Function at 0x1400d2c71
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xc8
xorps xmm0, xmm0
movaps xmmword [rsp + 0xb0], xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
lea rdx, [rsp + 0x34]
mov qword [rsp + 0x68], rdx
mov rax, qword [rsp + 0x68]
lea rbp, [rsp + 0x4c]
mov qword [rsp + 0x70], rbp
mov rax, qword [rsp + 0x70]
lea rbx, [rsp + 0xc0]
mov qword [rsp + 0x78], rbx
mov rax, qword [rsp + 0x78]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x80], rax
mov rcx, qword [rsp + 0x80]
lea rcx, [rsp + 0x38]
mov qword [rsp + 0x88], rcx
mov rcx, qword [rsp + 0x88]
xor esi, esi
mov dword [rdx], esi
mov dword [rbp], esi
mov qword [rbx], 0
mov qword [rax], 1
lea rcx, [0x1401184a0]
xor edx, edx
call fcn.14009e514
lea rdx, str.EtwEventWrite
mov rcx, rax
call sub.KERNEL32.dll_GetProcAddress
mov qword [rsp + 0x40], rax
lea rax, [0x1401aad00]
movsxd rcx, dword [rsi + rax]
xor dword [rsp + rcx*4 + 0x90], 0x78c104ba
add rsi, 4
cmp rsi, 0x2c
jne 0x1400d2d37
mov eax, 0x775b11f8
xor ecx, ecx
mov qword [rsp + 0x58], rcx
lea r13, [0x1401aad48]
lea r14, [0x1401aad30]
lea rbp, [0x1401aacd0]
xor ecx, ecx
mov qword [rsp + 0x50], rcx
xor esi, esi
cmp eax, 0x5fcc2876
jle 0x1400d2df0
cmp eax, 0x771e161a
jle 0x1400d2e87
cmp eax, 0x771e161b
je 0x1400d2f0e
cmp eax, 0x7cbfe930
je 0x1400d2f2b
cmp eax, 0x775b11f8
jne 0x1400d2d7a
mov rax, qword [rsp + 0x40]
cmp byte [rsp + 0x58], 0
jne 0x1400d2dd0
xor ecx, ecx
movsxd rdx, dword [rcx + rbp]
xor dword [rsp + rdx*4 + 0x90], 0x7a21c57f
add rcx, 4
cmp rcx, 0x28
jne 0x1400d2db7
test rax, rax
mov eax, 0x47eed8a
mov ecx, 0x6b0c795f
cmove eax, ecx
xor eax, dword [rsp + 0x90]
mov cl, 1
mov qword [rsp + 0x58], rcx
jmp 0x1400d2d7a
cmp eax, 0x23b1fc5e
jle 0x1400d2eb8
cmp eax, 0x23b1fc5f
je 0x1400d2fa0
cmp eax, 0x2529ff56
je 0x1400d2fb9
cmp eax, 0x5c59b6c3
jne 0x1400d2d7a
mov rcx, qword [0x1401c82b0]
mov rdx, qword [rsp + 0x40]
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 1
lea r8, [0x1401184d0]
call qword [0x1401c82b8]
mov rcx, qword [0x1401c82b0]
mov r9d, dword [rsp + 0x34]
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x38]
lea r8, [rsp + 0x60]
call qword [0x1401c82a8]
mov eax, dword [rsp + 0xa4]
mov ecx, 0x28158bd0
xor eax, ecx
mov dil, 1
xor r15d, r15d
jmp 0x1400d2d7a
cmp eax, 0x5fcc2877
je 0x1400d2fd3
cmp eax, 0x69603052
jne 0x1400d3016
mov eax, dword [rsp + 0xa0]
mov ecx, 0x28158bd0
xor eax, ecx
mov r15d, 4
xor edi, edi
jmp 0x1400d2d7a
cmp eax, 0x13cd7de5
je 0x1400d2fef
cmp eax, 0x1b98f6ac
jne 0x1400d2d7a
test sil, sil
jne 0x1400d2eee
xor eax, eax
movsxd rcx, dword [rax + r13]
xor dword [rsp + rcx*4 + 0x90], 0x23b3651a
add rax, 4
cmp rax, 0xc
jne 0x1400d2ed5
cmp r15d, 4
mov eax, 0x44936b67
mov ecx, 0x6c41550b
cmovl eax, ecx
xor eax, dword [rsp + 0xa8]
mov sil, 1
jmp 0x1400d2d7a
cmp r15d, 4
mov eax, 0x727e4714
mov ecx, 0x3517e730
cmove eax, ecx
xor eax, dword [rsp + 0xac]
jmp 0x1400d2d7a
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x38], rax
mov rcx, qword [0x1401c82b0]
lea rax, [rsp + 0x34]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x38]
lea r8, [rsp + 0x60]
mov r9d, 0x40
call qword [0x1401c82a8]
cmp byte [rsp + 0x50], 0
jne 0x1400d2f7e
xor ecx, ecx
movsxd rdx, dword [rcx + r14]
xor dword [rsp + rdx*4 + 0x90], 0x316dbcb9
add rcx, 4
cmp rcx, 0x18
jne 0x1400d2f65
test eax, eax
mov eax, 0x6b80f197
mov ecx, 0x5eb97706
cmove eax, ecx
xor eax, dword [rsp + 0x9c]
mov cl, 1
mov qword [rsp + 0x50], rcx
jmp 0x1400d2d7a
mov ebx, r12d
and bl, 1
mov eax, dword [rsp + 0xb8]
mov ecx, 0x60a09eb7
xor eax, ecx
jmp 0x1400d2d7a
mov r12d, edi
and r12b, 1
mov eax, dword [rsp + 0xb4]
mov ecx, 0x338fe439
xor eax, ecx
jmp 0x1400d2d7a
test r15d, r15d
mov eax, 0x727e4714
mov ecx, 0x3517e730
cmove eax, ecx
xor eax, dword [rsp + 0xb0]
jmp 0x1400d2d7a
mov edx, 1
lea rcx, [0x1401184c8]
call fcn.1400075e8
mov eax, dword [rsp + 0x98]
mov ecx, 0x21513d9a
xor eax, ecx
xor r12d, r12d
jmp 0x1400d2d7a
cmp eax, 0x62405f72
jne 0x1400d2d7a
mov rax, qword [rsp + 0x88]
mov rax, qword [rsp + 0x80]
mov rax, qword [rsp + 0x78]
mov rax, qword [rsp + 0x70]
mov rax, qword [rsp + 0x68]
and bl, 1
mov eax, ebx
add rsp, 0xc8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret