Function at 0x14013f2c0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xd8
mov r14, rcx
lea rax, [0x14021ca68]
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x50]
lea r9, [rsp + 0x98]
call fcn.140183290
movzx r13d, byte [rsp + 0x60]
cmp r13b, 3
je 0x14013f6a2
mov r10, qword [r14 + 0x28]
test r10, r10
je 0x14013f6a2
mov rbp, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x58]
cmp dword [r14], 2
mov rax, rbx
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x48], r10
mov qword [rsp + 0x40], rbp
jne 0x14013f3c7
movdqu xmm0, xmmword [r14 + 8]
pshufd xmm1, xmm0, 0x44
pxor xmm1, xmmword [str.uespemosarenegylmodnarodsetybdet]
movdqa xmmword [rsp + 0x50], xmm1
pshufd xmm1, xmm0, 0xee
pxor xmm1, xmmword [0x1401cb8f0]
movdqa xmmword [rsp + 0x60], xmm1
movdqa xmmword [rsp + 0x70], xmm0
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x80], xmm0
mov qword [rsp + 0x90], 0
xor eax, eax
cmp r13b, 2
setne al
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x38]
mov r8d, 8
call fcn.140009800
mov eax, r13d
cmp al, 2
jne 0x14013f412
movzx eax, bpl
mov qword [rsp + 0x38], rax
lea rcx, [rsp + 0x50]
lea rdx, [rsp + 0x38]
mov r8d, 8
jmp 0x14013f425
xor eax, eax
cmp r13b, 2
setne al
movabs rbx, 0xcbf29ce484222325
xor rbx, rax
movabs rax, 0x1efac7090aef4a21
imul rbx, rax
cmp r13b, 2
jne 0x14013f6b8
movzx ecx, bpl
xor rcx, rbx
imul rcx, rax
mov r9b, 2
mov rbx, rcx
lea r11, [0x14021ca68]
jmp 0x14013f530
test al, al
je 0x14013f71a
lea rcx, [rsp + 0x50]
mov rdx, rbp
mov r8, rbx
call fcn.140009800
lea rdi, [0x14021ca68]
mov rax, qword [rsp + 0x60]
mov r9, qword [rsp + 0x80]
shl r9, 0x38
or r9, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
add r8, rax
rol rax, 0xd
xor rcx, r9
xor rax, r8
rol r8, 0x20
mov rdx, qword [rsp + 0x58]
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rcx, r8
xor rax, rdx
rol rdx, 0x20
xor r8, r9
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
xor rdx, 0xff
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
xor rax, r8
rol r8, 0x20
add rdx, rcx
rol rcx, 0x10
xor rcx, rdx
add r8, rcx
rol rcx, 0x15
add rdx, rax
rol rax, 0x11
xor rax, rdx
rol rdx, 0x20
xor rcx, r8
add r8, rax
rol rax, 0xd
xor rax, r8
add rdx, rcx
shl rcx, 0x10
xor rcx, rdx
shr rcx, 0x2b
add rdx, rax
shr rax, 0x2f
xor rax, rcx
mov rbx, rdx
shr rbx, 0x20
xor rbx, rdx
xor rbx, rax
mov r11, rdi
mov r10, qword [rsp + 0x48]
mov r9d, r13d
and ebx, 0x7fff
movzx r12d, word [r14 + 0x58]
mov r15d, ebx
and r15d, r12d
mov rsi, qword [r14 + 0x50]
mov r13, qword [r14 + 0x20]
mov r14, qword [r14 + 0x48]
mov rdi, qword [rsp + 0x28]
neg rdi
xor ebp, ebp
jmp 0x14013f566
inc rbp
inc r15
cmp r15, rsi
mov eax, 0
cmovae r15, rax
jb 0x14013f57d
test rsi, rsi
je 0x14013f6a0
movzx ecx, word [r14 + r15*4]
cmp rcx, 0xffff
je 0x14013f6a2
movzx eax, word [r14 + r15*4 + 2]
mov edx, eax
and edx, r12d
mov r8d, r15d
sub r8d, edx
and r8d, r12d
cmp rbp, r8
ja 0x14013f6a2
cmp ax, bx
jne 0x14013f560
cmp r10, rcx
jbe 0x14013f8f4
imul rcx, rcx, 0x68
lea rax, [rcx + r13]
add rax, 0x40
cmp qword [r13 + rcx + 0x40], 0
je 0x14013f61e
cmp r9b, 2
je 0x14013f560
mov rcx, qword [rax + 0x10]
test r9b, r9b
je 0x14013f63b
cmp rcx, qword [rsp + 0x28]
jne 0x14013f560
mov rcx, qword [rax + 8]
mov rdx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x28]
mov dword [rsp + 0x34], r9d
call sub.VCRUNTIME140.dll_memcmp
mov r9d, dword [rsp + 0x34]
mov r10, qword [rsp + 0x48]
lea r11, [0x14021ca68]
test eax, eax
jne 0x14013f560
jmp 0x14013f7cc
cmp r9b, 2
jne 0x14013f560
mov rcx, qword [rsp + 0x40]
cmp byte [rax + 8], cl
jne 0x14013f560
jmp 0x14013f7cc
cmp rcx, qword [rsp + 0x28]
jne 0x14013f560
mov dword [rsp + 0x34], r9d
mov rcx, qword [rax + 8]
mov rdx, 0xffffffffffffffff
nop word cs:[rax + rax]
lea r8, [rdi + rdx]
mov eax, 1
cmp r8, 0xffffffffffffffff
je 0x14013f6a4
mov r8, qword [rsp + 0x40]
movzx r8d, byte [r8 + rdx + 1]
movzx r9d, byte [r8 + r11]
lea r8, [rdx + 1]
cmp r9b, byte [rcx + rdx + 1]
mov rdx, r8
je 0x14013f660
cmp r8, qword [rsp + 0x28]
mov r9d, dword [rsp + 0x34]
jb 0x14013f560
jmp 0x14013f6a4
jmp 0x14013f6a0
xor eax, eax
add rsp, 0xd8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r8, qword [rsp + 0x28]
lea rax, [r8 + rbp]
test r13b, r13b
lea r11, [0x14021ca68]
je 0x14013f76b
mov r9b, 1
test r8, r8
je 0x14013f7c0
movabs rcx, 0x100000001b3
and r8, 7
je 0x14013f7d6
mov r9, rbx
mov rdx, rbp
nop word [rax + rax]
movzx ebx, byte [rdx]
inc rdx
xor rbx, r9
imul rbx, rcx
mov r9, rbx
dec r8
jne 0x14013f700
jmp 0x14013f7d9
test rbx, rbx
lea rdi, [0x14021ca68]
je 0x14013f431
xor esi, esi
lea r15, [rsp + 0x50]
lea r12, [rsp + 0x38]
nop word cs:[rax + rax]
movzx eax, byte [rbp + rsi]
movzx eax, byte [rax + rdi]
mov byte [rsp + 0x38], al
mov r8d, 1
mov rcx, r15
mov rdx, r12
call fcn.140009800
inc rsi
cmp rbx, rsi
jne 0x14013f740
jmp 0x14013f431
test r8, r8
je 0x14013f85f
mov rsi, r10
mov rdx, r8
and rdx, 3
je 0x14013f86e
movabs r8, 0x100000001b3
mov rcx, rbp
mov r9, rbx
nop word cs:[rax + rax]
movzx r10d, byte [rcx]
movzx ebx, byte [r10 + r11]
xor rbx, r9
imul rbx, r8
inc rcx
mov r9, rbx
dec rdx
jne 0x14013f7a0
jmp 0x14013f871
xor eax, eax
mov qword [rsp + 0x28], rax
jmp 0x14013f530
mov eax, 1
jmp 0x14013f6a4
mov rdx, rbp
cmp qword [rsp + 0x28], 8
jb 0x14013f857
nop word cs:[rax + rax]
movzx r8d, byte [rdx]
xor r8, rbx
imul r8, rcx
movzx r9d, byte [rdx + 1]
xor r9, r8
imul r9, rcx
movzx r8d, byte [rdx + 2]
xor r8, r9
imul r8, rcx
movzx r9d, byte [rdx + 3]
xor r9, r8
imul r9, rcx
movzx r8d, byte [rdx + 4]
xor r8, r9
imul r8, rcx
movzx r9d, byte [rdx + 5]
xor r9, r8
imul r9, rcx
movzx r8d, byte [rdx + 6]
xor r8, r9
imul r8, rcx
movzx ebx, byte [rdx + 7]
add rdx, 8
xor rbx, r8
imul rbx, rcx
cmp rdx, rax
jne 0x14013f7f0
mov r9b, 1
jmp 0x14013f530
xor eax, eax
mov qword [rsp + 0x28], rax
xor r9d, r9d
jmp 0x14013f530
mov rcx, rbp
cmp qword [rsp + 0x28], 4
jae 0x14013f884
xor r9d, r9d
mov r10, rsi
jmp 0x14013f530
movabs rdx, 0x100000001b3
mov r10, rsi
nop word cs:[rax + rax]
movzx r8d, byte [rcx]
movzx r8d, byte [r8 + r11]
xor r8, rbx
imul r8, rdx
movzx r9d, byte [rcx + 1]
movzx r9d, byte [r9 + r11]
xor r9, r8
imul r9, rdx
movzx r8d, byte [rcx + 2]
movzx r8d, byte [r8 + r11]
xor r8, r9
imul r8, rdx
movzx r9d, byte [rcx + 3]
movzx ebx, byte [r9 + r11]
xor rbx, r8
imul rbx, rdx
add rcx, 4
xor r9d, r9d
cmp rcx, rax
jne 0x14013f8a0
jmp 0x14013f530
lea r8, str.C:Users_rootkit.cargo_registry_srcindex.crates.io_6f17d22bba15001fhttp_0.2.12_srcheadermap.rs
mov rdx, r10
call fcn.1401ca3f0
int3