Function at 0x14009b090
Capabilities:
Create directory
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov r8, rdx
mov rdx, rcx
mov eax, dword [0x141dd3c48]
sub eax, dword [0x141dd3c4c]
imul rax, rax, 0x52ce009
shr rax, 0x3a
xor eax, 0xe66d3e5b
add eax, 0xa5e5ed50
cmp eax, 0xfae85d09
jbe 0x14009b0e0
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
nop word [rax + rax]
mov eax, dword [0x141dd3c50]
and eax, dword [0x141dd3c54]
add eax, 0x58942109
or eax, 0x67a19e75
imul ecx, eax, 0xaef0f104
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov rdi, rsp
cmp ecx, 0xb85a4af5
je 0x14009b0e0
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov r14, rsp
mov eax, 0x20
call fcn.1400f1350
sub rsp, rax
mov rbx, rsp
sub rsp, 0x20
mov rcx, r14
call fcn.140093550
add rsp, 0x20
movabs r15, 0x8000000000000000
mov rax, qword [r14]
mov rsi, qword [r14 + 8]
cmp rax, r15
jne 0x14009b1a0
nop word [rax + rax]
mov eax, dword [0x141dd3c58]
or eax, dword [0x141dd3c5c]
or eax, 0x7cdcf10d
add eax, 0x40f5d69d
cmp eax, 0xa27dcca3
ja 0x14009b160
nop dword [rax]
mov eax, dword [0x141dd3c60]
or eax, dword [0x141dd3c64]
and eax, 0xd058c20
imul eax, eax, 0xb694fd6e
cmp eax, 0x460c1413
jb 0x14009b180
jmp 0x14009b1cf
mov r14, qword [r14 + 0x10]
mov qword [rdi], rax
mov qword [rdi + 8], rsi
mov eax, dword [0x141dd3c68]
or eax, dword [0x141dd3c6c]
or eax, 0xb9dcef13
add eax, 0x7cbe4ace
or eax, 0x45464f4
cmp eax, 0x40541c66
jbe 0x14009b1e2
jmp 0x14009b229
mov rdi, rsi
mov eax, dword [0x141dd3c70]
xor eax, dword [0x141dd3c74]
imul eax, eax, 0x2789f032
mov esi, 0xae8ca531
imul rsi, rax
shr rsi, 0x3f
or esi, 0x9aeb3a06
mov qword [rdi + 0x10], r14
sub rsp, 0x20
mov rcx, rbx
mov rdx, rdi
mov r8b, 1
call fcn.140096720
add rsp, 0x20
cmp esi, 0x9d69821
jae 0x14009b245
mov qword [rdi + 0x10], r14
sub rsp, 0x20
mov rcx, rbx
mov rdx, rdi
mov r8b, 1
call fcn.140096720
add rsp, 0x20
jmp 0x14009b1e2
mov r14, qword [rbx]
mov rsi, qword [rbx + 8]
nop dword [rax]
mov eax, dword [0x141dd3c78]
xor edx, edx
div dword [0x141dd3c7c]
imul eax, eax, 0x365da37c
add eax, 0xbda02547
or eax, 0x6a1b070
cmp eax, 0xaf4d93dc
jb 0x14009b250
cmp r14, r15
je 0x14009b1cf
nop
mov eax, dword [0x141dd3c80]
xor edx, edx
div dword [0x141dd3c84]
imul eax, eax, 0xb3b7e49d
add eax, 0x76ca6c16
cmp eax, 0x624d18d7
jb 0x14009b280
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
add rsp, 0x20
test eax, eax
je 0x14009b3cf
test r14, r14
je 0x14009b553
nop word cs:[rax + rax]
mov eax, dword [0x141dd3c88]
add eax, dword [0x141dd3c8c]
imul eax, eax, 0x8f8931d0
or eax, 0xf10862f9
cmp eax, 0x3a716e68
je 0x14009b2d0
mov eax, dword [0x141dd3c90]
sub eax, dword [0x141dd3c94]
add eax, 0xd4425951
and eax, 0x6ae44be3
cmp eax, 0xfd618c5c
jne 0x14009b320
mov rax, qword [0x141dde6e0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd3c98]
xor eax, dword [0x141dd3c9c]
add eax, 0x8e1179d4
and eax, 0x9cb1a66b
xor eax, 0xd605ae57
mov rbx, qword [0x141dde6e0]
cmp eax, 0xf294228a
ja 0x14009b320
mov eax, dword [0x141dd3ca0]
sub eax, dword [0x141dd3ca4]
and eax, 0x20403002
add eax, 0xee7ac492
cmp eax, 0xa2da1dcc
jbe 0x14009b37c
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
xor edi, edi
mov r14, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd3ca8]
and eax, dword [0x141dd3cac]
imul r15, rax, 0x5cced191
shr r15, 0x3e
or r15d, 0xb3a5fe40
sub rsp, 0x20
mov rcx, rbx
xor edx, edx
mov r8, rsi
call r14
add rsp, 0x20
cmp r15d, 0x27ca6b82
jb 0x14009b390
jmp 0x14009b1d2
mov eax, dword [0x141dd3cb0]
and eax, dword [0x141dd3cb4]
add eax, 0xe9b9c779
and eax, 0xc145746e
cmp eax, 0xc7051290
jne 0x14009b3fa
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
nop word cs:[rax + rax]
xor edi, edi
jmp 0x14009b1d2