Function at 0x1400ea330
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov r14, qword [rcx + 0x18]
mov rax, r14
inc rax
je 0x1400eae45
mov r15, rdx
mov rbp, rcx
mov rsi, qword [rcx + 8]
lea r8, [rsi + 1]
mov rdx, r8
shr rdx, 3
mov rcx, r8
and rcx, 0xfffffffffffffff8
sub rcx, rdx
cmp rsi, 8
cmovb rcx, rsi
movabs r9, 0x7ffffffffffffff0
mov rdx, rcx
shr rdx, 1
cmp rax, rdx
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x58], rsi
jbe 0x1400ea3c6
inc rcx
cmp rax, rcx
cmova rcx, rax
cmp rcx, 8
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x30], r15
jae 0x1400ea3f4
xor eax, eax
cmp rcx, 4
setae al
lea r12, [rax*4 + 4]
jmp 0x1400ea44e
mov rbx, qword [rbp]
mov rcx, r8
shr rcx, 4
xor eax, eax
test r8b, 0xf
setne al
add rax, rcx
je 0x1400ea751
cmp rax, 1
jne 0x1400ea6db
xor edx, edx
jmp 0x1400ea737
movabs rax, 0x1ffffffffffffffe
add rax, 2
cmp rcx, rax
jae 0x1400eae45
shl rcx, 3
mov r12d, 1
cmp rcx, 0xe
jb 0x1400ea44e
movabs rdx, 0x2492492492492493
mov rax, rcx
mul rdx
sub rcx, rdx
shr rcx, 1
add rcx, rdx
shr rcx, 2
dec rcx
bsr rcx, rcx
not ecx
mov r12, 0xffffffffffffffff
shr r12, cl
inc r12
mov ecx, 0x18
mov rax, r12
mul rcx
jo 0x1400eae45
mov rsi, rax
add rsi, 0xf
and rsi, 0xfffffffffffffff0
lea r15, [r12 + 0x10]
mov r13, rsi
add r13, r15
jb 0x1400eae45
cmp r13, r9
ja 0x1400eae45
test r13, r13
mov qword [rsp + 0x28], r14
je 0x1400ea4cf
movzx eax, byte [0x14037f348]
mov rcx, qword [0x14037f2d0]
test rcx, rcx
jne 0x1400ea4b5
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x1400ea4c7
mov rcx, rax
mov qword [0x14037f2d0], rax
xor edx, edx
mov r8, r13
call fcn.1402699c4
mov rbx, rax
test rax, rax
jne 0x1400ea4d4
mov rcx, r13
call fcn.1400da530
mov ebx, 0x10
lea r14, [r12 - 1]
mov rax, r12
shr rax, 3
mov rcx, r12
and rcx, 0xfffffffffffffff8
sub rcx, rax
cmp r12, 9
cmovb rcx, r14
mov qword [rsp + 0x40], rcx
add rbx, rsi
mov rcx, rbx
mov dl, 0xff
mov r8, r15
call sub.msvcrt.dll_memset
mov rax, qword [rbp]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x28], 0
je 0x1400ea66c
mov r12, qword [rsp + 0x38]
movdqa xmm0, xmmword [r12]
pmovmskb r13d, xmm0
not r13d
lea rdi, [r12 - 0x18]
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax]
mov qword [rsp + 0x48], rcx
mov rax, qword [rax + 8]
mov qword [rsp + 0x30], rax
xor ebp, ebp
mov r15, qword [rsp + 0x28]
jmp 0x1400ea5b1
lea ecx, [r13 - 1]
and ecx, r13d
dec r15
shr rax, 0x39
lea r8, [rdx - 0x10]
and r8, r14
mov byte [rbx + rdx], al
mov byte [r8 + rbx + 0x10], al
not rsi
lea rax, [rsi + rsi*2]
not rdx
lea rdx, [rdx + rdx*2]
mov r9, qword [rsp + 0x38]
mov r8, qword [r9 + rax*8 + 0x10]
mov qword [rbx + rdx*8 + 0x10], r8
movdqu xmm0, xmmword [r9 + rax*8]
movdqu xmmword [rbx + rdx*8], xmm0
mov r13d, ecx
test r15, r15
je 0x1400ea66c
test r13w, r13w
jne 0x1400ea5e0
nop word [rax + rax]
movdqa xmm0, xmmword [r12 + 0x10]
add r12, 0x10
pmovmskb r13d, xmm0
add rbp, 0x10
cmp r13d, 0xffff
je 0x1400ea5c0
not r13d
tzcnt esi, r13d
add rsi, rbp
mov rax, rsi
neg rax
lea rax, [rax + rax*2]
mov r8, qword [rdi + rax*8 + 8]
mov r9, qword [rdi + rax*8 + 0x10]
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x30]
call fcn.1400eae50
mov rcx, rax
and rcx, r14
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x1400ea647
mov r8d, 0x10
nop word cs:[rax + rax]
add rcx, r8
and rcx, r14
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x1400ea630
tzcnt edx, edx
add rdx, rcx
and rdx, r14
cmp byte [rbx + rdx], 0
js 0x1400ea560
movdqa xmm0, xmmword [rbx]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x1400ea560
mov rcx, qword [rsp + 0x40]
sub rcx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x50]
mov qword [rax], rbx
mov qword [rax + 8], r14
mov qword [rax + 0x10], rcx
mov r8, qword [rsp + 0x58]
test r8, r8
movabs rsi, 0x7ffffffffffffff0
je 0x1400eae2d
mov ecx, 0x18
mov rax, qword [rsp + 0x60]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add r8, rax
cmp r8, 0xffffffffffffffef
je 0x1400eae2d
mov r8, qword [rsp + 0x38]
sub r8, rax
mov rcx, qword [0x14037f2d0]
xor edx, edx
call fcn.1402699cc
jmp 0x1400eae2d
movabs rcx, 0x1ffffffffffffffe
and rcx, rax
xor r9d, r9d
movdqa xmm0, xmmword [0x140271c00]
nop word cs:[rax + rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r9]
por xmm1, xmm0
movdqa xmmword [rbx + r9], xmm1
lea rdx, [r9 + 0x20]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r9 + 0x10]
por xmm1, xmm0
movdqa xmmword [rbx + r9 + 0x10], xmm1
mov r9, rdx
add rcx, 0xfffffffffffffffe
jne 0x1400ea700
test al, 1
je 0x1400ea751
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rbx + rdx]
por xmm0, xmmword [0x140271c00]
movdqa xmmword [rbx + rdx], xmm0
cmp r8, 0x10
jae 0x1400ea770
lea rcx, [rbx + 0x10]
mov rdx, rbx
call sub.msvcrt.dll_memmove
cmp rsi, 0xffffffffffffffff
jne 0x1400ea77a
xor eax, eax
jmp 0x1400eae1c
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbx + r8], xmm0
mov rax, qword [r15]
mov rcx, qword [r15 + 8]
movabs rdx, 0x736f6d6570736575
xor rdx, rax
mov qword [rsp + 0x48], rdx
movabs rdx, 0x646f72616e646f6d
xor rdx, rcx
mov qword [rsp + 0x30], rdx
movabs rdx, 0x6c7967656e657261
xor rdx, rax
mov qword [rsp + 0x28], rdx
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x40], rax
xor r12d, r12d
jmp 0x1400ea7fe
shr rcx, 0x39
lea rax, [r12 - 0x10]
and rdx, rax
mov byte [rbx + r12], cl
mov rbx, qword [rbp]
mov byte [rdx + rbx + 0x10], cl
mov rsi, qword [rsp + 0x58]
lea rax, [r12 + 1]
cmp r12, rsi
mov r12, rax
je 0x1400eadfa
cmp byte [rbx + r12], 0x80
jne 0x1400ea7ed
mov rax, r12
not rax
lea rax, [rax + rax*2]
lea r13, [rbx + rax*8]
mov rax, r12
neg rax
mov qword [rsp + 0x38], rax
mov rax, qword [rbp]
nop word cs:[rax + rax]
mov rcx, qword [rsp + 0x38]
lea rcx, [rcx + rcx*2]
mov r11, qword [rax + rcx*8 - 0x10]
mov rsi, qword [rax + rcx*8 - 8]
mov rax, rsi
and rax, 0xfffffffffffffff8
je 0x1400ea8e0
mov r9, qword [rsp + 0x28]
mov r8, qword [rsp + 0x30]
mov r10, qword [rsp + 0x40]
xor r14d, r14d
mov rdx, qword [rsp + 0x48]
nop word [rax + rax]
add rdx, r8
rol r8, 0xd
mov rcx, qword [r11 + r14]
xor r8, rdx
rol rdx, 0x20
xor r10, rcx
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
add r9, r8
rol r8, 0x11
xor r8, r9
rol r9, 0x20
xor r10, rdx
xor rdx, rcx
add r14, 8
cmp r14, rax
jb 0x1400ea870
mov r15d, esi
and r15d, 7
cmp r15d, 3
jbe 0x1400ea904
mov ebp, dword [r11 + r14]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, r15
jb 0x1400ea914
jmp 0x1400ea92e
mov r10, qword [rsp + 0x40]
mov r8, qword [rsp + 0x30]
mov r9, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x48]
xor r14d, r14d
mov r15d, esi
and r15d, 7
cmp r15d, 3
ja 0x1400ea8c0
xor ebp, ebp
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, r15
jae 0x1400ea92e
lea rcx, [rax + r14]
movzx edi, word [r11 + rcx]
lea ecx, [rax*8]
shl rdi, cl
or rbp, rdi
or rax, 2
cmp rax, r15
jae 0x1400ea950
add r14, rax
movzx r11d, byte [r11 + r14]
shl eax, 3
mov ecx, eax
shl r11, cl
or rbp, r11
jmp 0x1400ea955
test r15, r15
je 0x1400ea9ba
lea ecx, [r15*8]
mov r11d, 0xff
shl r11, cl
or r11, rbp
cmp r15, 7
jne 0x1400ea9b0
mov ecx, 8
add rdx, r8
rol r8, 0xd
sub rcx, r15
xor r8, rdx
rol rdx, 0x20
xor r10, r11
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
xor r10, rdx
add r9, r8
rol r8, 0x11
xor r8, r9
rol r9, 0x20
xor rdx, r11
jmp 0x1400ea9bc
mov rbp, qword [rsp + 0x50]
jmp 0x1400eaaa0
xor ecx, ecx
mov r11d, 1
sub r11, rcx
mov eax, r11d
and eax, 7
and r11, 0xfffffffffffffff8
cmp rcx, r11
jae 0x1400eaa50
nop word cs:[rax + rax]
add rdx, r8
rol r8, 0xd
xor r8, rdx
rol rdx, 0x20
xor r10, 0xff
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
add r9, r8
rol r8, 0x11
xor r8, r9
rol r9, 0x20
xor r10, rdx
xor rdx, 0xff
add rcx, 8
cmp rcx, r11
jb 0x1400ea9e0
xor r14d, r14d
cmp rax, 4
setae r14b
cmp eax, 4
mov r15d, 0
mov ecx, 0xff
cmovae r15, rcx
shl r14, 2
jmp 0x1400eaa56
xor r15d, r15d
xor r14d, r14d
mov rbp, qword [rsp + 0x50]
mov rdi, r14
or rdi, 1
lea ecx, [r14*8]
mov r11d, 0xff
shl r11, cl
mov rcx, r14
or rcx, 2
cmp rdi, rax
mov edi, 0
cmovae r11, rdi
cmovae rcx, r14
or r11, r15
cmp rcx, rax
jae 0x1400eaaa0
shl ecx, 3
mov eax, 0xff
shl rax, cl
or r11, rax
shl rsi, 0x38
movabs rax, 0x100000000000000
add rsi, rax
add rdx, r8
rol r8, 0xd
or rsi, r11
xor r8, rdx
rol rdx, 0x20
xor r10, rsi
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
add r9, r8
rol r8, 0x11
xor r10, rdx
xor r8, r9
rol r9, 0x20
xor rdx, rsi
add rdx, r8
rol r8, 0xd
xor r8, rdx
rol rdx, 0x20
xor r9, 0xff
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
add r9, r8
rol r8, 0x11
xor r8, r9
rol r9, 0x20
xor r10, rdx
add rdx, r8
rol r8, 0xd
xor r8, rdx
rol rdx, 0x20
add r9, r10
rol r10, 0x10
xor r10, r9
add rdx, r10
rol r10, 0x15
add r9, r8
rol r8, 0x11
xor r8, r9
rol r9, 0x20
xor r10, rdx
add rdx, r8
rol r8, 0xd
add r9, r10
rol r10, 0x10
xor r8, rdx
xor r10, r9
rol r10, 0x15
add r9, r8
rol r8, 0x11
mov rcx, r9
rol rcx, 0x20
xor rcx, r8
xor rcx, r10
xor rcx, r9
mov rdx, qword [rbp + 8]
mov rax, rdx
and rax, rcx
movdqu xmm0, xmmword [rbx + rax]
pmovmskb r8d, xmm0
mov r9, rax
test r8d, r8d
jne 0x1400eabca
mov r10d, 0x10
mov r9, rax
nop word cs:[rax + rax]
add r9, r10
and r9, rdx
movdqu xmm0, xmmword [rbx + r9]
pmovmskb r8d, xmm0
add r10, 0x10
test r8d, r8d
je 0x1400eabb0
tzcnt r8d, r8d
add r8, r9
and r8, rdx
cmp byte [rbx + r8], 0
js 0x1400eabea
movdqa xmm0, xmmword [rbx]
pmovmskb r8d, xmm0
tzcnt r8d, r8d
mov r9, r12
sub r9, rax
mov r10, r8
sub r10, rax
xor r10, r9
and r10, rdx
cmp r10, 0x10
jb 0x1400ea7d0
mov rax, r8
not rax
lea rax, [rax + rax*2]
lea rax, [rbx + rax*8]
movzx r9d, byte [rbx + r8]
shr rcx, 0x39
lea r10, [r8 - 0x10]
and r10, rdx
mov byte [rbx + r8], cl
mov rbx, qword [rbp]
mov byte [r10 + rbx + 0x10], cl
cmp r9b, 0xff
je 0x1400eadd0
movzx ecx, byte [r13]
movzx edx, byte [rax]
mov byte [r13], dl
mov byte [rax], cl
movzx ecx, byte [r13 + 1]
movzx edx, byte [rax + 1]
mov byte [r13 + 1], dl
mov byte [rax + 1], cl
movzx ecx, byte [r13 + 2]
movzx edx, byte [rax + 2]
mov byte [r13 + 2], dl
mov byte [rax + 2], cl
movzx ecx, byte [r13 + 3]
movzx edx, byte [rax + 3]
mov byte [r13 + 3], dl
mov byte [rax + 3], cl
movzx ecx, byte [r13 + 4]
movzx edx, byte [rax + 4]
mov byte [r13 + 4], dl
mov byte [rax + 4], cl
movzx ecx, byte [r13 + 5]
movzx edx, byte [rax + 5]
mov byte [r13 + 5], dl
mov byte [rax + 5], cl
movzx ecx, byte [r13 + 6]
movzx edx, byte [rax + 6]
mov byte [r13 + 6], dl
mov byte [rax + 6], cl
movzx ecx, byte [r13 + 7]
movzx edx, byte [rax + 7]
mov byte [r13 + 7], dl
mov byte [rax + 7], cl
movzx ecx, byte [r13 + 8]
movzx edx, byte [rax + 8]
mov byte [r13 + 8], dl
mov byte [rax + 8], cl
movzx ecx, byte [r13 + 9]
movzx edx, byte [rax + 9]
mov byte [r13 + 9], dl
mov byte [rax + 9], cl
movzx ecx, byte [r13 + 0xa]
movzx edx, byte [rax + 0xa]
mov byte [r13 + 0xa], dl
mov byte [rax + 0xa], cl
movzx ecx, byte [r13 + 0xb]
movzx edx, byte [rax + 0xb]
mov byte [r13 + 0xb], dl
mov byte [rax + 0xb], cl
movzx ecx, byte [r13 + 0xc]
movzx edx, byte [rax + 0xc]
mov byte [r13 + 0xc], dl
mov byte [rax + 0xc], cl
movzx ecx, byte [r13 + 0xd]
movzx edx, byte [rax + 0xd]
mov byte [r13 + 0xd], dl
mov byte [rax + 0xd], cl
movzx ecx, byte [r13 + 0xe]
movzx edx, byte [rax + 0xe]
mov byte [r13 + 0xe], dl
mov byte [rax + 0xe], cl
movzx ecx, byte [r13 + 0xf]
movzx edx, byte [rax + 0xf]
mov byte [r13 + 0xf], dl
mov byte [rax + 0xf], cl
movzx ecx, byte [r13 + 0x10]
movzx edx, byte [rax + 0x10]
mov byte [r13 + 0x10], dl
mov byte [rax + 0x10], cl
movzx ecx, byte [r13 + 0x11]
movzx edx, byte [rax + 0x11]
mov byte [r13 + 0x11], dl
mov byte [rax + 0x11], cl
movzx ecx, byte [r13 + 0x12]
movzx edx, byte [rax + 0x12]
mov byte [r13 + 0x12], dl
mov byte [rax + 0x12], cl
movzx ecx, byte [r13 + 0x13]
movzx edx, byte [rax + 0x13]
mov byte [r13 + 0x13], dl
mov byte [rax + 0x13], cl
movzx ecx, byte [r13 + 0x14]
movzx edx, byte [rax + 0x14]
mov byte [r13 + 0x14], dl
mov byte [rax + 0x14], cl
movzx ecx, byte [r13 + 0x15]
movzx edx, byte [rax + 0x15]
mov byte [r13 + 0x15], dl
mov byte [rax + 0x15], cl
movzx ecx, byte [r13 + 0x16]
movzx edx, byte [rax + 0x16]
mov byte [r13 + 0x16], dl
mov byte [rax + 0x16], cl
movzx ecx, byte [r13 + 0x17]
movzx edx, byte [rax + 0x17]
mov byte [r13 + 0x17], dl
mov byte [rax + 0x17], cl
mov rax, qword [rbp]
mov rbx, rax
jmp 0x1400ea830
lea rcx, [r12 - 0x10]
and rcx, qword [rbp + 8]
mov byte [rbx + r12], 0xff
mov byte [rcx + rbx + 0x10], 0xff
mov rcx, qword [r13 + 0x10]
mov qword [rax + 0x10], rcx
movdqu xmm0, xmmword [r13]
movdqu xmmword [rax], xmm0
jmp 0x1400ea7e8
mov rcx, qword [rbp + 8]
mov r14, qword [rbp + 0x18]
lea rax, [rcx + 1]
mov rdx, rax
shr rdx, 3
and rax, 0xfffffffffffffff8
sub rax, rdx
cmp rcx, 8
cmovb rax, rcx
sub rax, r14
mov qword [rbp + 0x10], rax
movabs rsi, 0x7ffffffffffffff0
add rsi, 0x11
mov rax, rsi
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.1400da4f0
int3