Function at 0x14002d230
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
test r9, r9
je 0x14002d945
mov qword [rsp + 0x20], rbp
push rsi
push r13
push r14
push r15
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], r12
lea r12, [0x140310680]
mov r15, r9
mov r14, r8
mov rsi, rdx
mov r13, rcx
xor ebp, ebp
nop dword [rax]
mov rbx, qword [r13 + 8]
mov edi, 2
mov eax, dword [rbx]
mov r10d, dword [rbx + 4]
mov r9d, dword [rbx + 8]
mov r11d, dword [rbx + 0xc]
add eax, dword [rsi]
add r10d, dword [rsi + 4]
add r9d, dword [rsi + 8]
add r11d, dword [rsi + 0xc]
nop word [rax + rax]
movzx ecx, al
xor r10d, dword [r12 + rcx*4]
mov ecx, eax
shr ecx, 8
movzx edx, cl
mov ecx, eax
add r10d, dword [r12 + rdx*4 + 0x400]
shr ecx, 0x18
movzx edx, cl
mov ecx, eax
rol eax, 8
xor r11d, dword [r12 + rdx*4 + 0x400]
shr ecx, 0x10
movzx edx, cl
lea r8d, [r11 + rax]
movzx ecx, r10b
add r9d, dword [r12 + rdx*4]
mov eax, r10d
xor r9d, dword [r12 + rcx*4]
shr eax, 0x10
mov ecx, r10d
shr ecx, 8
movzx edx, cl
mov ecx, r10d
add r9d, dword [r12 + rdx*4 + 0x400]
shr ecx, 0x18
movzx edx, cl
movzx ecx, al
movzx eax, r9b
rol r10d, 8
add r11d, dword [r12 + rcx*4]
xor r8d, dword [r12 + rdx*4 + 0x400]
xor r11d, dword [r12 + rax*4]
add r10d, r9d
mov eax, r9d
shr eax, 8
movzx ecx, al
mov eax, r9d
add r11d, dword [r12 + rcx*4 + 0x400]
shr eax, 0x10
movzx ecx, al
mov eax, dword [r12 + rcx*4]
movzx ecx, r11b
add eax, r8d
xor eax, dword [r12 + rcx*4]
mov ecx, r11d
shr ecx, 8
movzx edx, cl
mov ecx, r9d
add eax, dword [r12 + rdx*4 + 0x400]
shr ecx, 0x18
movzx edx, cl
rol r9d, 8
mov ecx, r11d
xor r10d, dword [r12 + rdx*4 + 0x400]
shr ecx, 0x10
movzx edx, cl
mov ecx, r11d
add r10d, dword [r12 + rdx*4]
shr ecx, 0x18
movzx edx, cl
xor r9d, dword [r12 + rdx*4 + 0x400]
rol r11d, 8
dec rdi
jne 0x14002d2a0
mov edi, dword [rbx + 0x10]
mov edx, dword [rbx + 0x14]
add edi, eax
rol eax, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, eax
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d3c3
rol edi, cl
rol edx, 5
add r9d, edi
mov ecx, edx
xor r8d, edx
xor r11d, edx
and ecx, 0x1f
je 0x14002d3d9
rol r8d, cl
mov edi, dword [rbx + 0x18]
mov edx, dword [rbx + 0x1c]
add r10d, r8d
add edi, r10d
rol r10d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r10d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d408
rol edi, cl
rol edx, 5
add r11d, edi
mov ecx, edx
xor r8d, edx
xor eax, edx
and ecx, 0x1f
je 0x14002d41d
rol r8d, cl
mov edi, dword [rbx + 0x20]
mov edx, dword [rbx + 0x24]
add r9d, r8d
add edi, r9d
rol r9d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r9d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d44c
rol edi, cl
rol edx, 5
add eax, edi
mov ecx, edx
xor r8d, edx
xor r10d, edx
and ecx, 0x1f
je 0x14002d461
rol r8d, cl
mov edi, dword [rbx + 0x28]
mov edx, dword [rbx + 0x2c]
add r11d, r8d
add edi, r11d
rol r11d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r11d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d490
rol edi, cl
rol edx, 5
add r10d, edi
mov ecx, edx
xor r8d, edx
xor r9d, edx
and ecx, 0x1f
je 0x14002d4a6
rol r8d, cl
mov edi, dword [rbx + 0x30]
mov edx, dword [rbx + 0x34]
add eax, r8d
add edi, eax
rol eax, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, eax
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d4d2
rol edi, cl
rol edx, 5
add r9d, edi
mov ecx, edx
xor r8d, edx
xor r11d, edx
and ecx, 0x1f
je 0x14002d4e8
rol r8d, cl
mov edi, dword [rbx + 0x38]
mov edx, dword [rbx + 0x3c]
add r10d, r8d
add edi, r10d
rol r10d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r10d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d517
rol edi, cl
rol edx, 5
add r11d, edi
mov ecx, edx
xor r8d, edx
xor eax, edx
and ecx, 0x1f
je 0x14002d52c
rol r8d, cl
mov edi, dword [rbx + 0x40]
mov edx, dword [rbx + 0x44]
add r9d, r8d
add edi, r9d
rol r9d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r9d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d55b
rol edi, cl
rol edx, 5
add eax, edi
mov ecx, edx
xor r8d, edx
xor r10d, edx
and ecx, 0x1f
je 0x14002d570
rol r8d, cl
mov edi, dword [rbx + 0x48]
mov edx, dword [rbx + 0x4c]
add r11d, r8d
add edi, r11d
rol r11d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r11d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d59f
rol edi, cl
rol edx, 5
add r10d, edi
mov ecx, edx
xor r8d, edx
xor r9d, edx
and ecx, 0x1f
je 0x14002d5b5
rol r8d, cl
mov edi, dword [rbx + 0x50]
mov edx, dword [rbx + 0x54]
add eax, r8d
add edi, eax
rol eax, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, eax
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d5e1
rol edi, cl
rol edx, 5
add r9d, edi
mov ecx, edx
xor r8d, edx
xor r10d, edx
and ecx, 0x1f
je 0x14002d5f7
rol r8d, cl
mov edi, dword [rbx + 0x58]
mov edx, dword [rbx + 0x5c]
add r11d, r8d
add edi, r10d
rol r10d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r10d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d626
rol edi, cl
rol edx, 5
add r11d, edi
mov ecx, edx
xor r8d, edx
xor r9d, edx
and ecx, 0x1f
je 0x14002d63c
rol r8d, cl
mov edi, dword [rbx + 0x60]
mov edx, dword [rbx + 0x64]
add eax, r8d
add edi, r9d
rol r9d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r9d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d66b
rol edi, cl
rol edx, 5
add eax, edi
mov ecx, edx
xor r8d, edx
xor r11d, edx
and ecx, 0x1f
je 0x14002d680
rol r8d, cl
mov edi, dword [rbx + 0x68]
mov edx, dword [rbx + 0x6c]
add r10d, r8d
add edi, r11d
rol r11d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r11d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d6af
rol edi, cl
rol edx, 5
add r10d, edi
mov ecx, edx
xor r8d, edx
xor eax, edx
and ecx, 0x1f
je 0x14002d6c4
rol r8d, cl
mov edi, dword [rbx + 0x70]
mov edx, dword [rbx + 0x74]
add r9d, r8d
add edi, eax
rol eax, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, eax
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d6f0
rol edi, cl
rol edx, 5
add r9d, edi
mov ecx, edx
xor r8d, edx
xor r10d, edx
and ecx, 0x1f
je 0x14002d706
rol r8d, cl
mov edi, dword [rbx + 0x78]
mov edx, dword [rbx + 0x7c]
add r11d, r8d
add edi, r10d
rol r10d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r10d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d735
rol edi, cl
rol edx, 5
add r11d, edi
mov ecx, edx
xor r8d, edx
xor r9d, edx
and ecx, 0x1f
je 0x14002d74b
rol r8d, cl
mov edi, dword [rbx + 0x80]
mov edx, dword [rbx + 0x84]
add eax, r8d
add edi, r9d
rol r9d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r9d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d780
rol edi, cl
rol edx, 5
add eax, edi
mov ecx, edx
xor r8d, edx
xor r11d, edx
and ecx, 0x1f
je 0x14002d795
rol r8d, cl
mov edi, dword [rbx + 0x88]
mov edx, dword [rbx + 0x8c]
add r10d, r8d
add edi, r11d
rol r11d, 0xd
mov ecx, edi
and ecx, 0x1ff
imul edx, r11d
mov r8d, dword [r12 + rcx*4]
rol edx, 5
mov ecx, edx
xor r8d, edx
and ecx, 0x1f
je 0x14002d7ca
rol edi, cl
rol edx, 5
add r10d, edi
mov ecx, edx
xor r8d, edx
xor eax, edx
and ecx, 0x1f
je 0x14002d7df
rol r8d, cl
add r9d, r8d
mov edi, 2
nop word [rax + rax]
movzx ecx, al
xor r10d, dword [r12 + rcx*4 + 0x400]
mov ecx, eax
shr ecx, 0x18
movzx edx, cl
movzx ecx, r10b
sub r9d, dword [r12 + rdx*4]
xor r9d, dword [r12 + rcx*4 + 0x400]
mov ecx, eax
shr ecx, 0x10
movzx edx, cl
mov ecx, eax
ror eax, 8
sub r11d, dword [r12 + rdx*4 + 0x400]
shr ecx, 8
movzx edx, cl
mov ecx, r10d
xor r11d, dword [r12 + rdx*4]
shr ecx, 0x18
movzx edx, cl
mov ecx, r10d
sub r11d, dword [r12 + rdx*4]
shr ecx, 0x10
movzx edx, cl
mov ecx, r10d
mov r8d, r11d
sub eax, dword [r12 + rdx*4 + 0x400]
shr ecx, 8
movzx edx, cl
xor eax, dword [r12 + rdx*4]
ror r10d, 8
sub r9d, r10d
mov ecx, r9d
shr ecx, 0x18
movzx edx, cl
movzx ecx, r9b
mov r11d, dword [r12 + rcx*4 + 0x400]
sub eax, dword [r12 + rdx*4]
xor r11d, r8d
sub r11d, eax
movzx ecx, r11b
xor eax, dword [r12 + rcx*4 + 0x400]
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
mov ecx, r9d
sub r10d, dword [r12 + rdx*4 + 0x400]
shr ecx, 8
movzx edx, cl
ror r9d, 8
mov ecx, r11d
xor r10d, dword [r12 + rdx*4]
shr ecx, 0x18
movzx edx, cl
mov ecx, r11d
sub r10d, dword [r12 + rdx*4]
shr ecx, 0x10
movzx edx, cl
mov ecx, r11d
sub r9d, dword [r12 + rdx*4 + 0x400]
shr ecx, 8
movzx edx, cl
xor r9d, dword [r12 + rdx*4]
ror r11d, 8
dec rdi
jne 0x14002d7f0
sub r11d, dword [rbx + 0x9c]
sub r9d, dword [rbx + 0x98]
sub r10d, dword [rbx + 0x94]
sub eax, dword [rbx + 0x90]
inc rbp
mov dword [r14 + 4], r10d
mov dword [r14 + 8], r9d
mov dword [r14 + 0xc], r11d
mov dword [r14], eax
add r14, 0x10
add rsi, 0x10
cmp rbp, r15
jne 0x14002d270
mov r12, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x30]
mov rbx, qword [rsp + 0x28]
mov rbp, qword [rsp + 0x40]
pop r15
pop r14
pop r13
pop rsi
ret