Function at 0x1400d7c90
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov rdi, rdx
mov rsi, rcx
mov ecx, 0x18
mov rax, rdx
mul rcx
mov r15, rax
seto al
movabs rcx, 0x7ffffffffffffffc
nop
cmp r15, rcx
seta dl
mov r8d, dword [0x141dd7708]
imul r8d, dword [0x141dd770c]
xor r8d, 0x2821
and r8d, 0x4002925
cmp r8d, 0x2f687cb
je 0x1400d7cc0
or al, dl
jne 0x1400d8179
nop word cs:[rax + rax]
mov eax, dword [0x141dd7718]
add eax, dword [0x141dd771c]
xor eax, 0x21825024
and eax, 0x21835426
add eax, 0xdd56a24
cmp eax, 0x663ab838
ja 0x1400d7d00
test r15, r15
je 0x1400d7d73
movzx eax, byte [0x141dda6b8]
xor ecx, ecx
mov rdx, r15
call fcn.1400bf230
mov rbx, rax
mov r12, rdi
test rax, rax
jne 0x1400d7d7b
ud2
mov ebx, 4
xor r12d, r12d
lea eax, [rdi*8]
lea eax, [rax + rax*2]
mov dword [rsp + 0x20], eax
mov ecx, 0xb
xor edx, edx
xor r8d, r8d
mov r9, rbx
call qword [sym.imp.powrprof.dll_CallNtPowerInformation]
test eax, eax
js 0x1400d7e57
test rdi, rdi
je 0x1400d7f1a
mov eax, 0xf098ff5f
lea rdx, [rdi*8]
nop word [rax + rax]
mov ecx, dword [str.uA_]
imul ecx, dword [0x141dd7784]
imul rcx, rax
shr rcx, 0x3e
add ecx, 0xb4f1ca6b
and ecx, 0x14c10206
cmp ecx, 0x575714f6
ja 0x1400d7dc0
movzx eax, byte [0x141dda6b8]
xor ecx, ecx
call fcn.1400bf230
test rax, rax
je 0x1400d81a7
mov r14, rax
add r15, 0xffffffffffffffe8
movabs rcx, 0xaaaaaaaaaaaaaaab
mov rax, r15
mul rcx
shr rdx, 4
inc rdx
nop
mov eax, dword [0x141dd7788]
xor eax, dword [0x141dd778c]
or eax, 0x2084020
and eax, 0x32286020
cmp eax, 0xdd2f1774
ja 0x1400d7e20
mov eax, edx
and eax, 3
cmp r15, 0x48
jae 0x1400d7f28
xor r15d, r15d
mov rcx, rbx
jmp 0x1400d7fb0
test rdi, rdi
je 0x1400d808d
mov eax, dword [0x141dd7728]
xor edx, edx
div dword [0x141dd772c]
lea rdx, [rdi*8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7730]
sub eax, dword [0x141dd7734]
add eax, 0xda953a0d
or eax, 0x12129414
and eax, 0x9212d61e
cmp eax, 0xebea2f06
je 0x1400d7e80
mov ecx, 8
call fcn.1400bf230
test rax, rax
je 0x1400d820c
mov rcx, rax
nop dword [rax + rax]
mov eax, dword [0x141dd7738]
imul eax, dword [0x141dd773c]
add eax, 0xeb8a3e50
xor eax, 0x13a391e1
and eax, 0x73a3b1e9
cmp eax, 0xa258ccd9
je 0x1400d7ec0
nop word cs:[rax + rax]
mov eax, dword [0x141dd7740]
or eax, dword [0x141dd7744]
add eax, 0xaa75c320
xor eax, 0x5586c908
and eax, 0x5f86cd09
cmp eax, 0xc29aa62b
je 0x1400d7ef0
mov r8, rdi
jmp 0x1400d8095
mov r14d, 8
xor r15d, r15d
jmp 0x1400d805d
and rdx, 0xfffffffffffffffc
mov ecx, 0xad3068c9
nop word cs:[rax + rax]
mov r8d, dword [0x141dd7790]
sub r8d, dword [0x141dd7794]
add r8d, 0xc9697a6f
imul r8, rcx
shr r8, 0x3f
or r8d, 0xb5b68c58
cmp r8d, 0x153a19b7
jb 0x1400d7f40
xor r15d, r15d
mov rcx, rbx
nop word cs:[rax + rax]
mov r8d, dword [rcx + 8]
mov qword [r14 + r15*8], r8
mov r8d, dword [rcx + 0x20]
mov qword [r14 + r15*8 + 8], r8
mov r8d, dword [rcx + 0x38]
mov qword [r14 + r15*8 + 0x10], r8
mov r8d, dword [rcx + 0x50]
add rcx, 0x60
mov qword [r14 + r15*8 + 0x18], r8
add r15, 4
cmp rdx, r15
jne 0x1400d7f80
mov edx, dword [0x141dd77a8]
and edx, dword [0x141dd77ac]
imul rdx, rdx, 0x576f51f5
shr rdx, 0x3d
imul edx, edx, 0x2fb1b048
add edx, 0x558fc338
cmp edx, 0x7bcc8f8
jb 0x1400d7fb0
test rax, rax
je 0x1400d805d
xor edx, edx
nop word cs:[rax + rax]
mov r8d, dword [0x141dd77b0]
and r8d, dword [0x141dd77b4]
add r8d, 0x70a2ded0
xor r8d, 0x66de20d3
cmp r8d, 0x46c7cfdc
jae 0x1400d8020
mov r8d, dword [rcx + 8]
mov qword [r14 + r15*8], r8
nop dword [rax]
mov r8d, dword [0x141dd77b8]
imul r8d, dword [0x141dd77bc]
xor r8d, 0x93861b51
imul r8d, r8d, 0x83ebe1bf
mov r9d, dword [rcx + 8]
mov qword [r14 + r15*8], r9
cmp r8d, 0xe0a80b6a
je 0x1400d8020
add rcx, 0x18
inc r15
inc rdx
cmp rdx, rax
jne 0x1400d7ff0
test r12, r12
je 0x1400d8307
mov eax, dword [0x141dd77c0]
xor eax, dword [0x141dd77c4]
and eax, 0x124a65
imul eax, eax, 0x62701e07
cmp eax, 0x7301207b
jae 0x1400d82c7
jmp 0x1400d82f3
mov ecx, 8
xor r8d, r8d
mov eax, dword [0x141dd7760]
xor edx, edx
div dword [0x141dd7764]
and eax, 0x22cbaa6d
imul eax, eax, 0x508c7f16
cmp eax, 0xe45090db
jne 0x1400d80c0
mov qword [rsi], r8
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], rdi
mov eax, dword [0x141dd7768]
sub eax, dword [0x141dd776c]
imul eax, eax, 0x1d0e549b
imul rax, rax, 0x51af2327
shr rax, 0x3c
mov qword [rsi], r8
mov qword [rsi + 8], rcx
mov qword [rsi + 0x10], rdi
cmp eax, 0x32bad2c6
je 0x1400d80c0
test r12, r12
je 0x1400d827c
mov rsi, qword [0x141dda6a0]
mov eax, dword [0x141dd7770]
or eax, dword [0x141dd7774]
add eax, 0xac5e7976
and eax, 0x19251c46
imul eax, eax, 0x57c6d0d
cmp eax, 0xc0dd35fb
jbe 0x1400d8130
mov rcx, rsi
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word [rax + rax]
mov eax, dword [0x141dd7778]
xor eax, dword [0x141dd777c]
imul rax, rax, 0x76922053
shr rax, 0x3d
or eax, 0xdebf6628
imul ebp, eax, 0xa16b0a94
mov rcx, rsi
xor edx, edx
mov r8, rbx
call rdi
cmp ebp, 0x95ad035c
jb 0x1400d8140
jmp 0x1400d827c
ud2
mov eax, dword [0x141dd7798]
sub eax, dword [0x141dd779c]
or eax, 0x3702bcdc
shr eax, 1
imul rax, rax, 0x4443a161
shr rax, 0x3d
imul eax, eax, 0x7157ec94
cmp eax, 0xd15612a0
jne 0x1400d81d4
ud2
mov eax, 0x825e5fd7
nop dword [rax]
mov ecx, dword [0x141dd77a0]
or ecx, dword [0x141dd77a4]
xor ecx, 0x1d9620ba
imul rcx, rax
shr rcx, 0x3f
imul ecx, ecx, 0x6e9dffa9
ud2
mov eax, dword [0x141dd7748]
xor eax, dword [0x141dd774c]
imul eax, eax, 0xee7d8d9a
add eax, 0xaf173d00
cmp eax, 0x3deb9fee
jae 0x1400d8230
ud2
mov eax, dword [0x141dd7750]
xor eax, dword [0x141dd7754]
imul eax, eax, 0x25156789
add eax, 0xcf384f76
ud2
mov eax, 0xb19595eb
nop word cs:[rax + rax]
mov ecx, dword [0x141dd77e0]
and ecx, dword [0x141dd77e4]
or ecx, 0x42cb065b
add ecx, 0xa126f849
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xad1e7e1c
ja 0x1400d8290
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
mov eax, dword [0x141dd77c8]
imul eax, dword [0x141dd77cc]
imul eax, eax, 0x6b0b9b57
or eax, 0xe3640a0e
imul eax, eax, 0x470238cb
mov rcx, qword [0x141dda6a0]
cmp eax, 0x34aeb60c
jae 0x1400d82fc
mov rax, qword [0x141dda6a0]
jmp 0x1400d82c7
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [rsi], rdi
mov qword [rsi + 8], r14
mov eax, dword [0x141dd77d0]
add eax, dword [0x141dd77d4]
or eax, 0xa22541e7
imul rax, rax, 0x2e9373af
shr rax, 0x3a
or eax, 0x464f5988
cmp eax, 0x8b683758
jne 0x1400d8340
mov qword [rsi + 0x10], r15
nop word [rax + rax]
mov eax, dword [0x141dd77d8]
or eax, dword [0x141dd77dc]
imul rax, rax, 0x510c446b
shr rax, 0x3e
or eax, 0xfefbf9fc
mov qword [rsi + 0x10], r15
cmp eax, 0xc88f0b5a
je 0x1400d8340
jmp 0x1400d827c