Function at 0x1400b79b0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov rsi, rcx
nop word cs:[rax + rax]
mov eax, dword [0x141dd3448]
or eax, dword [0x141dd344c]
and eax, 0xbfc2a4f3
add eax, 0x25b78b83
and eax, 0x92c628d5
cmp eax, 0x85de117b
ja 0x1400b79d0
mov r14, qword [rsi]
lea rdi, [r14 + 0x10]
nop dword [rax]
mov eax, dword [0x141dd3450]
or eax, dword [0x141dd3454]
imul eax, eax, 0x74d17290
cmp eax, 0xd3a5202b
je 0x1400b7a00
mov eax, 0xaa099381
nop
mov ecx, dword [0x141dd3458]
add ecx, dword [0x141dd345c]
imul rcx, rax
shr rcx, 0x39
or ecx, 0xfb95ddc2
imul rdx, rcx, 0x16ca0687
shr rdx, 0x3b
mov rcx, qword [r14 + 0x18]
mov rbx, qword [r14 + 0x20]
test rcx, rcx
setne bpl
test rbx, rbx
setne r15b
cmp edx, 0xae361a23
je 0x1400b7a20
test rcx, rcx
je 0x1400b7bd0
mov eax, dword [0x141dd3460]
xor edx, edx
div dword [str.eC_a]
nop word [rax + rax]
mov eax, dword [0x141dd3468]
or eax, dword [0x141dd346c]
and eax, 0xafbdbcbc
add eax, 0x62ffe8ba
imul rax, rax, 0x6bb8cd6f
shr rax, 0x3d
cmp eax, 0xb3017f3e
je 0x1400b7a80
mov r12, qword [r14 + 0x28]
nop dword [rax]
mov eax, dword [0x141dd3470]
or eax, dword [0x141dd3474]
add eax, 0x32bd5d4a
shr eax, 1
imul rax, rax, 0x6b6d346b
shr rax, 0x39
xor eax, 0x16ec2189
cmp eax, 0xdfad82ba
ja 0x1400b7ab0
test rbx, rbx
je 0x1400b7bd0
nop word cs:[rax + rax]
mov eax, dword [0x141dd3478]
sub eax, dword [0x141dd347c]
imul rax, rax, 0x3cbe1375
shr rax, 0x3d
imul eax, eax, 0x22cda4c8
add eax, 0xd425a3d8
cmp eax, 0x968083c5
jb 0x1400b7af0
mov rax, qword [r12]
nop dword [rax]
mov ecx, dword [0x141dd3480]
and ecx, dword [0x141dd3484]
or ecx, 0xe90f3cc7
cmp ecx, 0xa69c7955
je 0x1400b7b20
test rax, rax
je 0x1400b7b74
mov rcx, rbx
call rax
nop word cs:[rax + rax]
mov eax, dword [0x141dd3488]
and eax, dword [0x141dd348c]
imul eax, eax, 0xf4b35431
imul rax, rax, 0x6faa4487
shr rax, 0x3e
cmp eax, 0x1c405a7
je 0x1400b7b50
cmp qword [r12 + 8], 0
je 0x1400b7bd0
cmp qword [r12 + 0x10], 0x11
jb 0x1400b7bbe
nop word cs:[rax + rax]
mov eax, dword [0x141dd3490]
imul eax, dword [0x141dd3494]
imul rax, rax, 0x385abbe7
shr rax, 0x3c
imul eax, eax, 0x5f4548e4
and eax, 0x741f8370
cmp eax, 0xa0d072e6
je 0x1400b7b90
mov rbx, qword [rbx - 8]
mov rcx, qword [0x141dda6a0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov qword [r14 + 0x18], 0
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x1400b8190
and bpl, r15b
mov r8d, 0xf6488dc7
nop
mov eax, dword [0x141dd3498]
xor edx, edx
div dword [0x141dd349c]
imul rax, r8
shr rax, 0x3e
add eax, 0xda171ed1
or eax, 0x82ee092b
cmp eax, 0xd739ec78
je 0x1400b7bf0
test bpl, bpl
je 0x1400b7cc0
mov eax, dword [0x141dd34c0]
xor edx, edx
div dword [0x141dd34c4]
nop
mov eax, dword [0x141dd34c8]
or eax, dword [0x141dd34cc]
imul eax, eax, 0x2cb1834b
xor eax, 0x8d565714
imul rax, rax, 0x6f669ad3
shr rax, 0x3e
cmp eax, 0x9b05fca7
ja 0x1400b7c30
mov eax, dword [0x141dd34d0]
sub eax, dword [0x141dd34d4]
add eax, 0xdda71ff6
mov edx, 0xb9261f77
imul rdx, rax
shr rdx, 0x3e
or edx, 0xd224e914
cmp edx, 0xcb4b9cbe
jae 0x1400b7c90
mov byte [rcx + 0x20], 1
nop dword [rax]
mov eax, dword [0x141dd34d8]
or eax, dword [0x141dd34dc]
and eax, 0x8c27cd88
add eax, 0xc2706762
and eax, 0xc020e520
mov byte [rcx + 0x20], 1
cmp eax, 0x28f74129
je 0x1400b7c90
nop word cs:[rax + rax]
mov eax, dword [0x141dd34a0]
mov edx, dword [0x141dd34a4]
add eax, edx
add eax, 0xaeac6b94
or eax, 0x309c6a6e
and eax, 0x7adf6aee
cmp eax, 0xc97169f8
ja 0x1400b7cc0
mov eax, dword [0x141dd34a8]
sub eax, dword [0x141dd34ac]
mov edx, 0x99275dcf
imul rdx, rax
shr rdx, 0x3f
add edx, 0xea8813bd
or edx, 0xc5ecc739
cmp edx, 0x212a93be
jne 0x1400b7d20
lock dec qword [rcx + 0x18]
nop word cs:[rax + rax]
mov edx, dword [0x141dd34b0]
imul edx, dword [0x141dd34b4]
add edx, 0x272fc01b
xor edx, 0xfadd8dfb
add edx, 0xf793ff0c
mov rax, 0xffffffffffffffff
lock xadd qword [rcx + 0x18], rax
cmp edx, 0x59c48841
jb 0x1400b7d20
nop word cs:[rax + rax]
mov edx, dword [0x141dd34b8]
mov r8d, dword [0x141dd34bc]
add edx, r8d
add edx, 0x2f64621e
or edx, 0x115eb2e2
add edx, 0x6a6092d3
cmp edx, 0x550a1
jb 0x1400b7d60
cmp rax, 1
jne 0x1400b7e4d
mov rbx, qword [rcx + 0x10]
mov eax, dword [0x141dd34e0]
xor edx, edx
div dword [0x141dd34e4]
add rbx, 0x30
nop word [rax + rax]
mov eax, dword [0x141dd34e8]
sub eax, dword [0x141dd34ec]
xor eax, 0x39166bc8
imul eax, eax, 0x5af8fd02
add eax, 0xe5a03098
cmp eax, 0x8bd503f0
jb 0x1400b7db0
mov al, 1
xchg byte [rbx], al
cmp al, 0xff
jne 0x1400b7e4d
mov eax, dword [0x141dd34f0]
xor edx, edx
div dword [0x141dd34f4]
cmp eax, 0x99d1c1a
je 0x1400b7e21
mov eax, dword [0x141dd34f8]
xor edx, edx
div dword [str.b_ko]
imul ebp, eax, 0x2c9128c9
add ebp, 0xb0e882b7
xor ebp, 0xc0ec04d9
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
cmp ebp, 0xfaa27993
jbe 0x1400b7e30
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
jmp 0x1400b7df0
mov eax, dword [0x141dd3500]
xor eax, dword [0x141dd3504]
add eax, 0x793434b5
or eax, 0xeefffeff
cmp eax, 0xdb1fab56
jb 0x1400b7e30
mov rcx, qword [rdi]
mov eax, dword [0x141dd3508]
xor edx, edx
div dword [0x141dd350c]
cmp eax, 0x759df6db
je 0x1400b7e50
test rcx, rcx
je 0x1400b7fa4
mov eax, dword [0x141dd3510]
xor eax, dword [0x141dd3514]
add eax, 0x55b4331f
imul rax, rax, 0x69e10bdb
shr rax, 0x3e
or eax, 0x7159c2e0
cmp eax, 0xcaaa0439
jbe 0x1400b7e9a
lock dec qword [rcx]
xor eax, eax
nop dword [rax]
mov r8, 0xffffffffffffffff
lock xadd qword [rcx], r8
test al, al
jne 0x1400b7ea0
mov eax, dword [0x141dd3518]
xor edx, edx
div dword [0x141dd351c]
nop
mov eax, dword [0x141dd3520]
imul eax, dword [0x141dd3524]
and eax, 0x3a00480
xor eax, 0x7084440
or eax, 0x70559b3e
cmp eax, 0x5a4beec6
jb 0x1400b7ec0
cmp r8, 1
jne 0x1400b7fa4
mov eax, dword [0x141dd3528]
xor edx, edx
div dword [0x141dd352c]
add eax, 0x68fbf934
mov ecx, 0x8ee84dd1
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x5b70ba40
je 0x1400b7f33
mov eax, dword [0x141dd3530]
imul eax, dword [0x141dd3534]
add eax, 0x4f6de885
or eax, 0xfd3fefef
cmp eax, 0xe8f26c91
jne 0x1400b7f35
jmp 0x1400b7f15
mov eax, dword [0x141dd3538]
imul eax, dword [0x141dd353c]
imul eax, eax, 0xddd70d4a
add eax, 0xd6a0d0f6
cmp eax, 0x193def1d
jae 0x1400b7f5c
mov rcx, rdi
call fcn.140076660
mov ebx, 0xf420aa13
nop word cs:[rax + rax]
mov eax, dword [0x141dd3540]
imul eax, dword [0x141dd3544]
imul r15d, eax, 0x56dff8a0
add r15d, 0x8fb40480
imul r15, rbx
shr r15, 0x3c
mov rcx, rdi
call fcn.140076660
cmp r15d, 0xb32652e0
je 0x1400b7f70
mov eax, dword [0x141dd3548]
xor edx, edx
div dword [0x141dd354c]
nop word cs:[rax + rax]
mov eax, dword [0x141dd3550]
xor edx, edx
div dword [0x141dd3554]
or eax, 0x10120814
and eax, 0x10360894
cmp eax, 0xef11e2da
ja 0x1400b7fc0
mov rax, qword [r14 + 0x18]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd3558]
and ecx, dword [0x141dd355c]
or ecx, 0x5e5297b2
imul ecx, ecx, 0x14c0fc6d
cmp ecx, 0x9f7a7f20
je 0x1400b7ff0
test rax, rax
je 0x1400b8190
mov eax, dword [0x141dd3560]
xor edx, edx
div dword [0x141dd3564]
nop word [rax + rax]
mov eax, dword [0x141dd3568]
add eax, dword [0x141dd356c]
or eax, 0x9b06020d
add eax, 0x1a65f090
and eax, 0x8187383a
cmp eax, 0xf777ff35
ja 0x1400b8030
mov rdi, qword [r14 + 0x20]
test rdi, rdi
je 0x1400b8190
mov rbx, qword [r14 + 0x28]
xor eax, eax
nop word cs:[rax + rax]
test al, al
jne 0x1400b8070
mov rax, qword [rbx]
nop word [rax + rax]
mov ecx, dword [0x141dd3570]
add ecx, dword [0x141dd3574]
and ecx, 0x24cc4300
xor ecx, 0xc18c003
or ecx, 0xd30338b4
cmp ecx, 0x3bc3a965
jb 0x1400b8080
test rax, rax
je 0x1400b80b0
mov rcx, rdi
call rax
mov rax, qword [rbx + 8]
mov rcx, qword [rbx + 0x10]
nop dword [rax + rax]
mov edx, dword [0x141dd3578]
or edx, dword [0x141dd357c]
xor edx, 0xd86b0d77
add edx, 0xcd449edc
cmp edx, 0x2472316
jb 0x1400b80c0
test rax, rax
je 0x1400b8190
mov r8d, 0xbaea2edb
nop
mov eax, dword [0x141dd3580]
xor edx, edx
div dword [0x141dd3584]
xor eax, 0x91f0e7b9
imul eax, eax, 0xd5483c1a
imul rax, r8
shr rax, 0x3f
cmp eax, 0x948bf7ea
ja 0x1400b80f0
cmp rcx, 0x11
jb 0x1400b8172
xor eax, eax
test al, al
jne 0x1400b8120
nop word cs:[rax + rax]
mov eax, dword [0x141dd3588]
xor eax, dword [0x141dd358c]
or eax, 0x32d262e8
cmp eax, 0x360f169
je 0x1400b8130
mov rdi, qword [rdi - 8]
nop dword [rax]
mov eax, dword [0x141dd3590]
or eax, dword [0x141dd3594]
add eax, 0xa9c60d5e
or eax, 0x40160000
and eax, 0x787e0380
cmp eax, 0x266d132d
jb 0x1400b8150
mov rcx, qword [0x141dda6a0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov eax, dword [0x141dd3598]
add eax, dword [0x141dd359c]
imul eax, eax, 0x1b3dd2c4
cmp eax, 0xd1944b34
je 0x1400b8190
mov rsi, qword [rsi]
mov eax, dword [0x141dd35a0]
xor edx, edx
div dword [0x141dd35a4]
xor eax, eax
nop dword [rax]
test al, al
jne 0x1400b81c0
cmp rsi, 0xffffffffffffffff
je 0x1400b8300
lea rax, [rsi + 8]
mov ecx, dword [0x141dd35a8]
and ecx, dword [0x141dd35ac]
or ecx, 0x59507dcd
add ecx, 0xc5e449bf
or ecx, 0xa97aebd1
cmp ecx, 0xc09d2b76
ja 0x1400b821f
mov ecx, dword [0x141dd35b0]
sub ecx, dword [0x141dd35b4]
imul edx, ecx, 0x7e59f092
add edx, 0x758f9a0d
lock dec qword [rax]
sete cl
cmp edx, 0xedc07a49
jbe 0x1400b8225
lock dec qword [rax]
jmp 0x1400b81f8
xor eax, eax
nop word [rax + rax]
test al, al
jne 0x1400b8230
test cl, cl
je 0x1400b8300
mov eax, dword [0x141dd35b8]
and eax, dword [0x141dd35bc]
add eax, 0x6b47d159
mov ecx, 0xa1c9ea5f
imul rcx, rax
shr rcx, 0x3e
xor ecx, 0x5b86bcb1
cmp ecx, 0x6b32cd83
ja 0x1400b8291
mov eax, dword [0x141dd35c0]
imul eax, dword [0x141dd35c4]
add eax, 0xa6f31adc
imul rax, rax, 0x4bc6d919
shr rax, 0x3c
or eax, 0x4540cbd0
cmp eax, 0xc45dcf8d
jbe 0x1400b8293
jmp 0x1400b8268
mov eax, dword [0x141dd35c8]
xor eax, dword [0x141dd35cc]
imul eax, eax, 0xa6876fbd
cmp eax, 0xecf3c4f4
jne 0x1400b82be
mov rcx, qword [0x141dda6a0]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov ebx, dword [0x141dd35d0]
or ebx, dword [0x141dd35d4]
add ebx, 0xac3b9c1
mov rcx, qword [0x141dda6a0]
xor edx, edx
mov r8, rsi
call rdi
cmp ebx, 0x5ae58b9b
ja 0x1400b82d0
nop dword [rax + rax]
mov eax, dword [0x141dd35d8]
imul eax, dword [0x141dd35dc]
and eax, 0x5ad8ce6b
imul rax, rax, 0x2b923d17
shr rax, 0x37
or eax, 0x41788503
cmp eax, 0x63dfcf8c
ja 0x1400b8300
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret