Function at 0x1400f5720
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
mov eax, 0x1078
call fcn.1400f1350
sub rsp, rax
mov rbx, rdx
mov rsi, rcx
call fcn.1400f5e20
mov qword [rsp + 0x38], rax
mov rcx, qword [rbx]
lea r14, [rsp + 0x68]
lea r15, [rsp + 0x48]
nop word cs:[rax + rax]
mov eax, dword [0x141dcd110]
imul eax, dword [0x141dcd114]
and eax, 0x20411008
cmp eax, 0xc0e477f5
je 0x1400f5760
nop dword [rax]
mov eax, dword [0x141dcd118]
add eax, dword [str.j_XI]
and eax, 0x4c566aab
imul eax, eax, 0xa17a3dfc
imul rdx, rax, 0x5a60367
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1b
cmp eax, 0x9b29a1ca
ja 0x1400f5780
xor ebx, ebx
mov r11d, 0xeb48011b
lea rdi, [rsp + 0x870]
lea r12, [rsp + 0x60]
xor eax, eax
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rcx
mov eax, dword [0x141dcd120]
xor eax, dword [0x141dcd124]
imul eax, eax, 0xc4673d4e
and eax, 0x50b49a80
cmp eax, 0x48f084fe
jb 0x1400f582a
nop word cs:[rax + rax]
mov eax, dword [0x141dcd128]
imul eax, dword [0x141dcd12c]
and eax, 0xb1e77614
mov r13, qword [rsi]
mov r8, r13
and r8, 0xfffffffffffffff8
mov r10, qword [r8 + 0x810]
cmp eax, 0xf1865746
jne 0x1400f5840
mov rax, qword [rsi]
and rax, 0xfffffffffffffff8
mov rax, qword [rax + 0x810]
jmp 0x1400f5800
mov rbp, r10
and rbp, 0xfffffffffffffff8
je 0x1400f5de0
inc qword [rsp + 0x30]
nop word cs:[rax + rax]
mov eax, dword [0x141dcd130]
or eax, dword [0x141dcd134]
imul eax, eax, 0x16af862
xor eax, 0x53c1dcfc
cmp eax, 0x1b9a2341
jb 0x1400f5860
mov rax, qword [rbp + 0x808]
and rax, 0xfffffffffffffffe
mov rdx, qword [rsp + 0x38]
sub rdx, rax
cmp rdx, 4
jl 0x1400f5de0
mov eax, dword [0x141dcd138]
sub eax, dword [0x141dcd13c]
and eax, 0xa08e3ec0
add eax, 0xae852c97
cmp eax, 0xeba3b5d9
ja 0x1400f58de
mov edx, dword [0x141dcd140]
sub edx, dword [0x141dcd144]
add edx, 0x70cc638d
mov rax, r13
lock cmpxchg qword [rsi], r10
sete r9b
cmp edx, 0x46c692aa
jae 0x1400f58e8
mov rax, r13
lock cmpxchg qword [rsi], r10
jmp 0x1400f58b8
mov eax, dword [0x141dcd148]
xor edx, edx
div dword [0x141dcd14c]
mov eax, dword [0x141dcd150]
and eax, dword [0x141dcd154]
or eax, 0x862363e1
imul eax, eax, 0xea202449
add eax, 0x22c6abcc
cmp eax, 0xb8467782
ja 0x1400f58f6
nop dword [rax]
mov eax, dword [0x141dcd158]
xor eax, dword [0x141dcd15c]
or eax, 0x93449048
and eax, 0xbf45f4ce
xor eax, 0x71f7d009
cmp eax, 0xbf32f2fb
jb 0x1400f5920
test r9b, r9b
jne 0x1400f5970
mov r13, qword [rsi]
mov r8, r13
and r8, 0xfffffffffffffff8
mov r10, qword [r8 + 0x810]
mov rbp, r10
and rbp, 0xfffffffffffffff8
jne 0x1400f5860
jmp 0x1400f5de0
mov eax, dword [0x141dcd160]
or eax, dword [0x141dcd164]
or eax, 0x2faf6cbc
add eax, 0xbf90d680
or eax, 0xd8b8a411
cmp eax, 0x6c72faa9
je 0x1400f5a90
nop word cs:[rax + rax]
mov edx, dword [0x141dcd168]
sub edx, dword [0x141dcd16c]
add edx, 0xd063c399
or edx, 0x185909a7
imul rdx, r11
shr rdx, 0x3a
mov rax, qword [rsi + 0x80]
cmp edx, 0xf10c3aa9
ja 0x1400f5a90
cmp r13, rax
jne 0x1400f5a20
mov rax, r13
lock cmpxchg qword [rsi + 0x80], r10
nop word cs:[rax + rax]
mov eax, dword [0x141dcd188]
xor edx, edx
div dword [0x141dcd18c]
or eax, 0x7a40f56e
add eax, 0x92f7d20e
xor eax, 0xfc7ba78c
cmp eax, 0x1f5949f5
jb 0x1400f59f0
nop word cs:[rax + rax]
test bl, bl
jne 0x1400f5a20
test rcx, rcx
je 0x1400f5a9c
mov eax, dword [0x141dcd170]
and eax, dword [0x141dcd174]
add eax, 0xbd028235
xor eax, 0xc8cda99b
cmp eax, 0xde52b18d
lea rax, [0x140066710]
jbe 0x1400f5a52
mov qword [rsp + 0x60], rax
mov rdx, r12
nop word cs:[rax + rax]
mov qword [rsp + 0x60], rax
test bl, bl
jne 0x1400f5a60
mov eax, dword [0x141dcd178]
or eax, dword [0x141dcd17c]
add eax, 0x787120c7
and eax, 0xef8e0a29
cmp eax, 0x52648004
jae 0x1400f5ab0
jmp 0x1400f5ae0
mov rax, qword [rsi + 0x80]
jmp 0x1400f59a0
mov rcx, qword [0x141dde6e0]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400f5b05
mov r14d, dword [0x141dcd180]
xor r14d, dword [0x141dcd184]
and r14d, 0x14000170
mov qword [rsp + 0x68], r13
call fcn.140066840
mov rdx, r12
mov rcx, qword [rsp + 0x28]
cmp r14d, 0xf31047f
jne 0x1400f5b00
mov qword [rsp + 0x68], r13
call fcn.140066840
mov rdx, r12
mov rcx, qword [rsp + 0x28]
jmp 0x1400f5ab0
lea r14, [rsp + 0x68]
mov r13, qword [rbp]
mov r9, rdi
test bl, bl
jne 0x1400f5b0c
mov eax, dword [0x141dcd190]
xor edx, edx
div dword [0x141dcd194]
imul eax, eax, 0x893d7830
xor eax, 0x65f6294a
add eax, 0xa8400fe8
cmp eax, 0x86610ec4
jb 0x1400f5b10
test r13, r13
je 0x1400f5de0
mov eax, dword [0x141dcd1a0]
add eax, dword [0x141dcd1a4]
xor eax, 0xdad7339e
mov ecx, 0x874929c1
imul rax, rcx
shr rax, 0x3d
cmp eax, 0xb7629f31
je 0x1400f5b3e
add rbp, 8
mov eax, dword [0x141dcd1a8]
and eax, dword [0x141dcd1ac]
add eax, 0x2945bdfe
or eax, 0x640e9dac
imul eax, eax, 0x7d29f5e1
cmp eax, 0xd5bbd93b
jbe 0x1400f5bc0
mov r8d, 0x808
mov rcx, r9
mov rdx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x60], r13
mov r8d, 0x808
mov rcx, r14
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r9, rdi
nop word cs:[rax + rax]
mov r8d, 0x808
mov rcx, r9
mov rdx, rbp
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x60], r13
mov r8d, 0x808
mov rcx, r14
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r9, rdi
test bl, bl
jne 0x1400f5bc0
mov rax, qword [rsp + 0x860]
cmp rax, 0x40
ja 0x1400f5e18
mov rcx, rax
shl rcx, 5
lea r13, [rsp + rcx]
add r13, 0x60
nop
mov ecx, dword [0x141dcd1b0]
sub ecx, dword [0x141dcd1b4]
or ecx, 0x82848142
and ecx, 0x82ac8142
cmp ecx, 0xa57222ef
ja 0x1400f5c10
mov ecx, dword [0x141dcd1b8]
sub ecx, dword [0x141dcd1bc]
imul ecx, ecx, 0x550ebe4e
and ecx, 0xa2fea794
imul ecx, ecx, 0x90c031e5
cmp ecx, 0x67d9938
jb 0x1400f5c30
test rax, rax
je 0x1400f5d40
mov rbp, r12
nop word cs:[rax + rax]
mov eax, dword [0x141dcd1c0]
xor eax, dword [0x141dcd1c4]
imul rax, rax, 0x3507e0fb
shr rax, 0x3c
or eax, 0xf3ce6594
cmp eax, 0xd0bc888
jne 0x1400f5cd0
movups xmm0, xmmword [rbp]
movups xmm1, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [0x141dbb450]
movups xmmword [rbp], xmm0
movups xmm0, xmmword [0x141dbb460]
movups xmmword [rbp + 0x10], xmm0
mov rcx, r15
call qword [rsp + 0x40]
nop word cs:[rax + rax]
mov eax, dword [0x141dcd1c8]
sub eax, dword [0x141dcd1cc]
or eax, 0x88a8e29a
imul eax, eax, 0xdd581409
imul r14, rax, 0x2cd1c855
shr r14, 0x3d
movups xmm0, xmmword [rbp]
movups xmm1, xmmword [rbp + 0x10]
movaps xmmword [rsp + 0x50], xmm1
movaps xmmword [rsp + 0x40], xmm0
movups xmm0, xmmword [0x141dbb450]
movups xmmword [rbp], xmm0
movups xmm0, xmmword [0x141dbb460]
movups xmmword [rbp + 0x10], xmm0
mov rcx, r15
call qword [rsp + 0x40]
cmp r14d, 0xd0f2540e
ja 0x1400f5cd0
add rbp, 0x20
cmp rbp, r13
jne 0x1400f5c70
nop word [rax + rax]
mov eax, dword [0x141dcd1d0]
or eax, dword [0x141dcd1d4]
or eax, 0x51e127ad
imul eax, eax, 0x14c05a35
and eax, 0x4413ec78
cmp eax, 0xe84acb02
ja 0x1400f5d40
mov rcx, qword [rsp + 0x28]
lea r14, [rsp + 0x68]
mov r11d, 0xeb48011b
mov eax, dword [0x141dcd1d8]
xor eax, dword [0x141dcd1dc]
imul eax, eax, 0x54320908
or eax, 0x660fd094
xor eax, 0x949a973c
cmp eax, 0x9618eedd
ja 0x1400f5d73
nop word cs:[rax + rax]
mov eax, dword [0x141dcd1e0]
xor edx, edx
div dword [0x141dcd1e4]
or eax, 0x70768a2c
imul rdx, rax, 0xf36bf15
shr rdx, 0x20
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
cmp eax, 0x1f52e473
je 0x1400f5da0
cmp qword [rsp + 0x30], 8
jne 0x1400f57d3
nop word [rax + rax]
mov eax, dword [0x141dcd198]
xor edx, edx
div dword [0x141dcd19c]
and eax, 0x140dba70
add eax, 0xc70023c3
and eax, 0x40003d92
cmp eax, 0x22c4c0da
je 0x1400f5de0
add rsp, 0x1078
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
ud2