Function at 0x1400e2f00
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push rsi
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x18
lea rbp, [rsp + 0x10]
mov r8, rdx
mov eax, dword [0x141dd6b10]
invalid
xor edx, edx
div dword [0x141dd6b14]
cmp eax, 0xd1f048d5
je case.0x140099728.185
mov eax, dword [0x141dd6b18]
or eax, dword [0x141dd6b1c]
imul edx, eax, 0x893647d0
or edx, 0x630bb541
mov eax, 0x20
add byte [rax], al
add al, ch
adc dword [rax + rax - 0x3bd6b800], esp
mov r13, rsp
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov rdi, rsp
cmp edx, 0x88236d7b
jnp case.0x14009245b.1984
invalid
mov byte [rbp + 0x1c], dh
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
mov eax, 0x20
call fcn.1400ed360
sub rsp, rax
jmp case.0x1400e3b4c.201
mov r10, qword [r8 + 0x10]
nop dword [rax]
mov eax, dword [0x141dd6b20]
xor edx, edx
div dword [0x141dd6b24]
cmp ecx, edi
add dword [0x13a836bbd], esp
add eax, 0x56bb1b9f
cmp eax, 0x6af68339
imul byte [rdx + 0x77]
invalid
mov eax, dword [r8 + 8]
mov r12b, 0x11
cmp eax, dword [r8 + 0xc]
jae 0x1400e34a8
sub eax, 4
add byte [rax], al
lea edx, [rax + 1]
mov dword [r8 + 8], edx
mov r9, qword [r8]
mov qword [rbp - 8], r10
mov dword [rbp - 8], edx
mov edx, 0x867554c5
nop word cs:[rax + rax]
mov r8d, dword [0x141dd6b28]
sub r8d, dword [0x141dd6b2c]
add r8d, 0xf0d18cf3
shr r8d, 1
imul r8, rdx
shr r8, 0x3e
shr eax, 0x3e
xor r8d, 0x92f58cd
cmp r8d, 0xc4c7c8ee
ja 0x1400e2fe0
mov qword [rbp], rcx
mov rcx, qword [r9 + 8]
mov ecx, dword [rcx + 8]
mov r14, qword [rcx + rax*8]
test r14, r14
invalid
je case.0x14009ba45.161
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.oleaut32.dll_SysStringLen]
add rsp, 0x20
invalid
and byte [rcx - 0x77], al
mov edi, eax
nop word cs:[rax + rax]
mov eax, dword [0x141dd6b30]
imul eax, dword [0x141dd6b34]
or eax, 0x2ca65bcf
add eax, 0xeb63f345
invalid
invalid
invalid
jmp case.0x14009eb52.157
imul eax, eax, 0x4c483e1d
shr rax, 0x3e
cmp eax, 0xd2f05d91
je 0x1400e3040
mov eax, dword [0x141dd6b38]
mov ecx, dword [0x141dd6b3c]
add eax, ecx
add eax, 0xb96ffdfc
imul rax, rax, 0x535fd953
shr rax, 0x3e
cmp eax, 0x786b6b5b
imul ebp, dword [rbx + 0x78], 0x75
invalid
jmp 0x1400e30e1
lea rbx, [0x141db6d84]
xor r14d, r14d
xor esi, esi
jmp 0x1400e30f7
mov esi, dword [0x141dd6b40]
xor esi, dword [0x141dd6b44]
and esi, 0x96d7d4d0
add esi, 0x8c8c16f1
and esi, 0xb0d142f0
out 0xf0, al
invalid
invalid
mov al, 0x45
test edi, edi
lea rbx, [0x141db6d84]
cmovne rbx, r14
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.oleaut32.dll_SysStringLen]
add rsp, 0x20
cmp esi, 0x22c47ffe
jne 0x1400e30f4
invalid
sub rsp, 0x20
mov rcx, r14
call qword [sym.imp.oleaut32.dll_SysStringLen]
add rsp, 0x20
and bl, ch
invalid
mov r14d, eax
movabs r15, 0x8000000000000000
mov eax, dword [0x141dd6b48]
add eax, dword [0x141dd6b4c]
xor eax, 0xb68865c5
mov ecx, 0x9832e98f
jmp 0x14f56c94b
scasd eax, dword [rdi]
invalid
shr rcx, 0x3c
cmp ecx, 0x661869e2
ja 0x1400e3163
mov esi, dword [0x141dd6b50]
and esi, dword [0x141dd6b54]
and esi, 0xd30e214e
invalid
invalid
add esi, 0xe1d840e9
and esi, 0xc40c60a9
sub rsp, 0x20
in al, dx
and byte [rax - 0x77], cl
stc
mov rdx, rbx
mov r8, r14
call fcn.1400388c0
add rsp, 0x20
cmp esi, 0x18492446
and al, 0x49
sbb byte [rbx + 0x18], dh
sub rsp, 0x20
mov rcx, rdi
mov rdx, rbx
mov r8, r14
call fcn.1400388c0
cmc
dec dword [rax - 0x7d]
invalid
invalid
jmp 0x1400e3127
cmp qword [rdi], r15
jne 0x1400e3249
mov r14, qword [rbp - 8]
movzx ecx, byte [r14]
mov eax, 0x9af0b2cf
nop word cs:[rax + rax]
nop word cs:[rax + rax]
mov edx, dword [0x141dd6b58]
or edx, dword [0x141dd6b5c]
add edx, 0xeecdf603
xor edx, 0x28df419f
imul rdx, rax
shr rdx, 0x3f
cmp edx, 0x1b1176c7
ja 0x1400e31a0
cmp ecx, 0x12
je case.0x1400e3237.0
nop word cs:[rax + rax]
mov eax, dword [0x141dd6b60]
or eax, dword [str.TJ_]
add eax, 0x1cf3978
cmp eax, 0xbbf95f2d
je 0x1400e31e0
nop word cs:[rax + rax]
mov eax, dword [0x141dd6b68]
xor edx, edx
div dword [0x141dd6b6c]
cmp edi, ecx
add dword [0x152fe0efc], esp
fsub st(7), st(0)
invalid
add eax, 0xb1b48c26
cmp eax, 0x297dcc2
jb 0x1400e3200
cmp rcx, 0x10
ja case.default.0x1400e3237
lea rax, [0x141db81bc]
movsxd rcx, dword [rax + rcx*4]
add rcx, rax
add ecx, eax
jmp rcx
mov rax, qword [r14 + 8]
xor ecx, ecx
leave
nop
test cl, cl
jne 0x1400e3240
cld
jmp case.0x14009ba45.1035
mov eax, dword [0x141dd6bb0]
mov ecx, dword [0x141dd6bb4]
or eax, 0x1cf395f
add eax, ecx
add eax, 0x92c5b0f3
xor eax, 0x80036001
add dword [rax + 3], esp
or byte [0x1b6a2cd17], 0x3d
xchg esp, eax
jbe 0x1400e32a4
pop rsi
jno 0x1400e32ae
mov rcx, qword [rbp]
jne case.0x1400777fa.1232
mov rax, qword [rdi + 0x10]
mov qword [r13 + 0x17], rax
invalid
invalid
movups xmm0, xmmword [rdi]
movups xmmword [r13 + 7], xmm0
xor eax, eax
nop word cs:[rax + rax]
invalid
test byte [rax], al
add byte [rax], al
add byte [rax], al
mov rdx, qword [rdi + 0x10]
mov qword [r13 + 0x17], rdx
mov dword [rbp + 0x17], edx
movups xmm0, xmmword [rdi]
movups xmmword [r13 + 7], xmm0
test al, al
invalid
jne 0x1400e3290
in al, dx
movups xmm0, xmmword [r13]
mov rax, qword [r13 + 0xf]
mov qword [rcx + 0x10], rax
mov rax, qword [r13 + 0x17]
mov qword [rcx + 0x18], rax
movups xmmword [rcx + 1], xmm0
adc dword [rcx + 1], eax
nop dword [rax]
mov eax, dword [0x141dd6bb8]
and eax, dword [0x141dd6bbc]
cmp bh, cl
invalid
imul rax, rax, 0x19f55345
shr rax, 0x3c
add eax, 0xd5b2498f
mov r10b, 0xd5
cmp eax, 0x2eb94a56
jb 0x1400e32c0
mov r12b, 2
jmp 0x1400e34a8
add byte [rax], al
mov eax, dword [0x141dd6b90]
imul eax, dword [0x141dd6b94]
add eax, 0x1cf3897
add eax, 0xd41fca0f
and eax, 0x95360010
cmp eax, 0x34e90054
ja case.0x1400e3237.9
invalid
mov edi, 0x10
cmp qword [r14 + 8], 0
jne 0x1400e33fa
jmp case.0x1400e3237.0
mov eax, dword [0x141dd6ba0]
or eax, dword [0x141dd6ba4]
invalid
cmp bh, cl
invalid
and eax, 0x480c336e
add eax, 0xdd0c15de
cmp eax, 0x9d5f9fe6
ja case.0x1400e3237.13
mov edi, 8
cmp qword [r14 + 0x10], 0
adc byte [rax], al
jne 0x1400e33fa
jmp case.0x1400e3237.0
mov eax, 0xa2d8c3cb
nop word [rax + rax]
nop dword [rax + rax]
mov ecx, dword [0x141dd6b70]
or ecx, dword [0x141dd6b74]
invalid
iretd
invalid
add ecx, 0x78093804
xor ecx, 0x33528bae
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xcea2c828
ja 0x1400e3370
mov rax, qword [r14 + 8]
nop dword [rax]
mov ecx, dword [0x141dd6b78]
sub ecx, dword [0x141dd6b7c]
or ecx, 0x10004200
leave
add byte [rdx], al
adc byte [rcx + 0xa0480f1], al
add byte [rdx + rcx], 4
and ecx, 0x5c1e4682
cmp ecx, 0xfb5a8dee
je 0x1400e33a0
jmp case.0x14009ba45.1035
mov rax, qword [r14 + 8]
nop dword [rax]
invalid
invalid
invalid
mov ecx, dword [0x141dd6b98]
xor ecx, dword [0x141dd6b9c]
iretd
add dword [rcx - 0x37], ebp
leave
ret 0xcee
in al, dx
add ecx, 0xe165085a
cmp ecx, 0xb3e91b9d
ja 0x1400e33d0
mov edi, 0x10
test rax, rax
test eax, eax
je case.0x1400e3237.0
mov eax, dword [0x141dd6b80]
sub eax, dword [0x141dd6b84]
cmp eax, 0x12ba7185
jne case.0x1400959c5.348
mov r8, qword [r14 + rdi]
mov rcx, qword [0x141dd7fe0]
iretd
invalid
sub rsp, 0x20
xor edx, edx
call qword [sym.imp.KERNEL32.dll_HeapFree]
add rsp, 0x20
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop
mov eax, dword [0x141dd6b88]
add eax, dword [0x141dd6b8c]
xor eax, 0x5cad32da
imul rsi, rax, 0x4ebf07d5
shr rsi, 0x3c
mov r8, qword [r14 + rdi]
mov rcx, qword [0x141dd7fe0]
mov dword [rbx - 0x31], ecx
add dword [rax - 0x7d], ecx
sub esp, 0x20
xor edx, edx
call rbx
add rsp, 0x20
add esp, 0x20
cmp esi, 0x33fa32e3
ja case.0x1400959c5.349
mov eax, dword [0x141dd6ba8]
xor edx, edx
div dword [0x141dd6bac]
xor eax, 0x1cf3733
imul eax, eax, 0x3f0ce871
add eax, 0x43b65c55
cmp eax, 0xd226e3ef
jbe 0x1400e348f
mov byte [r14], 8
mov al, 1
mov rcx, qword [rbp]
nop word cs:[rax + rax]
nop word cs:[rax + rax]
mov byte [r14], 8
test al, al
je 0x1400e34a0
mov eax, dword [0x141dd6bc0]
add eax, dword [0x141dd6bc4]
imul rax, rax, 0x3dd435bf
shr rax, 0x3d
cmp eax, 0xbfdb83c8
jne 0x1400e34c9
mov byte [rcx], r12b
mov eax, 0xb804340d
nop
mov edx, dword [0x141dd6bc8]
sub edx, dword [0x141dd6bcc]
or edx, 0xa68ce3c0
mov word [rsi - 0x93d3d7f], fs
fadd qword [rdx]
imul rdx, rax
shr rdx, 0x3c
mov byte [rcx], r12b
and dword [rcx + 0x5ac4f2fa], eax
sahf
je 0x1400e34d0
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret