Function at 0x140310a70
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1c8
mov rax, qword [0x140508878]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
mov r12, qword [rcx + 8]
mov r11, rcx
mov rax, qword [rcx + 0x38]
mov r14d, edx
mov r10, qword [rcx + 0x70]
sub r14d, r12d
mov qword [rsp + 0x78], rax
mov rbx, rdx
mov eax, dword [rcx + 0x34]
mov rdi, r8
mov r15, qword [r11 + 0xf8]
mov esi, 1
mov dword [rsp + 0x30], eax
mov r13d, 0x38
mov eax, dword [rcx + 0x18]
mov ebp, 3
mov ecx, dword [rcx + 0x100]
mov dword [rsp + 0x38], eax
add rax, r12
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x88], r9
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], r8
mov r8d, edx
sub r8d, r12d
mov qword [rsp + 0x48], r15
mov edx, esi
mov qword [rsp + 0x28], r10
shl edx, cl
mov eax, r8d
mov ecx, dword [r11 + 0x1c]
mov r9d, r8d
sub eax, ecx
mov qword [rsp + 0x58], r12
sub r9d, edx
mov dword [rsp + 0x24], r14d
cmp eax, edx
mov dword [rsp + 0x34], r8d
mov eax, dword [r11 + 0x10c]
mov rdx, qword [rbx]
cmovbe r9d, ecx
cmp dword [r11 + 0x28], 0
cmovne r9d, ecx
mov ecx, 6
cmp eax, ecx
mov dword [rsp + 0x60], r9d
mov r9, qword [r11 + 0x60]
cmovb ecx, eax
mov qword [rsp + 0x50], r9
shl esi, cl
movabs rax, 0xcf1bbcdcbf9b0000
imul rdx, rax
mov ecx, r13d
mov dword [rsp + 0x20], esi
sub ecx, dword [r15 + 0x34]
mov rax, rdx
mov r15, qword [r15 + 0x38]
shr rax, cl
mov ecx, eax
mov qword [rsp + 0x98], rax
mov rax, qword [rsp + 0x48]
shr rcx, 2
and ecx, 0x3fffffc0
add r15, rcx
mov rax, qword [rax + 0x70]
mov qword [rsp + 0x90], r15
lea rax, [rax + rcx*4]
mov qword [rsp + 0xa0], rax
prefetcht0 byte [rax]
prefetcht0 byte [rax + 0x40]
prefetcht0 byte [r15]
prefetcht0 byte [r15 + 0x20]
xor r15d, r15d
mov dword [rsp + 0x3c], 0x3f
cmp dword [r11 + 0x12c], r15d
jne 0x140310eee
mov r10d, dword [r11 + 0x2c]
mov eax, r14d
sub eax, r10d
cmp eax, 0x180
jbe 0x140310d99
lea eax, [r10 + 0x60]
cmp r10d, eax
jae 0x140310cd8
mov rbx, qword [rsp + 0x28]
mov edi, r13d
sub edi, dword [rsp + 0x30]
add r12, 8
mov rbp, qword [rsp + 0x78]
add r12, r10
mov r14d, r10d
mov esi, eax
movabs r13, 0xcf1bbcdcbf9b0000
nop dword [rax + rax]
mov rdx, qword [r12]
mov ecx, edi
imul rdx, r13
xor rdx, qword [r11 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [rbx + rax*4]
prefetcht0 byte [rbx + rax*4 + 0x40]
prefetcht0 byte [rax + rbp]
prefetcht0 byte [rax + rbp + 0x20]
mov rax, r14
lea r12, [r12 + 1]
and eax, 7
mov r9d, dword [r11 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r11 + rax*4 + 0x40], edx
mov eax, r15d
shr r8, 2
and r8d, 0x3fffffc0
movzx ecx, byte [r8 + rbp]
lea rdx, [r8 + rbp]
dec ecx
and ecx, 0x3f
cmove eax, dword [rsp + 0x3c]
inc r14
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [rbx + rax*4], r10d
inc r10d
cmp r10d, esi
jb 0x140310c30
mov rbx, qword [rsp + 0x68]
mov ebp, 3
mov rdi, qword [rsp + 0x70]
mov esi, dword [rsp + 0x20]
mov r14d, dword [rsp + 0x24]
mov r12, qword [rsp + 0x58]
lea r13d, [rbp + 0x35]
mov rcx, qword [r11 + 0x70]
lea r10d, [r14 - 0x20]
mov rdx, qword [r11 + 0x38]
lea rax, [rbx + 1]
mov qword [rsp + 0x40], rcx
lea r9, [r10 + r12]
mov ecx, eax
mov r8d, r10d
sub ecx, r10d
sub ecx, r12d
inc ecx
cmp r9, rax
mov eax, 8
cmova ecx, r15d
cmp ecx, eax
cmova ecx, eax
lea eax, [r10 + rcx]
cmp r10d, eax
jae 0x140310d99
mov rdi, qword [rsp + 0x40]
mov r12d, r13d
sub r12d, dword [r11 + 0x34]
mov rsi, rdx
mov r14d, ecx
movabs rbx, 0xcf1bbcdcbf9b0000
nop dword [rax + rax]
mov rdx, qword [r9]
mov ecx, r12d
imul rdx, rbx
xor rdx, qword [r11 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [rdi + rax*4]
prefetcht0 byte [rdi + rax*4 + 0x40]
prefetcht0 byte [rsi + rax]
prefetcht0 byte [rsi + rax + 0x20]
mov rax, r8
lea r9, [r9 + 1]
and eax, 7
inc r8
mov dword [r11 + rax*4 + 0x40], edx
sub r14, 1
jne 0x140310d40
mov rbx, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
mov esi, dword [rsp + 0x20]
mov r14d, dword [rsp + 0x24]
mov rax, qword [r11 + 0x70]
mov rcx, qword [r11 + 0x38]
mov qword [rsp + 0x80], rax
mov rax, qword [r11 + 8]
cmp r10d, r14d
jae 0x140310e83
mov rdi, qword [rsp + 0x80]
lea r12, [rax + 8]
mov ebx, dword [rsp + 0x24]
mov esi, r13d
sub esi, dword [r11 + 0x34]
mov rbp, rcx
mov r14d, r10d
movabs r13, 0xcf1bbcdcbf9b0000
add r12, r14
mov rdx, qword [r12]
mov ecx, esi
imul rdx, r13
xor rdx, qword [r11 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [rdi + rax*4]
prefetcht0 byte [rdi + rax*4 + 0x40]
prefetcht0 byte [rax + rbp]
prefetcht0 byte [rax + rbp + 0x20]
mov rax, r14
lea r12, [r12 + 1]
and eax, 7
mov r9d, dword [r11 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r11 + rax*4 + 0x40], edx
mov eax, r15d
shr r8, 2
and r8d, 0x3fffffc0
movzx ecx, byte [r8 + rbp]
lea rdx, [r8 + rbp]
dec ecx
and ecx, 0x3f
cmove eax, dword [rsp + 0x3c]
inc r14
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [rdi + rax*4], r10d
inc r10d
cmp r10d, ebx
jb 0x140310de0
mov rbx, qword [rsp + 0x68]
mov ebp, 3
mov rdi, qword [rsp + 0x70]
mov esi, dword [rsp + 0x20]
mov r14d, dword [rsp + 0x24]
lea r13d, [rbp + 0x35]
mov rax, qword [rsp + 0x58]
sub r13d, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
movzx ecx, r13b
mov r10, qword [rsp + 0x28]
mov dword [r11 + 0x2c], r14d
mov rdx, qword [r8 + rax + 8]
movabs rax, 0xcf1bbcdcbf9b0000
imul rdx, rax
xor rdx, qword [rsp + 0x50]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r10 + rax*4]
prefetcht0 byte [r10 + rax*4 + 0x40]
mov rcx, qword [rsp + 0x78]
prefetcht0 byte [rax + rcx]
prefetcht0 byte [rax + rcx + 0x20]
and r8d, 7
mov r9d, dword [r11 + r8*4 + 0x40]
mov dword [r11 + r8*4 + 0x40], edx
jmp 0x140310f06
sub r13d, dword [rsp + 0x30]
xor r9, rdx
movzx ecx, r13b
mov dword [r11 + 0x2c], r8d
shr r9, cl
mov rcx, qword [rsp + 0x78]
add dword [r11 + 0x68], r9d
mov eax, r9d
shr rax, 2
mov r14, r15
and eax, 0x3fffffc0
mov qword [rsp + 0x50], r9
add rcx, rax
mov qword [rsp + 0x28], rcx
lea r12, [r10 + rax*4]
mov r10, r15
movdqu xmm0, xmmword [rcx]
movzx r13d, byte [rcx]
movsx eax, r9b
movd xmm2, eax
mov rax, rcx
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
movdqa xmm1, xmm2
pcmpeqb xmm1, xmm0
movdqu xmm0, xmmword [rcx + 0x10]
pmovmskb r8d, xmm1
movdqu xmm1, xmmword [rcx + 0x20]
pcmpeqb xmm0, xmm2
pmovmskb edx, xmm0
pcmpeqb xmm1, xmm2
movdqu xmm0, xmmword [rcx + 0x30]
pmovmskb eax, xmm1
pcmpeqb xmm0, xmm2
pmovmskb r9d, xmm0
shl r9, 0x10
or r9, rax
movsxd rax, edx
shl r9, 0x10
mov edx, r13d
or r9, rax
and edx, 0x3f
movsxd rax, r8d
mov ecx, edx
shl r9, 0x10
neg ecx
or r9, rax
and ecx, 0x3f
mov r8, r9
shl r8, cl
mov ecx, edx
shr r9, cl
or r8, r9
jbe 0x140310ffb
mov rdx, qword [rsp + 0x58]
mov r9d, dword [rsp + 0x60]
test esi, esi
je 0x140310ff7
bsf rcx, r8
add ecx, r13d
and ecx, 0x3f
je 0x140310fee
mov ecx, dword [r12 + rcx*4]
cmp ecx, r9d
jb 0x140310ff7
prefetcht0 byte [rcx + rdx]
mov dword [rsp + r14*4 + 0xb0], ecx
inc r14
dec esi
lea rax, [r8 - 1]
and r8, rax
ja 0x140310fc4
mov dword [rsp + 0x20], esi
lea ecx, [r13 - 1]
mov eax, r15d
and ecx, 0x3f
mov edx, 0x3f
cmove eax, edx
mov rdx, qword [rsp + 0x28]
add ecx, eax
mov rax, qword [rsp + 0x50]
mov byte [rdx], cl
mov byte [rcx + rdx], al
mov eax, dword [r11 + 0x2c]
mov dword [r12 + rcx*4], eax
inc dword [r11 + 0x2c]
test r14, r14
je 0x14031112d
mov r15, qword [rsp + 0x58]
mov esi, dword [rsp + 0x34]
mov r11, qword [rsp + 0x88]
nop dword [rax]
nop dword [rax + rax]
mov r9d, dword [rsp + r10*4 + 0xb0]
mov eax, dword [rbx + rbp - 3]
lea rdx, [r15 + r9]
cmp dword [rdx + rbp - 3], eax
jne 0x14031111a
lea r8, [rdi - 7]
mov rax, rbx
cmp rbx, r8
jae 0x1403110b9
mov rcx, qword [rdx]
xor rcx, qword [rbx]
je 0x140311088
bsf rcx, rcx
shr rcx, 3
jmp 0x1403110fe
add rax, 8
add rdx, 8
cmp rax, r8
jae 0x1403110b9
nop word [rax + rax]
mov rcx, qword [rax]
xor rcx, qword [rdx]
jne 0x14031130c
add rax, 8
add rdx, 8
cmp rax, r8
jb 0x1403110a0
lea rcx, [rdi - 3]
cmp rax, rcx
jae 0x1403110d0
mov ecx, dword [rax]
cmp dword [rdx], ecx
jne 0x1403110d0
add rax, 4
add rdx, 4
lea rcx, [rdi - 1]
cmp rax, rcx
jae 0x1403110e9
movzx ecx, word [rax]
cmp word [rdx], cx
jne 0x1403110e9
add rax, 2
add rdx, 2
cmp rax, rdi
jae 0x1403110f8
movzx ecx, byte [rax]
cmp byte [rdx], cl
jne 0x1403110f8
inc rax
mov rcx, rax
sub rcx, rbx
cmp rcx, rbp
jbe 0x14031111a
mov eax, esi
mov rbp, rcx
sub eax, r9d
add eax, 3
mov qword [r11], rax
lea rax, [rcx + rbx]
cmp rax, rdi
je 0x140311126
inc r10
cmp r10, r14
jb 0x140311050
mov esi, dword [rsp + 0x20]
xor r15d, r15d
mov r9, qword [rsp + 0x90]
mov r14, r15
mov rax, qword [rsp + 0x48]
movdqu xmm0, xmmword [r9]
movzx r11d, byte [r9]
mov r10, qword [rax + 8]
mov r12d, dword [rax + 0x18]
mov ecx, r10d
mov rax, qword [rax]
sub ecx, eax
mov qword [rsp + 0x48], rax
add dword [rsp + 0x38], ecx
mov rcx, qword [rsp + 0x98]
movsx eax, cl
mov qword [rsp + 0x28], r10
movd xmm2, eax
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
movdqa xmm1, xmm2
pcmpeqb xmm1, xmm0
movdqu xmm0, xmmword [r9 + 0x10]
pmovmskb r8d, xmm1
movdqu xmm1, xmmword [r9 + 0x20]
pcmpeqb xmm0, xmm2
pmovmskb edx, xmm0
pcmpeqb xmm1, xmm2
movdqu xmm0, xmmword [r9 + 0x30]
pmovmskb eax, xmm1
pcmpeqb xmm0, xmm2
pmovmskb r9d, xmm0
shl r9, 0x10
or r9, rax
movsxd rax, edx
shl r9, 0x10
mov edx, r11d
or r9, rax
and edx, 0x3f
movsxd rax, r8d
mov ecx, edx
shl r9, 0x10
neg ecx
or r9, rax
and ecx, 0x3f
mov r8, r9
shl r8, cl
mov ecx, edx
shr r9, cl
or r8, r9
jbe 0x1403112e5
mov rdx, qword [rsp + 0xa0]
nop dword [rax]
test esi, esi
je 0x140311233
bsf rcx, r8
add ecx, r11d
and ecx, 0x3f
je 0x14031122a
mov ecx, dword [rdx + rcx*4]
cmp ecx, r12d
jb 0x140311233
prefetcht0 byte [rcx + r10]
mov dword [rsp + r15*4 + 0xb0], ecx
inc r15
dec esi
lea rax, [r8 - 1]
and r8, rax
ja 0x140311200
test r15, r15
je 0x1403112e5
nop dword [rax]
mov r13d, dword [rsp + r14*4 + 0xb0]
mov eax, dword [rbx]
lea r11, [r10 + r13]
cmp dword [r11], eax
jne 0x1403112d9
mov rcx, qword [rsp + 0x48]
lea r12, [rbx + 4]
add r11, 4
mov rax, r12
sub rax, r11
mov r8, rdi
add rcx, rax
mov rdx, r11
cmp rcx, rdi
cmovb r8, rcx
mov rcx, r12
call fcn.1402fbe50
mov rsi, rax
add rax, r11
cmp rax, qword [rsp + 0x48]
jne 0x1403112a6
mov rdx, qword [rsp + 0xa8]
lea rcx, [rsi + r12]
mov r8, rdi
call fcn.1402fbe50
add rsi, rax
add rsi, 4
cmp rsi, rbp
jbe 0x1403112d4
mov eax, dword [rsp + 0x34]
mov rbp, rsi
mov rcx, qword [rsp + 0x88]
sub eax, r13d
sub eax, dword [rsp + 0x38]
add eax, 3
mov qword [rcx], rax
lea rax, [rsi + rbx]
cmp rax, rdi
je 0x1403112e5
mov r10, qword [rsp + 0x28]
inc r14
cmp r14, r15
jb 0x140311240
mov rax, rbp
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.140355f00
add rsp, 0x1c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
bsf rcx, rcx
shr rcx, 3
sub rcx, rbx
add rcx, rax
jmp 0x1403110fe