Function at 0x14009f948
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x48
movzx r13d, word [rcx + 0x48]
xor r15d, r15d
mov r12b, dl
and r12b, 1
mov rdi, rdx
xor r13w, 0x7b
and rdi, 0xfffffffffffffffe
mov rbx, rcx
mov qword [rax + 0x18], r15
mov byte [rsp + 0x90], r12b
cmp r12b, r15b
jne 0x14009f9cc
movzx edx, word [rcx + 0x48]
bts edx, 0x10
call fcn.14005642c
mov word [rbx + 0xc8], r15w
movzx eax, word [rdi]
cmp word [rbx + 0x92], ax
je 0x14009f9c6
cmp word [rbx + 0x94], ax
je 0x14009f9c6
cmp word [rbx + 0x8a], ax
je 0x14009f9c6
cmp word [rbx + 0x90], ax
jne 0x14009f9cc
add rdi, 2
jmp 0x14009f99f
test byte [rbx + 0x10], 0x80
mov ebp, r15d
mov qword [rsp + 0x98], rdi
mov qword [rsp + 0x30], r15
je 0x14009f9f0
lea r14, [rsp + 0x30]
cmp qword [0x14010de88], r15
jne 0x14009f9f5
lea r14, [rsp + 0x38]
movzx eax, word [rbx + 0x88]
cmp word [rdi], ax
je 0x14009ffe0
mov r12d, 9
test byte [rbx + 0x11], 1
je 0x14009fa1e
mov rcx, qword [rsp + 0xa0]
call fcn.1400503d8
test byte [rbx + 0xc8], 0x42
jne 0x14009ffd8
movzx esi, word [rbx + 0x88]
mov rcx, rdi
mov qword [rsp + 0x98], rdi
call fcn.140057b84
cmp word [rax], si
je 0x14009ffd8
cmp ebp, r15d
jg 0x14009fdbf
movzx edx, word [rbx + 0x96]
movzx eax, word [rdi]
cmp dx, ax
jne 0x14009fb48
add rdi, 2
mov r9, rdi
mov qword [rsp + 0x98], rdi
movzx eax, word [rdi]
cmp word [rbx + 0x92], ax
je 0x14009fa9d
cmp word [rbx + 0x94], ax
je 0x14009fa9d
cmp word [rbx + 0x8a], ax
je 0x14009fa9d
cmp word [rbx + 0x90], ax
jne 0x14009faa3
add rdi, 2
jmp 0x14009fa6e
cmp word [rdi], si
je 0x14009fa0b
lea rdx, [rbx + 0xaa]
mov rcx, rdi
call fcn.1400563fc
cmp eax, r15d
je 0x14009fa0b
lea rdx, [rbx + 0x9a]
mov rcx, rdi
call fcn.1400563fc
cmp eax, r15d
je 0x14009fa0b
mov rdx, qword [rbx + 0x40]
lea rax, [0x1400f04f4]
mov qword [rsp + 0x98], r9
lea r8, [rsp + 0x98]
xor r9d, r9d
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.14008f8a8
mov rdi, qword [rsp + 0x98]
movzx eax, word [rdi]
cmp word [rbx + 0x92], ax
je 0x14009fb3a
cmp word [rbx + 0x94], ax
je 0x14009fb3a
cmp word [rbx + 0x8a], ax
je 0x14009fb3a
cmp word [rbx + 0x90], ax
jne 0x14009fa0b
add rdi, 2
mov qword [rsp + 0x98], rdi
jmp 0x14009fb0f
cmp ax, word [rbx + 0xba]
jne 0x14009fdbf
movzx eax, word [rbx + 0xbc]
cmp word [rdi + 2], ax
jne 0x14009fdbf
movzx r9d, word [rbx + 0x92]
lea rax, [rdi + 4]
mov qword [rsp + 0x98], rax
movzx ecx, word [rax]
cmp r9w, cx
je 0x14009fb9e
cmp word [rbx + 0x94], cx
je 0x14009fb9e
cmp word [rbx + 0x8a], cx
je 0x14009fb9e
cmp word [rbx + 0x90], cx
jne 0x14009fba4
add rax, 2
jmp 0x14009fb72
movzx ecx, word [rax]
cmp cx, si
je 0x14009fbdb
cmp cx, word [rbx + 0x8a]
je 0x14009fbdb
cmp cx, word [rbx + 0x90]
je 0x14009fbdb
cmp dx, cx
je 0x14009fbdb
add rax, 2
mov qword [rsp + 0x98], rax
mov cx, word [rax]
cmp cx, word [rbx + 0x88]
jne 0x14009fbac
movzx ecx, word [rbx + 0x94]
movzx edx, word [rbx + 0x8a]
movzx r8d, word [rbx + 0x90]
mov rsi, rax
cmp r9w, word [rsi]
je 0x14009fc0a
cmp cx, word [rsi]
je 0x14009fc0a
cmp dx, word [rsi]
je 0x14009fc0a
cmp r8w, word [rsi]
jne 0x14009fc10
add rsi, 2
jmp 0x14009fbf4
cmp r13w, word [rsi]
jne 0x14009fd30
sub rax, rdi
lea rcx, [rsp + 0xa8]
mov rdx, rdi
sar rax, 1
mov r8, rax
call fcn.140062550
mov r11, qword [rsp + 0x98]
mov r9, qword [rsp + 0xa8]
sub r11, rdi
sar r11, 1
dec r11d
movsxd rcx, r11d
cmp rcx, r15
jl 0x14009fc63
movzx eax, word [rbx + 0x48]
xor word [r9 + rcx*2], ax
sub rcx, 1
jns 0x14009fc54
add rsi, 2
mov r10, rsi
mov qword [rsp + 0x98], rsi
movzx eax, word [r10]
cmp word [rbx + 0x92], ax
je 0x14009fc9a
cmp word [rbx + 0x94], ax
je 0x14009fc9a
cmp word [rbx + 0x8a], ax
je 0x14009fc9a
cmp word [rbx + 0x90], ax
jne 0x14009fca8
add r10, 2
mov qword [rsp + 0x98], r10
jmp 0x14009fc72
movzx eax, word [rbx + 0x88]
cmp word [r10], ax
je 0x14009fd1b
lea rdx, [rbx + 0xaa]
mov rcx, r10
call fcn.1400563fc
cmp eax, r15d
je 0x14009fd1b
lea rdx, [rbx + 0x9a]
mov rcx, r10
call fcn.1400563fc
cmp eax, r15d
je 0x14009fd1b
mov rdx, qword [rbx + 0x40]
mov qword [rsp + 0x20], r9
lea r8, [rsp + 0x98]
xor r9d, r9d
mov rcx, rbx
mov qword [rsp + 0x98], rsi
call fcn.14008f8a8
mov rdi, qword [rsp + 0x98]
lea rcx, [rsp + 0xa8]
call fcn.140050424
jmp 0x14009fa0b
lea rcx, [rsp + 0xa8]
call fcn.140050424
mov rax, qword [rsp + 0x98]
movzx ecx, word [rax]
movzx edx, word [rbx + 0x92]
cmp cx, dx
je 0x14009fd7d
cmp cx, word [rbx + 0x94]
je 0x14009fd7d
cmp cx, word [rbx + 0x8a]
je 0x14009fd7d
cmp cx, word [rbx + 0x90]
jne 0x14009fd86
jmp 0x14009fd7d
cmp word [rbx + 0x8a], cx
je 0x14009fd86
cmp word [rbx + 0x90], cx
je 0x14009fd86
add rax, 2
mov qword [rsp + 0x98], rax
mov cx, word [rax]
cmp word [rbx + 0x88], cx
jne 0x14009fd5c
movzx ecx, word [rax]
cmp dx, cx
je 0x14009fda9
cmp word [rbx + 0x94], cx
je 0x14009fda9
cmp word [rbx + 0x8a], cx
je 0x14009fda9
cmp word [rbx + 0x90], cx
jne 0x14009fdb7
add rax, 2
mov qword [rsp + 0x98], rax
jmp 0x14009fd86
mov rdi, rax
jmp 0x14009fa0b
lea r9, [rsp + 0x98]
lea rdx, [rsp + 0xa0]
mov r8, rdi
mov rcx, rbx
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x98], r15
mov byte [rsp + 0x20], r15b
call fcn.140018480
cmp word [rax], r15w
je 0x14009ff9d
cmp word [rax], 0x2f
je 0x14009ff9d
cmp word [rax], 0x3b
je 0x14009ff9d
cmp word [rax], 0x60
je 0x14009ff9d
lea r8, [rsp + 0xa0]
lea rdx, [rsp + 0x98]
mov r9, rax
mov rcx, rbx
call fcn.14006098c
lea rdx, str._SUB
mov r8d, 4
mov rcx, rax
mov rdi, rax
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x14009fe74
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x14009fe5d
cmp ax, 0xd
jbe 0x14009fe6d
mov esi, 0x20
cmp si, ax
je 0x14009fe6d
cmp ax, r15w
jne 0x14009fe79
inc ebp
jmp 0x14009ff9d
mov esi, 0x20
lea rdx, str._END
mov r8d, 4
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x14009febf
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x14009fea4
cmp ax, 0xd
jbe 0x14009feaf
cmp si, ax
je 0x14009feaf
cmp ax, r15w
jne 0x14009febf
cmp ebp, r15d
jle 0x14009ff9d
dec ebp
jmp 0x14009ff9d
cmp ebp, r15d
jg 0x14009ff9d
cmp byte [0x14010de66], 3
jne 0x14009ff7f
lea rcx, str.REGI
mov r8d, 4
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x14009ff0b
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x14009ff00
cmp ax, 0xd
jbe 0x14009ff7f
cmp si, ax
je 0x14009ff7f
cmp ax, r15w
je 0x14009ff7f
lea rcx, str.ENVI
mov r8d, 4
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x14009ff41
movzx eax, word [rdi + 8]
cmp r12w, ax
ja 0x14009ff36
cmp ax, 0xd
jbe 0x14009ff7f
cmp si, ax
je 0x14009ff7f
cmp ax, r15w
je 0x14009ff7f
lea rcx, [0x1400fc000]
mov r8d, 3
mov rdx, rdi
call qword [sym.imp.SHLWAPI.dll_StrCmpNIW]
cmp eax, r15d
jne 0x14009ff77
movzx eax, word [rdi + 6]
cmp r12w, ax
ja 0x14009ff6c
cmp ax, 0xd
jbe 0x14009ff7f
cmp si, ax
je 0x14009ff7f
cmp ax, r15w
je 0x14009ff7f
mov rcx, rbx
call fcn.140024684
mov rax, qword [r14]
lea r9, [rsp + 0x98]
xor r8d, r8d
mov rdx, rdi
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.1400409b4
mov rdi, qword [rsp + 0x98]
movzx eax, word [rdi]
cmp ax, word [rbx + 0x8a]
je 0x14009ffba
cmp ax, word [rbx + 0x90]
jne 0x14009ffc8
add rdi, 2
mov qword [rsp + 0x98], rdi
jmp 0x14009ffa5
movzx eax, word [rbx + 0x88]
cmp word [rdi], ax
jne 0x14009fa0b
mov r12b, byte [rsp + 0x90]
cmp r12b, r15b
jne 0x14009ffed
mov word [rbx + 0xc8], r15w
lea rcx, [rsp + 0xa0]
call fcn.140050424
xor eax, eax
add rsp, 0x48
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret