Function at 0x1400f3770
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1d8
mov rax, qword [0x1401ef010]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov r15, qword [rcx + 8]
mov r10, rcx
mov rax, qword [rcx + 0x38]
mov r13d, edx
mov r14, qword [rcx + 0x70]
sub r13d, r15d
mov qword [rsp + 0x78], rax
mov rbx, rdx
mov eax, dword [rcx + 0x34]
mov rbp, r8
mov edi, dword [r10 + 0x10c]
mov dword [rsp + 0x48], eax
mov eax, dword [rcx + 0x18]
mov ecx, dword [rcx + 0x100]
mov dword [rsp + 0x4c], eax
add rax, r15
mov qword [rsp + 0xb0], rax
mov eax, edx
sub eax, r15d
mov qword [rsp + 0x50], r8
mov dword [rsp + 0x34], eax
mov r8d, r13d
mov qword [rsp + 0x68], rdx
mov eax, r13d
mov qword [rsp + 0x98], r9
mov r9d, 1
mov edx, r9d
mov qword [rsp + 0x58], r14
shl edx, cl
mov r12d, r9d
mov ecx, dword [r10 + 0x1c]
sub r8d, edx
sub eax, ecx
mov qword [rsp + 0x80], r15
cmp eax, edx
mov dword [rsp + 0x3c], r13d
mov rax, qword [r10 + 0x60]
lea esi, [r9 + 2]
mov r9, qword [rbx]
cmovbe r8d, ecx
cmp dword [r10 + 0x28], 0
mov qword [rsp + 0x70], rax
movabs rax, 0xcf1bbcdcbb000000
cmovne r8d, ecx
mov ecx, 6
cmp edi, ecx
mov dword [rsp + 0x94], r8d
mov r8, qword [r10 + 0xf8]
cmovb ecx, edi
mov qword [rsp + 0x60], r8
shl r12d, cl
mov ecx, 0x42
imul r9, rax
sub ecx, dword [r8 + 0x108]
mov rdx, r9
mov dword [rsp + 0x38], r12d
shr rdx, cl
lea rax, [rdx*4]
lea rcx, [rax*4]
mov qword [rsp + 0xa8], rax
mov rax, qword [r8 + 0x70]
mov qword [rsp + 0x88], rcx
prefetcht0 byte [rcx + rax]
xor r11d, r11d
mov qword [rsp + 0xa0], r11
cmp edi, 6
jbe 0x1400f38d3
lea ecx, [rdi - 6]
mov eax, 1
shl eax, cl
mov dword [rsp + 0x44], eax
jmp 0x1400f38d8
mov dword [rsp + 0x44], r11d
mov ecx, gethostname
mov dword [rsp + 0x40], 0x3f
cmp dword [r10 + 0x12c], r11d
jne 0x1400f3c12
mov r8d, dword [rsp + 0x34]
mov eax, r8d
mov edi, dword [r10 + 0x2c]
mov r9, qword [rsp + 0x78]
sub eax, edi
mov edx, dword [rsp + 0x48]
mov r15, r9
cmp eax, 0x180
jbe 0x1400f3ad4
lea eax, [rdi + 0x60]
mov dword [rsp + 0x30], edx
cmp edi, eax
jae 0x1400f3a0f
mov r15, qword [rsp + 0x80]
mov ebp, ecx
mov r12, qword [rsp + 0x58]
sub ebp, edx
add r15, 8
mov r14d, edi
add r15, rdi
mov r13d, eax
mov rsi, r9
movabs rbx, 0xcf1bbcdcbb000000
nop dword [rax]
nop word [rax + rax]
mov rdx, qword [r15]
mov ecx, ebp
imul rdx, rbx
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r12 + rax*4]
prefetcht0 byte [r12 + rax*4 + 0x40]
prefetcht0 byte [rsi + rax]
prefetcht0 byte [rsi + rax + 0x20]
mov rax, r14
lea r15, [r15 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, r11d
shr r8, 2
and r8d, 0x3fffffc0
movzx ecx, byte [rsi + r8]
lea rdx, [rsi + r8]
dec ecx
and ecx, 0x3f
cmove eax, dword [rsp + 0x40]
inc r14
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r12 + rax*4], edi
inc edi
cmp edi, r13d
jb 0x1400f3960
mov eax, dword [r10 + 0x34]
mov esi, 3
mov r14, qword [r10 + 0x70]
mov r15, qword [r10 + 0x38]
mov rbx, qword [rsp + 0x68]
mov rbp, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x38]
mov r13d, dword [rsp + 0x3c]
mov dword [rsp + 0x30], eax
mov edi, dword [rsp + 0x34]
lea rax, [rbx + 1]
mov rdx, qword [rsp + 0x80]
add edi, 0xffffffe0
mov ecx, eax
mov r8d, edi
sub ecx, edi
sub ecx, edx
inc ecx
lea r9, [rdx + rdi]
cmp r9, rax
mov eax, 8
cmova ecx, r11d
cmp ecx, eax
cmova ecx, eax
lea eax, [rcx + rdi]
cmp edi, eax
jae 0x1400f3ac6
mov r13d, gethostname
mov r12d, ecx
sub r13d, dword [rsp + 0x30]
movabs r11, 0xcf1bbcdcbb000000
mov rdx, qword [r9]
mov ecx, r13d
imul rdx, r11
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r14 + rax*4]
prefetcht0 byte [r14 + rax*4 + 0x40]
prefetcht0 byte [rax + r15]
prefetcht0 byte [rax + r15 + 0x20]
mov rax, r8
lea r9, [r9 + 1]
and eax, 7
inc r8
mov dword [r10 + rax*4 + 0x40], edx
sub r12, 1
jne 0x1400f3a61
mov r14, qword [r10 + 0x70]
xor r11d, r11d
mov r15, qword [r10 + 0x38]
mov edx, dword [r10 + 0x34]
mov r12d, dword [rsp + 0x38]
mov r13d, dword [rsp + 0x3c]
jmp 0x1400f3aca
mov edx, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x34]
mov ecx, gethostname
mov rax, qword [r10 + 8]
cmp edi, r8d
jae 0x1400f3ba2
mov esi, dword [rsp + 0x34]
lea r12, [rax + 8]
mov ebp, ecx
mov r13d, edi
sub ebp, edx
movabs rbx, 0xcf1bbcdcbb000000
add r12, r13
nop dword [rax]
mov rdx, qword [r12]
mov ecx, ebp
imul rdx, rbx
xor rdx, qword [r10 + 0x60]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r14 + rax*4]
prefetcht0 byte [r14 + rax*4 + 0x40]
prefetcht0 byte [rax + r15]
prefetcht0 byte [rax + r15 + 0x20]
mov rax, r13
lea r12, [r12 + 1]
and eax, 7
mov r9d, dword [r10 + rax*4 + 0x40]
mov r8d, r9d
mov dword [r10 + rax*4 + 0x40], edx
mov eax, r11d
shr r8, 2
and r8d, 0x3fffffc0
movzx ecx, byte [r8 + r15]
lea rdx, [r8 + r15]
dec ecx
and ecx, 0x3f
cmove eax, dword [rsp + 0x40]
inc r13
add ecx, eax
mov byte [rdx], cl
mov eax, ecx
add rax, r8
mov byte [rdx + rcx], r9b
mov dword [r14 + rax*4], edi
inc edi
cmp edi, esi
jb 0x1400f3b00
mov rbx, qword [rsp + 0x68]
mov esi, 3
mov rbp, qword [rsp + 0x50]
mov r12d, dword [rsp + 0x38]
mov r13d, dword [rsp + 0x3c]
mov eax, dword [rsp + 0x34]
mov ecx, gethostname
sub ecx, dword [rsp + 0x48]
mov r15, qword [rsp + 0x80]
mov r14, qword [rsp + 0x58]
mov dword [r10 + 0x2c], eax
movabs rax, 0xcf1bbcdcbb000000
mov r8d, r13d
mov rdx, qword [r8 + r15 + 8]
imul rdx, rax
xor rdx, qword [rsp + 0x70]
shr rdx, cl
mov eax, edx
shr rax, 2
and eax, 0x3fffffc0
prefetcht0 byte [r14 + rax*4]
prefetcht0 byte [r14 + rax*4 + 0x40]
mov rcx, qword [rsp + 0x78]
prefetcht0 byte [rax + rcx]
prefetcht0 byte [rax + rcx + 0x20]
and r8d, 7
mov r9d, dword [r10 + r8*4 + 0x40]
mov dword [r10 + r8*4 + 0x40], edx
jmp 0x1400f3c22
xor r9, qword [rsp + 0x70]
sub ecx, dword [rsp + 0x48]
shr r9, cl
mov dword [r10 + 0x2c], r13d
add dword [r10 + 0x68], r9d
mov eax, r9d
shr rax, 2
mov rdi, r11
and eax, 0x3fffffc0
mov qword [rsp + 0x58], r9
lea rcx, [r14 + rax*4]
mov r14, r11
mov qword [rsp + 0x70], rcx
mov rcx, qword [rsp + 0x78]
add rcx, rax
mov qword [rsp + 0x68], rcx
movzx eax, byte [rcx]
movdqu xmm0, xmmword [rcx]
mov dword [rsp + 0x30], eax
movsx eax, r9b
movd xmm2, eax
mov rax, qword [rsp + 0x68]
punpcklbw xmm2, xmm2
punpcklwd xmm2, xmm2
pshufd xmm2, xmm2, 0
movdqa xmm1, xmm2
pcmpeqb xmm1, xmm0
movdqu xmm0, xmmword [rcx + 0x10]
pmovmskb r8d, xmm1
movdqu xmm1, xmmword [rcx + 0x20]
pcmpeqb xmm0, xmm2
pmovmskb edx, xmm0
pcmpeqb xmm1, xmm2
movdqu xmm0, xmmword [rax + 0x30]
pmovmskb ecx, xmm1
pcmpeqb xmm0, xmm2
pmovmskb eax, xmm0
movsxd r9, eax
shl r9, 0x10
movsxd rax, ecx
or r9, rax
movsxd rax, edx
mov edx, dword [rsp + 0x30]
shl r9, 0x10
and edx, 0x3f
or r9, rax
mov ecx, edx
movsxd rax, r8d
neg ecx
shl r9, 0x10
and ecx, 0x3f
or r9, rax
mov r8, r9
shl r8, cl
mov ecx, edx
mov rdx, qword [rsp + 0x70]
shr r9, cl
or r8, r9
jbe 0x1400f3d3e
mov r9d, dword [rsp + 0x30]
mov ebp, dword [rsp + 0x94]
nop dword [rax]
test r12d, r12d
je 0x1400f3d34
bsf rcx, r8
add ecx, r9d
and ecx, 0x3f
je 0x1400f3d2b
mov ecx, dword [rdx + rcx*4]
cmp ecx, ebp
jb 0x1400f3d34
prefetcht0 byte [rcx + r15]
mov dword [rsp + r14*4 + 0xc0], ecx
inc r14
dec r12d
lea rax, [r8 - 1]
and r8, rax
ja 0x1400f3d00
mov rbp, qword [rsp + 0x50]
mov dword [rsp + 0x38], r12d
mov ecx, dword [rsp + 0x30]
mov eax, r11d
dec ecx
mov r8d, 0x3f
and ecx, 0x3f
cmove eax, r8d
mov r8, qword [rsp + 0x68]
add ecx, eax
mov rax, qword [rsp + 0x58]
mov byte [r8], cl
mov byte [rcx + r8], al
mov eax, dword [r10 + 0x2c]
mov dword [rdx + rcx*4], eax
inc dword [r10 + 0x2c]
test r14, r14
je 0x1400f3dd5
mov r12, qword [rsp + 0x80]
nop
mov r15d, dword [rsp + rdi*4 + 0xc0]
mov eax, dword [rsi + rbx - 3]
lea rdx, [r12 + r15]
cmp dword [rdx + rsi - 3], eax
jne 0x1400f3dc5
mov r8, rbp
mov rcx, rbx
call fcn.1400e5100
cmp rax, rsi
jbe 0x1400f3dc5
mov rdx, qword [rsp + 0x98]
mov ecx, r13d
sub ecx, r15d
mov rsi, rax
add ecx, 3
add rax, rbx
mov qword [rdx], rcx
cmp rax, rbp
je 0x1400f3dcd
inc rdi
cmp rdi, r14
jb 0x1400f3d80
mov r12d, dword [rsp + 0x38]
xor r11d, r11d
mov r9, qword [rsp + 0x60]
mov r14d, 3
mov r13d, dword [rsp + 0x44]
mov edi, r14d
mov rdx, qword [rsp + 0x88]
add r13d, r12d
mov r8, qword [r9]
mov r15, qword [r9 + 8]
mov r10, qword [r9 + 0x70]
mov eax, r15d
sub eax, r8d
mov qword [rsp + 0x50], r8
add eax, dword [rsp + 0x4c]
cmp r13d, r14d
mov dword [rsp + 0x40], eax
lea rcx, [rdx + r10]
cmovb edi, r13d
mov dword [rsp + 0x4c], edi
mov eax, dword [rcx]
prefetcht0 byte [rax + r15]
lea rcx, [rcx + 4]
sub r14, 1
jne 0x1400f3e20
mov rax, qword [rsp + 0xa8]
mov ecx, dword [r10 + rax*4 + 0xc]
mov rax, qword [r9 + 0x80]
shr rcx, 8
prefetcht0 byte [rax + rcx*4]
mov dword [rsp + 0x44], r11d
mov r12d, r11d
test edi, edi
je 0x1400f3f3f
nop dword [rax]
mov rax, qword [r9 + 0x70]
mov r12d, dword [rdx + rax]
lea rdi, [r15 + r12]
test r12d, r12d
je 0x1400f401a
mov eax, dword [rbx]
cmp dword [rdi], eax
jne 0x1400f3f06
add rdi, 4
lea rcx, [rbx + 4]
sub rcx, rdi
mov rdx, rdi
add rcx, r8
mov r8, rbp
cmp rcx, rbp
cmovb r8, rcx
lea rcx, [rbx + 4]
call fcn.1400e5100
mov r8, qword [rsp + 0x50]
mov r14, rax
lea rcx, [rax + rdi]
cmp rcx, r8
jne 0x1400f3ed3
mov rdx, qword [rsp + 0xb0]
lea rcx, [rbx + 4]
add rcx, rax
mov r8, rbp
call fcn.1400e5100
mov r8, qword [rsp + 0x50]
add r14, rax
add r14, 4
cmp r14, rsi
jbe 0x1400f3f01
mov eax, dword [rsp + 0x3c]
mov rsi, r14
mov rcx, qword [rsp + 0x98]
sub eax, r12d
sub eax, dword [rsp + 0x40]
add eax, 3
mov qword [rcx], rax
lea rax, [r14 + rbx]
cmp rax, rbp
je 0x1400f3f30
mov r9, qword [rsp + 0x60]
mov r12d, dword [rsp + 0x44]
add qword [rsp + 0x88], 4
inc r12d
mov dword [rsp + 0x44], r12d
cmp r12d, dword [rsp + 0x4c]
jae 0x1400f3f38
mov rdx, qword [rsp + 0x88]
jmp 0x1400f3e60
mov rax, r14
jmp 0x1400f401d
mov r10, qword [r9 + 0x70]
xor r11d, r11d
mov rax, qword [rsp + 0xa8]
sub r13d, r12d
mov edx, r11d
mov eax, dword [r10 + rax*4 + 0xc]
mov edi, eax
shr edi, 8
movzx ecx, al
cmp r13d, ecx
cmova r13d, ecx
test r13d, r13d
je 0x1400f401a
mov r10, qword [r9 + 0x80]
lea eax, [rdx + rdi]
mov eax, dword [r10 + rax*4]
prefetcht0 byte [rax + r15]
inc edx
cmp edx, r13d
jb 0x1400f3f71
mov r12d, dword [rsp + 0x40]
nop dword [rax]
mov rax, qword [r9 + 0x80]
mov r14d, dword [rax + rdi*4]
mov eax, dword [rbx]
lea rdx, [r15 + r14]
cmp dword [rdx], eax
jne 0x1400f3fff
mov rax, qword [rsp + 0xb0]
lea rcx, [rbx + 4]
mov r9, r8
mov qword [rsp + 0x20], rax
mov r8, rbp
add rdx, 4
call fcn.1400e51a0
add rax, 4
cmp rax, rsi
jbe 0x1400f3ff2
mov ecx, dword [rsp + 0x3c]
mov rsi, rax
mov rdx, qword [rsp + 0x98]
sub ecx, r14d
sub ecx, r12d
add ecx, 3
mov qword [rdx], rcx
lea rcx, [rax + rbx]
cmp rcx, rbp
je 0x1400f401a
mov r9, qword [rsp + 0x60]
mov r11, qword [rsp + 0xa0]
mov r8, qword [rsp + 0x50]
inc r11d
inc edi
mov qword [rsp + 0xa0], r11
cmp r11d, r13d
jb 0x1400f3f90
mov rax, rsi
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.1401312e0
add rsp, 0x1d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret