Function at 0x1400114b4
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
mov rbx, rdx
lea r15d, [rcx + 0x1d]
mov edx, dword [rsp + 0x80]
lea r12d, [r9 + 0xb78]
add edx, 0x4a3
lea r14d, [r8 - 0x2c64]
mov edi, ecx
lea r13d, [r8 - 0xb78]
mov esi, r9d
xor edi, 0x762
xor esi, 0x20ec
xor ebp, ebp
lea eax, [rdx - 0x17]
mov r11d, 0xc4647
cmp r15d, eax
jg 0x1400116a7
lea rax, [0x14001c770]
mov r9d, ebp
mov qword [0x14022e090], rax
mov rcx, qword [section..data]
mov eax, dword [rbx + 0xf8]
sub eax, dword [rcx + 0x158]
add eax, 0x10673f
or dword [rcx + 0xa4], eax
mov eax, dword [rbx + 0x2c]
sub eax, 0x25852
xor dword [rbx + 0xd8], eax
mov rax, qword [rbx + 0x80]
mov r8d, dword [r9 + rax]
add r9, 4
mov eax, dword [rbx + 0x50]
sub eax, dword [rbx + 0x68]
imul r8d, dword [rbx + 0x44]
xor eax, 0x2bd7a
sub dword [rbx + 0xc0], eax
mov eax, dword [rbx + 0x38]
xor eax, dword [rbx + 0x100]
xor eax, r11d
mov dword [rbx + 0x100], eax
mov edx, r8d
mov rax, qword [section..data]
mov ecx, dword [0x14022e104]
shr edx, 8
sub ecx, dword [rax + 0x148]
mov eax, dword [rbx + 0x108]
sub ecx, 5
imul eax, ecx
mov dword [rbx + 0x108], eax
mov eax, 1
sub eax, dword [rbx + 0x128]
add dword [rbx + 0x158], eax
mov rax, qword [rbx + 0xa8]
movsxd rcx, dword [rbx + 0x48]
mov byte [rcx + rax], dl
inc dword [rbx + 0x48]
mov eax, dword [rbx + 0x118]
add dword [rbx + 0x148], eax
movsxd rcx, dword [0x14022e058]
mov rax, qword [0x14022e0b8]
mov byte [rcx + rax], r8b
inc dword [0x14022e058]
mov rcx, qword [section..data]
mov eax, dword [rbx + 0xa4]
add dword [rcx + 0x50], eax
mov rcx, qword [section..data]
mov eax, dword [0x14022e168]
add dword [rcx + 0x50], eax
mov ecx, dword [0x14022e108]
mov eax, dword [rbx + 0xa4]
xor ecx, 0xffef98c0
imul eax, ecx
mov dword [rbx + 0xa4], eax
mov eax, dword [0x14022e02c]
xor eax, dword [rbx + 0x28]
add eax, 0x52e21
xor dword [rbx + 0x158], eax
cmp r9, 0x1f8c0
jl 0x14001152f
mov ecx, dword [rbx + 0x2c]
lea r9d, [r15 + 0x381]
mov rax, qword [section..data]
lea r8d, [r14 + 0x270a]
xor ecx, 0xc4ee1697
lea edx, [r14 + 0x20ec]
mov dword [rax + 0x44], ecx
mov eax, r14d
mov rcx, qword [section..data]
xor eax, 0x2122
mov dword [rsp + 0x20], eax
call fcn.140002050
mov edx, eax
mov r11d, 0xc4647
mov ecx, r12d
xor ecx, 0xb6e
cmp edx, ecx
jge 0x1400118d6
mov r9, rbp
mov r10d, 0xfffad84f
mov rcx, qword [section..data]
mov rax, qword [rcx + 0x80]
mov r8d, dword [r9 + rax]
add r9, 4
mov eax, dword [rcx + 0xa4]
xor eax, dword [rbx + 0x38]
movsxd rcx, dword [rbx + 0x48]
sub eax, r11d
add dword [rbx + 0x144], eax
mov eax, 0x2bdce
sub eax, dword [rbx + 0x50]
add dword [rbx + 0x148], eax
mov rax, qword [0x14022e0b8]
imul r8d, dword [rbx + 0x44]
mov edx, r8d
shr edx, 0x10
mov byte [rcx + rax], dl
mov edx, r8d
inc dword [rbx + 0x48]
mov rax, qword [section..data]
shr edx, 8
mov ecx, dword [rax + 0xa4]
xor ecx, dword [rbx + 0x70]
mov rax, qword [rbx + 0xa8]
sub ecx, 2
or dword [rbx + 0x148], ecx
movsxd rcx, dword [rbx + 0x48]
mov byte [rcx + rax], dl
inc dword [rbx + 0x48]
mov eax, dword [rbx + 0x158]
sub eax, dword [rbx + 0x28]
xor dword [rbx + 0x118], eax
mov eax, r10d
mov ecx, dword [rbx + 0x88]
xor ecx, dword [rbx + 0x28]
sub eax, ecx
add dword [rbx + 0xa4], eax
mov rax, qword [section..data]
movsxd rcx, dword [rax + 0x48]
mov rax, qword [rbx + 0xa8]
mov byte [rcx + rax], r8b
mov rax, qword [section..data]
inc dword [rax + 0x48]
mov eax, dword [rbx + 0x10c]
xor eax, 2
sub dword [rbx + 0xc0], eax
mov eax, dword [rbx + 0x108]
add eax, dword [rbx + 0x138]
or dword [rbx + 0x38], eax
mov eax, dword [0x14022e0f0]
xor eax, dword [rbx + 0x88]
xor eax, 0xfffad84e
or dword [0x14022e0cc], eax
mov eax, dword [0x14022e148]
xor dword [0x14022e104], eax
mov eax, dword [rbx + 0x158]
add dword [rbx + 0xf8], eax
mov eax, 0x13
sub eax, dword [rbx + 0x118]
sub eax, dword [rbx + 0xd8]
add dword [rbx + 0x144], eax
mov rcx, qword [section..data]
mov eax, dword [rcx + 0x148]
xor eax, dword [rbx + 0xc0]
sub eax, 0x2b7ac
add dword [rcx + 0x118], eax
cmp r9, 0x80d0
jl 0x1400116c1
lea rax, [0x14022e010]
mov qword [0x14022e140], rax
mov rcx, qword [section..data]
mov eax, dword [rbx + 0x38]
sub eax, dword [rcx + 0x118]
sub eax, r11d
xor dword [rcx + 0x10c], eax
mov rax, qword [section..data]
mov ecx, dword [rbx + 0x144]
sub ecx, dword [rax + 0xe0]
inc ecx
add dword [rbx + 0x70], ecx
mov rax, qword [section..data]
mov ecx, dword [rax + 0x88]
mov eax, dword [rbx + 0x158]
xor ecx, r10d
sub eax, dword [rbx + 0x128]
sub dword [rbx + 0x144], ecx
inc eax
add dword [rbx + 0x138], eax
mov eax, 2
sub eax, dword [0x14022e11c]
add dword [rbx + 0xa4], eax
mov eax, dword [rbx + 0x4c]
mov rcx, qword [rbx + 0xc8]
xor dword [rcx + rbp], eax
add rbp, 4
mov eax, dword [rbx + 0xf4]
mov ecx, dword [rbx + 0x70]
add eax, 0xfffffff8
add ecx, eax
or dword [rbx + 0xa4], ecx
mov rax, qword [section..data]
mov ecx, dword [rax + 0xe4]
add dword [rbx + 0x4c], ecx
cmp rbp, 0x20d658
jl 0x140011823
jmp 0x140011974
mov rax, qword [section..data]
mov eax, dword [rax + 0xb0]
add eax, r14d
cmp dword [rbx + 0x138], eax
jae 0x140011974
mov eax, r13d
and eax, edi
sub eax, 0x2c64
cmp esi, eax
je 0x140011974
mov eax, dword [0x14022e060]
mov edx, dword [0x14022e03c]
mov ecx, dword [rbx + 0x28]
or rdx, rax
mov eax, r12d
add ecx, 0x2205
or rdx, rax
add ecx, edi
call qword [sym.imp.KERNEL32.dll_FindNextFileA]
lea edx, [r15 + rsi]
mov ecx, r12d
and edx, 0x270a
and ecx, 0x20ec
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r9d, dword [rbx + 0x70]
xor edi, esi
mov r8d, dword [0x14022e07c]
mov edx, r13d
mov eax, esi
xor r8d, r15d
xor r9, rax
sub edi, r15d
mov qword [rsp + 0x20], r9
add r8d, r14d
xor r9d, r9d
movsxd rcx, edi
and edx, 0x227e
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rbx, qword [rsp + 0x60]
lea eax, [r13 + 0x2cf]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret