Function at 0x14000f100
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov qword [rsp + 0x28], r8
mov qword [rsp + 0x58], rdx
mov r14, rcx
mov rcx, qword [rcx + 0x18]
cmp rcx, 0xffffffffffffffff
je 0x14000f9f4
mov r12, qword [r14 + 8]
lea rsi, [r12 + 1]
mov rax, rsi
shr rax, 3
mov r8, rsi
and r8, 0xfffffffffffffff8
sub r8, rax
cmp r12, 8
cmovb r8, r12
mov rax, r8
shr rax, 1
cmp rcx, rax
mov qword [rsp + 0x68], rcx
jae 0x14000f192
mov qword [rsp + 0x70], r8
mov rbx, qword [r14]
mov rcx, rsi
shr rcx, 4
xor eax, eax
test sil, 0xf
setne al
add rax, rcx
je 0x14000f4d1
cmp rax, 1
jne 0x14000f45c
xor edx, edx
jmp 0x14000f4b7
lea rax, [rcx + 1]
inc r8
cmp rax, r8
cmova r8, rax
cmp r8, 8
jae 0x14000f1b9
xor eax, eax
cmp r8, 4
setae al
lea rdi, [rax*4 + 4]
jmp 0x14000f206
movabs rax, 0x1ffffffffffffffe
inc rax
cmp r8, rax
ja 0x14000f9f4
shl r8, 3
movabs rcx, 0x2492492492492493
mov rax, r8
mul rcx
sub r8, rdx
shr r8, 1
add r8, rdx
shr r8, 2
dec r8
bsr rcx, r8
not ecx
mov rdi, 0xffffffffffffffff
shr rdi, cl
inc rdi
mov ecx, 0x30
mov rax, rdi
mul rcx
jo 0x14000f9f4
mov r13, rax
lea r15, [rdi + 0x10]
mov rbx, rax
add rbx, r15
jb 0x14000f9f4
movabs rax, 0x7ffffffffffffff0
cmp rbx, rax
ja 0x14000f9f4
mov qword [rsp + 0x40], rsi
movzx eax, byte [0x140061030]
mov rcx, rbx
call fcn.1400474f0
test rax, rax
je 0x14000f9f9
mov rsi, rax
lea rbp, [rdi - 1]
mov rax, rdi
shr rax, 3
mov rcx, rdi
and rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rdi, 9
cmovb rcx, rbp
mov qword [rsp + 0x48], rcx
lea rbx, [rsi + r13]
mov rcx, rbx
mov dl, 0xff
mov r8, r15
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
mov r15, qword [rsp + 0x68]
test r15, r15
je 0x14000f3fd
lea rax, [rsi + r13]
add rax, 0xffffffffffffffd0
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x60], r14
mov r14, qword [r14]
movdqa xmm0, xmmword [r14]
pmovmskb esi, xmm0
not esi
lea r9, [r14 - 0x30]
xor edi, edi
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r9
jmp 0x14000f338
lea ecx, [rsi - 1]
and ecx, esi
dec r15
shr rax, 0x39
lea r8, [rdx - 0x10]
and r8, rbp
mov byte [rbx + rdx], al
mov byte [rbx + r8 + 0x10], al
shl r13, 4
lea rax, [r13*2]
add rax, r13
mov r8, r9
sub r8, rax
shl rdx, 4
lea rax, [rdx + rdx*2]
mov rdx, qword [rsp + 0x50]
sub rdx, rax
movdqu xmm0, xmmword [r8]
movdqu xmm1, xmmword [r8 + 0x10]
movups xmm2, xmmword [r8 + 0x20]
movups xmmword [rdx + 0x20], xmm2
movdqu xmmword [rdx + 0x10], xmm1
movdqu xmmword [rdx], xmm0
mov esi, ecx
test r15, r15
je 0x14000f3f1
test si, si
jne 0x14000f35c
nop dword [rax]
movdqa xmm0, xmmword [r14 + 0x10]
add r14, 0x10
pmovmskb esi, xmm0
add rdi, 0x10
cmp esi, 0xffff
je 0x14000f340
not esi
tzcnt r13d, esi
add r13, rdi
mov rax, r13
neg rax
lea rax, [rax + rax*2]
shl rax, 4
mov r8, qword [r9 + rax + 8]
mov r9, qword [r9 + rax + 0x10]
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x28]
call fcn.14000ef70
mov rcx, rax
and rcx, rbp
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x14000f3c7
mov r8d, 0x10
nop word cs:[rax + rax]
add rcx, r8
and rcx, rbp
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x14000f3b0
mov r9, qword [rsp + 0x30]
tzcnt edx, edx
add rdx, rcx
and rdx, rbp
cmp byte [rbx + rdx], 0
js 0x14000f2d0
movdqa xmm0, xmmword [rbx]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x14000f2d0
mov r14, qword [rsp + 0x60]
mov r8, qword [rsp + 0x38]
jmp 0x14000f400
mov r8, qword [r14]
mov rax, qword [rsp + 0x48]
sub rax, qword [rsp + 0x68]
mov qword [r14], rbx
mov qword [r14 + 8], rbp
mov qword [r14 + 0x10], rax
test r12, r12
je 0x14000f503
mov ecx, 0x30
mov rax, qword [rsp + 0x40]
mul rcx
add r12, rax
cmp r12, 0xffffffffffffffef
je 0x14000f503
sub r8, rax
mov rcx, qword [0x140061108]
xor edx, edx
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp sub.KERNEL32.dll_HeapFree
movabs rcx, 0x1ffffffffffffffe
and rcx, rax
xor r8d, r8d
movdqa xmm0, xmmword [0x14004e310]
nop word cs:[rax + rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r8]
por xmm1, xmm0
movdqa xmmword [rbx + r8], xmm1
lea rdx, [r8 + 0x20]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r8 + 0x10]
por xmm1, xmm0
movdqa xmmword [rbx + r8 + 0x10], xmm1
mov r8, rdx
add rcx, 0xfffffffffffffffe
jne 0x14000f480
test al, 1
je 0x14000f4d1
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rbx + rdx]
por xmm0, xmmword [0x14004e310]
movdqa xmmword [rbx + rdx], xmm0
mov qword [rsp + 0x60], r14
cmp rsi, 0x10
jae 0x14000f517
lea rcx, [rbx + 0x10]
mov rdx, rbx
mov r8, rsi
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
test rsi, rsi
jne 0x14000f520
mov rcx, qword [rsp + 0x70]
sub rcx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x60]
mov qword [rax + 0x10], rcx
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbx + rsi], xmm0
lea r13, [rbx - 0x30]
movabs rax, 0x736f6d6570736575
mov rdx, qword [rsp + 0x58]
xor rax, rdx
mov qword [rsp + 0x50], rax
movabs rax, 0x646f72616e646f6d
mov rcx, qword [rsp + 0x28]
xor rax, rcx
mov qword [rsp + 0x48], rax
movabs rax, 0x6c7967656e657261
xor rax, rdx
mov qword [rsp + 0x40], rax
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x38], rax
xor ecx, ecx
mov r14, rbx
xor esi, esi
mov qword [rsp + 0x78], r12
jmp 0x14000f5b8
shr rax, 0x39
lea rcx, [rsi - 0x10]
and rcx, r12
mov byte [rbx + rsi], al
mov byte [rbx + rcx + 0x10], al
xor ecx, ecx
lea rax, [rsi + 1]
add r14, 0xffffffffffffffd0
cmp rsi, r12
mov rsi, rax
je 0x14000f4f0
cmp cl, byte [rbx + rsi]
jno 0x14000f5a4
mov rax, rsi
shl rax, 4
lea rax, [rax + rax*2]
mov r9, r13
sub r9, rax
mov rcx, rbx
sub rcx, rax
mov qword [rsp + 0x80], rcx
mov rax, rsi
neg rax
lea rax, [rax + rax*2]
shl rax, 4
add rax, rbx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r9
jmp 0x14000f636
movups xmm0, xmmword [r9]
movups xmm1, xmmword [rcx]
movups xmmword [r9], xmm1
movups xmmword [rcx], xmm0
movups xmm0, xmmword [r9 + 0x10]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [r9 + 0x10], xmm1
movups xmmword [rcx + 0x10], xmm0
movdqu xmm0, xmmword [r9 + 0x20]
movdqu xmm1, xmmword [rcx + 0x20]
movdqu xmmword [r9 + 0x20], xmm1
movdqu xmmword [rcx + 0x20], xmm0
mov rax, qword [rsp + 0x58]
mov rdx, qword [rax - 0x28]
mov r15, qword [rax - 0x20]
mov rax, r15
and rax, 0xfffffffffffffff8
je 0x14000f6e0
mov r10, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
mov r11, qword [rsp + 0x38]
xor ebp, ebp
mov rdi, qword [rsp + 0x50]
nop word cs:[rax + rax]
mov rcx, qword [rdx + rbp]
xor r11, rcx
add rdi, r9
rol r9, 0xd
add r10, r11
xor r9, rdi
rol r11, 0x10
xor r11, r10
rol rdi, 0x20
add r10, r9
add rdi, r11
rol r9, 0x11
xor r9, r10
rol r11, 0x15
rol r10, 0x20
xor r11, rdi
xor rdi, rcx
add rbp, 8
cmp rbp, rax
jb 0x14000f670
mov r8d, r15d
and r8d, 7
cmp r8d, 4
jb 0x14000f703
mov esi, dword [rdx + rbp]
mov eax, 4
mov ecx, eax
or ecx, 1
cmp ecx, r8d
jb 0x14000f711
jmp 0x14000f737
mov r11, qword [rsp + 0x38]
mov r9, qword [rsp + 0x48]
mov r10, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x50]
xor ebp, ebp
mov r8d, r15d
and r8d, 7
cmp r8d, 4
jae 0x14000f6c0
xor esi, esi
xor eax, eax
mov ecx, eax
or ecx, 1
cmp ecx, r8d
jae 0x14000f737
lea rcx, [rdx + rax]
mov r12, r13
movzx r13d, word [rbp + rcx]
lea ecx, [rax*8]
shl r13, cl
or rsi, r13
mov r13, r12
mov r12, qword [rsp + 0x78]
or rax, 2
cmp eax, r8d
jae 0x14000f760
add rbp, rax
movzx edx, byte [rdx + rbp]
shl eax, 3
mov ecx, eax
shl rdx, cl
or rsi, rdx
inc r15
jmp 0x14000f768
inc r15
test r8, r8
je 0x14000f7bb
lea ecx, [r8*8]
mov eax, 0xff
shl rax, cl
or rax, rsi
cmp r8, 7
jne 0x14000f7c0
xor r11, rax
add rdi, r9
add r10, r11
rol r9, 0xd
rol r11, 0x10
xor r9, rdi
xor r11, r10
rol rdi, 0x20
add r10, r9
add rdi, r11
rol r9, 0x11
xor r9, r10
rol r11, 0x15
xor r11, rdi
rol r10, 0x20
xor rdi, rax
xor eax, eax
jmp 0x14000f7c0
mov eax, 0xff
mov rsi, qword [rsp + 0x28]
shl r15, 0x38
or r15, rax
xor r11, r15
add rdi, r9
rol r9, 0xd
add r10, r11
xor r9, rdi
rol r11, 0x10
xor r11, r10
rol rdi, 0x20
add r10, r9
add rdi, r11
rol r9, 0x11
xor r9, r10
rol r11, 0x15
rol r10, 0x20
xor r11, rdi
xor rdi, r15
xor r10, 0xff
add rdi, r9
add r10, r11
rol r9, 0xd
xor r9, rdi
rol r11, 0x10
rol rdi, 0x20
xor r11, r10
add r10, r9
rol r9, 0x11
add rdi, r11
xor r9, r10
rol r11, 0x15
xor r11, rdi
rol r10, 0x20
add rdi, r9
add r10, r11
rol r9, 0xd
xor r9, rdi
rol r11, 0x10
rol rdi, 0x20
xor r11, r10
add r10, r9
rol r9, 0x11
add rdi, r11
xor r9, r10
rol r11, 0x15
xor r11, rdi
rol r10, 0x20
add rdi, r9
add r10, r11
rol r9, 0xd
xor r9, rdi
rol r11, 0x10
xor r11, r10
add r10, r9
rol r9, 0x11
rol r11, 0x15
mov rax, r10
rol rax, 0x20
xor rax, r9
xor rax, r11
xor rax, r10
mov rcx, rax
and rcx, r12
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb r8d, xmm0
mov rdx, rcx
test r8d, r8d
jne 0x14000f8d9
mov r9d, 0x10
mov rdx, rcx
nop dword [rax]
add rdx, r9
and rdx, r12
movdqu xmm0, xmmword [rbx + rdx]
pmovmskb r8d, xmm0
add r9, 0x10
test r8d, r8d
je 0x14000f8c0
tzcnt r8d, r8d
add r8, rdx
and r8, r12
cmp byte [rbx + r8], 0
js 0x14000f8f8
movdqa xmm0, xmmword [rbx]
pmovmskb edx, xmm0
tzcnt r8d, edx
mov rdx, rsi
sub rdx, rcx
mov r9, r8
sub r9, rcx
xor r9, rdx
and r9, r12
cmp r9, 0x10
jb 0x14000f590
mov rcx, r8
shl rcx, 4
lea rdx, [rcx + rcx*2]
mov rcx, r13
sub rcx, rdx
movzx r9d, byte [rbx + r8]
shr rax, 0x39
lea r10, [r8 - 0x10]
and r10, r12
mov byte [rbx + r8], al
mov byte [rbx + r10 + 0x10], al
cmp r9b, 0xff
je 0x14000f9c0
neg rdx
add rdx, rbx
mov r9, qword [rsp + 0x30]
cmp r9, rdx
setae al
cmp rcx, qword [rsp + 0x80]
setae r8b
or r8b, al
jne 0x14000f600
mov rax, 0xffffffffffffffd0
nop word cs:[rax + rax]
movzx ecx, byte [r14 + rax]
movzx r8d, byte [rdx + rax]
mov byte [r14 + rax], r8b
mov byte [rdx + rax], cl
movzx ecx, byte [r14 + rax + 1]
movzx r8d, byte [rdx + rax + 1]
mov byte [r14 + rax + 1], r8b
mov byte [rdx + rax + 1], cl
add rax, 2
jne 0x14000f980
jmp 0x14000f636
lea rax, [rsi - 0x10]
and rax, r12
mov byte [rbx + rsi], 0xff
mov byte [rbx + rax + 0x10], 0xff
mov rax, qword [rsp + 0x30]
movdqu xmm0, xmmword [rax]
movdqu xmm1, xmmword [rax + 0x10]
movups xmm2, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm2
movdqu xmmword [rcx + 0x10], xmm1
movdqu xmmword [rcx], xmm0
jmp 0x14000f5a2
call fcn.14000bc60
mov rcx, rbx
call fcn.14000bca0
int3