Function at 0x14011d330
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov r14, rdx
mov rdx, qword [rcx + 0x18]
cmp rdx, 0xffffffffffffffff
je 0x14011dcd4
mov r8, rcx
mov rsi, qword [rcx + 8]
lea r15, [rsi + 1]
mov rax, r15
shr rax, 3
mov rbx, r15
and rbx, 0xfffffffffffffff8
sub rbx, rax
cmp rsi, 8
mov rcx, rbx
cmovb rcx, rsi
mov rax, rcx
shr rax, 1
cmp rdx, rax
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x28], r8
jae 0x14011d3bd
mov rdi, qword [r8]
mov rcx, r15
shr rcx, 4
xor eax, eax
test r15b, 0xf
setne al
add rax, rcx
je 0x14011d751
cmp rax, 1
jne 0x14011d6db
xor edx, edx
jmp 0x14011d737
lea rax, [rdx + 1]
inc rcx
cmp rax, rcx
cmova rcx, rax
cmp rcx, 8
mov qword [rsp + 0x30], r15
jae 0x14011d3e9
xor eax, eax
cmp rcx, 4
setae al
lea r15, [rax*4 + 4]
jmp 0x14011d42d
mov rax, rcx
shr rax, 0x3d
jne 0x14011dcd4
shl rcx, 3
movabs rdx, 0x2492492492492493
mov rax, rcx
mul rdx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 2
dec rcx
bsr rcx, rcx
not ecx
mov r15, 0xffffffffffffffff
shr r15, cl
inc r15
mov ecx, 0x68
mov rax, r15
mul rcx
jo 0x14011dcd4
mov r12, rax
cmp rax, 0xfffffffffffffff0
ja 0x14011dcd4
add r12, 0xf
and r12, 0xfffffffffffffff0
lea r13, [r15 + 0x10]
mov rbp, r12
add rbp, r13
jb 0x14011dcd4
movabs rax, 0x7ffffffffffffff1
cmp rbp, rax
jae 0x14011dcd4
movzx eax, byte [0x14017dea0]
xor ecx, ecx
mov rdx, rbp
call fcn.1400f8170
test rax, rax
je 0x14011dcd9
mov rdi, rax
lea rbp, [r15 - 1]
mov rax, r15
shr rax, 3
mov rbx, r15
and rbx, 0xfffffffffffffff8
sub rbx, rax
cmp r15, 9
cmovb rbx, rbp
add rdi, r12
mov rcx, rdi
mov ecx, edi
mov dl, 0xff
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14011d668
mov qword [rsp + 0x50], rbx
mov rax, qword [rsp + 0x28]
mov r15, qword [rax]
movdqa xmm0, xmmword [r15]
movq mm0, qword [rdi]
pmovmskb r13d, xmm0
not r13d
lea rax, [r15 - 0x68]
mov qword [rsp + 0x58], rax
mov rax, qword [r14]
mov qword [rsp + 0x40], rax
mov rax, qword [r14 + 8]
mov qword [rsp + 0x38], rax
xor ebx, ebx
mov qword [rsp + 0x20], r15
mov r14, rcx
jmp 0x14011d5aa
lea ecx, [r13 - 1]
and ecx, r13d
dec r14
shr rax, 0x39
shr eax, 0x39
lea r8, [rdx - 0x10]
and r8, rbp
mov byte [rdi + rdx], al
mov byte [rdi + r8 + 0x10], al
not r12
invalid
imul rax, r12, 0x68
not rdx
imul rdx, rdx, 0x68
mov r9, qword [rsp + 0x20]
mov r8, qword [r9 + rax + 0x60]
mov qword [rdi + rdx + 0x60], r8
movups xmm0, xmmword [r9 + rax + 0x50]
movups xmmword [rdi + rdx + 0x50], xmm0
movups xmm0, xmmword [r9 + rax + 0x40]
movups xmmword [rdi + rdx + 0x40], xmm0
movdqu xmm0, xmmword [r9 + rax]
movdqu xmm1, xmmword [r9 + rax + 0x10]
movups xmm2, xmmword [r9 + rax + 0x20]
movups xmm3, xmmword [r9 + rax + 0x30]
movups xmmword [rdi + rdx + 0x30], xmm3
pop rsp
invalid
xor byte [rdi], cl
adc dword [rdi + rdx + 0x20], edx
movdqu xmmword [rdi + rdx + 0x10], xmm1
movdqu xmmword [rdi + rdx], xmm0
mov r13d, ecx
mov ebp, ecx
test r14, r14
je 0x14011d65c
test r13w, r13w
jne 0x14011d5cf
movdqa xmm0, xmmword [r15 + 0x10]
add r15, 0x10
pmovmskb r13d, xmm0
add rbx, 0x10
cmp r13d, 0xffff
je 0x14011d5b0
not r13d
tzcnt r12d, r13d
add r12, rbx
mov rax, r12
neg rax
imul rax, rax, 0x68
mov rcx, qword [rsp + 0x58]
mov r8, qword [rcx + rax + 8]
mov r9, qword [rcx + rax + 0x10]
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x38]
call fcn.1400a2510
mov rcx, rax
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x14011d637
mov r8d, 0x10
nop dword [rax + rax]
add rcx, r8
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x14011d620
tzcnt edx, edx
add rdx, rcx
and rdx, rbp
cmp byte [rdi + rdx], 0
js 0x14011d520
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x14011d520
mov rax, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x50]
jmp 0x14011d675
mov rax, qword [rsp + 0x28]
mov rcx, qword [rax]
mov qword [rsp + 0x20], rcx
sub rbx, qword [rsp + 0x48]
mov qword [rax], rdi
mov qword [rax + 8], rbp
mov qword [rax + 0x10], rbx
test rsi, rsi
je 0x14011dcc0
mov ecx, 0x68
mov rax, qword [rsp + 0x30]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add rsi, rax
cmp rsi, 0xffffffffffffffef
je 0x14011dcc0
mov r8, qword [rsp + 0x20]
sub r8, rax
mov rcx, qword [0x14017de28]
xor edx, edx
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.KERNEL32.dll_HeapFree]
movabs rcx, 0x1ffffffffffffffe
and rcx, rax
xor r8d, r8d
movdqa xmm0, xmmword [0x140121680]
nop word cs:[rax + rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rdi + r8]
por xmm1, xmm0
movdqa xmmword [rdi + r8], xmm1
lea rdx, [r8 + 0x20]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rdi + r8 + 0x10]
por xmm1, xmm0
movdqa xmmword [rdi + r8 + 0x10], xmm1
mov r8, rdx
add rcx, 0xfffffffffffffffe
jne 0x14011d700
test al, 1
je 0x14011d751
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rdi + rdx]
por xmm0, xmmword [0x140121680]
movdqa xmmword [rdi + rdx], xmm0
cmp r15, 0x10
jae 0x14011d772
lea rcx, [rdi + 0x10]
mov rdx, rdi
mov r8, r15
call sub.VCRUNTIME140.dll_memmove
test r15, r15
jne 0x14011d77c
xor ecx, ecx
jmp 0x14011dcb2
movdqu xmm0, xmmword [rdi]
movdqu xmmword [rdi + r15], xmm0
mov qword [rsp + 0x68], rbx
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
movabs rbp, 0x736f6d6570736575
xor rbp, rax
movabs rdx, 0x646f72616e646f6d
xor rdx, rcx
mov qword [rsp + 0x40], rdx
movabs rdx, 0x6c7967656e657261
xor rdx, rax
mov qword [rsp + 0x38], rdx
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x30], rax
lea rax, [rdi - 0x68]
mov qword [rsp + 0x70], rax
xor ecx, ecx
mov r12, rdi
xor r11d, r11d
mov qword [rsp + 0x78], rsi
jmp 0x14011d819
shr rax, 0x39
lea rcx, [r11 - 0x10]
and rcx, rsi
mov byte [rdi + r11], al
mov byte [rdi + rcx + 0x10], al
xor ecx, ecx
lea rax, [r11 + 1]
add r12, 0xffffffffffffff98
cmp r11, rsi
mov r11, rax
je 0x14011dca5
cmp cl, byte [rdi + r11]
jno 0x14011d805
imul rcx, r11, 0xffffffffffffff98
mov rax, qword [rsp + 0x70]
add rax, rcx
mov qword [rsp + 0x80], rax
add rcx, rdi
mov qword [rsp + 0x50], rcx
mov rax, r11
not rax
imul rax, rax, 0x68
add rax, rdi
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x20], r11
mov rax, r11
neg rax
imul rax, rax, 0x68
add rax, rdi
mov qword [rsp + 0x58], rax
nop word cs:[rax + rax]
mov rax, qword [rsp + 0x58]
mov r11, qword [rax - 0x60]
mov r13, qword [rax - 0x58]
mov rax, r13
and rax, 0xfffffffffffffff8
je 0x14011d910
mov r9, qword [rsp + 0x38]
mov r8, qword [rsp + 0x40]
mov r10, qword [rsp + 0x30]
xor ebx, ebx
mov r14, rbp
nop
mov rcx, qword [r11 + rbx]
xor r10, rcx
add r14, r8
rol r8, 0xd
add r9, r10
xor r8, r14
rol r10, 0x10
xor r10, r9
rol r14, 0x20
add r9, r8
add r14, r10
rol r8, 0x11
xor r8, r9
rol r10, 0x15
rol r9, 0x20
xor r10, r14
xor r14, rcx
add rbx, 8
cmp rbx, rax
jb 0x14011d8a0
mov edx, r13d
and edx, 7
cmp edx, 4
jb 0x14011d92f
mov r15d, dword [r11 + rbx]
mov eax, 4
mov ecx, eax
or ecx, 1
cmp ecx, edx
jb 0x14011d93d
jmp 0x14011d961
mov r10, qword [rsp + 0x30]
mov r8, qword [rsp + 0x40]
mov r9, qword [rsp + 0x38]
mov r14, rbp
xor ebx, ebx
mov edx, r13d
and edx, 7
cmp edx, 4
jae 0x14011d8ee
xor r15d, r15d
xor eax, eax
mov ecx, eax
or ecx, 1
cmp ecx, edx
jae 0x14011d961
lea rcx, [r11 + rax]
mov rsi, rbp
movzx ebp, word [rbx + rcx]
lea ecx, [rax*8]
shl rbp, cl
or r15, rbp
mov rbp, rsi
mov rsi, qword [rsp + 0x78]
or rax, 2
cmp eax, edx
jae 0x14011d980
add rbx, rax
movzx r11d, byte [r11 + rbx]
shl eax, 3
mov ecx, eax
shl r11, cl
or r15, r11
mov r11, qword [rsp + 0x20]
jmp 0x14011d98a
test rdx, rdx
mov r11, qword [rsp + 0x20]
je 0x14011d9dc
lea ecx, [rdx*8]
mov eax, 0xff
shl rax, cl
or rax, r15
cmp rdx, 7
jne 0x14011d9f0
xor r10, rax
add r14, r8
add r9, r10
rol r8, 0xd
rol r10, 0x10
xor r8, r14
xor r10, r9
rol r14, 0x20
add r9, r8
add r14, r10
rol r8, 0x11
xor r8, r9
rol r10, 0x15
xor r10, r14
rol r9, 0x20
xor r14, rax
xor eax, eax
jmp 0x14011d9f0
mov eax, 0xff
nop word cs:[rax + rax]
shl r13, 0x38
movabs rcx, 0x100000000000000
add r13, rcx
or r13, rax
xor r10, r13
add r14, r8
rol r8, 0xd
add r9, r10
xor r8, r14
rol r10, 0x10
xor r10, r9
rol r14, 0x20
add r9, r8
add r14, r10
rol r8, 0x11
xor r8, r9
rol r10, 0x15
rol r9, 0x20
xor r10, r14
xor r14, r13
xor r9, 0xff
add r14, r8
add r9, r10
rol r8, 0xd
xor r8, r14
rol r10, 0x10
rol r14, 0x20
xor r10, r9
add r9, r8
rol r8, 0x11
add r14, r10
xor r8, r9
rol r10, 0x15
xor r10, r14
rol r9, 0x20
add r14, r8
add r9, r10
rol r8, 0xd
xor r8, r14
rol r10, 0x10
rol r14, 0x20
xor r10, r9
add r9, r8
rol r8, 0x11
add r14, r10
xor r8, r9
rol r10, 0x15
xor r10, r14
rol r9, 0x20
add r14, r8
add r9, r10
rol r8, 0xd
xor r8, r14
rol r10, 0x10
xor r10, r9
add r9, r8
rol r8, 0x11
rol r10, 0x15
mov rax, r9
rol rax, 0x20
xor rax, r8
xor rax, r10
xor rax, r9
mov rcx, rsi
and rcx, rax
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
mov r8, rcx
test edx, edx
jne 0x14011db08
mov r9d, 0x10
mov r8, rcx
nop
add r8, r9
and r8, rsi
movdqu xmm0, xmmword [rdi + r8]
pmovmskb edx, xmm0
add r9, 0x10
test edx, edx
je 0x14011daf0
tzcnt edx, edx
add rdx, r8
and rdx, rsi
cmp byte [rdi + rdx], 0
js 0x14011db24
movdqa xmm0, xmmword [rdi]
pmovmskb edx, xmm0
tzcnt edx, edx
mov r8, r11
sub r8, rcx
mov r9, rdx
sub r9, rcx
xor r9, r8
and r9, rsi
cmp r9, 0x10
jb 0x14011d7f0
mov rcx, rdx
not rcx
imul rcx, rcx, 0x68
add rcx, rdi
movzx r8d, byte [rdi + rdx]
shr rax, 0x39
lea r9, [rdx - 0x10]
and r9, rsi
mov byte [rdi + rdx], al
mov byte [rdi + r9 + 0x10], al
cmp r8b, 0xff
je 0x14011dc50
imul rax, rdx, 0xffffffffffffff98
add rax, rdi
cmp qword [rsp + 0x80], rax
setb dl
cmp rcx, qword [rsp + 0x50]
setb r8b
test dl, r8b
je 0x14011dba0
xor ecx, ecx
jmp 0x14011dc0a
mov rdx, qword [rsp + 0x60]
movups xmm0, xmmword [rdx]
movups xmm1, xmmword [rcx]
movups xmmword [rdx], xmm1
movups xmmword [rcx], xmm0
movups xmm0, xmmword [rdx + 0x10]
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rdx + 0x10], xmm1
movups xmmword [rcx + 0x10], xmm0
movups xmm0, xmmword [rdx + 0x20]
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x20], xmm1
movups xmmword [rcx + 0x20], xmm0
movups xmm0, xmmword [rdx + 0x30]
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x30], xmm1
movups xmmword [rcx + 0x30], xmm0
movups xmm0, xmmword [rdx + 0x40]
movups xmm1, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x40], xmm1
movups xmmword [rcx + 0x40], xmm0
movdqu xmm0, xmmword [rdx + 0x50]
movdqu xmm1, xmmword [rcx + 0x50]
movdqu xmmword [rdx + 0x50], xmm1
movdqu xmmword [rcx + 0x50], xmm0
mov ecx, 0x60
add rcx, 0xffffffffffffff98
nop
movzx edx, byte [r12 + rcx]
movzx r8d, byte [rax + rcx]
mov byte [r12 + rcx], r8b
mov byte [rax + rcx], dl
movzx edx, byte [r12 + rcx + 1]
movzx r8d, byte [rax + rcx + 1]
mov byte [r12 + rcx + 1], r8b
mov byte [rax + rcx + 1], dl
add rcx, 2
jne 0x14011dc10
jmp 0x14011d870
lea rax, [r11 - 0x10]
and rax, rsi
mov byte [rdi + r11], 0xff
mov byte [rdi + rax + 0x10], 0xff
mov rdx, qword [rsp + 0x60]
invalid
mov rax, qword [rdx + 0x60]
mov qword [rcx + 0x60], rax
movups xmm0, xmmword [rdx + 0x50]
push rax
movups xmmword [rcx + 0x50], xmm0
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rcx + 0x40], xmm0
movdqu xmm0, xmmword [rdx]
outsd dx, dword [rsi]
add dh, bl
movq mm1, qword [rdx + 0x10]
movups xmm2, xmmword [rdx + 0x20]
movups xmm3, xmmword [rdx + 0x30]
movups xmmword [rcx + 0x30], xmm3
movups xmmword [rcx + 0x20], xmm2
movdqu xmmword [rcx + 0x10], xmm1
jg 0x14011dce4
adc bl, dh
movq qword [rcx], mm0
jmp 0x14011d803
cmp rsi, 8
mov rcx, qword [rsp + 0x68]
cmovb rcx, rsi
sub rcx, qword [rsp + 0x48]
mov rax, qword [rsp + 0x28]
mov qword [rax + 0x10], rcx
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop rsi
pop r15
ret
call fcn.14002c8b0
mov rcx, rbp
call fcn.14002c8f0
int3