Function at 0x140002730
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r14
sub rsp, 0xc0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
movaps xmmword [rax - 0x38], xmm8
mov rax, qword [0x14006f0d0]
xor rax, rsp
mov qword [rsp + 0x80], rax
xor ecx, ecx
call fcn.14002cb14
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
imul eax, ebx
mov ecx, eax
call fcn.14002cdcc
xor ebp, ebp
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x140058428]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
lea rcx, [rax - 1]
cmp rcx, 0xfffffffffffffffd
ja 0x1400027cd
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, [rbp - 1]
jmp 0x140002bd0
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x140073810], xmm0
movups xmmword [0x140073820], xmm0
movups xmmword [0x140073830], xmm0
movups xmmword [0x140073840], xmm0
movups xmmword [0x140073850], xmm0
movups xmmword [0x140073860], xmm0
mov dword [0x140073870], eax
call fcn.14002cda0
mov r8d, eax
mov eax, 0x66666667
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*4]
shl ecx, 2
sub r8d, ecx
add r8d, 0xa
mov rbx, rbp
movsxd rdi, r8d
test r8d, r8d
jle 0x140002875
movabs r14, 0x4ec4ec4ec4ec4ec5
lea rsi, [0x140000000]
call fcn.14002cda0
movsxd rcx, eax
mov rax, r14
mul rcx
shr rdx, 4
imul rax, rdx, 0x34
sub rcx, rax
movzx eax, byte [rcx + rsi + 0x60f68]
mov byte [rbx + rsi + 0x73810], al
inc rbx
cmp rbx, rdi
jl 0x140002845
lea rcx, [rsp + 0x60]
call fcn.140002450
nop
cmp qword [rsp + 0x70], 0
je 0x140002b88
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rcx, qword [rsp + 0x60]
call fcn.14002d1d4
lea r10, [0x140073880]
cmp byte [0x14007bf87], 0
je 0x140002a51
cmp dword [0x14006f0d8], 2
jl 0x140002a10
movdqa xmm5, xmmword [0x140066250]
mov edx, ebp
movdqa xmm4, xmmword [0x1400662a0]
mov eax, 4
movd xmm6, eax
movdqa xmm7, xmmword [0x140066270]
mov eax, 0x1f
movd xmm8, eax
movdqa xmm0, xmmword [str.9999999999999999]
movdqa xmmword [rsp + 0x40], xmm0
mov rcx, r10
mov r8d, dword [rsp + 0x40]
nop word [rax + rax]
movd xmm2, edx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140066280]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [rdx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140066280]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add edx, 8
lea rcx, [rcx + 8]
cmp edx, 0x8708
jl 0x140002910
jmp 0x140002a51
mov r9, r10
mov ecx, ebp
nop word [rax + rax]
mov eax, 0x4bda12f7
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul r8d, eax, 0x36
movzx eax, cl
sub al, r8b
add al, 0x39
xor byte [r9], al
inc ecx
lea r9, [r9 + 1]
cmp ecx, 0x8708
jl 0x140002a20
mov rdx, r10
lea rcx, [rsp + 0x60]
call fcn.14000bc30
test al, al
je 0x140002b88
lea rcx, [rsp + 0x60]
call fcn.14000b570
test al, al
jne 0x140002a8f
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rcx, qword [rsp + 0x60]
call fcn.14002d1d4
jmp 0x140002b88
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc0000000
lea rcx, [0x140058428]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov rbx, rax
dec rax
cmp rax, 0xfffffffffffffffd
ja 0x140002b80
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x58], rbp
mov r8d, 0xc
lea rdx, str.ntoskrnl.exe
lea rcx, [rsp + 0x40]
call fcn.140008c60
nop
lea rcx, [rsp + 0x40]
call fcn.14000be70
mov qword [0x140073878], rax
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140002b4b
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b3f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002c13
call fcn.140022b70
mov rax, qword [0x140073878]
mov rcx, rbx
test rax, rax
je 0x140002b83
call fcn.140004570
mov rcx, rbx
test al, al
je 0x140002b83
call fcn.140004cd0
mov rcx, rbx
test al, al
je 0x140002b83
call fcn.140003e60
mov rcx, rbx
test al, al
je 0x140002b83
call fcn.140002c20
test al, al
jne 0x140002b8f
mov rcx, rbx
call fcn.1400031f0
mov rbx, 0xffffffffffffffff
mov rdx, qword [rsp + 0x78]
cmp rdx, 8
jb 0x140002bcd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002bc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002c0d
call fcn.140022b70
mov rax, rbx
mov rcx, qword [rsp + 0x80]
xor rcx, rsp
call fcn.140022b50
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r14
ret
call fcn.14002e910
nop
call fcn.14002e910
nop
int3