Function at 0x1400b9b70
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x58
mov rsi, rdx
mov rdi, rcx
xor eax, eax
test al, al
jne 0x1400b9bc1
mov eax, dword [0x141dd16c0]
xor edx, edx
div dword [0x141dd16c4]
imul ebx, eax, 0xb7685c26
or ebx, 0x1a6370f2
xor ebx, 0x486971c7
lea r8, [rsi - 1]
lea rcx, [rsp + 0x28]
mov rdx, rdi
call fcn.140053980
cmp ebx, 0x68f2bc4d
jbe 0x1400b9bd4
lea r8, [rsi - 1]
lea rcx, [rsp + 0x28]
mov rdx, rdi
cli
call fcn.140053980
jmp 0x1400b9b88
mov rcx, qword [rsp + 0x28]
nop dword [rax]
add byte [rax], al
add byte [rax], al
mov eax, dword [0x141dd16c8]
xor edx, edx
div dword [0x141dd16cc]
or eax, 0xebfffdf9
cmp eax, 0x74b9c86b
je 0x1400b9be0
test rcx, rcx
jne 0x1400ba007
mov rsi, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x38]
xor eax, eax
test al, al
je 0x1400b9c23
lea rcx, [rsp + 0x40]
mov rdx, rsi
mov r8, rdi
call fcn.14008f360
movabs r14, 0x8000000000000000
lea rbx, [rsp + 0x40]
nop word cs:[rax + rax]
nop dword [rax + rax]
mov eax, dword [0x141dd16d0]
imul eax, dword [0x141dd16d4]
add eax, 0x6181cae0
imul r15, rax, 0x74153ff1
shr r15, 0x3e
or r15d, 0x4f9eec00
mov rcx, rbx
mov rdx, rsi
mov r8, rdi
call fcn.14008f360
cmp r15d, 0x95ba0cbb
ja case.0x140097117.220
mov rdi, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
cmp rdi, r14
jne 0x1400b9e18
xor eax, eax
test al, al
jne 0x1400b9c90
mov eax, esi
and eax, 3
nop dword [rax]
mov ecx, dword [0x141dd1708]
sub ecx, dword [0x141dd170c]
or ecx, 0xa85ff0dc
cmp ecx, 0x91014f48
je 0x1400b9ca0
lea rcx, [0x141db8140]
movsxd rax, dword [rcx + rax*4]
add rax, rcx
jmp rax
mov eax, dword [0x141dd16d8]
add eax, dword [0x141dd16dc]
or eax, 0x5d1a53ec
add eax, 0xecb29de1
cmp eax, 0x293edfd2
jae 0x1400b9e42
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rax, qword [0x141dbc008]
mov rbx, qword [sym.imp.KERNEL32.dll_GetCurrentThread]
nop dword [rax]
mov r14d, dword [0x141dd16e0]
imul r14d, dword [0x141dd16e4]
xor r14d, 0x407d1497
imul rax, r14, 0x3c3f6065
shr rax, 0x20
sub r14d, eax
shr r14d, 1
add r14d, eax
shr r14d, 0x1c
or r14d, 0xf9ebd746
call rbx
mov r8, qword [0x141dbc008]
cmp r14d, 0x5aac3f1e
jb 0x1400b9e50
mov rcx, rax
mov rdx, rsi
call r8
mov eax, dword [0x141dd16e8]
imul eax, dword [0x141dd16ec]
add eax, 0x7098c60e
or eax, 0x8765388a
and eax, 0xcf677acf
cmp eax, 0xbe01fc11
jb 0x1400b9ea0
test rdi, rdi
je 0x1400b9fb0
mov rdi, qword [0x141dd7fe0]
mov eax, dword [0x141dd16f0]
xor eax, dword [0x141dd16f4]
mov ecx, 0xa7e95aab
imul rcx, rax
shr rcx, 0x3d
imul eax, ecx, 0x2fcc863a
cmp eax, 0xd0dd981
jae 0x1400b9f07
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov ebp, dword [0x141dd16f8]
or ebp, dword [0x141dd16fc]
or ebp, 0xfdffbbfa
mov rcx, rdi
xor edx, edx
mov r8, rsi
call rbx
cmp ebp, 0xdf4411d6
je 0x1400b9f10
nop word cs:[rax + rax]
mov eax, dword [0x141dd1700]
imul eax, dword [0x141dd1704]
imul eax, eax, 0xa7ccbc32
add eax, 0x90b8faa9
or eax, 0xf49eda22
cmp eax, 0xcaa34941
je 0x1400b9f40
jmp 0x1400b9fb0
mov eax, dword [0x141dd1748]
add eax, dword [0x141dd174c]
and eax, 0x87dd1fd4
imul eax, eax, 0x8437014a
cmp eax, 0x4c939476
jb 0x1400b9fb0
mov ecx, 0xbd6e0e6d
nop word cs:[rax + rax]
mov eax, dword [0x141dd1750]
xor edx, edx
div dword [0x141dd1754]
imul rax, rcx
shr rax, 0x3e
add eax, 0x8dcad5c3
or eax, 0xa9111e7b
cmp eax, 0x471f3e6
je 0x1400b9fe0
add rsp, 0x58
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret