Function at 0x1400cee40
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x38
mov eax, dword [0x141dd7fe0]
xor eax, dword [0x141dd7fe4]
cmp eax, 0xdd4f960
je 0x1400cee50
mov rax, qword [rcx]
test rax, rax
je 0x1400cf480
cmp eax, 1
jne 0x1400cef20
lea rax, [rcx + 8]
mov qword [rsp + 0x30], rax
lea rax, [rcx + 0x10]
mov qword [rsp + 0x28], rax
nop word [rax + rax]
mov eax, dword [0x141dd8030]
sub eax, dword [0x141dd8034]
xor eax, 0xc276be52
imul rax, rax, 0x129dab03
shr rax, 0x3c
cmp eax, 0x72083ed
ja 0x1400cee90
mov rdi, qword [rcx + 8]
mov eax, 0xfc953c4d
nop dword [rax]
mov edx, dword [0x141dd8038]
add edx, dword [0x141dd803c]
imul rdx, rax
shr rdx, 0x3a
imul edx, edx, 0xad9c0b13
cmp edx, 0x6ff568ca
je 0x1400ceec0
test rdi, rdi
mov qword [rsp + 0x20], rcx
je 0x1400cf250
mov eax, dword [0x141dd8040]
add eax, dword [0x141dd8044]
xor eax, 0x95f80349
add eax, 0xc607f67b
cmp eax, 0xc016c77
ja 0x1400ceef0
mov r13, qword [rcx + 0x18]
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400cf0e1
mov eax, dword [0x141dd7fe8]
and eax, dword [0x141dd7fec]
and eax, 0xa487cfb
add eax, 0xd4f0f238
imul rax, rax, 0x68582f8d
shr rax, 0x3e
cmp eax, 0xe29237e0
ja 0x1400cef20
mov rdi, qword [rcx + 8]
nop dword [rax]
mov eax, dword [0x141dd7ff0]
sub eax, dword [0x141dd7ff4]
or eax, 0x7f6ddff7
cmp eax, 0xd7b994e9
je 0x1400cef50
mov rsi, qword [rcx + 0x10]
mov rax, qword [rsi]
test rax, rax
je 0x1400cefb0
mov rcx, rdi
call rax
mov eax, 0xbf65e8a7
nop
mov ecx, dword [0x141dd7ff8]
imul ecx, dword [0x141dd7ffc]
and ecx, 0xcdf3e7ef
imul ecx, ecx, 0xa0cfd9dc
imul rcx, rax
shr rcx, 0x3a
cmp ecx, 0xa351aab3
ja 0x1400cef80
nop dword [rax]
mov eax, dword [0x141dd8000]
xor edx, edx
div dword [0x141dd8004]
xor eax, 0x4dfd2c2a
imul eax, eax, 0x36edfa55
cmp eax, 0x7a1d2457
je 0x1400cefb0
mov eax, dword [0x141dd8008]
add eax, dword [0x141dd800c]
imul rax, rax, 0x70d25153
shr rax, 0x3c
or eax, 0x225d3ef0
cmp eax, 0x8a22902e
je 0x1400cefd0
cmp qword [rsi + 8], 0
je 0x1400cf480
mov rax, qword [rsi + 0x10]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8010]
add ecx, dword [0x141dd8014]
imul ecx, ecx, 0x64b59e08
or ecx, 0xefb7f5d4
imul ecx, ecx, 0xfa8de09d
cmp ecx, 0xf20c26e3
ja 0x1400cf010
cmp rax, 0x11
jb 0x1400cf040
mov rdi, qword [rdi - 8]
mov eax, dword [0x141dd8018]
xor eax, dword [0x141dd801c]
mov ecx, 0x85be3607
imul rcx, rax
shr rcx, 0x3d
add ecx, 0xd7a27b1d
xor ecx, 0x1d0bb074
cmp ecx, 0xa12897ad
jae 0x1400cf07f
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov ebx, dword [0x141dd8020]
or ebx, dword [0x141dd8024]
add ebx, 0x928c287b
and ebx, 0xc02144d0
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rdi
call rsi
cmp ebx, 0x62116349
jb 0x1400cf090
jmp 0x1400cf480
mov rdi, rbp
test rbp, rbp
mov rcx, qword [rsp + 0x20]
je 0x1400cf250
mov rbp, qword [rdi + 0x18]
mov qword [rcx + 8], rbp
lea rax, [rbp + 0x20]
test rbp, rbp
cmove rax, qword [rsp + 0x28]
mov qword [rax], 0
dec r13
mov qword [rcx + 0x18], r13
mov rbx, qword [rdi + 8]
mov r12, qword [rdi + 0x10]
test r12, r12
je 0x1400cf190
mov r14, rbx
jmp 0x1400cf12c
add r14, 0x158
dec r12
je 0x1400cf190
mov eax, dword [0x141dd8048]
or eax, dword [0x141dd804c]
and eax, 0x84444c40
or eax, 0x692a118d
xor eax, 0x6677e5c7
cmp eax, 0x43b3c356
jb 0x1400cf183
nop
mov eax, dword [0x141dd8050]
imul eax, dword [0x141dd8054]
add eax, 0xe170b205
imul rsi, rax, 0x1f327ed7
shr rsi, 0x3b
xor esi, 0x72ab19d5
mov rcx, r14
call fcn.1400ca8e0
cmp esi, 0xa1ef26d
jae 0x1400cf120
mov rcx, r14
call fcn.1400ca8e0
jmp 0x1400cf150
cmp qword [rdi], 0
je 0x1400cf1a5
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call r15
xor eax, eax
test al, al
je 0x1400cf1c0
mov rax, qword [0x141ddc4e0]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8058]
xor eax, dword [0x141dd805c]
or eax, 0xd2fecd2a
imul eax, eax, 0xf34559a0
mov rbx, qword [0x141ddc4e0]
cmp eax, 0x8176054c
je 0x1400cf1c0
mov eax, dword [0x141dd8060]
xor edx, edx
div dword [0x141dd8064]
imul rax, rax, 0x7ff6efb3
shr rax, 0x3d
imul eax, eax, 0xdb37c0cf
and eax, 0x9f02f3b9
cmp eax, 0x3f5a1c8a
ja 0x1400cf23f
mov esi, dword [0x141dd8068]
xor esi, dword [0x141dd806c]
add esi, 0x365c12ac
or esi, 0xfff2f3be
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
cmp esi, 0xaf0daedc
jae 0x1400cf0d0
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
jmp 0x1400cf210
mov eax, dword [0x141dd8070]
xor eax, dword [0x141dd8074]
cmp eax, 0x43f0ed9e
je 0x1400cf250
mov eax, 0xc7179cef
nop dword [rax + rax]
mov edx, dword [0x141dd8078]
imul edx, dword [0x141dd807c]
imul rdx, rax
shr rdx, 0x3d
or edx, 0xca15487d
imul rdx, rdx, 0x7a400cbb
shr rdx, 0x3b
cmp edx, 0x94966070
je 0x1400cf270
mov rdi, qword [rcx + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8080]
xor edx, edx
div dword [0x141dd8084]
or eax, 0x61229411
and eax, 0xef22b6f3
add eax, 0xcffe21cf
cmp eax, 0xeb3fc1d7
ja 0x1400cf2b0
test rdi, rdi
je 0x1400cf480
mov r12, qword [rcx + 0x30]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400cf2f0
mov r15, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov r13, qword [rdi + 0x18]
mov qword [rcx + 0x20], r13
test r13, r13
mov rax, r13
cmove rax, qword [rsp + 0x30]
mov qword [rax + 0x20], 0
dec r12
mov qword [rcx + 0x30], r12
mov rbx, qword [rdi + 8]
mov rbp, qword [rdi + 0x10]
test rbp, rbp
je 0x1400cf354
mov r14, rbx
nop word cs:[rax + rax]
mov rcx, r14
call fcn.1400ca8e0
add r14, 0x158
dec rbp
jne 0x1400cf340
cmp qword [rdi], 0
je 0x1400cf405
mov eax, dword [0x141dd8088]
or eax, dword [0x141dd808c]
xor eax, 0x72faf09e
imul eax, eax, 0x2f2020e0
cmp eax, 0xb44ce922
je 0x1400cf3a6
nop dword [rax]
mov eax, dword [0x141dd8090]
mov ecx, dword [0x141dd8094]
add eax, ecx
add eax, 0xc99dbd31
and eax, 0x3a67c452
mov r14, qword [0x141ddc4e0]
cmp eax, 0x20a96a98
jbe 0x1400cf3b0
mov rax, qword [0x141ddc4e0]
jmp 0x1400cf380
xor eax, eax
test al, al
je 0x1400cf3d0
mov rcx, r14
xor edx, edx
mov r8, rbx
call r15
nop word cs:[rax + rax]
mov eax, dword [0x141dd8098]
and eax, dword [0x141dd809c]
and eax, 0xba919ea0
imul rsi, rax, 0x1ace60cf
shr rsi, 0x3c
xor esi, 0xeb5a7175
mov rcx, r14
xor edx, edx
mov r8, rbx
call r15
cmp esi, 0x7283c129
jb 0x1400cf3d0
mov rbx, qword [0x141ddc4e0]
mov eax, dword [0x141dd80a0]
sub eax, dword [0x141dd80a4]
add eax, 0x572f7d02
xor eax, 0x177d3b01
cmp eax, 0xdabebddb
jbe 0x1400cf440
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
nop word cs:[rax + rax]
mov eax, dword [0x141dd80a8]
mov ecx, dword [0x141dd80ac]
lea esi, [rax + rcx]
add esi, 0x3a570dcb
or esi, 0x8de1a56e
mov rcx, rbx
xor edx, edx
mov r8, rdi
call r15
cmp esi, 0x58d8c03b
je 0x1400cf440
mov rdi, r13
test r13, r13
mov rcx, qword [rsp + 0x20]
jne 0x1400cf300
nop
mov eax, dword [0x141dd8028]
and eax, dword [0x141dd802c]
add eax, 0xe35a4f0b
xor eax, 0xc92aec21
add eax, 0xb7ea4b9a
cmp eax, 0x94533332
jb 0x1400cf480
add rsp, 0x38
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret