Function at 0x140022724
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1b0
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x14019be90]
xor rax, rsp
mov qword [rsp + 0x1a0], rax
mov rsi, rdx
mov r14, rcx
mov r11, qword [rcx]
xor r13d, r13d
cmp dword [r11 - 0x10], r13d
jne 0x1400227b9
mov ecx, dword [0x1401a3d80]
lea r8d, [rcx + 2]
lea eax, [rcx + 1]
imul r8d, eax
imul r8d, ecx
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub r8d, edx
cmp r8d, 0xd
jne 0x1400227aa
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov rcx, rsi
call fcn.140002054
mov al, 1
jmp 0x140022a32
mov r12b, r13b
mov rdi, r13
mov r8d, dword [0x1401a3d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
cmp ecx, 1
jne 0x140022824
mov r9d, r13d
mov edx, r9d
mov r10d, 8
mov ecx, edx
and ecx, 1
dec ecx
not ecx
and ecx, r8d
mov eax, edx
sar eax, 1
mov edx, ecx
xor edx, eax
dec r10
jne 0x1400227f5
add r8d, edx
inc r9d
cmp r9d, 0x100
jl 0x1400227ec
mov dword [0x1401a3d80], r8d
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x2e8ba2e9
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x16
sub ecx, edx
mov eax, 7
cmp ecx, eax
jne 0x140022851
inc dword [0x1401a48b8]
mov rdx, r11
lea rcx, [rsp + 0x30]
call fcn.1400187b8
nop
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
or rbx, 0xffffffffffffffff
mov r9d, ebx
mov r8, qword [rsp + 0x30]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
movsxd r15, eax
test eax, eax
jne 0x14002289a
mov rdx, r14
mov rcx, rsi
call fcn.1400021c4
nop
jmp 0x1400229ca
mov eax, 2
mul r15
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.1400ba748
mov rdi, rax
lea r8, [r15 + r15]
xor edx, edx
mov rcx, rax
call fcn.1400c0510
mov r8, qword [rsp + 0x30]
lea edx, [r15 + r15]
mov dword [rsp + 0x28], edx
mov qword [rsp + 0x20], rdi
mov r9d, dword [r8 - 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jne 0x140022914
mov rdx, r14
mov rcx, rsi
call fcn.1400021c4
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
or rcx, 0xffffffffffffffff
mov eax, ecx
lock xadd dword [rdx + 0x10], eax
add eax, ecx
jmp 0x1400229dc
or rbx, 0xffffffffffffffff
test rdi, rdi
jne 0x140022922
mov eax, r13d
jmp 0x14002292f
mov rax, rbx
inc rax
cmp word [rdi + rax*2], r13w
jne 0x140022925
mov r8d, eax
mov rdx, rdi
mov rcx, rsi
call fcn.1400022bc
mov r8d, dword [0x1401a3d80]
lea ecx, [r8 + 1]
imul ecx, r8d
mov eax, 0x78787879
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0x11
sub ecx, edx
cmp ecx, 0xb
jne 0x140022990
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_OpenThread]
mov r8d, dword [0x1401a3d80]
test rax, rax
mov ecx, 7
cmove r8d, ecx
mov dword [0x1401a3d80], r8d
jmp 0x140022995
mov ecx, 7
mov r12b, 1
imul r8d, r8d
mov eax, 0x2e8ba2e9
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xb
sub r8d, edx
cmp r8d, ecx
jne 0x1400229ca
mov ecx, 4
call fcn.1400bb888
mov ecx, dword [0x1401a3d80]
mov dword [rax], ecx
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x1400229e9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov eax, dword [0x1401a3d80]
mov ecx, eax
imul ecx, eax
imul ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*8]
add eax, eax
sub ecx, eax
cmp ecx, 3
jne 0x140022a22
lea rcx, [rsp + 0xf0]
call qword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
test rdi, rdi
je 0x140022a2f
mov rcx, rdi
call fcn.1400bc20c
mov al, r12b
mov rcx, qword [rsp + 0x1a0]
xor rcx, rsp
call fcn.1400bb0d0
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret