Function at 0x1400fb0a0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x48
mov rbx, r9
mov rbp, r8
mov rsi, rcx
mov eax, dword [0x141dcdbd0]
and eax, dword [0x141dcdbd4]
cmp eax, 0xb7ccd2f2
je 0x1400fb0f1
mov eax, dword [0x141dcdbd8]
sub eax, dword [0x141dcdbdc]
add eax, 0x3d7eb61b
xor eax, 0xbe504f03
imul eax, eax, 0x9f0a3290
mov ecx, dword [rsi]
cmp eax, 0xccd02f75
jbe 0x1400fb0f5
mov eax, dword [rsi]
jmp 0x1400fb0cc
test dl, dl
je 0x1400fb4c2
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x40], rbx
xor ebp, ebp
mov r15d, 0xf34b333b
mov r12d, 0xc11b2025
lea r14, [rsp + 0x2c]
mov r13, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WaitOnAddress]
nop word cs:[rax + rax]
mov edx, ecx
and edx, 3
mov r8d, ecx
and r8d, 4
cmp edx, 2
jae 0x1400fb150
test bpl, bpl
je 0x1400fb400
jmp 0x1400fb43e
jne 0x1400fb67b
nop word cs:[rax + rax]
mov eax, dword [0x141dcdbe0]
or eax, dword [0x141dcdbe4]
xor eax, 0x8b440b65
imul rax, r12
shr rax, 0x3f
cmp eax, 0x5b053f0d
ja 0x1400fb160
mov eax, dword [0x141dcdbe8]
xor edx, edx
div dword [0x141dcdbec]
xor eax, 0x6c0c4380
and eax, 0xee4c57f2
imul eax, eax, 0xc9f713cc
cmp eax, 0x1240155f
jb 0x1400fb180
test r8d, r8d
jne 0x1400fb1cd
mov eax, dword [0x141dcdbf0]
xor eax, dword [0x141dcdbf4]
imul eax, eax, 0x44f8becb
add eax, 0xb92182fe
cmp eax, 0x1855b128
jae 0x1400fb1e0
jmp 0x1400fb340
mov ebx, ecx
jmp 0x1400fb281
mov eax, dword [0x141dcdbf8]
and eax, dword [0x141dcdbfc]
xor eax, 0x86541546
imul r8d, eax, 0x2004a26b
add r8d, 0x4287cb68
lea ebx, [rcx + 4]
mov eax, 2
lock cmpxchg dword [rsi], ebx
sete dl
cmp r8d, 0xe8ad33
jb 0x1400fb340
mov ecx, dword [0x141dcdc00]
and ecx, dword [0x141dcdc04]
and ecx, 0xe7114931
add ecx, 0xac80a62b
imul r8, rcx, 0x2e1bbc97
shr r8, 0x20
sub ecx, r8d
shr ecx, 1
add ecx, r8d
shr ecx, 0x1d
cmp ecx, 0xb6a9965f
ja 0x1400fb21b
mov ecx, eax
nop word cs:[rax + rax]
mov eax, dword [0x141dcdc08]
sub eax, dword [0x141dcdc0c]
imul eax, eax, 0x331310fc
cmp eax, 0x50a19874
je 0x1400fb260
test dl, dl
je 0x1400fb130
mov eax, dword [0x141dcdc10]
add eax, dword [0x141dcdc14]
or eax, 0x60e08c12
and eax, 0xe1f08d92
cmp eax, 0x3003cfa8
jae 0x1400fb2c0
mov dword [rsp + 0x2c], ebx
mov r8d, 4
mov rcx, rsi
mov rdx, r14
mov r9d, 0xffffffff
call r13
nop word [rax + rax]
mov eax, dword [str._n__t_r]
xor eax, dword [0x141dcdc1c]
xor eax, 0xd6462caa
imul rdi, rax, 0x1f810ad
shr rdi, 0x38
or edi, 0xdd4b1364
mov dword [rsp + 0x2c], ebx
mov r8d, 4
mov rcx, rsi
mov rdx, r14
mov r9d, 0xffffffff
call r13
cmp edi, 0x89144f98
jb 0x1400fb2c0
cmp eax, 1
mov rbx, qword [sym.imp.KERNEL32.dll_GetLastError]
je 0x1400fb386
mov eax, dword [0x141dcdc20]
xor edx, edx
div dword [0x141dcdc24]
xor eax, 0x8580080
and eax, 0xb5c4482
cmp eax, 0x39d001c3
jbe 0x1400fb360
jmp 0x1400fb3f9
lea edx, [rcx + 4]
mov eax, 2
lock cmpxchg dword [rsi], edx
jmp 0x1400fb1e0
mov eax, dword [0x141dcdc28]
add eax, dword [0x141dcdc2c]
xor eax, 0x30cad5ad
imul rdi, rax, 0x6811887d
shr rdi, 0x3d
call rbx
cmp edi, 0x7e7b3cd1
je 0x1400fb3f9
mov eax, dword [0x141dcdc30]
mov ecx, dword [0x141dcdc34]
add eax, ecx
add eax, 0xf1dd05e8
xor eax, 0x505700cc
add eax, 0x8247d0c7
cmp eax, 0x6de8ebf7
jbe 0x1400fb3b0
mov eax, dword [rsi]
nop dword [rax]
mov eax, dword [0x141dcdc38]
imul eax, dword [0x141dcdc3c]
and eax, 0xbeb35eb
add eax, 0x9f1c7168
mov ecx, dword [rsi]
cmp eax, 0x5a6a6ff5
jb 0x1400fb3b0
mov eax, dword [0x141dcdc40]
sub eax, dword [0x141dcdc44]
imul eax, eax, 0xe221d862
or eax, 0x4ac6f175
imul eax, eax, 0xd555461a
cmp eax, 0x62751d3e
je 0x1400fb3d0
jmp 0x1400fb130
call rbx
jmp 0x1400fb360
mov eax, dword [0x141dcdc48]
imul eax, dword [0x141dcdc4c]
imul r10d, eax, 0x936e71bd
add r10d, 0x2ad23033
imul r10, r15
shr r10, 0x3e
mov r9d, r8d
or r9d, 2
mov eax, ecx
lock cmpxchg dword [rsi], r9d
sete r9b
cmp r10d, 0x741d3135
jbe 0x1400fb450
mov r9d, r8d
or r9d, 2
mov eax, ecx
lock cmpxchg dword [rsi], r9d
jmp 0x1400fb400
mov ecx, dword [0x141dcdc50]
sub ecx, dword [0x141dcdc54]
or ecx, 0x7fde7f9f
and ecx, 0xffde7fff
cmp ecx, 0xd6a3ad9d
je 0x1400fb450
mov ecx, eax
test r9b, r9b
je 0x1400fb130
mov rbp, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x40]
nop word cs:[rax + rax]
mov ecx, dword [0x141dcdc78]
imul ecx, dword [0x141dcdc7c]
xor ecx, 0x40584001
or ecx, 0x1b87bfe6
add ecx, 0xd2d29824
cmp edx, 1
sete al
cmp ecx, 0xe5d820f
jb 0x1400fb490
jmp 0x1400fb64f
lea rdi, [0x141dba2f0]
lea r14, [rsp + 0x2c]
mov r15, qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WaitOnAddress]
mov r12d, 0x8a1c5803
mov r13, qword [sym.imp.KERNEL32.dll_GetLastError]
nop word cs:[rax + rax]
mov eax, ecx
and eax, 3
loopne 0x1400fb4f8
mov edx, ecx
and edx, 4
movsxd rax, dword [rdi + rax*4]
add rax, rdi
jmp rax
mov dword [rsp + 0x30], 3
mov byte [rsp + 0x34], al
lea rdx, [rsp + 0x30]
mov rcx, rbp
call qword [rbx + 0x20]
mov eax, dword [rsp + 0x30]
xchg dword [rsi], eax
test al, 4
je 0x1400fb680
invalid
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_WakeByAddressAll]
jmp 0x1400fb680
cmp edx, 3
jne 0x1400fb6e4
mov eax, dword [0x141dcdc60]
or eax, dword [0x141dcdc64]
or eax, 0xf0c1b32f
imul eax, eax, 0x8adcc5f6
cmp eax, 0xd6c4a411
ja 0x1400fb680
add rsp, 0x48
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov eax, 0xcf1c406d
mov ecx, dword [0x141dcdc58]
xor ecx, dword [0x141dcdc5c]
imul rcx, rax
shr rcx, 0x3f
or ecx, 0xf33de8a
cmp ecx, 0xadff1f2d
je 0x1400fb6e9
ud2