Function at 0x1401290c0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x40
mov rdi, rdx
mov rsi, rcx
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x20], rax
mov rcx, rdx
mov edx, 0x3c
xor r8d, r8d
xor r9d, r9d
call qword [sym.imp.ntdll.dll_NtQueryInformationProcess]
mov ebp, eax
nop word cs:[rax + rax]
mov eax, dword [0x140228eb0]
or eax, dword [0x140228eb4]
not eax
or eax, 0x5f1fc45a
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xa02824
and eax, 0xb54e53c9
imul eax, edx
mov edx, ecx
and edx, 0xa0401381
or ecx, 0xb54e53c9
imul ecx, edx
add eax, ecx
add eax, 0x3b5313d9
cmp eax, 0xcc7e88e2
ja 0x140129100
test ebp, ebp
jns 0x1401294b0
mov eax, dword [0x140228eb8]
add eax, dword [0x140228ebc]
mov ecx, eax
xor ecx, 0x8eb69b4
and eax, 0x7714964b
add eax, eax
sub eax, ecx
imul eax, eax, 0x2fc0a8e5
cmp eax, 0x9fb1143c
jne 0x140129181
mov qword [rsp + 0x30], 0
or ebp, 0x10000000
nop word [rax + rax]
mov eax, dword [0x140228ec0]
mov ecx, dword [0x140228ec4]
xor ecx, eax
not ecx
and ecx, eax
imul rax, rcx, 0x394f3441
shr rax, 0x39
or eax, 0x17acb88c
mov qword [rsp + 0x30], 0
cmp eax, 0x919d42b5
je 0x140129190
mov eax, dword [0x140228ec8]
xor eax, dword [str.p2eDm]
add eax, 0xd2f76d67
not eax
or eax, 0xec95b392
cmp eax, 0x3358b2ee
jb 0x140129220
mov eax, dword [0x140228ed0]
or eax, dword [0x140228ed4]
mov ebx, eax
xor ebx, 0xa7b56d68
and ebx, eax
mov eax, ebx
xor eax, 0xc10bb003
or ebx, 0x3ef44ffc
and ebx, eax
add ebx, 0xd0a087b2
lea rdx, [rsp + 0x30]
xor ecx, ecx
call fcn.14014ee70
cmp ebx, 0x8a4b2444
jae 0x14012922f
lea rdx, [rsp + 0x30]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
jmp 0x1401291e1
mov rbx, qword [rsp + 0x30]
cmp ebp, 0x90000005
je 0x140129250
cmp ebp, 0xd0000004
je 0x140129250
cmp ebp, 0xd0000023
jne 0x140129314
mov eax, dword [0x140228f00]
mov ecx, dword [0x140228f04]
mov edx, eax
not edx
and edx, ecx
mov r8d, ecx
not r8d
and r8d, eax
imul r8d, edx
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, r8d
mov ecx, eax
and ecx, 0x723ce96b
add ecx, ecx
sub eax, ecx
add eax, 0xf23ce96b
xor eax, 0x92482080
and eax, 0x936c62e9
cmp eax, 0x73dd314a
ja 0x140129250
xor eax, eax
nop
test al, al
jne 0x1401292a0
test rbx, rbx
je 0x1401294b0
nop dword [rax]
mov eax, dword [0x140228f08]
xor edx, edx
div dword [0x140228f0c]
add eax, 0xb6a68715
mov ecx, eax
not ecx
or ecx, 0x1cceb2bf
or eax, 0xff687968
and eax, ecx
and eax, 0xffeefbff
cmp eax, 0xd46aa31c
ja 0x1401292b0
mov r14, qword [rbx]
mov eax, dword [0x140228f10]
add eax, dword [0x140228f14]
imul rax, rax, 0x5ddaf479
shr rax, 0x3e
add eax, 0x3c915b6b
or eax, 0x11cda4db
cmp eax, 0x8cbee4bd
jbe 0x140129472
jmp 0x1401294a3
mov eax, 0xb4980a2b
nop dword [rax]
mov ecx, dword [0x140228ed8]
and ecx, dword [0x140228edc]
mov edx, ecx
not edx
and edx, 0xd73fc9a
mov r8d, ecx
and r8d, 0xf28c0365
imul r8d, edx
mov edx, ecx
and edx, 0xd73fc9a
or ecx, 0xd73fc9a
imul ecx, edx
add ecx, r8d
add ecx, 0x309ded9d
imul rcx, rax
shr rcx, 0x3f
cmp ecx, 0x7bb6b372
ja 0x140129320
nop
mov eax, dword [0x140228f18]
xor edx, edx
div dword [0x140228f1c]
mov ebp, eax
xor ebp, 0xc1102
or ebp, 0x7df3ecb9
xor ebp, 0xdd5baa6a
mov rcx, rbx
call qword [r14 + 0x10]
cmp ebp, 0xd800cf29
jbe 0x1401294b0
mov rcx, rbx
call qword [r14 + 0x10]
jmp 0x140129472
mov eax, dword [0x140228f20]
mov ecx, eax
not ecx
or ecx, dword [0x140228f24]
add eax, ecx
inc eax
mov ecx, eax
and ecx, 0xc0ebd81b
xor ecx, 0x80aa5811
and eax, 0x80aa5811
or eax, ecx
mov ecx, eax
not ecx
or ecx, 0x3beb7bef
add eax, ecx
inc eax
cmp eax, 0xfa4f1015
ja 0x1401294b0
mov r14d, dword [rsp + 0x3c]
mov dword [rsp + 0x30], r14d
mov r12d, r14d
shr r12d, 1
lea r15, [r12*2 + 2]
mov eax, dword [0x140228f28]
mov ecx, dword [0x140228f2c]
mov edx, eax
and edx, ecx
add edx, edx
add eax, ecx
sub eax, edx
add eax, 0x39d1daf2
xor eax, 0x5b891012
cmp eax, 0x6f26845d