Function at 0x140001320
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
mov qword [rsp + 0x10], rdx
push rdi
push r12
push r13
push r14
push r15
mov r13, qword [rcx + 8]
mov ebp, 0x6531c21e
mov dword [r13 + 0x10], 0x8b911be
mov qword [rsp + 0x38], r13
lea r14, [r13 + 0x10]
mov dword [r13], ebp
mov dword [r13 + 4], 0x88be3220
mov dword [r13 + 8], 0xa7ee135b
mov dword [r13 + 0xc], 0x6b84aeed
mov dword [r13 + 0x14], 0xf4e405f
mov dword [r13 + 0x18], 0xb1e927f8
mov dword [r13 + 0x1c], 0xf57d888a
mov eax, dword [rcx + 4]
cmp eax, 0xa
je 0x140001913
cmp eax, 0xc
je 0x1400014c0
cmp eax, 0xe
je 0x1400013af
mov eax, 0xffffffff
jmp 0x140001b3e
lea r11, [r13 + 0x20]
mov edi, 7
lea rbx, [0x14002a4f0]
lea rax, [0x140029ef0]
nop word [rax + rax]
mov r10d, dword [r11 - 4]
lea r11, [r11 + 0x20]
movzx ecx, r10b
lea rbx, [rbx + 4]
movzx r8d, byte [rcx + rax]
mov ecx, r10d
shr rcx, 0x18
shl r8d, 8
movzx ecx, byte [rcx + rax]
xor r8d, ecx
mov ecx, r10d
shr ecx, 0x10
movzx edx, cl
shl r8d, 8
movzx ecx, byte [rdx + rax]
xor r8d, ecx
mov ecx, r10d
shr ecx, 8
movzx edx, cl
shl r8d, 8
movzx ecx, byte [rdx + rax]
xor r8d, ecx
xor r8d, dword [rbx - 4]
xor r8d, ebp
mov ecx, r8d
mov dword [r11 - 0x20], r8d
xor ecx, dword [r11 - 0x3c]
mov ebp, r8d
mov dword [r11 - 0x1c], ecx
xor ecx, dword [r11 - 0x38]
mov dword [r11 - 0x18], ecx
xor ecx, dword [r11 - 0x34]
mov r8d, ecx
shr rcx, 0x18
mov dword [r11 - 0x14], r8d
movzx r9d, byte [rcx + rax]
mov ecx, r8d
shl r9d, 8
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r9d, ecx
mov ecx, r8d
shl r9d, 8
shr ecx, 8
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r9d, ecx
movzx ecx, r8b
shl r9d, 8
movzx edx, byte [rcx + rax]
xor r9d, edx
xor r9d, dword [r11 - 0x30]
mov dword [r11 - 0x10], r9d
xor r9d, dword [r11 - 0x2c]
mov dword [r11 - 0xc], r9d
xor r9d, dword [r11 - 0x28]
mov dword [r11 - 8], r9d
xor r9d, r10d
mov dword [r11 - 4], r9d
sub rdi, 1
jne 0x1400013d0
jmp 0x140001b3c
movzx eax, byte [0x140029eff]
movzx esi, byte [0x140029f4f]
shl esi, 8
xor esi, eax
movzx eax, byte [0x140029f3e]
shl esi, 8
xor esi, eax
movzx eax, byte [0x140029f30]
shl esi, 8
xor esi, eax
xor esi, dword [0x14002a4f0]
xor esi, ebp
mov r10d, esi
mov dword [r13 + 0x18], esi
xor r10d, 0x88be3220
mov r11d, r10d
mov dword [r13 + 0x1c], r10d
xor r11d, 0xa7ee135b
mov ebx, r11d
mov dword [r13 + 0x20], r11d
xor ebx, 0x6b84aeed
mov edi, ebx
mov dword [r13 + 0x24], ebx
xor edi, 0x8b911be
mov eax, edi
mov dword [r13 + 0x28], edi
xor eax, 0xf4e405f
mov r9d, eax
movzx ecx, al
mov r8d, eax
lea rax, [0x140029ef0]
shr r8d, 8
mov dword [r13 + 0x2c], r9d
movzx ebp, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl ebp, 8
movzx ecx, byte [rcx + rax]
xor ebp, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl ebp, 8
movzx ecx, byte [rdx + rax]
xor ebp, ecx
movzx ecx, r8b
shl ebp, 8
movzx edx, byte [rcx + rax]
xor ebp, edx
xor ebp, esi
xor ebp, dword [0x14002a4f4]
mov dword [r13 + 0x30], ebp
mov r14d, ebp
xor r14d, r10d
mov dword [r13 + 0x34], r14d
mov r15d, r14d
xor r15d, r11d
mov dword [r13 + 0x38], r15d
mov r12d, r15d
xor r12d, ebx
mov rbx, qword [rsp + 0x38]
mov dword [r13 + 0x3c], r12d
mov r13d, r12d
xor r13d, edi
mov ecx, r13d
xor ecx, r9d
mov dword [rbx + 0x40], r13d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
mov dword [rbx + 0x44], r9d
movzx r10d, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl r10d, 8
movzx ecx, byte [rcx + rax]
xor r10d, ecx
mov ecx, r9d
shl r10d, 8
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r10d, ecx
shr r8d, 8
movzx ecx, r8b
shl r10d, 8
movzx edx, byte [rcx + rax]
xor r10d, edx
xor r10d, ebp
xor r10d, dword [0x14002a4f8]
xor r14d, r10d
mov dword [rbx + 0x48], r10d
xor r15d, r14d
mov dword [rbx + 0x4c], r14d
xor r12d, r15d
mov dword [rbx + 0x50], r15d
xor r13d, r12d
mov dword [rbx + 0x54], r12d
xor r9d, r13d
mov dword [rbx + 0x58], r13d
movzx ecx, r9b
mov r8d, r9d
shr r8d, 8
mov dword [rbx + 0x5c], r9d
movzx esi, byte [rcx + rax]
shl esi, 8
mov ecx, r9d
shr rcx, 0x18
movzx ecx, byte [rcx + rax]
xor esi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl esi, 8
movzx ecx, byte [rdx + rax]
xor esi, ecx
movzx ecx, r8b
shl esi, 8
movzx edx, byte [rcx + rax]
xor esi, edx
xor esi, dword [0x14002a4fc]
xor esi, r10d
mov dword [rbx + 0x60], esi
mov r10d, esi
xor r10d, r14d
mov dword [rbx + 0x64], r10d
mov r11d, r10d
xor r11d, r15d
mov dword [rbx + 0x68], r11d
mov ebx, r11d
xor ebx, r12d
mov r12, qword [rsp + 0x38]
mov edi, ebx
xor edi, r13d
mov ecx, edi
xor ecx, r9d
mov dword [r12 + 0x6c], ebx
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r12 + 0x70], edi
mov dword [r12 + 0x74], r9d
movzx ebp, byte [rcx + rax]
mov ecx, r9d
shl ebp, 8
shr rcx, 0x18
movzx ecx, byte [rcx + rax]
xor ebp, ecx
mov ecx, r9d
shl ebp, 8
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor ebp, ecx
movzx ecx, r8b
shl ebp, 8
movzx edx, byte [rcx + rax]
xor ebp, edx
xor ebp, dword [0x14002a500]
xor ebp, esi
mov dword [r12 + 0x78], ebp
mov esi, ebp
xor esi, r10d
mov r10d, esi
mov dword [r12 + 0x7c], esi
xor r10d, r11d
mov r11d, r10d
mov dword [r12 + 0x80], r10d
xor r11d, ebx
mov ebx, r11d
mov dword [r12 + 0x84], r11d
xor ebx, edi
mov ecx, ebx
mov dword [r12 + 0x88], ebx
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r12 + 0x8c], r9d
movzx r14d, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl r14d, 8
movzx ecx, byte [rcx + rax]
xor r14d, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl r14d, 8
movzx ecx, byte [rdx + rax]
xor r14d, ecx
movzx ecx, r8b
shl r14d, 8
movzx edx, byte [rcx + rax]
xor r14d, edx
xor r14d, dword [0x14002a504]
xor r14d, ebp
mov edi, r14d
mov dword [r12 + 0x90], r14d
xor edi, esi
mov esi, edi
mov dword [r12 + 0x94], edi
xor esi, r10d
mov r10d, esi
mov dword [r12 + 0x98], esi
xor r10d, r11d
mov r11d, r10d
mov dword [r12 + 0x9c], r10d
xor r11d, ebx
mov ecx, r11d
mov dword [r12 + 0xa0], r11d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r12 + 0xa4], r9d
movzx r15d, byte [rcx + rax]
mov ecx, r9d
shl r15d, 8
shr rcx, 0x18
movzx ecx, byte [rcx + rax]
xor r15d, ecx
mov ecx, r9d
shl r15d, 8
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r15d, ecx
movzx ecx, r8b
shl r15d, 8
movzx edx, byte [rcx + rax]
xor r15d, edx
xor r15d, dword [0x14002a508]
xor r15d, r14d
mov ebx, r15d
mov dword [r12 + 0xa8], r15d
xor ebx, edi
mov edi, ebx
mov dword [r12 + 0xac], ebx
xor edi, esi
mov esi, edi
mov dword [r12 + 0xb0], edi
xor esi, r10d
mov ebp, esi
mov dword [r12 + 0xb4], esi
xor ebp, r11d
mov ecx, ebp
mov dword [r12 + 0xb8], ebp
xor ecx, r9d
mov r10d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r12 + 0xbc], r10d
movzx r9d, byte [rcx + rax]
mov ecx, r10d
shl r9d, 8
shr rcx, 0x18
movzx ecx, byte [rcx + rax]
xor r9d, ecx
mov ecx, r10d
shl r9d, 8
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r9d, ecx
movzx ecx, r8b
shl r9d, 8
movzx edx, byte [rcx + rax]
xor r9d, edx
xor r9d, dword [0x14002a50c]
xor r9d, r15d
mov dword [r12 + 0xc0], r9d
xor r9d, ebx
mov dword [r12 + 0xc4], r9d
xor r9d, edi
mov dword [r12 + 0xc8], r9d
xor r9d, esi
mov dword [r12 + 0xcc], r9d
xor r9d, ebp
mov dword [r12 + 0xd0], r9d
xor r9d, r10d
mov dword [r12 + 0xd4], r9d
jmp 0x140001b3c
lea r15, [0x14002a4f8]
mov r12d, 2
lea rax, [0x140029ef0]
nop word [rax + rax]
mov r8d, dword [r14 - 4]
movzx ecx, r8b
movzx ebx, byte [rcx + rax]
mov ecx, r8d
shr rcx, 0x18
shl ebx, 8
movzx ecx, byte [rcx + rax]
xor ebx, ecx
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
shl ebx, 8
movzx ecx, byte [rdx + rax]
xor ebx, ecx
mov ecx, r8d
shr ecx, 8
movzx edx, cl
shl ebx, 8
movzx ecx, byte [rdx + rax]
xor ebx, ecx
xor ebx, dword [r15 - 8]
xor ebx, ebp
mov r10d, ebx
mov dword [r14], ebx
xor r10d, dword [r14 - 0xc]
mov r11d, r10d
mov dword [r14 + 4], r10d
xor r11d, dword [r14 - 8]
xor r8d, r11d
mov dword [r14 + 8], r11d
mov r9d, r8d
movzx ecx, r8b
mov dword [r14 + 0xc], r9d
movzx edi, byte [rcx + rax]
shl edi, 8
mov ecx, r8d
shr rcx, 0x18
movzx ecx, byte [rcx + rax]
xor edi, ecx
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
shl edi, 8
shr r8d, 8
movzx ecx, byte [rdx + rax]
xor edi, ecx
movzx ecx, r8b
shl edi, 8
movzx edx, byte [rcx + rax]
xor edi, edx
xor edi, dword [r15 - 4]
xor edi, ebx
mov ebx, edi
mov dword [r14 + 0x10], edi
xor ebx, r10d
mov r10d, ebx
mov dword [r14 + 0x14], ebx
xor r10d, r11d
mov ecx, r10d
mov dword [r14 + 0x18], r10d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
mov dword [r14 + 0x1c], r9d
movzx esi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl esi, 8
movzx ecx, byte [rcx + rax]
xor esi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl esi, 8
movzx ecx, byte [rdx + rax]
xor esi, ecx
shl esi, 8
shr r8d, 8
movzx ecx, r8b
movzx edx, byte [rcx + rax]
xor esi, edx
lea r14, [r14 + 0x50]
xor esi, edi
xor esi, dword [r15]
lea r15, [r15 + 0x14]
mov r11d, esi
mov dword [r14 - 0x30], esi
xor r11d, ebx
mov ebx, r11d
mov dword [r14 - 0x2c], r11d
xor ebx, r10d
mov ecx, ebx
mov dword [r14 - 0x28], ebx
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r14 - 0x24], r9d
movzx edi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl edi, 8
movzx ecx, byte [rcx + rax]
xor edi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl edi, 8
movzx ecx, byte [rdx + rax]
xor edi, ecx
movzx ecx, r8b
shl edi, 8
movzx edx, byte [rcx + rax]
xor edi, edx
xor edi, dword [r15 - 0x10]
xor edi, esi
mov r10d, edi
mov dword [r14 - 0x20], edi
xor r10d, r11d
mov r11d, r10d
mov dword [r14 - 0x1c], r10d
xor r11d, ebx
mov ecx, r11d
mov dword [r14 - 0x18], r11d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r14 - 0x14], r9d
movzx ebp, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl ebp, 8
movzx ecx, byte [rcx + rax]
xor ebp, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl ebp, 8
movzx ecx, byte [rdx + rax]
xor ebp, ecx
movzx ecx, r8b
shl ebp, 8
movzx edx, byte [rcx + rax]
xor ebp, edx
xor ebp, dword [r15 - 0xc]
xor ebp, edi
mov ecx, ebp
mov dword [r14 - 0x10], ebp
xor ecx, r10d
mov dword [r14 - 0xc], ecx
xor ecx, r11d
mov dword [r14 - 8], ecx
xor ecx, r9d
mov dword [r14 - 4], ecx
sub r12, 1
jne 0x140001930
xor eax, eax
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
pop r15
pop r14
pop r13
pop r12
pop rdi
ret