Function at 0x1400a8d40
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
mov rax, qword [rcx + 0x18]
mov qword [rsp + 0x30], rax
add rdx, rax
jb 0x1400a9668
mov r14, r8
mov rbp, qword [rcx + 8]
lea rsi, [rbp + 1]
mov rax, rsi
shr rax, 3
mov r8, rsi
and r8, 0xfffffffffffffff8
sub r8, rax
cmp rbp, 8
cmovb r8, rbp
mov rax, r8
shr rax, 1
cmp rdx, rax
mov qword [rsp + 0x60], rcx
jbe 0x1400a8dbc
inc r8
cmp rdx, r8
cmova r8, rdx
cmp r8, 8
jae 0x1400a8dee
xor eax, eax
cmp r8, 4
setae al
lea r15, [rax*4 + 4]
jmp 0x1400a8e51
mov qword [rsp + 0x68], r8
mov rbx, qword [rcx]
mov rcx, rsi
shr rcx, 4
xor eax, eax
test sil, 0xf
setne al
add rax, rcx
je 0x1400a911a
cmp rax, 1
jne 0x1400a90b1
xor ecx, ecx
jmp 0x1400a9104
mov rax, r8
shr rax, 0x3d
jne 0x1400a9668
shl r8, 3
mov r15d, 1
cmp r8, 0xe
jb 0x1400a8e51
movabs rcx, 0x2492492492492493
mov rax, r8
mul rcx
sub r8, rdx
shr r8, 1
add r8, rdx
shr r8, 2
dec r8
bsr rcx, r8
not ecx
mov r15, 0xffffffffffffffff
shr r15, cl
movabs rax, 0x7fffffffffffffe
cmp r15, rax
ja 0x1400a9668
inc r15
mov r13, r15
shl r13, 5
lea rbx, [r15 + 0x10]
mov r12, r13
add r12, rbx
jb 0x1400a9668
movabs rax, 0x7ffffffffffffff1
cmp r12, rax
jae 0x1400a9668
test r12, r12
je 0x1400a8ec5
movzx eax, byte [0x1400f92c0]
mov rcx, qword [0x1400f91f8]
test rcx, rcx
jne 0x1400a8ea8
call qword [sym.imp.kernel32.dll_GetProcessHeap]
test rax, rax
je 0x1400a8ebb
mov rcx, rax
mov qword [0x1400f91f8], rax
xor edx, edx
mov r8, r12
call qword [sym.imp.kernel32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x1400a8eca
mov rcx, r12
call fcn.1400515d0
ud2
mov edi, 0x10
mov qword [rsp + 0x40], rsi
lea rsi, [r15 - 1]
mov rax, r15
shr rax, 3
mov rcx, r15
and rcx, 0xfffffffffffffff8
sub rcx, rax
cmp r15, 9
cmovb rcx, rsi
mov qword [rsp + 0x38], rcx
add rdi, r13
mov rcx, rdi
mov dl, 0xff
mov r8, rbx
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rsp + 0x60]
mov rax, qword [rax]
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x30], 0
je 0x1400a905c
mov rbx, qword [rsp + 0x28]
movdqa xmm0, xmmword [rbx]
pmovmskb r15d, xmm0
not r15d
lea rax, [rbx - 0x20]
mov qword [rsp + 0x58], rax
mov rax, qword [r14]
mov qword [rsp + 0x50], rax
mov rax, qword [r14 + 8]
mov qword [rsp + 0x48], rax
xor r13d, r13d
mov r14, qword [rsp + 0x30]
jmp 0x1400a8fa4
lea ecx, [r15 - 1]
and ecx, r15d
dec r14
shr rax, 0x39
lea r8, [rdx - 0x10]
and r8, rsi
mov byte [rdi + rdx], al
mov byte [r8 + rdi + 0x10], al
not r12
shl r12, 5
not rdx
shl rdx, 5
mov rax, qword [rsp + 0x28]
movdqu xmm0, xmmword [rax + r12]
movdqu xmm1, xmmword [rax + r12 + 0x10]
movdqu xmmword [rdi + rdx + 0x10], xmm1
movdqu xmmword [rdi + rdx], xmm0
mov r15d, ecx
test r14, r14
je 0x1400a905c
test r15w, r15w
jne 0x1400a8fce
nop word [rax + rax]
movdqa xmm0, xmmword [rbx + 0x10]
add rbx, 0x10
pmovmskb r15d, xmm0
add r13, 0x10
cmp r15d, 0xffff
je 0x1400a8fb0
not r15d
tzcnt r12d, r15d
add r12, r13
mov rax, r12
shl rax, 5
mov rcx, qword [rsp + 0x58]
sub rcx, rax
mov r8, qword [rcx]
mov r9, qword [rcx + 8]
mov rcx, qword [rsp + 0x50]
mov rdx, qword [rsp + 0x48]
call fcn.14000cc30
mov rcx, rax
and rcx, rsi
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x1400a9037
mov r8d, 0x10
nop word cs:[rax + rax]
add rcx, r8
and rcx, rsi
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x1400a9020
tzcnt edx, edx
add rdx, rcx
and rdx, rsi
cmp byte [rdi + rdx], 0
js 0x1400a8f50
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x1400a8f50
mov rcx, qword [rsp + 0x38]
sub rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x60]
mov qword [rax], rdi
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rcx
test rbp, rbp
mov rax, qword [rsp + 0x40]
je 0x1400a964d
shl rax, 5
add rbp, rax
cmp rbp, 0xffffffffffffffef
je 0x1400a964d
mov r8, qword [rsp + 0x28]
sub r8, rax
mov rcx, qword [0x1400f91f8]
xor edx, edx
call qword [sym.imp.kernel32.dll_HeapFree]
jmp 0x1400a964d
movabs rdx, 0x1ffffffffffffffe
and rdx, rax
xor ecx, ecx
movdqa xmm0, xmmword [0x1400b0640]
nop dword [rax + rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + rcx]
por xmm1, xmm0
movdqa xmmword [rbx + rcx], xmm1
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + rcx + 0x10]
por xmm1, xmm0
movdqa xmmword [rbx + rcx + 0x10], xmm1
add rcx, 0x20
add rdx, 0xfffffffffffffffe
jne 0x1400a90d0
test al, 1
je 0x1400a911a
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rbx + rcx]
por xmm0, xmmword [0x1400b0640]
movdqa xmmword [rbx + rcx], xmm0
cmp rsi, 0x10
jae 0x1400a913c
lea rcx, [rbx + 0x10]
mov rdx, rbx
mov r8, rsi
call sub.VCRUNTIME140.dll_memmove
cmp rbp, 0xffffffffffffffff
jne 0x1400a9145
xor ecx, ecx
jmp 0x1400a963f
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbx + rsi], xmm0
lea rax, [rbx - 0x20]
mov qword [rsp + 0x70], rax
mov rax, qword [r14]
mov rcx, qword [r14 + 8]
movabs rdx, 0x736f6d6570736575
xor rdx, rax
mov qword [rsp + 0x50], rdx
movabs rdx, 0x646f72616e646f6d
xor rdx, rcx
mov qword [rsp + 0x48], rdx
movabs rdx, 0x6c7967656e657261
xor rdx, rax
mov qword [rsp + 0x40], rdx
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x38], rax
xor esi, esi
jmp 0x1400a91d2
shr rax, 0x39
lea rcx, [rsi - 0x10]
and rcx, rbp
mov byte [rbx + rsi], al
mov byte [rcx + rbx + 0x10], al
lea rax, [rsi + 1]
cmp rsi, rbp
mov rsi, rax
je 0x1400a963a
cmp byte [rbx + rsi], 0x80
jne 0x1400a91c2
mov r13, rsi
not r13
shl r13, 5
add r13, rbx
mov rax, rsi
shl rax, 5
mov rcx, qword [rsp + 0x70]
sub rcx, rax
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x58], rsi
nop
mov rax, qword [rsp + 0x28]
mov r12, qword [rax]
mov r15, qword [rax + 8]
mov rax, r15
and rax, 0xfffffffffffffff8
je 0x1400a92a0
mov r10, qword [rsp + 0x40]
mov r9, qword [rsp + 0x48]
mov r11, qword [rsp + 0x38]
xor edi, edi
mov r8, qword [rsp + 0x50]
nop
add r8, r9
rol r9, 0xd
mov rcx, qword [r12 + rdi]
xor r9, r8
rol r8, 0x20
xor r11, rcx
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r8
xor r8, rcx
add rdi, 8
cmp rdi, rax
jb 0x1400a9230
mov r14d, r15d
and r14d, 7
cmp r14d, 3
jbe 0x1400a92c3
mov esi, dword [r12 + rdi]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, r14
jb 0x1400a92d3
jmp 0x1400a92ed
mov r11, qword [rsp + 0x38]
mov r9, qword [rsp + 0x48]
mov r10, qword [rsp + 0x40]
mov r8, qword [rsp + 0x50]
xor edi, edi
mov r14d, r15d
and r14d, 7
cmp r14d, 3
ja 0x1400a9280
xor esi, esi
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, r14
jae 0x1400a92ed
lea rcx, [rax + rdi]
movzx edx, word [r12 + rcx]
lea ecx, [rax*8]
shl rdx, cl
or rsi, rdx
or rax, 2
cmp rax, r14
jae 0x1400a9310
add rdi, rax
movzx edx, byte [r12 + rdi]
shl eax, 3
mov ecx, eax
shl rdx, cl
or rsi, rdx
jmp 0x1400a9315
test r14, r14
je 0x1400a9372
lea ecx, [r14*8]
mov edi, 0xff
shl rdi, cl
or rdi, rsi
cmp r14, 7
jne 0x1400a944f
mov ecx, 8
add r8, r9
rol r9, 0xd
sub rcx, r14
xor r9, r8
rol r8, 0x20
xor r11, rdi
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
xor r11, r8
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r8, rdi
jmp 0x1400a9374
xor ecx, ecx
mov esi, 1
sub rsi, rcx
mov eax, esi
and eax, 7
and rsi, 0xfffffffffffffff8
cmp rcx, rsi
jae 0x1400a9400
nop word [rax + rax]
add r8, r9
rol r9, 0xd
xor r9, r8
rol r8, 0x20
xor r11, 0xff
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r8
xor r8, 0xff
add rcx, 8
cmp rcx, rsi
jb 0x1400a9390
xor esi, esi
cmp rax, 4
setae sil
cmp eax, 4
mov edi, 0
mov ecx, 0xff
cmovae rdi, rcx
shl rsi, 2
jmp 0x1400a9404
xor edi, edi
xor esi, esi
mov rdx, rsi
lea ecx, [rsi*8]
mov r14d, 0xff
shl r14, cl
or rdx, 1
mov r12, rsi
or r12, 2
cmp rdx, rax
mov edx, 0
cmovae r14, rdx
cmovae r12, rsi
or r14, rdi
lea ecx, [r12*8]
mov edi, 0xff
shl rdi, cl
cmp r12, rax
cmovae rdi, rdx
or rdi, r14
mov rsi, qword [rsp + 0x58]
shl r15, 0x38
movabs rax, 0x100000000000000
add r15, rax
add r8, r9
rol r9, 0xd
or r15, rdi
xor r9, r8
rol r8, 0x20
xor r11, r15
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r11, r8
xor r9, r10
rol r10, 0x20
xor r8, r15
add r8, r9
rol r9, 0xd
xor r9, r8
rol r8, 0x20
xor r10, 0xff
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r8
add r8, r9
rol r9, 0xd
xor r9, r8
rol r8, 0x20
add r10, r11
rol r11, 0x10
xor r11, r10
add r8, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r8
add r8, r9
rol r9, 0xd
add r10, r11
rol r11, 0x10
xor r11, r10
rol r11, 0x15
xor r9, r8
add r10, r9
rol r9, 0x11
mov rax, r10
rol rax, 0x20
xor rax, r9
xor rax, r11
xor rax, r10
mov rcx, rax
and rcx, rbp
movdqu xmm0, xmmword [rbx + rcx]
pmovmskb r8d, xmm0
mov r9, rcx
test r8d, r8d
jne 0x1400a957a
mov r10d, 0x10
mov r9, rcx
nop word cs:[rax + rax]
add r9, r10
and r9, rbp
movdqu xmm0, xmmword [rbx + r9]
pmovmskb r8d, xmm0
add r10, 0x10
test r8d, r8d
je 0x1400a9560
tzcnt r8d, r8d
add r8, r9
and r8, rbp
cmp byte [rbx + r8], 0
js 0x1400a9599
movdqa xmm0, xmmword [rbx]
pmovmskb edx, xmm0
tzcnt r8d, edx
mov rdx, rsi
sub rdx, rcx
mov r9, r8
sub r9, rcx
xor r9, rdx
and r9, rbp
cmp r9, 0x10
jb 0x1400a91b0
mov rcx, r8
not rcx
shl rcx, 5
add rcx, rbx
movzx edx, byte [rbx + r8]
shr rax, 0x39
lea r9, [r8 - 0x10]
and r9, rbp
mov byte [rbx + r8], al
mov byte [r9 + rbx + 0x10], al
cmp dl, 0xff
je 0x1400a9610
movups xmm0, xmmword [r13]
movups xmm1, xmmword [rcx]
movups xmmword [r13], xmm1
movups xmmword [rcx], xmm0
movdqu xmm0, xmmword [r13 + 0x10]
movdqu xmm1, xmmword [rcx + 0x10]
movdqu xmmword [r13 + 0x10], xmm1
movdqu xmmword [rcx + 0x10], xmm0
jmp 0x1400a9200
lea rax, [rsi - 0x10]
and rax, rbp
mov byte [rbx + rsi], 0xff
mov byte [rax + rbx + 0x10], 0xff
movdqu xmm0, xmmword [r13]
movdqu xmm1, xmmword [r13 + 0x10]
movdqu xmmword [rcx + 0x10], xmm1
movdqu xmmword [rcx], xmm0
jmp 0x1400a91c2
mov rcx, qword [rsp + 0x68]
sub rcx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x60]
mov qword [rax + 0x10], rcx
movabs rax, 0x8000000000000001
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.140051590
ud2