Function at 0x1400322e0
Capabilities:
Encode data using xor

Disassembly:
xchg r8, rcx
mov qword [rsp + 8], r8
xchg rcx, r8
nop
push r9
mov qword [rsp], rbx
nop
push r12
mov qword [rsp], rsi
nop
push 0x374186b4
mov qword [rsp], rdi
push r12
nop
push 0x5c64a56f
mov qword [rsp], r13
nop
sub rsp, 8
mov qword [rsp], r14
nop
push 0x14b581fa
mov qword [rsp], r15
sub rsp, 0x40
mov rbx, r8
mov rsi, rdx
xchg rcx, r13
mov rcx, r13
xchg r13, rcx
mov rdx, qword [rcx]
mov r15, rsi
sub r15, rdx
xchg r12, rax
mov r12, qword [rcx + 8]
xchg r12, rax
sub rax, rdx
sar rax, 3
sar rax, 1
movabs r14, 0xfffffff6b4771fa
xor r14, 0x5401ace2
xor r14, 0x23a27223
add r14, 0x585f1679
sub r14, 0x13864a06
add r14, 0x7fffffff
add r14, 0x1e428452
cmp rax, r14
je 0x140032631
lea r8, [rax + 1]
xchg rdi, r8
mov qword [rsp + 0x28], rdi
xchg r8, rdi
mov rcx, qword [rcx + 0x10]
sub rcx, rdx
sar rcx, 1
sar rcx, 1
sar rcx, 2
xchg r11, rdx
mov r11, rcx
xchg r11, rdx
shr rdx, 1
xchg r14, rax
mov r14, rax
xchg r14, rax
sub rax, rdx
cmp rcx, rax
ja 0x1400323d7
lea r14, [rdx + rcx]
cmp r14, r8
cmovb r14, r8
xchg r14, rbp
mov qword [rsp + 0x98], rbp
xchg r14, rbp
xchg r14, rdx
mov r14, rdx
xchg r14, rdx
xchg rbp, r13
mov rcx, rbp
xchg r13, rbp
call fcn.140053ae0
xchg r14, rax
mov r12, r14
xchg r14, rax
mov qword [rsp + 0x38], rax
and r15, 0xfffffffffffffff0
add rax, r15
mov qword [rsp + 0x20], rax
lea rcx, [rax + 0x10]
mov qword [rsp + 0x30], rcx
mov byte [rax], 0x13
xor byte [rax], 0x1f
xor byte [rax], 0x38
xor byte [rax], 0x3b
add byte [rax], 0x16
xor byte [rax], 0x25
lea rdi, [rax + 8]
xor ecx, ecx
mov qword [rdi], rcx
movzx ebx, byte [rbx]
movzx edx, byte [rax]
xchg r10, rcx
mov r10, rdi
xchg r10, rcx
call fcn.1400545a0
mov byte [rsp + 0x88], bl
xchg r9, rax
mov r9, qword [rsp + 0x88]
xchg r9, rax
xchg r8, rax
mov qword [rdi], r8
xchg r8, rax
xchg rbx, rcx
mov rcx, qword [rsp + 0x20]
xchg rbx, rcx
mov byte [rbx], SHCreateMemStream
xor byte [rbx], 0x41
xor byte [rbx], 0x63
add byte [rbx], 1
add byte [rbx], 0x12
sub byte [rbx], 0x38
mov qword [rsp + 0x88], rbx
xchg rdx, r9
mov rdx, qword [r13 + 8]
xchg r9, rdx
xchg r14, rax
mov r14, qword [r13]
xchg r14, rax
mov rdx, r12
cmp rsi, r9
jne 0x1400324f8
cmp rax, r9
je 0x1400325aa
xor r8d, r8d
nop dword [rax]
movzx ecx, byte [rax]
mov byte [rdx], cl
xchg r14, rcx
mov r14, qword [rax + 8]
xchg rcx, r14
xchg rdi, rcx
mov qword [rdx + 8], rdi
xchg rcx, rdi
mov byte [rax], r8b
mov qword [rax + 8], r8
lea rdx, [rdx + 0x10]
nop
add rax, 0x2674a9eb
sub rax, 0x2674a9db
cmp rax, r9
jne 0x1400324b9
jmp 0x1400325aa
xor r8d, r8d
cmp rax, rsi
je 0x14003253d
nop dword [rax + rax]
movzx ecx, byte [rax]
mov byte [rdx], cl
xchg rcx, r8
mov r8, qword [rax + 8]
xchg rcx, r8
mov qword [rdx + 8], rcx
mov byte [rax], r8b
mov qword [rax + 8], r8
lea rdx, [rdx + 0x10]
nop
sub rax, 0x544dd425
add rax, 0x544dd435
cmp rax, rsi
jne 0x140032509
xchg r12, rbp
mov qword [rsp + 0x88], rbp
xchg r12, rbp
xchg rbp, rdx
mov rbp, qword [r13 + 8]
xchg rdx, rbp
cmp rsi, rdx
je 0x1400325aa
lea rcx, [rsi + 8]
sub r15, rsi
lea r9, [r15 + r12]
lea r10, [r15 + r12]
movzx eax, byte [rcx - 8]
mov byte [r10 + rcx + 8], al
mov rax, qword [rcx]
mov qword [r9 + rcx + 0x10], rax
mov byte [rcx - 8], 0x42
add byte [rcx - 8], 0x36
sub byte [rcx - 8], 0x36
sub byte [rcx - 8], 0x1f
add byte [rcx - 8], 0x43
xor byte [rcx - 8], 0x66
mov qword [rcx], r8
lea rcx, [rcx + 0x10]
lea rax, [rcx - 8]
cmp rax, rdx
jne 0x14003256d
xchg r9, r11
mov r11, r14
xchg r11, r9
mov r8, qword [rsp + 0x28]
mov rdx, r12
mov rcx, r13
call fcn.140052bf0
xchg rbx, rax
mov rbx, rax
xchg rbx, rax
add rsp, 0x40
push rdx
push rax
push rbx
push rdx
push rbx
xchg qword [rsp + 0x28], r15
pop rbx
pop rdx
pop rbx
pop rax
pop rdx
add rsp, 8
push rbx
push rbx
push rax
push rdx
xchg qword [rsp + 0x20], r14
add rsp, 0x28
push rcx
push rbx
push rbx
xchg qword [rsp + 0x18], r13
add rsp, 0x20
push rcx
push rdx
push rbx
push rdx
push rax
push rax
push rbx
push rcx
xchg qword [rsp + 0x40], r12
add rsp, 0x48
nop
mov rdi, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rsi, qword [rsp - 8]
nop
add rsp, 8
mov rbx, qword [rsp - 8]
nop
add rsp, 8
jmp qword [rsp - 8]
call fcn.14002fa40
int3