Function at 0x1400993e0
Capabilities:
Create directory
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rsi, rdx
mov rdi, rcx
mov eax, dword [0x141dd1608]
and eax, dword [0x141dd160c]
movabs r14, 0x8000000000000000
or eax, 0x92778584
and eax, 0xb37f87a4
cmp eax, 0xdc92c063
ja 0x14009942f
lea rcx, [rsp + 0x38]
mov rdx, rdi
mov r8, rsi
call fcn.140091760
xor eax, eax
test al, al
je 0x140099441
lea rcx, [rsp + 0x38]
mov rdx, rdi
mov r8, rsi
call fcn.140091760
jmp 0x140099419
mov rax, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
cmp rax, r14
je 0x140099570
mov ecx, dword [0x141dd1610]
and ecx, dword [0x141dd1614]
add ecx, 0xbbe8b0eb
xor ecx, 0xc033ef9e
add ecx, 0xfd41f438
cmp ecx, 0x2bdb18c1
jbe 0x14009947f
mov qword [rsp + 0x20], rax
mov r15, qword [rsp + 0x48]
mov ecx, 0x9a365aa1
nop dword [rax]
mov edx, dword [0x141dd1618]
xor edx, dword [0x141dd161c]
or edx, 0xa2deefd1
add edx, 0xd965083b
imul rdx, rcx
shr rdx, 0x3a
mov qword [rsp + 0x20], rax
cmp edx, 0x6c2d847c
ja 0x140099490
mov eax, dword [0x141dd1620]
xor eax, dword [0x141dd1624]
imul rax, rax, 0x6146685f
shr rax, 0x3e
imul eax, eax, 0x2ce0ce7
add eax, 0x60f8a912
cmp eax, 0x33af7009
jae 0x140099502
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r15
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x20]
mov r8b, 1
call fcn.140094c90
lea rdi, [rsp + 0x50]
lea rbx, [rsp + 0x20]
nop dword [rax]
mov eax, dword [0x141dd1628]
xor edx, edx
div dword [0x141dd162c]
mov ebp, eax
or ebp, 0xa2a80e0
xor ebp, 0x82280034
or ebp, 0x75d56f0b
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x30], r15
mov rcx, rdi
mov rdx, rbx
mov r8b, 1
call fcn.140094c90
cmp ebp, 0xceef9f4a
je 0x140099510
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
cmp rbx, r14
jne 0x1400995e0
nop word cs:[rax + rax]
mov eax, dword [0x141dd1638]
or eax, dword [str.Fi:D]
and eax, 0x9a591ffb
imul eax, eax, 0x9a4fc2a1
add eax, 0x8fa47086
cmp eax, 0xeec1fea4
jae 0x140099570
mov rdi, rsi
nop word cs:[rax + rax]
mov eax, dword [0x141dd1690]
xor eax, dword [0x141dd1694]
add eax, 0x481891e9
imul rax, rax, 0x32562c95
shr rax, 0x3d
cmp eax, 0x10ba6aa2
je 0x1400995a0
mov rax, rdi
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret
mov eax, dword [0x141dd1630]
add eax, dword [0x141dd1634]
or eax, 0x753b3595
and eax, 0xf53b7d95
cmp eax, 0xa52353f6
jb 0x1400995e0
xor edi, edi
mov rcx, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
nop word [rax + rax]
test dil, dil
jne 0x140099610
test eax, eax
je 0x140099690
nop dword [rax]
mov eax, dword [0x141dd1640]
sub eax, dword [0x141dd1644]
or eax, 0x600211d2
and eax, 0x62b215d7
cmp eax, 0xfbec951
je 0x140099620
test rbx, rbx
je 0x1400996af
mov eax, dword [0x141dd1648]
xor eax, dword [0x141dd164c]
cmp eax, 0xcd228ae9
jne 0x14009965c
mov rax, qword [0x141ddc4e0]
xor eax, eax
nop
mov rbx, qword [0x141ddc4e0]
test al, al
jne 0x140099660
mov eax, dword [0x141dd1650]
sub eax, dword [0x141dd1654]
xor eax, 0x62b3a298
imul eax, eax, 0x29ee3b95
add eax, 0x370c2694
cmp eax, 0x79b6a81e
jae 0x1400996b6
jmp 0x1400996f0
mov eax, dword [0x141dd1660]
or eax, dword [0x141dd1664]
add eax, 0x618783
and eax, 0x230e76f2
cmp eax, 0x7f30dbff
jne 0x140099700
jmp 0x14009972a
xor edi, edi
jmp 0x1400995a0
mov ebp, dword [0x141dd1658]
and ebp, dword [0x141dd165c]
or ebp, 0x3b5af8c7
add ebp, 0x8c79dfd3
xor ebp, 0x5935b78e
xor edi, edi
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebp, 0x65ad8ea
jae 0x1400995a0
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400996b6
mov eax, dword [0x141dd1668]
xor edx, edx
div dword [0x141dd166c]
mov edi, eax
add edi, 0x4b12f243
and edi, 0xa19
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp edi, 0xe164b634
jbe 0x140099732
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140099700
movsxd rdi, eax
shl rdi, 0x20
or rdi, 2
mov eax, dword [0x141dd1670]
xor edx, edx
div dword [0x141dd1674]
nop dword [rax + rax]
mov eax, dword [0x141dd1678]
imul eax, dword [0x141dd167c]
imul eax, eax, 0xa711f0d3
add eax, 0x1b3ea677
imul rcx, rax, 0x70a1267
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
cmp eax, 0x99050f2b
ja 0x140099750
test rbx, rbx
je 0x1400995a0
nop dword [rax]
mov eax, dword [0x141dd1680]
add eax, dword [0x141dd1684]
cmp eax, 0xaeabac3d
je 0x140099790
xor eax, eax
test al, al
je 0x1400997bb
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov ebx, 0xa27bb919
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x141dd1688]
sub eax, dword [0x141dd168c]
imul rax, rbx
shr rax, 0x3d
imul ebp, eax, 0xfc55d67c
add ebp, 0xe2444f82
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rsi
call r14
cmp ebp, 0xc83e9a0c
jb 0x1400997d0
jmp 0x1400995a0