Function at 0x14000197c
Capabilities:
Encode data using xor
Encrypt data using aes

Disassembly:
mov r10, rdx
mov r8, rcx
test rcx, rcx
je 0x140001c52
test rdx, rdx
je 0x140001c52
mov dword [rdx + 0xf0], ILIsParent
movzx eax, byte [rcx + 1]
movzx r9d, byte [rcx]
shl r9d, 8
xor r9d, eax
movzx eax, byte [rcx + 2]
shl r9d, 8
xor r9d, eax
movzx eax, byte [rcx + 3]
shl r9d, 8
xor r9d, eax
mov dword [rdx], r9d
movzx ecx, byte [rcx + 4]
movzx eax, byte [r8 + 5]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 6]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 7]
shl ecx, 8
xor ecx, eax
mov dword [rdx + 4], ecx
movzx eax, byte [r8 + 9]
movzx ecx, byte [r8 + 8]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0xa]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0xb]
shl ecx, 8
xor ecx, eax
mov dword [rdx + 8], ecx
movzx eax, byte [r8 + 0xd]
movzx ecx, byte [r8 + 0xc]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0xe]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0xf]
shl ecx, 8
xor ecx, eax
mov dword [rdx + 0xc], ecx
movzx eax, byte [r8 + 0x11]
movzx ecx, byte [r8 + 0x10]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0x12]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0x13]
shl ecx, 8
xor ecx, eax
mov dword [rdx + 0x10], ecx
movzx eax, byte [r8 + 0x15]
movzx ecx, byte [r8 + 0x14]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0x16]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0x17]
shl ecx, 8
xor ecx, eax
mov dword [rdx + 0x14], ecx
movzx eax, byte [r8 + 0x19]
movzx ecx, byte [r8 + 0x18]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0x1a]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0x1b]
shl ecx, 8
xor ecx, eax
mov dword [rdx + 0x18], ecx
movzx ecx, byte [r8 + 0x1c]
movzx eax, byte [r8 + 0x1d]
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0x1e]
lea r11, str.ccccwwww
shl ecx, 8
xor ecx, eax
movzx eax, byte [r8 + 0x1f]
shl ecx, 8
xor ecx, eax
mov dword [rdx + 0x1c], ecx
mov edx, ecx
mov eax, ecx
shr rax, 0x10
movzx ecx, al
mov eax, edx
mov r8d, dword [r11 + rcx*4]
shr rax, 8
movzx ecx, al
btc r8d, 0x18
mov eax, dword [r11 + rcx*4]
and r8d, 0xff000000
and eax, 0xff0000
xor r8d, eax
mov eax, edx
shr rax, 0x18
movzx eax, byte [r11 + rax*4]
xor r8d, eax
movzx eax, dl
mov ecx, dword [r11 + rax*4]
mov eax, dword [r10 + 0xc]
and ecx, 0xff00
xor r8d, ecx
xor r8d, r9d
lea r9, [r10 + 0x30]
mov dword [r10 + 0x20], r8d
xor r8d, dword [r10 + 4]
mov dword [r10 + 0x24], r8d
xor r8d, dword [r10 + 8]
xor eax, r8d
mov dword [r10 + 0x28], r8d
mov dword [r10 + 0x2c], eax
lea r10, [0x140259ff4]
mov edx, dword [r9 - 4]
mov eax, edx
shr rax, 0x10
movzx ecx, al
mov eax, edx
mov r8d, dword [r11 + rcx*4]
shr rax, 8
movzx ecx, al
and r8d, 0xff0000
mov eax, dword [r11 + rcx*4]
and eax, 0xff00
xor r8d, eax
mov eax, edx
shr rax, 0x18
mov ecx, dword [r11 + rax*4]
movzx eax, dl
and ecx, 0xff000000
xor r8d, ecx
movzx ecx, byte [r11 + rax*4]
mov eax, dword [r9 - 0x1c]
xor r8d, ecx
mov ecx, dword [r9 - 0x18]
xor r8d, dword [r9 - 0x20]
xor eax, r8d
mov dword [r9], r8d
lea r9, [r9 + 0x20]
mov dword [r9 - 0x1c], eax
xor ecx, eax
mov eax, dword [r9 - 0x34]
xor eax, ecx
mov dword [r9 - 0x18], ecx
mov dword [r9 - 0x14], eax
mov edx, dword [r9 - 0x14]
mov eax, edx
shr rax, 8
movzx ecx, al
mov eax, edx
mov r8d, dword [r11 + rcx*4]
shr rax, 0x10
movzx ecx, al
and r8d, 0xff0000
mov eax, dword [r11 + rcx*4]
and eax, 0xff000000
xor r8d, eax
mov eax, edx
shr rax, 0x18
movzx eax, byte [r11 + rax*4]
xor r8d, eax
movzx eax, dl
mov ecx, dword [r11 + rax*4]
and ecx, 0xff00
xor r8d, ecx
xor r8d, dword [r9 - 0x30]
xor r8d, dword [r10]
add r10, 4
mov dword [r9 - 0x10], r8d
mov eax, dword [r9 - 0x2c]
xor eax, r8d
mov dword [r9 - 0xc], eax
mov ecx, dword [r9 - 0x28]
xor ecx, eax
mov dword [r9 - 8], ecx
mov eax, dword [r9 - 0x24]
xor eax, ecx
mov dword [r9 - 4], eax
lea rax, [0x14025a00c]
cmp r10, rax
jne 0x140001b51
xor eax, eax
ret
or eax, 0xffffffff
ret