Function at 0x1402434a0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov rdi, r8
mov rbx, rdx
mov qword [rsp + 0x20], rcx
mov r15d, 0x12
xor r13d, r13d
lea r14, [0x14037d5f8]
mov r12d, 0x12
jmp 0x1402434ec
mov r12, r15
sub r15, r13
jbe 0x140243728
shr r15, 1
add r15, r13
mov rsi, r15
shl rsi, 5
mov rcx, qword [rsi + r14]
mov r8, qword [rsi + r14 + 8]
mov rbp, r8
sub rbp, rdi
cmovae r8, rdi
mov rdx, rbx
call sub.msvcrt.dll_memcmp
cdqe
test eax, eax
cmovne rbp, rax
xor eax, eax
test rbp, rbp
setne al
mov ecx, 0xff
cmovs eax, ecx
cmp al, 1
je 0x1402434e0
movzx eax, al
cmp eax, 0xff
jne 0x14024354d
inc r15
mov r13, r15
mov r15, r12
sub r15, r13
ja 0x1402434ec
jmp 0x140243728
mov rbx, qword [rsi + r14 + 0x18]
test rbx, rbx
je 0x1402435af
mov r14, qword [rsi + r14 + 0x10]
lea rdi, [rbx*8]
movzx eax, byte [0x1403f6a90]
mov rcx, qword [0x1403f6548]
test rcx, rcx
jne 0x14024358f
call sub.kernel32.dll_GetProcessHeap
test rax, rax
je 0x140243747
mov rcx, rax
mov qword [0x1403f6548], rax
xor edx, edx
mov r8, rdi
call sub.kernel32.dll_HeapAlloc
test rax, rax
je 0x140243747
cmp rbx, 0x10
jae 0x1402435b9
xor ecx, ecx
jmp 0x14024365f
mov eax, 4
jmp 0x1402436eb
lea rdx, [rax + rbx*8]
add rdx, 0xfffffffffffffff8
xor ecx, ecx
cmp rdx, rax
jb 0x14024365f
lea rdx, [rax + rbx*8]
add rdx, 0xfffffffffffffffc
mov r8, rax
add r8, 4
cmp rdx, r8
jb 0x14024365f
lea rdx, [rbx - 1]
shr rdx, 0x3d
jne 0x14024365f
mov rcx, rbx
and rcx, 0xfffffffffffffffe
xor edx, edx
movdqa xmm0, xmmword [0x14030ce70]
nop
movdqu xmm1, xmmword [r14 + rdx*8]
pshufd xmm2, xmm1, 0xe8
pshufd xmm1, xmm1, 0xed
movdqa xmm3, xmm2
pxor xmm3, xmm0
movdqa xmm4, xmm1
pxor xmm4, xmm0
pcmpgtd xmm4, xmm3
movdqa xmm3, xmm4
pandn xmm3, xmm1
movdqa xmm5, xmm4
pandn xmm5, xmm2
pand xmm2, xmm4
por xmm2, xmm3
pand xmm4, xmm1
por xmm4, xmm5
punpckldq xmm2, xmm4
movdqu xmmword [rax + rdx*8], xmm2
add rdx, 2
cmp rcx, rdx
jne 0x140243600
cmp rbx, rcx
je 0x1402436eb
mov rdx, rcx
or rdx, 1
test bl, 1
je 0x14024368e
mov r8d, dword [r14 + rcx*8]
mov r9d, dword [r14 + rcx*8 + 4]
cmp r8d, r9d
mov r10d, r9d
cmovb r10d, r8d
cmova r9d, r8d
mov dword [rax + rcx*8], r10d
mov dword [rax + rcx*8 + 4], r9d
mov rcx, rdx
cmp rbx, rdx
je 0x1402436eb
nop word cs:[rax + rax]
mov edx, dword [r14 + rcx*8]
mov r8d, dword [r14 + rcx*8 + 4]
cmp edx, r8d
mov r9d, r8d
cmovb r9d, edx
cmova r8d, edx
mov dword [rax + rcx*8], r9d
mov dword [rax + rcx*8 + 4], r8d
mov edx, dword [r14 + rcx*8 + 8]
mov r8d, dword [r14 + rcx*8 + 0xc]
cmp edx, r8d
mov r9d, r8d
cmovb r9d, edx
cmova r8d, edx
mov dword [rax + rcx*8 + 8], r9d
mov dword [rax + rcx*8 + 0xc], r8d
add rcx, 2
cmp rbx, rcx
jne 0x1402436a0
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x38], rbx
lea rcx, [rsp + 0x28]
call fcn.14023e9e0
mov rax, qword [rsp + 0x28]
movups xmm0, xmmword [rsp + 0x30]
movaps xmmword [rsp + 0x40], xmm0
test rax, rax
je 0x140243728
movaps xmm0, xmmword [rsp + 0x40]
mov rcx, qword [rsp + 0x20]
movups xmmword [rcx + 8], xmm0
jmp 0x140243733
mov rcx, qword [rsp + 0x20]
mov byte [rcx + 8], 1
xor eax, eax
mov qword [rcx], rax
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ecx, 4
mov rdx, rdi
call fcn.1400eb190
ud2