Function at 0x1401733b0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xc8
mov qword [rsp + 0x28], rcx
mov r9, rdx
xor eax, eax
nop dword [rax]
test al, al
jne 0x1401733d0
mov eax, dword [0x14022cb7c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov eax, dword [rax + 0x18]
mov ecx, 0x8d9d1283
nop word cs:[rax + rax]
mov edx, dword [0x1402271a8]
mov r10d, dword [0x1402271ac]
mov r11d, r10d
not r11d
mov esi, edx
and esi, r11d
or r11d, edx
not r11d
imul r11d, esi
mov esi, edx
and esi, r10d
or edx, r10d
imul edx, esi
add edx, r11d
mov r10d, edx
or r10d, 0x40803600
not edx
and r10d, 0xcc987e0b
and edx, 0x10060024
or edx, r10d
not edx
imul rdx, rcx
shr rdx, 0x3d
cmp edx, 0x6e7e9c67
je 0x140173400
test eax, eax
jne 0x1401734bb
mov eax, dword [0x14022cb7c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov dword [rax + 0x18], 1
mov qword [rax + 0x1c], 0
nop word [rax + rax]
mov eax, dword [0x1402271b0]
xor edx, edx
div dword [0x1402271b4]
add eax, 0xcbce3074
mov ecx, eax
xor ecx, 0xaffde3cf
and ecx, eax
add ecx, 0xe0ac281b
cmp ecx, 0x9b6eed05
ja 0x140173490
mov eax, dword [0x1402271b8]
mov ecx, dword [0x1402271bc]
mov edx, ecx
not edx
mov r10d, eax
and r10d, edx
or edx, eax
not edx
imul edx, r10d
mov r10d, eax
and r10d, ecx
or eax, ecx
imul eax, r10d
add eax, edx
mov ecx, 0xb02ea4f7
imul rcx, rax
shr rcx, 0x3b
imul eax, ecx, 0x3b55eb68
mov ecx, 0x8d9d7d9f
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x49144183
jne 0x140173550
mov rax, qword [r8 + 0x50]
mov qword [rsp + 0x88], rax
movups xmm0, xmmword [r8 + 0x40]
movups xmmword [rsp + 0x78], xmm0
movups xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
movups xmm2, xmmword [r8 + 0x20]
movups xmm3, xmmword [r8 + 0x30]
movups xmmword [rsp + 0x68], xmm3
movups xmmword [rsp + 0x58], xmm2
movups xmmword [rsp + 0x48], xmm1
movups xmmword [rsp + 0x38], xmm0
nop dword [rax]
mov eax, dword [0x1402271c0]
xor eax, dword [0x1402271c4]
xor eax, 0xf14a9e71
imul rcx, rax, 0x712fe937
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1d
mov rcx, qword [r8 + 0x50]
mov qword [rsp + 0x88], rcx
movups xmm0, xmmword [r8 + 0x40]
movups xmmword [rsp + 0x78], xmm0
movups xmm0, xmmword [r8]
movups xmm1, xmmword [r8 + 0x10]
movups xmm2, xmmword [r8 + 0x20]
movups xmm3, xmmword [r8 + 0x30]
movups xmmword [rsp + 0x68], xmm3
movups xmmword [rsp + 0x58], xmm2
movups xmmword [rsp + 0x48], xmm1
movups xmmword [rsp + 0x38], xmm0
cmp eax, 0xfe734fcb
je 0x140173550
mov eax, dword [0x14022cb7c]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
lea rax, [rax + 0x1c]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x90], 0
lea rdx, [0x14011d940]
lea r8, [rsp + 0x30]
mov rcx, r9
call fcn.140150f60
mov rbx, qword [rsp + 0x30]
lea rdi, [rbx + 4]
mov cl, 1
xor eax, eax
lock cmpxchg byte [rbx + 4], cl
jne 0x140173b26
mov eax, dword [0x1402271d0]
xor eax, dword [0x1402271d4]
imul eax, eax, 0x5f43a432
add eax, 0xb07c21d6
not eax
or eax, 0xd29c138d
cmp eax, 0x12174233
jb 0x140173610
cmp byte [rbx + 5], 0
je 0x14017367b
mov eax, dword [0x140227258]
mov ecx, dword [0x14022725c]
mov edx, eax
and edx, ecx
xor eax, ecx
lea eax, [rax + rdx*2]
imul rax, rax, 0x4e76df61
shr rax, 0x3c
mov ecx, eax
xor ecx, 0xe52d593a
add ecx, eax
and eax, 0xfffffffd
sub ecx, eax
cmp ecx, 0x2404b50f
jne 0x140173b66
jmp 0x140173b8e
mov r15d, 0x8443ae91
lea r14, [rsp + 0x24]
mov r12, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WaitOnAddress]
mov esi, 0xc913af1b
nop word cs:[rax + rax]
mov eax, dword [0x1402271d8]
or eax, dword [0x1402271dc]
mov ecx, eax
not ecx
or ecx, 0xd32d5e12
add eax, ecx
inc eax
mov ecx, eax
and ecx, 0x37d8901c
xor eax, 0xb7d8901c
lea eax, [rax + rcx*2]
mov ecx, eax
and ecx, 0x39d07876
xor eax, 0xb9d07876
lea eax, [rax + rcx*2]
cmp eax, 0x94146eec
jne 0x1401736f0
mov eax, dword [rbx]
nop word cs:[rax + rax]
mov eax, dword [0x1402271e0]
and eax, dword [0x1402271e4]
mov ecx, eax
xor ecx, 0x57a12fd1
add ecx, eax
and eax, 0x285ed02e
sub ecx, eax
add ecx, 0x6175d266
or ecx, 0x9d77b72c
mov r13d, dword [rbx]
cmp ecx, 0xfd757f07
ja 0x1401736f0
mov eax, dword [0x1402271e8]
imul eax, dword [0x1402271ec]
imul eax, eax, 0x2adb4907
mov ecx, eax
xor ecx, 0x940180
and ecx, 0xf9ca991
xor eax, 0x8f08be71
lea eax, [rax + rcx*2]
cmp eax, 0x7fd3cd26
jne 0x140173760
xor eax, eax
xchg byte [rdi], al
nop dword [rax + rax]
mov eax, dword [0x1402271f0]
sub eax, dword [0x1402271f4]
imul rax, r15
shr rax, 0x3f
lea ecx, [rax + 0x30504a24]
xor ecx, 0x30110803
or ecx, eax
or ecx, 0xd2e9058
mov eax, 0
xchg byte [rdi], al
cmp ecx, 0xfa9dbd1e
ja 0x140173760
cmp al, 2
jne 0x140173801
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
mov r9d, 0x87df3585
nop word [rax + rax]
mov eax, dword [0x1402271f8]
mov ecx, dword [0x1402271fc]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
imul rax, r9
shr rax, 0x3e
mov ecx, eax
not ecx
or ecx, 0xdefdc891
or eax, 0xdefdc892
and eax, ecx
imul eax, eax, 0x16222c07
cmp eax, 0x2edf9c88
jb 0x1401737b0
mov eax, dword [0x140227200]
xor eax, dword [0x140227204]
add eax, 0x1e8dbac9
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x4c3c34b0
and ecx, 0x33c3cb4f
imul ecx, edx
mov edx, eax
and edx, 0x33c3cb4f
or eax, 0x33c3cb4f
imul eax, edx
add eax, ecx
and eax, 0x778e3272
cmp eax, 0x4d853ff3
jbe 0x140173860
mov dword [rsp + 0x24], r13d
mov r8d, 4
mov rcx, rbx
mov rdx, r14
mov r9d, 0xffffffff
call r12
nop
mov eax, dword [0x140227208]
mov ebp, dword [0x14022720c]
mov ecx, eax
xor ecx, ebp
not ecx
and ecx, ebp
add ecx, ecx
sub ebp, ecx
add ebp, eax
mov dword [rsp + 0x24], r13d
mov r8d, 4
mov rcx, rbx
mov rdx, r14
mov r9d, 0xffffffff
call r12
cmp ebp, 0xdb478db1
je 0x140173860
mov ecx, dword [0x140227210]
or ecx, dword [0x140227214]
imul rcx, rcx, 0x5449013d
shr rcx, 0x3d
not ecx
or ecx, 0x2eb0f05d
cmp ecx, 0xa4ea3044
mov r13d, 0
test r13b, r13b
jne 0x1401738c7
nop dword [rax]
mov ecx, dword [0x140227218]
or ecx, dword [0x14022721c]
imul ecx, ecx, 0x1030ef06
imul rcx, rcx, 0x32d22205
shr rcx, 0x3d
imul ecx, ecx, 0x55608012
cmp ecx, 0xa018bb70
ja 0x1401738d0
cmp eax, 1
je 0x140173995
mov eax, dword [0x140227220]
xor edx, edx
div dword [0x140227224]
xor eax, 0x195e3ee1
add eax, 0xc4275ff6
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x62994d25
and ecx, 0x9d66b2da
imul ecx, edx
mov edx, eax
and edx, 0x9d66b2da
or eax, 0x9d66b2da
imul eax, edx
add eax, ecx
cmp eax, 0x679face5
jbe 0x140173950
call fcn.14014f250
nop
mov eax, dword [0x140227228]
mov ecx, eax
not ecx
or ecx, dword [0x14022722c]
add eax, ecx
inc eax
mov ebp, eax
not ebp
or eax, 0x3b011901
or ebp, 0x80800020
and ebp, eax
not ebp
and ebp, 0xbb811921
xor ebp, 0xba8ccd02
call fcn.14014f250
cmp ebp, 0x18043790
jb 0x140173950
test r13b, r13b
jne 0x140173990
xor eax, eax
mov cl, 1
lock cmpxchg byte [rdi], cl
sete al
mov ecx, dword [0x140227230]
mov edx, dword [0x140227234]
mov r8d, ecx
not r8d
and r8d, edx
mov r9d, edx
not r9d
and r9d, ecx
imul r9d, r8d
mov r8d, ecx
and r8d, edx
or ecx, edx
imul ecx, r8d
add ecx, r9d
add ecx, 0x1d506fe7
imul rcx, rcx, 0x34d759eb
shr rcx, 0x3a
cmp ecx, 0x34c7841a
ja 0x1401739a0
test al, al
je 0x140173a6d
movzx ecx, byte [rbx + 5]
nop word cs:[rax + rax]
mov eax, dword [0x140227248]
xor edx, edx
div dword [0x14022724c]
imul rax, rax, 0x101328cf
shr rax, 0x39
add eax, 0xe590692f
mov edx, eax
not edx
or edx, 0xe5100801
or eax, 0xe7dd6dbe
and eax, edx
cmp eax, 0x7c8e2d5e
jb 0x140173a00
nop word cs:[rax + rax]
mov eax, dword [0x140227250]
sub eax, dword [0x140227254]
imul rax, rsi
shr rax, 0x3d
add eax, 0xef49b3d4
cmp eax, 0xc8016440
jb 0x140173a40
test cl, cl
je 0x1401736a0
jmp 0x14017363b
mov eax, dword [0x140227238]
imul eax, dword [0x14022723c]
imul rax, rax, 0x45e810a9
shr rax, 0x3e
or eax, 0xfce5fa3e
imul rax, rax, 0x2142ef03
shr rax, 0x3d
cmp eax, 0xb5b65b7
ja 0x140173b19
mov r13d, dword [0x140227240]
mov eax, dword [0x140227244]
mov ecx, eax
not ecx
mov edx, r13d
and edx, ecx
or ecx, r13d
not ecx
imul ecx, edx
mov edx, r13d
and edx, eax
or r13d, eax
imul r13d, edx
add r13d, ecx
or r13d, 0x32b3295b
add r13d, 0x5eb56e17
mov eax, r13d
not eax
mov ecx, r13d
and ecx, 0x5999db20
and eax, 0x864624c5
imul eax, ecx
mov ecx, r13d
and ecx, 0x866424d6
or r13d, 0x866624d7
imul r13d, ecx
add r13d, eax
mov rcx, rdi
call fcn.14016bdf0
cmp r13d, 0x1457c0bb
jae 0x1401739ee
mov rcx, rdi
call fcn.14016bdf0
jmp 0x140173a9c
mov rcx, rdi
call fcn.14016bdf0
nop
mov eax, dword [0x1402271c8]
add eax, dword [0x1402271cc]
shr eax, 2
imul rax, rax, 0x1674718d
shr rax, 0x36
or eax, 0x2b91b620
imul rax, rax, 0xda82d93
shr rax, 0x30
cmp eax, 0x56cf9fae
je 0x140173b30
jmp 0x140173610
mov eax, dword [0x140227260]
or eax, dword [0x140227264]
mov ecx, eax
not ecx
or ecx, 0x49486487
add eax, ecx
add eax, 0xebc7b4d6
mov byte [rbx + 5], 0
cmp eax, 0xb15c8f96
jae 0x140173b94
mov byte [rbx + 5], 0
jmp 0x140173b66
xor eax, eax
xchg byte [rdi], al
cmp al, 2
jne 0x140173c40
mov eax, dword [0x140227268]
xor edx, edx
div dword [0x14022726c]
or eax, 0xbb3ed268
imul eax, eax, 0xed59f69c
add eax, 0x7370ab38
cmp eax, 0xbebb6f5a
jbe 0x140173bcd
mov rcx, rdi
call fcn.140150110
mov rsi, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
nop word cs:[rax + rax]
mov eax, dword [0x140227270]
mov ecx, dword [0x140227274]
lea ebx, [rax + rcx]
add ebx, 0x3af5e695
or ebx, 0xae27c9dd
and ebx, 0xef3ffbfd
mov rcx, rdi
call rsi
cmp ebx, 0xd79835cb
jb 0x140173be0
nop
mov eax, dword [0x140227278]
mov ecx, eax
not ecx
or ecx, dword [0x14022727c]
add eax, ecx
add eax, 0x995bb286
mov ecx, eax
not ecx
or ecx, 0xe6ddee06
or eax, 0x192211f9
and eax, ecx
cmp eax, 0xb80a55f4
je 0x140173c10
nop
mov eax, dword [str.Wq_]
mov ecx, dword [0x140227284]
add eax, ecx
add eax, 0xe74b70c6
and eax, 0x2eef8aa4
xor eax, 0xbfd07cb7
cmp eax, 0x6f26ef2a
jb 0x140173c40
mov rax, qword [rsp + 0x90]
movups xmm0, xmmword [rsp + 0x98]
nop word cs:[rax + rax]
mov ecx, dword [0x140227288]
mov edx, dword [str.7dU]
mov r8d, edx
not r8d
mov r9d, ecx
and r9d, r8d
or r8d, ecx
not r8d
imul r8d, r9d
mov r9d, ecx
and r9d, edx
or ecx, edx
imul ecx, r9d
add ecx, r8d
imul ecx, ecx, 0xbd728e8b
or ecx, 0x1876c8e5
cmp ecx, 0x9cd3d09c
je 0x140173c80
cmp rax, 1
jne 0x140173dfd
mov eax, dword [0x1402272b8]
mov ecx, dword [0x1402272bc]
add eax, ecx
add eax, 0x97799a
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xbbf65323
and ecx, 0x4409acdc
imul ecx, edx
mov edx, eax
and edx, 0x4409acdc
or eax, 0x4409acdc
imul eax, edx
add eax, ecx
or eax, 0x5a0c4855
cmp eax, 0x49afc4d7
mov r8, qword [rsp + 0x28]
jne 0x140173d40
movups xmm1, xmmword [rsp + 0xa8]
movups xmm2, xmmword [rsp + 0xb8]
movups xmmword [r8 + 0x20], xmm2
movups xmmword [r8 + 0x10], xmm1
nop word cs:[rax + rax]
mov eax, dword [0x1402272c0]
mov ecx, dword [0x1402272c4]
mov edx, eax
xor edx, ecx
not ecx
and ecx, eax
add ecx, ecx
sub ecx, edx
not ecx
and ecx, 0xd55bc61c
mov eax, ecx
not eax
xor ecx, 0xbd1c52c0
and eax, 0x3d1c52c0
add eax, eax
sub eax, ecx
movups xmm1, xmmword [rsp + 0xa8]
movups xmm2, xmmword [rsp + 0xb8]
movups xmmword [r8 + 0x20], xmm2
movups xmmword [r8 + 0x10], xmm1
cmp eax, 0xf014b56c
je 0x140173d40
mov eax, dword [0x1402272c8]
and eax, dword [0x1402272cc]
mov ecx, eax
not ecx
or eax, 0x9878b63d
and ecx, 0x1070982
mov edx, eax
and edx, 0x76985071
or edx, ecx
xor edx, 0x2a20808
and eax, 0x8bc5a786
or eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xa48d56cb
and ecx, 0x43020900
imul ecx, edx
mov edx, eax
and edx, 0x5b72a934
or eax, 0x5b72a934
imul eax, edx
add eax, ecx
cmp eax, 0xa7f1f44
jae 0x140173f27
jmp 0x140173f68
cmp rax, 2
jne 0x140173e62
nop word cs:[rax + rax]
test rax, rax
jne 0x140173ed6
mov eax, dword [0x140227298]
imul eax, dword [0x14022729c]
and eax, 0x28302201
cmp eax, 0x87fb5237
jne 0x140173e82
ud2
mov eax, dword [0x1402272a0]
add eax, dword [0x1402272a4]
and eax, 0xccad6f64
imul eax, eax, 0x391d6b8f
and eax, 0xff06a340
ud2
mov eax, dword [0x140227290]
mov ecx, dword [0x140227294]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
xor eax, 0xce98a0e3
add eax, 0xc669e4f6
mov ecx, eax
and ecx, 0x76a6f9ae
xor eax, 0xf6a6f9ae
lea eax, [rax + rcx*2]
cmp eax, 0x46d5c1c
jb 0x140173ed6
jmp 0x140173e60