Function at 0x1400fbf20
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x30
mov rsi, rcx
mov eax, dword [0x141dcf310]
add eax, dword [0x141dcf314]
and eax, 0x8010220
cmp eax, 0x324d3c95
je 0x1400fbf6c
mov ecx, dword [0x141dcf318]
sub ecx, dword [0x141dcf31c]
xor ecx, 0xb290801
and ecx, 0xb390b05
movzx eax, byte [rsi]
cmp ecx, 0x2b39011
jae 0x1400fbf80
movzx eax, byte [rsi]
jmp 0x1400fbf49
mov ecx, dword [0x141dcf320]
imul ecx, dword [0x141dcf324]
add ecx, 0xbe1fdf10
or ecx, 0xd8420d23
cmp ecx, 0x8d1d6cdf
jb 0x1400fbf80
cmp al, 1
jne 0x1400fbfc2
mov ecx, 0xffffff9d
nop word [rax + rax]
pause
movzx eax, byte [rsi]
cmp al, 1
jne 0x1400fbfc2
lea edx, [rcx + 1]
test ecx, ecx
mov ecx, edx
jne 0x1400fbfb0
test al, al
jne 0x1400fc0a9
mov eax, dword [0x141dcf328]
xor edx, edx
div dword [0x141dcf32c]
xor eax, 0x4b005600
and eax, 0x4f225633
imul eax, eax, 0xdd982b35
cmp eax, 0x301b95d2
jne 0x1400fbff7
mov cl, 1
xor eax, eax
lock cmpxchg byte [rsi], cl
mov dl, 1
nop dword [rax]
mov eax, dword [0x141dcf330]
xor eax, dword [0x141dcf334]
imul r8d, eax, 0x693d92c7
xor r8d, 0x801003
and r8d, 0x4b432a3
xor eax, eax
lock cmpxchg byte [rsi], dl
sete cl
cmp r8d, 0x3be5e234
ja 0x1400fc000
nop word cs:[rax + rax]
mov edx, dword [0x141dcf338]
sub edx, dword [0x141dcf33c]
cmp edx, 0x79961056
je 0x1400fc040
nop word cs:[rax + rax]
mov edx, dword [0x141dcf340]
xor edx, dword [0x141dcf344]
and edx, 0xde03b916
add edx, 0xe3840736
imul r8, rdx, 0x421d6071
shr r8, 0x20
sub edx, r8d
shr edx, 1
add edx, r8d
shr edx, 0x1c
cmp edx, 0xf2c5f0a8
ja 0x1400fc060
test cl, cl
je 0x1400fc0a9
add rsp, 0x30
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret
lea rdi, [rsp + 0x2f]
mov rbx, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WaitOnAddress]
xor ebp, ebp
mov r14, qword [sym.imp.KERNEL32.dll_GetLastError]
mov r15d, 0xa90cbdbd
nop word cs:[rax + rax]
cmp al, 2
je 0x1400fc146
mov cl, 2
xchg byte [rsi], cl
mov eax, dword [0x141dcf348]
xor edx, edx
div dword [0x141dcf34c]
nop word cs:[rax + rax]
mov eax, dword [0x141dcf350]
mov edx, dword [0x141dcf354]
add eax, edx
add eax, 0xd51ba530
imul rax, r15
shr rax, 0x3f
or eax, 0x90910452
cmp eax, 0x481c5d88
jb 0x1400fc0f0
nop word [rax + rax]
mov eax, dword [0x141dcf358]
add eax, dword [0x141dcf35c]
or eax, 0x4bfa9d7f
imul eax, eax, 0xe4e6dac5
cmp eax, 0xbf979d3f
je 0x1400fc120
test cl, cl
je 0x1400fc09a
mov byte [rsp + 0x2f], 2
mov eax, dword [0x141dcf360]
add eax, dword [0x141dcf364]
and eax, 0x88000022
cmp eax, 0x26375586
je 0x1400fc1ac
nop word cs:[rax + rax]
mov eax, dword [0x141dcf368]
and eax, dword [0x141dcf36c]
xor eax, 0x786f537f
imul r12d, eax, 0xee4014dc
and r12d, 0xedae4034
mov r8d, 1
mov rcx, rsi
mov rdx, rdi
mov r9d, 0xffffffff
call rbx
cmp r12d, 0x4887b7c3
jae 0x1400fc1d0
mov r8d, 1
mov rcx, rsi
mov rdx, rdi
mov r9d, 0xffffffff
call rbx
jmp 0x1400fc170
cmp eax, 1
je 0x1400fc1d8
call r14
mov eax, dword [0x141dcf370]
xor edx, edx
div dword [0x141dcf374]
or eax, 0x9b143393
imul eax, eax, 0xb62035f
add eax, 0xa1af06fa
cmp eax, 0x334c28cf
jb 0x1400fc2f0
nop word cs:[rax + rax]
movzx eax, byte [rsi]
test bpl, bpl
jne 0x1400fc2f0
nop dword [rax]
mov ecx, dword [0x141dcf378]
sub ecx, dword [0x141dcf37c]
add ecx, 0xdca4335e
and ecx, 0xe305978f
cmp ecx, 0xdf7b9ba2
je 0x1400fc220
cmp al, 1
jne 0x1400fc2c0
mov ecx, 0x64
nop dword [rax]
mov eax, dword [0x141dcf388]
and eax, dword [0x141dcf38c]
and eax, 0xf15894b0
imul eax, eax, 0xfa432334
add eax, 0x597ec0e8
cmp eax, 0x45e6ff30
jae 0x1400fc280
pause
movzx eax, byte [rsi]
nop dword [rax + rax]
mov r10d, dword [0x141dcf390]
xor r10d, dword [0x141dcf394]
add r10d, 0x94867398
pause
xor r10d, 0x464cab38
movzx eax, byte [rsi]
cmp al, 1
setne r8b
mov edx, ecx
dec edx
sete r9b
cmp r10d, 0xc484acff
ja 0x1400fc280
or r8b, r9b
mov ecx, edx
je 0x1400fc250
nop
mov ecx, dword [0x141dcf380]
xor ecx, dword [0x141dcf384]
xor ecx, 0x29840810
or ecx, 0x525b7723
add ecx, 0x1d837372
cmp ecx, 0x3f29980e
jb 0x1400fc2c0
jmp 0x1400fc0d0
movzx eax, byte [rsi]
jmp 0x1400fc210