Function at 0x1400d9110
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rdi, rdx
mov rsi, rcx
mov r8d, 0x18
nop dword [rax]
mov r9d, dword [0x141dd94f8]
xor r9d, dword [0x141dd94fc]
add r9d, 0x365404f0
xor r9d, 0x6f206ba0
mov rax, rdi
mul r8
seto cl
cmp r9d, 0xc7762171
ja 0x1400d9130
mov r15, rax
mov eax, dword [0x141dd9500]
xor edx, edx
div dword [0x141dd9504]
movabs rax, 0x7ffffffffffffffc
nop dword [rax]
cmp r15, rax
seta dl
mov r8d, dword [0x141dd9508]
add r8d, dword [0x141dd950c]
xor r8d, 0x93fdef3e
imul r8d, r8d, 0x26624fd3
cmp r8d, 0x10ed3d8a
je 0x1400d9180
or cl, dl
jne 0x1400d920f
nop
mov eax, dword [0x141dd9520]
imul eax, dword [0x141dd9524]
or eax, 0xeb984454
add eax, 0xa4ea2c32
and eax, 0x94c42ea4
cmp eax, 0xf878e255
je 0x1400d91b0
test r15, r15
je 0x1400d9202
movzx eax, byte [0x141ddc4f8]
mov eax, dword [0x141dd9528]
sub eax, dword [0x141dd952c]
imul eax, eax, 0x1fac4573
add eax, 0xb1cdea4e
cmp eax, 0x74bd287c
jae 0x1400d925f
jmp 0x1400d9291
mov ebx, 4
xor r12d, r12d
jmp 0x1400d92c5
xor eax, eax
test al, al
jne 0x1400d923a
mov eax, dword [0x141dd9510]
and eax, dword [0x141dd9514]
and eax, 0x22e82ea2
imul eax, eax, 0x9ee43ae9
or eax, 0xa6495489
ud2
ud2
ud2
mov eax, dword [0x141dd9530]
xor edx, edx
div dword [0x141dd9534]
imul ebp, eax, 0xc4af78e1
add ebp, 0x6db838a7
xor ebp, 0x55c0b7c3
xor ecx, ecx
mov rdx, r15
call fcn.1400c0a10
cmp ebp, 0x65b64e45
jbe 0x1400d929d
xor ecx, ecx
mov rdx, r15
call fcn.1400c0a10
jmp 0x1400d925f
mov rbx, rax
mov eax, dword [0x141dd9538]
xor eax, dword [0x141dd953c]
xor eax, 0x90432510
or eax, 0x41b89aed
cmp eax, 0x80221716
je 0x1400d92a0
mov r12, rdi
test rbx, rbx
je 0x1400d925d
mov eax, dword [0x141dd9540]
add eax, dword [0x141dd9544]
or eax, 0x8d8e2fef
imul eax, eax, 0x6218d08e
add eax, 0x1bdaa08e
cmp eax, 0x575cdc3e
jb 0x1400d9337
mov eax, dword [0x141dd9548]
xor eax, dword [0x141dd954c]
imul eax, eax, 0xa4bc01d5
add eax, 0x2c925fff
shr eax, 2
imul r14, rax, 0x44e0cb45
shr r14, 0x3a
lea eax, [rdi*8]
lea eax, [rax + rax*2]
mov dword [rsp + 0x20], eax
mov ecx, 0xb
xor edx, edx
xor r8d, r8d
mov r9, rbx
call qword [sym.imp.powrprof.dll_CallNtPowerInformation]
cmp r14d, 0xbeef1637
jbe 0x1400d935a
lea eax, [rdi*8]
lea eax, [rax + rax*2]
mov dword [rsp + 0x20], eax
mov ecx, 0xb
xor edx, edx
xor r8d, r8d
mov r9, rbx
call qword [sym.imp.powrprof.dll_CallNtPowerInformation]
jmp 0x1400d92e8
test eax, eax
js 0x1400d94a0
nop word cs:[rax + rax]
mov eax, dword [0x141dd9590]
xor eax, dword [0x141dd9594]
or eax, 0x1d90991a
add eax, 0xf7a8ffc2
or eax, 0xa4de0434
cmp eax, 0x4ba5a578
jb 0x1400d9370
nop word cs:[rax + rax]
mov eax, dword [0x141dd9598]
imul eax, dword [0x141dd959c]
or eax, 0x114eb6b2
add eax, 0x76bff60b
cmp eax, 0xe4562176
ja 0x1400d93a0
test rdi, rdi
je 0x1400d953c
lea rdx, [rdi*8]
movzx eax, byte [0x141ddc4f8]
xor ecx, ecx
call fcn.1400c0a10
mov r14, rax
mov eax, 0x94aef07f
nop word cs:[rax + rax]
mov ecx, dword [0x141dd95a0]
xor ecx, dword [0x141dd95a4]
or ecx, 0xa9bafd1d
imul rcx, rax
shr rcx, 0x3e
imul ecx, ecx, 0x2e81c741
cmp ecx, 0x9932e588
ja 0x1400d93f0
test r14, r14
je 0x1400d96db
add r15, 0xffffffffffffffe8
movabs rcx, 0xaaaaaaaaaaaaaaab
mov rax, r15
mul rcx
mov rcx, rdx
shr rcx, 4
inc rcx
nop
mov eax, dword [0x141dd95a8]
sub eax, dword [0x141dd95ac]
or eax, 0xcec1a70b
cmp eax, 0xb3bafc66
je 0x1400d9440
mov r8d, ecx
and r8d, 3
nop
mov eax, dword [0x141dd95b0]
or eax, dword [0x141dd95b4]
and eax, 0x79e752a
imul eax, eax, 0xe8477ece
add eax, 0x6f2212f2
cmp eax, 0x85c5be5b
ja 0x1400d9460
cmp r15, 0x48
jae 0x1400d954a
xor r15d, r15d
mov rax, rbx
jmp 0x1400d9631
mov eax, dword [0x141dd9550]
or eax, dword [0x141dd9554]
imul eax, eax, 0xf3632d4a
or eax, 0x9d41ef4b
imul eax, eax, 0x90c97c06
cmp eax, 0x2572713a
jb 0x1400d94a0
test rdi, rdi
je 0x1400d96d2
lea r14, [rdi*8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd9558]
xor edx, edx
div dword [0x141dd955c]
imul rax, rax, 0x49cd525f
shr rax, 0x3d
or eax, 0x60219284
and eax, 0x60219286
cmp eax, 0x3d69ccb
jb 0x1400d94e0
mov eax, dword [0x141dd9560]
or eax, dword [0x141dd9564]
imul rax, rax, 0x617e6599
shr rax, 0x3e
imul eax, eax, 0xf9dbdaac
add eax, 0x308b737d
cmp eax, 0xe50dc723
jbe 0x1400d979c
jmp 0x1400d97c9
mov r14d, 8
xor r15d, r15d
jmp 0x1400d9690
and rcx, 0xfffffffffffffffc
nop
mov eax, dword [0x141dd95b8]
xor edx, edx
div dword [0x141dd95bc]
imul eax, eax, 0x6a80ddaa
or eax, 0x620d20e0
and eax, 0x639d71fc
cmp eax, 0xcc731087
ja 0x1400d9550
xor edx, edx
xor r15d, r15d
mov rax, rbx
nop dword [rax]
test dl, dl
je 0x1400d95c0
mov r9d, dword [rax + 8]
lea r10, [r15*8]
mov qword [r14 + r15*8], r9
mov r9d, dword [rax + 0x20]
mov r11, r10
or r11, 8
mov qword [r14 + r11], r9
mov r9d, dword [rax + 0x38]
mov r11, r10
or r11, 0x10
mov qword [r14 + r11], r9
mov r9d, dword [rax + 0x50]
or r10, 0x18
mov qword [r14 + r10], r9
nop
mov r9d, dword [0x141dd95c8]
imul r9d, dword [0x141dd95cc]
add r9d, 0x3c85566d
xor r9d, 0xce3955b8
lea r10, [r15*8]
mov r11, r10
or r11, 8
mov r13d, dword [rax + 8]
mov qword [r14 + r15*8], r13
mov r13d, dword [rax + 0x20]
mov qword [r14 + r11], r13
mov r11, r10
or r11, 0x10
or r10, 0x18
mov r13d, dword [rax + 0x38]
mov qword [r14 + r11], r13
mov r11d, dword [rax + 0x50]
mov qword [r14 + r10], r11
cmp r9d, 0x95027ff1
ja 0x1400d95c0
add rax, 0x60
add r15, 4
cmp r15, rcx
jne 0x1400d9580
test r8, r8
je 0x1400d9690
xor ecx, ecx
xor edx, edx
nop word [rax + rax]
mov r9d, dword [0x141dd95d0]
or r9d, dword [0x141dd95d4]
imul r9d, r9d, 0xc1d0eaa3
cmp r9d, 0x57870d8e
jne 0x1400d9670
mov r9d, dword [rax + 8]
mov qword [r14 + r15*8], r9
nop word cs:[rax + rax]
mov r9d, dword [rax + 8]
mov qword [r14 + r15*8], r9
test cl, cl
jne 0x1400d9670
add rax, 0x18
inc r15
inc rdx
cmp rdx, r8
jne 0x1400d9640
nop dword [rax + rax]
mov eax, dword [0x141dd95d8]
or eax, dword [0x141dd95dc]
add eax, 0xcdd9eb27
cmp eax, 0x1a68170c
jb 0x1400d9690
test r12, r12
je 0x1400d987b
mov eax, dword [0x141dd95e0]
and eax, dword [0x141dd95e4]
or eax, 0xb2e70830
cmp eax, 0xbf7ea477
jne 0x1400d9842
jmp 0x1400d9867
mov eax, 8
xor ecx, ecx
jmp 0x1400d9705
ud2
mov qword [rsi], rcx
mov qword [rsi + 8], rax
mov qword [rsi + 0x10], rdi
test r12, r12
je 0x1400d978b
nop word cs:[rax + rax]
mov eax, dword [0x141dd9580]
xor eax, dword [0x141dd9584]
imul eax, eax, 0x18872fcc
add eax, 0x83a678f4
cmp eax, 0x8c2638e
jb 0x1400d9720
xor eax, eax
test al, al
jne 0x1400d9777
mov esi, dword [0x141dd9588]
imul esi, dword [0x141dd958c]
and esi, 0x2130a0b0
xor esi, 0x21108068
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp esi, 0xc45399bc
jbe 0x1400d978b
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400d9744
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov ebp, dword [0x141dd9568]
or ebp, dword [0x141dd956c]
add ebp, 0xf083e432
or ebp, 0x376f99d5
mov ecx, 8
mov rdx, r14
call fcn.1400c0a10
cmp ebp, 0x73df5541
jae 0x1400d97d8
mov ecx, 8
mov rdx, r14
call fcn.1400c0a10
jmp 0x1400d979c
xor ecx, ecx
nop word [rax + rax]
test cl, cl
jne 0x1400d97e0
test rax, rax
je 0x1400d9818
nop dword [rax]
mov ecx, dword [0x141dd9570]
add ecx, dword [0x141dd9574]
and ecx, 0x42480000
add ecx, 0x9ccaa42e
cmp ecx, 0xdffe8260
jae 0x1400d97f0
mov rcx, rdi
jmp 0x1400d9705
ud2
mov eax, dword [0x141dd95e8]
or eax, dword [0x141dd95ec]
imul eax, eax, 0x642b9345
and eax, 0x8c977611
mov rcx, qword [0x141ddc4e0]
cmp eax, 0xcd20a0b1
jne 0x1400d9870
mov rax, qword [0x141ddc4e0]
jmp 0x1400d9842
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd95f0]
xor edx, edx
div dword [0x141dd95f4]
or eax, 0xd5b51120
shr eax, 4
imul rax, rax, 0x1502281f
shr rax, 0x36
cmp eax, 0xd963c934
jne 0x1400d98b0
mov qword [rsi], rdi
nop word cs:[rax + rax]
mov eax, dword [0x141dd95f8]
xor edx, edx
div dword [0x141dd95fc]
add eax, 0x1cfdf19e
and eax, 0x80fd3306
add eax, 0xe7e3f789
mov qword [rsi], rdi
cmp eax, 0xbf53dec9
jb 0x1400d98b0
mov eax, dword [0x141dd9600]
xor eax, dword [0x141dd9604]
xor eax, 0x4e785374
imul eax, eax, 0x3672641f
add eax, 0x66b06756
cmp eax, 0xd669d924
ja 0x1400d9926
mov eax, dword [0x141dd9608]
or eax, dword [0x141dd960c]
add eax, 0xe23b86e
imul rax, rax, 0x29b9e285
shr rax, 0x3c
xor eax, 0x722a8dca
mov qword [rsi + 8], r14
cmp eax, 0xb9eb2ddc
jbe 0x1400d992c
mov qword [rsi + 8], r14
jmp 0x1400d98fa
mov qword [rsi + 0x10], r15
jmp 0x1400d978b