Function at 0x1401e8c88
Capabilities:
Encode data using xor

Disassembly:
test r8, r8
je 0x1401e9880
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x68
mov r14d, dword [rcx + 4]
mov r15d, dword [rcx + 8]
mov ebp, dword [rcx + 0xc]
mov r13, rdx
mov edx, dword [rcx]
mov rax, r8
mov r12d, 1
movzx ecx, byte [r13]
sub rax, r12
add r13, r12
mov qword [rsp + 0xc0], rax
movzx eax, byte [r13]
add r13, r12
shl eax, 8
or ecx, eax
movzx eax, byte [r13]
add r13, r12
shl eax, 0x10
or ecx, eax
movzx eax, byte [r13]
add r13, r12
movzx edi, byte [r13]
shl eax, 0x18
add r13, r12
or ecx, eax
movzx eax, byte [r13]
add r13, r12
shl eax, 8
mov dword [rsp + 0xb8], ecx
or edi, eax
movzx eax, byte [r13]
add r13, r12
shl eax, 0x10
or edi, eax
movzx eax, byte [r13]
add r13, r12
shl eax, 0x18
or edi, eax
mov eax, ebp
xor eax, r15d
mov dword [rsp + 0x30], edi
and eax, r14d
xor eax, ebp
add eax, ecx
lea ecx, [rdx - 0x28955b88]
mov edx, 7
add ecx, eax
call fcn.1401c969c
movzx esi, byte [r13]
add r13, r12
movzx ecx, byte [r13]
lea ebx, [r14 + rax]
add r13, r12
shl ecx, 8
mov eax, r15d
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
or esi, ecx
movzx ecx, byte [r13]
xor eax, r14d
shl ecx, 0x10
and eax, ebx
add r13, r12
or esi, ecx
movzx ecx, byte [r13]
xor eax, r15d
shl ecx, 0x18
add eax, edi
add r13, r12
or esi, ecx
lea ecx, [rbp - 0x173848aa]
add ecx, eax
mov dword [rsp + 0x3c], esi
call fcn.1401c969c
movzx ebp, byte [r13]
add r13, r12
movzx ecx, byte [r13]
add r13, r12
lea edi, [rbx + rax]
shl ecx, 8
or ebp, ecx
movzx ecx, byte [r13]
add r13, r12
shl ecx, 0x10
or ebp, ecx
movzx ecx, byte [r13]
shl ecx, 0x18
or ebp, ecx
mov dword [rsp + 0x28], ebp
mov eax, r14d
lea ecx, [r15 + 0x242070db]
mov edx, 0x11
xor eax, ebx
add r13, r12
and eax, edi
xor eax, r14d
add eax, esi
add ecx, eax
call fcn.1401c969c
movzx r15d, byte [r13]
add r13, r12
movzx ecx, byte [r13]
add r13, r12
lea esi, [rdi + rax]
shl ecx, 8
add ebp, 0xc1bdceee
mov edx, ILIsParent
or r15d, ecx
movzx ecx, byte [r13]
add r13, r12
shl ecx, 0x10
or r15d, ecx
movzx ecx, byte [r13]
add r13, r12
shl ecx, 0x18
or r15d, ecx
mov ecx, edi
xor ecx, ebx
mov dword [rsp + 0x2c], r15d
and ecx, esi
xor ecx, ebx
add ecx, ebp
add ecx, r14d
call fcn.1401c969c
movzx r14d, byte [r13]
add r13, r12
movzx ecx, byte [r13]
lea ebp, [rsi + rax]
add r13, r12
shl ecx, 8
mov eax, edi
mov edx, 7
or r14d, ecx
movzx ecx, byte [r13]
xor eax, esi
shl ecx, 0x10
and eax, ebp
add r13, r12
or r14d, ecx
movzx ecx, byte [r13]
xor eax, edi
shl ecx, 0x18
add eax, r15d
add r13, r12
or r14d, ecx
lea ecx, [rbx - 0xa83f051]
add ecx, eax
mov dword [rsp + 0x38], r14d
call fcn.1401c969c
movzx r15d, byte [r13]
add r13, r12
movzx ecx, byte [r13]
add r13, r12
lea ebx, [rax + rbp]
shl ecx, 8
or r15d, ecx
movzx ecx, byte [r13]
add r13, r12
shl ecx, 0x10
or r15d, ecx
movzx ecx, byte [r13]
add r13, r12
shl ecx, 0x18
or r15d, ecx
mov ecx, esi
xor ecx, ebp
mov dword [rsp + 0x20], r15d
and ecx, ebx
xor ecx, esi
add r14d, 0x4787c62a
add ecx, r14d
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
add ecx, edi
call fcn.1401c969c
movzx r14d, byte [r13]
add r13, r12
movzx ecx, byte [r13]
add r13, r12
lea edi, [rbx + rax]
shl ecx, 8
add r15d, 0xa8304613
mov edx, 0x11
or r14d, ecx
movzx ecx, byte [r13]
add r13, r12
shl ecx, 0x10
or r14d, ecx
movzx ecx, byte [r13]
add r13, r12
shl ecx, 0x18
or r14d, ecx
mov ecx, ebp
xor ecx, ebx
mov dword [rsp + 0xc8], r14d
and ecx, edi
xor ecx, ebp
add ecx, r15d
add ecx, esi
call fcn.1401c969c
movzx r15d, byte [r13]
add r13, r12
movzx ecx, byte [r13]
add r13, r12
lea esi, [rdi + rax]
shl ecx, 8
add r14d, 0xfd469501
mov edx, ILIsParent
or r15d, ecx
movzx ecx, byte [r13]
add r13, r12
shl ecx, 0x10
or r15d, ecx
movzx ecx, byte [r13]
add r13, r12
shl ecx, 0x18
or r15d, ecx
mov ecx, edi
xor ecx, ebx
mov dword [rsp + 0x40], r15d
and ecx, esi
xor ecx, ebx
add ecx, r14d
add ecx, ebp
call fcn.1401c969c
movzx ecx, byte [r13 + 1]
movzx r12d, byte [r13]
shl ecx, 8
lea ebp, [rsi + rax]
add r15d, 0x698098d8
or r12d, ecx
movzx ecx, byte [r13 + 2]
mov edx, 7
shl ecx, 0x10
or r12d, ecx
movzx ecx, byte [r13 + 3]
shl ecx, 0x18
or r12d, ecx
mov ecx, edi
xor ecx, esi
mov dword [rsp + 0x44], r12d
and ecx, ebp
xor ecx, edi
add ecx, r15d
add ecx, ebx
call fcn.1401c969c
movzx ecx, byte [r13 + 5]
movzx ebx, byte [r13 + 4]
shl ecx, 8
lea r14d, [rax + rbp]
or ebx, ecx
movzx ecx, byte [r13 + 6]
shl ecx, 0x10
add r12d, 0x8b44f7af
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
or ebx, ecx
movzx ecx, byte [r13 + 7]
add r13, 8
shl ecx, 0x18
or ebx, ecx
mov ecx, esi
xor ecx, ebp
mov dword [rsp + 0x48], ebx
and ecx, r14d
xor ecx, esi
add ecx, r12d
add ecx, edi
call fcn.1401c969c
movzx edi, byte [r13]
mov r12d, 1
add r13, r12
lea r15d, [r14 + rax]
add ebx, 0xffff5bb1
movzx ecx, byte [r13]
add r13, r12
lea edx, [r12 + 0x10]
shl ecx, 8
or edi, ecx
movzx ecx, byte [r13]
add r13, r12
shl ecx, 0x10
or edi, ecx
movzx ecx, byte [r13]
add r13, r12
shl ecx, 0x18
mov qword [rsp + 0x50], r13
or edi, ecx
mov ecx, ebp
xor ecx, r14d
mov dword [rsp + 0x34], edi
and ecx, r15d
xor ecx, ebp
add ecx, ebx
add ecx, esi
call fcn.1401c969c
movzx r13d, byte [r13]
mov rsi, qword [rsp + 0x50]
lea ebx, [r15 + rax]
add rsi, r12
mov eax, r15d
movzx ecx, byte [rsi]
xor eax, r14d
add rsi, r12
shl ecx, 8
and eax, ebx
lea edx, [r12 + 0x15]
or r13d, ecx
movzx ecx, byte [rsi]
add rsi, r12
shl ecx, 0x10
xor eax, r14d
or r13d, ecx
movzx ecx, byte [rsi]
add eax, edi
shl ecx, 0x18
add rsi, r12
or r13d, ecx
lea ecx, [rbp - 0x76a32842]
add ecx, eax
call fcn.1401c969c
movzx ebp, byte [rsi]
add rsi, r12
movzx ecx, byte [rsi]
add rsi, r12
lea edi, [rbx + rax]
shl ecx, 8
or ebp, ecx
movzx ecx, byte [rsi]
add rsi, r12
shl ecx, 0x10
or ebp, ecx
movzx ecx, byte [rsi]
shl ecx, 0x18
or ebp, ecx
mov eax, r15d
lea ecx, [r14 + 0x6b901122]
xor eax, ebx
lea edx, [r12 + 6]
add rsi, r12
and eax, edi
mov dword [rsp + 0x24], ebp
mov qword [rsp + 0x50], rsi
xor eax, r15d
add eax, r13d
add ecx, eax
call fcn.1401c969c
mov r14, qword [rsp + 0x50]
mov edx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
movzx ecx, byte [r14 + 1]
movzx r12d, byte [r14]
lea esi, [rdi + rax]
shl ecx, 8
mov eax, ebx
or r12d, ecx
movzx ecx, byte [r14 + 2]
xor eax, edi
shl ecx, 0x10
and eax, esi
or r12d, ecx
movzx ecx, byte [r14 + 3]
xor eax, ebx
shl ecx, 0x18
add eax, ebp
or r12d, ecx
lea ecx, [r15 - 0x2678e6d]
add ecx, eax
call fcn.1401c969c
movzx ecx, byte [r14 + 5]
movzx r15d, byte [r14 + 4]
shl ecx, 8
lea ebp, [rsi + rax]
mov eax, edi
or r15d, ecx
movzx ecx, byte [r14 + 6]
xor eax, esi
shl ecx, 0x10
and eax, ebp
add r14, 8
or r15d, ecx
movzx ecx, byte [r14 - 1]
xor eax, edi
shl ecx, 0x18
add eax, r12d
mov edx, 0x11
or r15d, ecx
lea ecx, [rbx - 0x5986bc72]
mov qword [rsp + 0x50], r14
add ecx, eax
call fcn.1401c969c
mov ecx, ebp
add edi, 0x49b40821
xor ecx, esi
lea ebx, [rax + rbp]
mov edx, ILIsParent
and ecx, ebx
xor ecx, esi
add ecx, r15d
add ecx, edi
call fcn.1401c969c
mov ecx, ebx
add esi, 0xf61e2562
lea edi, [rbx + rax]
mov r14d, 5
xor ecx, edi
mov edx, r14d
and ecx, ebp
xor ecx, ebx
add ecx, dword [rsp + 0x30]
add ecx, esi
call fcn.1401c969c
mov ecx, edi
lea esi, [rdi + rax]
xor ecx, esi
and ecx, ebx
xor ecx, edi
add ebp, 0xc040b340
lea edx, [r14 + 4]
add ecx, dword [rsp + 0x20]
add ecx, ebp
call fcn.1401c969c
add ebx, 0x265e5a51
lea edx, [r14 + 9]
lea ebp, [rsi + rax]
mov ecx, ebp
xor ecx, esi
and ecx, edi
xor ecx, esi
add ecx, dword [rsp + 0x34]
add ecx, ebx
call fcn.1401c969c
mov ecx, ebp
add edi, 0xe9b6c7aa
lea ebx, [rax + rbp]
lea edx, [r14 + 0xf]
xor ecx, ebx
and ecx, esi
xor ecx, ebp
add ecx, dword [rsp + 0xb8]
add ecx, edi
call fcn.1401c969c
mov ecx, ebx
add esi, 0xd62f105d
lea edi, [rbx + rax]
mov edx, r14d
xor ecx, edi
and ecx, ebp
xor ecx, ebx
add ecx, dword [rsp + 0x38]
add ecx, esi
call fcn.1401c969c
mov ecx, edi
add ebp, 0x2441453
lea esi, [rdi + rax]
lea edx, [r14 + 4]
xor ecx, esi
and ecx, ebx
xor ecx, edi
add ecx, dword [rsp + 0x48]
add ecx, ebp
call fcn.1401c969c
add ebx, 0xd8a1e681
lea edx, [r14 + 9]
lea ebp, [rsi + rax]
mov ecx, ebp
xor ecx, esi
and ecx, edi
xor ecx, esi
add ecx, r15d
add ecx, ebx
call fcn.1401c969c
mov ecx, ebp
add edi, 0xe7d3fbc8
lea ebx, [rax + rbp]
lea edx, [r14 + 0xf]
xor ecx, ebx
and ecx, esi
xor ecx, ebp
add ecx, dword [rsp + 0x2c]
add ecx, edi
call fcn.1401c969c
mov ecx, ebx
add esi, 0x21e1cde6
lea edi, [rbx + rax]
mov edx, r14d
xor ecx, edi
and ecx, ebp
xor ecx, ebx
add ecx, dword [rsp + 0x44]
add ecx, esi
call fcn.1401c969c
mov ecx, edi
lea esi, [rdi + rax]
xor ecx, esi
and ecx, ebx
xor ecx, edi
add ecx, r12d
add ebp, 0xc33707d6
lea edx, [r14 + 4]
add ecx, ebp
call fcn.1401c969c
add ebx, 0xf4d50d87
lea edx, [r14 + 9]
lea ebp, [rsi + rax]
mov ecx, ebp
xor ecx, esi
and ecx, edi
xor ecx, esi
add ecx, dword [rsp + 0x28]
add ecx, ebx
call fcn.1401c969c
mov ecx, ebp
add edi, 0x455a14ed
lea ebx, [rax + rbp]
lea edx, [r14 + 0xf]
xor ecx, ebx
and ecx, esi
xor ecx, ebp
add ecx, dword [rsp + 0x40]
add ecx, edi
call fcn.1401c969c
mov ecx, ebx
add esi, 0xa9e3e905
lea edi, [rbx + rax]
mov edx, r14d
xor ecx, edi
and ecx, ebp
xor ecx, ebx
add ecx, dword [rsp + 0x24]
add ecx, esi
call fcn.1401c969c
mov ecx, edi
add ebp, 0xfcefa3f8
lea esi, [rdi + rax]
lea edx, [r14 + 4]
xor ecx, esi
and ecx, ebx
xor ecx, edi
add ecx, dword [rsp + 0x3c]
add ecx, ebp
call fcn.1401c969c
add ebx, 0x676f02d9
lea edx, [r14 + 9]
lea ebp, [rsi + rax]
mov ecx, ebp
xor ecx, esi
and ecx, edi
xor ecx, esi
add ecx, dword [rsp + 0xc8]
add ecx, ebx
call fcn.1401c969c
mov ebx, ebp
add edi, 0x8d2a4c8a
lea r14d, [rax + rbp]
mov edx, ILIsParent
xor ebx, r14d
mov ecx, ebx
and ecx, esi
xor ecx, ebp
add ecx, r13d
add ecx, edi
call fcn.1401c969c
lea ecx, [rsi - 0x5c6be]
mov edx, 4
lea edi, [r14 + rax]
xor ebx, edi
add ebx, dword [rsp + 0x38]
add ecx, ebx
call fcn.1401c969c
mov ecx, r14d
add ebp, 0x8771f681
xor ecx, edi
lea esi, [rdi + rax]
mov edx, VariantTimeToDosDateTime
xor ecx, esi
add ecx, dword [rsp + 0x40]
add ecx, ebp
call fcn.1401c969c
add r14d, 0x6d9d6122
mov edx, 0x10
lea ebp, [rsi + rax]
mov ecx, ebp
xor ecx, edi
xor ecx, esi
add ecx, dword [rsp + 0x34]
add ecx, r14d
call fcn.1401c969c
mov ebx, ebp
add edi, 0xfde5380c
lea r14d, [rax + rbp]
mov edx, reloc.SHELL32.dll_ILIsParent
xor ebx, r14d
mov ecx, ebx
xor ecx, esi
add ecx, r12d
add ecx, edi
call fcn.1401c969c
lea ecx, [rsi - 0x5b4115bc]
mov edx, 4
lea edi, [r14 + rax]
xor ebx, edi
add ebx, dword [rsp + 0x30]
add ecx, ebx
call fcn.1401c969c
mov ecx, r14d
add ebp, 0x4bdecfa9
xor ecx, edi
lea esi, [rdi + rax]
mov edx, VariantTimeToDosDateTime
xor ecx, esi
add ecx, dword [rsp + 0x2c]
add ecx, ebp
call fcn.1401c969c
add r14d, 0xf6bb4b60
mov edx, 0x10
lea ebp, [rsi + rax]
mov ecx, ebp
xor ecx, edi
xor ecx, esi
add ecx, dword [rsp + 0xc8]
add ecx, r14d
call fcn.1401c969c
mov ebx, ebp
add edi, 0xbebfbc70
lea r14d, [rax + rbp]
mov edx, reloc.SHELL32.dll_ILIsParent
xor ebx, r14d
mov ecx, ebx
xor ecx, esi
add ecx, dword [rsp + 0x48]
add ecx, edi
call fcn.1401c969c
lea ecx, [rsi + 0x289b7ec6]
mov edx, 4
lea edi, [r14 + rax]
xor ebx, edi
add ebx, dword [rsp + 0x24]
add ecx, ebx
call fcn.1401c969c
mov ecx, r14d
add ebp, 0xeaa127fa
xor ecx, edi
lea esi, [rdi + rax]
mov edx, VariantTimeToDosDateTime
xor ecx, esi
add ecx, dword [rsp + 0xb8]
add ecx, ebp
call fcn.1401c969c
add r14d, 0xd4ef3085
mov edx, 0x10
lea ebp, [rsi + rax]
mov ecx, ebp
xor ecx, edi
xor ecx, esi
add ecx, dword [rsp + 0x28]
add ecx, r14d
call fcn.1401c969c
lea r14d, [rax + rbp]
mov ebx, ebp
add edi, 0x4881d05
mov edx, reloc.SHELL32.dll_ILIsParent
xor ebx, r14d
mov ecx, ebx
xor ecx, esi
add ecx, dword [rsp + 0x20]
add ecx, edi
call fcn.1401c969c
lea ecx, [rsi - 0x262b2fc7]
mov edx, 4
lea edi, [r14 + rax]
xor ebx, edi
add ebx, dword [rsp + 0x44]
add ecx, ebx
call fcn.1401c969c
mov ecx, r14d
add ebp, 0xe6db99e5
xor ecx, edi
lea ebx, [rdi + rax]
mov edx, VariantTimeToDosDateTime
xor ecx, ebx
add ecx, r13d
add ecx, ebp
call fcn.1401c969c
add r14d, 0x1fa27cf8
mov edx, 0x10
lea esi, [rbx + rax]
mov ecx, esi
xor ecx, edi
xor ecx, ebx
add ecx, r15d
add ecx, r14d
call fcn.1401c969c
mov ecx, esi
add edi, 0xc4ac5665
lea ebp, [rsi + rax]
mov edx, reloc.SHELL32.dll_ILIsParent
xor ecx, ebp
xor ecx, ebx
add ecx, dword [rsp + 0x3c]
add ecx, edi
call fcn.1401c969c
mov ecx, esi
add ebx, 0xf4292244
not ecx
lea edi, [rax + rbp]
mov r14d, 6
or ecx, edi
mov edx, r14d
xor ecx, ebp
add ecx, dword [rsp + 0xb8]
add ecx, ebx
call fcn.1401c969c
mov ecx, ebp
add esi, 0x432aff97
not ecx
lea ebx, [rdi + rax]
lea edx, [r14 + 4]
or ecx, ebx
xor ecx, edi
add ecx, dword [rsp + 0xc8]
add ecx, esi
call fcn.1401c969c
mov ecx, edi
add ebp, 0xab9423a7
not ecx
lea esi, [rbx + rax]
lea edx, [r14 + 9]
or ecx, esi
xor ecx, ebx
add ecx, r12d
add ecx, ebp
call fcn.1401c969c
mov ecx, ebx
not ecx
lea ebp, [rsi + rax]
or ecx, ebp
xor ecx, esi
add ecx, dword [rsp + 0x38]
add edi, 0xfc93a039
lea edx, [r14 + 0xf]
add ecx, edi
call fcn.1401c969c
mov ecx, esi
add ebx, 0x655b59c3
not ecx
lea edi, [rax + rbp]
mov edx, r14d
or ecx, edi
xor ecx, ebp
add ecx, r13d
add ecx, ebx
call fcn.1401c969c
mov ecx, ebp
lea r12d, [r14 + 4]
not ecx
lea ebx, [rdi + rax]
add esi, 0x8f0ccc92
or ecx, ebx
mov edx, r12d
xor ecx, edi
add ecx, dword [rsp + 0x28]
add ecx, esi
call fcn.1401c969c
mov ecx, edi
lea r13d, [r14 + 9]
not ecx
lea esi, [rbx + rax]
add ebp, 0xffeff47d
or ecx, esi
mov edx, r13d
xor ecx, ebx
add ecx, dword [rsp + 0x48]
add ecx, ebp
call fcn.1401c969c
mov ecx, ebx
add edi, 0x85845dd1
not ecx
lea ebp, [rsi + rax]
lea edx, [r14 + 0xf]
or ecx, ebp
xor ecx, esi
add ecx, dword [rsp + 0x30]
add ecx, edi
call fcn.1401c969c
mov ecx, esi
add ebx, 0x6fa87e4f
not ecx
lea edi, [rax + rbp]
mov edx, r14d
or ecx, edi
xor ecx, ebp
add ecx, dword [rsp + 0x40]
add ecx, ebx
call fcn.1401c969c
mov ecx, ebp
add r15d, 0xfe2ce6e0
not ecx
lea ebx, [rdi + rax]
mov edx, r12d
or ecx, ebx
xor ecx, edi
add ecx, r15d
add ecx, esi
call fcn.1401c969c
mov ecx, edi
add ebp, 0xa3014314
not ecx
lea r14d, [rbx + rax]
mov edx, r13d
or ecx, r14d
xor ecx, ebx
add ecx, dword [rsp + 0x20]
add ecx, ebp
call fcn.1401c969c
mov ecx, ebx
not ecx
lea ebp, [r14 + rax]
or ecx, ebp
xor ecx, r14d
add ecx, dword [rsp + 0x24]
add edi, 0x4e0811a1
lea edx, [r12 + 0xb]
add ecx, edi
call fcn.1401c969c
mov ecx, r14d
add ebx, 0xf7537e82
not ecx
lea r15d, [rax + rbp]
lea edx, [r12 - 4]
or ecx, r15d
xor ecx, ebp
add ecx, dword [rsp + 0x2c]
add ecx, ebx
call fcn.1401c969c
mov ecx, ebp
add r14d, 0xbd3af235
not ecx
lea esi, [r15 + rax]
mov edx, r12d
or ecx, esi
xor ecx, r15d
add ecx, dword [rsp + 0x34]
add ecx, r14d
call fcn.1401c969c
mov ecx, r15d
add ebp, 0x2ad7d2bb
not ecx
lea edi, [rsi + rax]
mov edx, r13d
or ecx, edi
xor ecx, esi
add ecx, dword [rsp + 0x3c]
add ecx, ebp
call fcn.1401c969c
mov ecx, esi
add r15d, 0xeb86d391
not ecx
lea ebx, [rdi + rax]
lea edx, [r12 + 0xb]
or ecx, ebx
xor ecx, edi
add ecx, dword [rsp + 0x44]
add ecx, r15d
call fcn.1401c969c
mov rcx, qword [rsp + 0xb0]
mov r13, qword [rsp + 0x50]
add dword [rcx], esi
add dword [rcx + 8], ebx
add dword [rcx + 0xc], edi
mov edx, dword [rcx]
mov r15d, dword [rcx + 8]
mov ebp, dword [rcx + 0xc]
add eax, ebx
mov r12d, 1
add dword [rcx + 4], eax
mov rax, qword [rsp + 0xc0]
mov r14d, dword [rcx + 4]
test rax, rax
jne 0x1401e8cbf
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret