Function at 0x140167a60
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
push rbp
push rsi
push r12
push r15
lea rbp, [r11 - 0x198]
sub rsp, 0x278
mov rax, qword [0x140672360]
xor rax, rsp
mov qword [rbp + 0x150], rax
mov rsi, qword [r9]
mov r12, r8
mov r10, qword [r9 + 8]
mov r15, rcx
sub r10, rsi
mov qword [rsp + 0x40], r9
sar r10, 2
mov qword [rsp + 0x58], r8
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x48], rcx
lea rax, [r10 - 0x2c]
test rax, 0xffffffffffffffe7
jne 0x140166911
cmp r10, 0x44
je 0x140166911
mov qword [r11 + 0x20], rbx
lea rcx, [rbp - 0x50]
mov qword [r11 - 0x28], rdi
xor edx, edx
mov qword [r11 - 0x30], r13
mov r8d, 0x1a0
mov qword [r11 - 0x38], r14
lea r14, [r10 - 4]
shr r14, 2
call fcn.14035c350
lea r13, [r14 - 1]
mov qword [rbp - 0x78], r13
test r13, r13
je 0x1401661b3
lea rdi, [rbp - 0x4c]
add rsi, 0x14
mov r15, r13
nop
mov ebx, dword [rsi - 4]
lea rdi, [rdi + 0x20]
mov r8d, dword [rsi + 4]
mov ecx, dword [rsi]
lea rsi, [rsi + 0x10]
shr ecx, 1
xor ecx, ebx
and ecx, 0x55555555
xor ebx, ecx
lea r9d, [rcx + rcx]
mov ecx, dword [rsi - 8]
xor r9d, dword [rsi - 0x10]
shr ecx, 1
xor ecx, r8d
and ecx, 0x55555555
xor r8d, ecx
mov eax, r8d
shr eax, 2
lea edx, [rcx + rcx]
xor eax, ebx
xor edx, dword [rsi - 8]
and eax, 0x33333333
xor ebx, eax
mov ecx, ebx
shr ecx, 4
xor ecx, ebx
lea r10d, [rax*4]
and ecx, 0xf0f0f0f
xor r10d, r8d
mov eax, ecx
mov r8d, edx
shl eax, 4
xor eax, ebx
shr r8d, 2
xor ebx, ecx
mov dword [rdi - 0x14], eax
xor r8d, r9d
mov dword [rdi - 0x24], ebx
and r8d, 0x33333333
lea r11d, [r8*4]
xor r8d, r9d
xor r11d, edx
mov ecx, r8d
shr ecx, 4
xor ecx, r8d
and ecx, 0xf0f0f0f
mov eax, ecx
shl eax, 4
xor eax, r8d
xor r8d, ecx
mov dword [rdi - 0x10], eax
mov ecx, r10d
shr ecx, 4
xor ecx, r10d
mov dword [rdi - 0x20], r8d
and ecx, 0xf0f0f0f
mov eax, ecx
shl eax, 4
xor eax, r10d
xor r10d, ecx
mov dword [rdi - 0xc], eax
mov ecx, r11d
shr ecx, 4
xor ecx, r11d
mov dword [rdi - 0x1c], r10d
and ecx, 0xf0f0f0f
mov eax, ecx
shl eax, 4
xor eax, r11d
xor r11d, ecx
mov dword [rdi - 0x18], r11d
mov dword [rdi - 8], eax
sub r15, 1
jne 0x1401660b0
mov r15, qword [rsp + 0x48]
test r12, r12
je 0x1401668d4
mov edi, dword [0x140672340]
lea rax, [r14*4]
lea rcx, [rax*4]
mov qword [rsp + 0x60], rcx
lea rcx, [rax*4 + 4]
mov qword [rsp + 0x68], rcx
lea rcx, [rax*4 + 8]
lea rax, [rax*4 + 0xc]
mov qword [rsp + 0x70], rcx
mov qword [rsp + 0x78], rax
mov ecx, 2
nop dword [rax]
nop word [rax + rax]
cmp r12, 2
xorps xmm0, xmm0
mov rax, r12
cmova rax, rcx
mov qword [rbp - 0x80], rax
movups xmmword [rbp - 0x70], xmm0
lea rbx, [rax*4]
movups xmmword [rbp - 0x60], xmm0
test rbx, rbx
je 0x140166290
mov r8, rax
lea rcx, [rbp - 0x70]
shl r8, 4
mov rdx, r15
call fcn.14035bc80
xor r8d, r8d
lea rdx, [rbp - 0x70]
xor eax, eax
cmp edi, 2
jl 0x140166270
movdqu xmm0, xmmword [rdx]
pshufb xmm0, xmmword [0x14060afb0]
movdqu xmmword [rdx], xmm0
jmp 0x140166281
mov ecx, dword [rdx + rax*4]
bswap ecx
mov dword [rdx + rax*4], ecx
inc rax
cmp rax, 4
jl 0x140166270
add r8, 4
add rdx, 0x10
cmp r8, rbx
jne 0x140166251
nop
mov rax, qword [rsp + 0x40]
mov rcx, qword [rax]
mov r10d, dword [rcx + 4]
mov eax, r10d
xor eax, dword [rbp - 0x6c]
mov r15d, dword [rcx]
mov esi, eax
mov edi, dword [rcx + 8]
mov edx, r15d
xor edx, dword [rbp - 0x70]
mov r8d, edi
mov r11d, dword [rcx + 0xc]
mov ecx, r11d
xor ecx, dword [rbp - 0x64]
xor r10d, dword [rbp - 0x5c]
xor r11d, dword [rbp - 0x54]
xor r8d, dword [rbp - 0x68]
xor r15d, dword [rbp - 0x60]
xor edi, dword [rbp - 0x58]
shr esi, 1
xor esi, edx
and esi, 0x55555555
lea r14d, [rsi + rsi]
xor esi, edx
xor r14d, eax
mov edx, ecx
shr edx, 1
mov eax, r10d
shr eax, 1
xor edx, r8d
xor eax, r15d
and edx, 0x55555555
and eax, 0x55555555
xor r15d, eax
lea r9d, [rdx + rdx]
xor edx, r8d
lea ebx, [rax + rax]
xor r9d, ecx
xor ebx, r10d
mov eax, r11d
shr eax, 1
xor eax, edi
and eax, 0x55555555
xor edi, eax
lea ecx, [rax + rax]
mov eax, edx
shr eax, 2
xor ecx, r11d
xor eax, esi
and eax, 0x33333333
xor esi, eax
lea r10d, [rax*4]
mov eax, r9d
shr eax, 2
xor r10d, edx
xor eax, r14d
and eax, 0x33333333
xor r14d, eax
lea r11d, [rax*4]
mov eax, edi
shr eax, 2
xor r11d, r9d
xor eax, r15d
and eax, 0x33333333
xor r15d, eax
lea edx, [rax*4]
mov eax, ecx
shr eax, 2
xor edx, edi
xor eax, ebx
and eax, 0x33333333
xor ebx, eax
lea r8d, [rax*4]
xor r8d, ecx
mov ecx, r15d
shr ecx, 4
xor ecx, esi
and ecx, 0xf0f0f0f
mov eax, ecx
shl eax, 4
xor eax, r15d
xor esi, ecx
mov dword [rbp - 0x60], eax
mov ecx, ebx
mov dword [rbp - 0x70], esi
shr ecx, 4
xor ecx, r14d
and ecx, 0xf0f0f0f
xor r14d, ecx
mov eax, ecx
shl eax, 4
mov ecx, edx
xor eax, ebx
shr ecx, 4
xor ecx, r10d
mov dword [rbp - 0x5c], eax
and ecx, 0xf0f0f0f
mov dword [rbp - 0x6c], r14d
xor r10d, ecx
mov eax, ecx
shl eax, 4
mov ecx, r8d
xor eax, edx
shr ecx, 4
xor ecx, r11d
mov dword [rbp - 0x58], eax
and ecx, 0xf0f0f0f
mov dword [rbp - 0x68], r10d
xor r11d, ecx
mov eax, ecx
shl eax, 4
xor eax, r8d
mov dword [rbp - 0x64], r11d
mov dword [rbp - 0x54], eax
test r13, r13
je 0x1401665e6
lea r15, [rbp - 0x50]
mov qword [rsp + 0x38], r13
lea rax, [rbp - 0x70]
movabs r13, 0x22331100223311
sub r15, rax
nop dword [rax + rax]
lea rcx, [rbp - 0x70]
call fcn.140165810
xor r8d, r8d
movabs r12, 0x55005500550055
nop word [rax + rax]
mov eax, dword [rbp + r8*4 - 0x6c]
mov edx, dword [rbp + r8*4 - 0x70]
shl rdx, 0x20
or rdx, rax
mov rcx, rdx
shr rcx, 2
xor rcx, rdx
and rcx, r13
lea rax, [rcx*4]
xor rax, rcx
xor rdx, rax
mov rcx, rdx
shr rcx, 1
xor rcx, rdx
and rcx, r12
lea rax, [rcx + rcx]
xor rax, rcx
xor rdx, rax
mov rax, rdx
mov dword [rbp + r8*4 - 0x6c], edx
shr rax, 0x20
mov dword [rbp + r8*4 - 0x70], eax
add r8, 2
cmp r8, 8
jne 0x140166450
mov r14d, dword [rbp - 0x70]
mov r9d, r14d
mov edx, dword [rbp - 0x6c]
mov ecx, r14d
xor ecx, edx
mov r8d, dword [rbp - 0x68]
rol ecx, 8
mov eax, r14d
mov r11d, dword [rbp - 0x60]
mov r10d, r14d
mov ebx, dword [rbp - 0x5c]
xor r9d, r11d
mov esi, dword [rbp - 0x54]
xor r10d, ebx
rol eax, 0x10
mov edi, r14d
xor ecx, eax
xor edi, esi
mov eax, r14d
ror eax, 8
xor ecx, eax
mov eax, edx
xor ecx, edx
rol eax, 0x10
mov dword [rbp - 0x70], ecx
mov ecx, edx
xor ecx, r8d
ror edx, 8
rol ecx, 8
xor ecx, eax
mov eax, r8d
xor ecx, edx
rol eax, 0x10
mov edx, dword [rbp - 0x64]
xor ecx, r8d
mov dword [rbp - 0x6c], ecx
mov ecx, edx
xor ecx, r8d
ror r8d, 8
rol ecx, 8
xor ecx, eax
mov eax, edx
xor ecx, r8d
rol eax, 0x10
xor ecx, edx
mov dword [rbp - 0x68], ecx
mov ecx, r9d
xor ecx, edx
ror edx, 8
rol ecx, 8
xor ecx, eax
mov eax, r11d
xor ecx, edx
rol eax, 0x10
mov edx, dword [rbp - 0x58]
xor ecx, r9d
mov dword [rbp - 0x64], ecx
mov ecx, r10d
xor ecx, r11d
ror r11d, 8
rol ecx, 8
xor ecx, eax
mov eax, ebx
xor ecx, r11d
rol eax, 0x10
xor ecx, r10d
mov dword [rbp - 0x60], ecx
mov ecx, edx
xor ecx, ebx
ror ebx, 8
rol ecx, 8
xor ecx, eax
mov eax, edx
xor ecx, ebx
rol eax, 0x10
xor ecx, edx
mov dword [rbp - 0x5c], ecx
mov ecx, edi
xor ecx, edx
rol ecx, 8
xor ecx, eax
ror edx, 8
mov eax, esi
xor ecx, edx
rol eax, 0x10
xor ecx, edi
mov dword [rbp - 0x58], ecx
mov ecx, r14d
xor ecx, esi
ror esi, 8
rol ecx, 8
xor ecx, eax
xor ecx, esi
xor ecx, r14d
mov dword [rbp - 0x54], ecx
xor ecx, ecx
movdqu xmm0, xmmword [rbp + rcx*4 - 0x70]
lea rax, [r15 + rcx*4]
movdqu xmm1, xmmword [rbp + rax - 0x70]
pxor xmm1, xmm0
movdqu xmmword [rbp + rcx*4 - 0x70], xmm1
add rcx, 4
cmp rcx, 8
jne 0x1401665b0
add r15, 0x20
sub qword [rsp + 0x38], 1
jne 0x140166430
jmp 0x1401665f0
movabs r13, 0x22331100223311
lea rcx, [rbp - 0x70]
call fcn.140165810
xor r8d, r8d
nop dword [rax]
mov eax, dword [rbp + r8*4 - 0x6c]
mov edx, dword [rbp + r8*4 - 0x70]
shl rdx, 0x20
or rdx, rax
mov rcx, rdx
shr rcx, 2
xor rcx, rdx
and rcx, r13
lea rax, [rcx*4]
xor rax, rcx
xor rdx, rax
movabs rax, 0x55005500550055
mov rcx, rdx
shr rcx, 1
xor rcx, rdx
and rcx, rax
lea rax, [rcx + rcx]
xor rax, rcx
xor rdx, rax
mov rax, rdx
mov dword [rbp + r8*4 - 0x6c], edx
shr rax, 0x20
mov dword [rbp + r8*4 - 0x70], eax
add r8, 2
cmp r8, 8
jne 0x140166600
mov r8d, dword [rbp - 0x64]
mov r11d, dword [rbp - 0x6c]
mov r13d, dword [rbp - 0x5c]
mov rcx, qword [rsp + 0x60]
shr r11d, 1
xor r11d, dword [rbp - 0x70]
and r11d, 0x55555555
shr r8d, 1
xor r8d, dword [rbp - 0x68]
and r8d, 0x55555555
shr r13d, 1
xor r13d, dword [rbp - 0x60]
lea edx, [r11 + r11]
and r13d, 0x55555555
xor edx, dword [rbp - 0x6c]
xor r11d, dword [rbp - 0x70]
lea r10d, [r8 + r8]
xor r10d, dword [rbp - 0x64]
xor r8d, dword [rbp - 0x68]
lea r12d, [r13*2]
xor r13d, dword [rbp - 0x60]
mov eax, r8d
xor r12d, dword [rbp - 0x5c]
shr eax, 2
xor eax, r11d
mov dword [rsp + 0x30], edx
mov edx, dword [rbp - 0x54]
and eax, 0x33333333
xor r11d, eax
shr edx, 1
xor edx, dword [rbp - 0x58]
and edx, 0x55555555
mov dword [rsp + 0x38], r11d
lea r15d, [rax*4]
mov eax, r10d
shr eax, 2
xor r15d, r8d
mov r8d, dword [rsp + 0x30]
xor eax, r8d
and eax, 0x33333333
lea r9d, [rdx + rdx]
xor r9d, dword [rbp - 0x54]
xor r8d, eax
xor edx, dword [rbp - 0x58]
lea esi, [rax*4]
mov eax, edx
shr eax, 2
xor esi, r10d
xor eax, r13d
and eax, 0x33333333
xor r13d, eax
mov dword [rsp + 0x30], r13d
lea r14d, [rax*4]
mov eax, r9d
shr eax, 2
xor r14d, edx
xor eax, r12d
and eax, 0x33333333
xor r12d, eax
mov r10d, r12d
shr r10d, 4
lea edi, [rax*4]
xor r10d, r8d
mov rax, qword [rsp + 0x40]
xor edi, r9d
mov r9d, r13d
mov ebx, edi
shr r9d, 4
and r10d, 0xf0f0f0f
xor r9d, r11d
shr ebx, 4
mov rdx, qword [rax]
mov r11d, r14d
shr r11d, 4
and r9d, 0xf0f0f0f
xor r11d, r15d
xor ebx, esi
and r11d, 0xf0f0f0f
mov eax, dword [rcx + rdx]
and ebx, 0xf0f0f0f
mov ecx, dword [rsp + 0x38]
mov r13, qword [rsp + 0x78]
xor ecx, r9d
xor r8d, r10d
shl r9d, 4
xor r9d, dword [rsp + 0x30]
xor r15d, r11d
xor esi, ebx
shl r10d, 4
xor ecx, eax
shl ebx, 4
xor ebx, edi
mov dword [rbp - 0x70], ecx
mov rcx, qword [rsp + 0x68]
xor r10d, r12d
shl r11d, 4
xor r9d, eax
xor r11d, r14d
mov dword [rbp - 0x60], r9d
mov ecx, dword [rdx + rcx]
xor r8d, ecx
xor r10d, ecx
mov dword [rbp - 0x6c], r8d
mov r8, qword [rsp + 0x70]
lea rcx, [rbp - 0x70]
mov dword [rbp - 0x5c], r10d
mov edx, dword [r8 + rdx]
xor r15d, edx
xor r11d, edx
mov dword [rbp - 0x68], r15d
mov r15, qword [rsp + 0x40]
mov dword [rbp - 0x58], r11d
mov r8, qword [r15]
mov r8d, dword [r8 + r13]
xor ebx, r8d
mov r13, qword [rsp + 0x50]
xor esi, r8d
mov dword [rbp - 0x54], ebx
mov r9, r13
mov rbx, qword [rbp - 0x80]
mov rdi, rbx
mov dword [rbp - 0x64], esi
shl rdi, 4
mov r10, rdi
cmp rdi, 4
jb 0x140166875
mov rdx, rdi
shr rdx, 2
imul rax, rdx, 0xfffffffffffffffc
add r10, rax
nop dword [rax]
mov eax, dword [rcx]
add rcx, 4
bswap eax
mov dword [r9], eax
add r9, 4
sub rdx, 1
jne 0x140166860
xor r8d, r8d
test r10, r10
je 0x14016689d
mov r11d, dword [rcx]
movzx ecx, r8b
mov edx, r11d
not cl
and cl, 3
shl cl, 3
shr edx, cl
mov byte [r8 + r9], dl
inc r8
cmp r8, r10
jne 0x140166880
mov r15, qword [rsp + 0x48]
add r13, rdi
mov r12, qword [rsp + 0x58]
add r15, rdi
mov edi, dword [0x140672340]
sub r12, rbx
mov qword [rsp + 0x50], r13
mov ecx, 2
mov r13, qword [rbp - 0x78]
mov qword [rsp + 0x58], r12
mov qword [rsp + 0x48], r15
jne 0x140166210
mov r13, qword [rsp + 0x268]
mov rdi, qword [rsp + 0x270]
mov rbx, qword [rsp + 0x2b8]
mov r14, qword [rsp + 0x260]
mov rcx, qword [rbp + 0x150]
xor rcx, rsp
call fcn.140359070
add rsp, 0x278
pop r15
pop r12
pop rsi
pop rbp
ret
lea r9, str.C:workspaceproductswindows_endpointprotectionhmpa_thirdparty_botanlib_botan_x64.cpp
mov dword [rsp + 0x20], 0xf5c
lea r8, str.aes_encrypt_n
lea rdx, str.Key_was_set
lea rcx, str.EK.size____44__EK.size____52__EK.size____60
call fcn.1401bfc50
int3
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x10]
mov r10, r9
lea r9, [rcx + 8]
mov r11, r8
mov rbx, rdx
cmp qword [r9], rax
je 0x140167a8f
mov r8, r10
mov rdx, r11
mov rcx, rbx
add rsp, 0x20
pop rbx
jmp 0x140166000
call fcn.140179390
int3