Function at 0x399963222
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x38
cmp bl, r14b
jne 0x399963235
push r13
subps xmm15, xmm4
pop r13
jmp 0x39996323d
push r8
pslld mm3, 0x23
pop r8
push r10
ror r10, 0xe
pop r10
call sym.FillExecutable.dll_DrawPrivilegeService
push r13
emms
nop
addps xmm4, xmm12
push r15
nop
sar r15d, 4
push r14
mov r13w, r15w
pop r14
test r13b, r15b
xchg r15, r13
pop r15
nop
movups xmm11, xmm7
inc r13
pop r13
mov ecx, 0xc
call sub.msvcrt.dll_malloc
mov rcx, rax
cmp rbx, r11
je 0x39996339b
push r11
mulps xmm4, xmm9
push rdx
psraw mm7, 0x45
push r9
nop
push rbx
psrld mm6, 0x34
push r8
psrlw mm3, 0x64
pop r8
test r11b, dl
pop rbx
emms
pop r9
orps xmm1, xmm4
pop rdx
ror r11, 7
pop r11
cmp r12d, 0x2f
je 0x3999633a6
push rax
nop
push r11
movlhps xmm2, xmm11
inc eax
push r9
xorps xmm2, xmm5
psrlq mm6, 0x2d
andnps xmm14, xmm3
pop r9
paddsw mm3, mm4
nop
pop r11
nop
pop rax
cmp r14, rcx
je 0x3999633d2
push r15
emms
mulss xmm6, xmm10
push rdx
inc edx
pop rdx
nop
inc r15
pop r15
cmp bl, r10b
je 0x399963419
push r12
pand mm5, mm1
push rax
psrad mm1, 0x6b
pslld mm2, 0x12
push r11
neg r12
emms
shr r11d, 2
push r10
cmp r10, rax
nop
xor eax, r10d
rcpss xmm9, xmm15
pop r10
nop
neg al
ror r12b, 0x12
pop r11
nop
sbb rax, 5
pop rax
emms
pop r12
cmp r12w, 0x4f
je 0x399963462
cmp bl, r8b
jne 0x399963365
push r13
nop
push r14
nop
dec r14d
pop r14
maxps xmm1, xmm6
pop r13
jmp 0x399963376
push r8
emms
push r12
sar r8, 0x14
nop
pop r12
emms
pop r8
push r15
psrad mm6, 0x16
push r11
punpckhwd mm2, mm4
emms
pop r11
psrlw mm4, 0x52
pop r15
cmp bx, r8w
je 0x39996347a
jne 0x399963492
push r15
emms
pop r15
jmp 0x399963492
push r13
pmaxub mm5, mm3
nop
psllq mm1, 0x34
push rcx
nop
punpckhbw mm7, mm0
push rax
nop
pop rax
nop
maxss xmm14, xmm11
pop rcx
sbb r13w, 0x15
inc r13
sar r13d, 0xd
pop r13
jmp 0x399963492
push r14
emms
push r10
psubusw mm1, mm6
psubusw mm2, mm4
push r9
pcmpeqb mm2, mm3
xchg r10d, r9d
mov r10w, r14w
push r11
xadd r9d, r11d
psrlq mm7, 0x3e
emms
por mm1, mm7
pop r11
psrad mm5, 0x5c
psubsb mm4, mm6
orps xmm2, xmm15
pop r9
mulps xmm0, xmm8
adc r14d, r10d
pop r10
sbb r14, 4
pop r14
jmp 0x399963492
push r13
psllq mm7, 0x50
sub r13b, 8
nop
subps xmm14, xmm3
push r15
sbb r13d, 0x17
test r13, r15
movaps xmm1, xmm0
push rax
emms
emms
push r9
punpckhbw mm5, mm6
pop r9
psrld mm2, 0x47
emms
pop rax
emms
nop
movlhps xmm8, xmm1
pop r15
psrlq mm6, 0x51
emms
shl r13, 0xb
movhlps xmm7, xmm13
pop r13
jmp 0x399963492
cmp bl, dl
jne 0x39996346d
push rcx
pand mm2, mm7
pop rcx
jmp 0x399963472
push rbx
rol bl, 0xa
pop rbx
push r8
emms
pop r8
jmp 0x399963492
push r14
mov r14, 3
push r15
push r9
pop r9
pop r15
dec r14
jne 0x399963483
pop r14
push r15
inc r15
push r10
nop
add r15, r10
push r14
rol r10b, 0x12
emms
sub r10b, r14b
push r12
shl r15, 0x11
movlhps xmm8, xmm13
nop
ror r14d, 0xb
push rax
test ax, r12w
punpckhwd mm1, mm4
adc eax, r12d
test r10, r14
not r12d
pop rax
ror r10b, 0x12
psrad mm5, 0x2f
nop
addps xmm4, xmm9
pop r12
comiss xmm1, xmm8
adc r15d, r14d
inc r10d
pop r14
psrlw mm4, 1
emms
pop r10
not r15
pop r15
mov edx, 0x48
call sub.msvcrt.dll_realloc
mov rcx, rax
cmp bl, dl
jne 0x399963509
push rax
pmullw mm3, mm6
pop rax
jmp 0x399963511
push r14
shl r14d, 0xa
pop r14
push rcx
paddb mm1, mm6
pop rcx
call sub.msvcrt.dll_free
cmp bl, 0x21
jne 0x3999635ac
push r9
mov r9, 3
push rcx
push r8
pop r8
pop rcx
dec r9
jne 0x39996352d
pop r9
jmp 0x3999635d3
push r15
nop
emms
nop
psraw mm7, 0x25
push r8
rol r8, 0x11
psrlw mm5, 0x68
nop
psrld mm1, 8
pop r8
mov r15b, 5
paddusb mm6, mm0
punpckhbw mm2, mm6
nop
pop r15
push r13
packsswb mm1, mm3
push r8
shl r13, 0xf
psraw mm7, 0x40
push rax
emms
emms
punpckhwd mm4, mm6
push rdx
emms
not r13b
emms
nop
push r10
test dx, r13w
shl dl, 0x11
pcmpgtw mm3, mm0
maxps xmm12, xmm10
emms
pop r10
test ax, dx
test r13d, edx
neg r13d
xor r8w, ax
pop rdx
packsswb mm3, mm1
emms
xor al, r13b
pop rax
shl r8, 0x14
psllq mm3, 0x17
pop r8
shr r13d, 3
pop r13
push rcx
mov rcx, 2
push r8
emms
push r11
orps xmm4, xmm8
por mm4, mm2
push r10
pcmpgtb mm3, mm0
nop
psubusw mm7, mm0
pop r10
mov r11w, 0xa
emms
pop r11
inc r8
pop r8
dec rcx
jne 0x399963636
pop rcx
call fcn.3999785b5
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x20]
call fcn.39996cbad
push r9
psrld mm5, 0x6b
psraw mm0, 0x1b
not r9
emms
push rcx
sbb ecx, r9d
nop
not cx
inc ecx
pop rcx
punpcklbw mm4, mm1
rol r9, 0x11
emms
nop
pop r9
mov edx, 1
mov ecx, 3
call sub.msvcrt.dll_calloc
mov rcx, rax
push r10
pmullw mm4, mm1
pop r10
mov edx, 0x12
call sub.msvcrt.dll_realloc
mov rcx, rax
xor eax, eax
push rdx
nop
push r10
inc r10d
push r11
psrad mm0, 0x12
pop r11
emms
pop r10
pmullw mm5, mm4
pop rdx
xor byte [rcx + rax], 0x98
push r11
sub r11, 0x13
nop
push rax
emms
subss xmm3, xmm0
push r14
sar r14, 0xd
nop
push rcx
pand mm3, mm2
xchg r11d, r14d
pop rcx
psllq mm4, 0x28
pcmpeqw mm2, mm6
pop r14
nop
inc r11d
pop rax
not r11w
xorps xmm7, xmm5
pop r11
inc rax
cmp rax, 3
jne 0x3999636c4
call sub.msvcrt.dll_free
cmp rbx, r11
jne 0x399963734
push r14
mov r14b, 0xb
pop r14
jmp 0x39996373c
push r8
psraw mm6, 0x66
pop r8
push r12
rol r12d, 0xf
pop r12
imul rax, qword [rsp + 0x20], 0x3e8
cqo
idiv qword [rsp + 0x28]
push r9
rol r9b, 0x17
psraw mm0, 0x69
sar r9w, 0xf
emms
emms
push r12
orps xmm7, xmm8
movups xmm2, xmm3
nop
rcl r9w, 8
push rdx
subps xmm15, xmm6
punpcklbw mm4, mm3
shl r9d, 2
push rcx
xorps xmm11, xmm15
addss xmm13, xmm12
push r13
nop
pop r13
nop
psrld mm6, 0x2e
pop rcx
emms
not r9w
emms
pop rdx
nop
pmaxsw mm6, mm5
psrad mm1, 0x22
rcpps xmm15, xmm6
pop r12
psrlw mm7, 0x58
nop
psllq mm7, 0x6a
psrlq mm7, 0x2d
nop
pop r9
add rsp, 0x38
ret