Function at 0x140168b70
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xe8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x60], 0xfffffffffffffffe
mov r15, rdx
mov qword [rbp + 0x18], rcx
cmp rdx, 0x15
jae 0x140168bcf
cmp r15, 1
jbe 0x140169269
mov r8d, 1
mov rcx, qword [rbp + 0x18]
mov rdx, r15
add rsp, 0xe8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
jmp fcn.140169cf0
lea rax, [r15*4]
movabs rsi, 0x7ffffffffffffff8
and rsi, rax
movzx eax, byte [0x14035fbc1]
mov edx, 4
mov rcx, rsi
call fcn.140026090
test rax, rax
je 0x1401693d9
mov qword [rbp + 0x28], rax
mov qword [rbp], rsi
movzx eax, byte [0x14035fbc1]
mov ecx, pe_nt_image_headers64
mov edx, 8
call fcn.140026090
test rax, rax
je 0x1401693e5
mov rdi, rax
mov rax, qword [rbp + 0x18]
lea rcx, [rax + 0xc]
mov qword [rbp - 0x10], rcx
lea rcx, [rax - 4]
mov qword [rbp - 8], rcx
add rax, 0xfffffffffffffff8
mov qword [rbp - 0x18], rax
mov eax, 0x10
mov qword [rbp + 0x50], rax
xor r12d, r12d
xor r14d, r14d
mov qword [rbp + 8], r15
jmp 0x140168c6a
mov r12d, 1
mov r14, qword [rbp + 0x38]
mov rax, r15
sub rax, r14
jbe 0x14016922d
mov rcx, qword [rbp + 0x18]
lea rcx, [rcx + r14*8]
cmp rax, 2
mov qword [rbp + 0x30], rdi
jae 0x140168d60
mov r8, rax
lea rbx, [r8 + r14]
mov rdi, rbx
sub rdi, r14
jb 0x14016934d
cmp rbx, r15
ja 0x14016934d
jae 0x140168dd0
cmp r8, 0xa
jae 0x140168dd0
lea rbx, [r14 + 0xa]
cmp rbx, r15
cmovae rbx, r15
cmp r8, 1
adc r8, 0
mov rdi, rbx
sub rdi, r14
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x48], rax
mov rsi, qword [rbp + 0x50]
mov qword [rbp + 0x40], rsi
mov rdx, rdi
call fcn.140169cf0
cmp r12, rsi
jne 0x140168ddd
mov qword [rbp + 0x20], r14
lea rax, [rsi + rsi]
mov qword [rbp + 0x58], rax
mov rcx, rsi
shl rcx, 5
mov r13, rsi
movzx eax, byte [0x14035fbc1]
mov edx, 8
call fcn.140026090
test rax, rax
je 0x140169377
mov rsi, rax
shl r13, 4
mov rcx, rax
mov r14, qword [rbp + 0x30]
mov rdx, r14
mov r8, r13
call fcn.14021a580
mov r8d, 8
mov rcx, r14
mov rdx, r13
call fcn.1400260a0
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x50], rax
mov r14, qword [rbp + 0x20]
jmp 0x140168de1
movzx edx, byte [rcx + 8]
cmp dl, byte [rcx]
jae 0x1401690d0
mov r8d, 2
cmp rax, 2
je 0x140168d98
nop dword [rax + rax]
mov r9d, edx
movzx edx, byte [rcx + r8*8]
cmp dl, r9b
jae 0x140168d98
inc r8
cmp rax, r8
jne 0x140168d80
mov r8, rax
mov rbx, r8
add rbx, r14
jb 0x140169395
cmp rbx, r15
ja 0x1401693b5
cmp r8, 2
jae 0x1401690fe
mov r8d, 1
jmp 0x140168c93
mov rsi, qword [rbp + 0x50]
cmp r12, rsi
je 0x140168cf2
mov rsi, qword [rbp + 0x30]
mov rax, r12
shl rax, 4
mov qword [rsi + rax], rdi
mov qword [rsi + rax + 8], r14
inc r12
mov r14, rbx
cmp r12, 2
mov rdi, rsi
jb 0x140168c6a
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x30], rdi
jmp 0x140168e73
mov r15, rdi
mov rdx, qword [rbp + 0x28]
mov r12, qword [rbp + 0x58]
nop dword [rax]
mov rdi, qword [rbp + 0x30]
add r13, rdi
add r14, rdi
sub r8, rdx
mov rcx, r15
call fcn.14021a580
mov rax, qword [rbp - 0x20]
add rax, rsi
mov qword [r14], rax
mov rax, qword [rbp - 0x28]
mov qword [r14 + 8], rax
lea rdx, [r13 + 0x10]
mov rax, qword [rbp - 0x30]
not rax
mov r8, qword [rbp + 0x20]
add r8, rax
shl r8, 4
mov rcx, r13
call fcn.14021a580
cmp r12, 1
mov r15, qword [rbp + 8]
jbe 0x140168c60
lea r10, [r12 - 1]
mov rcx, r10
shl rcx, 4
mov rax, qword [rdi + rcx]
mov rcx, qword [rdi + rcx + 8]
add rcx, rax
cmp rcx, r15
je 0x140168ee0
mov rdx, r12
shl rdx, 4
mov r8, qword [rdx + rdi - 0x20]
cmp r8, rax
jbe 0x140168ee0
cmp r12, 2
je 0x14016912d
lea r11, [r12 - 3]
mov rcx, r11
shl rcx, 4
mov rcx, qword [rdi + rcx]
lea r9, [r8 + rax]
cmp rcx, r9
jbe 0x140168ef6
cmp r12, 3
jbe 0x140169215
add r8, rcx
cmp qword [rdx + rdi - 0x40], r8
jbe 0x140168ef6
jmp 0x140169224
cmp r12, 2
je 0x140168efb
lea r11, [r12 - 3]
mov rcx, r11
shl rcx, 4
mov rcx, qword [rdi + rcx]
cmp rcx, rax
jb 0x140168f00
lea r11, [r12 - 2]
cmp r12, r11
jbe 0x1401692c4
lea r14, [r11 + 1]
cmp r12, r14
jbe 0x14016927e
mov rdx, r11
shl rdx, 4
mov rcx, qword [rdi + rdx + 8]
shl r14, 4
mov rax, qword [rdi + r14]
mov rbx, qword [rdi + r14 + 8]
add rbx, rax
mov rsi, rbx
sub rsi, rcx
jb 0x14016930a
cmp rbx, r15
ja 0x14016932a
mov qword [rbp - 0x20], rax
mov qword [rbp - 0x30], r11
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x58], r10
mov qword [rbp + 0x10], rdx
mov r13, qword [rdi + rdx]
mov rax, qword [rbp + 0x18]
mov qword [rbp - 0x28], rcx
lea r15, [rax + rcx*8]
lea rdi, [r15 + r13*8]
mov r12, rsi
sub r12, r13
cmp r12, r13
jae 0x140169020
lea r8, [r12*8]
mov rsi, qword [rbp + 0x28]
mov rcx, rsi
mov rdx, rdi
call fcn.14021a580
lea r8, [rsi + r12*8]
test r13, r13
mov rsi, r13
jle 0x1401690a8
test r12, r12
mov r13, qword [rbp + 0x10]
jle 0x140168e0e
mov rax, qword [rbp - 0x18]
lea rax, [rax + rbx*8]
mov r11, qword [rbp + 0x28]
mov r12, qword [rbp + 0x58]
nop word cs:[rax + rax]
movzx ecx, byte [r8 - 8]
movzx edx, byte [rdi - 8]
cmp cl, dl
mov r9d, 0
sbb r9, r9
cmp cl, dl
mov r10d, 0
adc r10, 0xffffffffffffffff
cmp cl, dl
lea rdi, [rdi + r9*8]
lea r8, [r8 + r10*8]
mov rcx, r8
cmovb rcx, rdi
mov rcx, qword [rcx]
mov qword [rax], rcx
cmp rdi, r15
jbe 0x140169015
add rax, 0xfffffffffffffff8
cmp r8, r11
ja 0x140168fd0
mov r15, rdi
mov rdx, r11
jmp 0x140168e20
lea r8, [r13*8]
mov r12, qword [rbp + 0x28]
mov rcx, r12
mov rdx, r15
call fcn.14021a580
lea r8, [r12 + r13*8]
test r13, r13
jle 0x1401690bc
cmp rsi, r13
mov rsi, r13
jle 0x1401690a3
mov rax, qword [rbp + 0x18]
lea rax, [rax + rbx*8]
mov rdx, r12
mov r12, qword [rbp + 0x58]
mov r13, qword [rbp + 0x10]
nop dword [rax + rax]
movzx r9d, byte [rdi]
xor r10d, r10d
xor ecx, ecx
cmp r9b, byte [rdx]
setae r10b
setb r9b
mov r11, rdx
cmovb r11, rdi
mov r11, qword [r11]
mov qword [r15], r11
add r15, 8
lea rdx, [rdx + r10*8]
cmp rdx, r8
jae 0x140168e20
mov cl, r9b
lea rdi, [rdi + rcx*8]
cmp rdi, rax
jb 0x140169060
jmp 0x140168e20
mov rdx, r12
jmp 0x1401690af
mov r15, rdi
mov rdx, qword [rbp + 0x28]
mov r12, qword [rbp + 0x58]
mov r13, qword [rbp + 0x10]
jmp 0x140168e20
mov rdx, r12
mov r12, qword [rbp + 0x58]
mov rsi, r13
mov r13, qword [rbp + 0x10]
jmp 0x140168e20
mov r8d, 2
cmp rax, 2
je 0x140168c8f
mov r9d, edx
movzx edx, byte [rcx + r8*8]
cmp dl, r9b
jb 0x140168c8f
inc r8
cmp rax, r8
jne 0x1401690e0
jmp 0x140168c8c
mov qword [rbp + 0x38], rbx
mov qword [rbp + 0x58], r12
mov rax, r8
shr rax, 1
lea rdx, [rcx + r8*8]
lea r9, [rax*8]
sub rdx, r9
cmp rax, 1
mov qword [rbp + 0x20], r14
jne 0x14016913c
xor r9d, r9d
jmp 0x1401691cd
mov r12d, 2
mov r14, qword [rbp + 0x38]
jmp 0x140168c6a
mov r10, rax
and r10, 0xfffffffffffffffe
mov r9, qword [rbp - 0x10]
lea r11, [r9 + r14*8]
mov r9, qword [rbp - 8]
mov rsi, qword [rbp + 0x38]
lea rsi, [r9 + rsi*8]
xor r9d, r9d
movabs r12, 0x1ffffffffffffffe
nop word cs:[rax + rax]
movzx ebx, byte [r11 + r9*8 - 0xc]
mov edi, dword [r11 + r9*8 - 8]
movzx r14d, byte [rsi - 4]
mov r15d, dword [rsi]
mov byte [r11 + r9*8 - 0xc], r14b
mov dword [r11 + r9*8 - 8], r15d
mov byte [rsi - 4], bl
mov dword [rsi], edi
mov rdi, r9
xor rdi, r12
add rdi, rax
movzx ebx, byte [r11 + r9*8 - 4]
mov r14d, dword [r11 + r9*8]
movzx r15d, byte [rdx + rdi*8]
mov r13d, dword [rdx + rdi*8 + 4]
mov byte [r11 + r9*8 - 4], r15b
mov dword [r11 + r9*8], r13d
mov byte [rdx + rdi*8], bl
mov dword [rdx + rdi*8 + 4], r14d
add r9, 2
add rsi, 0xfffffffffffffff0
cmp r10, r9
jne 0x140169170
test r8b, 2
je 0x140169200
mov r10, r9
not r10
add rax, r10
movzx r10d, byte [rcx + r9*8]
mov r11d, dword [rcx + r9*8 + 4]
movzx ebx, byte [rdx + rax*8]
mov esi, dword [rdx + rax*8 + 4]
mov byte [rcx + r9*8], bl
mov dword [rcx + r9*8 + 4], esi
mov byte [rdx + rax*8], r10b
mov dword [rdx + rax*8 + 4], r11d
mov r15, qword [rbp + 8]
mov r12, qword [rbp + 0x58]
mov rbx, qword [rbp + 0x38]
mov r14, qword [rbp + 0x20]
jmp 0x140168c93
mov r12d, 3
mov r14, qword [rbp + 0x38]
jmp 0x140168c6a
mov r14, qword [rbp + 0x38]
jmp 0x140168c6a
mov rdx, qword [rbp + 0x50]
shl rdx, 4
mov r8d, 8
mov rcx, rdi
call fcn.1400260a0
mov r8d, 4
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rbp]
add rsp, 0xe8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
jmp fcn.1400260a0
nop
add rsp, 0xe8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rax, [0x1402a98c8]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], 1
lea rax, [0x1402a98d8]
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp + 0x48], rdi
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x40], rax
lea rdx, [0x1402a9958]
lea rcx, [rbp - 0x60]
call fcn.140225ca0
jmp 0x1401693f1
lea rax, [0x1402a98c8]
mov qword [rbp - 0x60], rax
mov qword [rbp - 0x58], 1
lea rax, [0x1402a98d8]
mov qword [rbp - 0x50], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp + 0x48], rdi
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x40], rax
lea rdx, [0x1402a9940]
lea rcx, [rbp - 0x60]
call fcn.140225ca0
jmp 0x1401693f1
mov qword [rbp + 0x48], rdi
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x40], rax
lea r8, [0x1402a9970]
mov rdx, rbx
call fcn.140226200
jmp 0x1401693f1
mov qword [rbp + 0x48], rdi
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x40], rax
lea r8, [0x1402a9970]
mov rcx, rbx
mov rdx, r15
call fcn.1402261f0
jmp 0x1401693f1
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x40], rax
lea rcx, [0x1402a99d0]
lea r8, [0x1402a9a00]
mov edx, 0x2c
call fcn.140225d70
jmp 0x1401693f1
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x40], rax
lea rcx, [0x1402a99b8]
call fcn.140225c60
jmp 0x1401693f1
mov qword [rbp + 0x48], rdi
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x40], rax
lea r8, [0x1402a9928]
mov rcx, r14
mov rdx, rbx
call fcn.140226200
jmp 0x1401693f1
mov rax, qword [rbp + 0x30]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x40], rax
lea r8, [0x1402a9928]
mov rcx, rbx
mov rdx, r15
call fcn.1402261f0
jmp 0x1401693f1
lea rcx, [0x1402a9988]
call fcn.140225c60
lea rcx, [0x1402a99a0]
call fcn.140225c60
ud2