Function at 0x1400ff1b0
Capabilities:
Access peb ldr_data
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rbx, rdx
mov rsi, rcx
mov eax, dword [0x141dd6d50]
xor edx, edx
div dword [0x141dd6d54]
add eax, 0x1c6296b7
or eax, 0xda45b235
cmp eax, 0x88d0102
jb 0x1400ff1fb
mov eax, 0xa0
call fcn.1400ef3b0
sub rsp, rax
mov rdi, rsp
xor eax, eax
test al, al
je 0x1400ff20a
mov eax, 0xa0
call fcn.1400ef3b0
sub rsp, rax
jmp 0x1400ff1e5
mov eax, dword [0x141ddb9bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov eax, dword [rax + 0x28]
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6d58]
add ecx, dword [0x141dd6d5c]
imul ecx, ecx, 0x8aa57af8
imul rcx, rcx, 0x4d756ae5
shr rcx, 0x3e
imul ecx, ecx, 0x11f39253
cmp ecx, 0x136513d8
ja 0x1400ff230
test eax, eax
jne 0x1400ff287
mov eax, dword [0x141ddb9bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov dword [rax + 0x28], 1
mov qword [rax + 0x2c], 0
mov rax, qword [r8 + 0x50]
mov qword [rdi + 0x58], rax
movups xmm0, xmmword [r8 + 0x40]
movups xmmword [rdi + 0x48], xmm0
movups xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
movups xmm2, xmmword [r8 + 0x20]
movups xmm3, xmmword [r8 + 0x30]
movups xmmword [rdi + 0x38], xmm3
movups xmmword [rdi + 0x28], xmm2
movups xmmword [rdi + 0x18], xmm1
movups xmmword [rdi + 8], xmm0
mov eax, dword [0x141ddb9bc]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rax, [rax + 0x2c]
mov qword [rdi], rax
mov qword [rdi + 0x60], 0
mov eax, dword [0x141dd6d60]
xor eax, dword [0x141dd6d64]
xor eax, 0xda08501
or eax, 0xd0584872
imul eax, eax, 0x67f956b7
cmp eax, 0x3f030a9f
jb 0x1400ff33b
mov r14d, dword [0x141dd6d68]
or r14d, dword [0x141dd6d6c]
or r14d, 0x7df70b6c
sub rsp, 0x20
lea rdx, [0x1400cebd0]
mov rcx, rbx
mov r8, rdi
call fcn.140082030
add rsp, 0x20
cmp r14d, 0x5bffcbb7
jne 0x1400ff357
sub rsp, 0x20
lea rdx, [0x1400cebd0]
mov rcx, rbx
mov r8, rdi
call fcn.140082030
add rsp, 0x20
jmp 0x1400ff303
mov eax, dword [0x141dd6d70]
xor edx, edx
div dword [0x141dd6d74]
and eax, 0x7de008a7
xor eax, 0x2cbfae5b
mov ecx, 0x879184a9
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x51afc987
jbe 0x1400ff390
mov rcx, qword [rdi]
mov dl, 1
xor eax, eax
lock cmpxchg byte [rcx + 4], dl
mov cl, 1
nop word cs:[rax + rax]
mov edx, dword [0x141dd6d78]
imul edx, dword [0x141dd6d7c]
add edx, 0x1f67345f
and edx, 0x1477727e
mov r14, qword [rdi]
xor eax, eax
lock cmpxchg byte [r14 + 4], cl
sete al
cmp edx, 0xf73b56c8
je 0x1400ff3a0
lea rbx, [r14 + 4]
test al, al
jne 0x1400ff468
mov eax, dword [0x141dd6d80]
imul eax, dword [0x141dd6d84]
add eax, 0x82fe55b5
cmp eax, 0xf6d24d7
ja 0x1400ff437
mov eax, dword [0x141dd6d88]
and eax, dword [0x141dd6d8c]
imul rcx, rax, 0xa4a230f
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
and eax, 0xfffffffe
imul r15d, eax, 0xdadddccc
sub rsp, 0x20
mov rcx, rbx
call fcn.1400fb900
add rsp, 0x20
cmp r15d, 0x23c5558d
jbe 0x1400ff450
sub rsp, 0x20
mov rcx, rbx
call fcn.1400fb900
add rsp, 0x20
jmp 0x1400ff3f4
mov eax, dword [0x141dd6d90]
xor eax, dword [0x141dd6d94]
and eax, 0x80404c18
cmp eax, 0xfd61964f
je 0x1400ff450
movzx eax, byte [r14 + 5]
nop dword [rax]
mov ecx, dword [0x141dd6d98]
imul ecx, dword [0x141dd6d9c]
imul rcx, rcx, 0x7d5caa11
shr rcx, 0x3e
cmp ecx, 0x78d2a02
je 0x1400ff470
test al, al
je 0x1400ff4a3
xor eax, eax
test al, al
je 0x1400ff6cd
jmp 0x1400ff6ff
xor r12d, r12d
mov r13d, 0x9eab7eb5
nop dword [rax]
mov eax, dword [0x141dd6da0]
sub eax, dword [0x141dd6da4]
xor eax, 0x91f8cd9d
imul eax, eax, 0xf0deefd5
cmp eax, 0x5a9e2a0f
jbe 0x1400ff4e0
mov eax, dword [r14]
xor eax, eax
xchg byte [r14 + 4], al
nop word [rax + rax]
mov ecx, dword [0x141dd6da8]
sub ecx, dword [0x141dd6dac]
mov r15d, dword [r14]
mov eax, 0
xchg byte [r14 + 4], al
cmp ecx, 0xd996e5c5
je 0x1400ff4e0
test r12b, r12b
jne 0x1400ff500
nop word cs:[rax + rax]
mov ecx, dword [0x141dd6db0]
add ecx, dword [0x141dd6db4]
imul ecx, ecx, 0x36b6b97d
add ecx, 0x1556e5f
and ecx, 0xb8ac6ba
cmp ecx, 0x73a390de
ja 0x1400ff510
cmp al, 2
jne 0x1400ff54b
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
add rsp, 0x20
mov dword [rbp + 4], r15d
sub rsp, 0x20
mov r8d, 4
mov rcx, r14
lea rdx, [rbp + 4]
mov r9d, 0xffffffff
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WaitOnAddress]
add rsp, 0x20
mov ecx, dword [0x141dd6db8]
imul ecx, dword [0x141dd6dbc]
add ecx, 0x9d5ee1de
xor ecx, 0x2319430
or ecx, 0xc58649c3
cmp ecx, 0x220cbe0e
jb 0x1400ff570
cmp eax, 1
je 0x1400ff5d6
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
nop word [rax + rax]
mov eax, dword [0x141dd6dc0]
xor eax, dword [0x141dd6dc4]
shr eax, 5
imul rax, rax, 0x600c9b7
shr rax, 0x30
add eax, 0x9141bd20
cmp eax, 0xc4ffd1d5
ja 0x1400ff5b0
xor eax, eax
mov cl, 1
lock cmpxchg byte [rbx], cl
je 0x1400ff650
mov eax, dword [0x141dd6dc8]
xor edx, edx
div dword [0x141dd6dcc]
xor eax, 0x8100092a
or eax, 0x74ef2494
imul eax, eax, 0xc5ae9ba7
cmp eax, 0x6c51280f
jb 0x1400ff6b8
mov eax, dword [0x141dd6dd0]
xor edx, edx
div dword [0x141dd6dd4]
imul eax, eax, 0x8470bb60
imul rax, r13
shr rax, 0x3e
imul r15d, eax, 0x8871ee08
sub rsp, 0x20
mov rcx, rbx
call fcn.1400fb900
add rsp, 0x20
cmp r15d, 0x34cff629
ja 0x1400ff609
nop word cs:[rax + rax]
mov eax, dword [0x141dd6dd8]
xor eax, dword [0x141dd6ddc]
or eax, 0xbc7befbd
cmp eax, 0x43436d6e
je 0x1400ff650
movzx ecx, byte [r14 + 5]
test r12b, r12b
jne 0x1400ff66d
nop word cs:[rax + rax]
mov eax, dword [0x141dd6de0]
xor edx, edx
div dword [0x141dd6de4]
or eax, 0x6de481a7
imul rax, rax, 0xfaf7561
shr rax, 0x3a
imul eax, eax, 0x42f78436
cmp eax, 0x8e5793b3
ja 0x1400ff680
test cl, cl
je 0x1400ff4b0
jmp 0x1400ff494
sub rsp, 0x20
mov rcx, rbx
call fcn.1400fb900
add rsp, 0x20
jmp 0x1400ff609
mov eax, dword [0x141dd6de8]
and eax, dword [0x141dd6dec]
mov ecx, 0x9b4ef5eb
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xf42f52c0
xor ecx, 0x5cd87f37
mov byte [r14 + 5], 0
cmp ecx, 0x912eba9
jae 0x1400ff706
mov byte [r14 + 5], 0
jmp 0x1400ff6cd
xor eax, eax
test al, al
jne 0x1400ff73a
mov eax, dword [0x141dd6df0]
imul eax, dword [0x141dd6df4]
or eax, 0x64ad8c8c
add eax, 0x325a535b
imul rcx, rax, 0x2b35c7f
shr rcx, 0x39
xor eax, eax
xchg byte [rbx], al
cmp ecx, 0xc2e2b338
jbe 0x1400ff740
xor eax, eax
xchg byte [rbx], al
jmp 0x1400ff70c
mov ecx, dword [0x141dd6df8]
and ecx, dword [0x141dd6dfc]
add ecx, 0xc52df594
or ecx, 0xbafa6fd
cmp ecx, 0x61d47561
ja 0x1400ff740
cmp al, 2
jne 0x1400ff7b0
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
add rsp, 0x20
nop word cs:[rax + rax]
mov eax, dword [0x141dd6e00]
sub eax, dword [0x141dd6e04]
add eax, 0xc63e432f
and eax, 0x1f07cfea
add eax, 0x2dcfc3bb
cmp eax, 0xedfd8a0e
ja 0x1400ff780
nop word cs:[rax + rax]
mov eax, dword [0x141dd6e08]
and eax, dword [0x141dd6e0c]
xor eax, 0xacb7a7a9
add eax, 0xb4309c5d
cmp eax, 0x4cfb7fc7
jb 0x1400ff7b0
mov rcx, qword [rdi + 0x60]
mov eax, dword [0x141dd6e10]
xor edx, edx
div dword [0x141dd6e14]
nop
mov eax, dword [0x141dd6e18]
mov edx, dword [0x141dd6e1c]
add eax, edx
add eax, 0x4cd1ef3
xor eax, 0xba65c299
imul rax, rax, 0xb4facf9
shr rax, 0x3a
cmp eax, 0x85103d09
je 0x1400ff7e0
movups xmm0, xmmword [rdi + 0x68]
nop
mov eax, dword [0x141dd6e20]
imul eax, dword [0x141dd6e24]
imul eax, eax, 0xfe49269e
add eax, 0x18695cd0
cmp eax, 0x2e5c97f2
jb 0x1400ff810
cmp rcx, 1
jne 0x1400ff86c
movups xmm1, xmmword [rdi + 0x78]
movups xmm2, xmmword [rdi + 0x88]
movups xmmword [rsi + 0x20], xmm2
movups xmmword [rsi + 0x10], xmm1
mov eax, dword [0x141dd6e38]
xor edx, edx
div dword [0x141dd6e3c]
add eax, 0xaf15a289
or eax, 0xfdf7cfe6
cmp eax, 0xfebb00b
jne 0x1400ff8d1
jmp 0x1400ff8f6
cmp rcx, 2
jne 0x1400ff87b
sub rsp, 0x20
call fcn.140072e80
mov eax, dword [0x141dd6e28]
or eax, dword [0x141dd6e2c]
add eax, 0xbc98353a
mov ecx, 0x984d6b49
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x322d1b68
cmp ecx, 0xf3a9c9d8
ja 0x1400ff8cb
mov eax, dword [0x141dd6e30]
and eax, dword [0x141dd6e34]
xor eax, 0x4f853ae7
add eax, 0x3a54d7b9
and eax, 0xe5901d21
ud2
ud2
mov eax, dword [0x141dd6e40]
and eax, dword [0x141dd6e44]
or eax, 0x4649180
add eax, 0xbe089893
and eax, 0x166b12ba
movups xmmword [rsi], xmm0
cmp eax, 0x26cd7c8b
jbe 0x1400ff900
movups xmmword [rsi], xmm0
jmp 0x1400ff8d1
mov eax, dword [0x141dd6e48]
and eax, dword [0x141dd6e4c]
and eax, 0x407ad7e5
xor eax, 0x4d3515b1
imul rax, rax, 0x5a20af4f
shr rax, 0x36
cmp eax, 0x4100ac21
ja 0x1400ff900
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret