Function at 0x140037d80
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x40
lea rdx, [0x1400841f0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
mov dword [rsp + 0x3c], 0x5000
lea rcx, [rsp + 0x3c]
call qword [sym.imp.KERNEL32.dll_SetThreadStackGuarantee]
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov r8, qword [0x141dbf008]
lea rdx, [0x141db9780]
mov rcx, rax
call r8
movzx eax, byte [0x141ddb278]
mov edx, 0x38
xor ecx, ecx
call fcn.1400c0180
test rax, rax
je 0x140037e10
mov rsi, rax
mov qword [rax], 1
mov qword [rax + 8], 1
mov eax, dword [0x141dc4b28]
add eax, dword [0x141dc4b2c]
xor eax, 0x12018100
and eax, 0x322d8500
cmp eax, 0x2ede2d64
jbe 0x140037e58
jmp 0x140037e86
mov eax, dword [0x141dc4b18]
imul eax, dword [0x141dc4b1c]
xor eax, 0x31b8051b
add eax, 0x55bdf717
xor eax, 0xdf39b846
cmp eax, 0x5ea3819a
jb 0x140037e52
mov eax, dword [0x141dc4b20]
xor eax, dword [0x141dc4b24]
and eax, 0x8a1f0086
add eax, 0xf08046bc
ud2
ud2
ud2
mov eax, dword [0x141dc4b30]
xor edx, edx
div dword [0x141dc4b34]
and eax, 0x3fee75f6
xor eax, 0xaf0257c
mov qword [rsi + 0x10], 0
mov rcx, qword [0x141ddb240]
cmp eax, 0x19cefba2
jbe 0x140037eab
mov qword [rsi + 0x10], 0
mov rax, qword [0x141ddb240]
jmp 0x140037e58
mov rcx, rax
test dl, dl
jne 0x140037f4d
mov eax, dword [0x141dc4b38]
xor edx, edx
div dword [0x141dc4b3c]
imul rax, rax, 0x46548a11
shr rax, 0x3d
and eax, 1
cmp eax, 0x12fb40e3
je 0x140037eab
cmp rcx, 0xffffffffffffffff
je 0x140037e56
lea rdi, [rcx + 1]
mov eax, dword [0x141dc4b40]
mov edx, dword [0x141dc4b44]
add eax, edx
add eax, 0xc7cc1a8b
xor eax, 0xfaffa323
imul eax, eax, 0x91d3f3d7
cmp eax, 0x8e22310f
ja 0x140037f3f
nop dword [rax]
mov r8d, dword [0x141dc4b48]
xor r8d, dword [0x141dc4b4c]
add r8d, 0x4bef9b57
and r8d, 0x20f1d7
xor r8d, 0x92f27c5e
mov rax, rcx
lock cmpxchg qword [0x141ddb240], rdi
sete dl
cmp r8d, 0x57281792
jae 0x140037ea0
mov rax, rcx
lock cmpxchg qword [0x141ddb240], rdi
jmp 0x140037f00
mov eax, dword [0x141dc4b50]
sub eax, dword [0x141dc4b54]
imul eax, eax, 0xf55188af
or eax, 0x12f71ad9
imul rax, rax, 0x68ec607
shr rax, 0x3a
cmp eax, 0x60c28b79
ja 0x140037fb2
mov ebx, dword [0x141dc4b58]
imul ebx, dword [0x141dc4b5c]
or ebx, 0x2ac0716c
and ebx, 0xeafb71fe
mov qword [rsi + 0x28], rdi
mov byte [rsi + 0x30], 0
mov rcx, rsi
call fcn.140084dd0
call fcn.140024480
mov eax, dword [0x141ddb1c8]
cmp ebx, 0x101d7ed4
jne 0x140037fcf
mov qword [rsi + 0x28], rdi
mov byte [rsi + 0x30], 0
mov rcx, rsi
call fcn.140084dd0
call fcn.140024480
mov eax, dword [0x141ddb1c8]
jmp 0x140037f76
cmp eax, 3
je 0x1400380e0
nop dword [rax + rax]
mov eax, dword [0x141dc4b60]
or eax, dword [0x141dc4b64]
imul eax, eax, 0x6804db60
imul rax, rax, 0x394f7143
shr rax, 0x3c
cmp eax, 0xabdafc0c
je 0x140037fe0
mov eax, dword [0x141dc4b68]
and eax, dword [0x141dc4b6c]
or eax, 0x3f5cffbb
mov ecx, 0xba40343f
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0xdc49909
jbe 0x140038030
mov byte [rsp + 0x2f], 1
nop
mov eax, dword [str._rbBg_B:]
mov ecx, dword [0x141dc4b74]
add eax, ecx
add eax, 0x790a8a0
or eax, 0xd852286
mov byte [rsp + 0x2f], 1
cmp eax, 0xa1167a33
je 0x140038030
mov eax, dword [0x141dc4b78]
xor edx, edx
div dword [0x141dc4b7c]
imul eax, eax, 0x402caa55
add eax, 0xc9a4a403
xor eax, 0x803439d7
cmp eax, 0x58bd1acd
jb 0x140038111
lea r14, [rsp + 0x2f]
lea rsi, [0x141ddb1c8]
lea rdi, [0x141db9168]
lea rbx, [rsp + 0x30]
mov eax, dword [0x141dc4b80]
sub eax, dword [0x141dc4b84]
or eax, 0x1b25e451
add eax, 0x4651a556
shr eax, 1
imul r15, rax, 0xae6431d
shr r15, 0x3a
mov qword [rsp + 0x30], r14
mov rcx, rsi
xor edx, edx
mov r8, rbx
mov r9, rdi
call fcn.1400fb0a0
cmp r15d, 0x467dcc11
ja 0x140038095
nop word cs:[rax + rax]
mov eax, dword [0x141dc4b88]
and eax, dword [0x141dc4b8c]
and eax, 0xc5606563
xor eax, 0x4f3ef2f0
imul eax, eax, 0x963f70c0
cmp eax, 0xf66ec5ed
ja 0x1400380e0
xor eax, eax
add rsp, 0x40
pop rbx
pop rdi
pop rsi
pop r14
pop r15
ret
lea rax, [rsp + 0x2f]
mov qword [rsp + 0x30], rax
lea rcx, [0x141ddb1c8]
lea r9, [0x141db9168]
lea r8, [rsp + 0x30]
xor edx, edx
call fcn.1400fb0a0
jmp 0x14003807d