Function at 0x140002ce0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rdi
sub rsp, 0x20
cmp dword [0x140007408], 0
mov ebx, r8d
mov rbp, rdx
mov rdi, rcx
jne 0x140002d09
call fcn.140002730
mov dword [0x140007408], 1
mov ecx, ebx
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x50], r15
sub ecx, 0x80
je 0x140002d41
sub ecx, 0x40
je 0x140002d39
cmp ecx, 0x40
je 0x140002d31
mov eax, 0xfffff800
jmp 0x140003533
mov dword [rdi], 0xe
jmp 0x140002d47
mov dword [rdi], 0xc
jmp 0x140002d47
mov dword [rdi], 0xa
lea rsi, [rdi + 0x10]
shr ebx, 5
mov r10, rsi
mov qword [rdi + 8], rsi
xor r9d, r9d
lea r8, [rbp + 2]
sub r10, rbp
mov r15, rsi
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8]
movzx edx, byte [r8 + 1]
lea r8, [r8 + 4]
shl edx, 8
or edx, eax
movzx eax, byte [r8 - 5]
shl edx, 8
or edx, eax
lea eax, [r9*4]
shl edx, 8
inc r9d
movsxd rcx, eax
movzx eax, byte [rcx + rbp]
or edx, eax
mov dword [r10 + r8 - 6], edx
cmp r9d, ebx
jl 0x140002d70
mov eax, dword [rdi]
mov qword [rsp + 0x48], r14
cmp eax, 0xa
je 0x1400032fe
cmp eax, 0xc
je 0x140002ed2
cmp eax, 0xe
jne 0x14000352c
mov ebx, dword [rsi]
lea r11, [r15 + 0x20]
lea rsi, [0x1400073fc]
lea rdi, [0x1400073e0]
lea rax, [0x1400051e0]
nop word [rax + rax]
mov r10d, dword [r11 - 4]
lea r11, [r11 + 0x20]
movzx ecx, r10b
movzx r8d, byte [rcx + rax]
mov ecx, r10d
shr rcx, 0x18
shl r8d, 8
movzx ecx, byte [rcx + rax]
xor r8d, ecx
mov ecx, r10d
shr ecx, 0x10
movzx edx, cl
shl r8d, 8
movzx ecx, byte [rdx + rax]
xor r8d, ecx
mov ecx, r10d
shr ecx, 8
movzx edx, cl
shl r8d, 8
movzx ecx, byte [rdx + rax]
xor r8d, ecx
xor ebx, r8d
xor ebx, dword [rdi]
add rdi, 4
mov ecx, ebx
mov dword [r11 - 0x20], ebx
xor ecx, dword [r11 - 0x3c]
mov dword [r11 - 0x1c], ecx
xor ecx, dword [r11 - 0x38]
mov dword [r11 - 0x18], ecx
xor ecx, dword [r11 - 0x34]
mov r8d, ecx
shr rcx, 0x18
mov dword [r11 - 0x14], r8d
movzx r9d, byte [rcx + rax]
mov ecx, r8d
shl r9d, 8
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r9d, ecx
mov ecx, r8d
shl r9d, 8
shr ecx, 8
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r9d, ecx
movzx ecx, r8b
shl r9d, 8
movzx edx, byte [rcx + rax]
xor r9d, edx
xor r9d, dword [r11 - 0x30]
mov dword [r11 - 0x10], r9d
xor r9d, dword [r11 - 0x2c]
mov dword [r11 - 0xc], r9d
xor r9d, dword [r11 - 0x28]
mov dword [r11 - 8], r9d
xor r9d, r10d
mov dword [r11 - 4], r9d
cmp rdi, rsi
jl 0x140002df0
jmp 0x14000352c
mov r8d, dword [r15 + 0x14]
lea rax, [0x1400051e0]
movzx ecx, r8b
movzx edi, byte [rcx + rax]
mov ecx, r8d
shr rcx, 0x18
shl edi, 8
movzx ecx, byte [rcx + rax]
xor edi, ecx
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
shl edi, 8
movzx ecx, byte [rdx + rax]
xor edi, ecx
mov ecx, r8d
shr ecx, 8
movzx edx, cl
shl edi, 8
movzx ecx, byte [rdx + rax]
xor edi, ecx
xor edi, dword [rsi]
xor edi, dword [0x1400073e0]
mov r10d, edi
mov dword [r15 + 0x18], edi
xor r10d, dword [r15 + 4]
mov r11d, r10d
mov dword [r15 + 0x1c], r10d
xor r11d, dword [r15 + 8]
mov ebx, r11d
mov dword [r15 + 0x20], r11d
xor ebx, dword [r15 + 0xc]
mov ebp, ebx
mov dword [r15 + 0x24], ebx
xor ebp, dword [r15 + 0x10]
mov ecx, ebp
mov dword [r15 + 0x28], ebp
xor ecx, r8d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r15 + 0x2c], r9d
movzx esi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl esi, 8
movzx ecx, byte [rcx + rax]
xor esi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl esi, 8
movzx ecx, byte [rdx + rax]
xor esi, ecx
movzx ecx, r8b
shl esi, 8
movzx edx, byte [rcx + rax]
xor esi, edx
xor esi, edi
xor esi, dword [0x1400073e4]
mov edi, esi
mov dword [r15 + 0x30], esi
xor edi, r10d
mov r14d, edi
mov dword [r15 + 0x34], edi
xor r14d, r11d
mov r10d, r14d
mov dword [r15 + 0x38], r14d
xor r10d, ebx
xor ebp, r10d
mov dword [r15 + 0x3c], r10d
xor r9d, ebp
mov dword [r15 + 0x40], ebp
movzx ecx, r9b
mov r8d, r9d
mov dword [r15 + 0x44], r9d
movzx ebx, byte [rcx + rax]
shl ebx, 8
mov ecx, r9d
shr rcx, 0x18
movzx ecx, byte [rcx + rax]
xor ebx, ecx
shr r8d, 8
shl ebx, 8
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor ebx, ecx
movzx ecx, r8b
shl ebx, 8
movzx edx, byte [rcx + rax]
xor ebx, edx
xor ebx, esi
xor ebx, dword [0x1400073e8]
xor edi, ebx
mov dword [r15 + 0x48], ebx
xor r14d, edi
mov dword [r15 + 0x4c], edi
mov r11d, r14d
mov dword [r15 + 0x50], r14d
xor r11d, r10d
mov r10d, r11d
mov dword [r15 + 0x54], r11d
xor r10d, ebp
mov ecx, r10d
mov dword [r15 + 0x58], r10d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r15 + 0x5c], r9d
movzx ebp, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl ebp, 8
movzx ecx, byte [rcx + rax]
xor ebp, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl ebp, 8
movzx ecx, byte [rdx + rax]
xor ebp, ecx
movzx ecx, r8b
shl ebp, 8
movzx edx, byte [rcx + rax]
xor ebp, edx
xor ebp, ebx
xor ebp, dword [0x1400073ec]
mov ebx, ebp
mov dword [r15 + 0x60], ebp
xor ebx, edi
mov edi, ebx
mov dword [r15 + 0x64], ebx
xor edi, r14d
mov esi, edi
mov dword [r15 + 0x68], edi
xor esi, r11d
mov r11d, esi
mov dword [r15 + 0x6c], esi
xor r11d, r10d
mov ecx, r11d
mov dword [r15 + 0x70], r11d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
mov dword [r15 + 0x74], r9d
movzx r14d, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl r14d, 8
movzx ecx, byte [rcx + rax]
xor r14d, ecx
mov ecx, r9d
shl r14d, 8
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r14d, ecx
shr r8d, 8
shl r14d, 8
movzx ecx, r8b
movzx edx, byte [rcx + rax]
xor r14d, edx
xor r14d, ebp
xor r14d, dword [0x1400073f0]
mov r10d, r14d
mov dword [r15 + 0x78], r14d
xor r10d, ebx
mov ebx, r10d
mov dword [r15 + 0x7c], r10d
xor ebx, edi
mov edi, ebx
mov dword [r15 + 0x80], ebx
xor edi, esi
mov esi, edi
mov dword [r15 + 0x84], edi
xor esi, r11d
mov ecx, esi
mov dword [r15 + 0x88], esi
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r15 + 0x8c], r9d
movzx ebp, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl ebp, 8
movzx ecx, byte [rcx + rax]
xor ebp, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl ebp, 8
movzx ecx, byte [rdx + rax]
xor ebp, ecx
movzx ecx, r8b
shl ebp, 8
movzx edx, byte [rcx + rax]
xor ebp, edx
xor ebp, r14d
xor ebp, dword [0x1400073f4]
mov r11d, ebp
mov dword [r15 + 0x90], ebp
xor r11d, r10d
mov r10d, r11d
mov dword [r15 + 0x94], r11d
xor r10d, ebx
mov ebx, r10d
mov dword [r15 + 0x98], r10d
xor ebx, edi
mov edi, ebx
mov dword [r15 + 0x9c], ebx
xor edi, esi
mov ecx, edi
mov dword [r15 + 0xa0], edi
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
mov dword [r15 + 0xa4], r9d
movzx r14d, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl r14d, 8
movzx ecx, byte [rcx + rax]
xor r14d, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl r14d, 8
movzx ecx, byte [rdx + rax]
xor r14d, ecx
shl r14d, 8
shr r8d, 8
movzx ecx, r8b
movzx edx, byte [rcx + rax]
xor r14d, edx
xor r14d, ebp
xor r14d, dword [0x1400073f8]
mov esi, r14d
mov dword [r15 + 0xa8], r14d
xor esi, r11d
mov r11d, esi
mov dword [r15 + 0xac], esi
xor r11d, r10d
mov ebp, r11d
mov dword [r15 + 0xb0], r11d
xor ebp, ebx
mov ebx, ebp
mov dword [r15 + 0xb4], ebp
xor ebx, edi
mov ecx, ebx
mov dword [r15 + 0xb8], ebx
xor ecx, r9d
mov r10d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r15 + 0xbc], r10d
movzx r9d, byte [rcx + rax]
mov ecx, r10d
shl r9d, 8
shr rcx, 0x18
movzx ecx, byte [rcx + rax]
xor r9d, ecx
mov ecx, r10d
shl r9d, 8
shr ecx, 0x10
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor r9d, ecx
movzx ecx, r8b
shl r9d, 8
movzx edx, byte [rcx + rax]
xor r9d, edx
xor r9d, r14d
xor r9d, dword [0x1400073fc]
mov dword [r15 + 0xc0], r9d
xor r9d, esi
mov dword [r15 + 0xc4], r9d
xor r9d, r11d
mov dword [r15 + 0xc8], r9d
xor r9d, ebp
mov dword [r15 + 0xcc], r9d
xor r9d, ebx
mov dword [r15 + 0xd0], r9d
xor r9d, r10d
mov dword [r15 + 0xd4], r9d
jmp 0x14000352c
mov esi, dword [rsi]
lea r14, [r15 + 0x10]
lea r15, [0x140007410]
lea rbp, [0x1400073e8]
lea rax, [0x1400051e0]
nop dword [rax]
mov r8d, dword [r14 - 4]
movzx ecx, r8b
movzx ebx, byte [rcx + rax]
mov ecx, r8d
shr rcx, 0x18
shl ebx, 8
movzx ecx, byte [rcx + rax]
xor ebx, ecx
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
shl ebx, 8
movzx ecx, byte [rdx + rax]
xor ebx, ecx
mov ecx, r8d
shr ecx, 8
movzx edx, cl
shl ebx, 8
movzx ecx, byte [rdx + rax]
xor ebx, ecx
xor ebx, dword [rbp - 8]
xor ebx, esi
mov r10d, ebx
mov dword [r14], ebx
xor r10d, dword [r14 - 0xc]
mov r11d, r10d
mov dword [r14 + 4], r10d
xor r11d, dword [r14 - 8]
mov ecx, r11d
mov dword [r14 + 8], r11d
xor ecx, r8d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r14 + 0xc], r9d
movzx edi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl edi, 8
movzx ecx, byte [rcx + rax]
xor edi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl edi, 8
movzx ecx, byte [rdx + rax]
xor edi, ecx
movzx ecx, r8b
shl edi, 8
movzx edx, byte [rcx + rax]
xor edi, edx
xor edi, dword [rbp - 4]
xor edi, ebx
mov ebx, edi
mov dword [r14 + 0x10], edi
xor ebx, r10d
mov r10d, ebx
mov dword [r14 + 0x14], ebx
xor r10d, r11d
mov ecx, r10d
mov dword [r14 + 0x18], r10d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
mov dword [r14 + 0x1c], r9d
movzx esi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl esi, 8
movzx ecx, byte [rcx + rax]
xor esi, ecx
mov ecx, r9d
shr ecx, 0x10
shl esi, 8
movzx edx, cl
movzx ecx, byte [rdx + rax]
xor esi, ecx
shl esi, 8
shr r8d, 8
movzx ecx, r8b
lea r14, [r14 + 0x50]
movzx edx, byte [rcx + rax]
xor esi, edx
xor esi, edi
xor esi, dword [rbp]
mov r11d, esi
mov dword [r14 - 0x30], esi
xor r11d, ebx
mov ebx, r11d
mov dword [r14 - 0x2c], r11d
xor ebx, r10d
mov ecx, ebx
mov dword [r14 - 0x28], ebx
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r14 - 0x24], r9d
movzx edi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl edi, 8
movzx ecx, byte [rcx + rax]
xor edi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl edi, 8
movzx ecx, byte [rdx + rax]
xor edi, ecx
movzx ecx, r8b
shl edi, 8
movzx edx, byte [rcx + rax]
xor edi, edx
xor edi, dword [rbp + 4]
xor edi, esi
mov r10d, edi
mov dword [r14 - 0x20], edi
xor r10d, r11d
mov r11d, r10d
mov dword [r14 - 0x1c], r10d
xor r11d, ebx
mov ecx, r11d
mov dword [r14 - 0x18], r11d
xor ecx, r9d
mov r9d, ecx
mov r8d, ecx
movzx ecx, cl
shr r8d, 8
mov dword [r14 - 0x14], r9d
movzx esi, byte [rcx + rax]
mov ecx, r9d
shr rcx, 0x18
shl esi, 8
movzx ecx, byte [rcx + rax]
xor esi, ecx
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
shl esi, 8
movzx ecx, byte [rdx + rax]
xor esi, ecx
movzx ecx, r8b
shl esi, 8
movzx edx, byte [rcx + rax]
xor esi, edx
xor esi, dword [rbp + 8]
add rbp, 0x14
xor esi, edi
mov ecx, esi
mov dword [r14 - 0x10], esi
xor ecx, r10d
mov dword [r14 - 0xc], ecx
xor ecx, r11d
mov dword [r14 - 8], ecx
xor ecx, r9d
mov dword [r14 - 4], ecx
cmp rbp, r15
jl 0x140003320
mov r14, qword [rsp + 0x48]
xor eax, eax
mov r15, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
pop rbp
pop rbx
ret