Function at 0x1400ce9b0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov qword [rsp + 0x28], rcx
nop word cs:[rax + rax]
mov eax, dword [0x141dd6f70]
xor eax, dword [0x141dd6f74]
imul eax, eax, 0x68f0df06
add eax, 0x145486d9
and eax, 0xe92405ce
cmp eax, 0xd5dd8e54
ja 0x1400ce9d0
mov rax, qword [rsp + 0x28]
mov rax, qword [rax]
test rax, rax
je 0x1400ced7f
cmp eax, 1
jne 0x1400cea40
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax + 8]
test rdi, rdi
je 0x1400ced7f
mov rcx, qword [rsp + 0x28]
lea rax, [rcx + 0x10]
mov qword [rsp + 0x30], rax
mov r12, qword [rcx + 0x18]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400cebfa
mov eax, dword [0x141dd6f78]
imul eax, dword [0x141dd6f7c]
add eax, 0xcba12d57
or eax, 0x3ba32b19
add eax, 0xf475b276
cmp eax, 0x256c4e1e
jb 0x1400cea40
nop word cs:[rax + rax]
mov eax, dword [0x141dd6f80]
and eax, dword [0x141dd6f84]
add eax, 0xae4c4207
xor eax, 0xa9881b7c
cmp eax, 0xbc716ea7
ja 0x1400cea70
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax + 8]
mov rsi, qword [rax + 0x10]
mov rax, qword [rsi]
test rax, rax
je 0x1400ceaa7
mov rcx, rdi
call rax
mov r8, qword [rsi + 8]
mov rcx, qword [rsi + 0x10]
mov eax, dword [0x141dd6f88]
xor edx, edx
div dword [0x141dd6f8c]
nop dword [rax]
mov eax, dword [0x141dd6f90]
add eax, dword [0x141dd6f94]
imul eax, eax, 0x6d381faa
imul rax, rax, 0x3ce72987
shr rax, 0x3d
or eax, 0x156a2748
cmp eax, 0xf55335dc
ja 0x1400ceac0
test r8, r8
je 0x1400ced7f
nop word cs:[rax + rax]
mov eax, dword [0x141dd6f98]
and eax, dword [0x141dd6f9c]
imul eax, eax, 0xf0c2e75d
add eax, 0xdcc481f4
cmp eax, 0x2dedf8bd
jb 0x1400ceb00
nop
mov eax, dword [0x141dd6fa0]
add eax, dword [0x141dd6fa4]
imul rax, rax, 0x7a431d79
shr rax, 0x3d
add eax, 0x6ef0767b
xor eax, 0x28a97e39
cmp eax, 0x9cbf22ff
ja 0x1400ceb20
cmp rcx, 0x11
jb 0x1400cebb3
mov eax, 0x92114507
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6fa8]
or ecx, dword [0x141dd6fac]
imul rcx, rax
shr rcx, 0x3d
imul ecx, ecx, 0xe72e02eb
cmp ecx, 0x534a707f
je 0x1400ceb60
nop word cs:[rax + rax]
mov eax, dword [0x141dd6fb0]
xor edx, edx
div dword [0x141dd6fb4]
add eax, 0x3af896e1
or eax, 0x895aa479
cmp eax, 0x438b05f9
je 0x1400ceb90
mov rdi, qword [rdi - 8]
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rdi
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
jmp qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rdi
call rsi
mov rdi, r13
test r13, r13
je 0x1400ced7f
mov r13, qword [rdi + 0x18]
mov rcx, qword [rsp + 0x28]
mov qword [rcx + 8], r13
lea rax, [r13 + 0x20]
test r13, r13
cmove rax, qword [rsp + 0x30]
mov qword [rax], 0
dec r12
mov qword [rcx + 0x18], r12
mov rbx, qword [rdi + 8]
mov r14, qword [rdi + 0x10]
test r14, r14
je 0x1400cecb1
xor r15d, r15d
nop word cs:[rax + rax]
mov eax, dword [0x141dd6fb8]
imul eax, dword [0x141dd6fbc]
imul eax, eax, 0x10c96450
add eax, 0x90496720
imul rax, rax, 0x41345fc9
shr rax, 0x3d
cmp eax, 0xde41bcee
jbe 0x1400cec80
imul rcx, r15, 0x158
add rcx, rbx
call fcn.1400c96b0
nop dword [rax]
mov eax, dword [0x141dd6fc0]
xor eax, dword [0x141dd6fc4]
imul ebp, eax, 0x7170e491
imul rcx, r15, 0x158
add rcx, rbx
call fcn.1400c96b0
cmp ebp, 0x29969e7d
je 0x1400cec80
inc r15
cmp r15, r14
jne 0x1400cec40
mov ecx, 0xf511fba1
mov eax, dword [0x141dd6fc8]
xor eax, dword [0x141dd6fcc]
add eax, 0xbd0fc0cf
or eax, 0x227ef91b
imul rax, rcx
shr rax, 0x3e
cmp eax, 0x53ab9c1
ja 0x1400cecb6
mov rax, qword [rdi]
nop
mov ecx, dword [0x141dd6fd0]
and ecx, dword [0x141dd6fd4]
and ecx, 0xf809c81b
imul ecx, ecx, 0x43b44292
and ecx, 0xc4894b3c
cmp ecx, 0xf8355ea3
ja 0x1400cece0
test rax, rax
je 0x1400cebe0
mov r14, qword [0x141ddb260]
mov eax, dword [0x141dd6fd8]
and eax, dword [0x141dd6fdc]
imul rax, rax, 0x7079186b
shr rax, 0x3e
xor eax, 0xfe361bcb
add eax, 0x31332925
cmp eax, 0xb045c794
ja 0x1400ced73
nop
mov eax, dword [0x141dd6fe0]
or eax, dword [0x141dd6fe4]
xor eax, 0x45bd5c1c
imul ebp, eax, 0xb2f1882d
xor ebp, 0x6e2cee06
mov rcx, r14
xor edx, edx
mov r8, rbx
call rsi
cmp ebp, 0xab1ad30b
jbe 0x1400cebe0
mov rcx, r14
xor edx, edx
mov r8, rbx
call rsi
jmp 0x1400ced40
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret