Function at 0x14008f360
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rbx, r8
mov r14, rdx
mov eax, dword [0x141dcc6e0]
xor edx, edx
div dword [0x141dcc6e4]
and eax, 0x400b920
or eax, 0x73ef42c7
imul eax, eax, 0xb69c4e12
cmp eax, 0x1613f0b9
je 0x14008f3e1
mov edx, dword [str.MXj]
xor edx, dword [0x141dcc6ec]
add edx, 0x96098f88
xor edx, 0xd05cb851
add edx, 0xe8d53429
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rdi, rsp
cmp edx, 0x3ff08ef4
jbe 0x14008f3fd
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
jmp 0x14008f39b
lea r13, [rbx + 1]
lea r8, [rbx*2 + 2]
movabs r11, 0x7ffffffffffffffe
mov r10d, 0xb492d8fb
nop dword [rax]
test r13, r13
sets r9b
mov eax, dword [0x141dcc6f0]
xor edx, edx
div dword [0x141dcc6f4]
add eax, 0xbe244d65
xor eax, 0x78384214
imul rax, r10
shr rax, 0x3f
cmp r8, r11
seta dl
cmp eax, 0xee7381bd
je 0x14008f420
or r9b, dl
jne 0x14008f4f3
nop dword [rax]
mov eax, dword [0x141dcc708]
xor eax, dword [0x141dcc70c]
imul eax, eax, 0x12f91ff7
cmp eax, 0x8ec468f
je 0x14008f460
nop dword [rax]
mov eax, dword [0x141dcc710]
imul eax, dword [0x141dcc714]
imul rax, rax, 0x3934f743
shr rax, 0x3c
imul eax, eax, 0xb5c22433
and eax, 0xe7193829
cmp eax, 0x8c0ff2f0
jb 0x14008f480
mov qword [rbp], rcx
test r8, r8
je 0x14008f4df
movzx eax, byte [0x141dd7ff8]
sub rsp, 0x20
xor ecx, ecx
mov rdx, r8
call fcn.1400beea0
add rsp, 0x20
mov r12, rax
test rax, rax
je 0x14008f541
xor eax, eax
test al, al
je 0x14008f543
jmp 0x14008f5ab
mov r12d, 2
xor r13d, r13d
xor eax, eax
test al, al
je 0x14008f543
jmp 0x14008f5ab
mov eax, dword [0x141dcc6f8]
imul eax, dword [0x141dcc6fc]
imul eax, eax, 0x5581b0bb
and eax, 0x5c92410b
add eax, 0x31d5600f
cmp eax, 0x931a3309
ja 0x14008f53d
mov eax, dword [0x141dcc700]
xor eax, dword [0x141dcc704]
imul eax, eax, 0xbc3264d6
or eax, 0xbf69f0f0
imul eax, eax, 0x690b3b5a
ud2
ud2
ud2
mov esi, dword [0x141dcc718]
sub esi, dword [0x141dcc71c]
or esi, 0x40fe0e75
add esi, 0x479fce21
imul rax, rsi, 0x41a942d
shr rax, 0x20
sub esi, eax
shr esi, 1
add esi, eax
shr esi, 0x1f
mov qword [rdi], r13
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], 0
lea rax, [r14 + rbx]
mov qword [r15], r14
mov qword [r15 + 8], rax
mov word [r15 + 0x10], 0
sub rsp, 0x20
mov rcx, rdi
mov rdx, r15
call fcn.14008fcb0
add rsp, 0x20
cmp esi, 0xdcd1ee29
jbe 0x14008f5e4
mov qword [rdi], r13
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], 0
lea rax, [r14 + rbx]
mov qword [r15], r14
mov qword [r15 + 8], rax
mov word [r15 + 0x10], 0
sub rsp, 0x20
mov rcx, rdi
mov rdx, r15
call fcn.14008fcb0
add rsp, 0x20
jmp 0x14008f543
mov rbx, qword [rdi + 8]
mov r14, qword [rdi + 0x10]
mov r8, r14
mov rcx, rbx
cmp r14, 8
mov r15, qword [rbp]
movabs r11, 0x7ffffffffffffffe
jb 0x14008f8ae
mov r9d, 0x8527883f
mov rcx, rbx
mov r8, r14
cmp word [rcx], 0
je 0x14008f96f
mov eax, dword [0x141dcc738]
or eax, dword [0x141dcc73c]
and eax, 0xd4f17b6b
imul eax, eax, 0xd8349de0
cmp eax, 0x98edb3a1
je 0x14008f620
movzx eax, word [rcx + 2]
mov edx, dword [0x141dcc740]
xor edx, dword [0x141dcc744]
imul edx, edx, 0x62bbf4f9
imul rdx, rdx, 0x43e4f25d
shr rdx, 0x3e
xor edx, 0x81f60123
cmp edx, 0xfd444b8e
ja 0x14008f642
test ax, ax
je 0x14008f96f
nop word cs:[rax + rax]
mov eax, dword [0x141dcc748]
sub eax, dword [0x141dcc74c]
and eax, 0x10a84104
imul eax, eax, 0x21d9acd4
cmp eax, 0xf750fb44
ja 0x14008f680
movzx eax, word [rcx + 4]
nop word cs:[rax + rax]
mov edx, dword [0x141dcc750]
or edx, dword [0x141dcc754]
add edx, 0x83e9b166
and edx, 0x89d6862a
xor edx, 0xfbfffed7
cmp edx, 0xfbc1cc98
ja 0x14008f6b0
test ax, ax
je 0x14008f96f
movzx eax, word [rcx + 6]
nop word cs:[rax + rax]
mov edx, dword [0x141dcc758]
and edx, dword [0x141dcc75c]
shr edx, 1
imul rdx, rdx, 0x43473147
shr rdx, 0x3d
add edx, 0x9c58a193
imul rdx, rdx, 0x3d22821f
shr rdx, 0x3d
cmp edx, 0xb8ff73c1
ja 0x14008f6f0
test ax, ax
je 0x14008f96f
nop dword [rax + rax]
mov eax, dword [0x141dcc760]
xor eax, dword [0x141dcc764]
imul eax, eax, 0xb39c24f7
xor eax, 0xa2668542
cmp eax, 0x14b0d6e4
jb 0x14008f730
cmp word [rcx + 8], 0
je 0x14008f96f
movzx r10d, word [rcx + 0xa]
mov eax, dword [0x141dcc768]
xor edx, edx
div dword [0x141dcc76c]
mov eax, dword [0x141dcc770]
or eax, dword [0x141dcc774]
or eax, 0x993b7c95
imul eax, eax, 0x4121f477
cmp eax, 0xe05c55af
je 0x14008f76c
test r10w, r10w
je 0x14008f96f
mov eax, dword [0x141dcc778]
imul eax, dword [0x141dcc77c]
shr eax, 1
imul rax, r9
shr rax, 0x3e
imul eax, eax, 0x4f1e2c69
add eax, 0xaa70da0e
cmp eax, 0x606490aa
jb 0x14008f794
cmp word [rcx + 0xc], 0
je 0x14008f96f
mov eax, dword [0x141dcc780]
xor edx, edx
div dword [0x141dcc784]
mov eax, dword [0x141dcc788]
and eax, dword [0x141dcc78c]
add eax, 0x73df10e9
shr eax, 3
imul rax, rax, 0x10bc4a43
shr rax, 0x39
imul eax, eax, 0x8ef0356d
cmp eax, 0x7928719b
ja 0x14008f7d6
movzx r10d, word [rcx + 0xe]
mov eax, dword [0x141dcc790]
xor edx, edx
div dword [0x141dcc794]
nop word cs:[rax + rax]
mov eax, dword [0x141dcc798]
add eax, dword [0x141dcc79c]
imul eax, eax, 0xe140bde4
xor eax, 0x59a88a22
imul eax, eax, 0x8b2415cd
cmp eax, 0x1311d2a1
je 0x14008f820
nop word cs:[rax + rax]
mov eax, dword [0x141dcc7a0]
or eax, dword [0x141dcc7a4]
or eax, 0xf7169843
imul eax, eax, 0xb5718d25
cmp eax, 0xae0601e3
je 0x14008f850
test r10w, r10w
je 0x14008f96f
add r8, 0xfffffffffffffff8
add rcx, 0x10
mov eax, dword [0x141dcc7a8]
imul eax, dword [0x141dcc7ac]
add eax, 0xc28c4f75
and eax, 0xd6614a66
imul eax, eax, 0x285c270e
cmp eax, 0x4c890613
ja 0x14008f880
cmp r8, 7
ja 0x14008f616
lea rax, [rcx + r8*2]
xor edx, edx
nop word cs:[rax + rax]
test dl, dl
jne 0x14008f8c0
mov edx, 0xf4fb18db
nop dword [rax]
mov r8d, dword [0x141dcc720]
add r8d, dword [0x141dcc724]
or r8d, 0xc7775fbe
imul r8, rdx
shr r8, 0x3d
cmp r8d, 0xedc2201a
ja 0x14008f8d0
cmp rcx, rax
je 0x14008f9a0
mov r8d, dword [0x141dcc728]
xor r8d, dword [0x141dcc72c]
imul r8d, r8d, 0xa7ae796a
add r8d, 0x85417f3b
or r8d, 0x2b8ba1af
cmp r8d, 0x794092d5
ja 0x14008f8ff
movzx r8d, word [rcx]
add rcx, 2
nop word cs:[rax + rax]
mov r9d, dword [0x141dcc730]
or r9d, dword [0x141dcc734]
imul r9d, r9d, 0x5366f880
add r9d, 0xee782238
cmp r9d, 0xf7192d48
ja 0x14008f940
test r8w, r8w
jne 0x14008f8d0
mov eax, dword [0x141dcc7b0]
xor eax, dword [0x141dcc7b4]
imul eax, eax, 0x8045855c
and eax, 0x7b43035c
add eax, 0x6f14a6bb
cmp eax, 0x5cb01e79
jae 0x14008f9f3
jmp 0x14008fa22
mov eax, dword [0x141dcc7f0]
imul eax, dword [str.CpHw]
add eax, 0xd36703e7
xor eax, 0x2c814f70
cmp eax, 0xf4b75f6b
ja 0x14008f9a0
cmp r14, qword [rdi]
jne 0x14008fc29
mov eax, dword [0x141dcc800]
xor eax, dword [0x141dcc804]
imul eax, eax, 0xf0e594f7
or eax, 0x6d4c0c02
xor eax, 0xb535c938
cmp eax, 0xe317e92d
jbe 0x14008fbb4
jmp 0x14008fbef
mov eax, dword [0x141dcc7b8]
add eax, dword [0x141dcc7bc]
or eax, 0x6eded7c7
xor eax, 0x305d0a7b
lea rcx, [0x141db69d8]
mov qword [r15 + 8], rcx
lea rcx, [r11 + 2]
mov qword [r15], rcx
cmp eax, 0xaa06f5d9
jbe 0x14008fa36
lea rax, [0x141db69d8]
mov qword [r15 + 8], rax
lea rax, [r11 + 2]
mov qword [r15], rax
jmp 0x14008f9f3
mov rax, qword [rdi]
nop dword [rax]
mov ecx, dword [0x141dcc7c0]
add ecx, dword [0x141dcc7c4]
or ecx, 0x8dfdfff7
imul ecx, ecx, 0x61a72a89
cmp ecx, 0xd155cda8
je 0x14008fa40
test rax, rax
je 0x14008fb30
mov rsi, qword [0x141dd7fe0]
mov eax, dword [0x141dcc7c8]
and eax, dword [0x141dcc7cc]
and eax, 0x51504071
or eax, 0x8aaeab84
imul eax, eax, 0xa4a31cd0
cmp eax, 0x5c2cb7fe
je 0x14008fae3
mov eax, dword [0x141dcc7d0]
xor edx, edx
div dword [str.Q__aga]
mov edi, eax
add edi, 0x3bcb0ba4
xor edi, 0xf1d0364e
mov eax, 0xb5326577
imul rax, rdi
shr rax, 0x20
sub edi, eax
shr edi, 1
add edi, eax
shr edi, 0x1c
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
cmp edi, 0x78a64d79
jbe 0x14008fafb
sub rsp, 0x20
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
jmp 0x14008fa93
mov eax, 0xc150a519
mov ecx, dword [0x141dcc7d8]
and ecx, dword [0x141dcc7dc]
or ecx, 0x7eff794a
imul ecx, ecx, 0xb24ab2d9
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xf6bc6c3e
ja 0x14008fb00
nop dword [rax + rax]
mov eax, dword [0x141dcc7e0]
xor eax, dword [0x141dcc7e4]
add eax, 0x79679051
xor eax, 0x423d102b
cmp eax, 0xda83068a
ja 0x14008fb30
mov eax, 0x8d66a743
nop word cs:[rax + rax]
mov ecx, dword [0x141dcc7e8]
sub ecx, dword [0x141dcc7ec]
imul ecx, ecx, 0xddb3429d
or ecx, 0x7114a22a
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x90f71d6d
ja 0x14008fb60
nop dword [rax + rax]
mov eax, dword [0x141dcc7f8]
sub eax, dword [0x141dcc7fc]
cmp eax, 0x70a2e210
je 0x14008fb90
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
mov eax, dword [0x141dcc808]
and eax, dword [0x141dcc80c]
or eax, 0xd4214022
and eax, 0xd421c962
mov esi, 0xaaadf94d
imul rsi, rax
shr rsi, 0x3e
sub rsp, 0x20
mov rcx, rdi
call fcn.1400d9420
add rsp, 0x20
cmp esi, 0x13494397
jbe 0x14008fc01
sub rsp, 0x20
mov rcx, rdi
call fcn.1400d9420
add rsp, 0x20
jmp 0x14008fbb4
mov rbx, qword [rdi + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dcc810]
add eax, dword [0x141dcc814]
imul eax, eax, 0x24cfb398
cmp eax, 0x213368cb
je 0x14008fc10
mov eax, dword [0x141dcc818]
add eax, dword [0x141dcc81c]
imul eax, eax, 0xabac252d
or eax, 0x1e293663
xor eax, 0x1670ad72
cmp eax, 0x2046497d
jb 0x14008fc89
mov eax, dword [0x141dcc820]
imul eax, dword [0x141dcc824]
imul eax, eax, 0xd0110abe
add eax, 0x2943d736
lea rcx, [r14 + 1]
mov word [rbx + r14*2], 0
mov qword [rdi + 0x10], rcx
mov qword [r15 + 0x10], rcx
movups xmm0, xmmword [rdi]
movups xmmword [r15], xmm0
cmp eax, 0x38b9f163
ja 0x14008fb90
mov word [rbx + r14*2], 0
lea rax, [r14 + 1]
mov qword [rdi + 0x10], rax
mov qword [r15 + 0x10], rax
movups xmm0, xmmword [rdi]
movups xmmword [r15], xmm0
jmp 0x14008fc4c