Function at 0x1400f3020
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1403debe8]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rax, 0xffffffffffffffff
mov qword [rbp - 0x20], 0
mov ebx, r8d
mov r15, rcx
mov r8, rax
inc r8
cmp byte [rdx + r8], 0
jne 0x1400f3062
cmp r8, 8
jae 0x1400f3090
lfence
inc rax
cmp byte [rdx + rax], 0
jne 0x1400f3075
movsxd r8, eax
test eax, eax
jle 0x1400f30c7
lea rcx, [rbp - 0x20]
call fcn.140244220
jmp 0x1400f30c7
movzx ecx, byte [rdx + 3]
movzx eax, byte [rdx]
mov byte [rbp - 0x1d], cl
movzx ecx, byte [rdx + 4]
mov byte [rbp - 0x1c], cl
movzx ecx, byte [rdx + 5]
mov byte [rbp - 0x1b], cl
movzx ecx, byte [rdx + 6]
mov byte [rbp - 0x20], al
movzx eax, byte [rdx + 1]
mov byte [rbp - 0x1a], cl
movzx ecx, byte [rdx + 7]
mov byte [rbp - 0x1f], al
movzx eax, byte [rdx + 2]
mov byte [rbp - 0x19], cl
mov byte [rbp - 0x1e], al
lea rcx, [rbp - 0x20]
call fcn.1400ff120
mov eax, ebx
xor r14d, r14d
cdq
mov dword [rbp - 0x5c], r14d
and edx, 7
add eax, edx
mov ecx, eax
and eax, 7
sar ecx, 3
sub eax, edx
test eax, eax
movsxd rdi, eax
lea esi, [rcx + 1]
cmovle esi, ecx
lea ecx, [rsi*8]
movsxd rbx, ecx
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
lea r8, [rbx + 1]
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
xor ecx, ecx
movsxd rdx, esi
mov qword [rbp - 0x38], rax
mov r13, rax
mov dword [rbp - 0x58], ecx
mov rax, rdi
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x40], rdx
test esi, esi
jle 0x1400f332a
mov qword [rsp + 0xb0], r12
lea edx, [rsi - 1]
xor r12d, r12d
mov dword [rbp - 0x20], edx
lea rbx, [r15 + 2]
mov qword [rbp - 0x50], r12
mov qword [rbp - 0x48], rbx
cmp ecx, edx
jne 0x1400f3180
test rax, rax
je 0x1400f3180
mov qword [rbp - 0x18], 0
jle 0x1400f31c0
mov r8, rax
lea rdx, [rbx - 2]
lea rcx, [rbp - 0x18]
call fcn.140244220
jmp 0x1400f31c0
movzx eax, byte [rbx - 2]
mov byte [rbp - 0x18], al
movzx eax, byte [rbx - 1]
mov byte [rbp - 0x17], al
movzx eax, byte [rbx]
mov byte [rbp - 0x16], al
movzx eax, byte [rbx + 1]
mov byte [rbp - 0x15], al
movzx eax, byte [rbx + 2]
mov byte [rbp - 0x14], al
movzx eax, byte [rbx + 3]
mov byte [rbp - 0x13], al
movzx eax, byte [rbx + 4]
mov byte [rbp - 0x12], al
movzx eax, byte [rbx + 5]
mov byte [rbp - 0x11], al
nop word [rax + rax]
mov rax, qword [rbp - 0x18]
lea rcx, [rbp - 0x28]
mov qword [rbp - 0x28], rax
call fcn.1400feb00
movzx eax, byte [rbp - 0x21]
lea r12, [0x1403e1f6a]
movzx ecx, byte [rbp - 0x22]
mov r13d, SafeArrayLock
movzx edx, byte [rbp - 0x23]
movzx r8d, byte [rbp - 0x24]
movzx ebx, byte [rbp - 0x25]
nop dword [rax]
nop word [rax + rax]
movzx edi, byte [rbp - 0x28]
movzx r15d, bl
movzx esi, byte [rbp - 0x27]
movzx ebx, al
movzx r14d, byte [rbp - 0x26]
mov byte [rbp - 0x28], r8b
lea r8, [rbp - 0x60]
mov byte [rbp - 0x27], dl
mov rdx, r12
mov byte [rbp - 0x26], cl
lea rcx, [rbp - 0x28]
mov byte [rbp - 0x25], al
call fcn.1400fc3c0
movzx r8d, byte [rbp - 0x60]
sub r12, 6
movzx edx, byte [rbp - 0x5f]
xor r8b, dil
movzx ecx, byte [rbp - 0x5e]
xor dl, sil
movzx eax, byte [rbp - 0x5d]
xor cl, r14b
xor al, r15b
mov byte [rbp - 0x24], r8b
sub r13d, 1
mov byte [rbp - 0x23], dl
mov byte [rbp - 0x22], cl
mov byte [rbp - 0x21], al
jns 0x1400f3200
movzx r9d, byte [rbp - 0x28]
mov byte [rbp - 0x24], r9b
movzx r9d, byte [rbp - 0x27]
mov byte [rbp - 0x23], r9b
movzx r9d, byte [rbp - 0x26]
mov byte [rbp - 0x26], cl
lea rcx, [rbp - 0x28]
mov byte [rbp - 0x22], r9b
mov byte [rbp - 0x21], bl
mov byte [rbp - 0x28], r8b
mov byte [rbp - 0x27], dl
mov byte [rbp - 0x25], al
call fcn.1400f8e10
mov r12, qword [rbp - 0x50]
mov r13, qword [rbp - 0x38]
movzx eax, byte [rbp - 0x28]
mov r14d, dword [rbp - 0x5c]
mov ecx, dword [rbp - 0x58]
add r14d, 8
mov rbx, qword [rbp - 0x48]
inc ecx
mov edx, dword [rbp - 0x20]
add rbx, 8
mov byte [r12 + r13], al
movzx eax, byte [rbp - 0x27]
mov byte [r12 + r13 + 1], al
movzx eax, byte [rbp - 0x26]
mov byte [r12 + r13 + 2], al
movzx eax, byte [rbp - 0x25]
mov byte [r12 + r13 + 3], al
movzx eax, byte [rbp - 0x24]
mov byte [r12 + r13 + 4], al
movzx eax, byte [rbp - 0x23]
mov byte [r12 + r13 + 5], al
movzx eax, byte [rbp - 0x22]
mov byte [r12 + r13 + 6], al
movzx eax, byte [rbp - 0x21]
mov byte [r12 + r13 + 7], al
add r12, 8
sub qword [rbp - 0x40], 1
mov rax, qword [rbp - 0x30]
mov dword [rbp - 0x5c], r14d
mov qword [rbp - 0x50], r12
mov dword [rbp - 0x58], ecx
mov qword [rbp - 0x48], rbx
jne 0x1400f3152
mov r12, qword [rsp + 0xb0]
movsxd rax, r14d
mov byte [rax + r13], 0
mov rax, r13
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14020c3e0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret