Function at 0x1400c5ec0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
test r8, r8
je 0x1400c6947
mov qword [rsp + 8], rcx
push rbx
push rdi
mov eax, 0x68
call fcn.1401c7cd0
sub rsp, rax
mov ebx, dword [rcx + 4]
mov rax, r8
mov r11d, dword [rcx + 8]
mov r10d, dword [rcx + 0xc]
mov edi, dword [rcx]
mov qword [rsp + 0x60], rbp
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x48], r13
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x38], r15
mov dword [rsp + 0x18], ebx
mov dword [rsp + 0x1c], r11d
mov dword [rsp + 0x20], r10d
nop dword [rax]
dec rax
movzx ecx, byte [rdx]
mov qword [rsp + 0x90], rax
movzx eax, byte [rdx + 1]
shl eax, 8
or ecx, eax
movzx r8d, byte [rdx + 4]
movzx eax, byte [rdx + 2]
shl eax, 0x10
or ecx, eax
movzx r9d, byte [rdx + 8]
movzx eax, byte [rdx + 3]
shl eax, 0x18
or ecx, eax
movzx eax, byte [rdx + 5]
shl eax, 8
or r8d, eax
mov dword [rsp + 0x88], ecx
movzx eax, byte [rdx + 6]
shl eax, 0x10
or r8d, eax
movzx eax, byte [rdx + 7]
shl eax, 0x18
or r8d, eax
mov eax, r10d
xor eax, r11d
mov dword [rsp + 4], r8d
and eax, ebx
xor eax, r10d
add eax, 0xd76aa478
add ecx, eax
movzx eax, byte [rdx + 9]
shl eax, 8
add ecx, edi
or r9d, eax
rol ecx, 7
movzx eax, byte [rdx + 0xa]
add ecx, ebx
shl eax, 0x10
or r9d, eax
movzx eax, byte [rdx + 0xb]
shl eax, 0x18
or r9d, eax
mov eax, r11d
xor eax, ebx
mov dword [rsp + 0x10], r9d
and eax, ecx
xor eax, r11d
add eax, r8d
lea r8d, [r10 - 0x173848aa]
movzx r10d, byte [rdx + 0xc]
add r8d, eax
movzx eax, byte [rdx + 0xd]
shl eax, 8
or r10d, eax
rol r8d, 0xc
movzx eax, byte [rdx + 0xe]
add r8d, ecx
shl eax, 0x10
or r10d, eax
movzx eax, byte [rdx + 0xf]
shl eax, 0x18
or r10d, eax
mov eax, ebx
xor eax, ecx
mov dword [rsp], r10d
and eax, r8d
xor eax, ebx
add eax, r9d
lea r9d, [r11 + 0x242070db]
movzx r11d, byte [rdx + 0x10]
add r9d, eax
movzx eax, byte [rdx + 0x11]
shl eax, 8
or r11d, eax
ror r9d, 0xf
movzx eax, byte [rdx + 0x12]
add r9d, r8d
shl eax, 0x10
or r11d, eax
movzx eax, byte [rdx + 0x13]
shl eax, 0x18
or r11d, eax
movzx edi, byte [rdx + 0x18]
movzx r13d, byte [rdx + 0x1c]
mov eax, r8d
xor eax, ecx
mov dword [rsp + 0xc], r11d
and eax, r9d
xor eax, ecx
add eax, 0xc1bdceee
add r10d, eax
movzx eax, byte [rdx + 0x15]
shl eax, 8
add r10d, ebx
movzx ebx, byte [rdx + 0x14]
or ebx, eax
ror r10d, 0xa
movzx eax, byte [rdx + 0x16]
add r10d, r9d
shl eax, 0x10
or ebx, eax
movzx eax, byte [rdx + 0x17]
shl eax, 0x18
or ebx, eax
mov eax, r8d
xor eax, r9d
mov dword [rsp + 0x98], ebx
and eax, r10d
xor eax, r8d
add eax, r11d
lea r11d, [rcx - 0xa83f051]
add r11d, eax
mov ecx, r9d
movzx eax, byte [rdx + 0x19]
xor ecx, r10d
shl eax, 8
or edi, eax
rol r11d, 7
movzx eax, byte [rdx + 0x1a]
add r11d, r10d
shl eax, 0x10
and ecx, r11d
or edi, eax
xor ecx, r9d
movzx eax, byte [rdx + 0x1b]
add ecx, 0x4787c62a
shl eax, 0x18
add ecx, ebx
or edi, eax
add ecx, r8d
movzx eax, byte [rdx + 0x1d]
mov r8d, r10d
shl eax, 8
xor r8d, r11d
or r13d, eax
mov dword [rsp + 8], edi
movzx eax, byte [rdx + 0x1e]
shl eax, 0x10
or r13d, eax
rol ecx, 0xc
movzx eax, byte [rdx + 0x1f]
add ecx, r11d
shl eax, 0x18
and r8d, ecx
or r13d, eax
xor r8d, r10d
movzx eax, byte [rdx + 0x21]
add r8d, 0xa8304613
add r8d, edi
shl eax, 8
movzx edi, byte [rdx + 0x20]
add r8d, r9d
or edi, eax
ror r8d, 0xf
movzx eax, byte [rdx + 0x22]
add r8d, ecx
shl eax, 0x10
or edi, eax
movzx eax, byte [rdx + 0x23]
shl eax, 0x18
or edi, eax
movzx ebx, byte [rdx + 0x24]
lea r9d, [r10 - 0x2b96aff]
movzx r12d, byte [rdx + 0x28]
lea r10d, [r11 + 0x698098d8]
movzx r14d, byte [rdx + 0x30]
mov eax, ecx
xor eax, r11d
mov dword [rsp + 0x24], edi
and eax, r8d
xor eax, r11d
lea r11d, [rcx - 0x74bb0851]
add eax, r13d
add r9d, eax
movzx eax, byte [rdx + 0x25]
shl eax, 8
or ebx, eax
ror r9d, 0xa
movzx eax, byte [rdx + 0x26]
add r9d, r8d
shl eax, 0x10
or ebx, eax
movzx eax, byte [rdx + 0x27]
shl eax, 0x18
or ebx, eax
mov eax, ecx
xor eax, r8d
mov dword [rsp + 0x14], ebx
and eax, r9d
xor eax, ecx
lea ecx, [r8 - 0xa44f]
add eax, edi
add r10d, eax
movzx eax, byte [rdx + 0x29]
shl eax, 8
or r12d, eax
rol r10d, 7
movzx eax, byte [rdx + 0x2a]
add r10d, r9d
shl eax, 0x10
or r12d, eax
movzx eax, byte [rdx + 0x2b]
shl eax, 0x18
or r12d, eax
mov eax, r8d
xor eax, r9d
and eax, r10d
xor eax, r8d
add eax, ebx
movzx ebx, byte [rdx + 0x2c]
add r11d, eax
movzx eax, byte [rdx + 0x2d]
shl eax, 8
or ebx, eax
rol r11d, 0xc
movzx eax, byte [rdx + 0x2e]
add r11d, r10d
shl eax, 0x10
or ebx, eax
movzx eax, byte [rdx + 0x2f]
shl eax, 0x18
or ebx, eax
mov eax, r9d
xor eax, r10d
mov dword [rsp + 0x28], ebx
and eax, r11d
xor eax, r9d
add eax, r12d
add ecx, eax
movzx eax, byte [rdx + 0x31]
shl eax, 8
or r14d, eax
ror ecx, 0xf
movzx eax, byte [rdx + 0x32]
add ecx, r11d
shl eax, 0x10
or r14d, eax
movzx eax, byte [rdx + 0x33]
shl eax, 0x18
or r14d, eax
mov eax, r11d
xor eax, r10d
and eax, ecx
movzx r15d, byte [rdx + 0x34]
xor eax, r10d
movzx esi, byte [rdx + 0x38]
add eax, ebx
movzx ebp, byte [rdx + 0x3c]
lea r8d, [r9 - 0x76a32842]
add r8d, eax
lea r9d, [r10 + 0x6b901122]
movzx eax, byte [rdx + 0x35]
lea rdx, [rdx + 0x40]
shl eax, 8
mov r10d, ecx
or r15d, eax
ror r8d, 0xa
movzx eax, byte [rdx - 0xa]
add r8d, ecx
shl eax, 0x10
xor r10d, r8d
or r15d, eax
movzx eax, byte [rdx - 9]
shl eax, 0x18
or r15d, eax
mov eax, r11d
xor eax, ecx
and eax, r8d
xor eax, r11d
add eax, r14d
add r9d, eax
movzx eax, byte [rdx - 7]
shl eax, 8
or esi, eax
rol r9d, 7
movzx eax, byte [rdx - 6]
add r9d, r8d
shl eax, 0x10
and r10d, r9d
or esi, eax
xor r10d, ecx
movzx eax, byte [rdx - 5]
add r10d, 0xfd987193
shl eax, 0x18
add r10d, r15d
or esi, eax
add r10d, r11d
movzx eax, byte [rdx - 3]
shl eax, 8
or ebp, eax
rol r10d, 0xc
movzx eax, byte [rdx - 2]
add r10d, r9d
shl eax, 0x10
or ebp, eax
movzx eax, byte [rdx - 1]
shl eax, 0x18
or ebp, eax
mov eax, r8d
xor eax, r9d
and eax, r10d
xor eax, r8d
add eax, 0xa679438e
add eax, esi
add ecx, eax
mov eax, r10d
xor eax, r9d
ror ecx, 0xf
add ecx, r10d
and eax, ecx
xor eax, r9d
add eax, 0x49b40821
add eax, ebp
add r8d, eax
mov eax, ecx
ror r8d, 0xa
add r8d, ecx
xor eax, r8d
and eax, r10d
xor eax, ecx
add eax, 0xf61e2562
add eax, dword [rsp + 4]
add r9d, eax
lea r11d, [rcx + 0x265e5a51]
rol r9d, 5
add r9d, r8d
mov eax, r8d
xor eax, r9d
and eax, ecx
lea ecx, [r8 - 0x16493856]
xor eax, r8d
add eax, 0xc040b340
add eax, dword [rsp + 8]
add r10d, eax
rol r10d, 9
add r10d, r9d
mov eax, r10d
xor eax, r9d
and eax, r8d
lea r8d, [r9 - 0x29d0efa3]
xor eax, r9d
add eax, ebx
add r11d, eax
mov eax, r10d
rol r11d, 0xe
add r11d, r10d
xor eax, r11d
and eax, r9d
lea r9d, [r10 + 0x2441453]
xor eax, r10d
add eax, dword [rsp + 0x88]
add ecx, eax
mov eax, r11d
ror ecx, 0xc
add ecx, r11d
xor eax, ecx
and eax, r10d
lea r10d, [r11 - 0x275e197f]
xor eax, r11d
add eax, dword [rsp + 0x98]
add r8d, eax
mov eax, ecx
rol r8d, 5
add r8d, ecx
xor eax, r8d
and eax, r11d
lea r11d, [rcx - 0x182c0438]
xor eax, ecx
add eax, r12d
add r9d, eax
rol r9d, 9
add r9d, r8d
mov eax, r9d
xor eax, r8d
and eax, ecx
lea ecx, [r8 + 0x21e1cde6]
xor eax, r8d
add eax, ebp
add r10d, eax
mov eax, r9d
rol r10d, 0xe
add r10d, r9d
xor eax, r10d
and eax, r8d
lea r8d, [r9 - 0x3cc8f82a]
xor eax, r9d
add eax, dword [rsp + 0xc]
add r11d, eax
mov eax, r10d
ror r11d, 0xc
add r11d, r10d
xor eax, r11d
and eax, r9d
xor eax, r10d
add eax, dword [rsp + 0x14]
add ecx, eax
mov eax, r11d
rol ecx, 5
add ecx, r11d
xor eax, ecx
and eax, r10d
xor eax, r11d
add eax, esi
add r8d, eax
rol r8d, 9
lea ebx, [r10 - 0xb2af279]
add r8d, ecx
lea r9d, [rcx - 0x561c16fb]
mov eax, r8d
xor eax, ecx
and eax, r11d
xor eax, ecx
lea r10d, [r8 - 0x3105c08]
add eax, dword [rsp]
add ebx, eax
mov eax, r8d
rol ebx, 0xe
add ebx, r8d
xor eax, ebx
and eax, ecx
xor eax, r8d
add eax, edi
lea edi, [r11 + 0x455a14ed]
add edi, eax
lea r11d, [rbx + 0x676f02d9]
ror edi, 0xc
mov eax, ebx
add edi, ebx
xor eax, edi
and eax, r8d
xor eax, ebx
add eax, r15d
add r9d, eax
mov eax, edi
rol r9d, 5
add r9d, edi
xor eax, r9d
and eax, ebx
mov ebx, dword [rsp + 0x28]
xor eax, edi
add eax, dword [rsp + 0x10]
add r10d, eax
rol r10d, 9
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r9d
and eax, edi
xor eax, r9d
add eax, r13d
add r11d, eax
rol r11d, 0xe
add r11d, r10d
xor ecx, r11d
mov eax, r11d
mov r8d, ecx
and r8d, r9d
xor r8d, r10d
add r8d, 0x8d2a4c8a
add r8d, r14d
add r8d, edi
ror r8d, 0xc
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, 0xfffa3942
add ecx, dword [rsp + 0x98]
add r9d, ecx
rol r9d, 4
add r9d, r8d
xor eax, r9d
add eax, 0x8771f681
add eax, dword [rsp + 0x24]
add r10d, eax
rol r10d, 0xb
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0x6d9d6122
add eax, ebx
add r11d, eax
rol r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add eax, 0xfde5380c
add eax, esi
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, 0xa4beea44
add ecx, dword [rsp + 4]
add r9d, ecx
rol r9d, 4
add r9d, r8d
xor eax, r9d
add eax, 0x4bdecfa9
add eax, dword [rsp + 0xc]
add r10d, eax
rol r10d, 0xb
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0xf6bb4b60
add eax, r13d
add r11d, eax
rol r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add eax, 0xbebfbc70
add eax, r12d
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor eax, r8d
xor ecx, r8d
add ecx, 0x289b7ec6
add ecx, r15d
add r9d, ecx
rol r9d, 4
add r9d, r8d
xor eax, r9d
add eax, 0xeaa127fa
add eax, dword [rsp + 0x88]
add r10d, eax
rol r10d, 0xb
add r10d, r9d
mov eax, r10d
mov ecx, r10d
xor eax, r8d
xor eax, r9d
add eax, 0xd4ef3085
add eax, dword [rsp]
add r11d, eax
rol r11d, 0x10
add r11d, r10d
xor ecx, r11d
mov eax, ecx
xor eax, r9d
add r9d, 0xd9d4d039
add eax, 0x4881d05
add eax, dword [rsp + 8]
add r8d, eax
mov eax, r11d
ror r8d, 9
add r8d, r11d
xor ecx, r8d
xor eax, r8d
add ecx, dword [rsp + 0x14]
add ecx, r9d
lea r9d, [r10 - 0x1924661b]
rol ecx, 4
add ecx, r8d
xor eax, ecx
add eax, r14d
add r9d, eax
lea r10d, [r11 + 0x1fa27cf8]
lea r11d, [r8 - 0x3b53a99b]
rol r9d, 0xb
add r9d, ecx
mov eax, r9d
xor eax, r8d
lea r8d, [rcx - 0xbd6ddbc]
xor eax, ecx
add eax, ebp
add r10d, eax
mov eax, r9d
rol r10d, 0x10
add r10d, r9d
xor eax, r10d
xor eax, ecx
lea ecx, [r9 + 0x432aff97]
add eax, dword [rsp + 0x10]
add r11d, eax
mov eax, r9d
not eax
ror r11d, 9
add r11d, r10d
lea r9d, [r10 - 0x546bdc59]
or eax, r11d
xor eax, r10d
add eax, dword [rsp + 0x88]
add r8d, eax
mov eax, r10d
not eax
rol r8d, 6
add r8d, r11d
lea r10d, [r11 - 0x36c5fc7]
or eax, r8d
xor eax, r11d
add eax, r13d
add ecx, eax
mov eax, r11d
not eax
rol ecx, 0xa
add ecx, r8d
lea r11d, [r8 + 0x655b59c3]
or eax, ecx
xor eax, r8d
add eax, esi
add r9d, eax
mov eax, r8d
not eax
rol r9d, 0xf
add r9d, ecx
lea r8d, [rcx - 0x70f3336e]
or eax, r9d
xor eax, ecx
add eax, dword [rsp + 0x98]
add r10d, eax
mov eax, ecx
not eax
ror r10d, 0xb
add r10d, r9d
lea ecx, [r9 - 0x100b83]
or eax, r10d
xor eax, r9d
add eax, r14d
add r11d, eax
mov eax, r9d
not eax
rol r11d, 6
add r11d, r10d
or eax, r11d
xor eax, r10d
add eax, dword [rsp]
add r8d, eax
mov eax, r10d
not eax
rol r8d, 0xa
add r8d, r11d
or eax, r8d
xor eax, r11d
add eax, r12d
add ecx, eax
rol ecx, 0xf
add ecx, r8d
lea r9d, [r10 - 0x7a7ba22f]
mov eax, r11d
lea r10d, [r11 + 0x6fa87e4f]
not eax
lea r11d, [r8 - 0x1d31920]
or eax, ecx
add ebx, 0xbd3af235
xor eax, r8d
add eax, dword [rsp + 4]
add r9d, eax
mov eax, r8d
not eax
ror r9d, 0xb
add r9d, ecx
lea r8d, [rcx - 0x5cfebcec]
or eax, r9d
xor eax, ecx
add eax, dword [rsp + 0x24]
add r10d, eax
mov eax, ecx
not eax
rol r10d, 6
add r10d, r9d
lea ecx, [r9 + 0x4e0811a1]
or eax, r10d
xor eax, r9d
add eax, ebp
add r11d, eax
mov eax, r9d
not eax
rol r11d, 0xa
add r11d, r10d
or eax, r11d
xor eax, r10d
add eax, dword [rsp + 8]
add r8d, eax
mov eax, r10d
not eax
rol r8d, 0xf
add r8d, r11d
or eax, r8d
mov r9d, r8d
xor eax, r11d
not r9d
add eax, r15d
add ecx, eax
mov eax, r11d
not eax
ror ecx, 0xb
add ecx, r8d
or eax, ecx
xor eax, r8d
add eax, 0xf7537e82
add eax, dword [rsp + 0xc]
add r10d, eax
mov eax, ecx
not eax
rol r10d, 6
add r10d, ecx
or r9d, r10d
xor r9d, ecx
add r9d, ebx
add r9d, r11d
rol r9d, 0xa
add r9d, r10d
or eax, r9d
xor eax, r10d
add eax, 0x2ad7d2bb
add eax, dword [rsp + 0x10]
add r8d, eax
mov eax, r10d
not eax
rol r8d, 0xf
add r8d, r9d
or eax, r8d
xor eax, r9d
add eax, 0xeb86d391
add eax, dword [rsp + 0x14]
add ecx, eax
ror ecx, 0xb
mov rax, qword [rsp + 0x80]
add ecx, r8d
add dword [rax], r10d
mov r10d, dword [rsp + 0x18]
mov edi, dword [rax]
add r10d, ecx
mov ecx, dword [rsp + 0x1c]
mov ebx, r10d
add ecx, r8d
mov dword [rax + 4], r10d
mov dword [rax + 8], ecx
mov r11d, ecx
mov dword [rsp + 0x1c], ecx
mov ecx, dword [rsp + 0x20]
add ecx, r9d
mov dword [rsp + 0x18], r10d
mov dword [rax + 0xc], ecx
mov r10d, ecx
mov rax, qword [rsp + 0x90]
mov dword [rsp + 0x20], ecx
test rax, rax
jne 0x1400c5f20
mov r15, qword [rsp + 0x38]
mov r14, qword [rsp + 0x40]
mov r13, qword [rsp + 0x48]
mov r12, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x68
pop rdi
pop rbx
ret