Function at 0x1400dff30
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rdx
mov rdi, rcx
nop word cs:[rax + rax]
mov eax, dword [0x141ddc600]
and eax, dword [0x141ddc604]
imul eax, eax, 0x4a54ac8c
add eax, 0x29652796
or eax, 0xea78b577
cmp eax, 0x6a2004e7
je 0x1400dff50
mov rax, qword [r8 + 8]
nop word [rax + rax]
mov ecx, dword [0x141ddc608]
and ecx, dword [0x141ddc60c]
add ecx, 0x3dcc63df
imul rcx, rcx, 0x536fffaf
shr rcx, 0x3e
or ecx, 0x5066dcba
cmp ecx, 0x8c1f0551
je 0x1400dff80
test rax, rax
je 0x1400e0000
mov rbx, qword [r8]
mov rax, qword [r8 + 0x10]
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1400dffc0
test rax, rax
je 0x1400e00a0
mov eax, dword [0x141ddc620]
sub eax, dword [0x141ddc624]
and eax, 0x1d5194a6
imul eax, eax, 0xa062fd5
imul rax, rax, 0x2c046d03
shr rax, 0x3c
cmp eax, 0x65b916e4
je 0x1400e010f
jmp 0x1400e00e2
mov eax, dword [0x141ddc640]
mov ecx, dword [0x141ddc644]
add eax, ecx
add eax, 0xb4216a69
and eax, 0xb4c9643f
add eax, 0xd7b1753b
cmp eax, 0x7d7e6169
ja 0x1400e0000
nop word cs:[rax + rax]
mov eax, dword [0x141ddc648]
sub eax, dword [0x141ddc64c]
add eax, 0xe2fd2f6e
xor eax, 0x8050833
or eax, 0x77ba730c
cmp eax, 0x4fa7e2f
je 0x1400e0030
test rsi, rsi
je 0x1400e00d8
movzx eax, byte [0x141dde6f8]
xor ecx, ecx
mov rdx, rsi
call fcn.1400c29b0
nop dword [rax]
mov ecx, dword [0x141ddc650]
xor ecx, dword [0x141ddc654]
and ecx, 0x2800204
or ecx, 0xe169ddfb
xor ecx, 0x427f9b45
cmp ecx, 0xd5b3595
jb 0x1400e0070
jmp 0x1400e01ce
mov eax, dword [0x141ddc610]
mov ecx, dword [0x141ddc614]
add eax, ecx
add eax, 0xd33472c9
xor eax, 0xc448d43b
add eax, 0x93a78819
cmp eax, 0xb2add939
ja 0x1400e00a0
test rsi, rsi
je 0x1400e00d8
xor eax, eax
test al, al
jne 0x1400e01bb
jmp 0x1400e0197
mov eax, 2
jmp 0x1400e01ce
mov eax, dword [0x141ddc628]
sub eax, dword [0x141ddc62c]
and eax, 0xcaa01f7d
mov ecx, 0xa5412271
imul rcx, rax
shr rcx, 0x3f
mov r14, qword [0x141dde6e0]
cmp ecx, 0xb14da7c0
jne 0x1400e0118
mov rax, qword [0x141dde6e0]
jmp 0x1400e00e2
mov eax, dword [0x141ddc630]
xor edx, edx
div dword [0x141ddc634]
or eax, 0x44b3af1e
add eax, 0x91e32135
xor eax, 0x1ba10580
cmp eax, 0x691566bf
jae 0x1400e014d
mov rcx, r14
xor edx, edx
mov r8, rbx
mov r9, rsi
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov r15, qword [sym.imp.KERNEL32.dll_HeapReAlloc]
nop word cs:[rax + rax]
mov ebp, dword [0x141ddc638]
imul ebp, dword [0x141ddc63c]
or ebp, 0x893d432f
xor ebp, 0x9c786f81
add ebp, 0x73dee520
mov rcx, r14
xor edx, edx
mov r8, rbx
mov r9, rsi
call r15
cmp ebp, 0x3726839d
jbe 0x1400e0160
jmp 0x1400e01ce
mov eax, dword [0x141ddc618]
add eax, dword [0x141ddc61c]
or eax, 0xfeb3f5ef
add eax, 0x143de949
movzx ecx, byte [0x141dde6f8]
cmp eax, 0x3ddac9ce
jbe 0x1400e01c4
movzx eax, byte [0x141dde6f8]
jmp 0x1400e0197
xor ecx, ecx
mov rdx, rsi
call fcn.1400c29b0
mov ecx, dword [0x141ddc658]
add ecx, dword [0x141ddc65c]
and ecx, 0x49903116
or ecx, 0xb62dcea9
xor ecx, 0xa8af3e5
cmp ecx, 0xa88df61c
jae 0x1400e0210
xor ecx, ecx
test rax, rax
mov edx, 2
cmovne rdx, rax
sete cl
mov qword [rdi + 8], rdx
mov qword [rdi + 0x10], rsi
mov qword [rdi], rcx
mov ecx, 2
nop word cs:[rax + rax]
mov edx, dword [0x141ddc660]
imul edx, dword [0x141ddc664]
imul edx, edx, 0xd17825cd
add edx, 0x6b7278a8
or edx, 0x464a9227
xor r8d, r8d
test rax, rax
sete r8b
mov r9, rax
cmove r9, rcx
mov qword [rdi + 8], r9
mov qword [rdi + 0x10], rsi
mov qword [rdi], r8
cmp edx, 0xbbd483a5
ja 0x1400e0220
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret