
movups xmmword [rdx + 0x10], xmm3
movups xmmword [rcx], xmm0
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rdx + 0x20]
movups xmm1, xmmword [rdx + 0x30]
movups xmm2, xmmword [rcx + 0x20]
movups xmm3, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm2
movups xmmword [rdx + 0x30], xmm3
movups xmmword [rcx + 0x20], xmm0
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rdx + 0x40]
movups xmm1, xmmword [rdx + 0x50]
movups xmm2, xmmword [rcx + 0x40]
movups xmm3, xmmword [rcx + 0x50]
movups xmmword [rdx + 0x40], xmm2
movups xmmword [rdx + 0x50], xmm3
movups xmmword [rcx + 0x40], xmm0
movups xmmword [rcx + 0x50], xmm1
movdqu xmm0, xmmword [rdx + 0x60]
movdqu xmm1, xmmword [rdx + 0x70]
movups xmm2, xmmword [rcx + 0x60]
movups xmm3, xmmword [rcx + 0x70]
movups xmmword [rdx + 0x60], xmm2
movups xmmword [rdx + 0x70], xmm3
movdqu xmmword [rcx + 0x60], xmm0
movdqu xmmword [rcx + 0x70], xmm1
mov rax, qword [rdx + 0x80]
mov r8, qword [rcx + 0x80]
mov qword [rdx + 0x80], r8
mov qword [rcx + 0x80], rax
mov rax, qword [rsp + 0x28]
mov r15, qword [rax]
mov r14, qword [rax + 0x10]
mov rax, r14
and rax, 0xfffffffffffffff8
je 0x140168ee0
mov r11, qword [rsp + 0x48]
mov r12, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x40]
xor r9d, r9d
mov r8, qword [rsp + 0x58]
nop dword [rax]
add r8, r12
rol r12, 0xd
mov rcx, qword [r15 + r9]
xor r12, r8
rol r8, 0x20
xor rbp, rcx
add r11, rbp
rol rbp, 0x10
xor rbp, r11
add r8, rbp
rol rbp, 0x15
add r11, r12
rol r12, 0x11
xor r12, r11
rol r11, 0x20
xor rbp, r8
xor r8, rcx
add r9, 8
cmp r9, rax
jb 0x140168e70
mov r13d, r14d
and r13d, 7
cmp r13d, 3
jbe 0x140168f04
mov r10d, dword [r15 + r9]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, r13
jb 0x140168f15
jmp 0x140168f2f
mov rbp, qword [rsp + 0x40]
mov r12, qword [rsp + 0x50]
mov r11, qword [rsp + 0x48]
mov r8, qword [rsp + 0x58]
xor r9d, r9d
mov r13d, r14d
and r13d, 7
cmp r13d, 3
ja 0x140168ec0
xor r10d, r10d
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, r13
jae 0x140168f2f
lea rcx, [rax + r9]
movzx esi, word [r15 + rcx]
lea ecx, [rax*8]
shl rsi, cl
or r10, rsi
or rax, 2
cmp rax, r13
jae 0x140168f50
add r9, rax
movzx r9d, byte [r15 + r9]
shl eax, 3
mov ecx, eax
shl r9, cl
or r10, r9
jmp 0x140168f55
test r13, r13
je 0x140168fb3
lea ecx, [r13*8]
mov r9d, 0xff
shl r9, cl
or r9, r10
cmp r13, 7
jne 0x140169093
mov ecx, 8
add r8, r12
rol r12, 0xd
sub rcx, r13
xor r12, r8
rol r8, 0x20
xor rbp, r9
add r11, rbp
rol rbp, 0x10
xor rbp, r11
add r8, rbp
rol rbp, 0x15
xor rbp, r8
add r11, r12
rol r12, 0x11
xor r12, r11
rol r11, 0x20
xor r8, r9
jmp 0x140168fb5
xor ecx, ecx
mov r9d, 1
sub r9, rcx
mov eax, r9d
and eax, 7
and r9, 0xfffffffffffffff8
cmp rcx, r9
jae 0x140169040
nop dword [rax]
add r8, r12
rol r12, 0xd
xor r12, r8
rol r8, 0x20
xor rbp, 0xff
add r11, rbp
rol rbp, 0x10
xor rbp, r11
add r8, rbp
rol rbp, 0x15
add r11, r12
rol r12, 0x11
xor r12, r11
rol r11, 0x20
xor rbp, r8
xor r8, 0xff
add rcx, 8
cmp rcx, r9
jb 0x140168fd0
xor r9d, r9d
cmp rax, 4
setae r9b
cmp eax, 4
mov r10d, 0
mov ecx, 0xff
cmovae r10, rcx
shl r9, 2
jmp 0x140169046
xor r10d, r10d
xor r9d, r9d
mov rsi, r9
lea ecx, [r9*8]
mov r15d, 0xff
shl r15, cl
or rsi, 1
mov r13, r9
or r13, 2
cmp rsi, rax
mov esi, 0
cmovae r15, rsi
cmovae r13, r9
or r15, r10
lea ecx, [r13*8]
mov r9d, 0xff
shl r9, cl
cmp r13, rax
cmovae r9, rsi
or r9, r15
shl r14, 0x38
movabs rax, 0x100000000000000
add r14, rax
add r8, r12
rol r12, 0xd
or r14, r9
xor r12, r8
rol r8, 0x20
xor rbp, r14
add r11, rbp
rol rbp, 0x10
xor rbp, r11
add r8, rbp
rol rbp, 0x15
add r11, r12
rol r12, 0x11
xor rbp, r8
xor r12, r11
rol r11, 0x20
xor r8, r14
add r8, r12
rol r12, 0xd
xor r12, r8
rol r8, 0x20
xor r11, 0xff
add r11, rbp
rol rbp, 0x10
xor rbp, r11
add r8, rbp
rol rbp, 0x15
add r11, r12
rol r12, 0x11
xor r12, r11
rol r11, 0x20
xor rbp, r8
add r8, r12
rol r12, 0xd
xor r12, r8
rol r8, 0x20
add r11, rbp
rol rbp, 0x10
xor rbp, r11
add r8, rbp
rol rbp, 0x15
add r11, r12
rol r12, 0x11
xor r12, r11
rol r11, 0x20
xor rbp, r8
add r8, r12
rol r12, 0xd
add r11, rbp
rol rbp, 0x10
xor rbp, r11
rol rbp, 0x15
xor r12, r8
add r11, r12
rol r12, 0x11
mov rax, r11
rol rax, 0x20
xor rax, r12
xor rax, rbp
xor rax, r11
mov rcx, rax
mov r11, qword [rsp + 0x20]
and rcx, r11
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb r8d, xmm0
mov r9, rcx
test r8d, r8d
mov rsi, qword [rsp + 0x30]
jne 0x1401691ba
mov r10d, 0x10
mov r9, rcx
nop
add r9, r10
and r9, r11
movdqu xmm0, xmmword [rdi + r9]
pmovmskb r8d, xmm0
add r10, 0x10
test r8d, r8d
je 0x1401691a0
tzcnt r8d, r8d
add r8, r9
and r8, r11
cmp byte [rdi + r8], 0
js 0x1401691da
movdqa xmm0, xmmword [rdi]
pmovmskb r8d, xmm0
tzcnt r8d, r8d
mov r9, rsi
sub r9, rcx
mov r10, r8
sub r10, rcx
xor r10, r9
and r10, r11
cmp r10, 0x10
jb 0x140168d10
mov rcx, r8
not rcx
mov r9, rcx
shl r9, 7
lea rcx, [r9 + rcx*8]
add rcx, rdi
movzx r9d, byte [rdi + r8]
shr rax, 0x39
lea r10, [r8 - 0x10]
and r10, r11
mov byte [rdi + r8], al
mov byte [r10 + rdi + 0x10], al
cmp r9b, 0xff
je 0x1401692a0
imul rax, r8, 0xffffffffffffff78
add rax, rdi
cmp qword [rsp + 0x80], rax
jae 0x140168da0
cmp rcx, qword [rsp + 0x78]
jae 0x140168da0
mov rcx, 0xffffffffffffff78
nop word cs:[rax + rax]
movzx r8d, byte [rbx + rcx]
movzx r9d, byte [rax + rcx]
mov byte [rbx + rcx], r9b
mov byte [rax + rcx], r8b
movzx r8d, byte [rbx + rcx + 1]
movzx r9d, byte [rax + rcx + 1]
mov byte [rbx + rcx + 1], r9b
mov byte [rax + rcx + 1], r8b
add rcx, 2
jne 0x140169260
jmp 0x140168e3c
lea rax, [rsi - 0x10]
and rax, r11
mov byte [rdi + rsi], 0xff
mov byte [rax + rdi + 0x10], 0xff
mov r8d, 0x88
call sub.VCRUNTIME140.dll_memcpy
mov r11, qword [rsp + 0x20]
jmp 0x140168d22
mov rsi, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x38]
mov rax, qword [rsp + 0x68]
sub rax, rbx
mov qword [rsi + 0x10], rax
movabs rax, 0x8000000000000001
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140052de0
ud2