Function at 0x1401f1a30
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
push rax
mov rbp, rsp
mov rdi, rdx
mov eax, dword [0x1415cfeb8]
mov edx, dword [0x1415cfebc]
mov r8d, eax
or r8d, edx
not eax
not edx
and edx, eax
not edx
and edx, r8d
add edx, 0x15c8efd7
mov eax, edx
or eax, 0x46c62e83
not edx
and edx, 0x10004024
and eax, 0xe6ef3e8b
sub eax, edx
cmp eax, 0xb7084ef7
jbe 0x1401f1ad0
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
nop word cs:[rax + rax]
mov eax, dword [0x1415cfec0]
xor edx, edx
div dword [0x1415cfec4]
mov edx, eax
not edx
mov r8d, eax
and r8d, 0x6dec8a6b
and edx, 0x92137594
imul edx, r8d
mov r8d, eax
and r8d, 0x92137594
or eax, 0x92137594
imul eax, r8d
add eax, edx
imul rax, rax, 0x6e451301
shr rax, 0x3e
imul edx, eax, 0xf70ee50a
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rbx, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r15, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov rsi, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r12, rsp
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r14, rsp
cmp edx, 0xad47cab7
je 0x1401f1ad0
mov edx, dword [0x1415cfec8]
mov r8d, dword [0x1415cfecc]
mov eax, edx
not eax
mov r9d, r8d
not r9d
mov r10d, eax
and r10d, 0x964892f2
and edx, 0x69b76d0d
or edx, r10d
or eax, r9d
and r9d, 0x964892f2
and r8d, 0x69b76d0d
or r8d, r9d
xor r8d, edx
not eax
or eax, r8d
mov edx, eax
xor edx, 0x80c2402
xor eax, 0x20905215
and eax, 0xe6b15215
and edx, 0x194eadea
or edx, eax
mov eax, edx
xor eax, 0x7140a00
and eax, 0x67140a90
xor edx, 0xe02280b0
lea eax, [rdx + rax*2]
cmp eax, 0x62f17105
ja 0x1401f1c32
mov eax, dword [0x1415cfed0]
sub eax, dword [0x1415cfed4]
mov edx, eax
not edx
or edx, 0xd00fd423
add edx, eax
inc edx
or edx, 0x4bb81008
and edx, 0xffb89498
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
mov r13, rsp
cmp edx, 0xc5873ba
jne 0x1401f1c41
mov eax, 0x10
call fcn.14021cf50
sub rsp, rax
jmp 0x1401f1bf4
cmp rcx, rdi
je 0x1401f2021
mov eax, dword [0x1415cfed8]
imul eax, dword [0x1415cfedc]
mov edx, 0xab75b1ed
imul rdx, rax
shr rdx, 0x3e
lea eax, [rdx - 0x7f3fddf0]
not edx
and edx, 0x3c025483
imul edx, edx, 0x134812c
imul eax, eax, 0xbdf6f7bf
add eax, edx
cmp eax, 0x10c5783e
jae 0x1401f1c90
mov qword [r13], 0
nop
mov eax, dword [0x1415cfee0]
mov edx, dword [0x1415cfee4]
mov r8d, eax
and r8d, edx
xor eax, edx
lea eax, [rax + r8*2]
or eax, 0x2139faee
imul eax, eax, 0x532ef3a3
imul rax, rax, 0x3cac7cf3
shr rax, 0x3d
mov qword [r13], 0
cmp eax, 0x8dc5f693
ja 0x1401f1c90
mov rax, qword [rcx]
mov edx, dword [0x1415cfee8]
mov r8d, dword [0x1415cfeec]
mov r9d, r8d
and r9d, edx
add edx, r8d
sub edx, r9d
or edx, 0xe34422c1
mov r8d, edx
xor r8d, 0x5c66b799
and edx, 0x23994866
add edx, edx
sub edx, r8d
imul edx, edx, 0x5079661a
cmp edx, 0xf55dc1be
ja 0x1401f1cd0
sub rsp, 0x20
lea rdx, [0x14159f2bc]
mov r8, r13
call qword [rax]
add rsp, 0x20
test eax, eax
js 0x1401f2028
mov eax, dword [0x1415cff00]
xor edx, edx
div dword [0x1415cff04]
nop dword [rax]
mov eax, dword [0x1415cff08]
mov ecx, dword [0x1415cff0c]
mov edx, eax
not edx
and edx, ecx
not ecx
and ecx, eax
sub ecx, edx
mov eax, ecx
xor eax, 0x9f94cfa3
add eax, ecx
and ecx, 0x606b305c
sub eax, ecx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x47066adb
and ecx, 0xb8f99524
imul ecx, edx
mov edx, eax
and edx, 0xb8f99524
or eax, 0xb8f99524
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
or eax, 0x5dbd1804
or ecx, 0xa242e7f8
and ecx, eax
cmp ecx, 0x476d0ea2
jb 0x1401f1d40
mov r12, qword [r13]
nop dword [rax]
mov eax, dword [0x1415cff10]
mov ecx, dword [str.Q_Z]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
xor eax, 0x1d7b8ba0
add eax, 0xf94f2ad1
mov ecx, eax
not ecx
or ecx, 0xbd3edd13
or eax, 0x42c122ec
and eax, ecx
cmp eax, 0x2ca783f0
jb 0x1401f1db0
test r12, r12
je 0x1401f1f10
nop word cs:[rax + rax]
mov eax, dword [0x1415cff30]
sub eax, dword [0x1415cff34]
and eax, 0x88b28d18
xor eax, 0xa620022e
cmp eax, 0x644faae5
jb 0x1401f1e00
mov qword [r14], 0
mov rax, qword [rdi]
sub rsp, 0x20
lea rdx, [0x14159f2bc]
mov rcx, rdi
mov r8, r14
call qword [rax]
add rsp, 0x20
test eax, eax
js 0x1401f2091
mov eax, dword [0x1415cff40]
xor edx, edx
div dword [0x1415cff44]
nop word cs:[rax + rax]
mov eax, dword [0x1415cff48]
mov ecx, dword [0x1415cff4c]
mov edx, ecx
not edx
and edx, eax
xor ecx, eax
add ecx, eax
sub ecx, edx
add ecx, 0x7daf3e66
imul rax, rcx, 0x4f9ab87
shr rax, 0x39
imul eax, eax, 0xc3b533d7
cmp eax, 0xea9e066
je 0x1401f1e60
mov rsi, qword [r14]
nop dword [rax]
mov eax, dword [0x1415cff50]
mov ecx, dword [0x1415cff54]
add eax, ecx
add eax, 0xf7dde7b7
imul rax, rax, 0x2b923f2d
shr rax, 0x3d
or eax, 0x2e4f42b6
cmp eax, 0x38b73fdb
ja 0x1401f1ea0
nop word [rax + rax]
mov eax, dword [0x1415cff58]
xor edx, edx
div dword [0x1415cff5c]
imul eax, eax, 0xf15b8026
cmp eax, 0xfa7f04fa
je 0x1401f1ed0
test rsi, rsi
je 0x1401f2103
cmp r12, rsi
sete bl
mov rdi, qword [rsi]
xor eax, eax
test al, al
je 0x1401f21ea
jmp 0x1401f224f
mov ecx, dword [0x1415cff18]
mov edx, dword [0x1415cff1c]
mov eax, ecx
not eax
mov r8d, edx
not r8d
mov r9d, eax
and r9d, 0xdc94d5a3
and ecx, 0x236b2a5c
or ecx, r9d
or eax, r8d
and r8d, 0xdc94d5a3
and edx, 0x236b2a5c
or edx, r8d
xor edx, ecx
not eax
or eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0xe60e03ee
and ecx, 0x19f1fc11
imul ecx, edx
mov edx, eax
and edx, 0x19f1fc11
or eax, 0x19f1fc11
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x3da6a079
add ecx, ecx
sub eax, ecx
add eax, 0x3da6a079
mov ecx, eax
not ecx
and ecx, 0x48bc58
and eax, 0xffb743a7
sub eax, ecx
cmp eax, 0xed8f4b9a
je 0x1401f1f10
mov eax, dword [0x1415cff20]
sub eax, dword [0x1415cff24]
mov ecx, eax
not ecx
and ecx, 0xa1791dbb
mov edx, eax
and edx, 0x5e86e244
imul edx, ecx
mov ecx, eax
and ecx, 0xa1791dbb
or eax, 0xa1791dbb
imul eax, ecx
add eax, edx
mov ecx, eax
not ecx
mov edx, eax
and edx, 0x3da5e8ca
and ecx, 0xc25a1735
imul ecx, edx
mov edx, eax
and edx, 0xc25a1735
or eax, 0xc25a1735
imul eax, edx
add eax, ecx
mov ecx, eax
not ecx
and ecx, 0x604c7e0b
and eax, 0x9fb381f4
sub eax, ecx
cmp eax, 0x210858d0
jae 0x1401f2189
jmp 0x1401f21cc
mov bl, 1
jmp 0x1401f22cf
mov eax, 0xdcb5edc5
nop dword [rax]
mov ecx, dword [0x1415cfef0]
mov edx, dword [0x1415cfef4]
add ecx, edx
add ecx, 0xa96c042d
imul rcx, rax
shr rcx, 0x3e
cmp ecx, 0x998d22e
ja 0x1401f2030
mov qword [r12], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r12
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
nop
mov eax, dword [0x1415cfef8]
xor edx, edx
div dword [0x1415cfefc]
add eax, 0x1308196b
or eax, 0x20a4aaba
cmp eax, 0x851e75ea
ja 0x1401f2070
ud2
mov qword [r15], 0
sub rsp, 0x20
xor ecx, ecx
mov rdx, r15
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
nop dword [rax + rax]
mov eax, dword [0x1415cff38]
xor edx, edx
div dword [0x1415cff3c]
mov ecx, eax
and ecx, 0xc627d265
and eax, 0x4201224
sub ecx, eax
add ecx, 0x24781a2c
mov eax, ecx
not eax
and eax, 0x2f6e260a
mov edx, ecx
and edx, 0xd091d9f5
imul edx, eax
mov eax, ecx
and eax, 0x2f6e2608
or ecx, 0x2f6e260a
imul ecx, eax
add ecx, edx
cmp ecx, 0x58b6fea7
jb 0x1401f20b0
jmp 0x1401f2125
mov qword [rbx], 0
sub rsp, 0x20
xor esi, esi
xor ecx, ecx
mov rdx, rbx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
nop
test sil, sil
jne 0x1401f2120
xor eax, eax
test al, al
je 0x1401f212d
ud2
mov ecx, 0xa72d7585
nop word cs:[rax + rax]
mov eax, dword [0x1415cff78]
xor edx, edx
div dword [0x1415cff7c]
imul rax, rcx
shr rax, 0x3f
imul eax, eax, 0x29815e10
mov edx, eax
not edx
and edx, 0x7f1e081c
and eax, 0xe1f7e0
sub eax, edx
ud2
mov eax, dword [0x1415cff28]
mov ecx, dword [0x1415cff2c]
mov edx, eax
not edx
and eax, ecx
not ecx
or ecx, edx
not ecx
or ecx, eax
mov eax, ecx
or eax, 0x87e535a5
xor eax, 0x28802081
or ecx, 0x87751d6c
and ecx, eax
or ecx, 0xd56fd732
mov qword [rsi], 0
cmp ecx, 0x327b7ea6
jae 0x1401f21d5
mov qword [rsi], 0
jmp 0x1401f2189
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
add rsp, 0x20
ud2
mov eax, dword [0x1415cff60]
mov ecx, dword [0x1415cff64]
not eax
not ecx
or ecx, eax
not ecx
mov r14d, ecx
and r14d, 0x4fb8605d
mov eax, r14d
not eax
mov edx, ecx
and edx, 0x48a06049
and eax, 0xa75f1196
imul eax, edx
and ecx, 0x7180014
or r14d, 0xa75f1196
imul r14d, ecx
add r14d, eax
or r14d, 0x5f8e1fbb
sub rsp, 0x20
mov rcx, rsi
call qword [rdi + 0x10]
add rsp, 0x20
cmp r14d, 0xfee11397
jne 0x1401f225f
sub rsp, 0x20
mov rcx, rsi
call qword [rdi + 0x10]
add rsp, 0x20
jmp 0x1401f21ea
mov rax, qword [r12]
mov rsi, qword [rax + 0x10]
mov eax, dword [0x1415cff6c]
add eax, dword [0x1415cff68]
and eax, 0x802d0500
xor eax, 0x50000
or eax, 0x7e50fafa
cmp eax, 0xebbaa9ed
ja 0x1401f22c0
mov eax, dword [0x1415cff70]
imul eax, dword [0x1415cff74]
add eax, 0xac20fa6b
mov edi, eax
xor edi, 0x7ada5c3a
and edi, eax
add edi, 0x101e0a3c
sub rsp, 0x20
mov rcx, r12
call rsi
add rsp, 0x20
cmp edi, 0xea5ad728
jb 0x1401f22cf
sub rsp, 0x20
mov rcx, r12
call rsi
add rsp, 0x20
jmp 0x1401f2289
mov eax, ebx
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret