Function at 0x1400b8b60
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x20
mov r14, qword [rcx]
lea rdi, [r14 + 0x10]
mov rsi, rcx
nop dword [rax + rax]
mov eax, dword [0x141dd4188]
imul eax, dword [0x141dd418c]
or eax, 0x3cbcc1d2
imul eax, eax, 0x3f454b7f
cmp eax, 0xccf01f55
je 0x1400b8b80
mov rax, qword [r14 + 0x18]
test rax, rax
setne bpl
mov rbx, qword [r14 + 0x20]
test rbx, rbx
setne r15b
test rax, rax
je 0x1400b8d96
mov eax, 0xa761557f
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4190]
imul ecx, dword [0x141dd4194]
xor ecx, 0x7b6c8521
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0xefd64f66
je 0x1400b8bd0
test rbx, rbx
je 0x1400b8d96
mov r12, qword [r14 + 0x28]
mov eax, dword [0x141dd4198]
xor eax, dword [0x141dd419c]
imul eax, eax, 0x5b31df80
cmp eax, 0x8f4fc808
je 0x1400b8c00
mov rax, qword [r12]
test rax, rax
je 0x1400b8c53
mov rcx, rbx
call rax
nop word [rax + rax]
mov eax, dword [0x141dd41a0]
add eax, dword [0x141dd41a4]
xor eax, 0x80a41204
or eax, 0x7543c03a
imul eax, eax, 0x66f3b45b
cmp eax, 0x91235f7f
jb 0x1400b8c30
cmp qword [r12 + 8], 0
je 0x1400b8d96
mov rax, qword [r12 + 0x10]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd41a8]
imul ecx, dword [0x141dd41ac]
or ecx, 0x95fabd2f
add ecx, 0x14b82f94
cmp ecx, 0x51cde95
jb 0x1400b8c70
nop word cs:[rax + rax]
mov ecx, dword [0x141dd41b0]
add ecx, dword [0x141dd41b4]
imul rcx, rcx, 0x51bea763
shr rcx, 0x3d
and ecx, 1
or ecx, 0x6d2c68b8
cmp ecx, 0x8c93661
jb 0x1400b8ca0
cmp rax, 0x11
jb 0x1400b8d22
nop
mov eax, dword [0x141dd41b8]
and eax, dword [0x141dd41bc]
imul eax, eax, 0xcf1e437b
or eax, 0x410a1948
imul eax, eax, 0xbeaf262d
cmp eax, 0x9c1dd2dc
je 0x1400b8cd0
mov rbx, qword [rbx - 8]
nop dword [rax + rax]
mov eax, dword [0x141dd41c0]
xor eax, dword [str.1L_]
or eax, 0x6bb99084
add eax, 0xea10dbb5
and eax, 0x5848430f
cmp eax, 0x7236f7eb
ja 0x1400b8d00
mov eax, dword [0x141dd41c8]
add eax, dword [0x141dd41cc]
mov ecx, 0x82ec0053
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x98f290c0
xor ecx, 0xfac9ef02
cmp ecx, 0x9e264051
ja 0x1400b8d82
mov eax, dword [0x141dd41d0]
xor eax, dword [0x141dd41d4]
and eax, 0x9b343a27
imul r12d, eax, 0x51c99244
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp r12d, 0x5e48be79
jne 0x1400b8d96
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400b8d4f
mov qword [r14 + 0x18], 0
mov rcx, qword [r14 + 0x10]
test rcx, rcx
je 0x1400b91b0
and bpl, r15b
nop
mov eax, dword [str.:__p2]
and eax, dword [0x141dd41dc]
imul eax, eax, 0x8282e29b
and eax, 0x8d5c213c
cmp eax, 0xd830199d
je 0x1400b8db0
test bpl, bpl
je 0x1400b8e1d
nop word cs:[rax + rax]
mov eax, dword [0x141dd41e0]
xor edx, edx
div dword [0x141dd41e4]
imul eax, eax, 0x9bb8c5f0
cmp eax, 0x2fc08b9e
je 0x1400b8de0
mov byte [rcx + 0x20], 1
nop
mov eax, dword [0x141dd41e8]
or eax, dword [0x141dd41ec]
xor eax, 0x7fb43e88
add eax, 0x7d5a6bdc
cmp eax, 0xee3cd129
ja 0x1400b8e00
lock dec qword [rcx + 0x18]
sete al
xor edx, edx
nop word [rax + rax]
test dl, dl
jne 0x1400b8e30
test al, al
je 0x1400b8e80
mov eax, 0x96ebe951
nop dword [rax]
mov edx, dword [0x141dd41f0]
sub edx, dword [0x141dd41f4]
imul rdx, rax
shr rdx, 0x3f
imul edx, edx, 0x8aafd32b
cmp edx, 0x36a75d44
je 0x1400b8e40
mov rcx, qword [rcx + 0x10]
mov al, 1
xchg byte [rcx + 0x30], al
cmp al, 0xff
jne 0x1400b8e80
add rcx, 0x30
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
nop dword [rax]
mov eax, dword [0x141dd41f8]
sub eax, dword [0x141dd41fc]
imul eax, eax, 0x32c8ef2d
and eax, 0x24d46dc7
cmp eax, 0xe0139ce2
je 0x1400b8e80
mov rax, qword [rdi]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd4200]
sub ecx, dword [0x141dd4204]
imul ecx, ecx, 0x6ecd4a3c
cmp ecx, 0xda695001
je 0x1400b8eb0
test rax, rax
je 0x1400b8f60
mov ecx, dword [0x141dd4208]
imul ecx, dword [0x141dd420c]
add ecx, 0xb5d92812
xor ecx, 0x2aec816e
cmp ecx, 0xe8b13ec5
ja 0x1400b8f20
mov edx, dword [0x141dd4210]
xor edx, dword [0x141dd4214]
add edx, 0x275641ea
and edx, 0x1ec2fcbf
mov rcx, 0xffffffffffffffff
lock xadd qword [rax], rcx
cmp edx, 0x3703ba71
jbe 0x1400b8f30
lock dec qword [rax]
jmp 0x1400b8ef4
mov eax, dword [0x141dd4218]
or eax, dword [0x141dd421c]
and eax, 0xb8823440
xor eax, 0x94d6e74
add eax, 0xdffbc65f
cmp eax, 0x573e9d90
ja 0x1400b8f30
cmp rcx, 1
jne 0x1400b8f60
mov rcx, rdi
call fcn.140076700
mov eax, dword [0x141dd4220]
xor edx, edx
div dword [0x141dd4224]
xor eax, 0x94a33075
imul eax, eax, 0x9f91a9ff
add eax, 0xcffbcf7
cmp eax, 0xb0ff14c5
jb 0x1400b8f60
mov rax, qword [r14 + 0x18]
mov ecx, 0x9ba40ecd
nop
mov edx, dword [0x141dd4228]
and edx, dword [0x141dd422c]
imul rdx, rcx
shr rdx, 0x3e
imul edx, edx, 0xed0030d3
cmp edx, 0x942383dd
je 0x1400b8f90
test rax, rax
je 0x1400b91b0
mov eax, dword [0x141dd4230]
xor edx, edx
div dword [0x141dd4234]
nop dword [rax]
mov eax, dword [0x141dd4238]
xor edx, edx
div dword [0x141dd423c]
imul eax, eax, 0xa3d41257
xor eax, 0x4c309406
and eax, 0xeeb89407
cmp eax, 0xe03c2ff6
ja 0x1400b8fd0
mov rdi, qword [r14 + 0x20]
mov eax, dword [0x141dd4240]
xor edx, edx
div dword [0x141dd4244]
nop word [rax + rax]
mov eax, dword [0x141dd4248]
or eax, dword [0x141dd424c]
add eax, 0x680d97ee
or eax, 0xd1b747a6
add eax, 0xfcee40ae
cmp eax, 0x9ad92eea
jb 0x1400b9010
test rdi, rdi
je 0x1400b91b0
mov rbx, qword [r14 + 0x28]
mov r8, qword [rbx]
mov eax, dword [0x141dd4250]
xor edx, edx
div dword [0x141dd4254]
mov eax, dword [0x141dd4258]
sub eax, dword [0x141dd425c]
add eax, 0xa0f544b
or eax, 0xe7e585af
cmp eax, 0x8b33b090
je 0x1400b9050
nop dword [rax]
mov eax, dword [0x141dd4260]
and eax, dword [0x141dd4264]
xor eax, 0xe324ecc1
and eax, 0xeb35edeb
cmp eax, 0xbc0b09c2
je 0x1400b9070
test r8, r8
je 0x1400b90be
mov rcx, rdi
call r8
nop dword [rax + rax]
mov eax, dword [0x141dd4268]
imul eax, dword [0x141dd426c]
or eax, 0x6ff9b7fe
add eax, 0xc51e367f
cmp eax, 0xa8e05dcd
ja 0x1400b90a0
xor eax, eax
test al, al
jne 0x1400b90c0
mov rcx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
nop dword [rax]
mov edx, dword [0x141dd4270]
xor edx, dword [0x141dd4274]
add edx, 0x2fd14e12
or edx, 0x4b49ca20
shr edx, 2
imul rdx, rdx, 0x5f8fb517
shr rdx, 0x39
cmp edx, 0x8f6bed76
je 0x1400b90d0
test rcx, rcx
je 0x1400b91b0
nop word [rax + rax]
mov ecx, dword [0x141dd4278]
sub ecx, dword [0x141dd427c]
imul ecx, ecx, 0x5e3170a1
add ecx, 0x25b561ab
or ecx, 0x5329010a
cmp ecx, 0xfc4df105
ja 0x1400b9110
cmp rax, 0x11
jb 0x1400b9140
mov rdi, qword [rdi - 8]
mov eax, dword [0x141dd4280]
imul eax, dword [0x141dd4284]
imul eax, eax, 0x26e88cca
and eax, 0x8a40024c
cmp eax, 0x10528e3d
jb 0x1400b9191
mov ebx, dword [0x141dd4288]
and ebx, dword [0x141dd428c]
xor ebx, 0xf36e1df7
add ebx, 0x25072e3a
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebx, 0xbe26f01
jae 0x1400b91b0
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400b915f
mov eax, dword [0x141dd4290]
and eax, dword [0x141dd4294]
cmp eax, 0x8ef30360
je 0x1400b91b0
mov rsi, qword [rsi]
nop word cs:[rax + rax]
mov eax, dword [0x141dd4298]
xor eax, dword [0x141dd429c]
or eax, 0xbfbf7d1e
xor eax, 0xc4a79907
cmp eax, 0x9588a97c
ja 0x1400b91d0
cmp rsi, 0xffffffffffffffff
je 0x1400b9340
mov eax, dword [0x141dd42a0]
xor edx, edx
div dword [0x141dd42a4]
imul rax, rax, 0x55bf64f7
shr rax, 0x34
or eax, 0xce4f7834
and eax, 0xce4f7dfe
cmp eax, 0xdf119bb0
ja 0x1400b9234
mov rax, 0xffffffffffffffff
lock xadd qword [rsi + 8], rax
xor ecx, ecx
test cl, cl
je 0x1400b9240
lock dec qword [rsi + 8]
jmp 0x1400b9221
mov ecx, dword [0x141dd42a8]
add ecx, dword [str._wZA]
xor ecx, 0xfeab2ff9
imul ecx, ecx, 0xba870682
add ecx, 0x1fc2c103
cmp ecx, 0xb8af42a0
jb 0x1400b9240
cmp rax, 1
jne 0x1400b9340
mov eax, dword [0x141dd42b0]
or eax, dword [str.ecmn]
or eax, 0x844fbc1e
imul eax, eax, 0xcbd6c718
cmp eax, 0xd0d7c48a
je 0x1400b92b2
mov eax, dword [0x141dd42b8]
xor edx, edx
div dword [0x141dd42bc]
or eax, 0x2c4006ea
add eax, 0x71e27e77
and eax, 0x45accc65
cmp eax, 0xb0063a6
jne 0x1400b92b4
jmp 0x1400b928e
mov eax, dword [0x141dd42c0]
sub eax, dword [0x141dd42c4]
xor eax, 0x89fb5996
add eax, 0xf604a59a
mov ecx, 0x955b0fe9
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x32bbc8c1
jne 0x1400b92f1
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax + rax]
mov ebx, dword [0x141dd42c8]
or ebx, dword [0x141dd42cc]
add ebx, 0x8c50a4bd
xor ebx, 0x42786d49
add ebx, 0x7d3536ca
mov rcx, qword [0x141ddb260]
xor edx, edx
mov r8, rsi
call rdi
cmp ebx, 0xa0577832
ja 0x1400b9300
nop word cs:[rax + rax]
mov eax, dword [0x141dd42d0]
sub eax, dword [0x141dd42d4]
imul rax, rax, 0x7d6a3ef5
shr rax, 0x3e
imul eax, eax, 0x3985c1a2
cmp eax, 0x232398cc
je 0x1400b9340
add rsp, 0x20
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret