Function at 0x1400bb1f0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov rsi, rcx
nop
mov eax, dword [0x141dd7898]
mov ecx, dword [0x141dd789c]
add eax, ecx
add eax, 0x8a507461
and eax, 0xfd0423a7
imul rax, rax, 0x1a9e4127
shr rax, 0x3a
cmp eax, 0x9101ef3b
je 0x1400bb200
mov r14, qword [rsi]
lea rdi, [r14 + 0x10]
nop word cs:[rax + rax]
mov edx, dword [0x141dd78a0]
and edx, dword [0x141dd78a4]
or edx, 0xffef1fa7
and edx, 0xffef7faf
mov rax, qword [r14 + 0x18]
mov rbx, qword [r14 + 0x20]
test rax, rax
setne bpl
test rbx, rbx
setne cl
cmp edx, 0xd747fdff
je 0x1400bb240
and bpl, cl
xor ecx, ecx
nop word [rax + rax]
test cl, cl
jne 0x1400bb280
test rax, rax
je 0x1400bb3f4
nop dword [rax]
mov eax, dword [0x141dd78a8]
or eax, dword [0x141dd78ac]
imul eax, eax, 0xea96e414
and eax, 0x1f762a04
cmp eax, 0xc7b56968
ja 0x1400bb290
nop
mov eax, dword [0x141dd78b0]
xor edx, edx
div dword [str.V_JW]
and eax, 0xc0eb310
cmp eax, 0xce23de2
je 0x1400bb2b0
test rbx, rbx
je 0x1400bb3f4
mov r15, qword [r14 + 0x28]
nop word [rax + rax]
mov eax, dword [0x141dd78b8]
xor edx, edx
div dword [0x141dd78bc]
xor eax, 0x6a007312
or eax, 0x95df8cc5
add eax, 0xc5b7592f
cmp eax, 0x44f357e9
jb 0x1400bb2e0
mov rax, qword [r15]
nop word [rax + rax]
mov ecx, dword [0x141dd78c0]
imul ecx, dword [0x141dd78c4]
imul rcx, rcx, 0x3287456d
shr rcx, 0x3d
imul ecx, ecx, 0x5cbba5fa
cmp ecx, 0xa21ea1a3
je 0x1400bb310
test rax, rax
je 0x1400bb340
mov rcx, rbx
call rax
mov rcx, qword [r15 + 8]
mov rax, qword [r15 + 0x10]
xor edx, edx
nop word [rax + rax]
test dl, dl
jne 0x1400bb350
nop word cs:[rax + rax]
mov edx, dword [0x141dd78c8]
xor edx, dword [0x141dd78cc]
add edx, 0xac568df2
cmp edx, 0x7d325001
ja 0x1400bb360
test rcx, rcx
je 0x1400bb3f4
nop
mov ecx, dword [0x141dd78d0]
add ecx, dword [0x141dd78d4]
and ecx, 0xec2bc69f
add ecx, 0x1235f119
or ecx, 0x788f7c48
cmp ecx, 0x8a29cf90
jb 0x1400bb380
nop word cs:[rax + rax]
mov ecx, dword [0x141dd78d8]
add ecx, dword [0x141dd78dc]
or ecx, 0xa3099df2
imul rcx, rcx, 0x20aa9dc3
shr rcx, 0x3b
and ecx, 0xfffffffe
cmp ecx, 0x58b2dd7e
ja 0x1400bb3b0
cmp rax, 0x11
jb 0x1400bb3e2
mov rbx, qword [rbx - 8]
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [0x141dd78e0]
and eax, dword [0x141dd78e4]
or eax, 0x3a4cfc9
add eax, 0x71785fbf
xor eax, 0x23442124
cmp eax, 0x9e93d7e2
jb 0x1400bb447
mov eax, dword [0x141dd78e8]
and eax, dword [0x141dd78ec]
imul rax, rax, 0x45acf7e9
shr rax, 0x3e
imul eax, eax, 0x8198f58c
and eax, 0x9fd7ccb4
mov qword [r14 + 0x18], 0
cmp eax, 0x20722fe0
jbe 0x1400bb451
mov qword [r14 + 0x18], 0
jmp 0x1400bb416
mov rax, qword [rdi]
test rax, rax
je 0x1400bb919
nop dword [rax]
mov ecx, dword [0x141dd78f0]
and ecx, dword [0x141dd78f4]
or ecx, 0x752bf77
and ecx, 0x87d2bf77
cmp ecx, 0x914e2043
ja 0x1400bb460
test bpl, bpl
je 0x1400bb4e6
mov ecx, 0x85d71afd
nop word [rax + rax]
mov edx, dword [0x141dd7908]
mov r8d, dword [0x141dd790c]
add edx, r8d
add edx, 0xb215829b
imul rdx, rcx
shr rdx, 0x3f
or edx, 0x19addc32
cmp edx, 0x490581b1
ja 0x1400bb490
mov byte [rax + 0x20], 1
mov ecx, dword [0x141dd7910]
or ecx, dword [0x141dd7914]
imul ecx, ecx, 0x5d611331
add ecx, 0xb70d6f2f
xor ecx, 0xe83b1cfd
cmp ecx, 0x3c48f39a
jbe 0x1400bb4c0
mov edx, dword [0x141dd78f8]
and edx, dword [0x141dd78fc]
lea rcx, [rax + 0x18]
imul rdx, rdx, 0x50a1c961
shr rdx, 0x3b
imul edx, edx, 0xc1d7fa37
mov r8d, 0x99cc6afd
imul r8, rdx
shr r8, 0x3e
cmp r8d, 0xbd26d779
ja 0x1400bb52d
lock dec qword [rcx]
sete dl
xor r8d, r8d
test r8b, r8b
je 0x1400bb533
lock dec qword [rcx]
jmp 0x1400bb51e
mov ecx, 0xc6888f37
nop dword [rax + rax]
mov r8d, dword [0x141dd7900]
and r8d, dword [0x141dd7904]
imul r8, rcx
shr r8, 0x3d
add r8d, 0x3323e4ed
and r8d, 0x3321802e
cmp r8d, 0x7f9fb571
ja 0x1400bb540
test dl, dl
je 0x1400bb62c
mov rbx, qword [rax + 0x10]
mov eax, dword [0x141dd7918]
sub eax, dword [0x141dd791c]
add rbx, 0x30
and eax, 0xf30fe739
add eax, 0xaf07dde4
cmp eax, 0x13ae0a76
ja 0x1400bb5be
mov ecx, dword [0x141dd7920]
xor ecx, dword [0x141dd7924]
add ecx, 0x5c31a4f7
or ecx, 0xb4c140f6
mov al, 1
xchg byte [rbx], al
cmp ecx, 0x11f0fe6a
jne 0x1400bb5c4
mov al, 1
xchg byte [rbx], al
jmp 0x1400bb59a
cmp al, 0xff
jne 0x1400bb62c
mov eax, dword [0x141dd7928]
xor edx, edx
div dword [0x141dd792c]
xor eax, 0xab0600ca
imul eax, eax, 0x9129edb8
cmp eax, 0x8cf257cd
jae 0x1400bb5f1
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
mov r15, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
nop dword [rax + rax]
mov eax, dword [0x141dd7930]
xor eax, dword [0x141dd7934]
imul ebp, eax, 0x74f33262
add ebp, 0x75bbbe82
xor ebp, 0xecb80615
mov rcx, rbx
call r15
cmp ebp, 0xa46bbdd6
jb 0x1400bb600
mov rax, qword [rdi]
mov ecx, 0x8a1b5e9f
nop word cs:[rax + rax]
mov edx, dword [0x141dd7938]
sub edx, dword [0x141dd793c]
add edx, 0xb6f9371e
xor edx, 0x79cc4acc
imul rdx, rcx
shr rdx, 0x3f
cmp edx, 0x277fad78
je 0x1400bb640
test rax, rax
je 0x1400bb750
xor ecx, ecx
test cl, cl
jne 0x1400bb698
mov edx, dword [0x141dd7940]
or edx, dword [0x141dd7944]
or edx, 0xfb0c6875
lock dec qword [rax]
sete cl
cmp edx, 0xc5db9038
jne 0x1400bb6a0
lock dec qword [rax]
jmp 0x1400bb677
mov eax, dword [0x141dd7948]
add eax, dword [0x141dd794c]
imul eax, eax, 0x4844358f
add eax, 0x19b356b6
xor eax, 0x407a2ff3
cmp eax, 0x1f310dd7
jb 0x1400bb6a0
test cl, cl
je 0x1400bb750
mov eax, dword [0x141dd7950]
add eax, dword [0x141dd7954]
cmp eax, 0x43b5605b
jne 0x1400bb6f0
mov rcx, rdi
call fcn.1400791f0
nop word cs:[rax + rax]
mov ebx, dword [0x141dd7958]
and ebx, dword [0x141dd795c]
xor ebx, 0x917a4b07
add ebx, 0xfe3b6561
mov rcx, rdi
call fcn.1400791f0
cmp ebx, 0x7bcfe094
jb 0x1400bb6f0
nop dword [rax + rax]
mov eax, dword [0x141dd7960]
or eax, dword [0x141dd7964]
and eax, 0x5e567242
add eax, 0x60f90fba
or eax, 0x57bc0bb1
cmp eax, 0xf3819371
jb 0x1400bb720
nop word cs:[rax + rax]
mov eax, dword [0x141dd7968]
xor edx, edx
div dword [0x141dd796c]
or eax, 0x6fd6eeed
cmp eax, 0x588e0a89
je 0x1400bb750
mov rax, qword [r14 + 0x18]
xor ecx, ecx
test cl, cl
jne 0x1400bb770
test rax, rax
je 0x1400bb919
mov rdi, qword [r14 + 0x20]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7970]
xor eax, dword [0x141dd7974]
imul rax, rax, 0xd6a1ca3
shr rax, 0x3b
imul eax, eax, 0xbe93f6b0
cmp eax, 0x3e813a82
je 0x1400bb790
test rdi, rdi
je 0x1400bb919
mov rbx, qword [r14 + 0x28]
mov rax, qword [rbx]
xor ecx, ecx
nop word cs:[rax + rax]
test cl, cl
jne 0x1400bb7d0
test rax, rax
je 0x1400bb7fe
mov rcx, rdi
call rax
nop
mov eax, dword [0x141dd7978]
xor eax, dword [0x141dd797c]
imul eax, eax, 0x82c27c62
add eax, 0xec40c48f
cmp eax, 0x5d313db
jb 0x1400bb7e0
mov r8, qword [rbx + 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd7980]
xor edx, edx
div dword [0x141dd7984]
imul eax, eax, 0x95ca63a6
add eax, 0x21b09b18
and eax, 0x8af7e980
cmp eax, 0xaf2e9a5d
ja 0x1400bb810
mov rcx, qword [rbx + 0x10]
mov eax, dword [0x141dd7988]
xor edx, edx
div dword [0x141dd798c]
nop word [rax + rax]
mov eax, dword [0x141dd7990]
and eax, dword [0x141dd7994]
or eax, 0xe357667f
and eax, 0xebd7667f
cmp eax, 0xf4ccadbf
ja 0x1400bb850
test r8, r8
je 0x1400bb919
nop word cs:[rax + rax]
mov eax, dword [0x141dd7998]
xor eax, dword [0x141dd799c]
add eax, 0x22226c5c
or eax, 0x7e5b8e26
and eax, 0x7edfbeee
cmp eax, 0x2d90d4c2
jb 0x1400bb880
mov r8d, 0x827e528d
nop dword [rax + rax]
mov eax, dword [0x141dd79a0]
xor edx, edx
div dword [0x141dd79a4]
add eax, 0xb46b8515
xor eax, 0xf2dc02b6
imul rax, r8
shr rax, 0x3f
cmp eax, 0xc4d9489d
ja 0x1400bb8b0
cmp rcx, 0x11
jb 0x1400bb907
nop dword [rax]
mov eax, dword [0x141dd79a8]
or eax, dword [0x141dd79ac]
imul eax, eax, 0xf276d68
add eax, 0x447a81c4
or eax, 0x9acb9176
cmp eax, 0x63aecaac
jb 0x1400bb8e0
mov rdi, qword [rdi - 8]
mov rcx, qword [0x141dde6e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [rsi]
nop dword [rax]
mov eax, dword [0x141dd79b0]
xor edx, edx
div dword [str._NHbY]
imul rax, rax, 0x64f31c85
shr rax, 0x3e
or eax, 0x1643bffe
cmp eax, 0x7a30f06d
ja 0x1400bb920
nop word cs:[rax + rax]
mov eax, dword [0x141dd79b8]
imul eax, dword [0x141dd79bc]
imul eax, eax, 0x7ae06789
cmp eax, 0xbce6cb3a
je 0x1400bb950
cmp rsi, 0xffffffffffffffff
je 0x1400bba8a
mov eax, dword [0x141dd79c0]
xor edx, edx
div dword [0x141dd79c4]
and eax, 0x5882845a
add eax, 0xed8f38dd
and eax, 0x5b0ca51a
cmp eax, 0xc195402f
ja 0x1400bb9c5
mov eax, dword [0x141dd79c8]
sub eax, dword [0x141dd79cc]
and eax, 0x6b6aca9
imul ecx, eax, 0xe65f03c8
or ecx, 0x8ae80a91
lock dec qword [rsi + 8]
sete al
cmp ecx, 0x278fd75d
jne 0x1400bb9cc
lock dec qword [rsi + 8]
jmp 0x1400bb998
mov ecx, 0x884e9ce1
nop word cs:[rax + rax]
mov edx, dword [0x141dd79d0]
xor edx, dword [0x141dd79d4]
imul rdx, rcx
shr rdx, 0x39
or edx, 0x65af9465
and edx, 0x65af946f
cmp edx, 0xeb734817
ja 0x1400bb9e0
test al, al
je 0x1400bba8a
mov rdi, qword [0x141dde6e0]
mov eax, dword [0x141dd79d8]
mov ecx, dword [0x141dd79dc]
add eax, ecx
add eax, 0x6e16a2a0
shr eax, 1
imul rax, rax, 0x20ae979f
shr rax, 0x38
add eax, 0xbfdc7176
cmp eax, 0x5d97a8a
jae 0x1400bba4d
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rbx, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov ebp, dword [0x141dd79e0]
and ebp, dword [0x141dd79e4]
add ebp, 0x39abb61f
and ebp, 0xf37ae5e3
mov rcx, rdi
xor edx, edx
mov r8, rsi
call rbx
cmp ebp, 0xc114e734
je 0x1400bba60
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400bba90
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r14
pop r15
ret