Function at 0x10001e750
Capabilities:
Encode data using xor
Encrypt data using salsa20 or chacha
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x170
mov rax, qword [0x10011e450]
xor rax, rsp
mov qword [rsp + 0x160], rax
lea r11, [0x100000000]
mov rax, qword [rcx + 0x10]
mov qword [rsp + 0x70], rcx
mov rbp, rcx
mov ebx, dword [rax + 1]
mov ecx, dword [rax + 9]
lea r8, [0x100109088]
mov esi, dword [rax + 5]
mov qword [rsp + 0x78], rdx
lea r9, [rax + 0xd]
lea rdi, [r9 - 1]
mov edx, 0xfffffff
and rbx, rdx
and rcx, rdx
mov qword [rsp + 0x108], rcx
and rsi, rdx
add rbx, r11
mov qword [rsp + 0x100], rbx
mov qword [rsp + 0xf8], rsi
xor r12d, r12d
cmp rdi, r8
jb 0x10001e813
mov eax, dword [0x1000a5f24]
mov ecx, dword [0x10000c52c]
imul ecx, eax
mov eax, ecx
add rax, r8
cmp rdi, rax
jae 0x10001e813
mov rax, rdi
mov ecx, dword [0x1000a5f24]
sub rax, r8
cqo
idiv rcx
mov edx, dword [0x1000a5f24]
imul rdx, rax
add r8, rdx
jmp 0x10001e816
mov r8, r12
cmp r8, r12
jne 0x10001e825
mov r8, rdi
and r8, 0xffffffffffff0000
mov r10d, ebx
sub r9, r8
lea rax, [r9 - 0x40]
cmp rax, r12
cmovl rax, r12
sub r10d, r11d
lea rdi, [r8 + rax]
mov r11d, dword [0x1000a5f24]
xor eax, eax
sub r11, rsi
inc r11
mov r9, r11
cmp r11, r12
lea ecx, [rax + 0x40]
rep stosb byte [rdi], al
mov rdi, r12
je 0x10001e892
mov rdx, qword [0x1001241b0]
imul rdx, rdx, 0x343fd
shl rdi, 0x10
shr r9, 0x10
add rdx, 0x269ec3
mov rcx, rdx
shr rcx, 0x10
movzx eax, cx
or rdi, rax
cmp r9, r12
jne 0x10001e863
mov qword [0x1001241b0], rdx
mov rax, rdi
mov ecx, r10d
xor edx, edx
div r11
lea r12, [rdx + r8]
mov rdx, rsi
mov qword [rsp + 0xf0], r12
mov r8, r12
mov eax, 0xa21b8852
mov qword [rsp + 0xa0], rsi
xor r9d, r9d
mov byte [rsp + 0x20], r9b
mov dil, r9b
cmp rsi, r9
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x98], r12
je 0x10001ed17
movdqu xmm0, xmmword [rsi + rbx]
mov rbp, r12
mov dword [rsp + 0xc8], r9d
mov dword [rsp + 0xcc], r9d
mov dword [rsp + 0xd0], r9d
mov dword [rsp + 0xd4], r9d
movdqu xmmword [rsp + 0x110], xmm0
mov rcx, qword [rsp + 0x118]
mov rax, rcx
mov r8, qword [rsp + 0x110]
mov dword [rsp + 0xb4], r8d
mov rdx, r8
shr rax, 0x20
mov dword [rsp + 0xbc], ecx
shr rdx, 0x20
mov dword [rsp + 0xc0], eax
mov dword [rsp + 0xe8], eax
mov eax, dword [0x10000a5b0]
mov dword [rsp + 0xb0], eax
mov eax, dword [0x10000a5b4]
mov dword [rsp + 0xb8], edx
mov dword [rsp + 0xc4], eax
mov eax, dword [0x10000a5b8]
mov dword [rsp + 0xdc], r8d
mov dword [rsp + 0xd8], eax
mov eax, dword [0x10000a5bc]
mov dword [rsp + 0xe0], edx
mov dword [rsp + 0xec], eax
lea rax, [rsp + 0x120]
mov dword [rsp + 0xe4], ecx
sub rbp, rax
mov rax, rbx
lea ebx, [r9 + 0x40]
sub rax, r12
mov qword [rsp + 0x110], rax
mov r8, rbx
lea rcx, [rsp + 0x30]
lea rdx, [rsp + 0xb0]
not rdx
mov qword [rsp + 0x88], rbp
call fcn.10001511c
mov ebx, dword [rsp + 0x50]
mov r11d, dword [rsp + 0x58]
mov r14d, dword [rsp + 0x4c]
mov ecx, dword [rsp + 0x6c]
mov ebp, dword [rsp + 0x3c]
mov r8d, dword [rsp + 0x64]
mov r9d, dword [rsp + 0x60]
mov edi, dword [rsp + 0x38]
mov r12d, dword [rsp + 0x54]
mov esi, dword [rsp + 0x40]
mov r15d, dword [rsp + 0x48]
mov eax, dword [rsp + 0x44]
mov r10d, dword [rsp + 0x5c]
mov edx, dword [rsp + 0x68]
mov dword [rsp + 0x2c], eax
mov r13d, dword [rsp + 0x2c]
mov eax, dword [rsp + 0x34]
mov dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x30]
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x90], 3
add eax, r9d
rol eax, 7
xor esi, eax
mov eax, dword [rsp + 0x28]
add eax, esi
rol eax, 9
xor ebx, eax
lea eax, [rbx + rsi]
rol eax, 0xd
xor r9d, eax
lea eax, [rbx + r9]
ror eax, 0xe
mov dword [rsp + 0x2c], r9d
xor dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x24]
add eax, r13d
mov r9d, dword [rsp + 0x28]
rol eax, 7
xor r12d, eax
lea eax, [r13 + r12]
rol eax, 9
xor r8d, eax
lea eax, [r8 + r12]
rol eax, 0xd
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
add eax, r8d
ror eax, 0xe
xor r13d, eax
lea eax, [r15 + r11]
rol eax, 7
xor edx, eax
lea eax, [r11 + rdx]
rol eax, 9
xor edi, eax
lea eax, [rdi + rdx]
rol eax, 0xd
xor r15d, eax
lea eax, [rdi + r15]
ror eax, 0xe
xor r11d, eax
lea eax, [r10 + rcx]
rol eax, 7
xor ebp, eax
lea eax, [rcx + rbp]
rol eax, 9
xor r14d, eax
lea eax, [r14 + rbp]
rol eax, 0xd
xor r10d, eax
lea eax, [r14 + r10]
ror eax, 0xe
xor ecx, eax
mov eax, dword [rsp + 0x28]
add eax, ebp
rol eax, 7
xor dword [rsp + 0x24], eax
mov eax, dword [rsp + 0x24]
mov dword [rsp + 0x34], eax
add eax, r9d
rol eax, 9
xor edi, eax
mov eax, dword [rsp + 0x24]
add eax, edi
rol eax, 0xd
xor ebp, eax
lea eax, [rbp + rdi]
ror eax, 0xe
xor r9d, eax
mov dword [rsp + 0x28], r9d
mov eax, r9d
mov dword [rsp + 0x30], eax
lea eax, [r13 + rsi]
rol eax, 7
xor r15d, eax
mov r9d, dword [rsp + 0x2c]
lea eax, [r15 + r13]
rol eax, 9
xor r14d, eax
lea eax, [r15 + r14]
rol eax, 0xd
xor esi, eax
lea eax, [r14 + rsi]
ror eax, 0xe
xor r13d, eax
lea eax, [r11 + r12]
rol eax, 7
xor r10d, eax
lea eax, [r10 + r11]
rol eax, 9
xor ebx, eax
lea eax, [rbx + r10]
rol eax, 0xd
xor r12d, eax
lea eax, [rbx + r12]
ror eax, 0xe
xor r11d, eax
lea eax, [rcx + rdx]
rol eax, 7
xor r9d, eax
mov dword [rsp + 0x60], r9d
lea eax, [rcx + r9]
rol eax, 9
xor r8d, eax
lea eax, [r9 + r8]
rol eax, 0xd
xor edx, eax
lea eax, [rdx + r8]
ror eax, 0xe
xor ecx, eax
sub qword [rsp + 0x90], 1
mov eax, dword [rsp + 0x28]
jne 0x10001ea3e
mov dword [rsp + 0x6c], ecx
xor ecx, ecx
mov dword [rsp + 0x54], r12d
mov r12, qword [rsp + 0x110]
mov dword [rsp + 0x50], ebx
mov dword [rsp + 0x4c], r14d
lea ebx, [rcx + 0x40]
mov r14, qword [rsp + 0x80]
mov dword [rsp + 0x48], r15d
mov r15, qword [rsp + 0x98]
mov dword [rsp + 0x44], r13d
mov r13, qword [rsp + 0xa0]
mov dword [rsp + 0x40], esi
mov esi, dword [rsp + 0xd0]
mov dword [rsp + 0x3c], ebp
mov rbp, qword [rsp + 0x88]
mov dword [rsp + 0x38], edi
mov dil, byte [rsp + 0x20]
mov dword [rsp + 0x68], edx
mov dword [rsp + 0x64], r8d
mov dword [rsp + 0x5c], r10d
mov dword [rsp + 0x58], r11d
mov eax, dword [rsp + rcx + 0xb0]
add rcx, 4
add dword [rsp + rcx + 0x2c], eax
cmp rcx, rbx
jl 0x10001ec2c
mov r8, rbx
lea rdx, [rsp + 0x30]
not rdx
lea rcx, [rsp + 0x120]
call fcn.10001511c
inc esi
cmp r13, rbx
mov dword [rsp + 0xd0], esi
jbe 0x10001ecb8
lea r8, [r12 + rbp]
mov rdx, rbx
lea rcx, [rsp + 0x120]
mov al, byte [r8 + rcx]
xor al, byte [rcx]
mov byte [rcx + rbp], al
inc rcx
xor dil, al
sub rdx, 1
jne 0x10001ec75
sub r13, rbx
add r15, rbx
mov byte [rsp + 0x20], dil
mov qword [rsp + 0xa0], r13
add rbp, rbx
add r14, rbx
mov qword [rsp + 0x80], r14
mov qword [rsp + 0x98], r15
jmp 0x10001e9ba
mov r12, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0xf8]
xor r9d, r9d
mov rbx, qword [rsp + 0x100]
mov edx, r9d
cmp r13, r9
jbe 0x10001ed12
lea rcx, [rsp + 0x120]
lea rax, [rsp + 0x120]
sub r14, rax
lea rax, [rsp + 0x120]
sub r15, rax
inc edx
mov al, byte [rcx + r14]
xor al, byte [rcx]
mov byte [rcx + r15], al
xor dil, al
inc rcx
mov eax, edx
cmp rax, r13
jb 0x10001ecf9
mov rbp, qword [rsp + 0x70]
cmp dil, byte [rsi + rbx + 0x10]
je 0x10001eddc
call fcn.100018aa8
mov r11d, 0xffff
mov rbx, rax
lea r8, [rbp + 0x18]
lea r10, [0x1000b5984]
mov qword [rbp + 0x10], r10
and r8, 0xfffffffffffffff8
lea r9, [r8 + 0xfff]
mov rax, 0xfffffffffffff000
and rbx, rax
and r9, rax
mov rax, qword [0x1001241b0]
xor edi, edi
imul rax, rax, 0x343fd
shl rdi, 0x10
shr r11, 0x10
add rax, 0x269ec3
mov rcx, rax
shr rcx, 0x10
movzx edx, cx
or rdi, rdx
test r11, r11
jne 0x10001ed60
mov qword [0x1001241b0], rax
movabs rax, 0x8000800080008001
mul rdi
shr rdx, 0xf
mov rax, qword [rsp + 0x78]
imul rdx, rdx, 0xffff
sub rdi, rdx
inc rdi
mov qword [rax + 0x98], rbx
mov qword [rax + 0xb0], rdi
mov qword [rsp + 0x78], r11
jmp 0x10001edd2
mov rax, qword [rsp + 0x78]
mov qword [r8], rax
add r8, 8
cmp r8, r9
jb 0x10001edc6
jmp 0x10001eeee
lea r14, [0x100000000]
mov r13, r14
mov rax, qword [0x10000cac8]
mov rbp, rbx
sub rbp, r12
sub r13, rax
jne 0x10001ee01
cmp rbp, r9
je 0x10001eed2
mov r11, r12
sub r11, rbx
mov edi, r9d
sub ebx, r14d
mov rcx, qword [0x1000e0550]
lea r8d, [rcx - 1]
add esi, ebx
lea r15, [0x1000e0550]
cmp r8d, r9d
jl 0x10001ee53
lea eax, [r8 + rdi]
cdq
sub eax, edx
sar eax, 1
movsxd rdx, eax
mov r9d, dword [r15 + rdx*4 + 4]
and r9d, 0xfffffff
cmp ebx, r9d
jae 0x10001ee49
lea r8d, [rax - 1]
jmp 0x10001ee4e
jbe 0x10001ee58
lea edi, [rax + 1]
cmp r8d, edi
jge 0x10001ee26
movsxd r10, edi
jmp 0x10001eecb
movsxd r10, eax
jmp 0x10001eecb
mov edx, dword [r15 + r10*4 + 4]
mov eax, edx
and eax, 0xfffffff
cmp eax, esi
jae 0x10001eed2
mov r8, rdx
mov edi, edx
sar edx, 0x1e
shl edi, 2
and r8d, 0xfffffff
and edx, 3
sar edi, 0x1e
add r8, r14
xor r9d, r9d
and edi, 3
sub edi, 1
je 0x10001eea7
sub edi, 1
je 0x10001eea2
cmp edi, 1
jne 0x10001eead
mov r9, r13
jmp 0x10001eead
mov r9, rbp
jmp 0x10001eead
mov r9, r13
sub r9, rbp
sub edx, 2
je 0x10001eebd
cmp edx, 1
jne 0x10001eec8
add qword [r8 + r11], r9
jmp 0x10001eec1
add dword [r8 + r11], r9d
mov rcx, qword [0x1000e0550]
inc r10
mov eax, ecx
cmp r10, rax
jb 0x10001ee5d
mov eax, dword [0x1000a5f24]
mov eax, 0xa14412d9
mov rbp, qword [rsp + 0x70]
mov rdx, qword [rsp + 0x108]
lea r10, [r12 + rdx]
mov qword [rbp + 0x10], r10
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.1000d8a8c
mov rbx, qword [rsp + 0x1c0]
add rsp, 0x170
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret