Function at 0x1400dd980
Capabilities:
Encrypt data using aes
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push rbp
mov r9, rdx
mov rax, rcx
mov rbp, rsp
push r14
push r13
push r12
push rdi
push rsi
push rbx
mov r10d, dword [rdx]
bswap r10d
mov dword [rcx], r10d
mov edx, dword [rdx + 4]
and rsp, 0xfffffffffffffff0
bswap edx
mov dword [rcx + 4], edx
mov ecx, dword [r9 + 8]
mov r14d, edx
bswap ecx
mov dword [rax + 8], ecx
mov r11d, dword [r9 + 0xc]
mov ebx, r11d
bswap ebx
mov dword [rax + 0xc], ebx
cmp r8d, 0x80
je 0x1400dda28
mov r11d, dword [r9 + 0x10]
bswap r11d
mov dword [rax + 0x10], r11d
mov esi, dword [r9 + 0x14]
mov edi, esi
bswap edi
mov dword [rax + 0x14], edi
cmp r8d, 0xc0
je 0x1400ddea8
mov r11d, dword [r9 + 0x18]
bswap r11d
mov dword [rax + 0x18], r11d
mov r9d, dword [r9 + 0x1c]
bswap r9d
mov dword [rax + 0x1c], r9d
xor r9d, r9d
cmp r8d, 0x100
je 0x1400de2b8
lea rsp, [rbp - 0x30]
mov eax, r9d
pop rbx
pop rsi
pop rdi
pop r12
pop r13
pop r14
pop rbp
ret
mov r8d, r11d
lea r9, str.ccccwwww
movzx esi, r11b
mov edx, r11d
shr r8d, 0x18
movzx esi, byte [r9 + rsi*4]
movzx edi, dh
mov edx, r14d
mov r8d, dword [r9 + r8*4]
and r8d, 0xff00
or r8d, esi
mov esi, r11d
mov r11d, edi
shr esi, 0x10
movzx esi, sil
mov esi, dword [r9 + rsi*4]
and esi, 0xff0000
xor r8d, esi
xor r8d, r10d
mov r10d, dword [r9 + r11*4]
mov r11d, r8d
and r10d, 0xff000000
xor r11d, r10d
xor r11d, 0x1000000
xor edx, r11d
mov dword [rax + 0x10], r11d
mov r8d, edx
mov dword [rax + 0x14], edx
mov edx, ecx
xor edx, r8d
mov dword [rax + 0x18], edx
xor edx, ebx
movzx edi, dh
mov ebx, edx
mov dword [rax + 0x1c], edx
mov r10d, edi
mov r10d, dword [r9 + r10*4]
and r10d, 0xff0000
xor r10d, r11d
movzx r11d, dl
mov r11d, dword [r9 + r11*4]
and r11d, 0xff00
xor r10d, r11d
mov r11d, edx
shr r11d, 0x18
movzx r11d, byte [r9 + r11*4]
xor r10d, r11d
mov r11d, edx
shr r11d, 0x10
movzx r11d, r11b
mov r11d, dword [r9 + r11*4]
and r11d, 0xff000000
xor r10d, r11d
xor r10d, 0x2000000
xor ecx, r10d
xor r8d, r10d
mov dword [rax + 0x20], r10d
xor ebx, ecx
mov dword [rax + 0x24], r8d
movzx edi, bh
mov dword [rax + 0x2c], ebx
mov r11d, edi
mov dword [rax + 0x28], ecx
mov r11d, dword [r9 + r11*4]
and r11d, 0xff0000
xor r11d, r10d
movzx r10d, bl
mov r10d, dword [r9 + r10*4]
and r10d, 0xff00
xor r11d, r10d
mov r10d, ebx
shr r10d, 0x18
movzx r10d, byte [r9 + r10*4]
xor r11d, r10d
shr ebx, 0x10
movzx ebx, bl
mov r10d, dword [r9 + rbx*4]
and r10d, 0xff000000
xor r11d, r10d
xor r11d, 0x4000000
xor r8d, r11d
mov dword [rax + 0x30], r11d
xor edx, r8d
mov r10d, r8d
mov dword [rax + 0x34], r8d
xor r10d, ecx
movzx edi, dh
mov dword [rax + 0x3c], edx
mov dword [rax + 0x38], r10d
mov r10d, edi
mov r10d, dword [r9 + r10*4]
and r10d, 0xff0000
xor r10d, r11d
movzx r11d, dl
mov r11d, dword [r9 + r11*4]
and r11d, 0xff00
xor r10d, r11d
mov r11d, edx
shr r11d, 0x18
movzx r11d, byte [r9 + r11*4]
xor r10d, r11d
mov r11d, edx
shr r11d, 0x10
movzx r11d, r11b
mov r11d, dword [r9 + r11*4]
and r11d, 0xff000000
xor r10d, r11d
xor r10d, 0x8000000
xor ecx, r10d
xor r8d, r10d
mov dword [rax + 0x40], r10d
mov ebx, ecx
mov dword [rax + 0x44], r8d
xor ebx, edx
mov dword [rax + 0x48], ecx
movzx edi, bh
mov dword [rax + 0x4c], ebx
mov r11d, edi
mov r11d, dword [r9 + r11*4]
and r11d, 0xff0000
xor r11d, r10d
movzx r10d, bl
mov r10d, dword [r9 + r10*4]
and r10d, 0xff00
xor r11d, r10d
mov r10d, ebx
shr ebx, 0x10
shr r10d, 0x18
movzx ebx, bl
movzx r10d, byte [r9 + r10*4]
xor r11d, r10d
mov r10d, dword [r9 + rbx*4]
and r10d, 0xff000000
xor r11d, r10d
xor r11d, 0x10000000
xor r8d, r11d
mov dword [rax + 0x50], r11d
mov r10d, r8d
mov dword [rax + 0x54], r8d
xor r10d, ecx
xor edx, r8d
movzx edi, dh
mov dword [rax + 0x58], r10d
mov r10d, edi
mov dword [rax + 0x5c], edx
mov r10d, dword [r9 + r10*4]
and r10d, 0xff0000
xor r10d, r11d
movzx r11d, dl
mov r11d, dword [r9 + r11*4]
and r11d, 0xff00
xor r10d, r11d
mov r11d, edx
shr r11d, 0x18
movzx r11d, byte [r9 + r11*4]
xor r10d, r11d
mov r11d, edx
shr r11d, 0x10
movzx r11d, r11b
mov r11d, dword [r9 + r11*4]
and r11d, 0xff000000
xor r10d, r11d
xor r10d, 0x20000000
xor ecx, r10d
xor r8d, r10d
mov dword [rax + 0x60], r10d
mov ebx, ecx
mov dword [rax + 0x64], r8d
xor ebx, edx
mov dword [rax + 0x68], ecx
movzx edi, bh
mov dword [rax + 0x6c], ebx
mov r11d, edi
mov r11d, dword [r9 + r11*4]
and r11d, 0xff0000
xor r11d, r10d
movzx r10d, bl
mov r10d, dword [r9 + r10*4]
and r10d, 0xff00
xor r11d, r10d
mov r10d, ebx
shr ebx, 0x10
shr r10d, 0x18
movzx ebx, bl
movzx r10d, byte [r9 + r10*4]
xor r11d, r10d
mov r10d, dword [r9 + rbx*4]
and r10d, 0xff000000
xor r11d, r10d
mov r10d, ecx
xor r11d, 0x40000000
xor r8d, r11d
mov dword [rax + 0x70], r11d
xor edx, r8d
xor r10d, r8d
mov dword [rax + 0x74], r8d
movzx edi, dh
mov dword [rax + 0x78], r10d
mov ebx, edx
mov r10d, edi
mov dword [rax + 0x7c], edx
mov r10d, dword [r9 + r10*4]
and r10d, 0xff0000
xor r10d, r11d
movzx r11d, dl
mov r11d, dword [r9 + r11*4]
and r11d, 0xff00
xor r10d, r11d
mov r11d, edx
shr r11d, 0x18
movzx r11d, byte [r9 + r11*4]
xor r10d, r11d
mov r11d, edx
shr r11d, 0x10
movzx r11d, r11b
mov r11d, dword [r9 + r11*4]
and r11d, 0xff000000
xor r10d, r11d
add r10d, 0x80000000
xor ecx, r10d
xor r8d, r10d
mov dword [rax + 0x80], r10d
xor ebx, ecx
mov dword [rax + 0x84], r8d
movzx edi, bh
mov dword [rax + 0x8c], ebx
mov r11d, edi
mov dword [rax + 0x88], ecx
mov r11d, dword [r9 + r11*4]
and r11d, 0xff0000
xor r11d, r10d
movzx r10d, bl
mov r10d, dword [r9 + r10*4]
and r10d, 0xff00
xor r11d, r10d
mov r10d, ebx
shr ebx, 0x10
shr r10d, 0x18
movzx ebx, bl
movzx r10d, byte [r9 + r10*4]
xor r11d, r10d
mov r10d, dword [r9 + rbx*4]
and r10d, 0xff000000
xor r11d, r10d
mov r10d, ecx
xor r11d, 0x1b000000
xor r8d, r11d
mov dword [rax + 0x90], r11d
xor edx, r8d
xor r10d, r8d
mov dword [rax + 0x94], r8d
movzx edi, dh
mov dword [rax + 0x98], r10d
mov r10d, edi
mov dword [rax + 0x9c], edx
mov r10d, dword [r9 + r10*4]
and r10d, 0xff0000
xor r10d, r11d
movzx r11d, dl
mov r11d, dword [r9 + r11*4]
and r11d, 0xff00
xor r10d, r11d
mov r11d, edx
shr r11d, 0x18
movzx r11d, byte [r9 + r11*4]
xor r10d, r11d
mov r11d, edx
shr r11d, 0x10
movzx r11d, r11b
mov r9d, dword [r9 + r11*4]
and r9d, 0xff000000
xor r9d, r10d
xor r9d, 0x36000000
xor r8d, r9d
mov dword [rax + 0xa0], r9d
xor r9d, ecx
mov dword [rax + 0xa8], r9d
xor r9d, edx
mov dword [rax + 0xac], r9d
mov r9d, 0xa
mov dword [rax + 0xa4], r8d
jmp 0x1400dda12
mov r8d, esi
lea r9, str.ccccwwww
movzx r12d, sil
mov edx, esi
shr r8d, 0x18
movzx r12d, byte [r9 + r12*4]
mov r8d, dword [r9 + r8*4]
and r8d, 0xff00
or r8d, r12d
mov r12d, esi
movzx esi, dh
mov edx, r14d
shr r12d, 0x10
movzx r12d, r12b
mov r12d, dword [r9 + r12*4]
and r12d, 0xff0000
xor r8d, r12d
xor r10d, r8d
mov r8d, esi
mov r8d, dword [r9 + r8*4]
and r8d, 0xff000000
xor r8d, r10d
mov r10d, ecx
xor r8d, 0x1000000
xor edx, r8d
mov dword [rax + 0x18], r8d
xor r10d, edx
mov dword [rax + 0x1c], edx
mov dword [rax + 0x20], r10d
xor r10d, ebx
mov ebx, r11d
xor ebx, r10d
mov dword [rax + 0x24], r10d
mov dword [rax + 0x28], ebx
xor ebx, edi
movzx esi, bh
mov r12d, ebx
mov dword [rax + 0x2c], ebx
mov esi, esi
mov esi, dword [r9 + rsi*4]
and esi, 0xff0000
xor r8d, esi
movzx esi, bl
mov esi, dword [r9 + rsi*4]
and esi, 0xff00
xor r8d, esi
mov esi, ebx
shr esi, 0x18
movzx esi, byte [r9 + rsi*4]
xor r8d, esi
mov esi, ebx
shr esi, 0x10
movzx esi, sil
mov esi, dword [r9 + rsi*4]
and esi, 0xff000000
xor r8d, esi
mov esi, r10d
xor r8d, 0x2000000
xor ecx, r8d
xor edx, r8d
mov dword [rax + 0x30], r8d
xor esi, ecx
mov r14d, ecx
mov dword [rax + 0x38], ecx
mov dword [rax + 0x3c], esi
mov esi, r11d
xor esi, ecx
mov dword [rax + 0x34], edx
xor r12d, esi
mov dword [rax + 0x40], esi
mov ecx, r12d
mov dword [rax + 0x44], r12d
movzx edi, ch
mov ecx, r14d
mov edi, edi
mov edi, dword [r9 + rdi*4]
and edi, 0xff0000
xor r8d, edi
movzx edi, r12b
mov edi, dword [r9 + rdi*4]
and edi, 0xff00
xor r8d, edi
mov edi, r12d
shr r12d, 0x10
shr edi, 0x18
movzx r12d, r12b
movzx edi, byte [r9 + rdi*4]
xor r8d, edi
mov edi, dword [r9 + r12*4]
and edi, 0xff000000
xor r8d, edi
mov edi, r8d
xor edi, 0x4000000
xor edx, edi
mov dword [rax + 0x48], edi
xor r10d, edx
xor ecx, edx
mov dword [rax + 0x4c], edx
xor esi, r10d
mov dword [rax + 0x50], ecx
mov dword [rax + 0x58], esi
mov esi, ebx
xor esi, r10d
mov dword [rax + 0x54], r10d
mov ecx, esi
mov dword [rax + 0x5c], esi
movzx ecx, ch
mov r8d, ecx
mov ecx, r14d
mov r8d, dword [r9 + r8*4]
and r8d, 0xff0000
xor r8d, edi
movzx edi, sil
mov edi, dword [r9 + rdi*4]
and edi, 0xff00
xor r8d, edi
mov edi, esi
shr edi, 0x18
movzx edi, byte [r9 + rdi*4]
xor r8d, edi
mov edi, esi
shr edi, 0x10
movzx edi, dil
mov edi, dword [r9 + rdi*4]
and edi, 0xff000000
xor r8d, edi
mov edi, r10d
xor r8d, 0x8000000
xor ecx, r8d
xor r11d, r8d
xor edx, r8d
mov dword [rax + 0x60], r8d
xor edi, ecx
mov dword [rax + 0x64], edx
mov r13d, edx
mov dword [rax + 0x6c], edi
mov edi, esi
xor edi, r11d
mov dword [rax + 0x68], ecx
mov edx, edi
mov dword [rax + 0x74], edi
movzx esi, dh
mov edx, r13d
mov dword [rax + 0x70], r11d
mov esi, esi
mov esi, dword [r9 + rsi*4]
and esi, 0xff0000
xor r8d, esi
movzx esi, dil
mov esi, dword [r9 + rsi*4]
and esi, 0xff00
xor r8d, esi
mov esi, edi
shr esi, 0x18
shr edi, 0x10
movzx esi, byte [r9 + rsi*4]
xor r8d, esi
movzx esi, dil
mov esi, dword [r9 + rsi*4]
and esi, 0xff000000
xor r8d, esi
mov esi, r8d
mov r8d, ecx
xor esi, 0x10000000
xor edx, esi
mov dword [rax + 0x78], esi
xor r8d, edx
xor ebx, edx
xor r10d, edx
mov dword [rax + 0x7c], edx
mov dword [rax + 0x80], r8d
mov r8d, r11d
movzx edi, bh
xor r8d, r10d
mov dword [rax + 0x84], r10d
mov dword [rax + 0x88], r8d
mov r8d, edi
mov edi, ebx
mov r8d, dword [r9 + r8*4]
mov dword [rax + 0x8c], ebx
and r8d, 0xff0000
xor r8d, esi
movzx esi, bl
mov esi, dword [r9 + rsi*4]
and esi, 0xff00
xor r8d, esi
mov esi, ebx
shr esi, 0x18
movzx esi, byte [r9 + rsi*4]
xor r8d, esi
mov esi, ebx
shr esi, 0x10
movzx esi, sil
mov esi, dword [r9 + rsi*4]
and esi, 0xff000000
xor r8d, esi
mov esi, r10d
xor r8d, 0x20000000
xor ecx, r8d
xor edx, r8d
mov dword [rax + 0x90], r8d
xor r11d, ecx
xor esi, ecx
mov dword [rax + 0x94], edx
mov r14d, edx
xor edi, r11d
mov dword [rax + 0x9c], esi
mov edx, edi
mov dword [rax + 0xa4], edi
movzx esi, dh
mov edx, r14d
mov dword [rax + 0xa0], r11d
mov esi, esi
mov dword [rax + 0x98], ecx
mov esi, dword [r9 + rsi*4]
and esi, 0xff0000
xor r8d, esi
movzx esi, dil
mov esi, dword [r9 + rsi*4]
and esi, 0xff00
xor r8d, esi
mov esi, edi
shr esi, 0x18
movzx esi, byte [r9 + rsi*4]
xor r8d, esi
shr edi, 0x10
movzx edi, dil
mov esi, dword [r9 + rdi*4]
and esi, 0xff000000
xor r8d, esi
mov esi, r8d
xor esi, 0x40000000
xor edx, esi
mov dword [rax + 0xa8], esi
mov r8d, edx
mov dword [rax + 0xac], edx
mov edx, ecx
xor r10d, r8d
xor edx, r8d
xor ebx, r10d
mov dword [rax + 0xb0], edx
xor r11d, r10d
movzx edx, bh
mov dword [rax + 0xb8], r11d
movzx r11d, bl
mov edx, edx
mov r11d, dword [r9 + r11*4]
mov dword [rax + 0xbc], ebx
mov edx, dword [r9 + rdx*4]
mov dword [rax + 0xb4], r10d
and r11d, 0xff00
and edx, 0xff0000
xor edx, esi
xor edx, r11d
mov r11d, ebx
shr ebx, 0x10
shr r11d, 0x18
movzx ebx, bl
movzx r11d, byte [r9 + r11*4]
mov r9d, dword [r9 + rbx*4]
xor edx, r11d
and r9d, 0xff000000
xor edx, r9d
mov r9d, 0xc
add edx, 0x80000000
xor r8d, edx
mov dword [rax + 0xc0], edx
xor edx, ecx
mov dword [rax + 0xc8], edx
xor edx, r10d
mov dword [rax + 0xc4], r8d
mov dword [rax + 0xcc], edx
jmp 0x1400dda12
lea rsi, [0x14015cce0]
add rax, 0x20
lea r9, str.ccccwwww
lea rdi, [rsi + 0x1c]
jmp 0x1400de35c
mov r8d, ebx
movzx edx, bh
movzx r13d, bl
shr r8d, 0x10
mov r12d, edx
movzx r13d, byte [r9 + r13*4]
movzx r8d, r8b
mov r12d, dword [r9 + r12*4]
mov r8d, dword [r9 + r8*4]
and r12d, 0xff00
and r8d, 0xff0000
or r8d, r12d
mov r12d, ebx
xor r8d, dword [rax - 0x30]
shr r12d, 0x18
mov r12d, dword [r9 + r12*4]
and r12d, 0xff000000
or r12d, r13d
mov r13d, dword [rax - 0x2c]
xor r8d, r12d
mov r12d, dword [rax - 0x28]
xor r13d, r8d
movd xmm0, r8d
xor r12d, r13d
movd xmm5, r13d
xor r11d, r12d
movd xmm1, r12d
punpckldq xmm0, xmm5
movd xmm4, r11d
punpckldq xmm1, xmm4
punpcklqdq xmm0, xmm1
movups xmmword [rax - 0x10], xmm0
mov r11d, dword [rax - 4]
add rsi, 4
add rax, 0x20
movzx r8d, r11b
mov r12d, r11d
mov edx, r11d
mov r8d, dword [r9 + r8*4]
shr r12d, 0x18
movzx edx, dh
movzx r12d, byte [r9 + r12*4]
and r8d, 0xff00
or r8d, r12d
mov r12d, r11d
xor r8d, dword [rsi - 4]
shr r12d, 0x10
movzx r12d, r12b
mov r12d, dword [r9 + r12*4]
and r12d, 0xff000000
xor r8d, r12d
mov r12d, edx
mov r12d, dword [r9 + r12*4]
and r12d, 0xff0000
xor r8d, r12d
xor r10d, r8d
xor r14d, r10d
movd xmm0, r10d
xor ecx, r14d
movd xmm3, r14d
xor ebx, ecx
movd xmm1, ecx
punpckldq xmm0, xmm3
movd xmm2, ebx
punpckldq xmm1, xmm2
punpcklqdq xmm0, xmm1
movups xmmword [rax - 0x20], xmm0
cmp rdi, rsi
jne 0x1400de2d8
mov r9d, 0xe
jmp 0x1400dda12