Function at 0x140030c70
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov r13, rcx
mov esi, 0x104
mov ecx, esi
mov r12, r8
mov r15, rdx
call fcn.140006bd0
mov ecx, esi
mov rbx, rax
call fcn.140006bd0
mov rcx, qword [0x14004bb90]
mov r8d, esi
mov rdx, rbx
mov rdi, rax
call qword [0x14004bc38]
mov rdx, rbx
mov rcx, rdi
call fcn.14002f840
mov edx, 0x5c
mov rcx, rdi
call fcn.14002ecb0
movdqa xmm0, xmmword [0x140043020]
lea rcx, [rsp + 0x20]
movdqu xmmword [rsp + 0x20], xmm0
mov rbx, rax
mov dword [rsp + 0x30], 0x773d3314
call fcn.1400072e4
xor edi, edi
test rax, rax
je 0x140030d29
lea rcx, [rbp + 0xb8]
mov word [rbp + 0xb8], 0x524c
call fcn.140001c40
movsx rcx, byte [rax]
mov word [rbx + rcx*2 + 2], di
lea rcx, [rbp]
call fcn.14002d83c
xorps xmm0, xmm0
xorps xmm1, xmm1
or rsi, 0xffffffffffffffff
movups xmmword [rsp + 0x60], xmm0
mov r8, rsi
movdqu xmmword [rsp + 0x70], xmm1
inc r8
cmp word [rbx + r8*2 + 2], di
jne 0x140030d4a
lea rdx, [rbx + 2]
lea rcx, [rsp + 0x60]
call fcn.140006bf8
mov r8, qword [rsp + 0x60]
lea rcx, [rsp + 0x60]
mov r9, qword [rsp + 0x78]
lea rdi, [rsp + 0x60]
mov rax, qword [rsp + 0x70]
lea r14, [rsp + 0x60]
cmp r9, 8
cmovae rcx, r8
cmovae rdi, r8
cmovae r14, r8
lea rbx, [rcx + rax*2]
cmp rdi, rbx
je 0x140030dbd
sub r14, rdi
movzx ecx, word [rdi]
call fcn.140030a20
mov word [rdi + r14], ax
add rdi, 2
cmp rdi, rbx
jne 0x140030d9d
mov r9, qword [rsp + 0x78]
mov r8, qword [rsp + 0x60]
cmp r9, 8
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x40]
cmovae rdx, r8
call fcn.140030b00
xorps xmm0, xmm0
lea rdx, [0x140042850]
xorps xmm1, xmm1
xor edi, edi
movups xmmword [rbp - 0x80], xmm0
movdqu xmmword [rbp - 0x70], xmm1
inc rsi
cmp byte [rdx + rsi], dil
jne 0x140030deb
mov r8, rsi
lea rcx, [rbp - 0x80]
call fcn.1400017b0
cmp qword [rbp - 0x68], 0x10
lea rcx, [rbp - 0x80]
mov r8, qword [rbp - 0x70]
lea rdx, [rbp - 0x80]
cmovae rcx, qword [rbp - 0x80]
xorps xmm0, xmm0
add r8, rcx
xorps xmm1, xmm1
cmp qword [rbp - 0x68], 0x10
movups xmmword [rsp + 0x20], xmm0
cmovae rdx, qword [rbp - 0x80]
movdqu xmmword [rsp + 0x30], xmm1
cmp rdx, r8
jne 0x140030e4a
mov ebx, 7
mov word [rsp + 0x20], di
mov qword [rsp + 0x38], rbx
jmp 0x140030e5f
mov r9, r8
lea rcx, [rsp + 0x20]
sub r9, rdx
call fcn.140003e08
mov rbx, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x20]
lea rdx, [rsp + 0x20]
cmp rbx, 8
lea rcx, [rbp - 0x60]
cmovae rdx, rdi
call fcn.140030b00
cmp rbx, 8
jb 0x140030eb5
lea rdx, [rbx*2 + 2]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140030ead
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311c3
mov rcx, rdi
call fcn.140009cb8
mov rdx, qword [rbp - 0x68]
cmp rdx, 0x10
jb 0x140030ef0
mov rcx, qword [rbp - 0x80]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x140030eeb
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311c3
call fcn.140009cb8
cmp qword [rbp - 0x28], 0x10
lea r14, [rbp - 0x40]
mov rdi, qword [rbp - 0x30]
movabs rbx, 0x7fffffffffffffff
cmovae r14, qword [rbp - 0x40]
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
cmp rdi, rbx
ja 0x1400311c9
mov esi, 0xf
cmp rdi, 0x10
jae 0x140030f3e
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], rsi
movups xmm0, xmmword [r14]
movdqu xmmword [rsp + 0x40], xmm0
jmp 0x140030fa2
mov rax, rdi
or rax, rsi
cmp rax, rbx
jbe 0x140030f55
movabs rcx, 0x8000000000000000
jmp 0x140030f71
mov ecx, 0x16
mov rbx, rax
cmp rax, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x140030f78
call fcn.140001b28
jmp 0x140030f84
xor eax, eax
test rcx, rcx
je 0x140030f84
call fcn.140009c74
lea r8, [rdi + 1]
mov qword [rsp + 0x40], rax
mov rdx, r14
mov qword [rsp + 0x50], rdi
mov rcx, rax
mov qword [rsp + 0x58], rbx
call fcn.14000bc70
cmp qword [rbp - 0x48], 0x10
lea rdx, [rbp - 0x60]
mov r8, qword [rbp - 0x50]
lea rcx, [rsp + 0x40]
cmovae rdx, qword [rbp - 0x60]
call fcn.140001640
cmp qword [rsp + 0x58], 0x10
lea r8, [rsp + 0x40]
mov r9, qword [rsp + 0x50]
lea rdx, [rsp + 0x20]
cmovae r8, qword [rsp + 0x40]
lea rcx, [rbp]
call fcn.14002b7b4
lea rdx, [rbp - 0x20]
lea rcx, [rbp]
call fcn.14002b810
xor r14d, r14d
mov ebx, r14d
mov al, byte [rbp + rbx - 0x20]
lea rdx, [rbp + 0xb8]
mov rcx, r12
mov byte [rbp + 0xb8], al
call fcn.1400016dc
inc rbx
cmp rbx, 0x20
jb 0x140030ff5
mov rax, qword [0x14004bbb8]
xor ecx, ecx
mov rdi, qword [r12]
mov r9d, 4
mov r8d, 0x3000
mov rdx, r15
test rax, rax
je 0x14003103c
call rax
jmp 0x140031042
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
mov r9, r14
test r15, r15
je 0x14003108b
sub r13, rax
mov rax, r9
lea r8, [r9 + rbx]
and eax, 0x1f
movzx ecx, byte [rax + rdi]
movabs rax, 0x8080808080808081
add rcx, r9
inc r9
mul rcx
shr rdx, 7
imul rax, rdx, 0xff
sub rcx, rax
xor cl, byte [r8 + r13]
mov byte [r8], cl
cmp r9, r15
jb 0x140031050
mov rdx, qword [rsp + 0x38]
mov edi, 0x1000
cmp rdx, 0x10
jb 0x1400310c9
mov rcx, qword [rsp + 0x20]
inc rdx
mov rax, rcx
cmp rdx, rdi
jb 0x1400310c4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311bd
call fcn.140009cb8
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140031102
mov rcx, qword [rsp + 0x40]
inc rdx
mov rax, rcx
cmp rdx, rdi
jb 0x1400310fd
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311bd
call fcn.140009cb8
mov rdx, qword [rbp - 0x48]
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rsi
mov byte [rsp + 0x40], r14b
cmp rdx, 0x10
jb 0x140031144
mov rcx, qword [rbp - 0x60]
inc rdx
mov rax, rcx
cmp rdx, rdi
jb 0x14003113f
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311bd
call fcn.140009cb8
mov rdx, qword [rbp - 0x28]
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], rsi
mov byte [rbp - 0x60], r14b
cmp rdx, 0x10
jb 0x140031183
mov rcx, qword [rbp - 0x40]
inc rdx
mov rax, rcx
cmp rdx, rdi
jb 0x14003117e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400311bd
call fcn.140009cb8
lea rcx, [rsp + 0x60]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], rsi
mov byte [rbp - 0x40], r14b
call fcn.140003904
lea r11, [rsp + 0x170]
mov rax, rbx
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140010534
int3
call fcn.140010534
int3
call fcn.1400013e8
int3