Function at 0x10009920
Capabilities:
Encode data using xor

Disassembly:
mov eax, 0x14
call fcn.10115600
push esi
mov esi, dword [esp + 0x1c]
mov eax, dword [esi + 0x170]
mov ecx, dword [esi + 0x174]
mov edx, dword [esi + 0x160]
mov dword [esp + 8], eax
mov eax, dword [esi + 0x164]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x14], eax
xor eax, eax
add ecx, dword [esi + 0x38]
mov dword [esp + 0x10], edx
adc eax, dword [esi + 0x3c]
cmp eax, 0xf
ja 0x10009ba6
jb 0x10009977
cmp ecx, 0xffffffe0
ja 0x10009ba6
cmp dword [esi + 0x16c], 0
mov dword [esi + 0x38], ecx
mov dword [esi + 0x3c], eax
je 0x1000999d
lea ecx, [esi + 0x60]
push ecx
lea eax, [esi + 0x40]
push eax
call edx
add esp, 8
mov dword [esi + 0x16c], 0
mov ecx, dword [esi + 0x168]
test ecx, ecx
push ebx
mov ebx, dword [esp + 0x24]
push ebp
mov ebp, dword [esi + 0xc]
push edi
mov edi, dword [esp + 0x30]
bswap ebp
mov dword [esp + 0x28], ecx
je 0x10009a0b
jmp 0x100099c4
mov ecx, dword [esp + 0x28]
cmp dword [esp + 0x34], 0
je 0x100099f0
mov al, byte [ecx + esi + 0x10]
xor al, byte [ebx]
sub dword [esp + 0x34], 1
mov byte [edi], al
xor byte [ecx + esi + 0x40], al
add ecx, 1
add edi, 1
add ebx, 1
and ecx, 0xf
mov dword [esp + 0x28], ecx
jne 0x100099c0
jmp 0x100099f8
test ecx, ecx
jne 0x10009b96
lea ecx, [esi + 0x60]
push ecx
lea edx, [esi + 0x40]
push edx
call dword [esp + 0x24]
mov ecx, dword [esp + 0x30]
add esp, 8
mov edx, dword [esp + 0x34]
cmp edx, 0xc00
jb 0x10009ab4
mov eax, 0xaaaaaaab
mul edx
shr edx, 0xb
mov dword [esp + 0x1c], edx
lea esp, [esp]
mov dword [esp + 0x18], 0xc0
mov eax, dword [esp + 0x10]
push eax
lea eax, [esi + 0x10]
push eax
push esi
call dword [esp + 0x20]
add ebp, 1
mov ecx, ebp
bswap ecx
mov dword [esi + 0xc], ecx
mov edx, dword [esi + 0x10]
xor edx, dword [ebx]
add esp, 0xc
mov dword [edi], edx
mov eax, dword [ebx + 4]
xor eax, dword [esi + 0x14]
add edi, 0x10
mov dword [edi - 0xc], eax
mov ecx, dword [ebx + 8]
xor ecx, dword [esi + 0x18]
add ebx, 0x10
mov dword [edi - 8], ecx
mov edx, dword [ebx - 4]
xor edx, dword [esi + 0x1c]
sub dword [esp + 0x18], 1
mov dword [edi - 4], edx
jne 0x10009a38
push 0xc00
lea eax, [edi - 0xc00]
push eax
lea eax, [esi + 0x60]
push eax
lea eax, [esi + 0x40]
push eax
call dword [esp + 0x30]
sub dword [esp + 0x44], 0xc00
add esp, 0x10
sub dword [esp + 0x1c], 1
jne 0x10009a30
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x34]
mov eax, edx
and eax, 0xfffffff0
mov dword [esp + 0x18], eax
je 0x10009b40
cmp edx, 0x10
jb 0x10009b23
shr edx, 4
mov dword [esp + 0x1c], edx
nop
mov ecx, dword [esp + 0x10]
push ecx
lea eax, [esi + 0x10]
push eax
push esi
call dword [esp + 0x20]
add ebp, 1
sub dword [esp + 0x40], 0x10
mov edx, ebp
bswap edx
mov dword [esi + 0xc], edx
mov eax, dword [esi + 0x10]
xor eax, dword [ebx]
add esp, 0xc
mov dword [edi], eax
mov ecx, dword [ebx + 4]
xor ecx, dword [esi + 0x14]
add edi, 0x10
mov dword [edi - 0xc], ecx
mov edx, dword [ebx + 8]
xor edx, dword [esi + 0x18]
add ebx, 0x10
mov dword [edi - 8], edx
mov eax, dword [ebx - 4]
xor eax, dword [esi + 0x1c]
sub dword [esp + 0x1c], 1
mov dword [edi - 4], eax
jne 0x10009ad0
mov eax, dword [esp + 0x18]
push eax
mov ecx, edi
sub ecx, eax
push ecx
lea edx, [esi + 0x60]
push edx
lea eax, [esi + 0x40]
push eax
call dword [esp + 0x30]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x44]
add esp, 0x10
test edx, edx
je 0x10009b96
mov ecx, dword [esp + 0x10]
push ecx
lea edx, [esi + 0x10]
push edx
push esi
call dword [esp + 0x20]
mov ecx, dword [esp + 0x34]
add ebp, 1
bswap ebp
add esp, 0xc
mov dword [esi + 0xc], ebp
lea edx, [ecx + edi]
sub ebx, edi
jmp 0x10009b70
mov al, byte [esi + ecx + 0x10]
xor al, byte [ebx + edx]
mov edi, dword [esp + 0x34]
mov byte [edx], al
xor byte [esi + ecx + 0x40], al
sub edi, 1
add ecx, 1
add edx, 1
test edi, edi
mov dword [esp + 0x34], edi
jne 0x10009b70
mov dword [esp + 0x28], ecx
pop edi
pop ebp
pop ebx
mov dword [esi + 0x168], ecx
xor eax, eax
pop esi
add esp, 0x14
ret
or eax, 0xffffffff
pop esi
add esp, 0x14
ret