Function at 0x1400fdaa0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rsi, rcx
mov eax, dword [str.l1U4q]
add eax, dword [0x141dd2aac]
or eax, 0xb95d321d
imul eax, eax, 0xb3480367
add eax, 0x8c52df24
cmp eax, 0xd05c0186
ja 0x1400fdb00
mov eax, dword [0x141dd2ab0]
add eax, dword [0x141dd2ab4]
imul ecx, eax, 0xd10c7673
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
mov rdi, rsp
cmp ecx, 0xac4aad3
jne 0x1400fdb0f
mov eax, 0x10
call fcn.1400f1350
sub rsp, rax
jmp 0x1400fdad6
movzx ecx, byte [rsi]
cmp cl, 1
jne 0x1400fdb40
mov eax, 0xffffff9d
nop dword [rax]
pause
movzx ecx, byte [rsi]
cmp cl, 1
jne 0x1400fdb40
lea edx, [rax + 1]
test eax, eax
mov eax, edx
jne 0x1400fdb20
nop word cs:[rax + rax]
mov eax, dword [str.eU0g]
imul eax, dword [0x141dd2abc]
or eax, 0xe7fc2a41
imul rax, rax, 0x48b493a9
shr rax, 0x3e
or eax, 0x664b9462
cmp eax, 0xef11754d
je 0x1400fdb40
test cl, cl
jne 0x1400fdbfb
mov eax, dword [0x141dd2ac0]
and eax, dword [0x141dd2ac4]
mov ecx, 0xb9862b83
imul rcx, rax
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1c
and eax, 0xfffffffb
xor eax, 0xec36965c
cmp eax, 0x7fe20b3b
jae 0x1400fdbaa
mov cl, 1
xor eax, eax
lock cmpxchg byte [rsi], cl
mov dl, 1
nop dword [rax]
mov eax, dword [0x141dd2ac8]
imul eax, dword [0x141dd2acc]
imul r8d, eax, 0x8d435487
xor r8d, 0x5bf7341c
add r8d, 0xb3b530af
xor eax, eax
lock cmpxchg byte [rsi], dl
mov ecx, eax
sete al
cmp r8d, 0xd9de7696
ja 0x1400fdbb0
test al, al
je 0x1400fdbfb
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov rbx, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WaitOnAddress]
xor r14d, r14d
mov r15d, 0xe2441881
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
cmp cl, 2
je 0x1400fdc2d
mov al, 2
xchg byte [rsi], al
test al, al
je 0x1400fdbea
mov byte [rdi], 2
sub rsp, 0x20
mov r8d, 1
mov rcx, rsi
mov rdx, rdi
mov r9d, 0xffffffff
call rbx
add rsp, 0x20
nop dword [rax]
test r14b, r14b
jne 0x1400fdc50
cmp eax, 1
je 0x1400fdcd5
mov eax, dword [0x141dd2ad0]
sub eax, dword [0x141dd2ad4]
or eax, 0x84518005
xor eax, 0x8000c12c
or eax, 0x7bae3ed2
cmp eax, 0x8584c8d8
ja 0x1400fdcb5
nop dword [rax]
mov eax, dword [0x141dd2ad8]
xor eax, dword [0x141dd2adc]
imul r13d, eax, 0x2f4d1f0d
add r13d, 0x84587081
xor r13d, 0x1bd0bd8
sub rsp, 0x20
call r12
add rsp, 0x20
cmp r13d, 0x20f33741
jae 0x1400fdcd0
sub rsp, 0x20
call r12
add rsp, 0x20
jmp 0x1400fdc80
test r14b, r14b
jne 0x1400fdcd0
mov eax, dword [0x141dd2ae0]
sub eax, dword [0x141dd2ae4]
and eax, 0x893d1fb1
imul eax, eax, 0xad6f498a
add eax, 0xc699c570
cmp eax, 0x58c2454a
jb 0x1400fdda0
nop dword [rax]
mov eax, dword [0x141dd2ae8]
xor edx, edx
div dword [0x141dd2aec]
imul eax, eax, 0x80584d6
imul rax, r15
shr rax, 0x3e
or eax, 0x53f01410
movzx ecx, byte [rsi]
cmp eax, 0x81a429b6
ja 0x1400fdda0
mov eax, dword [0x141dd2af0]
or eax, dword [0x141dd2af4]
imul eax, eax, 0x2f5f6b3e
cmp eax, 0x9a33e92f
je 0x1400fdd2b
cmp cl, 1
jne 0x1400fdd70
mov eax, 0xffffff9d
nop
pause
movzx ecx, byte [rsi]
cmp cl, 1
jne 0x1400fdd70
lea edx, [rax + 1]
test eax, eax
mov eax, edx
jne 0x1400fdd50
nop word cs:[rax + rax]
mov eax, dword [0x141dd2af8]
xor edx, edx
div dword [0x141dd2afc]
imul eax, eax, 0xab6cf7c7
add eax, 0xf7d3f7e5
cmp eax, 0xfbc9aa84
jae 0x1400fdd70
jmp 0x1400fdc20
movzx eax, byte [rsi]
jmp 0x1400fdd00