Function at 0x14009ee00
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1c8
mov rax, qword [0x140114e78]
xor rax, rsp
mov qword [rsp + 0x1b0], rax
mov eax, dword [rcx + 0x34]
mov r10, rcx
mov r15, qword [rcx + 0x70]
mov r11d, edx
mov r12, qword [rcx + 0x38]
mov rdi, rdx
mov dword [rsp + 0x44], eax
mov ebp, 1
mov eax, dword [rcx + 0x18]
mov rbx, r8
mov r8, qword [rcx + 8]
mov r13d, ebp
mov ecx, dword [rcx + 0x100]
sub r11d, r8d
mov r14d, dword [r10 + 0x10c]
mov esi, r11d
mov dword [rsp + 0x28], eax
add rax, r8
mov qword [rsp + 0xa8], rax
mov eax, r11d
mov qword [rsp + 0x80], r9
mov r9d, edx
sub r9d, r8d
mov qword [rsp + 0x78], rbx
mov edx, ebp
mov qword [rsp + 0x98], r15
shl edx, cl
mov ebp, 3
mov ecx, dword [r10 + 0x1c]
sub esi, edx
sub eax, ecx
mov qword [rsp + 0x70], r12
cmp eax, edx
mov qword [rsp + 0x30], r8
mov rax, qword [r10 + 0x60]
mov rdx, qword [r10 + 0xf8]
cmovbe esi, ecx
cmp dword [r10 + 0x28], 0
mov qword [rsp + 0x60], rax
cmovne esi, ecx
mov dword [rsp + 0x38], r9d
mov ecx, 5
mov dword [rsp + 0x40], r11d
cmp r14d, ecx
mov dword [rsp + 0x68], esi
mov qword [rsp + 0x90], rbp
cmovb ecx, r14d
mov qword [rsp + 0x50], rdx
imul eax, dword [rdi], 0x9e3779b1
shl r13d, cl
mov ecx, 0x22
sub ecx, dword [rdx + 0x108]
mov dword [rsp + 0x3c], r13d
mov dword [rsp + 0x48], eax
shr rax, cl
lea rax, [rax*4]
lea rcx, [rax*4]
mov qword [rsp + 0xa0], rax
mov rax, qword [rdx + 0x70]
mov qword [rsp + 0x58], rcx
prefetcht0 byte [rcx + rax]
xor esi, esi
mov qword [rsp + 0x88], rsi
cmp r14d, 5
jbe 0x14009ef55
lea ecx, [r14 - 5]
mov eax, 1
shl eax, cl
mov dword [rsp + 0x24], eax
jmp 0x14009ef59
mov dword [rsp + 0x24], esi
mov dword [rsp + 0x20], 0x1f
cmp dword [r10 + 0x12c], esi
jne 0x14009f23f
mov r11d, dword [r10 + 0x2c]
mov eax, r9d
mov ecx, dword [rsp + 0x44]
sub eax, r11d
mov r14, r15
mov r15, r12
mov r12d, ecx
mov rdx, r8
cmp eax, 0x180
jbe 0x14009f119
lea r12d, [r11 + 0x60]
cmp r11d, r12d
jae 0x14009f062
mov r13, qword [rsp + 0x98]
lea r15, [r8 + 8]
mov rbp, qword [rsp + 0x70]
mov ebx, 0x18
sub ebx, ecx
mov r14d, r11d
add r15, r11
nop
mov eax, dword [r10 + 0x60]
mov rcx, rbx
imul edx, dword [r15], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r13 + rax*4]
prefetcht0 byte [r13 + rax*4 + 0x40]
prefetcht0 byte [rax + rbp]
mov rax, r14
lea r15, [r15 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, esi
shr r8, 3
and r8d, 0x1fffffe0
movzx ecx, byte [r8 + rbp]
lea rdx, [r8 + rbp]
dec ecx
and ecx, 0x1f
cmove eax, dword [rsp + 0x20]
inc r14
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r13 + rax*4], r11d
inc r11d
cmp r11d, r12d
jb 0x14009efc0
mov rdx, qword [r10 + 8]
mov rbx, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x90]
mov r13d, dword [rsp + 0x3c]
mov r9d, dword [rsp + 0x38]
mov r14, qword [r10 + 0x70]
lea r11d, [r9 - 0x20]
mov r9, qword [rsp + 0x30]
lea rax, [rdi + 1]
mov r15, qword [r10 + 0x38]
mov ecx, eax
mov r12d, dword [r10 + 0x34]
sub ecx, r11d
sub ecx, dword [rsp + 0x30]
inc ecx
mov r8d, r11d
add r9, r8
cmp r9, rax
mov eax, 8
cmova ecx, esi
cmp ecx, eax
cmova ecx, eax
lea eax, [r11 + rcx]
cmp r11d, eax
jae 0x14009f114
mov eax, 0x18
sub eax, r12d
mov r12d, ecx
mov qword [rsp + 0x48], rax
mov ecx, eax
nop word [rax + rax]
mov eax, dword [r10 + 0x60]
imul edx, dword [r9], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r14 + rax*4]
prefetcht0 byte [r14 + rax*4 + 0x40]
prefetcht0 byte [r15 + rax]
mov rax, r8
lea r9, [r9 + 1]
and eax, 7
inc r8
mov dword [r10 + rax*4 + 0x40], edx
sub r12, 1
jne 0x14009f0c0
mov r14, qword [r10 + 0x70]
mov r15, qword [r10 + 0x38]
mov r12d, dword [r10 + 0x34]
mov rdx, qword [r10 + 8]
mov r9d, dword [rsp + 0x38]
cmp r11d, r9d
jae 0x14009f1de
mov ebp, dword [rsp + 0x38]
lea r13, [r11 + 8]
mov ebx, 0x18
sub ebx, r12d
mov r12d, r11d
add r13, rdx
nop dword [rax + rax]
mov eax, dword [r10 + 0x60]
mov rcx, rbx
imul edx, dword [r13], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r14 + rax*4]
prefetcht0 byte [r14 + rax*4 + 0x40]
prefetcht0 byte [rax + r15]
mov rax, r12
lea r13, [r13 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, esi
shr r8, 3
and r8d, 0x1fffffe0
movzx ecx, byte [r8 + r15]
lea rdx, [r8 + r15]
dec ecx
and ecx, 0x1f
cmove eax, dword [rsp + 0x20]
inc r12
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r14 + rax*4], r11d
inc r11d
cmp r11d, ebp
jb 0x14009f140
mov rbx, qword [rsp + 0x78]
mov rbp, qword [rsp + 0x90]
mov r13d, dword [rsp + 0x3c]
mov r9d, dword [rsp + 0x38]
mov rax, qword [rsp + 0x30]
mov ecx, 0x18
sub ecx, dword [rsp + 0x44]
mov r8d, dword [rsp + 0x40]
mov r15, qword [rsp + 0x98]
mov dword [r10 + 0x2c], r9d
imul edx, dword [r8 + rax + 8], 0x9e3779b1
mov eax, dword [rsp + 0x60]
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 3
and eax, 0x1fffffe0
prefetcht0 byte [r15 + rax*4]
prefetcht0 byte [r15 + rax*4 + 0x40]
mov rcx, qword [rsp + 0x70]
prefetcht0 byte [rax + rcx]
and r8d, 7
mov r14d, dword [r10 + r8*4 + 0x40]
mov dword [r10 + r8*4 + 0x40], edx
jmp 0x14009f25e
mov r14d, dword [rsp + 0x48]
mov ecx, 0x18
sub ecx, dword [rsp + 0x44]
mov eax, dword [rsp + 0x60]
xor r14, rax
mov dword [r10 + 0x2c], r11d
shr r14, cl
mov rcx, r12
add dword [r10 + 0x68], r14d
mov eax, r14d
shr rax, 3
mov r11, rsi
and eax, 0x1fffffe0
mov r9, rsi
add rcx, rax
mov qword [rsp + 0x60], rcx
lea r12, [r15 + rax*4]
movzx eax, byte [rcx]
movdqu xmm0, xmmword [rcx]
mov r15d, eax
mov dword [rsp + 0x48], eax
movsx eax, r14b
and r15d, 0x1f
movd xmm2, eax
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
movdqa xmm1, xmm2
pcmpeqb xmm1, xmm0
movdqu xmm0, xmmword [rcx + 0x10]
mov ecx, r15d
neg ecx
pmovmskb eax, xmm1
and ecx, 0x1f
pcmpeqb xmm0, xmm2
pmovmskb edx, xmm0
shl edx, 0x10
or edx, eax
mov r8d, edx
mov eax, edx
shl r8d, cl
mov ecx, r15d
shr rax, cl
or r8, rax
jbe 0x14009f32e
mov rbx, qword [rsp + 0x30]
mov edx, dword [rsp + 0x68]
nop dword [rax]
test r13d, r13d
je 0x14009f324
bsf rcx, r8
add ecx, r15d
and ecx, 0x1f
je 0x14009f31b
mov ecx, dword [r12 + rcx*4]
cmp ecx, edx
jb 0x14009f324
prefetcht0 byte [rcx + rbx]
mov dword [rsp + r11*4 + 0xb0], ecx
inc r11
dec r13d
lea rax, [r8 - 1]
and r8, rax
ja 0x14009f2f0
mov rbx, qword [rsp + 0x78]
mov dword [rsp + 0x3c], r13d
mov ecx, dword [rsp + 0x48]
mov eax, esi
dec ecx
mov edx, 0x1f
and ecx, 0x1f
cmove eax, edx
add ecx, eax
mov rax, qword [rsp + 0x60]
mov byte [rax], cl
mov byte [rcx + rax], r14b
mov eax, dword [r10 + 0x2c]
mov dword [r12 + rcx*4], eax
inc dword [r10 + 0x2c]
test r11, r11
je 0x14009f45e
mov rsi, qword [rsp + 0x30]
mov r13d, dword [rsp + 0x40]
mov r14, qword [rsp + 0x80]
nop word [rax + rax]
mov r10d, dword [rsp + r9*4 + 0xb0]
mov eax, dword [rdi + rbp - 3]
lea rdx, [rsi + r10]
cmp dword [rdx + rbp - 3], eax
jne 0x14009f44b
lea r8, [rbx - 7]
mov rax, rdi
cmp rdi, r8
jae 0x14009f3e9
mov rcx, qword [rdx]
xor rcx, qword [rdi]
je 0x14009f3b8
bsf rcx, rcx
shr rcx, 3
jmp 0x14009f42e
add rax, 8
add rdx, 8
cmp rax, r8
jae 0x14009f3e9
nop word [rax + rax]
mov rcx, qword [rax]
xor rcx, qword [rdx]
jne 0x14009f5ba
add rax, 8
add rdx, 8
cmp rax, r8
jb 0x14009f3d0
lea rcx, [rbx - 3]
cmp rax, rcx
jae 0x14009f400
mov ecx, dword [rax]
cmp dword [rdx], ecx
jne 0x14009f400
add rax, 4
add rdx, 4
lea rcx, [rbx - 1]
cmp rax, rcx
jae 0x14009f419
movzx ecx, word [rax]
cmp word [rdx], cx
jne 0x14009f419
add rax, 2
add rdx, 2
cmp rax, rbx
jae 0x14009f428
movzx ecx, byte [rax]
cmp byte [rdx], cl
jne 0x14009f428
inc rax
mov rcx, rax
sub rcx, rdi
cmp rcx, rbp
jbe 0x14009f44b
mov eax, r13d
mov rbp, rcx
sub eax, r10d
add eax, 3
mov qword [r14], rax
lea rax, [rcx + rdi]
cmp rax, rbx
je 0x14009f457
inc r9
cmp r9, r11
jb 0x14009f380
mov r13d, dword [rsp + 0x3c]
xor esi, esi
mov r10, qword [rsp + 0x50]
mov r11d, 3
add r13d, dword [rsp + 0x24]
mov r14d, r11d
mov rdx, qword [rsp + 0x58]
mov r8, qword [r10]
mov r15, qword [r10 + 8]
mov r9, qword [r10 + 0x70]
mov eax, r15d
sub eax, r8d
mov qword [rsp + 0x30], r8
add eax, dword [rsp + 0x28]
cmp r13d, r11d
mov dword [rsp + 0x20], eax
lea rcx, [rdx + r9]
cmovb r14d, r13d
mov dword [rsp + 0x28], r14d
nop dword [rax]
nop dword [rax + rax]
mov eax, dword [rcx]
prefetcht0 byte [rax + r15]
lea rcx, [rcx + 4]
sub r11, 1
jne 0x14009f4b0
mov rax, qword [rsp + 0xa0]
mov ecx, dword [r9 + rax*4 + 0xc]
mov rax, qword [r10 + 0x80]
shr rcx, 8
prefetcht0 byte [rax + rcx*4]
mov dword [rsp + 0x24], esi
mov r11d, esi
test r14d, r14d
je 0x14009f5d7
nop dword [rax]
mov rax, qword [r10 + 0x70]
mov r14d, dword [rdx + rax]
lea r11, [r15 + r14]
test r14d, r14d
je 0x14009f6f0
mov eax, dword [rdi]
cmp dword [r11], eax
jne 0x14009f596
add r11, 4
lea r12, [rdi + 4]
mov rcx, r12
mov rdx, r11
sub rcx, r11
add rcx, r8
mov r8, rbx
cmp rcx, rbx
cmovb r8, rcx
mov rcx, r12
call fcn.140092810
mov r8, qword [rsp + 0x30]
mov rsi, rax
lea rcx, [rax + r11]
cmp rcx, r8
jne 0x14009f563
mov rdx, qword [rsp + 0xa8]
lea rcx, [rax + r12]
mov r8, rbx
call fcn.140092810
mov r8, qword [rsp + 0x30]
add rsi, rax
add rsi, 4
cmp rsi, rbp
jbe 0x14009f591
mov eax, dword [rsp + 0x40]
mov rbp, rsi
mov rcx, qword [rsp + 0x80]
sub eax, r14d
sub eax, dword [rsp + 0x20]
add eax, 3
mov qword [rcx], rax
lea rax, [rsi + rdi]
cmp rax, rbx
je 0x14009f5cd
mov r10, qword [rsp + 0x50]
mov r11d, dword [rsp + 0x24]
add qword [rsp + 0x58], 4
inc r11d
mov dword [rsp + 0x24], r11d
cmp r11d, dword [rsp + 0x28]
jae 0x14009f5d5
mov rdx, qword [rsp + 0x58]
jmp 0x14009f4f0
bsf rcx, rcx
shr rcx, 3
sub rcx, rdi
add rcx, rax
jmp 0x14009f42e
mov rax, rsi
jmp 0x14009f6f3
xor esi, esi
mov rax, qword [r10 + 0x70]
sub r13d, r11d
mov rcx, qword [rsp + 0xa0]
mov edx, esi
mov ecx, dword [rax + rcx*4 + 0xc]
mov r14d, ecx
shr r14d, 8
movzx eax, cl
cmp r13d, eax
cmova r13d, eax
test r13d, r13d
je 0x14009f6f0
mov r9, qword [r10 + 0x80]
nop dword [rax]
lea eax, [rdx + r14]
mov eax, dword [r9 + rax*4]
prefetcht0 byte [rax + r15]
inc edx
cmp edx, r13d
jb 0x14009f610
nop dword [rax]
nop dword [rax + rax]
mov rax, qword [r10 + 0x80]
mov eax, dword [rax + r14*4]
lea r11, [r15 + rax]
mov dword [rsp + 0x28], eax
mov eax, dword [rdi]
cmp dword [r11], eax
jne 0x14009f6d5
add r11, 4
lea r12, [rdi + 4]
mov rcx, r12
mov rdx, r11
sub rcx, r11
add rcx, r8
mov r8, rbx
cmp rcx, rbx
cmovb r8, rcx
mov rcx, r12
call fcn.140092810
mov rsi, rax
lea rcx, [rax + r11]
cmp rcx, qword [rsp + 0x30]
jne 0x14009f699
mov rdx, qword [rsp + 0xa8]
lea rcx, [rax + r12]
mov r8, rbx
call fcn.140092810
add rsi, rax
add rsi, 4
cmp rsi, rbp
jbe 0x14009f6c8
mov eax, dword [rsp + 0x40]
mov rbp, rsi
sub eax, dword [rsp + 0x28]
sub eax, dword [rsp + 0x20]
mov rcx, qword [rsp + 0x80]
add eax, 3
mov qword [rcx], rax
lea rcx, [rsi + rdi]
cmp rcx, rbx
je 0x14009f6f0
mov r10, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x88]
mov r8, qword [rsp + 0x30]
inc esi
inc r14d
mov qword [rsp + 0x88], rsi
cmp esi, r13d
jb 0x14009f630
mov rax, rbp
mov rcx, qword [rsp + 0x1b0]
xor rcx, rsp
call fcn.1400db3a0
add rsp, 0x1c8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret