Function at 0x14008f8f8
Capabilities:
Encode data using xor
Parse pe header

Disassembly:
xchg rcx, rsi
mov qword [rsp + 8], rsi
xchg rsi, rcx
push rbp
nop
sub rsp, 8
mov qword [rsp], rbx
nop
push r11
mov qword [rsp], rsi
nop
mov qword [rsp - 8], rdi
sub rsp, 8
push r12
nop
sub rsp, 8
mov qword [rsp], r13
push r14
nop
push 0x3a393c7d
mov qword [rsp], r15
lea rbp, [rsp - 0x138]
sub rsp, 0x6371913b
add rsp, 0x63718f03
xchg r13, r8
mov r13, rdx
xchg r13, r8
mov rdi, rcx
xchg rdx, rdx
xor edx, edx
lea ebx, [rdx + 1]
mov ecx, edx
mov eax, 0x7ed4e7a5
xor eax, 0x67772e3c
add eax, 0x28b84e97
xor eax, 0x73bc0ed0
xor eax, 0x165867cb
rol eax, cl
lea rcx, [0x140001b10]
xor al, byte [rdx + rcx]
mov r10, r10
mov byte [rsp + rdx + 0x10], al
add rdx, rbx
cmp rdx, 0x211
mov dword [rsp - 0x10], edi
jb 0x14008f95f
xor dl, dl
lea r11, [rsp + 0x10]
xor r12b, r12b
mov dword [rsp - 0x40], edx
mov byte [rsp + 4], dl
xor eax, eax
mov dword [rsp], r12d
mov r10, r10
xchg rcx, rdi
mov r9, rcx
xchg rcx, rdi
mov r10b, 0x2e
add r10b, 0x45
sub r10b, 0x28
sub r10b, 0x3b
mov rdi, r8
lea ecx, [rax + 0x25]
xchg r15, r15
rep stosb byte [rdi], al
lea esi, [rax + 4]
movzx edi, byte [r9]
add r9, rbx
mov dword [rsp - 0x40], ebp
mov ecx, edi
cmp edi, 0x65
ja 0x14008fa4b
neg ecx
add ecx, 0x26
neg ecx
cmp ecx, 0x3f
mov rsp, rsp
ja 0x14008faeb
movabs rax, 0xc00000007ad023af
sub rax, 0x30000d6b
sub rax, 0x31eccd58
add rax, 0xdf0f13a
sub rax, 0x25d33925
bt rax, rcx
jae 0x14008faeb
mov byte [r8 + 3], dil
xchg rcx, rcx
mov al, 0x79
sub al, 0x22
sub al, 0x55
xor al, 0x42
jmp 0x14008fadc
sub ecx, 0x66
je 0x14008face
sub ecx, ebx
xchg r14, r14
je 0x14008fab7
sub ecx, 0x89
je 0x14008faa4
sub ecx, 2
xchg rcx, rcx
je 0x14008fa93
cmp ecx, ebx
jne 0x14008faeb
mov byte [r8 + 1], dil
mov dword [rsp - 0x1c], 0x581d41fe
mov al, sil
jmp 0x14008fadc
mov byte [r8 + 1], dil
mov al, 0x5f
sub al, 0x54
xor al, 8
xor al, 1
jmp 0x14008fadc
mov byte [r8 + 2], dil
mov al, 0x55
add al, 0x19
sub al, 0x58
sub al, 0x11
add al, 0x1b
jmp 0x14008fadc
mov byte [r8 + 5], dil
mov dword [rsp - 0x30], ebp
mov al, 0x55
xor al, 0x13
xor al, 0x34
xor al, 0x36
sub al, 0x34
jmp 0x14008fadc
mov byte [r8 + 4], dil
mov al, 0x25
add al, 0x2f
add al, 0x2a
sub al, 0x70
sub al, 6
or dl, al
add r10b, 0xff
jne 0x14008f9e2
xchg r8, r8
movzx eax, dl
mov ecx, ebx
movzx r10d, dl
xchg rdi, rdi
shl r10d, 0x16
shl r10d, 1
test dl, dl
xchg r15, r15
mov dword [r8 + 0x21], r10d
cmovne ecx, eax
mov al, dil
mov r9, r9
and al, 0xf0
cmp al, 0x40
jne 0x14008fbb6
xchg r9, r9
bts r10d, 0x1e
mov al, dil
shr al, 2
shr al, 1
and al, bl
mov dword [r8 + 0x21], r10d
mov r8, r8
mov byte [r8 + 7], al
je 0x14008fb60
mov al, byte [r9]
mov dword [rsp - 0x20], 0x53632de3
and al, 0xf8
movzx r12d, r12b
cmp al, 0xb8
cmove r12d, ebx
mov dword [rsp - 0x38], 0x530ed328
mov dword [rsp], r12d
mov al, dil
shr al, 2
mov dword [rsp - 0x38], edi
and al, bl
mov byte [r8 + 8], al
mov al, dil
mov dword [rsp - 0x14], ecx
shr al, 1
and dil, bl
and al, bl
mov byte [r8 + 0xa], dil
xchg rbx, rbx
mov byte [r8 + 9], al
mov dil, byte [r9]
add r9, rbx
mov al, dil
xchg r12, r12
and al, 0xf0
cmp al, 0x40
jne 0x14008fbb6
mov dword [rsp - 0x44], 0x39139969
mov byte [rbp + 0x198], dil
mov sil, cl
jmp 0x14008fc55
mov byte [r8 + 0xb], dil
mov sil, cl
cmp dil, 0xf
xchg rbp, rbp
jne 0x14008fbe2
mov dil, byte [r9]
lea r11, [rsp + 0x5a]
mov byte [r8 + 0xc], dil
mov dword [rsp - 0x24], esp
add r9, rbx
jmp 0x14008fc1c
cmp dil, 0xa0
jb 0x14008fc1c
mov rbp, rbp
cmp dil, 0xa3
ja 0x14008fc1c
add r12b, bl
xchg rbp, rbp
mov dword [rsp], r12d
test cl, 0x10
je 0x14008fc18
mov rdi, rdi
or sil, 8
jmp 0x14008fc1c
and sil, 0xf7
movzx edx, dil
mov dword [rsp - 0x30], 0x3eff91bc
mov eax, edx
mov byte [rbp + 0x198], dil
shr rax, 2
and edx, 3
mov dword [rsp - 0x3c], ebx
movzx eax, byte [rax + r11]
add rax, r11
mov r14b, byte [rdx + rax]
cmp r14b, 0xff
xchg rbp, rbp
jne 0x14008fc8f
or r10d, 0x3000
movzx eax, dil
mov dword [rsp - 0x24], edi
and eax, 0xfffffffd
mov dword [r8 + 0x21], r10d
xor r14b, r14b
cmp al, 0x24
mov dword [rsp - 0x10], 0x1f7845fb
jne 0x14008fc8f
mov r14b, bl
mov r13b, dil
xor bl, bl
mov dword [rsp - 0x38], esi
jmp 0x14008fcbc
xor bl, bl
mov r13b, dil
test r14b, r14b
mov dword [rsp - 0x44], esi
jns 0x14008fcbc
movzx eax, r14b
and eax, 0x7f
movzx r14d, word [rax + r11]
mov dword [rsp - 0x14], esp
movzx ebx, r14w
shr bx, 7
shr bx, 1
mov r15b, byte [r8 + 0xc]
mov dword [rsp - 0x14], ecx
mov r11d, r10d
test r15b, r15b
je 0x14008fd0e
movzx edx, dil
mov dword [rsp - 0x40], 0x6df2ba90
mov eax, edx
and edx, 3
shr rax, 1
shr rax, 1
movzx ecx, byte [rbp + rax + 0x4c]
lea rax, [rbp + 0x4c]
xchg r14, r14
add rax, rdx
test byte [rax + rcx], sil
je 0x14008fd0e
or r11d, 0x3000
xchg r11, r11
mov dword [r8 + 0x21], r11d
test r14b, 1
je 0x14009037b
xchg rdi, rdi
or r11d, 1
mov dword [r8 + 0x21], r11d
mov edi, r11d
mov dword [rsp - 0x20], ebp
mov r12b, byte [r9]
mov dl, r12b
mov byte [r8 + 0xd], r12b
mov cl, r12b
xchg r14, r14
shr dl, 2
shr dl, 2
shr dl, 2
and cl, 7
mov dword [rsp - 0xc], 0x72682d59
shr r12b, 2
shr r12b, 1
and r12b, 7
mov byte [rbp + 0x190], dl
xchg r8, r8
mov byte [r8 + 0xe], dl
mov byte [rbp + 0x188], cl
mov byte [r8 + 0x10], cl
mov byte [r8 + 0xf], r12b
xchg r15, r15
test bl, bl
je 0x14008fdaa
mov cl, r12b
movzx eax, bl
mov dword [rsp - 0x24], 0x31b07700
shl eax, cl
mov cl, byte [rbp + 0x188]
test al, al
mov rcx, rcx
jns 0x14008fdaa
or edi, 0x3000
mov dword [r8 + 0x21], edi
mov r10b, byte [rbp + 0x198]
mov dword [rsp - 0x30], 0x4cfb2b11
mov eax, edi
test r15b, r15b
jne 0x14008fe48
cmp r10b, 0xd9
xchg rsi, rsi
jb 0x14008fe48
cmp r10b, 0xdf
ja 0x14008fe48
lea eax, [r10 + 0x27]
mov dword [rsp - 0x2c], 0x4cd0595
movzx r10d, al
cmp dl, 3
jne 0x14008fe19
movzx eax, r12b
mov rbx, rbx
lea rdx, [rbp + 0x14]
add rdx, rax
mov r10b, byte [rdx + r10*8]
mov dl, byte [rbp + 0x190]
mov dword [rsp - 0x24], 0x69045d07
jmp 0x14008fe24
mov r10b, byte [rbp + r10 + 0xd]
xchg rsi, rsi
mov cl, r12b
shl r10b, cl
mov eax, edi
xchg r10, r10
test r10b, r10b
mov r10b, byte [rbp + 0x198]
jns 0x14008fe48
xchg rbp, rbp
or eax, 0x3000
mov dword [r8 + 0x21], eax
test sil, 0x20
je 0x14008fefc
mov dword [rsp - 0x38], ecx
cmp dl, 3
jne 0x14008fe70
or eax, 0x9000
mov r9, r9
mov dword [r8 + 0x21], eax
jmp 0x14008fefc
mov dl, r10b
test r15b, r15b
jne 0x14008fe82
xchg r8, r8
and dl, 0xfe
test r15b, r15b
lea rax, [rbp + 0xe8]
lea rdi, [rbp + 0xd6]
xchg r9, r9
cmovne rdi, rax
lea rcx, [rbp + 0xbe]
lea rax, [rbp + 0xd6]
cmovne rcx, rax
xchg r14, r14
jmp 0x14008fecf
cmp byte [rcx], dl
je 0x14008fee0
mov dword [rsp - 0x20], esi
nop
add rcx, 0x42152d25
sub rcx, 0x42152d23
cmp rcx, rdi
mov rsi, rsi
jne 0x14008feb4
jmp 0x14008fef4
movzx eax, byte [rcx + 1]
mov cl, r12b
shl eax, cl
mov r10, r10
test al, al
jns 0x14008fefc
or dword [r8 + 0x21], 0x9000
movzx ecx, r13b
mov dword [rsp - 0x18], ebp
mov bl, 0x54
xor bl, 0x5a
add bl, 0x52
sub bl, 0x37
xor bl, 0x2c
mov edx, ecx
xchg r15, r15
test r15b, r15b
je 0x14008ffd2
sub edx, 0x20
je 0x14008ff84
mov dword [rsp - 0xc], 0x729f5479
sub edx, 1
je 0x14008ff5c
sub edx, 1
mov dword [rsp - 0x28], 0x4002fd81
je 0x14008ff84
cmp edx, 1
jne 0x14008ffef
mov dword [rsp - 0x1c], 0xccd451c
lea eax, [r12 - 4]
mov r11b, 0x59
sub r11b, 0x35
sub r11b, 0xd
add r11b, 0x64
xor r11b, 0x78
cmp al, 1
ja 0x14009013e
xchg r13, r13
jmp 0x140090136
mov ecx, 0x5e0d8ef1
sub ecx, 0x554da045
xor ecx, 0x3a2f045c
sub ecx, 0x3290eaec
mov r11b, 0x5e
xor r11b, 0x47
add r11b, 0x10
sub r11b, 0x26
cmp r12b, cl
mov dword [rsp - 0x38], 0x6dbeed8
ja 0x140090136
cmp r12b, 1
jne 0x14009013e
mov dword [rsp - 0x28], 0x14f83a6f
jmp 0x140090136
sub edx, 0x8c
mov dword [rsp - 0x28], 0x41a41a70
je 0x14009011e
cmp edx, 2
je 0x140090105
mov r11b, byte [rbp + 0x190]
mov dword [rsp - 0x1c], 0x6e0ffdd5
cmp r11b, 3
jne 0x1400900a6
test r15b, r15b
je 0x140090040
mov dword [rsp - 0x10], 0x1e58d812
lea rdx, [rbp + 0x121]
lea rax, [rbp + 0xf7]
lea rcx, [rbp + 0xf7]
cmp rax, rdx
mov dword [rsp - 0x10], edx
je 0x14009013e
jmp 0x14009004e
lea rdx, [rbp + 0xf7]
lea rcx, [rbp + 0xe8]
cmp byte [rcx], r10b
mov dword [rsp - 0x1c], ecx
je 0x14009007b
nop
sub rcx, 0x4f182f3f
add rcx, 0x4f182f42
cmp rcx, rdx
mov rdi, rdi
jne 0x14009004e
jmp 0x14009013e
test byte [rcx + 1], sil
je 0x14009013e
mov rdi, rdi
movzx eax, byte [rcx + 2]
mov cl, r12b
shl eax, cl
mov dword [rsp - 0x24], 0x1c1e0f4d
test al, al
jns 0x140090136
jmp 0x14009013e
test r15b, r15b
je 0x14009013e
xchg r11, r11
sub ecx, 0x50
je 0x1400900ed
sub ecx, 0x75
je 0x140090136
mov dword [rsp - 0x1c], 0x5055e1eb
sub ecx, 0x11
je 0x1400900fc
sub ecx, 1
xchg rsi, rsi
je 0x1400900ed
cmp ecx, 0x20
jne 0x14009013e
xchg rdi, rdi
test sil, 9
jne 0x140090136
jmp 0x14009013e
test sil, 6
jmp 0x1400900f1
mov r11b, byte [rbp + 0x190]
mov r11, r11
cmp r12b, 1
je 0x140090136
jmp 0x140090125
mov r11b, byte [rbp + 0x190]
cmp r12b, bl
jbe 0x14009013e
mov dword [rsp - 0x24], 0x509eed55
or dword [r8 + 0x21], 0x11000
mov dl, byte [r9 + 1]
nop
sub r9, 0x2190f073
add r9, 0x2190f075
cmp r12b, 1
ja 0x140090186
xchg rsp, rsp
cmp r10b, 0xf6
jne 0x140090174
or r14b, 2
mov r14, r14
jmp 0x140090186
cmp r10b, 0xf7
mov dword [rsp - 0x3c], ebp
jne 0x140090186
or r14b, 0x10
mov al, byte [rbp + 0x188]
mov dword [rsp - 0x30], 0x5b648098
movzx ecx, r11b
test r11b, r11b
je 0x140090239
sub ecx, 1
mov dword [rsp - 0x3c], 0x73c7b43c
je 0x140090208
cmp ecx, 1
pushf
mov ecx, 0x52d0b323
sub ecx, 0x5206bb07
add ecx, 0x40c9083f
sub ecx, 0x592e568
xor ecx, 0x3c001af7
popf
jne 0x140090293
xchg r11, r11
mov dil, 0x53
sub dil, 0x15
xor dil, 0x20
add dil, 0x4a
xor dil, 0x6a
test sil, 0x10
mov dword [rsp - 0x18], edi
jne 0x140090297
mov dil, cl
jmp 0x140090297
mov dil, 0x5e
sub dil, 0x1e
xor dil, 0x4a
xor dil, 0xb
mov ecx, 0x161a49f5
xor ecx, 0x2c623143
xor ecx, 0x5d240727
xor ecx, 0x6e295f04
xor ecx, 0x9752091
jmp 0x140090297
mov ecx, 0x22bd74de
xor ecx, 0x22bd2652
add ecx, 0x60cf163d
sub ecx, 0x428bdebf
sub ecx, 0x1e438a06
test sil, 0x10
mov dword [rsp - 0x30], 0xfbe923
je 0x14009027e
cmp al, 6
setne dil
mov dword [rsp - 0x38], edi
dec dil
and dil, 2
jmp 0x140090297
mov edi, dword [rsp + 4]
cmp al, bl
xchg r13, r13
movzx edi, dil
cmove edi, ecx
jmp 0x140090297
mov edi, dword [rsp + 4]
cmp r11b, 3
je 0x140090304
mov dword [rsp - 0x10], 0x4c166e47
cmp al, cl
jne 0x140090304
or dword [r8 + 0x21], 2
mov al, dl
mov dword [rsp - 0x1c], 0x7e75f29c
shr al, 6
inc r9
mov byte [r8 + 0x12], al
mov r12, r12
mov al, dl
shr al, 1
shr al, 2
and al, 7
mov rbp, rbp
mov byte [r8 + 0x11], dl
and dl, 7
mov byte [r8 + 0x13], al
mov rsi, rsi
mov byte [r8 + 0x14], dl
cmp dl, bl
jne 0x140090304
mov rdi, rdi
test r11b, 1
movzx edi, dil
cmove edi, ecx
mov r15, r15
dec r9
movzx ecx, dil
sub ecx, 1
je 0x14009035b
xchg r11, r11
sub ecx, 1
je 0x140090343
cmp ecx, 2
mov dword [rsp - 0x1c], ebp
jne 0x14009036b
bts dword [r8 + 0x21], 8
mov eax, dword [r9]
mov dword [rsp - 0x2c], esp
mov dword [r8 + 0x1d], eax
jmp 0x14009036b
bts dword [r8 + 0x21], 7
movzx eax, word [r9]
mov word [r8 + 0x1d], ax
mov dword [rsp - 0x30], esi
jmp 0x14009036b
or dword [r8 + 0x21], 0x40
mov al, byte [r9]
mov byte [r8 + 0x1d], al
mov dword [rsp - 0x40], esp
mov r12d, dword [rsp]
movzx eax, dil
add r9, rax
jmp 0x140090394
test sil, 0x20
mov dword [rsp - 0x10], ecx
je 0x140090394
or r11d, 0x9000
mov dword [r8 + 0x21], r11d
test r14b, 0x10
mov dword [rsp - 0x40], ebp
je 0x140090429
test r14b, 0x40
je 0x140090403
mov r14, r14
test sil, 8
je 0x1400903e1
or dword [r8 + 0x21], 0x208
movzx eax, word [r9]
mov dword [rsp - 0x20], 0x3041104
neg r9
add r9, 0xfffffffffffffffe
neg r9
mov word [r8 + 0x15], ax
jmp 0x140090512
mov ecx, 0x64df636c
sub ecx, 0x27b6d38e
sub ecx, 0x104bb47c
add ecx, 0x2473bc32
xor ecx, 0x51509790
jmp 0x14009048a
test r12b, r12b
je 0x1400904a4
or dword [r8 + 0x21], 0x20
mov rbp, rbp
xchg r8, rax
mov r8, qword [r9]
xchg r8, rax
neg r9
add r9, 0xfffffffffffffff8
neg r9
mov qword [r8 + 0x15], rax
mov ecx, 0x3a50725f
sub ecx, 0x1f2fb570
add ecx, 0x2972ed0e
sub ecx, 0x4493a9f9
test cl, r14b
je 0x14009045f
or dword [r8 + 0x21], 8
mov dword [rsp - 0x30], ebx
movzx eax, word [r9]
add r9, 2
mov word [r8 + 0x15], ax
test r14b, 2
xchg r14, r14
je 0x14009047d
or dword [r8 + 0x21], ecx
mov al, byte [r9]
xchg r14, r14
inc r9
mov byte [r8 + 0x15], al
test r14b, 0x40
xchg r12, r12
je 0x1400904ea
or dword [r8 + 0x21], 0x210
mov eax, dword [r9]
mov rbp, rbp
add r9, rcx
mov dword [r8 + 0x15], eax
jmp 0x140090512
mov ecx, 0x243a8dea
add ecx, 0xfb7e9dc
add ecx, 0xf902ca1
add ecx, 0x738a330
sub ecx, 0x4abb4793
test sil, 8
mov r14, r14
jne 0x140090449
or dword [r8 + 0x21], 0x10
mov eax, dword [r9]
mov dword [rsp - 0x20], 0x31855a5e
add r9, rcx
mov dword [r8 + 0x15], eax
jmp 0x140090440
test r14b, 0x20
je 0x140090512
or dword [r8 + 0x21], 0x204
mov dword [rsp - 0x40], 0xbd89288
mov al, byte [r9]
inc r9
mov byte [r8 + 0x15], al
mov dword [rsp - 0xc], ecx
sub r9b, byte [rbp + 0x180]
mov byte [r8], r9b
cmp r9b, 0xf
jbe 0x140090558
xchg r9, r9
or dword [r8 + 0x21], 0x5000
mov r9b, 0x46
xor r9b, 0x54
xor r9b, 1
add r9b, 0x49
sub r9b, 0x4d
mov byte [r8], 0x28
sub byte [r8], 0xa
xor byte [r8], 0x37
sub byte [r8], 2
xor byte [r8], 0x28
xor eax, eax
lea rdi, [rsp + 0x10]
mov dword [rsp - 0x40], edx
mov ecx, 0x614a5c6f
add ecx, 0x1dea440f
sub ecx, 0x54cf7eb8
sub ecx, 0x1fc3b80d
sub ecx, 0xaa167a8
rep stosb byte [rdi], al
movzx eax, r9b
xchg r14, r14
add rsp, 0x14a831c7
sub rsp, 0x14a82f8f
nop
mov r15, qword [rsp]
add rsp, 8
pop r14
mov dword [rsp - 0x28], esp
pop r13
pop r12
pop rdi
nop
mov rsi, qword [rsp]
add rsp, 8
nop
mov rbx, qword [rsp]
add rsp, 8
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret