Function at 0x14007ebd0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
movaps xmmword [rsp + 0x70], xmm6
mov rbx, qword [rcx + 0x18]
mov rax, rbx
inc rax
je 0x14007ed5e
mov r15, rdx
mov rdi, rcx
mov rsi, qword [rcx + 8]
lea r8, [rsi + 1]
mov rcx, r8
shr rcx, 3
mov r13, r8
and r13, 0xfffffffffffffff8
sub r13, rcx
cmp rsi, 8
cmovb r13, rsi
mov rcx, r13
shr rcx, 1
cmp rax, rcx
jbe 0x14007ec60
inc r13
cmp rax, r13
cmova r13, rax
cmp r13, 8
mov qword [rsp + 0x40], r8
mov qword [rsp + 0x38], r15
jae 0x14007ec8d
mov r12, rbx
mov r15, rdi
xor eax, eax
cmp r13, 4
setae al
lea r14, [rax*4 + 4]
jmp 0x14007eced
mov r14, qword [rdi]
mov rcx, r8
shr rcx, 4
xor eax, eax
test r8b, 0xf
setne al
add rax, rcx
je 0x14007efd0
cmp rax, 1
jne 0x14007ef67
xor ecx, ecx
jmp 0x14007efb8
movabs rax, 0x1ffffffffffffffe
add rax, 2
cmp r13, rax
jae 0x14007ed5e
mov r12, rbx
mov r15, rdi
shl r13, 3
mov r14d, 1
cmp r13, 0xe
jb 0x14007eced
movabs rcx, 0x2492492492492493
mov rax, r13
mul rcx
sub r13, rdx
shr r13, 1
add r13, rdx
shr r13, 2
dec r13
bsr rcx, r13
not ecx
mov r14, 0xffffffffffffffff
shr r14, cl
inc r14
mov ecx, 0x38
mov rax, r14
mul rcx
jo 0x14007ed5e
mov r13, rax
add r13, 0xf
and r13, 0xfffffffffffffff0
lea rbp, [r14 + 0x10]
mov rbx, r13
add rbx, rbp
jb 0x14007ed5e
movabs rax, 0x7ffffffffffffff0
cmp rbx, rax
ja 0x14007ed5e
test rbx, rbx
je 0x14007ed60
movzx eax, byte [0x140228121]
mov rcx, qword [0x140228110]
test rcx, rcx
jne 0x14007ed4c
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x14007ed5e
mov rcx, rax
mov qword [0x140228110], rax
xor edx, edx
mov r8, rbx
call sub.kernel32.dll_HeapAlloc
mov rbx, rax
test rax, rax
jne 0x14007ed65
ud2
mov ebx, 0x10
lea rdi, [r14 - 1]
mov rax, r14
shr rax, 3
mov rcx, r14
and rcx, 0xfffffffffffffff8
sub rcx, rax
cmp r14, 9
cmovb rcx, rdi
mov qword [rsp + 0x48], rcx
add rbx, r13
mov rcx, rbx
mov dl, 0xff
mov r8, rbp
call sub.msvcrt.dll_memset
mov r8, qword [r15]
test r12, r12
je 0x14007ef0d
mov rbp, r12
mov qword [rsp + 0x30], r15
movdqa xmm0, xmmword [r8]
pmovmskb r12d, xmm0
not r12d
mov rax, qword [rsp + 0x38]
movups xmm6, xmmword [rax]
xor r13d, r13d
mov qword [rsp + 0x28], rbp
mov r14, r8
mov qword [rsp + 0x20], r8
jmp 0x14007ee47
lea ecx, [r12 - 1]
and ecx, r12d
dec rbp
shr rax, 0x39
lea r9, [rdx - 0x10]
and r9, rdi
mov byte [rbx + rdx], al
mov byte [r9 + rbx + 0x10], al
not r15
imul rax, r15, 0x38
not rdx
imul rdx, rdx, 0x38
mov r9, qword [r8 + rax + 0x30]
mov qword [rbx + rdx + 0x30], r9
movdqu xmm0, xmmword [r8 + rax]
movdqu xmm1, xmmword [r8 + rax + 0x10]
movdqu xmm2, xmmword [r8 + rax + 0x20]
movdqu xmmword [rbx + rdx + 0x20], xmm2
movdqu xmmword [rbx + rdx + 0x10], xmm1
movdqu xmmword [rbx + rdx], xmm0
mov r12d, ecx
test rbp, rbp
je 0x14007ef01
test r12w, r12w
jne 0x14007ee6f
nop dword [rax]
movdqa xmm0, xmmword [r14 + 0x10]
add r14, 0x10
pmovmskb r12d, xmm0
add r13, 0x10
cmp r12d, 0xffff
je 0x14007ee50
not r12d
tzcnt r15d, r12d
add r15, r13
mov rax, r15
neg rax
imul rax, rax, 0x38
mov rdx, qword [r8 + rax - 0x30]
mov r8, qword [r8 + rax - 0x28]
movaps xmmword [rsp + 0x60], xmm6
lea rcx, [rsp + 0x60]
call fcn.140087f50
mov rcx, rax
and rcx, rdi
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x14007eed7
mov r8d, 0x10
nop word cs:[rax + rax]
add rcx, r8
and rcx, rdi
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x14007eec0
mov r8, qword [rsp + 0x20]
tzcnt edx, edx
add rdx, rcx
and rdx, rdi
cmp byte [rbx + rdx], 0
js 0x14007ede0
movdqa xmm0, xmmword [rbx]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x14007ede0
mov r15, qword [rsp + 0x30]
mov rax, qword [rsp + 0x28]
jmp 0x14007ef0f
xor eax, eax
mov rcx, qword [rsp + 0x48]
sub rcx, rax
mov qword [r15], rbx
mov qword [r15 + 8], rdi
mov qword [r15 + 0x10], rcx
mov qword [r15 + 0x18], rax
test rsi, rsi
je 0x14007f6b1
mov ecx, 0x38
mov rax, qword [rsp + 0x40]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add rsi, rax
cmp rsi, 0xffffffffffffffef
je 0x14007f6b1
sub r8, rax
mov rcx, qword [0x140228110]
xor edx, edx
call sub.kernel32.dll_HeapFree
jmp 0x14007f6b1
movabs rdx, 0x1ffffffffffffffe
and rdx, rax
xor ecx, ecx
movdqa xmm0, xmmword [0x14018e8d0]
nop
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [r14 + rcx]
por xmm1, xmm0
movdqa xmmword [r14 + rcx], xmm1
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [r14 + rcx + 0x10]
por xmm1, xmm0
movdqa xmmword [r14 + rcx + 0x10], xmm1
add rcx, 0x20
add rdx, 0xfffffffffffffffe
jne 0x14007ef80
test al, 1
je 0x14007efd0
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [r14 + rcx]
por xmm0, xmmword [0x14018e8d0]
movdqa xmmword [r14 + rcx], xmm0
cmp r8, 0x10
jae 0x14007efef
lea rcx, [r14 + 0x10]
mov rdx, r14
call sub.msvcrt.dll_memmove
cmp rsi, 0xffffffffffffffff
jne 0x14007effa
xor eax, eax
jmp 0x14007f6aa
movdqu xmm0, xmmword [r14]
movdqu xmmword [r14 + r8], xmm0
mov qword [rsp + 0x50], r13
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rdi
movdqu xmm1, xmmword [r15]
pshufd xmm0, xmm1, 0x44
pxor xmm0, xmmword [0x14018e8e0]
pshufd xmm1, xmm1, 0xee
pxor xmm1, xmmword [0x14018e8f0]
pshufd xmm2, xmm1, 0xee
movq qword [rsp + 0x48], xmm2
movq qword [rsp + 0x40], xmm0
movq qword [rsp + 0x38], xmm1
pshufd xmm2, xmm0, 0xee
movq qword [rsp + 0x58], xmm2
mov r13, r14
xor ebp, ebp
jmp 0x14007f088
shr r8, 0x39
lea rax, [rbp - 0x10]
and rax, rsi
mov byte [r14 + rbp], r8b
mov byte [rax + r14 + 0x10], r8b
lea rax, [rbp + 1]
add r13, 0xffffffffffffffc8
cmp rbp, rsi
mov rbp, rax
je 0x14007f69b
cmp byte [r14 + rbp], 0x80
jne 0x14007f074
imul rcx, rbp, 0xffffffffffffffc8
mov rax, rbp
not rax
imul rdi, rax, 0x38
add rdi, r14
mov rax, rbp
neg rax
add rcx, r14
mov qword [rsp + 0x20], rcx
imul r15, rax, 0x38
add r15, r14
jmp 0x14007f12c
mov rcx, qword [rdi]
mov rdx, qword [rax]
mov qword [rdi], rdx
mov qword [rax], rcx
mov rcx, qword [rdi + 8]
mov rdx, qword [rax + 8]
mov qword [rdi + 8], rdx
mov qword [rax + 8], rcx
mov rcx, qword [rdi + 0x10]
mov rdx, qword [rax + 0x10]
mov qword [rdi + 0x10], rdx
mov qword [rax + 0x10], rcx
mov rcx, qword [rdi + 0x18]
mov rdx, qword [rax + 0x18]
mov qword [rdi + 0x18], rdx
mov qword [rax + 0x18], rcx
mov rcx, qword [rdi + 0x20]
mov rdx, qword [rax + 0x20]
mov qword [rdi + 0x20], rdx
mov qword [rax + 0x20], rcx
mov rcx, qword [rdi + 0x28]
mov rdx, qword [rax + 0x28]
mov qword [rdi + 0x28], rdx
mov qword [rax + 0x28], rcx
mov rcx, qword [rdi + 0x30]
mov rdx, qword [rax + 0x30]
mov qword [rdi + 0x30], rdx
mov qword [rax + 0x30], rcx
mov r12, qword [r15 - 0x30]
mov r9, qword [r15 - 0x28]
mov rcx, r9
and rcx, 0xfffffffffffffff8
je 0x14007f1f0
mov rax, qword [rsp + 0x58]
mov r10, qword [rsp + 0x38]
mov r11, qword [rsp + 0x48]
xor edx, edx
mov r8, qword [rsp + 0x40]
nop word [rax + rax]
add r8, r10
rol r10, 0xd
mov rbx, qword [r12 + rdx]
xor r10, r8
rol r8, 0x20
xor r11, rbx
add rax, r11
rol r11, 0x10
xor r11, rax
add r8, r11
rol r11, 0x15
add rax, r10
rol r10, 0x11
xor r10, rax
rol rax, 0x20
xor r11, r8
xor r8, rbx
add rdx, 8
cmp rdx, rcx
jb 0x14007f160
movq xmm3, r11
movq xmm2, r10
punpcklqdq xmm2, xmm3
movq xmm4, rax
movq xmm3, r8
punpcklqdq xmm3, xmm4
mov r11d, r9d
and r11d, 7
cmp r11d, 4
jb 0x14007f207
mov r10d, dword [r12 + rdx]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, r11
jb 0x14007f218
jmp 0x14007f232
movdqa xmm2, xmm1
movdqa xmm3, xmm0
xor edx, edx
mov r11d, r9d
and r11d, 7
cmp r11d, 4
jae 0x14007f1cc
xor r10d, r10d
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, r11
jae 0x14007f232
lea rcx, [rax + rdx]
movzx r8d, word [r12 + rcx]
lea ecx, [rax*8]
shl r8, cl
or r10, r8
or rax, 2
cmp rax, r11
jae 0x14007f250
add rdx, rax
movzx edx, byte [r12 + rdx]
shl eax, 3
mov ecx, eax
shl rdx, cl
or r10, rdx
jmp 0x14007f259
test r11, r11
je 0x14007f339
lea ecx, [r11*8]
mov r8d, 0xff
shl r8, cl
or r8, r10
cmp r11, 7
jne 0x14007f459
mov eax, 8
sub rax, r11
pshufd xmm4, xmm2, 0xee
movq rcx, xmm4
xor rcx, r8
movq xmm4, rcx
movdqa xmm5, xmm2
punpcklqdq xmm5, xmm4
paddq xmm3, xmm5
movq rcx, xmm3
rol rcx, 0x20
movdqa xmm4, xmm5
psrlq xmm4, 0x30
movdqa xmm6, xmm2
psrlq xmm6, 0x33
shufps xmm6, xmm4, 0xe4
psllq xmm5, 0x10
psllq xmm2, 0xd
shufps xmm2, xmm5, 0xe4
orps xmm2, xmm6
pxor xmm2, xmm3
pshufd xmm3, xmm3, 0xee
movq xmm4, rcx
punpcklqdq xmm3, xmm4
paddq xmm3, xmm2
movdqa xmm4, xmm2
psrlq xmm4, 0x2f
movdqa xmm5, xmm2
psrlq xmm5, 0x2b
movsd xmm5, xmm4
movdqa xmm4, xmm2
psllq xmm4, 0x11
psllq xmm2, 0x15
movsd xmm2, xmm4
orpd xmm2, xmm5
xorpd xmm2, xmm3
movq rcx, xmm3
rol rcx, 0x20
pshufd xmm3, xmm3, 0xee
movq rdx, xmm3
xor rdx, r8
movq xmm4, rcx
movq xmm3, rdx
punpcklqdq xmm3, xmm4
jmp 0x14007f33b
xor eax, eax
mov ecx, 1
sub rcx, rax
mov r12d, ecx
and r12d, 7
and rcx, 0xfffffffffffffff8
cmp rax, rcx
jae 0x14007f410
movq rdx, xmm3
pshufd xmm4, xmm2, 0xee
movq r11, xmm4
movq r10, xmm2
pshufd xmm2, xmm3, 0xee
movq r8, xmm2
nop word cs:[rax + rax]
add rdx, r10
rol r10, 0xd
xor r10, rdx
rol rdx, 0x20
xor r11, 0xff
add r8, r11
rol r11, 0x10
xor r11, r8
add rdx, r11
rol r11, 0x15
add r8, r10
rol r10, 0x11
xor r10, r8
rol r8, 0x20
xor r11, rdx
xor rdx, 0xff
add rax, 8
cmp rax, rcx
jb 0x14007f380
movq xmm3, r11
movq xmm2, r10
punpcklqdq xmm2, xmm3
movq xmm4, r8
movq xmm3, rdx
punpcklqdq xmm3, xmm4
xor eax, eax
cmp r12, 4
setae al
cmp r12d, 4
mov edx, 0
mov ecx, 0xff
cmovae rdx, rcx
shl rax, 2
jmp 0x14007f414
xor edx, edx
xor eax, eax
mov r10, rax
or r10, 1
lea ecx, [rax*8]
mov r8d, 0xff
shl r8, cl
mov rcx, rax
or rcx, 2
cmp r10, r12
mov r10d, 0
cmovae r8, r10
cmovae rcx, rax
or r8, rdx
cmp rcx, r12
jae 0x14007f459
shl ecx, 3
mov eax, 0xff
shl rax, cl
or r8, rax
pshufd xmm4, xmm3, 0xee
movq rax, xmm4
movq rcx, xmm2
pshufd xmm4, xmm2, 0xee
movq rdx, xmm4
shl r9, 0x38
movabs r10, 0x100000000000000
add r9, r10
or r9, r8
paddq xmm2, xmm3
rol rcx, 0xd
movq r8, xmm2
xor rcx, r8
rol r8, 0x20
xor rdx, r9
add rax, rdx
rol rdx, 0x10
xor rdx, rax
add r8, rdx
rol rdx, 0x15
add rax, rcx
rol rcx, 0x11
xor rdx, r8
xor rcx, rax
rol rax, 0x20
xor r8, r9
add r8, rcx
rol rcx, 0xd
xor rcx, r8
rol r8, 0x20
xor rax, 0xff
add rax, rdx
rol rdx, 0x10
xor rdx, rax
add r8, rdx
rol rdx, 0x15
add rax, rcx
rol rcx, 0x11
xor rcx, rax
rol rax, 0x20
xor rdx, r8
add r8, rcx
rol rcx, 0xd
xor rcx, r8
rol r8, 0x20
add rax, rdx
rol rdx, 0x10
xor rdx, rax
add r8, rdx
rol rdx, 0x15
add rax, rcx
rol rcx, 0x11
xor rcx, rax
rol rax, 0x20
xor rdx, r8
add r8, rcx
rol rcx, 0xd
add rax, rdx
rol rdx, 0x10
xor rdx, rax
rol rdx, 0x15
xor rcx, r8
add rax, rcx
rol rcx, 0x11
mov r8, rax
rol r8, 0x20
xor r8, rcx
xor r8, rdx
xor r8, rax
mov rax, rsi
and rax, r8
movdqu xmm2, xmmword [r14 + rax]
pmovmskb ecx, xmm2
mov rdx, rax
test ecx, ecx
jne 0x14007f598
mov r9d, 0x10
mov rdx, rax
nop word [rax + rax]
add rdx, r9
and rdx, rsi
movdqu xmm2, xmmword [r14 + rdx]
pmovmskb ecx, xmm2
add r9, 0x10
test ecx, ecx
je 0x14007f580
tzcnt ecx, ecx
add rcx, rdx
and rcx, rsi
cmp byte [r14 + rcx], 0
js 0x14007f5b6
movdqa xmm2, xmmword [r14]
pmovmskb ecx, xmm2
tzcnt ecx, ecx
mov rdx, rbp
sub rdx, rax
mov r9, rcx
sub r9, rax
xor r9, rdx
and r9, rsi
cmp r9, 0x10
jb 0x14007f060
mov rax, rcx
not rax
imul rax, rax, 0x38
add rax, r14
movzx edx, byte [r14 + rcx]
shr r8, 0x39
lea r9, [rcx - 0x10]
and r9, rsi
mov byte [r14 + rcx], r8b
mov byte [r9 + r14 + 0x10], r8b
cmp dl, 0xff
je 0x14007f660
imul rcx, rcx, 0xffffffffffffffc8
add rcx, r14
cmp rdi, rcx
jae 0x14007f0c0
cmp rax, qword [rsp + 0x20]
jae 0x14007f0c0
mov rax, 0xffffffffffffffc8
nop
movzx edx, byte [r13 + rax]
movzx r8d, byte [rcx + rax]
mov byte [r13 + rax], r8b
mov byte [rcx + rax], dl
movzx edx, byte [r13 + rax + 1]
movzx r8d, byte [rcx + rax + 1]
mov byte [r13 + rax + 1], r8b
mov byte [rcx + rax + 1], dl
add rax, 2
jne 0x14007f620
jmp 0x14007f12c
lea rcx, [rbp - 0x10]
and rcx, rsi
mov byte [r14 + rbp], 0xff
mov byte [rcx + r14 + 0x10], 0xff
mov rcx, qword [rdi + 0x30]
mov qword [rax + 0x30], rcx
movdqu xmm2, xmmword [rdi]
movdqu xmm3, xmmword [rdi + 0x10]
movdqu xmm4, xmmword [rdi + 0x20]
movdqu xmmword [rax + 0x20], xmm4
movdqu xmmword [rax + 0x10], xmm3
movdqu xmmword [rax], xmm2
jmp 0x14007f074
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x28]
mov rax, qword [rsp + 0x50]
sub rax, rbx
mov qword [rdi + 0x10], rax
movabs rax, 0x7ffffffffffffff0
add rax, 0x11
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret