Function at 0x14011b520
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
mov r9, qword [rcx + 0x18]
mov rax, r9
inc rax
je 0x14011bd5c
mov rbx, rdx
mov r8, rcx
mov rsi, qword [rcx + 8]
lea r14, [rsi + 1]
mov rdx, r14
shr rdx, 3
mov rcx, r14
and rcx, 0xfffffffffffffff8
sub rcx, rdx
cmp rsi, 8
cmovb rcx, rsi
mov rdx, rcx
shr rdx, 1
cmp rax, rdx
mov qword [rsp + 0x30], r8
jbe 0x14011b5a4
inc rcx
cmp rax, rcx
cmova rcx, rax
cmp rcx, 8
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r9
jae 0x14011b5d1
xor eax, eax
cmp rcx, 4
setae al
lea r15, [rax*4 + 4]
jmp 0x14011b615
mov rdi, qword [r8]
mov rcx, r14
shr rcx, 4
xor eax, eax
test r14b, 0xf
setne al
add rax, rcx
je 0x14011b8f1
cmp rax, 1
jne 0x14011b885
xor edx, edx
jmp 0x14011b8d7
mov rax, rcx
shr rax, 0x3d
jne 0x14011bd5c
shl rcx, 3
movabs rdx, 0x2492492492492493
mov rax, rcx
mul rdx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 2
dec rcx
bsr rcx, rcx
not ecx
mov r15, 0xffffffffffffffff
shr r15, cl
inc r15
mov ecx, 0x18
mov rax, r15
mul rcx
jo 0x14011bd5c
mov r13, rax
add r13, 0xf
and r13, 0xfffffffffffffff0
lea r12, [r15 + 0x10]
mov rbp, r13
add rbp, r12
jb 0x14011bd5c
movabs rax, 0x7ffffffffffffff1
cmp rbp, rax
jae 0x14011bd5c
test rbp, rbp
je 0x14011b67a
movzx eax, byte [0x14016031c]
xor ecx, ecx
mov rdx, rbp
call fcn.1400fd810
mov rdi, rax
test rax, rax
jne 0x14011b67f
mov rcx, rbp
call fcn.140050550
mov edi, 0x10
add rdi, r13
lea r13, [r15 - 1]
mov rax, r15
shr rax, 3
mov r14, r15
and r14, 0xfffffffffffffff8
sub r14, rax
cmp r15, 9
cmovb r14, r13
mov rcx, rdi
mov dl, 0xff
mov r8, r12
call sub.VCRUNTIME140.dll_memset
mov r12, qword [rsp + 0x38]
test r12, r12
je 0x14011b81d
mov qword [rsp + 0x68], r14
mov rax, qword [rsp + 0x30]
mov r15, qword [rax]
movdqa xmm0, xmmword [r15]
pmovmskb ebp, xmm0
not ebp
lea rax, [rdi - 0x18]
mov qword [rsp + 0x60], rax
mov rax, qword [rbx]
mov qword [rsp + 0x58], rax
mov rax, qword [rbx + 8]
mov qword [rsp + 0x50], rax
lea rax, [r15 - 0x18]
mov qword [rsp + 0x48], rax
xor ebx, ebx
mov qword [rsp + 0x28], r15
jmp 0x14011b757
lea ecx, [rbp - 1]
and ecx, ebp
dec r12
shr rax, 0x39
lea r8, [rdx - 0x10]
and r8, r13
mov byte [rdi + rdx], al
mov byte [rdi + r8 + 0x10], al
shl r14, 3
lea rax, [r14 + r14*2]
mov r8, qword [rsp + 0x48]
sub r8, rax
shl rdx, 3
lea rax, [rdx + rdx*2]
mov rdx, qword [rsp + 0x60]
sub rdx, rax
mov rax, qword [r8 + 0x10]
mov qword [rdx + 0x10], rax
movdqu xmm0, xmmword [r8]
movdqu xmmword [rdx], xmm0
mov ebp, ecx
test r12, r12
je 0x14011b80c
test bp, bp
jne 0x14011b77c
nop dword [rax]
movdqa xmm0, xmmword [r15 + 0x10]
add r15, 0x10
pmovmskb ebp, xmm0
add rbx, 0x10
cmp ebp, 0xffff
je 0x14011b760
not ebp
tzcnt r14d, ebp
add r14, rbx
mov rax, r14
neg rax
lea rax, [rax + rax*2]
mov rcx, qword [rsp + 0x28]
mov r8, qword [rcx + rax*8 - 0x18]
mov r9, qword [rcx + rax*8 - 0x10]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x50]
call case.0x14003d3e5.346
mov rcx, r13
and rcx, rax
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x14011b7e7
mov r8d, 0x10
nop word cs:[rax + rax]
add rcx, r8
and rcx, r13
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x14011b7d0
tzcnt edx, edx
add rdx, rcx
and rdx, r13
cmp byte [rdi + rdx], 0
js 0x14011b700
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x14011b700
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x38]
mov r14, qword [rsp + 0x68]
jmp 0x14011b82c
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax]
mov qword [rsp + 0x28], rcx
xor ecx, ecx
sub r14, rcx
mov qword [rax], rdi
mov qword [rax + 8], r13
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], rcx
test rsi, rsi
je 0x14011bd41
mov ecx, 0x18
mov rax, qword [rsp + 0x40]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add rsi, rax
cmp rsi, 0xffffffffffffffef
je 0x14011bd41
mov r8, qword [rsp + 0x28]
sub r8, rax
mov rcx, qword [0x1401602a0]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x14011bd41
movabs rcx, 0x1ffffffffffffffe
and rcx, rax
xor r8d, r8d
movdqa xmm0, xmmword [0x140123850]
nop dword [rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rdi + r8]
por xmm1, xmm0
movdqa xmmword [rdi + r8], xmm1
lea rdx, [r8 + 0x20]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rdi + r8 + 0x10]
por xmm1, xmm0
movdqa xmmword [rdi + r8 + 0x10], xmm1
mov r8, rdx
add rcx, 0xfffffffffffffffe
jne 0x14011b8a0
test al, 1
je 0x14011b8f1
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rdi + rdx]
por xmm0, xmmword [0x140123850]
movdqa xmmword [rdi + rdx], xmm0
cmp r14, 0x10
jae 0x14011b917
lea rcx, [rdi + 0x10]
mov rdx, rdi
mov r8, r14
call sub.VCRUNTIME140.dll_memmove
test r14, r14
jne 0x14011b921
xor eax, eax
mov r8, qword [rsp + 0x30]
jmp case.0x14003c7b9.450
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rdi + r14], xmm0
mov rax, qword [rbx]
mov rbp, qword [rbx + 8]
movabs r13, 0x736f6d6570736575
xor r13, rax
movabs rcx, 0x646f72616e646f6d
xor rcx, rbp
add r13, rcx
rol rcx, 0xd
xor rcx, r13
rol r13, 0x20
movabs rdx, 0x6c7967656e657261
mov qword [rsp + 0x58], rcx
rol rcx, 0x11
mov qword [rsp + 0x48], rcx
xor rdx, rax
mov qword [rsp + 0x50], rdx
xor r10d, r10d
mov qword [rsp + 0x70], rsi
jmp 0x14011b9a3
call fcn.140050510
int3