Function at 0x1401ad020
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov rdi, qword [rcx + 0x18]
mov rax, rdi
inc rax
je 0x1401adad9
mov r12, rdx
mov rsi, rcx
mov r11, qword [rcx + 8]
lea r15, [r11 + 1]
mov rcx, r15
shr rcx, 3
mov rbx, r15
and rbx, 0xfffffffffffffff8
sub rbx, rcx
cmp r11, 8
cmovb rbx, r11
mov rcx, rbx
shr rcx, 1
cmp rax, rcx
mov qword [rsp + 0x20], r11
jbe 0x1401ad0ab
inc rbx
cmp rax, rbx
cmova rbx, rax
cmp rbx, 8
mov qword [rsp + 0x30], r12
jae 0x1401ad0d8
mov rbp, rdi
mov rdi, rsi
xor eax, eax
cmp rbx, 4
setae al
lea r14, [rax*4 + 4]
jmp 0x1401ad138
mov r14, qword [rsi]
mov rcx, r15
shr rcx, 4
xor eax, eax
test r15b, 0xf
setne al
add rax, rcx
je 0x1401ad403
cmp rax, 1
jne 0x1401ad394
xor edx, edx
jmp 0x1401ad3e7
movabs rax, 0x1ffffffffffffffe
add rax, 2
cmp rbx, rax
jae 0x1401adad9
mov rbp, rdi
mov rdi, rsi
shl rbx, 3
mov r14d, 1
cmp rbx, 0xe
jb 0x1401ad138
movabs rcx, 0x2492492492492493
mov rax, rbx
mul rcx
sub rbx, rdx
shr rbx, 1
add rbx, rdx
shr rbx, 2
dec rbx
bsr rcx, rbx
not ecx
mov r14, 0xffffffffffffffff
shr r14, cl
inc r14
mov ecx, 0x68
mov rax, r14
mul rcx
jo 0x1401adad9
mov rsi, rax
add rsi, 0xf
and rsi, 0xfffffffffffffff0
lea r12, [r14 + 0x10]
mov r13, rsi
add r13, r12
jb 0x1401adad9
movabs rax, 0x7ffffffffffffff0
cmp r13, rax
ja 0x1401adad9
test r13, r13
je 0x1401ad1bf
movzx eax, byte [0x1403f6a90]
mov rcx, qword [0x1403f6548]
test rcx, rcx
jne 0x1401ad1a3
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1401ad1b5
mov rcx, rax
mov qword [0x1403f6548], rax
xor edx, edx
mov r8, r13
call sub.kernel32.dll_HeapAlloc
mov rbx, rax
test rax, rax
jne 0x1401ad1c4
mov rcx, r13
call fcn.140150410
ud2
mov ebx, 0x10
mov qword [rsp + 0x38], r15
lea r15, [r14 - 1]
mov rax, r14
shr rax, 3
mov r13, r14
and r13, 0xfffffffffffffff8
sub r13, rax
cmp r14, 9
cmovb r13, r15
add rbx, rsi
mov rcx, rbx
mov dl, 0xff
mov r8, r12
call sub.msvcrt.dll_memset
sub r13, rbp
mov r8, qword [rsp + 0x20]
cmp r8, 0xffffffffffffffff
je 0x1401ad34b
mov qword [rsp + 0x28], r13
mov r14, qword [rdi]
lea rsi, [r14 - 0x68]
mov rax, qword [rsp + 0x30]
mov r13, qword [rax]
mov r12, qword [rax + 8]
xor ebp, ebp
jmp 0x1401ad2b1
shr rax, 0x39
lea rcx, [rdx - 0x10]
and rcx, r15
mov byte [rbx + rdx], al
mov byte [rcx + rbx + 0x10], al
mov rax, rbp
not rax
imul rax, rax, 0x68
not rdx
imul rcx, rdx, 0x68
mov rdx, qword [r14 + rax + 0x60]
mov qword [rbx + rcx + 0x60], rdx
movups xmm0, xmmword [r14 + rax + 0x50]
movups xmmword [rbx + rcx + 0x50], xmm0
movups xmm0, xmmword [r14 + rax + 0x40]
movups xmmword [rbx + rcx + 0x40], xmm0
movdqu xmm0, xmmword [r14 + rax]
movdqu xmm1, xmmword [r14 + rax + 0x10]
movups xmm2, xmmword [r14 + rax + 0x20]
movups xmm3, xmmword [r14 + rax + 0x30]
movups xmmword [rbx + rcx + 0x30], xmm3
movups xmmword [rbx + rcx + 0x20], xmm2
movdqu xmmword [rbx + rcx + 0x10], xmm1
movdqu xmmword [rbx + rcx], xmm0
lea rax, [rbp + 1]
cmp rbp, r8
mov rbp, rax
je 0x1401ad331
cmp byte [r14 + rbp], 0
js 0x1401ad2a1
mov rax, rbp
neg rax
imul rax, rax, 0x68
mov r8, qword [rsi + rax]
mov r9, qword [rsi + rax + 0x10]
mov rcx, r13
mov rdx, r12
call fcn.140021c80
mov rcx, rax
and rcx, r15
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x1401ad307
mov r8d, 0x10
nop
add rcx, r8
and rcx, r15
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x1401ad2f0
mov r8, qword [rsp + 0x20]
tzcnt edx, edx
add rdx, rcx
and rdx, r15
cmp byte [rbx + rdx], 0
js 0x1401ad230
movdqa xmm0, xmmword [rbx]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x1401ad230
mov qword [rdi], rbx
mov qword [rdi + 8], r15
mov rax, qword [rsp + 0x28]
mov qword [rdi + 0x10], rax
test r8, r8
jne 0x1401ad359
jmp 0x1401adab7
mov r14, qword [rdi]
mov qword [rdi], rbx
mov qword [rdi + 8], r15
mov qword [rdi + 0x10], r13
mov ecx, 0x68
mov rax, qword [rsp + 0x38]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add r8, rax
cmp r8, 0xffffffffffffffef
je 0x1401adab7
sub r14, rax
mov rcx, qword [0x1403f6548]
xor edx, edx
mov r8, r14
call fcn.140302ad4
jmp 0x1401adab7
movabs rcx, 0x1ffffffffffffffe
and rcx, rax
xor r8d, r8d
movdqa xmm0, xmmword [0x14030af30]
nop dword [rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [r14 + r8]
por xmm1, xmm0
movdqa xmmword [r14 + r8], xmm1
lea rdx, [r8 + 0x20]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [r14 + r8 + 0x10]
por xmm1, xmm0
movdqa xmmword [r14 + r8 + 0x10], xmm1
mov r8, rdx
add rcx, 0xfffffffffffffffe
jne 0x1401ad3b0
test al, 1
je 0x1401ad403
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [r14 + rdx]
por xmm0, xmmword [0x14030af30]
movdqa xmmword [r14 + rdx], xmm0
cmp r15, 0x10
jae 0x1401ad42a
lea rcx, [r14 + 0x10]
mov rdx, r14
mov r8, r15
call sub.msvcrt.dll_memmove
mov r11, qword [rsp + 0x20]
cmp r11, 0xffffffffffffffff
jne 0x1401ad435
xor eax, eax
jmp 0x1401adab0
movdqu xmm0, xmmword [r14]
movdqu xmmword [r14 + r15], xmm0
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rdi
mov qword [rsp + 0x68], rsi
lea rax, [r14 - 0x68]
mov qword [rsp + 0x70], rax
mov rax, qword [r12]
mov rcx, qword [r12 + 8]
movabs rdx, 0x736f6d6570736575
xor rdx, rax
mov qword [rsp + 0x28], rdx
movabs rdx, 0x646f72616e646f6d
xor rdx, rcx
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6c7967656e657261
xor rdx, rax
mov qword [rsp + 0x48], rdx
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x40], rax
mov r13, r14
xor esi, esi
jmp 0x1401ad4d8
shr rcx, 0x39
lea rax, [rsi - 0x10]
and rax, r11
mov byte [r14 + rsi], cl
mov byte [rax + r14 + 0x10], cl
lea rax, [rsi + 1]
add r13, 0xffffffffffffff98
cmp rsi, r11
mov rsi, rax
je 0x1401adaa1
cmp byte [r14 + rsi], 0x80
jne 0x1401ad4c4
imul rax, rsi, 0xffffffffffffff98
lea rcx, [r14 + rax]
add rcx, 0xffffffffffffff98
mov qword [rsp + 0x80], rcx
add rax, r14
mov qword [rsp + 0x78], rax
mov rax, rsi
not rax
imul rdx, rax, 0x68
add rdx, r14
mov qword [rsp + 0x38], rsi
mov rax, rsi
neg rax
imul rax, rax, 0x68
add rax, qword [rsp + 0x70]
mov qword [rsp + 0x30], rax
jmp 0x1401ad5fc
mov rcx, qword [rdx]
mov r8, qword [rax]
mov qword [rdx], r8
mov qword [rax], rcx
mov rcx, qword [rdx + 8]
mov r8, qword [rax + 8]
mov qword [rdx + 8], r8
mov qword [rax + 8], rcx
mov rcx, qword [rdx + 0x10]
mov r8, qword [rax + 0x10]
mov qword [rdx + 0x10], r8
mov qword [rax + 0x10], rcx
mov rcx, qword [rdx + 0x18]
mov r8, qword [rax + 0x18]
mov qword [rdx + 0x18], r8
mov qword [rax + 0x18], rcx
mov rcx, qword [rdx + 0x20]
mov r8, qword [rax + 0x20]
mov qword [rdx + 0x20], r8
mov qword [rax + 0x20], rcx
mov rcx, qword [rdx + 0x28]
mov r8, qword [rax + 0x28]
mov qword [rdx + 0x28], r8
mov qword [rax + 0x28], rcx
mov rcx, qword [rdx + 0x30]
mov r8, qword [rax + 0x30]
mov qword [rdx + 0x30], r8
mov qword [rax + 0x30], rcx
mov rcx, qword [rdx + 0x38]
mov r8, qword [rax + 0x38]
mov qword [rdx + 0x38], r8
mov qword [rax + 0x38], rcx
mov rcx, qword [rdx + 0x40]
mov r8, qword [rax + 0x40]
mov qword [rdx + 0x40], r8
mov qword [rax + 0x40], rcx
mov rcx, qword [rdx + 0x48]
mov r8, qword [rax + 0x48]
mov qword [rdx + 0x48], r8
mov qword [rax + 0x48], rcx
mov rcx, qword [rdx + 0x50]
mov r8, qword [rax + 0x50]
mov qword [rdx + 0x50], r8
mov qword [rax + 0x50], rcx
mov rcx, qword [rdx + 0x58]
mov r8, qword [rax + 0x58]
mov qword [rdx + 0x58], r8
mov qword [rax + 0x58], rcx
mov rcx, qword [rdx + 0x60]
mov r8, qword [rax + 0x60]
mov qword [rdx + 0x60], r8
mov qword [rax + 0x60], rcx
mov rax, qword [rsp + 0x30]
mov rbx, qword [rax]
mov rbp, qword [rax + 0x10]
mov rax, rbp
and rax, 0xfffffffffffffff8
je 0x1401ad6a0
mov r10, qword [rsp + 0x48]
mov r9, qword [rsp + 0x50]
mov r11, qword [rsp + 0x40]
xor r15d, r15d
mov rsi, qword [rsp + 0x28]
nop dword [rax]
add rsi, r9
rol r9, 0xd
mov rcx, qword [rbx + r15]
xor r9, rsi
rol rsi, 0x20
xor r11, rcx
add r10, r11
rol r11, 0x10
xor r11, r10
add rsi, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, rsi
xor rsi, rcx
add r15, 8
cmp r15, rax
jb 0x1401ad630
mov r8d, ebp
and r8d, 7
cmp r8d, 3
jbe 0x1401ad6c4
mov r12d, dword [rbx + r15]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, r8
jb 0x1401ad6d5
jmp 0x1401ad6ee
mov r11, qword [rsp + 0x40]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x28]
xor r15d, r15d
mov r8d, ebp
and r8d, 7
cmp r8d, 3
ja 0x1401ad680
xor r12d, r12d
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, r8
jae 0x1401ad6ee
lea rcx, [rax + r15]
movzx edi, word [rbx + rcx]
lea ecx, [rax*8]
shl rdi, cl
or r12, rdi
or rax, 2
cmp rax, r8
jae 0x1401ad710
add r15, rax
movzx edi, byte [rbx + r15]
shl eax, 3
mov ecx, eax
shl rdi, cl
or r12, rdi
jmp 0x1401ad715
test r8, r8
je 0x1401ad772
lea ecx, [r8*8]
mov ebx, 0xff
shl rbx, cl
or rbx, r12
cmp r8, 7
jne 0x1401ad851
mov ecx, 8
add rsi, r9
rol r9, 0xd
sub rcx, r8
xor r9, rsi
rol rsi, 0x20
xor r11, rbx
add r10, r11
rol r11, 0x10
xor r11, r10
add rsi, r11
rol r11, 0x15
xor r11, rsi
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor rsi, rbx
jmp 0x1401ad774
xor ecx, ecx
mov r8d, 1
sub r8, rcx
mov eax, r8d
and eax, 7
and r8, 0xfffffffffffffff8
cmp rcx, r8
jae 0x1401ad800
nop dword [rax]
add rsi, r9
rol r9, 0xd
xor r9, rsi
rol rsi, 0x20
xor r11, 0xff
add r10, r11
rol r11, 0x10
xor r11, r10
add rsi, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, rsi
xor rsi, 0xff
add rcx, 8
cmp rcx, r8
jb 0x1401ad790
xor r8d, r8d
cmp rax, 4
setae r8b
cmp eax, 4
mov ebx, 0
mov ecx, 0xff
cmovae rbx, rcx
shl r8, 2
jmp 0x1401ad805
xor ebx, ebx
xor r8d, r8d
mov rdi, r8
lea ecx, [r8*8]
mov r15d, 0xff
shl r15, cl
or rdi, 1
mov r12, r8
or r12, 2
cmp rdi, rax
mov edi, 0
cmovae r15, rdi
cmovae r12, r8
or r15, rbx
lea ecx, [r12*8]
mov ebx, 0xff
shl rbx, cl
cmp r12, rax
cmovae rbx, rdi
or rbx, r15
shl rbp, 0x38
movabs rax, 0x100000000000000
add rbp, rax
add rsi, r9
rol r9, 0xd
or rbp, rbx
xor r9, rsi
rol rsi, 0x20
xor r11, rbp
add r10, r11
rol r11, 0x10
xor r11, r10
add rsi, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r11, rsi
xor r9, r10
rol r10, 0x20
xor rsi, rbp
add rsi, r9
rol r9, 0xd
xor r9, rsi
rol rsi, 0x20
xor r10, 0xff
add r10, r11
rol r11, 0x10
xor r11, r10
add rsi, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, rsi
add rsi, r9
rol r9, 0xd
xor r9, rsi
rol rsi, 0x20
add r10, r11
rol r11, 0x10
xor r11, r10
add rsi, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, rsi
add rsi, r9
rol r9, 0xd
add r10, r11
rol r11, 0x10
xor r11, r10
rol r11, 0x15
xor r9, rsi
add r10, r9
rol r9, 0x11
mov rcx, r10
rol rcx, 0x20
xor rcx, r9
xor rcx, r11
xor rcx, r10
mov rax, rcx
mov r11, qword [rsp + 0x20]
and rax, r11
movdqu xmm0, xmmword [r14 + rax]
pmovmskb r8d, xmm0
mov r9, rax
test r8d, r8d
mov rsi, qword [rsp + 0x38]
jne 0x1401ad97a
mov r10d, 0x10
mov r9, rax
nop dword [rax]
add r9, r10
and r9, r11
movdqu xmm0, xmmword [r14 + r9]
pmovmskb r8d, xmm0
add r10, 0x10
test r8d, r8d
je 0x1401ad960
tzcnt r8d, r8d
add r8, r9
and r8, r11
cmp byte [r14 + r8], 0
js 0x1401ad99b
movdqa xmm0, xmmword [r14]
pmovmskb r8d, xmm0
tzcnt r8d, r8d
mov r9, rsi
sub r9, rax
mov r10, r8
sub r10, rax
xor r10, r9
and r10, r11
cmp r10, 0x10
jb 0x1401ad4b0
mov rax, r8
not rax
imul rax, rax, 0x68
add rax, r14
movzx r9d, byte [r14 + r8]
shr rcx, 0x39
lea r10, [r8 - 0x10]
and r10, r11
mov byte [r14 + r8], cl
mov byte [r10 + r14 + 0x10], cl
cmp r9b, 0xff
je 0x1401ada50
imul rcx, r8, 0xffffffffffffff98
add rcx, r14
cmp qword [rsp + 0x80], rcx
jae 0x1401ad530
cmp rax, qword [rsp + 0x78]
jae 0x1401ad530
mov rax, 0xffffffffffffff98
nop word [rax + rax]
movzx r8d, byte [r13 + rax]
movzx r9d, byte [rcx + rax]
mov byte [r13 + rax], r9b
mov byte [rcx + rax], r8b
movzx r8d, byte [r13 + rax + 1]
movzx r9d, byte [rcx + rax + 1]
mov byte [r13 + rax + 1], r9b
mov byte [rcx + rax + 1], r8b
add rax, 2
jne 0x1401ada10
jmp 0x1401ad5fc
lea rcx, [rsi - 0x10]
and rcx, r11
mov byte [r14 + rsi], 0xff
mov byte [rcx + r14 + 0x10], 0xff
mov rcx, qword [rdx + 0x60]
mov qword [rax + 0x60], rcx
movups xmm0, xmmword [rdx + 0x50]
movups xmmword [rax + 0x50], xmm0
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rax + 0x40], xmm0
movdqu xmm0, xmmword [rdx]
movdqu xmm1, xmmword [rdx + 0x10]
movups xmm2, xmmword [rdx + 0x20]
movups xmm3, xmmword [rdx + 0x30]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
jmp 0x1401ad4c4
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x60]
mov rax, qword [rsp + 0x58]
sub rax, rdi
mov qword [rsi + 0x10], rax
movabs rax, 0x7ffffffffffffff0
add rax, 0x11
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1401503d0
ud2