Function at 0x100411cd0
Capabilities:
Encode data using xor

Disassembly:
sub rsp, 0x28
lea rcx, [0x100412270]
call 0x100411cb0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call 0x100411cd0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call 0x100411ce0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call 0x100411cf0
xor r8d, r8d
xor edx, edx
xor ecx, ecx
add rsp, 0x28
jmp 0x100411d00
mov ecx, 0xbb781875
mov ecx, 0xbb780875
mov ch, 0x60
xor dword [rax], esi
invalid
jo 0x100411a16
mov ebp, 0x30327534
xor byte [rax], dh
sbb esi, dword [0xbc34d5fb]
mov ecx, 0xbb78f875
mov ch, 0x58
xor dword [rax], esi
xor byte [rax - 0x47], bh
jne 0x100411a6e
js 0x100411a4b
mov ch, 0x50
push rax
xor dword [rax], esi
xor byte [rcx + rdi*4 + 0x75], bh
xor byte [rax], dh
jl 0x100411a50
mov ecx, 0xb974f075
jne 0x100411a89
invalid
div dword [rbp - 0x18]
cmp byte [rax], dh
xor byte [rax], dh
jl 0x100411a62
xor byte [rbp - 0x4b], bh
invalid
imul ecx, dword [rax + rsi*2 - 0x5b], 0x7534bd26
xor dh, byte [rax]
jo 0x100411a5e
mov ebp, 0x30327534
mov ebp, 0x30327534
jne 0x100411af0
xor byte [rax], dh
xor byte [rbx], bl
xor eax, 0xbbf3bb7c
xor byte [rax], dh
sbb esi, dword [0xbc34d643]
mov ecx, 0xbb78d875
mov ch, 0x48
xor dword [rax], esi
xor byte [rax - 0x47], bh
jne 0x100411a96
js 0x100411a93
mov ch, 0x40
xor dword [rax], esi
xor byte [rax - 0x47], bh
xor byte [rax], dh
js 0x100411a98
jne 0x100411a91
js 0x100411a9e
mov ch, 0x38
xor dword [rax], esi
xor byte [rcx + rdi*4 + 0x75], bh
sal byte [rcx + rdi*4 - 0x73], 1
fdivr qword [rax - 9]
mov ecx, 0xb974d075
invalid
js 0x100411ae9
jne 0x100411abc
cmp byte [rax], dh
xor byte [rax], dh
jl 0x100411ab5
xor byte [rax - 9], bh
jne 0x100411ab7
cmp byte [rax], dh
xor byte [rax], dh
jge 0x100411aba
xor byte [rax], dh
xor byte [rbp - 0x4b], bh
invalid
movsd dword [rdi], dword [rsi]
mov ebp, 0x30327d44
xor byte [rax], dh
sbb esi, dword [rbx]
jl 0x100411ad8
js 0x100411adb
mov ch, 0x30
xor dword [rax], esi
xor byte [rax - 0x43], bh
cmp eax, 0x313c03ee
js 0x100411ae7
je 0x100411b84
nop
js 0x100411af0
je 0x100411b89
invalid
test byte [rax + rbp*4 + 0x79], dl
mov ebx, 0x7cb97c02
push rsp
jl 0x100411b00
jl 0x100411b9d
xor byte [rcx - 0x17], 0x49
xor byte [rax], dh
xor byte [rax - 0x47], bh
je 0x100411ba8
push rax
je 0x100411b10
mov word [rsp + rbp*4 + 0x78], ss
div dword [rsp + rdx*2 - 0x68]
je 0x100411bb2
cwde
xor al, 0x30
xor byte [rax], dh
js 0x100411b5c
xor byte [rax], dh
xor byte [rax - 9], bh
je 0x100411bbb
mov byte [rax], bh
xor byte [rax], dh
xor byte [rax], bl
adc dword [rsi - 0x4487cf99], edi
mov ebp, 0x303030f0
js 0x100411bdd
cld
sbb byte [rdx + 0x5e], ah
cwde
xor byte [rbp + rdi*4 - 0x34], bh
push rsp
jl 0x100411b3f
int3
add byte [rcx], dh
xor byte [rax], dh
jns 0x100411b45
mov ebx, 0xbb79408b
mov eax, dword [rax + 0x79]
mov ebx, 0xbb7950a3
adc ecx, dword [rbp - 0x4687030d]
mov word [rax + rdi + 0x78], ss
movabs dword [0x78fcf38d13bb7950], eax
mov ecx, 0x7838548c
mov ecx, 0x854854ac
js 0x100411b60
lodsb al, byte [rsi]
push rsp
test qword [rax - 0x43], rdi
fcom qword [rax + rdx*4 + 0x2f]
invalid
invalid
xor eax, 0x314386b3
js 0x100411c1c
hlt
mov ecx, 0x3030c0b5
xor byte [rax - 0x45], bh
mov ch, 0x90
xor dword [rax], esi
xor byte [rbx + rdi*4 + 2], bh
js 0x100411b80
stc
invalid
mov ch, 2
movsb byte [rdi], byte [rsi]
js 0x100411b97
mov ebx, 0xf02f78f1
int1
js 0x100411c0e
invalid
je 0x100411c4a
xor r12b, byte [rbp + 0x1bf02f27]
cmp al, 0x78
mov ebp, 0x2e56b45
xor al, ch
xor dword [rax], esi
xor byte [rax], dh
mov ecx, 0x3030b8b5
xor byte [rax - 0x45], bh
js 0x100411bb9
mov ch, 0x88
xor dword [rax], esi
xor byte [rax - 0x47], bh
invalid
xor byte [rax], dh
xor byte [rcx + rdi*4 - 0x33], dh
mov esp, 0x78303030
mov ebx, 0x2b57840
movsb byte [rdi], byte [rsi]
xor byte [rax], dh
xor byte [rax - 0x45], bh
js 0x100411bcb
add ah, byte [rax + rax*2 + 0x78f1bb78]
js 0x100411bd6
int1
js 0x100411c4d
invalid
invalid
movsd dword [rdi], dword [rsi]
invalid
add dh, byte [rax]
call 0x130714c66
mov ecx, 0xbd78a875
sbb r12, r12
add dh, byte [rax]
js 0x100411bfc
mov ebp, 0x2e41b4d
xor byte [rax - 0x45], bh
mov ch, pe_nt_image_headers64
xor dword [rax], esi
xor byte [rcx - 0x18], dh
xor byte [rax], dh
jno 0x100411c30
xor dh, byte [rax]
xor byte [rax], dh
js 0x100411c07
mov ecx, 0xbb789075
jne 0x100411be0
nop
js 0x100411c0d
mov ch, 0x78
xor dword [rax], esi
xor byte [rax - 0x47], bh
jne 0x100411bdb
cmp byte [rax - 0x45], 0xb5
jo 0x100411c91
js 0x100411c18
mov ch, 0x70
xor dword [rax], esi
xor byte [rax - 0x47], bh
xor byte [rax], dh
js 0x100411c1d
jne 0x100411cd6
js 0x100411c23
mov ch, 0x68
xor dword [rax], esi
xor byte [rax - 0x47], bh
jne 0x100411cd1
js 0x100411c2e
mov ch, 0x60
xor dword [rax], esi
xor byte [rax - 0x47], bh
jne 0x100411ccc
js 0x100411c39
mov ch, 0x58
xor dword [rax], esi
xor byte [rax - 0x47], bh
jne 0x100411cc7
js 0x100411c44
mov ch, 0x50
xor dword [rax], esi
xor byte [rax - 0x47], bh
jne 0x100411cc2
xor byte [rax - 0x45], bh
js 0x100411c4f
mov ch, 0x48
xor dword [rax], esi
xor byte [rax - 0x47], bh
jne 0x100411cbd
js 0x100411c5a
mov ch, 0x40
xor dword [rax], esi
xor byte [rax - 0x47], bh
mov ecx, 0xb974a085
lea ebp, [rax + rdi*2 + 0x349875f7]
xor byte [rax], dh
xor byte [rax - 0x45], bh
test dword [rax - 0x5372468c], esp
js 0x100411ca5
jne 0x100411c48
xor al, 0x30
xor byte [rax], dh
js 0x100411c71
js 0x100411cb0
div dword [rbp - 0x78]
jne 0x100411c43
xor al, 0x30
xor byte [rax], dh
js 0x100411cb8
div dword [rbp + 0x78]
jne 0x100411d3b
js 0x100411cf8
xor al, 0x30
xor byte [rax], dh
xor byte [rax], dh
xor byte [rax - 9], bh
js 0x100411cc0
div dword [rbp + 0x68]
jne 0x100411d33
xor al, 0x30
xor byte [rax], dh
js 0x100411cc8
xor byte [rax], dh
xor byte [rax - 9], bh
div dword [rbp + 0x58]
jne 0x100411d2b
xor al, 0x30
xor byte [rax], dh
js 0x100411cd0
xor byte [rax - 9], bh
div dword [rbp + 0x48]
jne 0x100411d23
xor al, 0x30
xor byte [rax], dh
js 0x100411cd8
div dword [rbp + 0x38]
jne 0x100411d1b
xor al, 0x30
xor byte [rax], dh
js 0x100411ce0
jne 0x100411d13
xor al, 0x30
xor byte [rax], dh
js 0x100411ca6
add ah, byte [rsi + rax*2 + 0x78f1bb78]
invalid
jb 0x100411ca5
mov ebp, 0x30327534
xor byte [rax], dh
sbb esi, dword [rsi]
js 0x100411cc7
add esi, dword [rcx - 0x45]
invalid
jne 0x100411d2b
js 0x100411cd0
mov ch, 0x38
xor dword [rax], esi
xor byte [rax - 0x47], bh
test dword [rax], edx
je 0x100411cd9
mov ecx, 0xb9741085
adc byte [rcx + rdi*4 - 0x73], dh
sbb al, 0x78
lea ebx, [rax + rdi*2]
mov ebx, 0x2b57840
movsb byte [rdi], byte [rsi]
js 0x100411ce7
mov ebx, 0xf02f78f1
xchg esi, eax
je 0x100411d9c
int1
js 0x100411d5e
invalid
jb 0x100411cdb
mov ebp, 0x30327534
xor byte [rax], dh
xor byte [rbx], bl
js 0x100411cfd
xor byte [rax], dh
sbb esi, dword [rsi]
js 0x100411cfd
add esi, dword [rcx - 0x45]
invalid
jne 0x100411d51
js 0x100411d06
mov ch, 0x30
xor dword [rax], esi
xor byte [rax - 0x47], bh
test dword [rax], eax
je 0x100411d0f
mov ecx, 0xb9740085
add byte [rcx + rdi*4 - 0x73], dh
or al, 0x78
lea ecx, [rax + rdi*2]
mov ebx, 0x2b57840
movsb byte [rdi], byte [rsi]
js 0x100411d1d
int1
js 0x100411d94
invalid
jb 0x100411d11
mov ebp, 0x30327534
xor byte [rax], dh
sbb esi, dword [rsi]
js 0x100411d33
mov ebx, 0xf0bb7103
mov ecx, 0xbb78f875
add esi, dword [rcx - 0x45]
invalid
jne 0x100411d77
js 0x100411d3c
mov ch, 0x28
xor byte [rax], dh
xor byte [rax - 0x47], bh
test eax, esi
je 0x100411d45
invalid
invalid
movsb byte [rdi], byte [rsi]
js 0x100411d53
int1
js 0x100411dca
invalid
xchg esi, eax
je 0x100411e08
jb 0x100411d47
mov ebp, 0x30327534
xor byte [rax], dh
sbb esi, dword [rsi]
js 0x100411d69
add esi, dword [rcx - 0x45]
mov ebx, 0xe875b9f0
js 0x100411d72
invalid
call 0x120f6d931
mov ch, 0x20
xor byte [rax], dh
xor byte [rax - 0x47], bh
test eax, esp
je 0x100411d7b
invalid
movsb byte [rdi], byte [rsi]
js 0x100411d89
int1
js 0x100411e00
invalid
je 0x100411e3e
jb 0x100411d7d
mov ebp, 0x30327534
xor byte [rax], dh
sbb esi, dword [rsi]
jne 0x100411e0f
xor byte [rax], dh
xor byte [rbx], bl
js 0x100411d9f
js 0x100411d9f
add esi, dword [rcx - 0x45]
invalid
mov ecx, 0xbb78d875
mov ch, 0x18
xor byte [rax], dh
xor byte [rax - 0x47], bh
test eax, edx
je 0x100411db1
invalid
fdivr qword [rax - 0x45]
js 0x100411db4
add ah, byte [rsp + rax*2 - 0x690ed088]
movsb byte [rdi], byte [rsi]
js 0x100411e33
js 0x100411e33
int1
xchg esi, eax
je 0x100411e71
jp 0x100411db0
je 0x100411dcb
xor al, 0x7d
xor dh, byte [rax]
xor byte [rax], dh
sbb esi, dword [rbx]
js 0x100411dd3
jge 0x100411e43
xor byte [rax], dh
xor byte [rbx], bl
xor edi, dword [rax - 0x45]
add edi, dword [rax - 0x45]
mov ch, 0x10
xor byte [rax], dh
xor byte [rax - 0x43], bh
cmp eax, 0x313c00f3
js 0x100411de2
mov ebp, 0x3c00f33d
xor dword [rax - 0x47], edi
jne 0x100411ddb
js 0x100411de8
mov ch, 8
xor byte [rax], dh
xor byte [rax - 0x47], bh
je 0x100411e8a
mov ecx, 0x78a05474
mov ebx, 0x303000b5
xor byte [rax - 0x47], bh
movabs al, byte [0x7830303000b5bb78]
mov ecx, 0x78905474
mov ebp, 0x78605474
mov ecx, 0xbb79c085
add dh, byte [rcx + rdi*4 + 0x75]
enter 0x6375, 0xfffffffffffffff0
jl 0x100411e11
js 0x100411df9
je 0x100411e96
nop
js 0x100411e02
je 0x100411e9b
invalid
jl 0x100411eae
xor byte [rcx - 0x17], 0x46
xor byte [rax], dh
xor byte [rax - 0x47], bh
je 0x100411eb9
push rax
je 0x100411e21
invalid
xor byte [rax - 9], bh
je 0x100411eca
test al, 0x34
xor byte [rax], dh
xor byte [rax - 9], bh
je 0x100411ed3
cwde
cmp byte [rax], dh
xor byte [rax], dh
js 0x100411e7d
je 0x100411edc
mov byte [rax], bh
xor byte [rax], dh
xor byte [rax], bl
invalid
xor byte [rax], dh
xor byte [rax + 0x63], bh
cld
sbb byte [rcx + 0x5b], al
cwde
xor byte [rbp + rdi*4 - 0x34], bh
push rsp
sal byte [rcx], 1
xor byte [rax], dh
jns 0x100411e66
mov eax, dword [rax + 0x79]
mov ebx, 0xbb7950ab
adc ecx, dword [rbp - 0xb44870d]
js 0x100411e74
mov byte [rax], bh
js 0x100411e78
movabs al, byte [0xbd788550a8b97848]
fsubr dword [rax]
invalid
xor byte [rax - 0x45], bh
xor eax, 0x3143838f
js 0x100411f40
invalid
hlt
mov ch, 8
xor byte [rax], dh
xor byte [rax - 0x45], bh
mov ch, 0x10
xor dword [rax], esi
xor byte [rax - 0x47], bh
invalid