Function at 0x14008ca60
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x40
mov rsi, rcx
mov eax, dword [0x141dcfbb8]
sub eax, dword [0x141dcfbbc]
and eax, 0x98f1ad15
xor eax, 0xdb148124
imul eax, eax, 0x4fbde017
cmp eax, 0x660f17a4
jb 0x14008cacf
mov eax, dword [0x141dcfbc0]
or eax, dword [0x141dcfbc4]
imul rbx, rax, 0x5ff0bdfb
shr rbx, 0x3c
add ebx, 0x6bdd11f7
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call qword [sym.imp.KERNEL32.dll_CreateWaitableTimerExW]
cmp ebx, 0x9abaaeb9
jbe 0x14008cae7
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call qword [sym.imp.KERNEL32.dll_CreateWaitableTimerExW]
jmp 0x14008ca94
mov rdi, rax
nop word [rax + rax]
mov eax, dword [0x141dcfbc8]
xor edx, edx
div dword [0x141dcfbcc]
add eax, 0x18416b0a
and eax, 0xede8a0ed
cmp eax, 0xc823fd1f
je 0x14008caf0
test rdi, rdi
je 0x14008cd0f
mov eax, dword [0x141dcfbd0]
and eax, dword [0x141dcfbd4]
imul rax, rax, 0x655904b5
shr rax, 0x3e
imul eax, eax, 0xbfbf388f
cmp eax, 0x1117e093
jbe 0x14008cb6d
imul rax, rsi, 0xffffffffff676980
mov qword [rsp + 0x38], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0x38]
mov rcx, rdi
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
imul r14, rsi, 0xffffffffff676980
lea rbx, [rsp + 0x38]
mov r15, qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
mov eax, dword [0x141dcfbd8]
xor eax, dword [0x141dcfbdc]
add eax, 0x9150f397
xor eax, 0xbd87995d
imul r12, rax, 0x54ae14f7
shr r12, 0x3e
mov qword [rsp + 0x38], r14
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov rdx, rbx
xor r8d, r8d
xor r9d, r9d
call r15
cmp r12d, 0xb8838a1f
ja 0x14008cb80
mov ecx, dword [0x141dcfbe0]
sub ecx, dword [0x141dcfbe4]
add ecx, 0x5b7d3d70
cmp ecx, 0x44dedad4
nop word [rax + rax]
mov ecx, dword [0x141dcfbe8]
xor ecx, dword [0x141dcfbec]
add ecx, 0x6d308aba
xor ecx, 0x13098fc3
add ecx, 0x80c4de9f
cmp ecx, 0xfdfec003
ja 0x14008cbf0
test eax, eax
je 0x14008cc47
mov eax, dword [0x141dcfbf8]
add eax, dword [0x141dcfbfc]
and eax, 0x6d14d4dc
xor eax, 0xf341c61e
mov ecx, 0x91a493cd
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x97327117
jbe 0x14008cc78
jmp 0x14008ccb2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x141dcfbf0]
and eax, dword [0x141dcfbf4]
imul eax, eax, 0x39312e0c
or eax, 0xbae78751
and eax, 0xffffaffd
cmp eax, 0x76f0dce0
jb 0x14008cc50
jmp 0x14008cd0f
mov eax, dword [0x141dcfc00]
imul eax, dword [0x141dcfc04]
or eax, 0x79e712a7
imul eax, eax, 0xfee98867
imul r14, rax, 0x62a726c7
shr r14, 0x3e
mov rcx, rdi
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp r14d, 0x9976a392
jbe 0x14008ccc2
mov rcx, rdi
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x14008cc78
mov ebx, eax
xor eax, eax
test al, al
je 0x14008ccd3
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r14, qword [sym.imp.KERNEL32.dll_CloseHandle]
nop word [rax + rax]
mov eax, dword [0x141dcfc08]
xor eax, dword [0x141dcfc0c]
imul ebp, eax, 0x1172f7dc
add ebp, 0x9cd4f660
mov rcx, rdi
call r14
cmp ebp, 0xf0971ed0
ja 0x14008cce0
cmp ebx, 0xffffffff
jne 0x14008cdaa
mov ecx, 0x817a1897
imul rax, rsi, 0x3e8
nop dword [rax + rax]
mov edx, dword [0x141dcfc10]
add edx, dword [str.____a_X]
xor edx, 0x8220c001
and edx, 0x8623cb0b
imul rdx, rcx
shr rdx, 0x3e
cmp edx, 0x37361bef
ja 0x14008cd20
mov esi, 0xffffffff
cmp rax, rsi
cmovb rsi, rax
mov eax, dword [0x141dcfc18]
sub eax, dword [0x141dcfc1c]
or eax, 0x38eee49e
and eax, 0x38ffec9e
cmp eax, 0x72a4180
jae 0x14008cd79
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rdi, qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x141dcfc20]
sub eax, dword [0x141dcfc24]
imul ebx, eax, 0x7e8a15ab
add ebx, 0x1a660302
xor ebx, 0x64f4bc09
mov ecx, esi
call rdi
cmp ebx, 0x4a5540fd
ja 0x14008cd80
mov eax, 0x9aaf4e49
nop
mov ecx, dword [0x141dcfc28]
and ecx, dword [0x141dcfc2c]
xor ecx, 0xead6661b
imul rcx, rax
shr rcx, 0x3f
add ecx, 0xb1001441
cmp ecx, 0x4bf4acad
jb 0x14008cdb0
add rsp, 0x40
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r14
pop r15
ret