Function at 0x1401d3690
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xa8
call fcn.140249800
sub rsp, rax
mov rax, qword [0x1403e4f00]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov rbx, qword [rsp + 0x118]
mov rbp, rcx
mov rdi, qword [rsp + 0x120]
xor r15d, r15d
mov rcx, rbx
mov dword [rsp + 0x3c], r9d
mov r13d, r9d
mov qword [rsp + 0x40], r8
mov r14, rdx
mov dword [rsp + 0x34], 1
mov esi, r15d
call fcn.1400a2180
mov dword [rsp + 0x38], eax
test eax, eax
jle 0x1401d3748
mov r12, qword [rsp + 0x128]
xor edx, edx
movsxd rcx, eax
mov rax, r12
div rcx
mov ecx, 0xffffffff
cmp rax, rcx
jb 0x1401d376e
call fcn.140095630
lea r8, str.pbkdf2_derive
mov edx, 0x127
lea rcx, str.providersimplementationskdfspbkdf2.c
call fcn.140095750
xor r8d, r8d
lea edx, [r15 + 0x69]
mov ecx, reloc.WS2_32.dll_gethostname
call fcn.140095850
xor eax, eax
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.140249860
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
cmp dword [rsp + 0x130], esi
je 0x1401d3816
lea rax, [r12*8]
cmp rax, 0x70
jae 0x1401d37b0
call fcn.140095630
lea r8, str.pbkdf2_derive
mov edx, 0x12d
lea rcx, str.providersimplementationskdfspbkdf2.c
call fcn.140095750
xor r8d, r8d
mov edx, 0xab
jmp 0x1401d373e
cmp r13d, 0x10
jge 0x1401d37df
call fcn.140095630
lea r8, str.pbkdf2_derive
mov edx, 0x131
lea rcx, str.providersimplementationskdfspbkdf2.c
call fcn.140095750
xor r8d, r8d
lea edx, [r8 + 0x70]
jmp 0x1401d373e
cmp qword [rsp + 0x110], 0x3e8
jae 0x1401d3816
call fcn.140095630
lea r8, str.pbkdf2_derive
mov edx, 0x135
lea rcx, str.providersimplementationskdfspbkdf2.c
call fcn.140095750
xor r8d, r8d
lea edx, [r8 + 0x7b]
jmp 0x1401d373e
call fcn.14015ecb0
mov r13, rax
test rax, rax
je 0x1401d3748
mov r9, rbx
mov qword [rsp + 0x20], r15
mov r8d, r14d
mov rdx, rbp
mov rcx, rax
call fcn.14015eed0
test eax, eax
je 0x1401d3aee
call fcn.14015ecb0
mov rsi, rax
test rax, rax
je 0x1401d3aee
test r12d, r12d
je 0x1401d3ae8
mov ecx, dword [rsp + 0x34]
nop dword [rax]
nop word [rax + rax]
cmp r12d, dword [rsp + 0x38]
mov eax, ecx
mov byte [rsp + 0x33], cl
mov ebx, r12d
cmovg ebx, dword [rsp + 0x38]
mov rdx, r13
shr eax, 0x18
mov byte [rsp + 0x30], al
mov eax, ecx
shr eax, 0x10
mov byte [rsp + 0x31], al
mov eax, ecx
shr eax, 8
mov rcx, rsi
mov byte [rsp + 0x32], al
call fcn.14015eba0
test eax, eax
je 0x1401d3aee
movsxd r8, dword [rsp + 0x3c]
mov rcx, rsi
mov rdx, qword [rsp + 0x40]
call fcn.14015f1d0
test eax, eax
je 0x1401d3aee
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, rsi
call fcn.14015f1d0
test eax, eax
je 0x1401d3aee
xor r8d, r8d
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.14015ee20
test eax, eax
je 0x1401d3aee
movsxd r14, ebx
lea rdx, [rsp + 0x50]
mov r8, r14
mov rcx, rdi
call fcn.14027dfb0
mov ebp, 1
cmp rbp, qword [rsp + 0x110]
jae 0x1401d3ad2
mov rdx, r13
mov rcx, rsi
call fcn.14015eba0
test eax, eax
je 0x1401d3aee
movsxd r8, dword [rsp + 0x38]
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.14015f1d0
test eax, eax
je 0x1401d3aee
xor r8d, r8d
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.14015ee20
test eax, eax
je 0x1401d3aee
mov rdx, r15
test ebx, ebx
jle 0x1401d3a8e
cmp ebx, 8
jb 0x1401d3a8e
lea eax, [rbx - 1]
movsxd rcx, eax
lea rax, [rsp + 0x50]
add rax, rcx
lea r8, [rcx + rdi]
cmp rdi, rax
ja 0x1401d39a0
lea rax, [rsp + 0x50]
cmp r8, rax
jae 0x1401d3a8e
cmp ebx, 0x40
jb 0x1401d3a42
mov ecx, ebx
and ecx, 0x8000003f
jge 0x1401d39ba
dec ecx
or ecx, 0xffffffc0
inc ecx
mov eax, ebx
sub eax, ecx
lea rcx, [rsp + 0x50]
movsxd r9, eax
sub rcx, rdi
lea r8, [rsp + 0x60]
sub r8, rdi
lea rax, [rdi + 0x20]
nop word [rax + rax]
movdqu xmm0, xmmword [rax - 0x20]
add rdx, 0x40
movdqu xmm1, xmmword [rcx + rax - 0x20]
movdqu xmm2, xmmword [rcx + rax]
lea rax, [rax + 0x40]
xorps xmm1, xmm0
movdqu xmmword [rax - 0x60], xmm1
movdqu xmm0, xmmword [rax - 0x50]
movdqu xmm1, xmmword [r8 + rax - 0x60]
xorps xmm1, xmm0
movdqu xmmword [rax - 0x50], xmm1
movdqu xmm0, xmmword [rax - 0x40]
movdqu xmm1, xmmword [r8 + rax - 0x40]
xorps xmm2, xmm0
movdqu xmmword [rax - 0x40], xmm2
movdqu xmm0, xmmword [rax - 0x30]
xorps xmm1, xmm0
movdqu xmmword [rax - 0x30], xmm1
cmp rdx, r9
jl 0x1401d39e0
mov eax, ebx
and al, 0x3f
cmp al, 8
jb 0x1401d3a8e
mov ecx, ebx
and ecx, 0x80000007
jge 0x1401d3a53
dec ecx
or ecx, 0xfffffff8
inc ecx
mov eax, ebx
sub eax, ecx
lea rcx, [rsp + 0x50]
movsxd r8, eax
sub rcx, rdi
lea rax, [rdx + rdi]
nop word [rax + rax]
movq xmm0, qword [rax]
add rdx, 8
movq xmm1, qword [rax + rcx]
lea rax, [rax + 8]
xorps xmm1, xmm0
movq qword [rax - 8], xmm1
cmp rdx, r8
jl 0x1401d3a70
cmp rdx, r14
jge 0x1401d3ac1
lea r9, [rsp + 0x50]
mov r8, r14
sub r9, rdi
lea rax, [rdx + rdi]
sub r8, rdx
nop word [rax + rax]
movzx ecx, byte [rax + r9]
xor byte [rax], cl
lea rax, [rax + 1]
sub r8, 1
jne 0x1401d3ab0
inc rbp
cmp rbp, qword [rsp + 0x110]
jb 0x1401d3922
mov ecx, dword [rsp + 0x34]
add rdi, r14
inc ecx
mov dword [rsp + 0x34], ecx
sub r12d, ebx
jne 0x1401d3870
mov r15d, 1
mov rcx, rsi
call fcn.14015ec40
mov rcx, r13
call fcn.14015ec40
mov eax, r15d
jmp 0x1401d374a