Function at 0x1402431e0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov rdi, r8
mov rbx, rdx
mov qword [rsp + 0x20], rcx
mov r15d, 0xe
xor r13d, r13d
lea r14, str.ATermatermclclosefoleOLetterLowernuNumericnumericoletterSContinuescontinueseSepsepspSpstSTermupUpper
mov r12d, 0xe
jmp 0x14024322c
mov r12, r15
sub r15, r13
jbe 0x140243468
shr r15, 1
add r15, r13
mov rsi, r15
shl rsi, 5
mov rcx, qword [rsi + r14]
mov r8, qword [rsi + r14 + 8]
mov rbp, r8
sub rbp, rdi
cmovae r8, rdi
mov rdx, rbx
call sub.msvcrt.dll_memcmp
cdqe
test eax, eax
cmovne rbp, rax
xor eax, eax
test rbp, rbp
setne al
mov ecx, 0xff
cmovs eax, ecx
cmp al, 1
je 0x140243220
movzx eax, al
cmp eax, 0xff
jne 0x14024328d
inc r15
mov r13, r15
mov r15, r12
sub r15, r13
ja 0x14024322c
jmp 0x140243468
mov rbx, qword [rsi + r14 + 0x18]
test rbx, rbx
je 0x1402432ef
mov r14, qword [rsi + r14 + 0x10]
lea rdi, [rbx*8]
movzx eax, byte [0x1403f6a90]
mov rcx, qword [0x1403f6548]
test rcx, rcx
jne 0x1402432cf
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x140243487
mov rcx, rax
mov qword [0x1403f6548], rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x140243487
cmp rbx, 0x10
jae 0x1402432f9
xor ecx, ecx
jmp 0x14024339f
mov eax, 4
jmp 0x14024342b
lea rdx, [rax + rbx*8]
add rdx, 0xfffffffffffffff8
xor ecx, ecx
cmp rdx, rax
jb 0x14024339f
lea rdx, [rax + rbx*8]
add rdx, 0xfffffffffffffffc
mov r8, rax
add r8, 4
cmp rdx, r8
jb 0x14024339f
lea rdx, [rbx - 1]
shr rdx, 0x3d
jne 0x14024339f
mov rcx, rbx
and rcx, 0xfffffffffffffffe
xor edx, edx
movdqa xmm0, xmmword [0x14030ce60]
nop
movdqu xmm1, xmmword [r14 + rdx*8]
pshufd xmm2, xmm1, 0xe8
pshufd xmm1, xmm1, 0xed
movdqa xmm3, xmm2
pxor xmm3, xmm0
movdqa xmm4, xmm1
pxor xmm4, xmm0
pcmpgtd xmm4, xmm3
movdqa xmm3, xmm4
pandn xmm3, xmm1
movdqa xmm5, xmm4
pandn xmm5, xmm2
pand xmm2, xmm4
por xmm2, xmm3
pand xmm4, xmm1
por xmm4, xmm5
punpckldq xmm2, xmm4
movdqu xmmword [rax + rdx*8], xmm2
add rdx, 2
cmp rcx, rdx
jne 0x140243340
cmp rbx, rcx
je 0x14024342b
mov rdx, rcx
or rdx, 1
test bl, 1
je 0x1402433ce
mov r8d, dword [r14 + rcx*8]
mov r9d, dword [r14 + rcx*8 + 4]
cmp r8d, r9d
mov r10d, r9d
cmovb r10d, r8d
cmova r9d, r8d
mov dword [rax + rcx*8], r10d
mov dword [rax + rcx*8 + 4], r9d
mov rcx, rdx
cmp rbx, rdx
je 0x14024342b
nop word cs:[rax + rax]
mov edx, dword [r14 + rcx*8]
mov r8d, dword [r14 + rcx*8 + 4]
cmp edx, r8d
mov r9d, r8d
cmovb r9d, edx
cmova r8d, edx
mov dword [rax + rcx*8], r9d
mov dword [rax + rcx*8 + 4], r8d
mov edx, dword [r14 + rcx*8 + 8]
mov r8d, dword [r14 + rcx*8 + 0xc]
cmp edx, r8d
mov r9d, r8d
cmovb r9d, edx
cmova r8d, edx
mov dword [rax + rcx*8 + 8], r9d
mov dword [rax + rcx*8 + 0xc], r8d
add rcx, 2
cmp rbx, rcx
jne 0x1402433e0
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x28]
call fcn.14023e9e0
mov rax, qword [rsp + 0x28]
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x40], xmm0
test rax, rax
je 0x140243468
movaps xmm0, xmmword [rsp + 0x40]
mov rcx, qword [rsp + 0x20]
movups xmmword [rcx + 8], xmm0
jmp 0x140243473
mov rcx, qword [rsp + 0x20]
mov byte [rcx + 8], 1
xor eax, eax
mov qword [rcx], rax
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 4
mov rdx, rdi
call fcn.1400eb190
ud2