Function at 0x1400dce30
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rdi, rdx
mov rsi, rcx
mov eax, dword [0x141f45dd8]
imul eax, dword [0x141f45ddc]
or eax, 0xfefe79d2
cmp eax, 0xed48047
je 0x1400dcea5
mov eax, dword [0x141f45de0]
imul eax, dword [0x141f45de4]
or eax, 0x8338c369
imul ecx, eax, 0xacc47866
add ecx, 0xfe528ffa
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r12, rsp
cmp ecx, 0xce46360f
jbe 0x1400dcec1
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
jmp 0x1400dce5f
mov eax, dword [0x141f45de8]
xor eax, dword [0x141f45dec]
imul eax, eax, 0x4bff0f23
add eax, 0x959f74ad
cmp eax, 0x3497a90a
ja 0x1400dcf37
mov eax, dword [0x141f45df0]
xor edx, edx
div dword [0x141f45df4]
add eax, 0xec3f7ad8
and eax, 0x6a799ff6
imul r15d, eax, 0x3840d366
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov r13, rsp
sub rsp, 0x30
mov qword [rsp + 0x20], r13
mov rcx, rdi
mov edx, 0x3c
xor r8d, r8d
xor r9d, r9d
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
cmp r15d, 0x25cbfbf2
jae 0x1400dcf6c
mov eax, 0x10
call fcn.1400f4d10
sub rsp, rax
mov rax, rsp
sub rsp, 0x30
mov qword [rsp + 0x20], rax
mov rcx, rdi
mov edx, 0x3c
xor r8d, r8d
xor r9d, r9d
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
jmp 0x1400dcedf
mov r14d, eax
test eax, eax
jns 0x1400dd020
or r14d, 0x10000000
xor eax, eax
test al, al
jne 0x1400dcfc6
mov eax, dword [0x141f45df8]
xor edx, edx
div dword [0x141f45dfc]
mov r15d, eax
or r15d, 0xdbec5f05
and r15d, 0xfbeddf8f
mov qword [rbx], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
cmp r15d, 0x2b659ce3
jae 0x1400dcfe2
mov qword [rbx], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, rbx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
jmp 0x1400dcf84
mov rbx, qword [rbx]
cmp r14d, 0x90000005
je 0x1400dd004
cmp r14d, 0xd0000004
je 0x1400dd004
cmp r14d, 0xd0000023
jne 0x1400dd2f5
test rbx, rbx
je 0x1400dd020
mov rax, qword [rbx]
sub rsp, 0x20
mov rcx, rbx
call qword [rax + 0x10]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141f45e28]
and eax, dword [0x141f45e2c]
xor eax, 0x5db1cb82
add eax, 0x607f28f2
cmp eax, 0x77a836b2
jb 0x1400dd020
mov r14d, dword [r13]
mov dword [r12], r14d
mov r15d, r14d
shr r15d, 1
lea rdx, [r15*2 + 2]
movzx eax, byte [0x141f49078]
sub rsp, 0x20
xor ecx, ecx
call fcn.1400c6170
add rsp, 0x20
mov rbx, rax
mov eax, dword [0x141f45e30]
xor edx, edx
div dword [0x141f45e34]
nop word [rax + rax]
mov eax, dword [0x141f45e38]
xor eax, dword [0x141f45e3c]
add eax, 0xb50f350d
cmp eax, 0xd6c70767
ja 0x1400dd080
test rbx, rbx
je 0x1400dd385
xor eax, eax
test al, al
je 0x1400dd0d0
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, rdi
mov edx, 0x3c
mov r8, rbx
mov r9d, r14d
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
nop word [rax + rax]
mov r13d, dword [0x141f45e40]
and r13d, dword [0x141f45e44]
add r13d, 0x8ef4ef6e
or r13d, 0xd96b0403
sub rsp, 0x30
mov qword [rsp + 0x20], r12
mov rcx, rdi
mov edx, 0x3c
mov r8, rbx
mov r9d, r14d
call sub.ntdll.dll_NtQueryInformationProcess
add rsp, 0x30
cmp r13d, 0x586f4ce2
jb 0x1400dd0d0
nop word cs:[rax + rax]
mov ecx, dword [0x141f45e48]
and ecx, dword [0x141f45e4c]
or ecx, 0x2311024
xor ecx, 0x82b01220
or ecx, 0x7d4eedcb
cmp ecx, 0x2bc495b8
jb 0x1400dd120
test eax, eax
js 0x1400dd1f4
mov word [rbx + r15*2], 0
mov eax, dword [0x141f45e68]
xor eax, dword [0x141f45e6c]
xor eax, 0x2c8a1aa0
or eax, 0x5374a54f
add eax, 0x681e51d6
cmp eax, 0x7f5d9a0e
jbe case.0x14009eaa8.273
mov rdx, qword [rbx + 8]
sub rsp, 0x20
mov rcx, rsi
xor eax, eax
test al, al
test rbx, rbx
je 0x1400dd2bc
mov eax, dword [0x141f45e00]
xor edx, edx
div dword [0x141f45e04]
mov ecx, 0xdc1af287
ud2