Function at 0x1400900b0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x98
mov r10b, 1
mov byte [rsp + 0xe8], 0
mov esi, 0x1e
mov dword [rsp], r10d
mov dword [rsp + 0xf8], esi
lea rbp, [0x140101150]
mov r13, rcx
mov qword [rsp + 0x88], 2
nop dword [rax]
lea eax, [rsi + 1]
movzx r8d, byte [rax + r13]
movzx eax, byte [rax + rbp]
mov ecx, eax
mov dword [rsp + 0x60], eax
mov eax, esi
xor ecx, r8d
mov dword [rsp + 0x5c], r8d
dec ecx
sar ecx, 8
mov dword [rsp + 0x58], ecx
movzx edx, byte [rax + r13]
movzx eax, byte [rax + rbp]
mov r9d, eax
mov dword [rsp + 0x54], eax
xor r9d, edx
mov dword [rsp + 0x50], edx
lea eax, [rsi - 1]
dec r9d
movzx r8d, byte [rax + r13]
movzx eax, byte [rax + rbp]
mov edx, eax
mov dword [rsp + 0x1c], eax
xor edx, r8d
sar r9d, 8
dec edx
mov dword [rsp + 0x18], r8d
sar edx, 8
lea eax, [rsi - 2]
movzx r8d, byte [rax + r13]
and r9b, cl
movzx eax, byte [rax + rbp]
and r9b, r10b
mov r10d, eax
mov dword [rsp + 0x10], eax
xor r10d, r8d
mov dword [rsp + 0x14], edx
lea eax, [rsi - 3]
mov dword [rsp + 0xc], r8d
dec r10d
mov dword [rsp + 0x20], r9d
sar r10d, 8
and r10b, r9b
and r10b, dl
movzx edx, byte [rax + r13]
movzx eax, byte [rax + rbp]
mov r8d, eax
mov dword [rsp + 0x48], eax
xor r8d, edx
mov dword [rsp + 0x44], edx
lea eax, [rsi - 4]
mov dword [rsp + 0x4c], r10d
movzx r9d, byte [rax + r13]
dec r8d
movzx eax, byte [rax + rbp]
mov edx, eax
mov dword [rsp + 0x3c], eax
xor edx, r9d
sar r8d, 8
dec edx
mov dword [rsp + 0x38], r9d
sar edx, 8
lea eax, [rsi - 5]
mov ecx, eax
and dl, r10b
movzx eax, byte [rax + r13]
and dl, r8b
mov dword [rsp + 4], eax
mov dword [rsp + 0x40], r8d
movzx r15d, byte [rcx + rbp]
mov r14d, r15d
mov dword [rsp + 8], edx
xor r14d, eax
lea eax, [rsi - 6]
mov ecx, eax
dec r14d
movzx eax, byte [rax + r13]
sar r14d, 8
mov dword [rsp + 0xf0], eax
movzx edi, byte [rcx + rbp]
mov r9d, edi
xor r9d, eax
lea eax, [rsi - 7]
movzx r8d, byte [rax + r13]
dec r9d
movzx eax, byte [rax + rbp]
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x2c], r8d
sar r9d, 8
and r9b, dl
mov edx, eax
xor edx, r8d
lea eax, [rsi - 8]
mov ecx, eax
dec edx
movzx eax, byte [rax + r13]
and r9b, r14b
mov dword [rsp + 0x24], eax
sar edx, 8
movzx r12d, byte [rcx + rbp]
mov dword [rsp + 0x28], edx
mov r10d, r12d
xor r10d, eax
mov dword [rsp + 0x34], r9d
lea eax, [rsi - 9]
dec r10d
movzx r8d, byte [rax + r13]
movzx eax, byte [rax + rbp]
mov dword [rsp + 0x7c], eax
sar r10d, 8
and r10b, r9b
mov dword [rsp + 0x78], r8d
and r10b, dl
mov edx, eax
lea eax, [rsi - 0xa]
mov dword [rsp + 0x80], r10d
xor edx, r8d
movzx r8d, byte [rax + r13]
movzx eax, byte [rax + rbp]
dec edx
mov ebx, eax
mov dword [rsp + 0x70], eax
xor ebx, r8d
sar edx, 8
lea eax, [rsi - 0xb]
mov dword [rsp + 0x6c], r8d
movzx r11d, byte [rax + r13]
dec ebx
sar ebx, 8
and bl, r10b
mov dword [rsp + 0x74], edx
movzx r10d, byte [rax + rbp]
and bl, dl
lea eax, [rsi - 0xc]
mov r8d, r10d
movzx edx, byte [rax + rbp]
xor r8d, r11d
movzx r9d, byte [rax + r13]
dec r8d
mov eax, edx
sar r8d, 8
xor eax, r9d
dec eax
sar eax, 8
and al, r8b
and al, bl
mov dword [rsp + 0x68], eax
lea eax, [rsi - 0xd]
mov ecx, eax
movzx ebp, byte [rax + r13]
lea rax, [0x140101150]
movzx esi, byte [rcx + rax]
mov eax, esi
xor eax, ebp
dec eax
sar eax, 8
mov dword [rsp + 0x64], eax
mov eax, dword [rsp + 0xf8]
add eax, 0xfffffff2
mov ecx, eax
movzx r13d, byte [rax + r13]
lea rax, [0x140101150]
movzx ecx, byte [rcx + rax]
sub r9d, edx
mov eax, dword [rsp + 0xf0]
sub r11d, r10d
sub eax, edi
mov edx, dword [rsp + 0x2c]
sar eax, 8
sub ebp, esi
and al, r14b
sub edx, dword [rsp + 0x30]
mov dword [rsp + 0xf0], eax
mov eax, dword [rsp + 4]
sub eax, r15d
mov r14d, dword [rsp + 0xf0]
sar eax, 8
or r14b, al
mov edi, dword [rsp + 0x18]
and r14b, byte [rsp + 8]
sub edi, dword [rsp + 0x1c]
mov eax, dword [rsp + 0xc]
sub eax, dword [rsp + 0x10]
sar eax, 8
and al, byte [rsp + 0x14]
sar edx, 8
sar r9d, 8
and r9b, r8b
sar edi, 8
or al, dil
mov r8d, dword [rsp + 0x68]
and al, byte [rsp + 0x20]
or r14b, al
sar r11d, 8
mov eax, dword [rsp + 0x24]
or r9b, r11b
sub eax, r12d
sar ebp, 8
sar eax, 8
and r9b, bl
and al, byte [rsp + 0x28]
or r14b, r9b
or al, dl
mov r9d, dword [rsp + 0x78]
and al, byte [rsp + 0x34]
mov edx, dword [rsp + 0x44]
or r14b, al
sub edx, dword [rsp + 0x48]
mov eax, dword [rsp + 0x38]
sub eax, dword [rsp + 0x3c]
sub r9d, dword [rsp + 0x7c]
sar eax, 8
and al, byte [rsp + 0x40]
sar edx, 8
or al, dl
sar r9d, 8
and al, byte [rsp + 0x4c]
mov edx, dword [rsp + 0x5c]
or r14b, al
sub edx, dword [rsp + 0x60]
mov eax, dword [rsp + 0x50]
sub eax, dword [rsp + 0x54]
sar eax, 8
and al, byte [rsp + 0x58]
sar edx, 8
or al, dl
mov edx, dword [rsp + 0x64]
and al, byte [rsp]
or r14b, al
mov eax, r13d
sub eax, ecx
sar eax, 8
and al, dl
or al, bpl
and al, r8b
or r14b, al
mov eax, dword [rsp + 0x6c]
sub eax, dword [rsp + 0x70]
sar eax, 8
and al, byte [rsp + 0x74]
or al, r9b
and al, byte [rsp + 0x80]
or r14b, al
movzx r9d, byte [rsp + 0xe8]
lea rbp, [0x140101150]
mov esi, dword [rsp + 0xf8]
xor ecx, r13d
mov r13, qword [rsp + 0xe0]
or r9b, r14b
add esi, 0xfffffff0
mov byte [rsp + 0xe8], r9b
mov dword [rsp + 0xf8], esi
lea r10d, [rcx - 1]
sar r10d, 8
and r10b, dl
and r10b, r8b
sub qword [rsp + 0x88], 1
mov dword [rsp], r10d
jne 0x140090100
xor eax, eax
test r9b, r9b
setne al
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret