Function at 0x14000da96
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xe8
mov qword [rsp + 0x88], r9
mov dword [rsp + 0x28], r8d
mov qword [rsp + 0xa0], rdx
mov qword [rsp + 0x80], rcx
mov ecx, 0x7d0
call fcn.140015329
mov qword [rsp + 0x58], rax
xor eax, eax
lea rcx, [rsp + 0x34]
mov byte [rcx - 4], al
mov dword [rcx], 0x1586c00b
mov dword [rcx + 4], 0x45c2ce47
mov dword [rcx + 8], 0x1585c301
mov dword [rcx + 0xc], 0x1bda8350
mov dword [rcx + 0x10], 0x15d5835f
mov dword [rcx + 0x14], 0x7c2c345
mov dword [rcx + 0x18], 0x35c28b48
cmp byte [rcx - 4], al
jne 0x14000dd28
mov esi, 1
xor ebx, ebx
mov r11d, 0xffffffff
mov r15d, 0x855d031c
mov r12d, 0xd6b6c4d5
mov r13d, 0x29493b2a
mov r9d, 0x270d50cb
mov ebp, dword [rsp + rsi*4 + 0x30]
mov ecx, ebp
xor ecx, r11d
mov edi, ebp
mov edx, ecx
and edx, 0x7aa2fce3
and ebp, r15d
or ebp, edx
xor ebp, r11d
or ebp, ecx
and ecx, 0x1c85534f
and edi, 0xe37aacb0
or edi, ecx
mov ecx, edi
xor ecx, 0x63022410
xor edi, 0xc854107
and edi, 0x8cfdc9a7
and ecx, 0x73023658
or ecx, edi
mov edi, ecx
xor edi, 0x8c4009a1
xor ecx, 0x21002008
and ecx, 0x21bde00e
and edi, 0xde421ff1
or edi, ecx
mov ecx, edi
xor ecx, 0x5a021ce1
or ecx, r15d
mov r14d, ecx
xor r14d, r11d
and ecx, 0x44614dd0
xor edi, 0x78825802
and edi, r14d
and r14d, 0x3a82b023
or r14d, ecx
mov r8d, r14d
xor r8d, 0xbb9eb22f
xor r14d, 0x994af6dc
and r14d, r8d
mov edx, ebp
mov ecx, r8d
and ecx, ebp
xor r8d, ebp
xor ebp, r11d
and edx, 0xdd2bbb0c
and ebp, 0x22d444f3
or ebp, edx
mov edx, r14d
xor edx, r11d
mov r10d, edx
and r10d, 0x42625ce0
and r14d, 0x3989a107
or r14d, r10d
mov eax, edi
xor eax, r11d
or edx, eax
and eax, 0xc6625ee8
and edi, 0x3880a003
or edi, eax
xor edi, r14d
xor edx, r11d
or edx, edi
mov eax, edx
xor eax, r11d
and eax, ebp
xor ebp, r11d
and ebp, edx
or ebp, eax
or r8d, ecx
mov eax, ebp
xor eax, r11d
mov ecx, eax
and ecx, r12d
and ebp, r13d
or ebp, ecx
mov ecx, r8d
xor ecx, r11d
or eax, r8d
and r8d, r12d
and ecx, r13d
or ecx, r8d
xor ecx, ebp
xor eax, r11d
or eax, ecx
mov ebp, eax
mov ecx, eax
xor ecx, 0x1711c42
and ecx, eax
xor eax, r11d
and eax, 0x86b85b31
and ebp, 0x7947a4ce
or ebp, eax
mov eax, ebp
xor eax, 0x400400
xor ebp, 0x301800
or ebp, 0xfe8ee3bd
mov edx, ebp
and edx, r9d
and eax, 0x700c00
or eax, edx
mov edx, ecx
xor edx, r11d
or ebp, edx
and edx, r9d
and ecx, 0xd8f2af34
or ecx, edx
xor ecx, eax
xor ebp, r11d
or ebp, ecx
mov eax, ebp
xor eax, r11d
and eax, 0x6f892505
and ebp, 0x9076dafa
or ebp, eax
xor ebp, 0x21b868cc
mov dword [rsp + rsi*4 + 0x30], ebp
movabs rax, 0x7072d494c34263a5
sub rbx, rax
movabs rdx, 0x446b58107b01ff31
add rbx, rdx
movabs rcx, 0x59368e3162a17945
sub rbx, rcx
sub rbx, rdx
add rbx, rax
movabs rax, 0xe984a179335838f4
add rbx, rax
add rbx, rcx
sub rbx, rax
inc rbx
inc rsi
cmp rsi, 8
jne 0x14000db3d
mov rcx, qword [rsp + 0x58]
lea rdx, [rsp + 0x34]
mov r8d, 0x1b
call fcn.140014dfa
mov eax, 4
lea rcx, [rsp + 0x30]
or rcx, rax
mov qword [rsp + 0x98], rcx
mov rcx, qword [rsp + 0x80]
lea rax, [rcx + 0x872]
mov qword [rsp + 0xd8], rax
lea rax, [rcx + 0x2bc]
mov qword [rsp + 0xd0], rax
lea rax, [rcx + 0xbe4]
mov qword [rsp + 0xc8], rax
cmp qword [rsp + 0x88], 0
mov eax, 0x1792fa16
mov edx, 0x2b095261
cmove edx, eax
mov dword [rsp + 0x78], edx
mov ebp, dword [rsp + 0x28]
test ebp, ebp
mov edx, 0x94aebe5f
cmovne edx, eax
mov dword [rsp + 0x74], edx
lea rax, [rcx + 0xbd4]
mov qword [rsp + 0xc0], rax
cmp ebp, 2
mov eax, 0x4c41f14
mov edx, 0x25485214
cmove edx, eax
lea rax, [rcx + 0xbc4]
mov qword [rsp + 0xb8], rax
cmp ebp, 1
mov eax, 0xa1ac449a
mov ecx, 0x4b67388d
cmove ecx, eax
mov dword [rsp + 0x70], ecx
mov eax, 0x78145504
mov r13d, 0xffffffff
mov esi, 0x6d498b3f
mov r14d, 0xc8fd8fdb
mov r15d, 0x564cfe34
mov dword [rsp + 0x64], edx
mov ecx, eax
cmp eax, 0x25485213
jg 0x14000de93
cmp ecx, 0xb57a949f
jle 0x14000decc
cmp ecx, 0xb57a94a0
je 0x14000e0c2
cmp ecx, 0x4c41f14
je 0x14000e0ea
mov eax, ecx
cmp ecx, 0x1792fa16
jne 0x14000de15
mov dword [rsp + 0x7c], r12d
mov qword [rsp + 0xe0], rbp
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0xb0]
cmp byte [rax], 0
mov eax, 0x40c2cd17
mov ecx, 0xa684c011
cmove eax, ecx
mov rcx, qword [rsp + 0xa0]
mov qword [rsp + 0x90], rcx
jmp 0x14000de15
cmp ecx, 0x40c2cd16
jle 0x14000def7
cmp ecx, 0x40c2cd17
je 0x14000e102
mov eax, edx
cmp ecx, 0x4b67388d
je 0x14000de15
mov eax, ecx
cmp ecx, 0x78145504
jne 0x14000de15
mov eax, dword [rsp + 0x70]
jmp 0x14000de15
cmp ecx, 0x94aebe5f
je 0x14000e299
cmp ecx, 0xa1ac449a
je 0x14000e2c0
mov eax, ecx
cmp ecx, 0xa684c011
jne 0x14000de15
jmp 0x14000e2e9
cmp ecx, 0x25485214
je 0x14000e2d8
mov eax, ecx
cmp ecx, 0x2b095261
jne 0x14000de15
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x68], r12d
xor eax, eax
mov byte [rsp + 0x30], al
mov dword [rsp + 0x34], 0x4d96e9ba
mov dword [rsp + 0x38], 0x149fa9f9
mov dword [rsp + 0x3c], 0x11c6f5fc
mov ecx, 0x14c0a6aa
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x44], 0x148ae3bd
mov dword [rsp + 0x48], 0x11c6f7f6
mov dword [rsp + 0x4c], ecx
mov dword [rsp + 0x50], 0x34e686d9
cmp byte [rsp + 0x30], al
mov r9d, 0xfae6cf33
mov r14d, 0x51930cc
mov r15d, 0x92b674c0
mov r10d, 0xcb197926
mov r11d, 0x34e686d9
mov r12d, 0xeb492ac1
jne 0x14000e06e
xor r8d, r8d
mov edx, dword [rsp + r8*4 + 0x34]
mov edi, edx
xor edi, r13d
mov ebx, edi
and ebx, edx
mov ebp, edi
and ebp, ebx
xor ebx, edi
or ebx, ebp
mov ebp, ebx
xor ebp, r13d
and ebp, r10d
and ebx, r11d
or ebx, ebp
mov eax, ebx
xor eax, r10d
and eax, ebx
and edx, 0x97ceb773
mov ecx, edi
and ecx, 0x6831488c
or ecx, edx
xor ecx, 0xa32831aa
and edi, r11d
or edi, ecx
mov ecx, edi
xor ecx, r13d
and ecx, r12d
and edi, 0x14b6d53e
or edi, ecx
mov edx, edi
xor edx, 0x400813e
xor edi, r12d
mov ebp, eax
xor ebp, r13d
mov ecx, ebp
and ecx, r15d
and eax, esi
or eax, ecx
mov ecx, ebp
and ecx, edi
xor ebp, edi
and edi, r15d
and edx, esi
or edx, edi
mov edi, 0xbbd313bd
mov esi, eax
xor esi, r13d
and esi, edx
xor edx, r13d
and edx, eax
or edx, esi
mov esi, 0x6d498b3f
or ebp, ecx
mov eax, ebp
xor eax, r13d
and eax, edi
and ebp, 0x442cec42
or ebp, eax
mov eax, ebp
xor eax, 0x4024cc02
xor ebp, edi
mov ecx, edx
xor ecx, r13d
mov ebx, ecx
and ebx, r14d
and edx, r9d
or edx, ebx
or ecx, ebp
and ebp, r14d
and eax, r9d
or eax, ebp
xor eax, edx
xor ecx, r13d
or ecx, eax
mov dword [rsp + r8*4 + 0x34], ecx
inc r8
cmp r8, 8
jne 0x14000df8f
mov rcx, qword [rsp + 0x58]
add rcx, 0x1b
mov r8, qword [rsp + 0x88]
mov qword [rsp + 0x20], r8
mov rdx, qword [rsp + 0x98]
mov r9, qword [rsp + 0xd0]
call fcn.14001aa39
mov eax, 0xb57a94a0
mov ebx, 0x1b
mov edx, dword [rsp + 0x64]
mov r14d, 0xc8fd8fdb
mov r15d, 0x564cfe34
mov r12d, dword [rsp + 0x68]
mov rbp, qword [rsp + 0x28]
jmp 0x14000de15
inc ebx
mov rax, qword [rsp + 0x58]
cmp byte [rax + rbx], 0
mov eax, 0xb57a94a0
mov ecx, 0x1792fa16
cmove eax, ecx
mov rbp, qword [rsp + 0xa8]
mov r12d, ebx
jmp 0x14000de15
mov eax, 0x1792fa16
mov r12d, 0x1b
mov rbp, qword [rsp + 0xc0]
jmp 0x14000de15
mov qword [rsp + 0x68], rbx
mov qword [rsp + 0x28], rbp
mov ecx, 0x3e8
call fcn.140015329
xor ecx, ecx
mov byte [rsp + 0x30], cl
mov dword [rsp + 0x34], 0x78fe64dc
mov dword [rsp + 0x38], 0xa9f47fb
cmp byte [rsp + 0x30], cl
jne 0x14000e248
xor r8d, r8d
mov ecx, dword [rsp + r8*4 + 0x34]
mov edi, ecx
xor edi, r13d
mov esi, ecx
mov ebp, ecx
xor ebp, 0x2f229589
and ebp, ecx
mov edx, edi
and edx, 0x4136083b
and ecx, 0xbec9f7c4
or ecx, edx
xor ecx, r13d
or ecx, edi
and edi, 0x26008588
and esi, 0x9221001
or esi, edi
mov edx, esi
xor edx, 0x1021000
xor esi, 0xf6ddeffe
mov ebx, ebp
xor ebx, r13d
mov edi, esi
and edi, r14d
and edx, 0x27021000
or edx, edi
or esi, ebx
and ebx, r14d
and ebp, 0x37027024
or ebp, ebx
xor ebp, edx
xor esi, r13d
or esi, ebp
mov edx, esi
xor edx, r13d
and edx, 0x41300833
and esi, 0x60008
or esi, edx
mov ebx, esi
xor ebx, 0x1240001
xor esi, 0xfedbfffe
mov edx, ecx
xor edx, r13d
and edx, esi
mov ebp, ebx
xor ebp, ecx
and ebp, ebx
and ecx, ebx
or ecx, edx
mov edx, ebp
and edx, ecx
xor ecx, ebp
or ecx, edx
mov edi, ecx
xor edi, r13d
mov edx, ecx
xor edx, 0xcf8dae69
and edx, ecx
or ecx, 0x30725196
mov ebp, edx
xor ebp, r13d
mov ebx, ecx
and ebx, r15d
and edi, 0x89810049
or edi, ebx
or ecx, ebp
and ebp, r15d
and edx, 0xa9b301cb
or edx, ebp
xor edx, edi
xor ecx, r13d
or ecx, edx
mov edx, ecx
xor edx, r13d
and edx, 0x7ca56d2b
and ecx, 0x835a92d4
or ecx, edx
xor ecx, 0xf881dbf6
mov dword [rsp + r8*4 + 0x34], ecx
test r8, r8
mov r8d, 1
je 0x14000e139
mov r8, qword [rsp + 0xb0]
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x90], rax
mov rcx, rax
lea rdx, str._s__s__s
mov r9, qword [rsp + 0xa0]
call fcn.14001aa39
mov eax, 0xa684c011
mov edx, dword [rsp + 0x64]
mov esi, 0x6d498b3f
mov rbp, qword [rsp + 0x28]
mov rbx, qword [rsp + 0x68]
jmp 0x14000de15
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0xa8], rax
mov r12d, 0x1b
mov rbp, qword [rsp + 0xa8]
mov eax, dword [rsp + 0x78]
jmp 0x14000de15
mov eax, 0x1792fa16
mov r12d, 0x1b
mov rbp, qword [rsp + 0xb8]
jmp 0x14000de15
mov r12d, 0x1b
xor ebp, ebp
mov eax, dword [rsp + 0x74]
jmp 0x14000de15
xor eax, eax
lea rcx, [rsp + 0x34]
mov byte [rcx - 4], al
mov dword [rcx], 0x2299683a
mov dword [rcx + 4], 0x23dd3c3d
mov dword [rcx + 8], 0x508b3969
cmp byte [rcx - 4], al
jne 0x14000e528
mov edi, 1
xor r12d, r12d
mov esi, 0xffffffff
mov r9d, 0x6adf9d6b
mov r8d, 0xa14ba3d7
mov r10d, dword [rsp + rdi*4 + 0x30]
mov ebx, r10d
xor ebx, esi
mov eax, ebx
and eax, 0xed664b91
mov ebp, r10d
and ebp, 0x1299b46e
or ebp, eax
mov eax, ebp
xor eax, 0x10109040
xor ebp, 0x6c640291
and ebp, 0x6eed26bf
and eax, 0x9112d940
or eax, ebp
mov ecx, eax
xor ecx, 0x488024b5
xor eax, 0x81009940
and eax, 0xa76d9b4a
and ecx, 0x589264b5
or ecx, eax
mov ebp, ecx
xor ebp, 0x50802481
xor ecx, 0x16c9902
and ecx, 0x97ed936
mov edx, 0xf68126c9
and ebp, edx
or ebp, ecx
mov eax, ebp
xor eax, 0x5986c57f
xor ebp, edx
and ebp, eax
and ebx, 0x860d54c6
and r10d, 0x79f2ab39
or r10d, ebx
mov eax, r10d
xor eax, 0x50f00809
and eax, 0x50f81c49
xor r10d, 0x290ab770
or r10d, eax
mov eax, r10d
xor eax, esi
mov r13d, ebp
xor r13d, esi
mov ecx, r13d
and ecx, 0xbab0e397
mov r14d, ebp
mov edx, 0x454f1c68
and r14d, edx
or r14d, ecx
mov r15d, r14d
xor r15d, edx
mov ecx, r10d
and ecx, 0x2371e37
mov edx, 0xfdc8e1c8
and eax, edx
or eax, ecx
mov r11d, eax
xor r14d, 0x59057b64
and r14d, r15d
xor eax, 0x2351833
or eax, 0x1c4a670c
mov ebx, 0xe3b598f3
or r10d, ebx
xor r10d, eax
mov eax, r14d
xor eax, esi
mov ecx, eax
and ecx, r8d
and r14d, 0x5eb45c28
or r14d, ecx
or r13d, ebx
or eax, r13d
and r13d, r8d
and ebp, 0x1c004408
or ebp, r13d
xor ebp, r14d
xor eax, esi
or eax, ebp
mov ecx, eax
xor ecx, esi
mov ebp, 0xad8ca6c9
and ecx, ebp
mov ebx, 0x52735936
and eax, ebx
or eax, ecx
mov ecx, r10d
xor ecx, esi
and ecx, ebp
and r10d, ebx
or r10d, ecx
xor r11d, edx
xor r10d, eax
mov eax, r15d
and eax, r11d
xor r11d, r15d
or r11d, eax
mov eax, r11d
xor eax, esi
mov edx, 0x988ffcac
and eax, edx
and r11d, 0x67700353
or r11d, eax
mov eax, r10d
xor eax, esi
mov ecx, eax
mov ebp, 0x95206294
and ecx, ebp
and r10d, r9d
or r10d, ecx
mov ecx, r11d
xor ecx, 0x62500143
xor r11d, edx
or eax, r11d
and r11d, ebp
and ecx, r9d
or ecx, r11d
xor ecx, r10d
xor eax, esi
or eax, ecx
mov dword [rsp + rdi*4 + 0x30], eax
movabs rcx, 0xc1732bf5d20878de
mov rax, rcx
movabs rbp, 0x33305d6e4d20b7ff
sub rax, rbp
sub rax, r12
add rax, rbp
sub rcx, rax
movabs rdx, 0x34031c00067c24ad
mov rax, rdx
movabs rbp, 0x1a2045c328ad2793
sub rax, rbp
sub rax, rdx
add rax, rcx
lea r12, [rax + rbp]
inc r12
inc rdi
cmp rdi, 4
jne 0x14000e329
mov ecx, dword [rsp + 0x7c]
add rcx, qword [rsp + 0x58]
mov r9, qword [rsp + 0xe0]
lea rdx, [rsp + 0x34]
mov r8, qword [rsp + 0x90]
call fcn.14001aa39
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x80]
xor r8d, r8d
xor r9d, r9d
call fcn.14000d1b4
mov al, 1
add rsp, 0xe8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret