Function at 0x1400db000
Capabilities:
Encode data using xor

Disassembly:
push rax
push rcx
push rdx
push rbx
push rbp
push rsi
push rdi
push r8
push r9
push r10
push r11
push r12
push r13
push r14
push r15
push rbp
mov rbp, rsp
sub rsp, 0x20
and rsp, reloc.Mso20Win32Client.dll_Ordinal_255
lea rdx, [0x14004ec00]
push 0
pop rbx
push rdx
add dword [rdx + 0x2ec], 0x38d055c7
add dword [rdx + 0x3f4], 0x794c297d
xor dword [rdx + 0x14c], 0x440e694e
sub dword [rdx + 0x364], 0x693a5cf4
sub dword [rdx + 0x254], 0x762b7634
sub dword [rdx + 0x168], 0x5bf397f
add dword [rdx + 0x74], 0x42ce49ef
xor dword [rdx + 0x24c], 0x4ace61d8
add dword [rdx + 0x3bc], 0x35c74182
xor dword [rdx + 0x3e4], 0x2bcc2567
xor dword [rdx + 0x164], 0x37e27bad
xor dword [rdx + 0x264], 0x36da620c
not dword [rdx + 0x1a8]
xor dword [rdx + 0x140], 0x3b3f66ec
not dword [rdx + 0x5c]
sub dword [rdx + 0x380], 0x78cc5ed5
not dword [rdx + 0x1b8]
sub dword [rdx + 0x11c], 0x73b33c2e
add dword [rdx + 0x2b4], 0x77373557
xor dword [rdx + 0x240], 0x165c48c6
sub dword [rdx + 0x78], 0x23c84c9c
sub dword [rdx + 0x340], 0x34d7532c
sub dword [rdx + 0x60], 0x6be63f9c
add dword [rdx + 0x1b4], 0x1c265765
not dword [rdx + 0x1c]
not dword [rdx + 0x108]
add dword [rdx + 0x304], 0x1ea076c5
add dword [rdx + 0x1c8], 0x7c1c4a96
not dword [rdx + 0x2f8]
xor dword [rdx + 0x70], 0x6ef719b7
add dword [rdx + 0x290], 0x42871c63
sub dword [rdx + 0x190], 0x4b805fa7
xor dword [rdx + 0x2e4], 0x52315a13
sub dword [rdx + 0x328], 0x77de0f78
add dword [rdx + 0xc4], 0x44a3565d
sub dword [rdx + 0x2b0], 0x430f76e6
not dword [rdx + 0x354]
add dword [rdx + 0x180], 0x588a7aa4
sub dword [rdx + 0x2d0], 0xc636e8b
not dword [rdx + 0x134]
add dword [rdx + 0xbc], 0x1b9e31c0
not dword [rdx + 0x218]
sub dword [rdx + 0x154], 0x4c116cba
xor dword [rdx + 0x378], 0x794b3129
xor dword [rdx + 0x3fc], 0x3cbc46b9
sub dword [rdx + 0x88], 0x17cc0eee
xor dword [rdx + 0x368], 0x2df37ad0
xor dword [rdx + 0x1e0], 0x172a3020
add dword [rdx + 0x31c], 0x7a914259
not dword [rdx + 0x398]
add dword [rdx + 0x2f0], 0x58d549b9
xor dword [rdx + 0x30c], 0x4d6a28b4
xor dword [rdx + 0x224], 0x77d66d59
xor dword [rdx + 0x30], 0x6ac0670
add dword [rdx + 0x100], 0x5b5f6801
xor dword [rdx + 0x1ec], 0x4ba37f81
add dword [rdx + 0xa8], 0x1ccc3d83
xor dword [rdx + 0x1b0], 0x48ff31f7
add dword [rdx + 0x188], 0x395e38ce
not dword [rdx + 0x2c]
add dword [rdx + 0x3dc], 0x63147d46
add dword [rdx + 0x17c], 0x30042660
not dword [rdx + 0xdc]
add dword [rdx + 0x308], 0x5e6c452e
sub dword [rdx + 0xe4], 0x78916be4
add dword [rdx + 0x15c], 0x38432fe5
not dword [rdx + 0x3d0]
xor dword [rdx + 0x1d0], 0xdc1790
add dword [rdx + 0x310], 0x15965887
add dword [rdx + 0x294], 0x221238d5
sub dword [rdx + 0x278], 0x7a5c5258
add dword [rdx + 0x250], 0x341154b3
add dword [rdx + 0x3f8], 0x5eaf61e3
xor dword [rdx + 0x3d8], 0x6e191e7f
xor dword [rdx + 0x3a0], 0x4937733f
not dword [rdx + 0x360]
not dword [rdx + 0x248]
not dword [rdx + 0x3ec]
add dword [rdx + 0x10c], 0x2ca931e0
not dword [rdx + 0x1f0]
add dword [rdx + 0x198], 0x2fc7082a
add dword [rdx + 0x22c], 0x7d7f7a9a
sub dword [rdx + 0x144], 0x312c230e
xor dword [rdx + 0x38c], 0x1a1d6d73
sub dword [rdx + 0x210], 0x1b527560
add dword [rdx + 0x1c0], 0x15de50f4
sub dword [rdx + 0x1a4], 0x72157040
sub dword [rdx + 0x220], 0xe014aab
add dword [rdx + 0x348], 0x54a52dc2
sub dword [rdx + 0x33c], 0x260755ea
xor dword [rdx + 0x314], 0x24c12531
add dword [rdx + 0x258], 0x465c1567
xor dword [rdx + 0xc], 0x77646c97
xor dword [rdx + 0x1d8], 0x212307a4
xor dword [rdx + 0x3ac], 0x5f3a22f1
not dword [rdx + 0x280]
sub dword [rdx + 0x1fc], 0x22834f18
add dword [rdx + 0x394], 0x437b62f4
not dword [rdx + 0x3c4]
sub dword [rdx + 0x174], 0x5c712d46
xor dword [rdx + 0xf4], 0x5251b0e
xor dword [rdx + 0x3c], 0x49d84e00
sub dword [rdx + 0x84], 0x463373f1
not dword [rdx + 0x244]
add dword [rdx + 0x204], 0x70d273cd
add dword [rdx + 0x370], 0x1a9e48c5
not dword [rdx + 0x3b4]
sub dword [rdx + 0x1c4], 0x35082963
add dword [rdx + 0x3b8], 0x3a18621a
not dword [rdx + 0x98]
xor dword [rdx + 0x2d4], 0x4e5534b1
add dword [rdx + 0x3f0], 0x44b540cc
xor dword [rdx + 0x160], 0x5f0b6efd
sub dword [rdx + 0x2fc], 0x2b976d6b
not dword [rdx + 4]
xor dword [rdx + 0x20c], 0x266b6dff
sub dword [rdx + 0x284], 0x7ec10f91
add dword [rdx + 0x344], 0x3505336b
add dword [rdx + 0x3d4], 0x3b9f0846
xor dword [rdx + 0x26c], 0x1d91264
xor dword [rdx + 0x48], 0x6dbe2bc6
not dword [rdx]
xor dword [rdx + 0x2e8], 0x2d206f73
sub dword [rdx + 0x13c], 0x593c3ba3
sub dword [rdx + 0x2e0], 0x57595efe
add dword [rdx + 0x124], 0x63ea44b5
not dword [rdx + 0x12c]
add dword [rdx + 0xf8], 0x5ad04a4a
not dword [rdx + 0x3e0]
add dword [rdx + 0x148], 0x2bd14a66
add dword [rdx + 0x158], 0x1fb96107
sub dword [rdx + 0x118], 0x6aa15057
sub dword [rdx + 0x44], 0x4c965999
add dword [rdx + 0x37c], 0x3f5b23f7
add dword [rdx + 0x320], 0x67e410b9
sub dword [rdx + 0x20], 0xe2f34ea
sub dword [rdx + 0x80], 0x549e6da4
add dword [rdx + 0xa4], 0x537c1e01
not dword [rdx + 0xd0]
xor dword [rdx + 0x1f4], 0x4b091fcf
sub dword [rdx + 0x3a4], 0x250c4928
not dword [rdx + 0x390]
not dword [rdx + 0x298]
sub dword [rdx + 0x150], 0x504e4d4a
sub dword [rdx + 0x130], 0x3f303ab8
add dword [rdx + 0x18c], 0x61ee0618
add dword [rdx + 0xb4], 0x44f80327
not dword [rdx + 0xc8]
sub dword [rdx + 0x2c0], 0x5eb10dbc
xor dword [rdx + 0x3c0], 0x2c3406f
sub dword [rdx + 0x32c], 0x2df43ddd
sub dword [rdx + 0x228], 0x52275599
add dword [rdx + 0x39c], 0x1406712f
sub dword [rdx + 0x24], 0x7af5736a
not dword [rdx + 0x1a0]
sub dword [rdx + 0x7c], 0x2c226d7b
xor dword [rdx + reloc.Mso30Win32Client.dll_Ordinal_272], 0x62980b5f
sub dword [rdx + 0x214], 0x101561a8
not dword [rdx + 0x334]
xor dword [rdx + 0xf0], 0x3b4b6a7f
sub dword [rdx + 0x68], 0x5c901508
xor dword [rdx + 0x324], 0x557a6315
add dword [rdx + 0x19c], 0x4d8f37e2
xor dword [rdx + 0x2dc], 0x27c44fbc
xor dword [rdx + 0x2c8], 0x534e30ab
xor dword [rdx + 0x3cc], 0x79d57150
not dword [rdx + 0x10]
add dword [rdx + 0x54], 0x555427cc
xor dword [rdx + 0x38], 0x10db6710
add dword [rdx + 0x1dc], 0x7c6d6534
add dword [rdx + 0xec], 0x1d1b5759
xor dword [rdx + 0x16c], 0x40166f25
not dword [rdx + 0x170]
add dword [rdx + 0x3e8], 0x46fe4a85
sub dword [rdx + 0xfc], 0x2cc067fe
sub dword [rdx + 0x58], 0x3d770cdc
sub dword [rdx + 0x25c], 0x3c652354
sub dword [rdx + 0x18], 0x39d16c1b
xor dword [rdx + 0x194], 0x37746772
xor dword [rdx + 0x2f4], 0x3b8136b4
sub dword [rdx + 0x288], 0x530561a8
not dword [rdx + 0x3a8]
not dword [rdx + 0x2a4]
xor dword [rdx + 0x34], 0x7c7b7c1f
xor dword [rdx + 0x104], 0x2b6313b5
xor dword [rdx + 0x3c8], 0x3cc477aa
sub dword [rdx + 0xa0], 0x6a911feb
xor dword [rdx + 0x238], 0x268006f1
sub dword [rdx + 0x120], 0x58054251
add dword [rdx + 0x208], 0x1b134c10
sub dword [rdx + 0x1cc], 0x7b4c753e
not dword [rdx + 0x270]
not dword [rdx + 0x268]
xor dword [rdx + 0x300], 0x24335a7
add dword [rdx + 0x21c], 0x1aee6f2b
add dword [rdx + 0xac], 0x10a46763
not dword [rdx + 0x2b8]
not dword [rdx + 0x230]
not dword [rdx + 0xcc]
not dword [rdx + 0x234]
not dword [rdx + 0x35c]
xor dword [rdx + 0xc0], 0x8893f57
add dword [rdx + 0x1bc], 0x54a6021
sub dword [rdx + 0x2c4], 0x121d5dda
xor dword [rdx + 0x184], 0xffa4fc1
xor dword [rdx + 0x28], 0x6efe696f
add dword [rdx + 0x94], 0x18e13d0b
not dword [rdx + 0x1f8]
sub dword [rdx + 0xb8], 0x3f169d9
xor dword [rdx + 0x40], 0x23c102dd
not dword [rdx + 0x8c]
xor dword [rdx + 0x178], 0x6fc63913
sub dword [rdx + 0x28c], 0x51376c8b
add dword [rdx + 0x29c], 0x61665580
not dword [rdx + 0x128]
not dword [rdx + 0x318]
add dword [rdx + 0x2a8], 0x751038e
xor dword [rdx + 8], 0x717e051f
xor dword [rdx + 0x330], 0x4a3f5245
sub dword [rdx + 0x274], 0x474715e1
not dword [rdx + 0xe8]
not dword [rdx + 0x358]
sub dword [rdx + 0x90], 0x54235cb2
not dword [rdx + 0x3b0]
not dword [rdx + 0xd4]
sub dword [rdx + 0x200], 0x781936e6
not dword [rdx + 0x36c]
not dword [rdx + 0x6c]
xor dword [rdx + 0x260], 0x36475c02
not dword [rdx + 0xd8]
sub dword [rdx + 0x64], 0x7d912415
not dword [rdx + 0x2d8]
sub dword [rdx + 0x23c], 0x766177b2
add dword [rdx + 0x14], 0x2840306a
not dword [rdx + 0x1ac]
add dword [rdx + 0x374], 0x6102d80
xor dword [rdx + 0x50], 0x61466df9
not dword [rdx + 0x388]
not dword [rdx + 0x1d4]
not dword [rdx + 0x2cc]
not dword [rdx + 0xb0]
xor dword [rdx + 0x2ac], 0x341311be
add dword [rdx + 0x1e4], 0x1b5d7e27
xor dword [rdx + 0x384], 0x69474121
not dword [rdx + 0x138]
add dword [rdx + 0x2bc], 0x57183ecc
not dword [rdx + 0x114]
sub dword [rdx + 0x2a0], 0x447a2150
xor dword [rdx + 0x9c], 0x5bc26c97
xor dword [rdx + 0x338], 0x3fce548d
add dword [rdx + 0xe0], 0x16f22044
add dword [rdx + 0x27c], 0x44d76c9e
not dword [rdx + 0x4c]
sub dword [rdx + 0x1e8], 0x273e3f63
not dword [rdx + 0x350]
not dword [rdx + reloc.Mso20Win32Client.dll_Ordinal_844]
add rbx, reloc.Mso20Win32Client.dll_Ordinal_255
add rdx, reloc.Mso20Win32Client.dll_Ordinal_255
cmp rbx, reloc.Mso20Win32Client.dll_Ordinal_255
jne reloc.Mso20Win32Client.dll_Ordinal_255
pop rcx
call fcn.1400d9d3e
mov rsp, rbp
pop rbp
pop r15
pop r14
pop r13
pop r12
pop r11
pop r10
pop r9
pop r8
pop rdi
pop rsi
pop rbp
pop rbx
pop rdx
pop rcx
pop rax