Function at 0x1400b8500
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
nop word cs:[rax + rax]
mov eax, dword [0x141dd4868]
and eax, dword [0x141dd486c]
imul eax, eax, 0xb4754286
add eax, 0xcc8dc047
cmp eax, 0x52b12f8a
jb 0x1400b8520
mov r14, qword [rsi]
lea rdi, [r14 + 0x10]
mov rax, qword [r14 + 0x18]
mov rbx, qword [r14 + 0x20]
test rax, rax
setne cl
test rbx, rbx
setne bpl
and bpl, cl
nop dword [rax]
mov ecx, dword [0x141dd4870]
or ecx, dword [0x141dd4874]
and ecx, 0x137140a2
xor ecx, 0x5a26808c
cmp ecx, 0xc1ae81a7
ja 0x1400b8560
test rax, rax
je 0x1400b874c
mov r15, qword [r14 + 0x28]
nop dword [rax]
mov eax, dword [0x141dd4878]
and eax, dword [0x141dd487c]
xor eax, 0x2ee34910
imul eax, eax, 0x411050f2
and eax, 0xb6a99930
cmp eax, 0x26c1fd1f
je 0x1400b8590
test rbx, rbx
je 0x1400b874c
mov r12, qword [r15]
test r12, r12
je 0x1400b8612
mov eax, dword [0x141dd4880]
or eax, dword [0x141dd4884]
xor eax, 0x10852010
and eax, 0x309d665d
cmp eax, 0x7e8acfdd
ja 0x1400b860a
mov eax, dword [0x141dd4888]
and eax, dword [0x141dd488c]
imul r13d, eax, 0xc0b12206
and r13d, 0x49e08b86
mov rcx, rbx
call r12
cmp r13d, 0xef0cc0d7
jbe 0x1400b8612
mov rcx, rbx
call r12
jmp 0x1400b85e1
mov eax, dword [0x141dd4890]
xor edx, edx
div dword [0x141dd4894]
mov eax, dword [0x141dd4898]
sub eax, dword [0x141dd489c]
imul eax, eax, 0xbb61110f
add eax, 0xf40a1bdf
and eax, 0xd058af34
cmp eax, 0x98fb978
jb 0x1400b8620
mov rcx, qword [r15 + 8]
mov eax, dword [0x141dd48a0]
xor edx, edx
div dword [0x141dd48a4]
mov r8d, 0xc0194bd7
nop dword [rax + rax]
mov eax, dword [0x141dd48a8]
xor edx, edx
div dword [0x141dd48ac]
add eax, 0xb7e07b8c
imul rax, r8
shr rax, 0x3e
cmp eax, 0x42e70fd9
je 0x1400b8660
test rcx, rcx
je 0x1400b874c
mov rax, qword [r15 + 0x10]
nop
mov ecx, dword [0x141dd48b0]
sub ecx, dword [0x141dd48b4]
imul ecx, ecx, 0xba2f7226
or ecx, 0x82d3cb47
cmp ecx, 0xf6f9163d
ja 0x1400b8690
cmp rax, 0x11
jb 0x1400b86dd
mov rbx, qword [rbx - 8]
nop word [rax + rax]
mov eax, dword [0x141dd48b8]
and eax, dword [0x141dd48bc]
xor eax, 0x88028000
or eax, 0x75f579f7
cmp eax, 0xe185e486
ja 0x1400b86c0
mov eax, dword [0x141dd48c0]
imul eax, dword [0x141dd48c4]
and eax, 0x24852ddc
imul eax, eax, 0x406fa34
and eax, 0x9ec5c480
cmp eax, 0x193564c8
jb 0x1400b8738
mov r15d, dword [0x141dd48c8]
xor r15d, dword [0x141dd48cc]
and r15d, 0xa111573e
add r15d, 0xa7d39f8f
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp r15d, 0x862110e0
jae 0x1400b874c
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400b8701
mov eax, dword [0x141dd48d0]
sub eax, dword [0x141dd48d4]
imul eax, eax, 0x9e3a5ff1
cmp eax, 0xa4d8b241
je 0x1400b8790
mov eax, dword [0x141dd48d8]
xor eax, dword [0x141dd48dc]
imul eax, eax, 0xd039d3f6
add eax, 0xa8c46aa
xor eax, 0x901fda98
mov qword [r14 + 0x18], 0
cmp eax, 0xc2d07145
jbe 0x1400b879a
mov qword [r14 + 0x18], 0
jmp 0x1400b8765
mov rcx, qword [r14 + 0x10]
nop
mov eax, dword [0x141dd48e0]
xor edx, edx
div dword [0x141dd48e4]
and eax, 0x56ba7395
add eax, 0x51d4582
or eax, 0x306c1c67
cmp eax, 0x6a29f402
je 0x1400b87a0
test rcx, rcx
je 0x1400b8d61
nop dword [rax]
mov eax, dword [str.c_]
xor eax, dword [0x141dd48ec]
imul rax, rax, 0x26cb01ef
shr rax, 0x3c
cmp eax, 0x458d3248
je 0x1400b87d0
nop
mov eax, dword [0x141dd48f0]
imul eax, dword [0x141dd48f4]
or eax, 0x60241046
imul eax, eax, 0x76b72daf
add eax, 0xeab13921
cmp eax, 0x990d2944
ja 0x1400b87f0
test bpl, bpl
je 0x1400b884e
mov eax, dword [0x141dd4910]
xor edx, edx
div dword [0x141dd4914]
xor eax, 0xcab08628
shr eax, 1
imul rax, rax, 0x474512a1
shr rax, 0x3a
or eax, 0xaf6c3152
cmp eax, 0xf8f50318
jbe 0x1400b8f01
jmp 0x1400b8f35
lea rax, [rcx + 0x18]
nop word cs:[rax + rax]
mov edx, dword [0x141dd48f8]
or edx, dword [0x141dd48fc]
or edx, 0x5f6f6205
add edx, 0xecc20385
and edx, 0x6872ccf6
cmp edx, 0x32c66e61
jb 0x1400b8860
mov edx, dword [0x141dd4900]
or edx, dword [0x141dd4904]
xor edx, 0x1540040
or edx, 0x8600593c
and edx, 0xa7545d7e
cmp edx, 0xeb0f8658
jne 0x1400b88b0
lock dec qword [rax]
mov edx, 0xea3bc897
nop word cs:[rax + rax]
mov r9d, dword [0x141dd4908]
and r9d, dword [0x141dd490c]
imul r9, rdx
shr r9, 0x3e
xor r9d, 0x5ebba7ca
add r9d, 0x2b8d6c
lock dec qword [rax]
sete r8b
cmp r9d, 0x1b8813ea
jb 0x1400b88c0
test r8b, r8b
je 0x1400b89e0
mov rax, qword [rcx + 0x10]
mov ecx, dword [0x141dd4920]
xor ecx, dword [0x141dd4924]
add ecx, 0xc69e258c
or ecx, 0x13a6cab9
add ecx, 0xe6de3444
cmp ecx, 0x23268113
jae 0x1400b892d
mov cl, 1
xchg byte [rax + 0x30], cl
lea rbx, [rax + 0x30]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4928]
or ecx, dword [0x141dd492c]
or ecx, 0xaa8a2bb8
imul edx, ecx, 0x571059d5
add edx, 0x83ba8827
mov cl, 1
xchg byte [rax + 0x30], cl
cmp edx, 0x7800a368
jb 0x1400b8940
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400b8970
cmp cl, 0xff
jne 0x1400b89e0
mov eax, dword [0x141dd4930]
sub eax, dword [0x141dd4934]
add eax, 0x43d7117d
or eax, 0xe78739d1
imul rax, rax, 0x7a83932b
shr rax, 0x3e
cmp eax, 0x4ef6f39c
jne 0x1400b89aa
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
mov r15, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4938]
or eax, dword [0x141dd493c]
imul ebp, eax, 0xe97c539a
mov rcx, rbx
call r15
cmp ebp, 0x69d47159
je 0x1400b89c0
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400b89f0
mov rax, qword [rdi]
nop word [rax + rax]
mov ecx, dword [0x141dd4940]
imul ecx, dword [0x141dd4944]
or ecx, 0x6fbdbec5
imul ecx, ecx, 0x51183984
cmp ecx, 0xa6f42bed
ja 0x1400b8a00
test rax, rax
je 0x1400b8a62
lock dec qword [rax]
sete al
nop dword [rax]
mov ecx, dword [0x141dd4948]
or ecx, dword [0x141dd494c]
add ecx, 0xe55edf5f
xor ecx, 0x42104142
or ecx, 0x848f063d
cmp ecx, 0xf344273b
ja 0x1400b8a30
test al, al
je 0x1400b8a62
mov rcx, rdi
call fcn.140075f40
mov rcx, qword [r14 + 0x18]
mov r8d, 0xdf397173
nop dword [rax]
invalid
invalid
invalid
mov eax, dword [0x141dd4950]
xor edx, edx
div dword [0x141dd4954]
imul rax, r8
shr rax, 0x3a
and eax, 0xfffffff1
cmp eax, 0x613ba050
ja 0x1400b8a70
mov eax, dword [0x141dd4958]
xor eax, dword [0x141dd495c]
or eax, 0x7abc519a
add eax, 0xb5b302f6
or eax, 0x1fd0a276
cmp eax, 0xd56551fa
je 0x1400b8a90
test rcx, rcx
je 0x1400b8d61
mov rdi, qword [r14 + 0x20]
mov rbx, qword [r14 + 0x28]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4960]
add eax, dword [0x141dd4964]
xor eax, 0x2149a122
and eax, 0x67d9b523
imul rax, rax, 0x2900d317
shr rax, 0x3c
cmp eax, 0xbc94ae7e
ja 0x1400b8ad0
test rdi, rdi
je 0x1400b8d61
mov eax, 0xe9c2f059
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4968]
or ecx, dword [0x141dd496c]
xor ecx, 0x44813e6a
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xf4af581c
je 0x1400b8b10
nop word cs:[rax + rax]
mov eax, dword [0x141dd4970]
or eax, dword [0x141dd4974]
imul eax, eax, 0x390aaee9
add eax, 0x4c616999
cmp eax, 0xdc513308
ja 0x1400b8b40
mov r14, qword [rbx]
test r14, r14
je 0x1400b8c00
mov eax, dword [str.Cj_v_]
xor eax, dword [0x141dd497c]
add eax, 0xfd01bab5
imul rax, rax, 0xbd7de95
shr rax, 0x3b
cmp eax, 0xec8486e
ja 0x1400b8bb9
mov ebp, dword [0x141dd4980]
sub ebp, dword [0x141dd4984]
add ebp, 0x4cc9bb15
and ebp, 0xb35ad1c4
add ebp, 0x6450b27e
mov rcx, rdi
call r14
cmp ebp, 0x33e7d8a7
jae 0x1400b8bc1
mov rcx, rdi
call r14
jmp 0x1400b8b8d
mov eax, 0x89bb3bb5
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4988]
sub ecx, dword [0x141dd498c]
and ecx, 0xd2149af7
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x16d7cf31
je 0x1400b8bd0
nop word cs:[rax + rax]
mov eax, dword [0x141dd4990]
or eax, dword [0x141dd4994]
imul eax, eax, 0xf1977b9d
cmp eax, 0xb9b1d395
je 0x1400b8c00
mov rax, qword [rbx + 8]
nop dword [rax]
mov ecx, dword [0x141dd4998]
xor ecx, dword [0x141dd499c]
cmp ecx, 0x6fba696
je 0x1400b8c20
test rax, rax
je 0x1400b8d61
mov rcx, qword [rbx + 0x10]
mov eax, dword [0x141dd49a0]
xor edx, edx
div dword [0x141dd49a4]
nop
mov eax, dword [0x141dd49a8]
and eax, dword [0x141dd49ac]
and eax, 0x2e1397e1
add eax, 0xa2477ab6
cmp eax, 0xd17f85b
jb 0x1400b8c50
mov eax, 0x980f260b
nop word cs:[rax + rax]
mov edx, dword [0x141dd49b0]
add edx, dword [0x141dd49b4]
imul rdx, rax
shr rdx, 0x3a
imul edx, edx, 0xf7f6c23d
or edx, 0x36ed9f0
cmp edx, 0xadece18f
ja 0x1400b8c80
cmp rcx, 0x11
jb 0x1400b8cf9
nop
mov eax, dword [0x141dd49b8]
or eax, dword [0x141dd49bc]
add eax, 0x383d75cd
cmp eax, 0xae0d2b3a
ja 0x1400b8cb0
nop dword [rax + rax]
mov eax, dword [0x141dd49c0]
xor edx, edx
div dword [0x141dd49c4]
imul eax, eax, 0xb0678565
add eax, 0x5e0f4e9d
or eax, 0xe429f7cb
cmp eax, 0xeb3e6fd7
jb 0x1400b8cd0
mov rdi, qword [rdi - 8]
mov eax, dword [0x141dd49c8]
xor eax, dword [0x141dd49cc]
add eax, 0x912dbc08
or eax, 0x575edf32
and eax, 0x7f7effff
cmp eax, 0x75ad2154
ja 0x1400b8d4d
mov ebx, dword [0x141dd49d0]
sub ebx, dword [0x141dd49d4]
and ebx, 0xbba52000
xor ebx, 0x737a06eb
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebx, 0x4cb115a8
jae 0x1400b8d61
mov rcx, qword [0x141ddb9a0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400b8d1b
mov rsi, qword [rsi]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4918]
or eax, dword [0x141dd491c]
imul eax, eax, 0x76cad470
mov edx, 0x801fc959
imul rdx, rax
shr rdx, 0x3e
imul eax, edx, 0xa4cc3007
mov byte [rcx + 0x20], 1
cmp eax, 0x37f3ab63
ja 0x1400b884e
mov byte [rcx + 0x20], 1
jmp 0x1400b8f01