Function at 0x140114d30
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov rdi, qword [rcx + 0x18]
mov rax, rdi
inc rax
je 0x1401157b3
mov r15, rdx
mov rsi, rcx
mov r11, qword [rcx + 8]
lea r8, [r11 + 1]
mov rcx, r8
shr rcx, 3
mov r12, r8
and r12, 0xfffffffffffffff8
sub r12, rcx
cmp r11, 8
cmovb r12, r11
mov rcx, r12
shr rcx, 1
cmp rax, rcx
mov qword [rsp + 0x20], r11
mov qword [rsp + 0x38], rdi
jbe 0x140114db7
inc r12
cmp rax, r12
cmova r12, rax
cmp r12, 8
mov qword [rsp + 0x30], r8
jae 0x140114de4
xor eax, eax
cmp r12, 4
setae al
lea r14, [rax*4 + 4]
jmp 0x140114e34
mov rbx, qword [rsi]
mov rcx, r8
shr rcx, 4
xor eax, eax
test r8b, 0xf
setne al
add rax, rcx
je 0x1401150f1
cmp rax, 1
jne 0x140115085
xor edx, edx
jmp 0x1401150d7
mov rax, r12
shr rax, 0x3d
jne 0x1401157b3
shl r12, 3
mov r14d, 1
cmp r12, 0xe
jb 0x140114e34
movabs rcx, 0x2492492492492493
mov rax, r12
mul rcx
sub r12, rdx
shr r12, 1
add r12, rdx
shr r12, 2
dec r12
bsr rcx, r12
not ecx
mov r14, 0xffffffffffffffff
shr r14, cl
inc r14
mov ecx, 0x68
mov rax, r14
mul rcx
jo 0x1401157b3
mov r12, rax
add r12, 0xf
and r12, 0xfffffffffffffff0
lea r13, [r14 + 0x10]
mov rbp, r12
add rbp, r13
jb 0x1401157b3
movabs rax, 0x7ffffffffffffff1
cmp rbp, rax
jae 0x1401157b3
test rbp, rbp
je 0x140114ebd
movzx eax, byte [0x14018af58]
mov rcx, qword [0x14018aea8]
test rcx, rcx
jne 0x140114ea0
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140114eb3
mov rcx, rax
mov qword [0x14018aea8], rax
xor edx, edx
mov r8, rbp
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x140114ec2
mov rcx, rbp
call fcn.140034d80
ud2
mov edi, 0x10
lea rbp, [r14 - 1]
mov rax, r14
shr rax, 3
mov rbx, r14
and rbx, 0xfffffffffffffff8
sub rbx, rax
cmp r14, 9
cmovb rbx, rbp
add rdi, r12
mov rcx, rdi
mov dl, 0xff
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rax, rbx
sub rax, qword [rsp + 0x38]
mov r8, qword [rsp + 0x20]
cmp r8, 0xffffffffffffffff
je 0x14011503b
mov qword [rsp + 0x28], rax
mov rbx, qword [rsi]
lea r13, [rbx - 0x68]
mov r12, qword [r15]
mov r15, qword [r15 + 8]
xor r14d, r14d
jmp 0x140114f9b
shr rax, 0x39
lea rcx, [rdx - 0x10]
and rcx, rbp
mov byte [rdi + rdx], al
mov byte [rcx + rdi + 0x10], al
mov rax, r14
not rax
imul rax, rax, 0x68
not rdx
imul rcx, rdx, 0x68
mov rdx, qword [rbx + rax + 0x60]
mov qword [rdi + rcx + 0x60], rdx
movups xmm0, xmmword [rbx + rax + 0x50]
movups xmmword [rdi + rcx + 0x50], xmm0
movups xmm0, xmmword [rbx + rax + 0x40]
movups xmmword [rdi + rcx + 0x40], xmm0
movdqu xmm0, xmmword [rbx + rax]
movdqu xmm1, xmmword [rbx + rax + 0x10]
movups xmm2, xmmword [rbx + rax + 0x20]
movups xmm3, xmmword [rbx + rax + 0x30]
movups xmmword [rdi + rcx + 0x30], xmm3
movups xmmword [rdi + rcx + 0x20], xmm2
movdqu xmmword [rdi + rcx + 0x10], xmm1
movdqu xmmword [rdi + rcx], xmm0
lea rax, [r14 + 1]
cmp r14, r8
mov r14, rax
je 0x140115021
cmp byte [rbx + r14], 0
js 0x140114f8b
mov rax, r14
neg rax
imul rax, rax, 0x68
mov r8, qword [r13 + rax]
mov r9, qword [r13 + rax + 0x10]
mov rcx, r12
mov rdx, r15
call fcn.140004300
mov rcx, rax
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x140114ff7
mov r8d, 0x10
nop word [rax + rax]
add rcx, r8
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x140114fe0
mov r8, qword [rsp + 0x20]
tzcnt edx, edx
add rdx, rcx
and rdx, rbp
cmp byte [rdi + rdx], 0
js 0x140114f20
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x140114f20
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
mov rax, qword [rsp + 0x28]
mov qword [rsi + 0x10], rax
test r8, r8
jne 0x140115049
jmp 0x140115795
mov rbx, qword [rsi]
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
mov qword [rsi + 0x10], rax
mov ecx, 0x68
mov rax, qword [rsp + 0x30]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add r8, rax
cmp r8, 0xffffffffffffffef
je 0x140115795
sub rbx, rax
mov rcx, qword [0x14018aea8]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140115795
movabs rcx, 0x1ffffffffffffffe
and rcx, rax
xor r9d, r9d
movdqa xmm0, xmmword [0x140119640]
nop dword [rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r9]
por xmm1, xmm0
movdqa xmmword [rbx + r9], xmm1
lea rdx, [r9 + 0x20]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r9 + 0x10]
por xmm1, xmm0
movdqa xmmword [rbx + r9 + 0x10], xmm1
mov r9, rdx
add rcx, 0xfffffffffffffffe
jne 0x1401150a0
test al, 1
je 0x1401150f1
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rbx + rdx]
por xmm0, xmmword [0x140119640]
movdqa xmmword [rbx + rdx], xmm0
cmp r8, 0x10
jae 0x140115115
lea rcx, [rbx + 0x10]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r11, qword [rsp + 0x20]
cmp r11, 0xffffffffffffffff
jne 0x14011511f
xor eax, eax
jmp 0x14011578e
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbx + r8], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rsi
lea rax, [rbx - 0x68]
mov qword [rsp + 0x70], rax
mov rax, qword [r15]
mov rcx, qword [r15 + 8]
movabs rdx, 0x736f6d6570736575
xor rdx, rax
mov qword [rsp + 0x58], rdx
movabs rdx, 0x646f72616e646f6d
xor rdx, rcx
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6c7967656e657261
xor rdx, rax
mov qword [rsp + 0x48], rdx
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x40], rax
mov r13, rbx
xor esi, esi
jmp 0x1401151b6
shr rcx, 0x39
lea rax, [rsi - 0x10]
and rax, r11
mov byte [rbx + rsi], cl
mov byte [rax + rbx + 0x10], cl
lea rax, [rsi + 1]
add r13, 0xffffffffffffff98
cmp rsi, r11
mov rsi, rax
je 0x14011577f
cmp byte [rbx + rsi], 0x80
jne 0x1401151a2
imul rax, rsi, 0xffffffffffffff98
lea rcx, [rbx + rax]
add rcx, 0xffffffffffffff98
mov qword [rsp + 0x80], rcx
add rax, rbx
mov qword [rsp + 0x78], rax
mov rax, rsi
not rax
imul rdx, rax, 0x68
add rdx, rbx
mov qword [rsp + 0x30], rsi
mov rax, rsi
neg rax
imul rax, rax, 0x68
add rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
jmp 0x1401152dc
mov rcx, qword [rdx]
mov r8, qword [rax]
mov qword [rdx], r8
mov qword [rax], rcx
mov rcx, qword [rdx + 8]
mov r8, qword [rax + 8]
mov qword [rdx + 8], r8
mov qword [rax + 8], rcx
mov rcx, qword [rdx + 0x10]
mov r8, qword [rax + 0x10]
mov qword [rdx + 0x10], r8
mov qword [rax + 0x10], rcx
mov rcx, qword [rdx + 0x18]
mov r8, qword [rax + 0x18]
mov qword [rdx + 0x18], r8
mov qword [rax + 0x18], rcx
mov rcx, qword [rdx + 0x20]
mov r8, qword [rax + 0x20]
mov qword [rdx + 0x20], r8
mov qword [rax + 0x20], rcx
mov rcx, qword [rdx + 0x28]
mov r8, qword [rax + 0x28]
mov qword [rdx + 0x28], r8
mov qword [rax + 0x28], rcx
mov rcx, qword [rdx + 0x30]
mov r8, qword [rax + 0x30]
mov qword [rdx + 0x30], r8
mov qword [rax + 0x30], rcx
mov rcx, qword [rdx + 0x38]
mov r8, qword [rax + 0x38]
mov qword [rdx + 0x38], r8
mov qword [rax + 0x38], rcx
mov rcx, qword [rdx + 0x40]
mov r8, qword [rax + 0x40]
mov qword [rdx + 0x40], r8
mov qword [rax + 0x40], rcx
mov rcx, qword [rdx + 0x48]
mov r8, qword [rax + 0x48]
mov qword [rdx + 0x48], r8
mov qword [rax + 0x48], rcx
mov rcx, qword [rdx + 0x50]
mov r8, qword [rax + 0x50]
mov qword [rdx + 0x50], r8
mov qword [rax + 0x50], rcx
mov rcx, qword [rdx + 0x58]
mov r8, qword [rax + 0x58]
mov qword [rdx + 0x58], r8
mov qword [rax + 0x58], rcx
mov rcx, qword [rdx + 0x60]
mov r8, qword [rax + 0x60]
mov qword [rdx + 0x60], r8
mov qword [rax + 0x60], rcx
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax]
mov rbp, qword [rax + 0x10]
mov rax, rbp
and rax, 0xfffffffffffffff8
je 0x140115380
mov r10, qword [rsp + 0x48]
mov r9, qword [rsp + 0x50]
mov r11, qword [rsp + 0x40]
xor r15d, r15d
mov r14, qword [rsp + 0x58]
nop dword [rax]
add r14, r9
rol r9, 0xd
mov rcx, qword [rdi + r15]
xor r9, r14
rol r14, 0x20
xor r11, rcx
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r14
xor r14, rcx
add r15, 8
cmp r15, rax
jb 0x140115310
mov r8d, ebp
and r8d, 7
cmp r8d, 3
jbe 0x1401153a4
mov r12d, dword [rdi + r15]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, r8
jb 0x1401153b5
jmp 0x1401153ce
mov r11, qword [rsp + 0x40]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x48]
mov r14, qword [rsp + 0x58]
xor r15d, r15d
mov r8d, ebp
and r8d, 7
cmp r8d, 3
ja 0x140115360
xor r12d, r12d
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, r8
jae 0x1401153ce
lea rcx, [rax + r15]
movzx esi, word [rdi + rcx]
lea ecx, [rax*8]
shl rsi, cl
or r12, rsi
or rax, 2
cmp rax, r8
jae 0x1401153f0
add r15, rax
movzx esi, byte [rdi + r15]
shl eax, 3
mov ecx, eax
shl rsi, cl
or r12, rsi
jmp 0x1401153f5
test r8, r8
je 0x140115452
lea ecx, [r8*8]
mov edi, 0xff
shl rdi, cl
or rdi, r12
cmp r8, 7
jne 0x140115531
mov ecx, 8
add r14, r9
rol r9, 0xd
sub rcx, r8
xor r9, r14
rol r14, 0x20
xor r11, rdi
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
xor r11, r14
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r14, rdi
jmp 0x140115454
xor ecx, ecx
mov r8d, 1
sub r8, rcx
mov eax, r8d
and eax, 7
and r8, 0xfffffffffffffff8
cmp rcx, r8
jae 0x1401154e0
nop dword [rax]
add r14, r9
rol r9, 0xd
xor r9, r14
rol r14, 0x20
xor r11, 0xff
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r14
xor r14, 0xff
add rcx, 8
cmp rcx, r8
jb 0x140115470
xor r8d, r8d
cmp rax, 4
setae r8b
cmp eax, 4
mov edi, 0
mov ecx, 0xff
cmovae rdi, rcx
shl r8, 2
jmp 0x1401154e5
xor edi, edi
xor r8d, r8d
mov rsi, r8
lea ecx, [r8*8]
mov r15d, 0xff
shl r15, cl
or rsi, 1
mov r12, r8
or r12, 2
cmp rsi, rax
mov esi, 0
cmovae r15, rsi
cmovae r12, r8
or r15, rdi
lea ecx, [r12*8]
mov edi, 0xff
shl rdi, cl
cmp r12, rax
cmovae rdi, rsi
or rdi, r15
shl rbp, 0x38
movabs rax, 0x100000000000000
add rbp, rax
add r14, r9
rol r9, 0xd
or rbp, rdi
xor r9, r14
rol r14, 0x20
xor r11, rbp
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r11, r14
xor r9, r10
rol r10, 0x20
xor r14, rbp
add r14, r9
rol r9, 0xd
xor r9, r14
rol r14, 0x20
xor r10, 0xff
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r14
add r14, r9
rol r9, 0xd
xor r9, r14
rol r14, 0x20
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r14
add r14, r9
rol r9, 0xd
add r10, r11
rol r11, 0x10
xor r11, r10
rol r11, 0x15
xor r9, r14
add r10, r9
rol r9, 0x11
mov rcx, r10
rol rcx, 0x20
xor rcx, r9
xor rcx, r11
xor rcx, r10
mov rax, rcx
mov r11, qword [rsp + 0x20]
and rax, r11
movdqu xmm0, xmmword [rbx + rax]
pmovmskb r8d, xmm0
mov r9, rax
test r8d, r8d
mov rsi, qword [rsp + 0x30]
jne 0x14011565a
mov r10d, 0x10
mov r9, rax
nop dword [rax]
add r9, r10
and r9, r11
movdqu xmm0, xmmword [rbx + r9]
pmovmskb r8d, xmm0
add r10, 0x10
test r8d, r8d
je 0x140115640
tzcnt r8d, r8d
add r8, r9
and r8, r11
cmp byte [rbx + r8], 0
js 0x14011567a
movdqa xmm0, xmmword [rbx]
pmovmskb r8d, xmm0
tzcnt r8d, r8d
mov r9, rsi
sub r9, rax
mov r10, r8
sub r10, rax
xor r10, r9
and r10, r11
cmp r10, 0x10
jb 0x140115190
mov rax, r8
not rax
imul rax, rax, 0x68
add rax, rbx
movzx r9d, byte [rbx + r8]
shr rcx, 0x39
lea r10, [r8 - 0x10]
and r10, r11
mov byte [rbx + r8], cl
mov byte [r10 + rbx + 0x10], cl
cmp r9b, 0xff
je 0x140115730
imul rcx, r8, 0xffffffffffffff98
add rcx, rbx
cmp qword [rsp + 0x80], rcx
jae 0x140115210
cmp rax, qword [rsp + 0x78]
jae 0x140115210
mov rax, 0xffffffffffffff98
nop dword [rax]
movzx r8d, byte [r13 + rax]
movzx r9d, byte [rcx + rax]
mov byte [r13 + rax], r9b
mov byte [rcx + rax], r8b
movzx r8d, byte [r13 + rax + 1]
movzx r9d, byte [rcx + rax + 1]
mov byte [r13 + rax + 1], r9b
mov byte [rcx + rax + 1], r8b
add rax, 2
jne 0x1401156f0
jmp 0x1401152dc
lea rcx, [rsi - 0x10]
and rcx, r11
mov byte [rbx + rsi], 0xff
mov byte [rcx + rbx + 0x10], 0xff
mov rcx, qword [rdx + 0x60]
mov qword [rax + 0x60], rcx
movups xmm0, xmmword [rdx + 0x50]
movups xmmword [rax + 0x50], xmm0
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rax + 0x40], xmm0
movdqu xmm0, xmmword [rdx]
movdqu xmm1, xmmword [rdx + 0x10]
movups xmm2, xmmword [rdx + 0x20]
movups xmm3, xmmword [rdx + 0x30]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
jmp 0x1401151a2
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rsp + 0x60]
sub rax, rdi
mov qword [rsi + 0x10], rax
movabs rax, 0x8000000000000001
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140034d40
ud2