Function at 0x1400b9750
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x28
mov r14, qword [rcx]
lea rdi, [r14 + 0x10]
mov rax, qword [r14 + 0x18]
mov rbp, rcx
nop
mov ecx, dword [0x141dd52f8]
or ecx, dword [0x141dd52fc]
xor ecx, 0x8d0500
or ecx, 0xaf50e857
cmp ecx, 0x8de71384
je 0x1400b9770
mov rbx, qword [r14 + 0x20]
test rbx, rbx
setne r12b
test rax, rax
setne r15b
je 0x1400b99d9
mov r13, qword [r14 + 0x28]
nop dword [rax]
mov eax, dword [0x141dd5300]
or eax, dword [0x141dd5304]
xor eax, 0x363838d9
imul eax, eax, 0x6aac4824
cmp eax, 0x7a577d
jb 0x1400b97b0
test rbx, rbx
je 0x1400b99d9
mov rsi, qword [r13]
test rsi, rsi
je 0x1400b9870
mov qword [rsp + 0x20], rbp
mov eax, dword [0x141dd5308]
or eax, dword [0x141dd530c]
add eax, 0x3e333eea
or eax, 0xbb994009
xor eax, 0x611824cd
cmp eax, 0x23b2009e
jb 0x1400b982e
mov eax, dword [0x141dd5310]
xor edx, edx
div dword [0x141dd5314]
mov ebp, eax
and ebp, 0x85241c2e
mov rcx, rbx
call rsi
cmp ebp, 0x43abd4ab
jne 0x1400b9835
mov rcx, rbx
call rsi
jmp 0x1400b980b
mov eax, 0xbb2c9d29
mov rbp, qword [rsp + 0x20]
nop
mov ecx, dword [0x141dd5318]
sub ecx, dword [0x141dd531c]
imul ecx, ecx, 0xcf499277
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xfe4b33ea
cmp ecx, 0x6d1af976
je 0x1400b9840
nop dword [rax + rax]
mov eax, dword [0x141dd5320]
and eax, dword [0x141dd5324]
and eax, 0xac9019c3
imul rax, rax, 0x2e1f1bd9
shr rax, 0x3c
cmp eax, 0xfece6046
ja 0x1400b9870
mov rcx, qword [r13 + 8]
mov rax, qword [r13 + 0x10]
nop dword [rax + rax]
mov edx, dword [0x141dd5328]
or edx, dword [0x141dd532c]
or edx, 0x584cf864
imul edx, edx, 0xd2f2edd0
add edx, 0xc35281b0
cmp edx, 0x5cbdb091
jb 0x1400b98a0
test rcx, rcx
je 0x1400b99d9
nop
mov ecx, dword [0x141dd5330]
and ecx, dword [0x141dd5334]
or ecx, 0xb4dd8d9a
imul ecx, ecx, 0x8263849e
cmp ecx, 0x3c80b8e2
je 0x1400b98d0
cmp rax, 0x11
jb 0x1400b995d
nop word cs:[rax + rax]
mov eax, dword [0x141dd5338]
sub eax, dword [0x141dd533c]
add eax, 0xc39f16c0
xor eax, 0x81ba457e
add eax, 0xc369e5a5
cmp eax, 0x20e47350
jb 0x1400b9900
mov rbx, qword [rbx - 8]
nop word cs:[rax + rax]
mov eax, dword [0x141dd5340]
or eax, dword [0x141dd5344]
imul rcx, rax, 0x47973877
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0x29851a35
cmp eax, 0x977e22f3
ja 0x1400b9930
mov eax, dword [0x141dd5348]
sub eax, dword [0x141dd534c]
imul eax, eax, 0x2bb09c44
and eax, 0x352e75d0
xor eax, 0x1d0098e6
cmp eax, 0x75279147
jbe 0x1400b9992
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop dword [rax]
mov eax, dword [0x141dd5350]
xor eax, dword [0x141dd5354]
or eax, 0x801d252b
imul eax, eax, 0xe3b394ab
imul r13, rax, 0x2a23759
shr r13, 0x39
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rbx
call rsi
cmp r13d, 0x6e595046
ja 0x1400b99a0
and r15b, r12b
mov qword [r14 + 0x18], 0
mov rcx, qword [r14 + 0x10]
nop dword [rax + rax]
mov eax, dword [0x141dd5358]
add eax, dword [0x141dd535c]
imul rax, rax, 0x5fd07f63
shr rax, 0x3e
or eax, 0x1e11a710
cmp eax, 0xe9ca9c46
ja 0x1400b99f0
test rcx, rcx
je 0x1400b9f2e
nop dword [rax]
mov eax, dword [0x141dd5360]
xor edx, edx
div dword [0x141dd5364]
imul rax, rax, 0x2a6de57
shr rax, 0x39
or eax, 0xfe18f87a
cmp eax, 0xa50a50db
jb 0x1400b9a20
nop word cs:[rax + rax]
mov eax, dword [0x141dd5368]
or eax, dword [0x141dd536c]
or eax, 0x7dcd9763
imul eax, eax, 0xbb13e7f6
cmp eax, 0xfcadf5ff
je 0x1400b9a50
test r15b, r15b
je 0x1400b9ac7
mov eax, dword [0x141dd5370]
xor edx, edx
div dword [0x141dd5374]
xor eax, 0x1d032bff
add eax, 0x9791e64e
cmp eax, 0x143e09c7
jae 0x1400b9aa0
mov byte [rcx + 0x20], 1
nop word cs:[rax + rax]
mov eax, dword [0x141dd5378]
add eax, dword [0x141dd537c]
xor eax, 0x8331e15d
imul eax, eax, 0x519dee5f
add eax, 0x89d41d53
mov byte [rcx + 0x20], 1
cmp eax, 0xdc10eb0a
ja 0x1400b9aa0
mov r15, rbp
lock dec qword [rcx + 0x18]
jne 0x1400b9b8a
mov eax, dword [0x141dd5380]
sub eax, dword [0x141dd5384]
add eax, 0xef798abb
imul rax, rax, 0x1ffd359d
shr rax, 0x3c
cmp eax, 0x37831287
jne 0x1400b9b10
mov rax, qword [rcx + 0x10]
mov dl, 1
xchg byte [rax + 0x30], dl
nop word cs:[rax + rax]
mov eax, dword [0x141dd5388]
sub eax, dword [0x141dd538c]
or eax, 0xf089f0fb
imul edx, eax, 0x10ca2363
or edx, 0x98cf457
mov rbx, qword [rcx + 0x10]
mov al, 1
xchg byte [rbx + 0x30], al
cmp edx, 0x9a179aca
je 0x1400b9b10
cmp al, 0xff
jne 0x1400b9b8a
add rbx, 0x30
mov eax, dword [0x141dd5390]
and eax, dword [0x141dd5394]
add eax, 0xf521989e
mov ecx, 0xb28306f7
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x65191a63
jbe 0x1400b9b75
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
mov rsi, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressSingle]
xor ebp, ebp
nop
mov rcx, rbx
call rsi
test bpl, bpl
jne 0x1400b9b80
mov rax, qword [rdi]
nop dword [rax]
mov ecx, dword [str.0E__b]
sub ecx, dword [0x141dd539c]
or ecx, 0xe0d3b053
imul rcx, rcx, 0x3612b657
shr rcx, 0x3c
imul ecx, ecx, 0x52db8bd9
cmp ecx, 0xf8108d31
je 0x1400b9b90
nop dword [rax + rax]
mov ecx, dword [0x141dd53a0]
or ecx, dword [0x141dd53a4]
imul ecx, ecx, 0xc091e796
add ecx, 0xe7ba8476
cmp ecx, 0x37896c16
jb 0x1400b9bc0
test rax, rax
mov rbp, r15
je 0x1400b9ced
mov rcx, 0xffffffffffffffff
lock xadd qword [rax], rcx
nop dword [rax + rax]
mov eax, dword [0x141dd53a8]
add eax, dword [0x141dd53ac]
or eax, 0xa8519c8c
imul eax, eax, 0xdac097a6
cmp eax, 0xb1d54d97
je 0x1400b9c00
nop
mov eax, dword [0x141dd53b0]
and eax, dword [0x141dd53b4]
or eax, 0x20000040
xor eax, 0x221
and eax, 0xa8101ae1
cmp eax, 0xf8f5bb6
jb 0x1400b9c20
cmp rcx, 1
jne 0x1400b9ced
mov eax, dword [0x141dd53b8]
xor edx, edx
div dword [0x141dd53bc]
imul eax, eax, 0xbcd9e3a2
add eax, 0x74ce2c92
cmp eax, 0x8b05e81a
ja 0x1400b9c8f
mov eax, dword [0x141dd53c0]
imul eax, dword [0x141dd53c4]
or eax, 0xf170a41e
add eax, 0xb6e953bc
xor eax, 0xf64387a4
cmp eax, 0x810fec58
jbe 0x1400b9c91
jmp 0x1400b9c6c
mov eax, dword [0x141dd53c8]
imul eax, dword [0x141dd53cc]
imul eax, eax, 0xea00b1a6
add eax, 0xe49304ca
imul rax, rax, 0x13231869
shr rax, 0x3b
cmp eax, 0xd1b69270
je 0x1400b9ce3
mov eax, dword [0x141dd53d0]
and eax, dword [0x141dd53d4]
imul esi, eax, 0x92fb3124
and esi, 0xf517ee0
mov rcx, rdi
call fcn.1400782d0
cmp esi, 0xf36d89bd
jne 0x1400b9ced
mov rcx, rdi
call fcn.1400782d0
jmp 0x1400b9cbb
mov eax, dword [0x141dd53d8]
xor edx, edx
div dword [0x141dd53dc]
nop dword [rax + rax]
mov eax, dword [0x141dd53e0]
imul eax, dword [0x141dd53e4]
imul rax, rax, 0x3cbb366b
shr rax, 0x3d
add eax, 0x14082f63
cmp eax, 0x1460c1fc
ja 0x1400b9d00
mov rcx, qword [r14 + 0x18]
nop dword [rax + rax]
mov eax, dword [0x141dd53e8]
xor edx, edx
div dword [0x141dd53ec]
add eax, 0xf60e0dbd
and eax, 0xce8b03d
xor eax, 0x7bec3251
cmp eax, 0xf2d3b7a1
ja 0x1400b9d30
test rcx, rcx
je 0x1400b9f2e
mov rdi, qword [r14 + 0x20]
mov rbx, qword [r14 + 0x28]
nop word cs:[rax + rax]
mov eax, dword [0x141dd53f0]
and eax, dword [0x141dd53f4]
imul eax, eax, 0xcdfa5a2e
add eax, 0x301c23c3
and eax, 0xfb7282aa
cmp eax, 0xc2cc22cf
ja 0x1400b9d70
test rdi, rdi
je 0x1400b9f2e
nop dword [rax]
mov eax, dword [0x141dd53f8]
sub eax, dword [0x141dd53fc]
xor eax, 0x297dbca
add eax, 0xa78a6559
and eax, 0x4bdef9b6
cmp eax, 0x5c67ba44
ja 0x1400b9da0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5400]
imul eax, dword [0x141dd5404]
or eax, 0x471427c9
add eax, 0xef768ed3
cmp eax, 0x7e68b913
jb 0x1400b9dd0
mov rax, qword [rbx]
test rax, rax
je 0x1400b9e28
mov rcx, rdi
call rax
mov eax, 0x8a62958b
mov ecx, dword [0x141dd5408]
sub ecx, dword [0x141dd540c]
xor ecx, 0x843242c8
imul ecx, ecx, 0xe82b74a5
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x777f8584
ja 0x1400b9e00
mov rcx, qword [rbx + 8]
mov rax, qword [rbx + 0x10]
mov edx, dword [0x141dd5410]
or edx, dword [0x141dd5414]
add edx, 0xab116787
cmp edx, 0x959e20be
jb 0x1400b9e30
nop word [rax + rax]
mov edx, dword [0x141dd5418]
sub edx, dword [0x141dd541c]
or edx, 0xa8c3c02b
imul edx, edx, 0x44b3ee37
cmp edx, 0xb6e345b5
je 0x1400b9e50
test rcx, rcx
je 0x1400b9f2e
cmp rax, 0x11
jb 0x1400b9eb2
mov rdi, qword [rdi - 8]
mov eax, 0x9ab0ca9f
nop dword [rax + rax]
mov ecx, dword [0x141dd5420]
sub ecx, dword [0x141dd5424]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x74cd6f3c
cmp ecx, 0xc3833a1e
je 0x1400b9e90
mov eax, dword [0x141dd5428]
sub eax, dword [0x141dd542c]
or eax, 0x4a9db34b
add eax, 0x875ab958
mov ecx, 0xe913e777
imul rcx, rax
shr rcx, 0x38
cmp ecx, 0x2abfac7c
jbe 0x1400b9eef
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rsi, qword [sym.imp.KERNEL32.dll_HeapFree]
nop word cs:[rax + rax]
mov ebx, dword [0x141dd5430]
sub ebx, dword [0x141dd5434]
xor ebx, 0x4010418
or ebx, 0x835ef0e5
mov rcx, qword [0x141ddc4e0]
xor edx, edx
mov r8, rdi
call rsi
cmp ebx, 0xb4391882
je 0x1400b9f00
xor eax, eax
test al, al
jne 0x1400b9f30
mov rsi, qword [rbp]
nop dword [rax + rax]
mov eax, dword [0x141dd5438]
xor eax, dword [0x141dd543c]
cmp eax, 0x81cfdc1b
je 0x1400b9f40
nop word cs:[rax + rax]
mov eax, dword [0x141dd5440]
or eax, dword [0x141dd5444]
cmp eax, 0x76d9d80f
je 0x1400b9f60
cmp rsi, 0xffffffffffffffff
je 0x1400ba0c0
nop dword [rax]
mov eax, dword [0x141dd5448]
add eax, dword [0x141dd544c]
and eax, 0xe544d7cd
imul rcx, rax, 0x1e20a827
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0x129a808c
cmp eax, 0xbd51317f
ja 0x1400b9f80
mov eax, dword [0x141dd5450]
imul eax, dword [0x141dd5454]
or eax, 0x817cfb46
add eax, 0x831aa043
or eax, 0x54c51669
cmp eax, 0xbc3e9814
jne 0x1400b9fd9
lock dec qword [rsi + 8]
xor ecx, ecx
nop dword [rax + rax]
mov rax, 0xffffffffffffffff
lock xadd qword [rsi + 8], rax
test cl, cl
jne 0x1400b9fe0
nop word cs:[rax + rax]
mov ecx, dword [0x141dd5458]
sub ecx, dword [0x141dd545c]
add ecx, 0xf7265c87
and ecx, 0x204b81e5
add ecx, 0xaabbadf0
cmp ecx, 0x23c48bba
jb 0x1400ba000
cmp rax, 1
jne 0x1400ba0c0
mov rdi, qword [0x141ddc4e0]
mov eax, dword [0x141dd5460]
imul eax, dword [0x141dd5464]
imul eax, eax, 0x919dd700
add eax, 0xbe949d00
cmp eax, 0xf261e96f
ja 0x1400ba088
mov eax, dword [0x141dd5468]
xor edx, edx
div dword [0x141dd546c]
mov ebx, eax
xor ebx, 0x90056000
or ebx, 0x6ffa9ffe
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
cmp ebx, 0x357714e4
jae 0x1400ba0a0
mov rcx, rdi
xor edx, edx
mov r8, rsi
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1400ba056
mov eax, dword [0x141dd5470]
add eax, dword [0x141dd5474]
cmp eax, 0xffebe79c
je 0x1400ba0a0
nop word cs:[rax + rax]
mov eax, dword [0x141dd5478]
sub eax, dword [0x141dd547c]
xor eax, 0x63d89b19
imul eax, eax, 0x3add6b8f
cmp eax, 0x41fd957b
je 0x1400ba0c0
add rsp, 0x28
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret