Function at 0x1400dd330
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x20
mov rdi, rdx
mov rsi, rcx
nop dword [rax]
mov eax, dword [0x141dd9708]
xor eax, dword [0x141dd970c]
add eax, 0xd8cae7b
xor eax, 0x5001210b
or eax, 0x275e46d0
cmp eax, 0x58cf02a1
jb 0x1400dd340
nop word cs:[rax + rax]
mov eax, dword [0x141dd9710]
imul eax, dword [0x141dd9714]
imul rax, rax, 0xb1243dd
shr rax, 0x3b
add eax, 0xa4708ad
cmp eax, 0x34ece79a
ja 0x1400dd370
mov rax, qword [r8 + 8]
nop dword [rax + rax]
mov ecx, dword [0x141dd9718]
sub ecx, dword [0x141dd971c]
or ecx, 0xd5b198b0
cmp ecx, 0xc5cc5d1a
je 0x1400dd3a0
test rax, rax
je 0x1400dd4a0
mov ecx, 0xb21b6731
nop dword [rax + rax]
mov eax, dword [0x141dd9720]
xor edx, edx
div dword [0x141dd9724]
or eax, 0x86c60ee5
imul rax, rcx
shr rax, 0x3f
or eax, 0x9f076ac
cmp eax, 0xc6d6c283
je 0x1400dd3d0
mov r9, qword [r8]
mov rcx, qword [r8 + 0x10]
nop
mov eax, dword [0x141dd9728]
xor edx, edx
div dword [0x141dd972c]
add eax, 0xfca41de6
or eax, 0x648050a4
and eax, 0x6cc457a7
cmp eax, 0xa0e8e788
ja 0x1400dd400
test rcx, rcx
je 0x1400dd546
nop dword [rax]
mov eax, dword [0x141dd9760]
and eax, dword [0x141dd9764]
or eax, 0xd81d0daa
imul eax, eax, 0xa21091e6
cmp eax, 0x22b3bd2b
je 0x1400dd430
xor eax, eax
test al, al
je 0x1400dd45b
mov rax, qword [0x141ddb9a0]
mov eax, 0xa779492b
mov edx, dword [0x141dd9768]
sub edx, dword [0x141dd976c]
or edx, 0x4f4068c8
imul rdx, rax
shr rdx, 0x3f
mov rcx, qword [0x141ddb9a0]
cmp edx, 0xd0889bc9
je 0x1400dd460
xor edx, edx
mov r8, r9
mov r9, rdi
call qword [sym.imp.KERNEL32.dll_HeapReAlloc]
jmp 0x1400dd680
mov eax, dword [str.K_aL]
or eax, dword [0x141dd9774]
and eax, 0x32bc73d1
imul eax, eax, 0xeae9e652
imul rax, rax, 0x3aa30c17
shr rax, 0x3c
cmp eax, 0xa9c897e1
ja 0x1400dd4a0
test rdi, rdi
je 0x1400dd5b9
xor eax, eax
test al, al
je 0x1400dd4e0
movzx eax, byte [0x141ddb9b8]
nop
mov eax, dword [0x141dd9778]
xor edx, edx
div dword [0x141dd977c]
imul eax, eax, 0x7cb199a2
add eax, 0x4a23121e
movzx ecx, byte [0x141ddb9b8]
cmp eax, 0x693bc425
ja 0x1400dd4e0
xor ecx, ecx
mov rdx, rdi
call fcn.1400bf820
nop word cs:[rax + rax]
mov ecx, dword [0x141dd9780]
imul ecx, dword [0x141dd9784]
add ecx, 0x6784dd16
and ecx, 0x40156b3f
cmp ecx, 0x1f5db603
jb 0x1400dd520
jmp 0x1400dd680
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1400dd550
nop word cs:[rax + rax]
mov eax, dword [0x141dd9730]
add eax, dword [0x141dd9734]
and eax, 0xad985676
add eax, 0x7be27d1a
shr eax, 1
imul rax, rax, 0x4c1fa595
shr rax, 0x3d
cmp eax, 0xaf35e118
ja 0x1400dd560
test rdi, rdi
je 0x1400dd5b9
mov eax, dword [0x141dd9738]
xor edx, edx
div dword [0x141dd973c]
imul rax, rax, 0x29c4a5bd
shr rax, 0x3c
and eax, 0xfffffffe
add eax, 0x99cd1cb3
cmp eax, 0xedcc8657
ja 0x1400dd5f2
jmp 0x1400dd5c3
mov eax, 2
jmp 0x1400dd680
mov eax, dword [0x141dd9740]
or eax, dword [0x141dd9744]
imul rax, rax, 0x121272ad
shr rax, 0x3c
add eax, 0x251a2ca7
and eax, 0x210220ad
movzx ecx, byte [0x141ddb9b8]
cmp eax, 0x3a21d894
jbe 0x1400dd5fb
movzx eax, byte [0x141ddb9b8]
jmp 0x1400dd5c3
mov eax, dword [0x141dd9748]
xor eax, dword [0x141dd974c]
add eax, 0x9565ca97
cmp eax, 0x7f391b4d
jae 0x1400dd620
xor ecx, ecx
mov rdx, rdi
call fcn.1400bf820
nop dword [rax]
mov eax, dword [0x141dd9750]
mov ecx, dword [0x141dd9754]
add eax, ecx
add eax, 0x781fdb08
shr eax, 1
imul rbx, rax, 0x2085adc7
shr rbx, 0x39
or ebx, 0x8e7e2cb1
xor ecx, ecx
mov rdx, rdi
call fcn.1400bf820
cmp ebx, 0x6f2f57e7
jb 0x1400dd620
nop dword [rax + rax]
mov ecx, dword [0x141dd9758]
add ecx, dword [0x141dd975c]
xor ecx, 0x418442c0
or ecx, 0x125abc2f
cmp ecx, 0x16f4a8cf
je 0x1400dd660
xor ecx, ecx
test rax, rax
mov edx, 2
cmovne rdx, rax
sete cl
mov qword [rsi + 8], rdx
mov qword [rsi + 0x10], rdi
mov qword [rsi], rcx
add rsp, 0x20
pop rbx
pop rdi
pop rsi
ret