Function at 0x140003380
Capabilities:
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
movaps xmmword [rsp + 0x100], xmm6
mov rax, qword [0x14000c040]
xor rax, rsp
mov qword [rbp - 8], rax
mov r15, rdx
mov qword [rsp + 0x50], rcx
xor edi, edi
mov rax, qword [r8 + 0x10]
cmp qword [r8 + 0x18], 0xf
jbe 0x1400033ca
mov r8, qword [r8]
mov r12, qword [rdx + 0x10]
mov rcx, r15
mov rbx, qword [rdx + 0x18]
cmp rbx, 0xf
jbe 0x1400033de
mov rcx, qword [rdx]
mov qword [rsp + 0x20], rax
mov r9, r8
xor r8d, r8d
mov rdx, r12
call fcn.140002890
mov rdx, rax
mov qword [rsp + 0x40], rax
cmp rax, 0xffffffffffffffff
je 0x140003916
movzx ecx, word [0x1400085e8]
mov word [rsp + 0x30], cx
cmp byte [0x1400085e9], dil
je 0x140003425
mov al, 0xa
mov byte [rsp + 0x30], al
xor byte [rsp + 0x31], 0x39
jmp 0x14000342a
movzx eax, byte [rsp + 0x30]
lea rcx, [rsp + 0x30]
mov r14, 0xffffffffffffffff
mov rsi, r14
nop dword [rax]
inc rsi
cmp byte [rcx + rsi], dil
jne 0x140003440
mov r13, r15
cmp rbx, 0xf
jbe 0x140003455
mov r13, qword [r15]
test rsi, rsi
jne 0x140003466
mov rbx, rdx
cmp r12, rdx
cmovb rbx, r12
jmp 0x1400034af
cmp rsi, r12
ja 0x1400034ac
sub r12, rsi
mov rbx, rdx
cmp r12, rdx
cmovb rbx, r12
add rbx, r13
nop dword [rax + rax]
cmp byte [rbx], al
jne 0x14000349d
mov r8, rsi
lea rdx, [rsp + 0x30]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400034a7
movzx eax, byte [rsp + 0x30]
cmp rbx, r13
je 0x1400034ac
dec rbx
jmp 0x140003480
sub rbx, r13
jmp 0x1400034af
mov rbx, r14
mov rsi, rdi
cmp rbx, r14
cmovne rsi, rbx
movzx eax, word [0x1400085ec]
mov word [rsp + 0x30], ax
cmp byte [0x1400085ed], dil
je 0x1400034d8
mov byte [rsp + 0x30], 0xa
xor byte [rsp + 0x31], 0x39
lea rcx, [rsp + 0x30]
mov rax, r14
inc rax
cmp byte [rcx + rax], dil
jne 0x1400034e0
mov rbx, qword [r15 + 0x10]
mov rcx, r15
mov r12, qword [r15 + 0x18]
cmp r12, 0xf
jbe 0x1400034fd
mov rcx, qword [r15]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x30]
mov r8, qword [rsp + 0x40]
mov rdx, rbx
call fcn.140002890
cmp rax, r14
cmove rax, rbx
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], rdi
mov qword [rbp - 0x50], rdi
cmp rbx, rsi
jb 0x140003947
sub rax, rsi
sub rbx, rsi
cmp rbx, rax
cmovb rax, rbx
cmp r12, 0xf
jbe 0x140003549
mov r15, qword [r15]
lea rdx, [r15 + rsi]
mov r8, rax
lea rcx, [rbp - 0x68]
call fcn.1400017f0
nop
movzx eax, word [0x1400085f0]
mov word [rsp + 0x30], ax
cmp byte [0x1400085f1], 0
je 0x140003579
mov byte [rsp + 0x30], 0x7c
xor byte [rsp + 0x31], 0x39
lea rax, [rsp + 0x30]
nop
inc r14
cmp byte [rax + r14], 0
jne 0x140003580
lea rcx, [rbp - 0x68]
mov rbx, qword [rbp - 0x68]
mov rsi, qword [rbp - 0x50]
cmp rsi, 0xf
cmova rcx, rbx
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x30]
xor r8d, r8d
mov r14, qword [rbp - 0x58]
mov rdx, r14
call fcn.140002890
cmp rax, 0xffffffffffffffff
je 0x1400038dc
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
cmp r14, rax
cmovb rax, r14
lea rdx, [rbp - 0x68]
cmp rsi, 0xf
cmova rdx, rbx
mov r8, rax
lea rcx, [rbp - 0x48]
call fcn.1400017f0
nop
lea rcx, [rbp - 0x48]
cmp qword [rbp - 0x30], 0xf
cmova rcx, qword [rbp - 0x48]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str._LHW]
movups xmmword [rsp + 0x58], xmm0
movups xmm1, xmmword [0x140008608]
movups xmmword [rsp + 0x68], xmm1
movups xmm0, xmmword [0x140008618]
movups xmmword [rsp + 0x78], xmm0
movsd xmm0, qword [0x140008628]
movsd qword [rbp - 0x78], xmm0
movzx eax, word [0x140008630]
mov word [rbp - 0x70], ax
cmp dword [section..data], 2
jl 0x14000378a
movdqa xmm5, xmmword [0x140008a40]
movdqa xmm4, xmmword [0x140008a80]
movdqa xmm6, xmmword [str.8888]
movdqa xmm0, xmmword [str.8888888888888888]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x5c]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, edi
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140008a60]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 4]
xorps xmm2, xmm0
movd dword [rcx - 4], xmm2
lea eax, [rdi + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140008a60]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
add edi, 8
mov eax, edi
lea rcx, [rcx + 8]
cmp edi, 0x38
jl 0x140003680
cmp eax, 0x3a
jge 0x1400037d1
movsxd rax, edi
lea r8, [rsp + 0x58]
add r8, rax
nop word [rax + rax]
mov eax, 0x92492493
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x38
add cl, dil
xor byte [r8], cl
inc edi
lea r8, [r8 + 1]
cmp edi, 0x3a
jl 0x1400037a0
mov r8, qword [rsp + 0x50]
add r8, 8
lea rdx, [rsp + 0x58]
lea rcx, [rbp - 0x28]
call fcn.1400013e0
lea rcx, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova rcx, qword [rbp - 0x28]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x14000383a
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003835
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003835
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400065b0
movdqa xmm0, xmmword [0x140008a30]
movdqu xmmword [rbp - 0x18], xmm0
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0xf
jbe 0x140003889
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003884
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003884
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400065b0
movdqa xmm0, xmmword [0x140008a30]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0xf
jbe 0x1400038d8
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400038d3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400038d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400065b0
mov al, 1
jmp 0x140003918
cmp rsi, 0xf
jbe 0x140003916
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, 0x1000
jb 0x14000390e
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000390e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rbx
call fcn.1400065b0
xor al, al
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400066d0
mov rbx, qword [rsp + 0x168]
movaps xmm6, xmmword [rsp + 0x100]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400032b0
int3