Function at 0x1401ad270
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
mov rdi, r8
mov rbx, rdx
mov r14, rcx
cmp r8, 0xe
jne 0x1401ad385
movabs rax, 0x5f6c616d69636544
xor rax, qword [rbx]
movabs rcx, 0x7265626d754e5f6c
xor rcx, qword [rbx + 6]
or rcx, rax
jne 0x1401ad4bb
movzx eax, byte [0x1403ac1f0]
mov rcx, qword [0x1403ac160]
test rcx, rcx
jne 0x1401ad2e2
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1401ad7e9
mov rcx, rax
mov qword [0x1403ac160], rax
mov r8d, 0x200
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1401ad7e9
xor ecx, ecx
lea rdx, [0x14031acc8]
movdqa xmm0, xmmword [0x1402a2d60]
nop dword [rax]
movdqu xmm1, xmmword [rcx + rdx]
pshufd xmm2, xmm1, 0xe8
pshufd xmm1, xmm1, 0xed
movdqa xmm3, xmm2
pxor xmm3, xmm0
movdqa xmm4, xmm1
pxor xmm4, xmm0
pcmpgtd xmm4, xmm3
movdqa xmm3, xmm4
pandn xmm3, xmm1
movdqa xmm5, xmm4
pandn xmm5, xmm2
pand xmm2, xmm4
por xmm2, xmm3
pand xmm4, xmm1
por xmm4, xmm5
punpckldq xmm2, xmm4
movdqu xmmword [rax + rcx], xmm2
add rcx, 0x10
cmp rcx, 0x200
jne 0x1401ad310
mov qword [rsp + 0x28], 0x40
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 0x40
jmp 0x1401ad47f
cmp rdi, 3
je 0x1401ad402
cmp rdi, 8
je 0x1401ad4a8
cmp rdi, 5
jne 0x1401ad4bb
mov eax, 0x49435341
xor eax, dword [rbx]
movzx ecx, byte [rbx + 4]
xor ecx, 0x49
or ecx, eax
jne 0x1401ad4bb
movzx eax, byte [0x1403ac1f0]
mov rcx, qword [0x1403ac160]
test rcx, rcx
jne 0x1401ad3e0
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1401ad7f8
mov rcx, rax
mov qword [0x1403ac160], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1401ad7f8
movabs rcx, 0x7f00000000
jmp 0x1401ad465
movzx eax, word [rbx]
xor eax, 0x6e41
movzx ecx, byte [rbx + 2]
xor ecx, 0x79
or cx, ax
jne 0x1401ad4bb
movzx eax, byte [0x1403ac1f0]
mov rcx, qword [0x1403ac160]
test rcx, rcx
jne 0x1401ad445
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1401ad7f8
mov rcx, rax
mov qword [0x1403ac160], rax
mov r8d, 8
xor edx, edx
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1401ad7f8
movabs rcx, 0x10ffff00000000
mov qword [rax], rcx
mov qword [rsp + 0x28], 1
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], 1
mov byte [rsp + 0x40], 0
lea rcx, [rsp + 0x28]
call fcn.1401a5180
movups xmm0, xmmword [rsp + 0x28]
movdqu xmm1, xmmword [rsp + 0x38]
movdqu xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
jmp 0x1401ad69d
movabs rax, 0x64656e6769737341
cmp qword [rbx], rax
je 0x1401ad764
mov qword [rsp + 0x48], r14
mov r13d, 0x25
xor r12d, r12d
lea r15, [0x1403337b0]
mov ebp, 0x25
nop word cs:[rax + rax]
shr r13, 1
add r13, r12
mov r14, r13
shl r14, 5
mov rcx, qword [r14 + r15]
mov r8, qword [r14 + r15 + 8]
mov rsi, r8
sub rsi, rdi
cmovae r8, rdi
mov rdx, rbx
call sub.msvcrt.dll_memcmp
cdqe
test eax, eax
cmovne rsi, rax
test rsi, rsi
je 0x1401ad531
lea rax, [r13 + 1]
test rsi, rsi
cmovg rbp, r13
cmovs r12, rax
mov r13, rbp
sub r13, r12
ja 0x1401ad4e0
jmp 0x1401ad66b
mov rbx, qword [r14 + r15 + 0x18]
test rbx, rbx
je 0x1401ad61d
mov r15, qword [r14 + r15 + 0x10]
lea rdi, [rbx*8]
movzx eax, byte [0x1403ac1f0]
mov rcx, qword [0x1403ac160]
test rcx, rcx
jne 0x1401ad577
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1401ad7dc
mov rcx, rax
mov qword [0x1403ac160], rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x1401ad7dc
cmp rbx, 0x10
jae 0x1401ad6ae
xor ecx, ecx
mov rdx, rcx
or rdx, 1
test bl, 1
je 0x1401ad5c5
mov r8d, dword [r15 + rcx*8]
mov r9d, dword [r15 + rcx*8 + 4]
cmp r8d, r9d
mov r10d, r9d
cmovb r10d, r8d
cmova r9d, r8d
mov dword [rax + rcx*8], r10d
mov dword [rax + rcx*8 + 4], r9d
mov rcx, rdx
cmp rbx, rdx
je 0x1401ad622
nop word [rax + rax]
mov edx, dword [r15 + rcx*8]
mov r8d, dword [r15 + rcx*8 + 4]
cmp edx, r8d
mov r9d, r8d
cmovb r9d, edx
cmova r8d, edx
mov dword [rax + rcx*8], r9d
mov dword [rax + rcx*8 + 4], r8d
mov edx, dword [r15 + rcx*8 + 8]
mov r8d, dword [r15 + rcx*8 + 0xc]
cmp edx, r8d
mov r9d, r8d
cmovb r9d, edx
cmova r8d, edx
mov dword [rax + rcx*8 + 8], r9d
mov dword [rax + rcx*8 + 0xc], r8d
add rcx, 2
cmp rbx, rcx
jne 0x1401ad5d0
jmp 0x1401ad622
mov eax, 4
test rbx, rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rbx
sete byte [rsp + 0x40]
lea rcx, [rsp + 0x28]
call fcn.1401a5180
mov rax, qword [rsp + 0x28]
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x50], xmm0
mov rcx, qword [rsp + 0x40]
mov qword [rsp + 0x60], rcx
movabs rcx, 0x8000000000000000
cmp rax, rcx
jne 0x1401ad683
mov rax, qword [rsp + 0x48]
mov byte [rax + 8], 1
movabs rcx, 0x8000000000000000
mov qword [rax], rcx
jmp 0x1401ad69d
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x48]
mov qword [rdx + 0x18], rcx
movaps xmm0, xmmword [rsp + 0x50]
movups xmmword [rdx + 8], xmm0
mov qword [rdx], rax
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
lea rdx, [rax + rbx*8]
add rdx, 0xfffffffffffffff8
xor ecx, ecx
cmp rdx, rax
jb 0x1401ad596
lea rdx, [rax + rbx*8]
add rdx, 0xfffffffffffffffc
mov r8, rax
add r8, 4
cmp rdx, r8
jb 0x1401ad596
lea rdx, [rbx - 1]
shr rdx, 0x3d
jne 0x1401ad596
mov rcx, rbx
and rcx, 0xfffffffffffffffe
xor edx, edx
movdqa xmm0, xmmword [0x1402a2d60]
nop dword [rax + rax]
movdqu xmm1, xmmword [r15 + rdx*8]
pshufd xmm2, xmm1, 0xe8
pshufd xmm1, xmm1, 0xed
movdqa xmm3, xmm2
pxor xmm3, xmm0
movdqa xmm4, xmm1
pxor xmm4, xmm0
pcmpgtd xmm4, xmm3
movdqa xmm3, xmm4
pandn xmm3, xmm1
movdqa xmm5, xmm4
pandn xmm5, xmm2
pand xmm2, xmm4
por xmm2, xmm3
pand xmm4, xmm1
por xmm4, xmm5
punpckldq xmm2, xmm4
movdqu xmmword [rax + rdx*8], xmm2
add rdx, 2
cmp rcx, rdx
jne 0x1401ad700
cmp rbx, rcx
jne 0x1401ad596
jmp 0x1401ad622
movabs rsi, 0x8000000000000000
lea rdx, [0x14031e085]
lea rcx, [rsp + 0x28]
mov r8d, 0xa
call fcn.1401ad270
mov rax, qword [rsp + 0x28]
cmp rax, rsi
jne 0x1401ad7a0
movzx eax, byte [rsp + 0x30]
mov byte [r14 + 8], al
mov qword [r14], rsi
jmp 0x1401ad69d
movzx ecx, byte [rsp + 0x30]
movups xmm0, xmmword [rsp + 0x31]
movups xmmword [rsp + 0x59], xmm0
mov rdx, qword [rsp + 0x40]
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x50], rax
mov byte [rsp + 0x58], cl
lea rcx, [rsp + 0x50]
call fcn.1401a68a0
movups xmm0, xmmword [rsp + 0x50]
movdqu xmm1, xmmword [rsp + 0x60]
jmp 0x1401ad499
mov ecx, 4
mov rdx, rdi
call fcn.1400a81e0
mov ecx, 4
mov edx, 0x200
call fcn.1400a81e0
mov ecx, 4
mov edx, 8
call fcn.1400a81e0
int3