Function at 0x1400073d0
Capabilities:
Encode data using xor
Enumerate process modules

Disassembly:
push rbx
push r14
mov eax, 0x11d8
call fcn.14000f8e0
sub rsp, rax
mov rax, qword [0x14006b060]
xor rax, rsp
mov qword [rsp + 0x1170], rax
xor ebx, ebx
mov dword [rsp + 0x20], 3
mov qword [rcx], rbx
lea r9, [rsp + 0x58]
mov qword [rcx + 8], rbx
lea rdx, [rsp + 0x60]
mov qword [rcx + 0x10], rbx
mov r14, rcx
xor ecx, ecx
mov r8d, 0x1000
call qword [sym.imp.KERNEL32.dll_K32EnumProcessModulesEx]
test eax, eax
je 0x14000782d
xor edx, edx
mov qword [rsp + 0x11d0], rdi
mov r8d, 0x104
lea rcx, [rsp + 0x1060]
call fcn.140011900
mov eax, dword [rsp + 0x58]
mov edi, ebx
test rax, 0xfffffffffffffff8
jbe 0x140007825
mov qword [rsp + 0x1200], rsi
lea rsi, [rsp + 0x60]
nop word [rax + rax]
mov rdx, qword [rsi]
lea r8, [rsp + 0x1060]
mov r9d, 0x104
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_K32GetModuleBaseNameA]
test eax, eax
jne 0x1400074bd
xor edx, edx
lea rcx, [rsp + 0x1060]
mov r8d, 0x104
call fcn.140011900
mov edx, dword [rsp + 0x58]
inc edi
shr rdx, 3
add rsi, 8
movsxd rcx, edi
cmp rcx, rdx
jb 0x140007470
jmp 0x14000781d
cmp byte [0x14006196f], bl
mov esi, 4
mov rax, qword [0x140061968]
mov qword [rsp + 0x11f8], rbp
vmovaps xmmword [rsp + 0x11c0], xmm6
vmovaps xmmword [rsp + 0x11b0], xmm7
lea ebp, [rsi + 0x1b]
vmovaps xmmword [rsp + 0x11a0], xmm8
vmovaps xmmword [rsp + 0x1190], xmm9
vmovaps xmmword [rsp + 0x1180], xmm10
mov qword [rsp + 0x30], rax
je 0x1400075d4
vmovdqu xmm5, xmmword [0x140061ed0]
vmovdqu xmm8, xmmword [0x140062020]
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm8
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm8
vshufps xmm0, xmm3, xmm2, 0xdd
vmovd xmm7, esi
vpsrad xmm4, xmm0, xmm7
vmovd xmm6, ebp
vpsrld xmm1, xmm4, xmm6
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmmword [0x140061f20]
vmovd xmm1, dword [rsp + 0x30]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm0, xmm3, xmmword [0x140061e90]
vpaddb xmm2, xmm0, xmmword [0x140061fe0]
vmovdqu xmm5, xmmword [0x140061ee0]
vpxor xmm0, xmm2, xmm1
vmovd dword [rsp + 0x30], xmm0
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm8
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm8
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm7
vpsrld xmm1, xmm4, xmm6
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmmword [0x140061f20]
vmovd xmm1, dword [rsp + 0x34]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm0, xmm3, xmmword [0x140061e90]
vpaddb xmm2, xmm0, xmmword [0x140061fe0]
vpxor xmm0, xmm2, xmm1
vmovd dword [rsp + 0x34], xmm0
movsxd rax, edi
lea r9, [rsp + 0x30]
lea rdi, [rsp + 0x60]
mov rdx, qword [rdi + rax*8]
lea rdi, [rdi + rax*8]
lea rax, [rsp + 0x1060]
sub r9, rax
nop dword [rax]
nop dword [rax + rax]
movzx r8d, byte [rax]
movzx ecx, byte [rax + r9]
sub r8d, ecx
jne 0x140007615
inc rax
test ecx, ecx
jne 0x140007600
test r8d, r8d
jne 0x1400077e4
lea rcx, [0x1401a2680]
call fcn.140009710
mov rcx, rax
lea rdx, [0x140061750]
call fcn.140002730
mov rcx, rax
lea rdx, [rsp + 0x1060]
call fcn.140002730
mov rcx, rax
call fcn.140002cd0
vmovups xmm0, xmmword [str.rPAV]
mov rax, qword [rdi]
lea rcx, [rsp + 0x44]
vmovdqu xmm7, xmmword [0x140061ed0]
vmovdqu xmm6, xmmword [0x140062020]
vmovdqu xmm9, xmmword [0x140061f20]
vmovups xmmword [rsp + 0x40], xmm0
vmovdqu xmm0, xmmword [0x140061fe0]
mov qword [r14 + 0x10], rax
movzx eax, byte [0x140061b10]
vmovdqu xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
mov byte [rsp + 0x50], al
vmovd xmm8, esi
vmovd xmm10, ebp
nop dword [rax + rax]
vmovd xmm0, ebx
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm0, xmm4, xmm10
vpaddd xmm1, xmm0, xmm4
vmovd xmm0, dword [rcx - 4]
vpmulld xmm2, xmm1, xmm9
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vmovd xmm1, edx
vpaddb xmm2, xmm4, xmm1
vpxor xmm1, xmm2, xmm0
vmovd dword [rcx - 4], xmm1
lea eax, [rbx + 4]
add ebx, 8
lea rcx, [rcx + 8]
vmovd xmm0, eax
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm1, xmm4, xmm10
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmm9
vmovd xmm0, edx
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vpaddb xmm1, xmm4, xmm0
vmovd xmm0, dword [rcx - 8]
vpxor xmm1, xmm1, xmm0
vmovd dword [rcx - 8], xmm1
cmp ebx, 0x10
jl 0x1400076b0
cmp ebx, 0x11
jge 0x1400077bd
movsxd rax, ebx
lea r8, [rsp + 0x40]
add r8, rax
nop word [rax + rax]
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, bl
inc ebx
sub al, dl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x11
jl 0x140007790
lea rdx, [rsp + 0x40]
lea rcx, [0x1401a2680]
call fcn.140002730
mov edx, dword [r14 + 0x10]
mov rcx, rax
call fcn.140009b10
mov rcx, rax
call fcn.140002cd0
jmp 0x1400077e8
mov qword [r14 + 0x10], rdx
vmovaps xmm9, xmmword [rsp + 0x1190]
vmovaps xmm8, xmmword [rsp + 0x11a0]
vmovaps xmm7, xmmword [rsp + 0x11b0]
vmovaps xmm6, xmmword [rsp + 0x11c0]
mov rbp, qword [rsp + 0x11f8]
vmovaps xmm10, xmmword [rsp + 0x1180]
mov rsi, qword [rsp + 0x1200]
mov rdi, qword [rsp + 0x11d0]
mov rax, r14
mov rcx, qword [rsp + 0x1170]
xor rcx, rsp
call fcn.14000ee10
add rsp, 0x11d8
pop r14
pop rbx
ret