Function at 0x1400d71f0
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rdi, rdx
mov rsi, rcx
mov eax, dword [0x141dd90a8]
sub eax, dword [0x141dd90ac]
add eax, 0x9c6155ef
shr eax, 1
imul rax, rax, 0x2695574b
shr rax, 0x3a
cmp eax, 0xfa492190
jne 0x1400d7268
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov rax, rsp
sub rsp, 0x30
mov qword [rsp + 0x20], rax
mov rcx, rdi
mov edx, 0x3c
xor r8d, r8d
xor r9d, r9d
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
mov ebx, 0xc29363f1
nop dword [rax]
mov eax, dword [0x141dd90b0]
imul eax, dword [0x141dd90b4]
add eax, 0x983c74c3
imul rax, rbx
shr rax, 0x3f
imul r13d, eax, 0x5da3834d
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.1400f07c0
sub rsp, rax
mov r12, rsp
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, rdi
mov edx, 0x3c
xor r8d, r8d
xor r9d, r9d
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
cmp r13d, 0x5230c767
jb 0x1400d7270
mov r14d, eax
test eax, eax
jns 0x1400d7516
or r14d, 0x10000000
mov qword [rbp], 0
sub rsp, 0x20
mov rdx, rbp
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
mov rbx, qword [rbp]
cmp r14d, 0x90000005
je 0x1400d7330
cmp r14d, 0xd0000004
je 0x1400d7330
cmp r14d, 0xd0000023
jne 0x1400d73df
nop word [rax + rax]
mov eax, dword [0x141dd90d8]
xor eax, dword [0x141dd90dc]
imul eax, eax, 0xca351564
xor eax, 0x7206d90b
imul eax, eax, 0xb6f10e86
cmp eax, 0x2d025971
ja 0x1400d7330
test rbx, rbx
je 0x1400d7516
nop dword [rax]
mov eax, dword [0x141dd90e0]
add eax, dword [0x141dd90e4]
and eax, 0x81a9a074
cmp eax, 0xe6ae79ee
je 0x1400d7360
mov rax, qword [rbx]
nop dword [rax + rax]
mov ecx, dword [0x141dd90e8]
xor ecx, dword [0x141dd90ec]
add ecx, 0x9ad1702
xor ecx, 0x9060bd9f
imul rcx, rcx, 0x1eb1275b
shr rcx, 0x3c
cmp ecx, 0xcde3cb4b
ja 0x1400d7380
mov r14, qword [rax + 0x10]
mov eax, dword [0x141dd90f0]
and eax, dword [0x141dd90f4]
mov ecx, 0xe8c9295d
imul rcx, rax
shr rcx, 0x3f
xor ecx, 0xde54f08d
cmp ecx, 0xe2903a79
jbe 0x1400d74d5
jmp 0x1400d7506
mov ecx, 0xddf4bf8f
nop word cs:[rax + rax]
mov eax, dword [0x141dd90b8]
xor edx, edx
div dword [0x141dd90bc]
or eax, 0x4b7d6b8e
xor eax, 0x70954889
imul rax, rcx
shr rax, 0x3d
cmp eax, 0x6aa8e7eb
ja 0x1400d73f0
test rbx, rbx
je 0x1400d7703
mov eax, 0xcde0fc5b
nop word cs:[rax + rax]
mov ecx, dword [0x141dd90c0]
sub ecx, dword [0x141dd90c4]
imul ecx, ecx, 0xf7bcbd7
or ecx, 0xba4415c7
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x5dd351fe
ja 0x1400d7430
mov rdi, qword [rbx]
xor eax, eax
test al, al
jne 0x1400d7491
mov eax, dword [0x141dd90c8]
imul eax, dword [0x141dd90cc]
xor eax, 0xee70120b
imul r14d, eax, 0xb6e0c387
sub rsp, 0x20
mov rcx, rbx
call qword [rdi + 0x10]
add rsp, 0x20
cmp r14d, 0x70fd4a64
jne 0x1400d74b0
sub rsp, 0x20
mov rcx, rbx
call qword [rdi + 0x10]
add rsp, 0x20
jmp 0x1400d7461
mov eax, dword [0x141dd90d0]
xor edx, edx
div dword [0x141dd90d4]
and eax, 0x93715d08
imul eax, eax, 0xf064614a
cmp eax, 0xb32cc4af
je 0x1400d74b0
jmp 0x1400d7703
mov eax, dword [0x141dd90f8]
or eax, dword [0x141dd90fc]
imul r13d, eax, 0x88443160
add r13d, 0x59657c0
sub rsp, 0x20
mov rcx, rbx
call r14
add rsp, 0x20
cmp r13d, 0x7eab30d9
jae 0x1400d7516
sub rsp, 0x20
mov rcx, rbx
call r14
add rsp, 0x20
jmp 0x1400d74d5
mov eax, dword [0x141dd9100]
add eax, dword [0x141dd9104]
and eax, 0x608b4af3
add eax, 0xd4034498
mov ecx, 0xd379eb69
imul rcx, rax
shr rcx, 0x3c
cmp ecx, 0xe1e9a4c4
jbe 0x1400d7550
mov eax, dword [r12]
mov dword [r15], eax
nop dword [rax + rax]
mov eax, dword [0x141dd9108]
sub eax, dword [0x141dd910c]
imul eax, eax, 0x6b6767bb
xor eax, 0x4005a00
and eax, 0x74a2fb14
mov r14d, dword [r12]
mov dword [r15], r14d
cmp eax, 0x14632d39
jb 0x1400d7550
mov r12d, r14d
shr r12d, 1
lea rdx, [r12 + r12]
add rdx, 2
nop dword [rax + rax]
mov eax, dword [0x141dd9110]
add eax, dword [0x141dd9114]
xor eax, 0x40005c7
and eax, 0x942515e7
imul eax, eax, 0x647a74dd
cmp eax, 0xf99f736f
ja 0x1400d7590
movzx eax, byte [0x141ddc4f8]
sub rsp, 0x20
xor ecx, ecx
call fcn.1400c0a10
add rsp, 0x20
test rax, rax
je 0x1400d7728
mov rbx, rax
sub rsp, 0x30
mov qword [rsp + 0x20], r15
mov rcx, rdi
mov edx, 0x3c
mov r8, rax
mov r9d, r14d
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
nop word cs:[rax + rax]
ud2