Function at 0x1400e9f00
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1a8
mov rax, qword [0x1401ef010]
xor rax, rsp
mov qword [rsp + 0x190], rax
mov r11, qword [rcx + 8]
mov r10, rcx
mov ebp, dword [rcx + 0x34]
mov r14, rdx
mov ebx, 1
mov qword [rsp + 0x88], r9
mov r9, qword [rcx + 0x70]
mov r13, r8
mov eax, dword [r10 + 0x18]
mov r12d, r14d
sub r12d, r11d
mov dword [rsp + 0x24], eax
mov qword [rsp + 0x60], r8
mov edi, r12d
mov r8, qword [rcx + 0x38]
mov rcx, qword [rcx + 0x10]
lea rdx, [rax + r11]
add rax, rcx
mov qword [rsp + 0x70], rcx
mov ecx, dword [r10 + 0x100]
mov qword [rsp + 0x78], rax
mov eax, r14d
sub eax, r11d
mov qword [rsp + 0x80], rdx
mov edx, ebx
mov dword [rsp + 0x20], eax
shl edx, cl
mov eax, r12d
mov ecx, dword [r10 + 0x1c]
sub edi, edx
sub eax, ecx
mov qword [rsp + 0x28], r9
cmp eax, edx
mov qword [rsp + 0x30], r8
mov eax, dword [r10 + 0x10c]
mov rdx, qword [r10 + 0x60]
cmovbe edi, ecx
cmp dword [r10 + 0x28], 0
mov dword [rsp + 0x40], ebp
cmovne edi, ecx
mov qword [rsp + 0x48], r11
mov ecx, 6
mov dword [rsp + 0x44], r12d
cmp eax, ecx
mov dword [rsp + 0x58], edi
mov qword [rsp + 0x68], rdx
cmovb ecx, eax
mov dword [rsp + 0x38], 0x3f
xor esi, esi
shl ebx, cl
mov dword [rsp + 0x3c], ebx
lea r15d, [rsi + 3]
cmp dword [r10 + 0x12c], esi
jne 0x1400ea2c4
mov r11d, dword [r10 + 0x2c]
mov rdi, r9
mov eax, dword [rsp + 0x20]
mov r12, r8
sub eax, r11d
mov edx, ebp
cmp eax, 0x180
jbe 0x1400ea199
lea eax, [r11 + 0x60]
cmp r11d, eax
jae 0x1400ea0f5
mov r12, qword [rsp + 0x48]
mov r15d, 0x18
sub r15d, ebp
add r12, 8
add r12, r11
mov edi, r11d
mov r13d, eax
mov rbx, r9
mov rbp, r8
nop
mov eax, dword [r10 + 0x60]
mov rcx, r15
imul edx, dword [r12], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [rbx + rax*4]
prefetcht0 byte [rbx + rax*4 + 0x40]
prefetcht0 byte [rax + rbp]
prefetcht0 byte [rax + rbp + 0x20]
mov rax, rdi
lea r12, [r12 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, esi
shr r8, 2
and r8d, 0x3fffffc0
movzx ecx, byte [r8 + rbp]
lea rdx, [r8 + rbp]
dec ecx
and ecx, 0x3f
cmove eax, dword [rsp + 0x38]
inc rdi
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [rbx + rax*4], r11d
inc r11d
cmp r11d, r13d
jb 0x1400ea050
mov rdi, qword [r10 + 0x70]
mov r15d, 3
mov r12, qword [r10 + 0x38]
mov edx, dword [r10 + 0x34]
mov r13, qword [rsp + 0x60]
mov ebx, dword [rsp + 0x3c]
mov r11d, dword [rsp + 0x20]
lea rax, [r14 + 1]
mov rbp, qword [rsp + 0x48]
add r11d, 0xffffffe0
mov ecx, eax
mov r8d, r11d
sub ecx, r11d
sub ecx, ebp
inc ecx
lea r9, [r11 + rbp]
cmp r9, rax
mov eax, 8
cmova ecx, esi
cmp ecx, eax
cmova ecx, eax
lea eax, [r11 + rcx]
cmp r11d, eax
jae 0x1400ea194
mov eax, 0x18
mov ebp, ecx
sub eax, edx
mov qword [rsp + 0x50], rax
mov ecx, eax
mov eax, dword [r10 + 0x60]
imul edx, dword [r9], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [rdi + rax*4]
prefetcht0 byte [rdi + rax*4 + 0x40]
prefetcht0 byte [r12 + rax]
prefetcht0 byte [r12 + rax + 0x20]
mov rax, r8
lea r9, [r9 + 1]
and eax, 7
inc r8
mov dword [r10 + rax*4 + 0x40], edx
sub rbp, 1
jne 0x1400ea140
mov rdi, qword [r10 + 0x70]
mov r12, qword [r10 + 0x38]
mov edx, dword [r10 + 0x34]
mov r9, qword [rsp + 0x28]
mov eax, dword [rsp + 0x20]
mov rcx, qword [r10 + 8]
cmp r11d, eax
jae 0x1400ea263
mov ebx, 0x18
mov ebp, r11d
sub ebx, edx
lea r13, [rcx + 8]
add r13, rbp
mov r15d, eax
nop
mov eax, dword [r10 + 0x60]
mov rcx, rbx
imul edx, dword [r13], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [rdi + rax*4]
prefetcht0 byte [rdi + rax*4 + 0x40]
prefetcht0 byte [rax + r12]
prefetcht0 byte [rax + r12 + 0x20]
mov rax, rbp
lea r13, [r13 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, esi
shr r8, 2
and r8d, 0x3fffffc0
movzx ecx, byte [r12 + r8]
lea rdx, [r12 + r8]
dec ecx
and ecx, 0x3f
cmove eax, dword [rsp + 0x38]
inc rbp
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [rdi + rax*4], r11d
inc r11d
cmp r11d, r15d
jb 0x1400ea1c0
mov r13, qword [rsp + 0x60]
mov r15d, 3
mov ebx, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x20]
mov r9, qword [rsp + 0x28]
mov r8d, dword [rsp + 0x44]
mov ecx, 0x18
sub ecx, dword [rsp + 0x40]
mov r11, qword [rsp + 0x48]
mov dword [r10 + 0x2c], eax
mov eax, dword [rsp + 0x68]
imul edx, dword [r8 + r11 + 8], 0x9e3779b1
xor rdx, rax
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r9 + rax*4]
prefetcht0 byte [r9 + rax*4 + 0x40]
mov rcx, qword [rsp + 0x30]
prefetcht0 byte [rax + rcx]
prefetcht0 byte [rax + rcx + 0x20]
and r8d, 7
mov ebp, dword [r10 + r8*4 + 0x40]
mov dword [r10 + r8*4 + 0x40], edx
mov r8, rcx
jmp 0x1400ea2e0
imul ebp, dword [r14], 0x9e3779b1
mov ecx, 0x18
sub ecx, dword [rsp + 0x40]
mov eax, edx
mov dword [r10 + 0x2c], r12d
xor rbp, rax
shr rbp, cl
add dword [r10 + 0x68], ebp
mov eax, ebp
shr rax, 2
mov rdi, rsi
and eax, 0x3fffffc0
mov qword [rsp + 0x28], rsi
movdqu xmm0, xmmword [rax + r8]
movzx r12d, byte [rax + r8]
lea rcx, [r9 + rax*4]
lea r9, [rax + r8]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x68], r9
movsx eax, bpl
movd xmm2, eax
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
movdqa xmm1, xmm2
pcmpeqb xmm1, xmm0
movdqu xmm0, xmmword [r9 + 0x10]
pmovmskb r8d, xmm1
movdqu xmm1, xmmword [r9 + 0x20]
pcmpeqb xmm0, xmm2
pmovmskb edx, xmm0
pcmpeqb xmm1, xmm2
movdqu xmm0, xmmword [r9 + 0x30]
pmovmskb ecx, xmm1
pcmpeqb xmm0, xmm2
pmovmskb eax, xmm0
movsxd r9, eax
shl r9, 0x10
movsxd rax, ecx
or r9, rax
movsxd rax, edx
shl r9, 0x10
mov edx, r12d
or r9, rax
and edx, 0x3f
movsxd rax, r8d
mov ecx, edx
shl r9, 0x10
neg ecx
or r9, rax
and ecx, 0x3f
mov r8, r9
shl r8, cl
mov ecx, edx
mov rdx, qword [rsp + 0x30]
shr r9, cl
or r8, r9
jbe 0x1400ea400
mov r9d, dword [rsp + 0x24]
mov r13, qword [rsp + 0x70]
mov r15d, dword [rsp + 0x58]
test ebx, ebx
je 0x1400ea3f0
bsf rcx, r8
add ecx, r12d
and ecx, 0x3f
mov ecx, dword [rdx + rcx*4]
je 0x1400ea3e7
cmp ecx, r15d
jb 0x1400ea3f0
cmp ecx, r9d
jb 0x1400ea3d6
prefetcht0 byte [rcx + r11]
jmp 0x1400ea3db
prefetcht0 byte [rcx + r13]
mov dword [rsp + rdi*4 + 0x90], ecx
inc rdi
dec ebx
lea rax, [r8 - 1]
and r8, rax
ja 0x1400ea3b2
mov r13, qword [rsp + 0x60]
mov r15d, 3
mov qword [rsp + 0x28], rdi
lea ecx, [r12 - 1]
mov eax, esi
and ecx, 0x3f
mov r8d, 0x3f
cmove eax, r8d
add ecx, eax
mov rax, qword [rsp + 0x68]
mov byte [rax], cl
mov byte [rcx + rax], bpl
mov eax, dword [r10 + 0x2c]
mov dword [rdx + rcx*4], eax
inc dword [r10 + 0x2c]
test rdi, rdi
je 0x1400ea516
mov ecx, dword [rsp + 0x24]
nop dword [rax]
mov ebp, dword [rsp + rsi*4 + 0x90]
cmp ebp, ecx
jb 0x1400ea46f
mov eax, dword [r15 + r14 - 3]
lea rdx, [r11 + rbp]
cmp dword [rdx + r15 - 3], eax
jne 0x1400ea504
mov r8, r13
mov rcx, r14
call fcn.1400e5100
mov rbx, rax
jmp 0x1400ea4db
mov rcx, qword [rsp + 0x70]
mov eax, dword [r14]
cmp dword [rcx + rbp], eax
jne 0x1400ea500
lea rdi, [rcx + 4]
mov r8, r13
mov rcx, qword [rsp + 0x78]
lea r12, [r14 + 4]
add rdi, rbp
mov rax, r12
sub rax, rdi
mov rdx, rdi
add rcx, rax
cmp rcx, r13
cmovb r8, rcx
mov rcx, r12
call fcn.1400e5100
mov rbx, rax
add rax, rdi
cmp rax, qword [rsp + 0x78]
jne 0x1400ea4d2
mov rdx, qword [rsp + 0x80]
lea rcx, [r12 + rbx]
mov r8, r13
call fcn.1400e5100
add rbx, rax
mov rdi, qword [rsp + 0x28]
add rbx, 4
cmp rbx, r15
jbe 0x1400ea500
mov eax, dword [rsp + 0x44]
mov r15, rbx
mov rcx, qword [rsp + 0x88]
sub eax, ebp
add eax, 3
mov qword [rcx], rax
lea rax, [rbx + r14]
cmp rax, r13
je 0x1400ea516
mov ecx, dword [rsp + 0x24]
inc rsi
cmp rsi, rdi
jae 0x1400ea516
mov r11, qword [rsp + 0x48]
jmp 0x1400ea440
mov rax, r15
mov rcx, qword [rsp + 0x190]
xor rcx, rsp
call fcn.1401312e0
add rsp, 0x1a8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret