Function at 0x1405624b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x150]
sub rsp, 0x250
mov rax, qword [0x1406dc5c0]
xor rax, rsp
mov qword [rbp + 0x140], rax
mov r12, r8
mov r15, rcx
xor r13d, r13d
mov dword [rsp + 0x20], r13d
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x30]
call fcn.14063d484
mov qword [rbp - 0x50], r13
movdqa xmm0, xmmword [0x1406c10d0]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], r13b
lea r8d, [r13 + 6]
lea rdx, str.DF.log
lea rcx, [rbp - 0x50]
call fcn.14054ed20
nop
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x30]
call fcn.1405595f0
nop
lea rcx, [rbp - 0x50]
call fcn.14054ecc0
call fcn.1405e42e0
mov r14, rax
test rax, rax
jne 0x140562554
xor bl, bl
jmp 0x140562a61
mov qword [rsp + 0x48], r13
movdqa xmm0, xmmword [0x1406c10b0]
movdqu xmmword [rsp + 0x58], xmm0
mov word [rsp + 0x48], r13w
mov dword [rsp + 0x20], 1
lea rcx, [rsp + 0x48]
call fcn.14055f570
test eax, eax
jne 0x140562ad5
lea rdx, [rsp + 0x48]
cmp qword [rsp + 0x60], 8
cmovae rdx, qword [rsp + 0x48]
mov rsi, 0xffffffffffffffff
mov r8, rsi
inc r8
cmp word [rdx + r8*2], 0
jne 0x1405625a2
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x78], r13
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], r13w
lea rcx, [rsp + 0x68]
call fcn.14055bc50
mov dword [rsp + 0x20], 7
call fcn.14063b78c
lea rcx, str.Logs
mov qword [rbp - 0x70], rcx
mov qword [rbp - 0x68], 4
lea r8, [rbp - 0x70]
mov edx, eax
lea rcx, [rbp - 0x50]
call fcn.140558a30
mov dword [rsp + 0x20], Ordinal_33
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x68]
call fcn.140558cd0
mov rbx, rax
lea rcx, [rbp - 0x50]
call fcn.14055bbe0
mov rax, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x14056262e
mov rbx, qword [rbx]
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rax
call fcn.14063b78c
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
lea r8, [rbp - 0x70]
mov edx, eax
lea rcx, [rbp - 0x10]
call fcn.140567410
nop
lea rcx, [rsp + 0x68]
call fcn.14055bbe0
nop
lea rcx, [rsp + 0x48]
call fcn.14055bbe0
mov rdi, qword [rbp]
lea rbx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rbx, qword [rbp - 0x10]
call fcn.14063b78c
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rdi
lea r8, [rbp - 0x70]
mov edx, eax
lea rcx, [rsp + 0x28]
call fcn.140558a30
nop
lea rcx, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rcx, qword [rsp + 0x28]
call fcn.14063b9ec
shr rax, 0x20
test eax, eax
jne 0x140562ac1
lea rcx, [rsp + 0x28]
call fcn.14055bbe0
mov rbx, rsi
nop dword [rax + rax]
inc rbx
cmp byte [r15 + rbx], 0
jne 0x1405626d0
call fcn.14063b78c
mov qword [rbp - 0x70], r15
mov qword [rbp - 0x68], rbx
lea r8, [rbp - 0x70]
mov edx, eax
lea rcx, [rbp - 0x50]
call fcn.140558a30
nop
lea rcx, [rbp - 0x50]
cmp qword [rbp - 0x38], 8
cmovae rcx, qword [rbp - 0x50]
mov rax, qword [rbp - 0x40]
lea rbx, [rcx + rax*2]
mov r11, rbx
mov rdx, rbx
call fcn.140558b70
cmp rax, rbx
je 0x14056274d
movzx ecx, word [rax]
cmp cx, 0x5c
je 0x14056272c
cmp cx, 0x2f
jne 0x140562732
add rax, 2
jmp 0x140562718
lea rdx, [r11 - 2]
movzx ecx, word [rdx]
cmp cx, 0x5c
je 0x14056274d
cmp cx, 0x2f
je 0x14056274d
mov r11, rdx
cmp rax, rdx
jne 0x140562732
sub rbx, r11
sar rbx, 1
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x40], 7
mov word [rsp + 0x28], r13w
mov r8, rbx
mov rdx, r11
lea rcx, [rsp + 0x28]
call fcn.14055bc50
nop
lea rax, [rsp + 0x28]
cmp qword [rsp + 0x40], 8
cmovae rax, qword [rsp + 0x28]
mov qword [rbp - 0x70], rax
mov rax, qword [rsp + 0x38]
mov qword [rbp - 0x68], rax
call fcn.14063b78c
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
lea r8, [rbp - 0x70]
mov edx, eax
lea rcx, [rbp + 0x10]
call fcn.140567410
nop
lea rcx, [rsp + 0x28]
call fcn.14055bbe0
nop
lea rcx, [rbp - 0x50]
call fcn.14055bbe0
mov rdi, qword [rbp]
lea rbx, [rbp - 0x10]
cmp qword [rbp + 8], 0x10
cmovae rbx, qword [rbp - 0x10]
call fcn.14063b78c
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rdi
lea r8, [rbp - 0x70]
mov edx, eax
lea rcx, [rsp + 0x48]
call fcn.140558a30
nop
mov rdi, qword [rbp + 0x20]
lea rbx, [rbp + 0x10]
cmp qword [rbp + 0x28], 0x10
cmovae rbx, qword [rbp + 0x10]
call fcn.14063b78c
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rdi
lea r8, [rbp - 0x70]
mov edx, eax
lea rcx, [rbp - 0x50]
call fcn.140558a30
nop
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x48]
call fcn.140558cd0
mov rbx, rax
lea rcx, [rbp - 0x50]
call fcn.14055bbe0
mov rax, qword [rbx + 0x10]
cmp qword [rbx + 0x18], 8
jb 0x140562854
mov rbx, qword [rbx]
mov qword [rbp - 0x70], rbx
mov qword [rbp - 0x68], rax
call fcn.14063b78c
movaps xmm0, xmmword [rbp - 0x70]
movdqa xmmword [rbp - 0x70], xmm0
lea r8, [rbp - 0x70]
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.140567410
nop
lea rcx, [rsp + 0x48]
call fcn.14055bbe0
lea rcx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rcx, qword [rbp - 0x30]
lea rdx, [0x140678970]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rbx, rax
mov rcx, r14
test rax, rax
jne 0x1405629a8
call fcn.1405e42c0
movdqa xmm0, xmmword [0x1406c1f20]
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x57c
mov eax, dword [rcx + rdi]
mov ebx, 0x588
test al, 1
jne 0x140562919
or eax, 1
mov dword [rcx + rdi], eax
lea rax, [rbx + rdi]
mov byte [rax + 0x11], 1
lea rcx, [rax + 0x10]
lea rdx, [rbp - 0x60]
cmp rax, rdx
ja 0x140562905
lea rdx, [rbp - 0x70]
cmp rcx, rdx
jb 0x140562905
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0xa7
jmp 0x14056290c
movups xmmword [rax], xmm0
mov byte [rax + 0x10], 0xa7
lea rcx, [0x140643510]
call fcn.14063c804
nop
lea r9, [rbx + rdi]
cmp byte [r9 + 0x11], 0
je 0x140562952
mov rdx, r13
movabs r8, 0xd63bd2bbbbba1a7
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r8
shr rax, cl
xor byte [rdx + r9], al
inc rdx
cmp rdx, 0x11
jb 0x140562931
mov byte [r9 + 0x11], 0
mov qword [rbp - 0x50], r13
movdqa xmm0, xmmword [0x1406c10d0]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x50], 0
nop word [rax + rax]
inc rsi
cmp byte [r9 + rsi], 0
jne 0x140562970
mov r8, rsi
mov rdx, r9
lea rcx, [rbp - 0x50]
call fcn.14054ed20
nop
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x30]
call fcn.140559aa0
nop
lea rcx, [rbp - 0x50]
call fcn.14054ecc0
xor bl, bl
jmp 0x140562a43
xor r8d, r8d
lea edx, [r8 + 0x40]
call fcn.1405e9430
xor r8d, r8d
lea edx, [r8 + 0x51]
mov rcx, r14
call fcn.1405e9430
mov r8, r15
mov edx, 0x2712
mov rcx, r14
call fcn.1405e9430
lea r8, [0x140562350]
mov edx, 0x4e2b
mov rcx, r14
call fcn.1405e9430
mov r8, rbx
mov edx, 0x2711
mov rcx, r14
call fcn.1405e9430
mov rcx, r14
call fcn.1405e4350
mov edi, eax
mov rcx, rbx
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, r14
call fcn.1405e42c0
lea rax, [rbp - 0x30]
cmp r12, rax
je 0x140562a35
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0x10
cmovae rdx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x20]
mov rcx, r12
call fcn.14054ed20
lea rcx, [rbp - 0x30]
call fcn.140562360
test edi, edi
sete bl
lea rcx, [rbp - 0x30]
call fcn.14054ecc0
nop
lea rcx, [rbp + 0x10]
call fcn.14054ecc0
nop
lea rcx, [rbp - 0x10]
call fcn.14054ecc0
nop
lea rcx, [rbp + 0x38]
call fcn.14055bb30
test rax, rax
jne 0x140562a8a
mov rcx, qword [rbp + 0x30]
movsxd rdx, dword [rcx + 4]
lea rcx, [rbp + 0x30]
add rcx, rdx
xor r8d, r8d
lea edx, [rax + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rcx, [rbp + 0x30]
call fcn.140559990
nop
movzx eax, bl
mov rcx, qword [rbp + 0x140]
xor rcx, rsp
call fcn.14063c0a0
mov rbx, qword [rsp + 0x298]
add rsp, 0x250
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea r8, [rsp + 0x28]
mov edx, eax
lea rcx, str.create_directory
call fcn.1405593b0
nop
mov edx, eax
lea rcx, str.current_path__
call fcn.14055e570
int3