Function at 0x1400db000
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, reloc.Mso20Win32Client.dll_Ordinal_255
lea rcx, [0x14004ec00]
push 0
pop rdx
push rcx
sub dword [rcx + 0x198], 0x3b17e05
add dword [rcx + 0xf8], 0xe741e46
add dword [rcx + 0x88], 0x6f3670c2
not dword [rcx + 0x178]
not dword [rcx + 0x64]
add dword [rcx + 0x360], 0x75903a7e
add dword [rcx + 0x298], 0x75793a5a
xor dword [rcx + 0x37c], 0x154d5e70
not dword [rcx + 0xd0]
add dword [rcx + 0xd4], 0x29883f0b
sub dword [rcx + reloc.Mso30Win32Client.dll_Ordinal_272], 0x1b5f17e1
not dword [rcx + 0x384]
not dword [rcx + 0x60]
sub dword [rcx + 0xfc], 0x1f051380
not dword [rcx + 0x1a4]
not dword [rcx + 0x1c8]
add dword [rcx + 0x2e0], 0x2ce639c4
not dword [rcx + 0x70]
not dword [rcx + 0x2fc]
add dword [rcx + 0x388], 0x75a83a29
xor dword [rcx + 0x16c], 0x46c066f1
not dword [rcx + 0x27c]
not dword [rcx + 0x58]
add dword [rcx + 0x258], 0x7b37212d
add dword [rcx + 0x50], 0x38b65389
sub dword [rcx + 0x144], 0x51ca321b
add dword [rcx + 0x15c], 0x4da46ef
xor dword [rcx + 0x32c], 0x9f62938
not dword [rcx + 0x1d0]
xor dword [rcx + 0xac], 0x77ae2
sub dword [rcx + 0x154], 0x64d8234f
not dword [rcx + 0x188]
sub dword [rcx + 0x160], 0x137d793a
not dword [rcx + 0x390]
not dword [rcx + 0x5c]
sub dword [rcx + 0x18], 0x14fe42d3
sub dword [rcx + 0xec], 0x58e07599
xor dword [rcx + 0x270], 0x396a791c
sub dword [rcx + 0x1ec], 0x53776fc2
sub dword [rcx + 0x2c4], 0x333f02ea
not dword [rcx + 0xdc]
xor dword [rcx + 0x90], 0x1adc697c
not dword [rcx + 0x134]
sub dword [rcx + 0x3f4], 0x2a9c3407
not dword [rcx + 0x274]
xor dword [rcx + 0x308], 0x655c3b04
not dword [rcx + 0x2b0]
sub dword [rcx + 0xb8], 0x435d0403
xor dword [rcx + 0x1b0], 0x7b0774c0
not dword [rcx + 0x94]
add dword [rcx + 0x260], 0x78ba244a
not dword [rcx + 0x44]
add dword [rcx + 0x320], 0x76293039
not dword [rcx + 0x24]
add dword [rcx + 0x1c], 0x204b663a
add dword [rcx + 0x214], 0x8d517bc
sub dword [rcx + 0x3dc], 0x29266918
add dword [rcx + 0x3b4], 0x7d4f074c
sub dword [rcx + 0x20], 0x40ed4f1e
xor dword [rcx + 0x3c0], 0x770b09d3
add dword [rcx + 0x3d8], 0x5c6b78aa
add dword [rcx + 0x358], 0xf164a65
xor dword [rcx + 0x244], 0x45681920
xor dword [rcx + 0x330], 0x5a9034e7
add dword [rcx + 0x334], 0x3a7d42b8
add dword [rcx + 0x340], 0x2adf310a
xor dword [rcx + 0x35c], 0x645c98
xor dword [rcx + 0x25c], 0x1a8f4e49
add dword [rcx + 0x2ec], 0x6e4b662d
xor dword [rcx + 0x2e4], 0x4813671e
sub dword [rcx + 0x1e0], 0x1574709a
not dword [rcx + 0x1e8]
xor dword [rcx + 0x28], 0xd986eb1
xor dword [rcx + 0x1a8], 0x60483102
add dword [rcx + 0x3c4], 0x14d303c7
xor dword [rcx + 0x238], 0x39090432
xor dword [rcx + 0x3a4], 0x311372fe
not dword [rcx + 0x2f4]
xor dword [rcx + 0x300], 0x36485b43
add dword [rcx + 0xc0], 0x74d43f6c
not dword [rcx + 0x224]
xor dword [rcx + 0x3b8], 0x5b0d63af
add dword [rcx + 0x108], 0x5a8b2fcf
sub dword [rcx + 0x120], 0x421833ca
not dword [rcx + 0x48]
sub dword [rcx + 0x174], 0x56e425ce
sub dword [rcx + 0x314], 0x45fb71ee
sub dword [rcx + 0x328], 0x54bc2cd2
add dword [rcx + 0x3c], 0x44e41bab
not dword [rcx + 0x218]
sub dword [rcx + 0x124], 0x7cbb61c7
add dword [rcx + 0x98], 0x63f466ad
xor dword [rcx + 0x294], 0x5fbb7584
not dword [rcx + 0x39c]
add dword [rcx + 0x234], 0x64120268
not dword [rcx + 0x168]
sub dword [rcx + reloc.Mso20Win32Client.dll_Ordinal_844], 0x1a74d89
add dword [rcx + 0x2cc], 0xc785066
not dword [rcx + 0xa0]
add dword [rcx + 0x140], 0x435f4500
xor dword [rcx + 0xe0], 0x573c7cb2
not dword [rcx + 0x40]
xor dword [rcx + 0x1e4], 0x76a25b55
add dword [rcx + 0x2b4], 0x3d3b72b4
sub dword [rcx + 0xcc], 0x12343f2f
not dword [rcx + 0x80]
sub dword [rcx + 0x3f8], 0x5ad9574c
sub dword [rcx + 0xe4], 0x1327348f
sub dword [rcx + 0x84], 0x38f714e4
add dword [rcx + 0x1b4], 0x718a10fc
not dword [rcx + 0x68]
add dword [rcx + 0x3d0], 0x245b6ab6
add dword [rcx + 0x6c], 0x459f3d21
add dword [rcx + 0x3f0], 0xd6b5f26
sub dword [rcx + 0x2b8], 0x276f5597
xor dword [rcx + 0x280], 0x1b5b6a85
xor dword [rcx + 0x184], 0x32e5328e
sub dword [rcx + 0x318], 0x5dfd3b6f
xor dword [rcx + 0x21c], 0x160079ab
sub dword [rcx + 0x1c0], 0x55db48ae
xor dword [rcx + 0x158], 0x3b745c41
sub dword [rcx + 0x1d4], 0x27d72e19
sub dword [rcx + 0x3e0], 0x6a5013f0
not dword [rcx + 0x254]
not dword [rcx + 0x28c]
not dword [rcx + 0x250]
add dword [rcx + 0x170], 0x702e005b
sub dword [rcx + 0x240], 0x42de62f0
sub dword [rcx + 0x1c4], 0x1ae97df8
add dword [rcx + 0x23c], 0x6b2c25ff
not dword [rcx + 0x8c]
add dword [rcx + 0x1ac], 0x54d53d39
xor dword [rcx + 0x368], 0x164e2815
not dword [rcx + 0x31c]
sub dword [rcx + 0x304], 0x7be121d0
xor dword [rcx + 0x3cc], 0xd205cff
not dword [rcx + 0xe8]
not dword [rcx + 0x104]
xor dword [rcx + 0x17c], 0x502434e7
sub dword [rcx + 0x10], 0x54e00056
not dword [rcx + 0x310]
sub dword [rcx + 0x148], 0x10f77f9d
not dword [rcx + 0x2e8]
xor dword [rcx + 0x378], 0x5d287d75
xor dword [rcx + 0x3e4], 0x6f3a0aaa
not dword [rcx + 0x3ac]
sub dword [rcx + 0x324], 0x381e6703
add dword [rcx + 0x180], 0x3eae0ee4
xor dword [rcx + 0xb0], 0x329070a7
add dword [rcx + 0x2bc], 0x49c357f3
not dword [rcx + 0x354]
xor dword [rcx + 0x30c], 0x7f92403f
not dword [rcx + 0x3a0]
sub dword [rcx + 0x14c], 0x26700af9
xor dword [rcx + 0x74], 0x2f27002f
not dword [rcx + 0x284]
not dword [rcx + 0x138]
xor dword [rcx + 0x34], 0x77047986
sub dword [rcx + 0x14], 0x968120e
add dword [rcx + 4], 0x6eea1f61
add dword [rcx + 0x9c], 0x7cba6c20
xor dword [rcx + 0x398], 0x240c4d6c
sub dword [rcx + 0x370], 0x4fac45db
sub dword [rcx + 0xd8], 0x4a417a5c
sub dword [rcx + 0x268], 0xae532db
sub dword [rcx + 0x380], 0x33b94540
xor dword [rcx + 0x24c], 0x6a595bfd
add dword [rcx + 0x10c], 0x62703728
not dword [rcx + 0xbc]
add dword [rcx + 0x200], 0x3a5a608d
xor dword [rcx + 0x26c], 0x473e42a3
not dword [rcx + 0x2f0]
add dword [rcx + 0x344], 0x6a652eaf
not dword [rcx + 0x114]
sub dword [rcx + 0x1dc], 0x420c4049
not dword [rcx + 0x100]
not dword [rcx + 0xf0]
add dword [rcx + 0x22c], 0x7fcd437f
not dword [rcx + 0xb4]
add dword [rcx + 0x12c], 0x2c513d38
not dword [rcx + 0x128]
sub dword [rcx + 0xf4], 0x61cc4add
not dword [rcx + 0x1a0]
add dword [rcx + 0x18c], 0x2cb92478
add dword [rcx + 0x1b8], 0x107448f2
add dword [rcx + 0x2dc], 0x36195906
add dword [rcx + 0xa8], 0x5b2568f1
xor dword [rcx + 0x210], 0x1c5b5442
xor dword [rcx + 0x11c], 0x7aad09f0
add dword [rcx + 0x1f4], 0x11e92fdc
not dword [rcx + 0x290]
sub dword [rcx + 0x3e8], 0x53a668f1
add dword [rcx + 0x3ec], 0x1b1b5d98
add dword [rcx + 0x190], 0x4581067a
not dword [rcx + 0x228]
not dword [rcx + 0x2a8]
add dword [rcx + 0x348], 0x7f64471e
add dword [rcx + 0x20c], 0x23870206
not dword [rcx + 0x7c]
add dword [rcx + 0x38c], 0x633f0c18
xor dword [rcx + 0x394], 0x340e04d1
sub dword [rcx + 0xc8], 0x19893fe3
not dword [rcx + 0x338]
xor dword [rcx + 0x204], 0x16b50965
not dword [rcx + 0x118]
sub dword [rcx + 0xc4], 0x2c122a31
not dword [rcx + 0x3bc]
sub dword [rcx + 0x1fc], 0x76a5a00
not dword [rcx + 0x3fc]
add dword [rcx + 0x78], 0x2aa84c4e
sub dword [rcx + 0x150], 0x7d82170f
not dword [rcx + 0x19c]
not dword [rcx + 0x1f8]
xor dword [rcx + 0x220], 0x34ec7ae9
add dword [rcx + 0x38], 0x1a2a3be2
xor dword [rcx + 0x3c8], 0x37654dbc
sub dword [rcx + 0x248], 0x49262035
xor dword [rcx + 0xc], 0x28e72e2
xor dword [rcx + 0x350], 0x63e2682f
not dword [rcx + 0xa4]
add dword [rcx + 0x194], 0x2cd214be
not dword [rcx + 0x3d4]
xor dword [rcx + 0x230], 0x2a2219a1
sub dword [rcx + 0x3b0], 0x30144f3b
not dword [rcx + 0x2c0]
not dword [rcx + 0x3a8]
xor dword [rcx + 0x2c], 0x4dc001a1
not dword [rcx + 8]
add dword [rcx + 0x288], 0x59585687
add dword [rcx + 0x54], 0x5b6e3f74
not dword [rcx + 0x1d8]
add dword [rcx + 0x2d8], 0x50776ca4
xor dword [rcx + 0x2a4], 0x68937fa5
xor dword [rcx + 0x1f0], 0x78b77db7
add dword [rcx + 0x1cc], 0x5c143ab6
not dword [rcx + 0x2d0]
xor dword [rcx + 0x374], 0x6534291b
sub dword [rcx + 0x4c], 0x6c2a1dc0
not dword [rcx + 0x13c]
not dword [rcx + 0x36c]
sub dword [rcx + 0x30], 0x3d054581
add dword [rcx + 0x2f8], 0x39a41850
not dword [rcx + 0x364]
add dword [rcx + 0x29c], 0x7acf73c6
sub dword [rcx + 0x2a0], 0x4971488f
not dword [rcx + 0x130]
not dword [rcx + 0x2ac]
xor dword [rcx], 0x49b27711
sub dword [rcx + 0x278], 0x5df538a4
xor dword [rcx + 0x164], 0x72225fe
xor dword [rcx + 0x33c], 0x79cc19d6
xor dword [rcx + 0x1bc], 0x134f7ce3
xor dword [rcx + 0x2d4], 0x22c0429f
add dword [rcx + 0x208], 0x78c434f9
sub dword [rcx + 0x2c8], 0x6b972084
add dword [rcx + 0x264], 0x18a00ced
add rdx, reloc.Mso20Win32Client.dll_Ordinal_255
add rcx, reloc.Mso20Win32Client.dll_Ordinal_255
cmp rdx, reloc.Mso20Win32Client.dll_Ordinal_255
jne reloc.Mso20Win32Client.dll_Ordinal_255
pop rcx
call fcn.1400da506
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax