Function at 0x1400dcec0
Capabilities:
Encode data using xor

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x30
mov rdi, rdx
nop word [rax + rax]
mov eax, dword [0x141dd8e50]
add eax, dword [0x141dd8e54]
and eax, 0x810c00
cmp eax, 0x8ba2f34b
ja 0x1400dced0
cmp rcx, rdi
je 0x1400dd075
mov qword [rsp + 0x28], 0
mov rax, qword [rcx]
lea rdx, [0x141db9acc]
lea r8, [rsp + 0x28]
call qword [rax]
xor ecx, ecx
nop dword [rax]
test cl, cl
jne 0x1400dcf10
test eax, eax
js 0x1400dd110
nop dword [rax]
mov eax, dword [0x141dd8e68]
sub eax, dword [0x141dd8e6c]
add eax, 0xfb9d641e
and eax, 0xd4f55e0d
add eax, 0x9d67ec94
cmp eax, 0xfc03e69a
ja 0x1400dcf20
mov rsi, qword [rsp + 0x28]
nop word [rax + rax]
mov eax, dword [0x141dd8e70]
or eax, dword [0x141dd8e74]
imul rcx, rax, 0x9fd0b5b
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
imul eax, eax, 0x9ec70df7
or eax, 0xde7b1068
cmp eax, 0x6c9399df
jb 0x1400dcf50
test rsi, rsi
je 0x1400dd18d
mov qword [rsp + 0x28], 0
mov rax, qword [rdi]
lea rdx, [0x141db9acc]
lea r8, [rsp + 0x28]
mov rcx, rdi
call qword [rax]
test eax, eax
js 0x1400dd0af
mov rcx, qword [rsp + 0x28]
nop word cs:[rax + rax]
mov eax, dword [0x141dd8e80]
or eax, dword [0x141dd8e84]
imul eax, eax, 0x36997e8c
and eax, 0x2093b150
imul eax, eax, 0xf42da172
cmp eax, 0x211e2f94
je 0x1400dcfc0
mov eax, 0x882b3351
nop dword [rax]
mov edx, dword [0x141dd8e88]
and edx, dword [0x141dd8e8c]
xor edx, 0xa5a2f4b7
imul rdx, rax
shr rdx, 0x3e
or edx, 0xfd82758
cmp edx, 0x8f271b41
ja 0x1400dcff0
test rcx, rcx
je 0x1400dd0da
nop word cs:[rax + rax]
mov eax, dword [0x141dd8eb0]
or eax, dword [0x141dd8eb4]
imul rax, rax, 0x6ef1b077
shr rax, 0x3d
xor eax, 0xeb8e3837
imul rax, rax, 0x1bbfa2b
shr rax, 0x37
cmp rsi, rcx
sete bl
cmp eax, 0xa74635b7
ja 0x1400dd030
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x10]
jmp 0x1400dd077
mov bl, 1
mov eax, 0xbf762fe5
nop dword [rax]
mov ecx, dword [0x141dd8ec0]
add ecx, dword [0x141dd8ec4]
or ecx, 0x50b73bc7
imul rcx, rax
shr rcx, 0x3c
and ecx, 0xfffffffb
cmp ecx, 0x6ec20e8b
ja 0x1400dd080
mov eax, ebx
add rsp, 0x30
pop rbx
pop rdi
pop rsi
ret
mov qword [rsp + 0x20], 0
xor esi, esi
lea rdx, [rsp + 0x20]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
nop word [rax + rax]
test sil, sil
jne 0x1400dd0d0
jmp 0x1400dd227
mov eax, dword [0x141dd8e90]
imul eax, dword [0x141dd8e94]
imul rcx, rax, 0x232c499
shr rcx, 0x20
sub eax, ecx
shr eax, 1
add eax, ecx
shr eax, 0x1f
or eax, 0xfbaa9b20
cmp eax, 0x7fe8cb86
jne 0x1400dd25c
jmp 0x1400dd2a0
mov qword [rsp + 0x20], 0
mov eax, dword [0x141dd8e58]
add eax, dword [0x141dd8e5c]
or eax, 0x4c2e6849
add eax, 0xfad2a91e
imul rax, rax, 0x653d6b9f
shr rax, 0x3e
cmp eax, 0x95ac5d3e
jne 0x1400dd14e
lea rdx, [rsp + 0x20]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
lea rsi, [rsp + 0x20]
mov rbx, qword [sym.imp.oleaut32.dll_GetErrorInfo]
nop word [rax + rax]
mov eax, dword [0x141dd8e60]
xor edx, edx
div dword [0x141dd8e64]
mov edi, eax
or edi, 0xffb57cce
and edi, 0xffb7fcce
xor ecx, ecx
mov rdx, rsi
call rbx
cmp edi, 0xd25b1f97
je 0x1400dd160
jmp 0x1400dd1de
mov eax, 0x92b41ccf
nop word cs:[rax + rax]
mov ecx, dword [0x141dd8e78]
xor ecx, dword [0x141dd8e7c]
or ecx, 0x5af25dd8
imul rcx, rax
shr rcx, 0x3f
or ecx, 0x800d72f8
cmp ecx, 0x758a8f22
jb 0x1400dd1a0
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0x20]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
mov eax, dword [0x141dd8ea0]
and eax, dword [0x141dd8ea4]
xor eax, 0x6a00
or eax, 0x8378058
and eax, 0x8937ebfa
cmp eax, 0x1a6e529
je 0x1400dd221
mov eax, dword [0x141dd8ea8]
mov ecx, dword [0x141dd8eac]
add eax, ecx
add eax, 0xab63dd4
xor eax, 0xa369efd1
ud2
ud2
ud2
mov eax, dword [0x141dd8e98]
imul eax, dword [0x141dd8e9c]
imul eax, eax, 0xba02136d
mov esi, 0x8f07689d
imul rsi, rax
shr rsi, 0x3e
add esi, 0x6b00a87
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0x20]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
cmp esi, 0x4ba5156e
jbe 0x1400dd227
mov qword [rsp + 0x20], 0
lea rdx, [rsp + 0x20]
xor ecx, ecx
call qword [sym.imp.oleaut32.dll_GetErrorInfo]
jmp 0x1400dd25c