Function at 0x1403186b0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r13
push r14
push r15
movzx eax, byte [rcx + 1]
lea r12, str.MF_8ib_T
movzx esi, byte [rcx]
lea r13, [0x14046e150]
movzx ebp, byte [rcx + 4]
mov r8, rcx
movzx r14d, byte [rcx + 8]
mov r15, rdx
shl esi, 8
or esi, eax
shl ebp, 8
movzx eax, byte [rcx + 2]
shl r14d, 8
shl esi, 8
or esi, eax
movzx eax, byte [rcx + 3]
shl esi, 8
or esi, eax
movzx eax, byte [rcx + 5]
or ebp, eax
xor esi, 0xa3b1bac6
movzx eax, byte [rcx + 6]
shl ebp, 8
or ebp, eax
movzx eax, byte [rcx + 7]
shl ebp, 8
or ebp, eax
movzx eax, byte [rcx + 9]
or r14d, eax
xor ebp, 0x56aa3350
movzx eax, byte [rcx + 0xa]
shl r14d, 8
or r14d, eax
movzx eax, byte [rcx + 0xb]
shl r14d, 8
or r14d, eax
movzx eax, byte [rcx + 0xc]
movzx ecx, byte [rcx + 0xd]
xor r14d, 0x677d9197
shl eax, 8
or eax, ecx
movzx ecx, byte [r8 + 0xe]
shl eax, 8
or eax, ecx
movzx ecx, byte [r8 + 0xf]
shl eax, 8
or eax, ecx
xor eax, 0xb27022dc
sub r15, r12
nop
mov r8d, eax
xor r8d, dword [r12 - 8]
xor r8d, r14d
xor r8d, ebp
mov ecx, r8d
shr rcx, 0x18
movzx r9d, byte [rcx + r13]
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
shl r9d, 8
movzx ecx, byte [rdx + r13]
or r9d, ecx
mov ecx, r8d
shr ecx, 8
movzx edx, cl
shl r9d, 8
movzx ecx, byte [rdx + r13]
or r9d, ecx
movzx ecx, r8b
shl r9d, 8
movzx edx, byte [rcx + r13]
or r9d, edx
mov ecx, r9d
mov edi, r9d
ror ecx, 9
ror edi, 0x13
xor edi, ecx
xor edi, esi
xor edi, r9d
mov r8d, edi
xor r8d, dword [r12 - 4]
xor r8d, eax
xor r8d, r14d
mov ecx, r8d
shr rcx, 0x18
movzx r9d, byte [rcx + r13]
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
shl r9d, 8
movzx ecx, byte [rdx + r13]
or r9d, ecx
mov ecx, r8d
shr ecx, 8
movzx edx, cl
shl r9d, 8
movzx ecx, byte [rdx + r13]
or r9d, ecx
movzx ecx, r8b
shl r9d, 8
movzx edx, byte [rcx + r13]
or r9d, edx
mov ecx, r9d
mov ebx, r9d
ror ecx, 9
ror ebx, 0x13
xor ebx, ecx
xor ebx, ebp
xor ebx, r9d
mov r8d, ebx
xor r8d, edi
xor r8d, eax
xor r8d, dword [r12]
mov ecx, r8d
shr rcx, 0x18
movzx r9d, byte [rcx + r13]
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
shl r9d, 8
movzx ecx, byte [rdx + r13]
or r9d, ecx
mov ecx, r8d
shr ecx, 8
movzx edx, cl
shl r9d, 8
movzx ecx, byte [rdx + r13]
or r9d, ecx
movzx ecx, r8b
shl r9d, 8
movzx edx, byte [rcx + r13]
mov r8d, ebx
xor r8d, dword [r12 + 4]
or r9d, edx
xor r8d, edi
mov dword [r12 + r15], edi
mov ecx, r9d
mov dword [r12 + r15 + 4], ebx
ror ecx, 9
mov r11d, r9d
ror r11d, 0x13
xor r11d, ecx
xor r11d, r14d
xor r11d, r9d
xor r8d, r11d
mov dword [r12 + r15 + 8], r11d
mov ecx, r8d
shr rcx, 0x18
movzx r9d, byte [rcx + r13]
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
shl r9d, 8
movzx ecx, byte [rdx + r13]
or r9d, ecx
mov ecx, r8d
shr ecx, 8
movzx edx, cl
shl r9d, 8
movzx ecx, byte [rdx + r13]
or r9d, ecx
movzx ecx, r8b
shl r9d, 8
movzx edx, byte [rcx + r13]
or r9d, edx
mov edx, r11d
xor edx, dword [r12 + 8]
mov ecx, r9d
xor edx, ebx
ror ecx, 9
mov r10d, r9d
ror r10d, 0x13
xor r10d, ecx
xor r10d, eax
xor r10d, r9d
xor edx, r10d
mov dword [r12 + r15 + 0xc], r10d
mov eax, edx
shr rax, 0x18
movzx r8d, byte [rax + r13]
mov eax, edx
shr eax, 0x10
movzx ecx, al
shl r8d, 8
movzx eax, byte [rcx + r13]
or r8d, eax
mov eax, edx
shr eax, 8
movzx ecx, al
shl r8d, 8
movzx eax, byte [rcx + r13]
or r8d, eax
movzx eax, dl
shl r8d, 8
mov edx, r10d
xor edx, dword [r12 + 0xc]
xor edx, r11d
movzx ecx, byte [rax + r13]
or r8d, ecx
mov eax, r8d
mov esi, r8d
ror esi, 0x13
ror eax, 9
xor esi, eax
xor esi, edi
xor esi, r8d
xor edx, esi
mov eax, edx
shr rax, 0x18
movzx r8d, byte [rax + r13]
shl r8d, 8
mov eax, edx
shr eax, 0x10
movzx ecx, al
movzx eax, byte [rcx + r13]
or r8d, eax
mov eax, edx
shr eax, 8
movzx ecx, al
shl r8d, 8
movzx eax, byte [rcx + r13]
or r8d, eax
movzx eax, dl
shl r8d, 8
mov edx, r10d
xor edx, dword [r12 + 0x10]
movzx ecx, byte [rax + r13]
or r8d, ecx
mov eax, r8d
mov ebp, r8d
ror eax, 9
ror ebp, 0x13
xor ebp, eax
xor ebp, ebx
xor ebp, r8d
xor edx, ebp
xor edx, esi
mov eax, edx
shr rax, 0x18
movzx r8d, byte [rax + r13]
mov eax, edx
shr eax, 0x10
movzx ecx, al
shl r8d, 8
movzx eax, byte [rcx + r13]
or r8d, eax
mov eax, edx
shr eax, 8
movzx ecx, al
shl r8d, 8
movzx eax, byte [rcx + r13]
or r8d, eax
movzx eax, dl
shl r8d, 8
movzx ecx, byte [rax + r13]
or r8d, ecx
mov eax, r8d
mov r14d, r8d
ror eax, 9
ror r14d, 0x13
xor r14d, eax
xor r14d, r11d
xor r14d, r8d
mov edx, r14d
xor edx, dword [r12 + 0x14]
xor edx, ebp
xor edx, esi
mov eax, edx
shr rax, 0x18
movzx r8d, byte [rax + r13]
mov eax, edx
shr eax, 0x10
movzx ecx, al
shl r8d, 8
movzx eax, byte [rcx + r13]
or r8d, eax
mov eax, edx
shr eax, 8
movzx ecx, al
shl r8d, 8
movzx eax, byte [rcx + r13]
or r8d, eax
movzx eax, dl
shl r8d, 8
movzx ecx, byte [rax + r13]
or r8d, ecx
mov eax, r8d
mov ecx, r8d
ror eax, 0x13
ror ecx, 9
xor eax, ecx
xor eax, r10d
xor eax, r8d
mov dword [r12 + r15 + 0x10], esi
mov dword [r12 + r15 + 0x1c], eax
lea rcx, reloc.OLEAUT32.dll_SysReAllocString
mov dword [r12 + r15 + 0x14], ebp
mov dword [r12 + r15 + 0x18], r14d
add r12, 0x20
cmp r12, rcx
jl 0x140318780
mov rbx, qword [rsp + 0x28]
mov eax, 1
mov rbp, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
pop r15
pop r14
pop r13
pop r12
ret