Function at 0x140003fc8
Capabilities:
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
mov byte [rbp - 0x30], 0xd
movzx eax, byte [rbp - 0x30]
add al, 0xf3
movzx eax, al
mov dword [rbp + 0xc], eax
sub rsp, 0x20
lea rcx, [rbp - 0x80]
lea rdx, [rbp + 0xc]
call fcn.140005f80
add rsp, 0x20
mov qword [rbp - 0x40], rax
xor ecx, ecx
lea rax, [0x14000a2ed]
nop word cs:[rax + rax]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x48], rcx
mov byte [rbp - 0x30], 0x69
movzx eax, byte [rbp - 0x30]
add al, 0xf7
movzx eax, al
mov rax, qword gs:[rax]
mov rax, qword [rax + 0x18]
add rax, 0x20
jmp 0x140002ef6
cmp r8w, r9w
je 0x140002f50
mov rax, qword [rax]
mov rcx, qword [rax + 0x50]
xor edx, edx
nop
movzx r9d, word [rcx + rdx]
lea r10d, [r9 - 0x41]
mov r8d, r9d
or r8d, 0x20
cmp r10w, 0x1a
cmovae r8d, r9d
movzx r10d, word [rdx + rsi]
lea r11d, [r10 - 0x41]
mov r9d, r10d
or r9d, 0x20
cmp r11w, 0x1a
cmovae r9d, r10d
test r8w, r8w
je 0x140002ef0
add rdx, 2
cmp r8w, r9w
je 0x140002f00
jmp 0x140002ef0
mov rax, qword [rax + 0x20]
movsxd rcx, dword [rax + 0x3c]
lea rdx, [rcx + rax]
movzx r8d, word [rcx + rax + 0x14]
add rdx, r8
add rdx, 0x18
add rcx, rax
add rcx, 0x88
mov r8b, 1
jmp 0x140002f83
inc r8b
lea r9d, [r8 - 1]
movzx r9d, r9b
shl r9d, 3
lea r9, [r9 + r9*4]
mov byte [rbp - 0x30], 0x54
mov byte [rbp + 0x18], 0x54
sbb byte [r12 + rax*2 + 0xf], r10b
mov dh, 0x55
sbb byte [rdi + rcx - 0x4a], al
pop rbp
ror byte [rax + 0x29], 1
cld
mov rbx, rsp
mov byte [rbx], r11b
sub rsp, rdi
mov r13, rsp
mov byte [r13], r10b
movzx ebx, byte [rbx]
not bl
rol dword [rbp + 8], cl
rol dword [rcx - 0xa], cl
rol byte [rcx + 8], cl
fiadd dword [rbp + 0x20]
fiadd dword [rbp + 0xf]
mov dh, 0xda
mov r10d, dword [rdx + r9 + 0xc]
cmp dword [rcx + r11*8], r10d
jb 0x140002f80
mov byte [rbp + 0x14], 0x54
mov byte [rbp + 0x1f], 0x54
movzx r11d, byte [rbp + 0x1f]
movzx ebx, byte [rbp + 0x14]
sub rsp, rdi
mov r13, rsp
mov byte [r13], bl
sub rsp, rdi
mov r15, rsp
mov byte [r15], r11b
movzx r15d, byte [r13]
not r15b
or bl, r11b
not r11b
or r11b, r15b
and r11b, bl
movzx r11d, r11b
add r10d, dword [r9 + rdx + 8]
cmp dword [rcx + r11*8], r10d
jae 0x140002f80
mov byte [rbp - 0x30], 0x6f
mov byte [rbp + 0x18], 0x6f
movzx edx, byte [rbp + 0x18]
movzx r8d, byte [rbp - 0x30]
sub rsp, rdi
mov r9, rsp
mov byte [r9], r8b
mov r9d, edx
xor r9b, dl
not r9b
and r9b, r8b
xor r9b, dl
movzx edx, r9b
mov ecx, dword [rcx + rdx*8]
mov r8d, dword [rcx + rax + 0x20]
add rcx, rax
add r8, rax
xor edx, edx
jmp 0x140003072
inc edx
movzx edx, dx
mov r9d, dword [r8 + rdx*4]
movzx r11d, byte [r9 + rax]
test r11b, r11b
je 0x140003070
add r9, rax
inc r9
mov r10d, 0xab43
nop
movsx r11d, r11b
sub rsp, rdi
mov rbx, rsp
mov dword [rbx], r10d
sub rsp, rdi
mov r15, rsp
mov dword [r15], r11d
mov ebx, dword [rbx]
not ebx
or r10d, r11d
not r11d
or r11d, ebx
and r11d, r10d
imul r10d, r11d, 0x127aa3
movzx r11d, byte [r9]
inc r9
test r11b, r11b
jne 0x140003090
cmp r10d, 0xdd833843
jne 0x140003070
mov r8d, dword [rcx + 0x1c]
mov ecx, dword [rcx + 0x24]
add rcx, rax
movzx ecx, word [rcx + rdx*2]
add r8, rax
mov edx, dword [r8 + rcx*4]
add rdx, rax
sub rsp, 0x20
mov rcx, rsi
call rdx
add rsp, 0x20
xor r13d, r13d
mov rax, qword [rbp - 0x38]
nop
cmp byte [rax + r13], 0
lea r13, [r13 + 1]
jne 0x140003100
mov byte [rbp - 0x30], 0x69
movzx eax, byte [rbp - 0x30]
cmp r9w, r10w
je 0x140003ef0
mov rcx, qword [rcx]
mov rdx, qword [rcx + 0x50]
xor r8d, r8d
movzx r10d, word [rdx + r8]
lea r11d, [r10 - 0x41]
mov r9d, r10d
mov ecx, edx
or r9d, 0x20
cmp r11w, 0x1a
cmovae r9d, r10d
movzx r11d, word [r8 + rsi]
lea ebx, [r11 - 0x41]
mov r10d, r11d
or r10d, 0x20
cmp bx, 0x1a
cmovae r10d, r11d
test r9w, r9w
je 0x140003e90
add r8, 2
cmp r9w, r10w
je 0x140003ea0
jmp 0x140003e90
mov rcx, qword [rcx + 0x20]
movsxd rdx, dword [rcx + 0x3c]
lea r8, [rdx + rcx]
movzx r9d, word [rdx + rcx + 0x14]
add r8, r9
add r8, 0x18
add rdx, rcx
add rdx, 0x88
mov r9b, 1
jmp 0x140003f23
inc r9b
lea r10d, [r9 - 1]
movzx r10d, r10b
shl r10d, 3
lea r10, [r10 + r10*4]
mov byte [rbp + 0x18], 0x54
mov byte [rbp + 0x14], 0x54
movzx r11d, byte [rbp + 0x14]
movzx ebx, byte [rbp + 0x18]
sub rsp, rdi
mov r15, rsp
mov byte [r15], bl
mov r15d, r11d
xor r15b, r11b
not r15b
and r15b, bl
xor r15b, r11b
movzx ebx, r15b
mov r11d, dword [r8 + r10 + 0xc]
cmp dword [rdx + rbx*8], r11d
jb 0x140003f20
mov byte [rbp + 0x1f], 0x54
mov byte [rbp + 0x13], 0x54
movzx ebx, byte [rbp + 0x13]
movzx r15d, byte [rbp + 0x1f]
sub rsp, rdi
mov r14, rsp
mov byte [r14], r15b
sub rsp, rdi
mov r12, rsp
mov byte [r12], bl
movzx r14d, byte [r14]
not r14b
or r15b, bl
not bl
or bl, r14b
and bl, r15b
movzx ebx, bl
add r11d, dword [r10 + r8 + 8]
cmp dword [rdx + rbx*8], r11d
jae 0x140003f20
mov byte [rbp + 0x18], 0x6f
mov byte [rbp + 0x14], 0x6f
movzx r8d, byte [rbp + 0x14]
movzx r9d, byte [rbp + 0x18]
sub rsp, rdi
mov r10, rsp
mov byte [r10], r9b
mov r10d, r8d
xor r10b, r8b
not r10b
and r10b, r9b
xor r10b, r8b
movzx r8d, r10b
mov edx, dword [rdx + r8*8]
mov r9d, dword [rdx + rcx + 0x20]
add rdx, rcx
add r9, rcx
xor r8d, r8d
jmp 0x140004003
inc r8d
movzx r8d, r8w
mov r10d, dword [r9 + r8*4]
movzx ebx, byte [r10 + rcx]
test bl, bl
je 0x140004000
add r10, rcx
inc r10
mov r11d, 0xab43
movsx ebx, bl
sub rsp, rdi
mov r14, rsp
mov dword [r14], r11d
sub rsp, rdi
mov r15, rsp
mov dword [r15], ebx
mov r14d, dword [r14]
not r14d
or r11d, ebx
not ebx
or ebx, r14d
and ebx, r11d
imul r11d, ebx, 0x127aa3
invalid
invalid
jp 0x14000405e
add byte [rcx + 0xf], al
mov dh, 0x1a
inc r10
test bl, bl
jne 0x140004020
cmp r11d, 0xf417b87a
jne 0x140004000
dec r13d
mov r9d, dword [rdx + 0x1c]
mov edx, dword [rdx + 0x24]
add rdx, rcx
movzx edx, word [rdx + r8*2]
add r9, rcx
mov r10d, dword [r9 + rdx*4]
add r10, rcx
sub rsp, 0x30
mov qword [rsp + 0x20], 0
mov rcx, rax
mov rdx, qword [rbp - 0x38]
mov r8d, r13d
xor r9d, r9d
call r10
add rsp, 0x30
mov rcx, qword [rbp - 0x48]
mov rax, qword [rbp + rcx*8 - 0x28]
inc rcx
test rax, rax
jne 0x140003800
mov eax, dword [rbp + 0xc]
cmp eax, 0xffffffff
je 0x140002e80
mov byte [rbp - 0x30], 0x6c
mov byte [rbp + 0x18], 0x6c
movzx ecx, byte [rbp + 0x18]
movzx edx, byte [rbp - 0x30]
sub rsp, rdi
mov r8, rsp
mov byte [r8], dl
mov r8d, ecx
xor r8b, cl
not r8b
and r8b, dl
xor r8b, cl
movzx ecx, r8b
cmp eax, ecx
je 0x140002e80
mov r9, qword [rbp - 0x40]
movzx eax, byte [r9]
mov byte [rbp - 0x30], 8
mov byte [rbp + 0x18], 8
movzx ecx, byte [rbp + 0x18]
movzx edx, byte [rbp - 0x30]
sub rsp, rdi
mov r8, rsp
mov byte [r8], dl
xor r8d, r8d
jmp 0x140003eaa