Function at 0x14008b610
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rsi, rcx
mov eax, dword [0x141dcf2f0]
sub eax, dword [0x141dcf2f4]
xor eax, 0x2d5e9e5f
add eax, 0x258ed73a
or eax, 0xaaef7a73
cmp eax, 0xa9842550
jae 0x14008b64e
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov ecx, 0x96bd73cf
nop word cs:[rax + rax]
mov edx, dword [0x141dcf2f8]
and edx, dword [0x141dcf2fc]
imul rdx, rcx
shr rdx, 0x3f
mov eax, 0x10
call fcn.1400ef3b0
sub rsp, rax
mov rbx, rsp
cmp edx, 0x8c1beaba
je 0x14008b660
mov eax, dword [0x141dcf300]
or eax, dword [0x141dcf304]
imul rax, rax, 0x2cd37871
shr rax, 0x3c
cmp eax, 0x1bd85154
jne 0x14008b6c8
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call qword [sym.imp.KERNEL32.dll_CreateWaitableTimerExW]
add rsp, 0x20
xor r14d, r14d
mov r15, qword [sym.imp.KERNEL32.dll_CreateWaitableTimerExW]
nop word cs:[rax + rax]
sub rsp, 0x20
xor ecx, ecx
xor edx, edx
mov r8d, 2
mov r9d, 0x1f0003
call r15
add rsp, 0x20
test r14b, r14b
jne 0x14008b6e0
mov rdi, rax
test rax, rax
je 0x14008b8ce
imul rax, rsi, 0xffffffffff676980
mov qword [rbx], rax
sub rsp, 0x30
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov rcx, rdi
mov rdx, rbx
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_SetWaitableTimer]
add rsp, 0x30
test eax, eax
je 0x14008b7e5
mov eax, dword [0x141dcf320]
xor edx, edx
div dword [0x141dcf324]
add eax, 0xd90f626d
cmp eax, 0x45d8f32d
jae 0x14008b779
sub rsp, 0x20
mov rcx, rdi
mov edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
add rsp, 0x20
mov r14, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [0x141dcf328]
xor eax, dword [0x141dcf32c]
imul r15d, eax, 0x4cf393d4
or r15d, 0xf4bd6d2d
sub rsp, 0x20
mov rcx, rdi
mov edx, 0xffffffff
call r14
add rsp, 0x20
cmp r15d, 0x52a1b72c
je 0x14008b780
mov ebx, eax
mov eax, dword [0x141dcf330]
imul eax, dword [0x141dcf334]
xor eax, 0x2218012
and eax, 0x265ad92
imul eax, eax, 0xd08e8ed1
cmp eax, 0x7c436d54
jne 0x14008b87d
jmp 0x14008b8b6
mov eax, dword [0x141dcf308]
xor eax, dword [0x141dcf30c]
xor eax, 0x83020000
and eax, 0x83020504
cmp eax, 0xb65c3293
ja 0x14008b833
mov ebx, dword [0x141dcf310]
add ebx, dword [0x141dcf314]
xor ebx, 0x8c448480
or ebx, 0x61916956
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp ebx, 0x6f5df7ec
jne 0x14008b850
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x14008b802
mov eax, dword [0x141dcf318]
sub eax, dword [0x141dcf31c]
shr eax, 4
imul rax, rax, 0x9f651fd
shr rax, 0x36
xor eax, 0x84422316
add eax, 0x200627e6
cmp eax, 0xe17774f6
ja 0x14008b850
jmp 0x14008b8ce
mov eax, dword [str._1k_]
or eax, dword [0x141dcf33c]
and eax, 0x69b45178
imul r14d, eax, 0x7b07abc4
add r14d, 0xe9b34f84
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
cmp r14d, 0x8f2a45b
jae 0x14008b8c9
sub rsp, 0x20
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
add rsp, 0x20
jmp 0x14008b87d
cmp ebx, 0xffffffff
jne 0x14008b920
imul r8, rsi, 0x3e8
mov r9d, 0xffffffff
nop dword [rax + rax]
mov eax, dword [0x141dcf340]
xor edx, edx
div dword [0x141dcf344]
or eax, 0xfbfcdffb
and eax, 0xfbfcdfff
cmp r8, r9
mov ecx, 0xffffffff
cmovb rcx, r8
cmp eax, 0xccb3a8d2
jb 0x14008b8e0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_Sleep]
add rsp, 0x20
nop dword [rax]
mov eax, dword [0x141dcf348]
xor eax, dword [0x141dcf34c]
add eax, 0xbc122335
or eax, 0xa623fdc6
add eax, 0x8eee3c27
cmp eax, 0x3fdfaafb
ja 0x14008b920
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r14
pop r15
pop rbp
ret