Function at 0x1400f89a0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x900]
sub rsp, 0xa00
mov rax, qword [0x1402bc7c0]
xor rax, rsp
mov qword [rbp + 0x8f0], rax
mov r14, r9
mov qword [rsp + 0x40], r9
mov r13, r8
mov rsi, rcx
mov qword [rsp + 0x38], rcx
mov r15, qword [rbp + 0x960]
mov ecx, dword [r8 + 8]
lea eax, [rcx - 2]
movzx ebx, dl
mov edi, 1
cmp eax, 4
cmovbe ebx, edi
mov dword [rsp + 0x30], ebx
xor r12d, r12d
cmp ecx, 8
jne 0x1400f8c01
test r9, r9
je 0x1400f8bf1
xor edx, edx
mov r8d, 0x2b8
lea rcx, [rbp + 0x610]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x610]
call fcn.1400fd7d0
nop
xor edx, edx
mov r8d, 0x128
lea rcx, [rsp + 0x50]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rsp + 0x50]
call fcn.1400f8660
nop
xor edx, edx
mov r8d, 0x588
lea rcx, [rbp + 0x80]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x80]
call fcn.1400f85c0
nop
mov dword [rsp + 0x58], edi
lea rcx, [r13 + 0x18]
call fcn.140041a70
mov r8d, eax
lea rdx, [r13 + 0xe4]
lea rcx, [rsp + 0x68]
call fcn.14003d570
lea rcx, [r13 + 0x18]
call fcn.140041a70
shl eax, 3
mov dword [rsp + 0x60], eax
mov dword [rsp + 0x5c], 3
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x80]
lea r8, [rsp + 0x50]
movzx edx, dil
lea rcx, [rbp + 0x610]
call fcn.1400f89a0
call fcn.140010d30
cmp byte [r13 + 0x104], r12b
je 0x1400f8b09
lea r8, [rbp + 0x8d0]
mov rdx, qword [r13 + 0x108]
movzx ecx, al
call fcn.1400114c0
xor edx, edx
lea r8d, [rdi + 7]
lea rcx, [rbp + 0x8d8]
call fcn.140010d60
jmp 0x1400f8b18
movups xmm0, xmmword [r13 + 0x110]
movups xmmword [rbp + 0x8d0], xmm0
lea r8, [r14 + 0x578]
lea rdx, [rbp + 0x8d0]
lea rcx, [rbp + 0x610]
call fcn.1400fc260
nop
lea rax, vtable._ckCryptContext.0
mov qword [rbp + 0x80], rax
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x1400f8b59
call fcn.14002ecb0
mov qword [rbp + 0x98], r12
lea rax, vtable._ckGcmContext.0
mov qword [rbp + 0x570], rax
mov rcx, qword [rbp + 0x5f0]
test rcx, rcx
je 0x1400f8b7a
mov rax, qword [rcx]
mov edx, edi
call qword [rax]
mov qword [rbp + 0x5f0], r12
mov qword [rbp + 0x578], r12
lea rcx, [rbp + 0x520]
call fcn.1401b71f0
lea rcx, [rbp + 0xd0]
call fcn.1401b7200
lea rcx, [rbp + 0xa0]
call fcn.14003d0a0
nop
lea rax, vtable._ckSymSettings.0
mov qword [rsp + 0x50], rax
lea rcx, [rbp]
call fcn.14003d0a0
lea rcx, [rbp - 0x30]
call fcn.14003d0a0
lea rcx, [rbp - 0x60]
call fcn.14003d0a0
lea rcx, [rsp + 0x68]
call fcn.14003d0a0
nop
lea rcx, [rbp + 0x610]
call fcn.1400fd830
mov ebx, dword [rsp + 0x30]
jmp 0x1400f8c01
mov rax, qword [r15]
lea rdx, str.No_context_for_XTS_mode_
mov rcx, r15
call qword [rax + 0x28]
mov byte [rsi + 0xb0], bl
mov eax, dword [r13 + 0x10]
mov r15d, pe_nt_image_headers64
cmp eax, 0xc1
jl 0x1400f8c21
mov dword [r13 + 0x10], r15d
mov r14d, r15d
jmp 0x1400f8c42
cmp eax, 0x81
jl 0x1400f8c34
mov r14d, 0xc0
mov dword [r13 + 0x10], r14d
jmp 0x1400f8c42
mov dword [r13 + 0x10], 0x80
mov r14d, 0x80
xorps xmm0, xmm0
movups xmmword [rbp + 0x8d0], xmm0
movups xmmword [rbp + 0x8e0], xmm0
lea rcx, [r13 + 0x18]
call fcn.140041740
test rax, rax
je 0x1400f8cbe
lea rcx, [r13 + 0x18]
call fcn.140041a70
test eax, eax
je 0x1400f8cbe
lea rcx, [r13 + 0x18]
call fcn.140041a70
lea rcx, [r13 + 0x18]
cmp eax, 0x20
jbe 0x1400f8c9c
call fcn.140041740
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x8d0], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x8e0], xmm1
jmp 0x1400f8cbe
call fcn.140041a70
mov ebx, eax
lea rcx, [r13 + 0x18]
call fcn.140041740
mov rdx, rax
mov r8d, ebx
lea rcx, [rbp + 0x8d0]
call sub.VCRUNTIME140.dll_memcpy
mov ecx, r14d
sub ecx, 0x80
je 0x1400f8cf2
sub ecx, 0x40
je 0x1400f8ce6
cmp ecx, 0x40
je 0x1400f8cda
xor al, al
jmp 0x1400f99b9
mov dword [rsi + 0x2b4], send
jmp 0x1400f8cfc
mov dword [rsi + 0x2b4], reloc.WS2_32.dll_inet_ntoa
jmp 0x1400f8cfc
mov dword [rsi + 0x2b4], 0xa
lea rax, [rsi + 0xb4]
shr r14d, 5
mov r10d, r12d
lea r9, [rbp + 0x8d2]
lea rcx, [rbp + 0x8d2]
mov r11, rax
sub r11, rcx
nop
lea ecx, [r10*4]
movsxd rdx, ecx
movzx r8d, byte [rbp + rdx + 0x8d0]
shl r8d, 8
movzx ecx, byte [r9 - 1]
or r8d, ecx
shl r8d, 8
movzx ecx, byte [r9]
or r8d, ecx
shl r8d, 8
movzx ecx, byte [r9 + 1]
or r8d, ecx
mov dword [r11 + r9], r8d
inc r10d
lea r9, [r9 + 4]
cmp r10d, r14d
jl 0x1400f8d20
mov ecx, dword [rsi + 0x2b4]
lea r14, [0x140000000]
cmp ecx, 0xa
jne 0x1400f91e0
mov r8d, dword [rax + 0xc]
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
mov r10d, dword [r14 + rdx*4 + 0x22fa30]
xor r10d, 1
shl r10d, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor r10d, dword [r14 + rdx*4 + 0x22fa30]
shl r10d, 8
movzx ecx, r8b
xor r10d, dword [r14 + rcx*4 + 0x22fa30]
shl r10d, 8
mov ecx, r8d
shr rcx, 0x18
xor r10d, dword [r14 + rcx*4 + 0x22fa30]
xor r10d, dword [rax]
mov dword [rax + 0x10], r10d
mov esi, r10d
xor esi, dword [rax + 4]
mov dword [rax + 0x14], esi
mov r9d, esi
xor r9d, dword [rax + 8]
mov dword [rax + 0x18], r9d
mov ecx, r9d
xor ecx, r8d
mov r8d, ecx
mov dword [rax + 0x1c], r8d
shr ecx, 0x10
movzx edx, cl
mov r11d, dword [r14 + rdx*4 + 0x22fa30]
xor r11d, 2
shl r11d, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor r11d, dword [r14 + rdx*4 + 0x22fa30]
shl r11d, 8
movzx ecx, r8b
xor r11d, dword [r14 + rcx*4 + 0x22fa30]
shl r11d, 8
mov ecx, r8d
shr rcx, 0x18
xor r11d, dword [r14 + rcx*4 + 0x22fa30]
xor r11d, r10d
mov dword [rax + 0x20], r11d
xor esi, r11d
mov dword [rax + 0x24], esi
mov r10d, esi
xor r10d, r9d
mov dword [rax + 0x28], r10d
mov ecx, r10d
xor ecx, r8d
mov r8d, ecx
mov dword [rax + 0x2c], r8d
shr ecx, 0x10
movzx edx, cl
mov ebx, dword [r14 + rdx*4 + 0x22fa30]
xor ebx, 4
shl ebx, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor ebx, dword [r14 + rdx*4 + 0x22fa30]
shl ebx, 8
movzx ecx, r8b
xor ebx, dword [r14 + rcx*4 + 0x22fa30]
shl ebx, 8
mov ecx, r8d
shr rcx, 0x18
xor ebx, dword [r14 + rcx*4 + 0x22fa30]
xor ebx, r11d
mov dword [rax + 0x30], ebx
xor esi, ebx
mov dword [rax + 0x34], esi
mov r9d, esi
xor r9d, r10d
mov dword [rax + 0x38], r9d
mov ecx, r9d
xor ecx, r8d
mov r8d, ecx
mov dword [rax + 0x3c], r8d
shr ecx, 0x10
movzx edx, cl
mov r11d, dword [r14 + rdx*4 + 0x22fa30]
xor r11d, 8
shl r11d, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor r11d, dword [r14 + rdx*4 + 0x22fa30]
shl r11d, 8
movzx ecx, r8b
xor r11d, dword [r14 + rcx*4 + 0x22fa30]
shl r11d, 8
mov ecx, r8d
shr rcx, 0x18
xor r11d, dword [r14 + rcx*4 + 0x22fa30]
xor r11d, ebx
mov dword [rax + 0x40], r11d
xor esi, r11d
mov dword [rax + 0x44], esi
mov r10d, esi
xor r10d, r9d
mov dword [rax + 0x48], r10d
xor r8d, r10d
mov r9d, r8d
mov dword [rax + 0x4c], r9d
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
mov ebx, dword [r14 + rdx*4 + 0x22fa30]
xor ebx, 0x10
shl ebx, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor ebx, dword [r14 + rdx*4 + 0x22fa30]
shl ebx, 8
movzx ecx, r8b
xor ebx, dword [r14 + rcx*4 + 0x22fa30]
shl ebx, 8
mov ecx, r8d
shr rcx, 0x18
xor ebx, dword [r14 + rcx*4 + 0x22fa30]
xor ebx, r11d
mov dword [rax + 0x50], ebx
xor esi, ebx
mov dword [rax + 0x54], esi
mov r11d, esi
xor r11d, r10d
mov dword [rax + 0x58], r11d
xor r9d, r11d
mov r8d, r9d
mov dword [rax + 0x5c], r8d
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
mov edi, dword [r14 + rdx*4 + 0x22fa30]
xor edi, 0x20
shl edi, 8
mov ecx, r9d
shr ecx, 8
movzx edx, cl
xor edi, dword [r14 + rdx*4 + 0x22fa30]
shl edi, 8
movzx ecx, r9b
xor edi, dword [r14 + rcx*4 + 0x22fa30]
shl edi, 8
mov ecx, r9d
shr rcx, 0x18
xor edi, dword [r14 + rcx*4 + 0x22fa30]
xor edi, ebx
mov dword [rax + 0x60], edi
mov r10d, edi
xor r10d, esi
mov dword [rax + 0x64], r10d
mov ebx, r10d
xor ebx, r11d
mov dword [rax + 0x68], ebx
xor r8d, ebx
mov r9d, r8d
mov dword [rax + 0x6c], r9d
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
mov esi, dword [r14 + rdx*4 + 0x22fa30]
xor esi, 0x40
shl esi, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor esi, dword [r14 + rdx*4 + 0x22fa30]
shl esi, 8
movzx ecx, r8b
xor esi, dword [r14 + rcx*4 + 0x22fa30]
shl esi, 8
mov ecx, r8d
shr rcx, 0x18
xor esi, dword [r14 + rcx*4 + 0x22fa30]
xor esi, edi
mov dword [rax + 0x70], esi
mov r11d, esi
xor r11d, r10d
mov dword [rax + 0x74], r11d
mov edi, r11d
xor edi, ebx
mov dword [rax + 0x78], edi
xor r9d, edi
mov r8d, r9d
mov dword [rax + 0x7c], r8d
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
mov ebx, dword [r14 + rdx*4 + 0x22fa30]
xor ebx, 0xffffff80
shl ebx, 8
mov ecx, r9d
shr ecx, 8
movzx edx, cl
xor ebx, dword [r14 + rdx*4 + 0x22fa30]
shl ebx, 8
movzx ecx, r9b
xor ebx, dword [r14 + rcx*4 + 0x22fa30]
shl ebx, 8
mov ecx, r9d
shr rcx, 0x18
xor ebx, dword [r14 + rcx*4 + 0x22fa30]
xor ebx, esi
mov dword [rax + 0x80], ebx
mov r9d, ebx
xor r9d, r11d
mov dword [rax + 0x84], r9d
mov r10d, r9d
xor r10d, edi
mov dword [rax + 0x88], r10d
xor r8d, r10d
mov dword [rax + 0x8c], r8d
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
mov edi, dword [r14 + rdx*4 + 0x22fa30]
xor edi, 0x1b
shl edi, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor edi, dword [r14 + rdx*4 + 0x22fa30]
shl edi, 8
movzx ecx, r8b
xor edi, dword [r14 + rcx*4 + 0x22fa30]
shl edi, 8
mov ecx, r8d
shr rcx, 0x18
xor edi, dword [r14 + rcx*4 + 0x22fa30]
xor edi, ebx
mov dword [rax + 0x90], edi
mov r11d, edi
xor r11d, r9d
mov dword [rax + 0x94], r11d
mov ebx, r11d
xor ebx, r10d
mov dword [rax + 0x98], ebx
xor r8d, ebx
mov r9d, r8d
mov dword [rax + 0x9c], r9d
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
mov r8d, dword [r14 + rdx*4 + 0x22fa30]
xor r8d, 0x36
shl r8d, 8
mov ecx, r9d
shr ecx, 8
movzx edx, cl
xor r8d, dword [r14 + rdx*4 + 0x22fa30]
shl r8d, 8
movzx ecx, r9b
xor r8d, dword [r14 + rcx*4 + 0x22fa30]
shl r8d, 8
mov ecx, r9d
shr rcx, 0x18
xor r8d, dword [r14 + rcx*4 + 0x22fa30]
xor r8d, edi
mov dword [rax + 0xa0], r8d
xor r8d, r11d
mov dword [rax + 0xa4], r8d
xor r8d, ebx
mov dword [rax + 0xa8], r8d
xor r9d, r8d
mov dword [rax + 0xac], r9d
add rax, 0xa0
jmp 0x1400f9779
cmp ecx, 0xc
jne 0x1400f966e
mov r8d, dword [rax + 0x14]
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
mov esi, dword [r14 + rdx*4 + 0x22fa30]
xor esi, 1
shl esi, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor esi, dword [r14 + rdx*4 + 0x22fa30]
shl esi, 8
movzx ecx, r8b
xor esi, dword [r14 + rcx*4 + 0x22fa30]
shl esi, 8
mov ecx, r8d
shr rcx, 0x18
xor esi, dword [r14 + rcx*4 + 0x22fa30]
xor esi, dword [rax]
mov dword [rax + 0x18], esi
mov r10d, esi
xor r10d, dword [rax + 4]
mov dword [rax + 0x1c], r10d
mov r11d, r10d
xor r11d, dword [rax + 8]
mov dword [rax + 0x20], r11d
mov ebx, r11d
xor ebx, dword [rax + 0xc]
mov dword [rax + 0x24], ebx
mov edi, ebx
xor edi, dword [rax + 0x10]
mov dword [rax + 0x28], edi
xor r8d, edi
mov r9d, r8d
mov dword [rax + 0x2c], r9d
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
mov r14d, dword [r14 + rdx*4 + 0x22fa30]
xor r14d, 2
shl r14d, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
lea r8, [0x140000000]
xor r14d, dword [r8 + rdx*4 + 0x22fa30]
shl r14d, 8
movzx ecx, r9b
xor r14d, dword [r8 + rcx*4 + 0x22fa30]
shl r14d, 8
mov ecx, r9d
shr rcx, 0x18
xor r14d, dword [r8 + rcx*4 + 0x22fa30]
xor r14d, esi
mov dword [rax + 0x30], r14d
mov esi, r14d
xor esi, r10d
mov dword [rax + 0x34], esi
mov r10d, esi
xor r10d, r11d
mov dword [rax + 0x38], r10d
mov r11d, r10d
xor r11d, ebx
mov dword [rax + 0x3c], r11d
mov ebx, r11d
xor ebx, edi
mov dword [rax + 0x40], ebx
xor r9d, ebx
mov r8d, r9d
mov dword [rax + 0x44], r8d
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
lea r9, [0x140000000]
mov r15d, dword [r9 + rdx*4 + 0x22fa30]
xor r15d, 4
shl r15d, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor r15d, dword [r9 + rdx*4 + 0x22fa30]
shl r15d, 8
movzx ecx, r8b
xor r15d, dword [r9 + rcx*4 + 0x22fa30]
shl r15d, 8
mov ecx, r8d
shr rcx, 0x18
xor r15d, dword [r9 + rcx*4 + 0x22fa30]
xor r15d, r14d
mov dword [rax + 0x48], r15d
mov edi, r15d
xor edi, esi
mov dword [rax + 0x4c], edi
mov esi, edi
xor esi, r10d
mov dword [rax + 0x50], esi
mov r10d, esi
xor r10d, r11d
mov dword [rax + 0x54], r10d
mov r11d, r10d
xor r11d, ebx
mov dword [rax + 0x58], r11d
xor r8d, r11d
mov r9d, r8d
mov dword [rax + 0x5c], r9d
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
lea r8, [0x140000000]
mov r14d, dword [r8 + rdx*4 + 0x22fa30]
xor r14d, 8
shl r14d, 8
mov ecx, r9d
shr ecx, 8
movzx edx, cl
xor r14d, dword [r8 + rdx*4 + 0x22fa30]
shl r14d, 8
movzx ecx, r9b
xor r14d, dword [r8 + rcx*4 + 0x22fa30]
shl r14d, 8
mov ecx, r9d
shr rcx, 0x18
xor r14d, dword [r8 + rcx*4 + 0x22fa30]
xor r14d, r15d
mov dword [rax + 0x60], r14d
mov ebx, r14d
xor ebx, edi
mov dword [rax + 0x64], ebx
mov edi, ebx
xor edi, esi
mov dword [rax + 0x68], edi
mov esi, edi
xor esi, r10d
mov dword [rax + 0x6c], esi
mov r10d, esi
xor r10d, r11d
mov dword [rax + 0x70], r10d
xor r9d, r10d
mov r8d, r9d
mov dword [rax + 0x74], r8d
mov ecx, r9d
shr ecx, 0x10
movzx edx, cl
lea r9, [0x140000000]
mov r15d, dword [r9 + rdx*4 + 0x22fa30]
xor r15d, 0x10
shl r15d, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor r15d, dword [r9 + rdx*4 + 0x22fa30]
shl r15d, 8
movzx ecx, r8b
xor r15d, dword [r9 + rcx*4 + 0x22fa30]
shl r15d, 8
mov ecx, r8d
shr rcx, 0x18
xor r15d, dword [r9 + rcx*4 + 0x22fa30]
xor r15d, r14d
mov dword [rax + 0x78], r15d
mov r9d, r15d
xor r9d, ebx
mov dword [rax + 0x7c], r9d
mov r11d, r9d
xor r11d, edi
mov dword [rax + 0x80], r11d
mov ebx, r11d
xor ebx, esi
mov dword [rax + 0x84], ebx
mov edi, ebx
xor edi, r10d
mov dword [rax + 0x88], edi
mov ecx, edi
xor ecx, r8d
mov r8d, ecx
mov dword [rax + 0x8c], r8d
shr ecx, 0x10
movzx edx, cl
lea r10, [0x140000000]
mov esi, dword [r10 + rdx*4 + 0x22fa30]
xor esi, 0x20
shl esi, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor esi, dword [r10 + rdx*4 + 0x22fa30]
shl esi, 8
movzx ecx, r8b
xor esi, dword [r10 + rcx*4 + 0x22fa30]
shl esi, 8
mov ecx, r8d
shr rcx, 0x18
xor esi, dword [r10 + rcx*4 + 0x22fa30]
xor esi, r15d
mov dword [rax + 0x90], esi
mov r10d, esi
xor r10d, r9d
mov dword [rax + 0x94], r10d
mov r9d, r10d
xor r9d, r11d
mov dword [rax + 0x98], r9d
mov r11d, r9d
xor r11d, ebx
mov dword [rax + 0x9c], r11d
mov ebx, r11d
xor ebx, edi
mov dword [rax + 0xa0], ebx
mov ecx, ebx
xor ecx, r8d
mov r8d, ecx
mov dword [rax + 0xa4], r8d
shr ecx, 0x10
movzx edx, cl
lea r15, [0x140000000]
mov r14d, dword [r15 + rdx*4 + 0x22fa30]
xor r14d, 0x40
shl r14d, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor r14d, dword [r15 + rdx*4 + 0x22fa30]
shl r14d, 8
movzx ecx, r8b
xor r14d, dword [r15 + rcx*4 + 0x22fa30]
shl r14d, 8
mov ecx, r8d
shr rcx, 0x18
xor r14d, dword [r15 + rcx*4 + 0x22fa30]
xor r14d, esi
mov dword [rax + 0xa8], r14d
mov edi, r14d
xor edi, r10d
mov dword [rax + 0xac], edi
mov r10d, edi
xor r10d, r9d
mov dword [rax + 0xb0], r10d
mov esi, r10d
xor esi, r11d
mov dword [rax + 0xb4], esi
mov r11d, esi
xor r11d, ebx
mov dword [rax + 0xb8], r11d
xor r8d, r11d
mov r9d, r8d
mov dword [rax + 0xbc], r9d
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
mov r8d, dword [r15 + rdx*4 + 0x22fa30]
xor r8d, 0xffffff80
shl r8d, 8
mov ecx, r9d
shr ecx, 8
movzx edx, cl
xor r8d, dword [r15 + rdx*4 + 0x22fa30]
shl r8d, 8
movzx ecx, r9b
xor r8d, dword [r15 + rcx*4 + 0x22fa30]
shl r8d, 8
mov ecx, r9d
shr rcx, 0x18
xor r8d, dword [r15 + rcx*4 + 0x22fa30]
xor r8d, r14d
mov dword [rax + 0xc0], r8d
xor r8d, edi
mov dword [rax + 0xc4], r8d
xor r8d, r10d
mov dword [rax + 0xc8], r8d
xor r8d, esi
mov dword [rax + 0xcc], r8d
xor r8d, r11d
mov dword [rax + 0xd0], r8d
xor r9d, r8d
mov dword [rax + 0xd4], r9d
add rax, 0xc0
mov r15d, pe_nt_image_headers64
lea r14, [0x140000000]
jmp 0x1400f9779
cmp ecx, 0xe
jne 0x1400f9783
mov edi, dword [rax]
lea rbx, [0x140232230]
lea rsi, [0x14023224c]
nop word [rax + rax]
mov r11d, dword [rax + 0x1c]
mov ecx, r11d
shr ecx, 0x10
movzx edx, cl
mov r8d, dword [r14 + rdx*4 + 0x22fa30]
shl r8d, 8
mov ecx, r11d
shr ecx, 8
movzx edx, cl
xor r8d, dword [r14 + rdx*4 + 0x22fa30]
shl r8d, 8
movzx ecx, r11b
xor r8d, dword [r14 + rcx*4 + 0x22fa30]
shl r8d, 8
mov ecx, r11d
shr rcx, 0x18
xor r8d, dword [r14 + rcx*4 + 0x22fa30]
xor r8d, dword [rbx]
xor r8d, edi
mov edi, r8d
mov dword [rax + 0x20], r8d
mov ecx, r8d
xor ecx, dword [rax + 4]
mov dword [rax + 0x24], ecx
xor ecx, dword [rax + 8]
mov dword [rax + 0x28], ecx
xor ecx, dword [rax + 0xc]
mov r8d, ecx
mov dword [rax + 0x2c], r8d
shr rcx, 0x18
mov r9d, dword [r14 + rcx*4 + 0x22fa30]
shl r9d, 8
mov ecx, r8d
shr ecx, 0x10
movzx edx, cl
xor r9d, dword [r14 + rdx*4 + 0x22fa30]
shl r9d, 8
mov ecx, r8d
shr ecx, 8
movzx edx, cl
xor r9d, dword [r14 + rdx*4 + 0x22fa30]
shl r9d, 8
movzx ecx, r8b
xor r9d, dword [r14 + rcx*4 + 0x22fa30]
xor r9d, dword [rax + 0x10]
mov dword [rax + 0x30], r9d
xor r9d, dword [rax + 0x14]
mov dword [rax + 0x34], r9d
xor r9d, dword [rax + 0x18]
mov dword [rax + 0x38], r9d
xor r11d, r9d
mov dword [rax + 0x3c], r11d
add rbx, 4
add rax, 0x20
cmp rbx, rsi
jl 0x1400f9690
mov rsi, qword [rsp + 0x38]
mov edi, 1
cmp byte [0x1402c17e0], 0
jne 0x1400f97f2
nop dword [rax]
mov ecx, dword [r12 + r14 + 0x22fa30]
lea rdx, [rcx*4]
mov ecx, dword [rdx + r14 + 0x231230]
mov dword [r12 + r14 + 0x2c07e0], ecx
mov ecx, dword [rdx + r14 + 0x231630]
mov dword [r12 + r14 + 0x2c0be0], ecx
mov ecx, dword [rdx + r14 + 0x231a30]
mov dword [r12 + r14 + 0x2c0fe0], ecx
mov ecx, dword [rdx + r14 + 0x231e30]
mov dword [r12 + r14 + 0x2c13e0], ecx
lea r12, [r12 + 4]
sub r15, 1
jne 0x1400f9790
mov byte [0x1402c17e0], 1
lea r11, [rsi + 0x1b4]
mov ecx, dword [rax]
mov dword [r11], ecx
mov ecx, dword [rax + 4]
mov dword [r11 + 4], ecx
mov ecx, dword [rax + 8]
mov dword [r11 + 8], ecx
mov ecx, dword [rax + 0xc]
mov dword [r11 + 0xc], ecx
add rax, 0x10
add r11, 0x10
cmp dword [rsi + 0x2b4], 1
jle 0x1400f9959
nop dword [rax + rax]
mov r10d, dword [rax - 0x20]
mov r8d, r10d
shr r8, 0x18
mov ecx, r10d
shr ecx, 0x10
movzx edx, cl
mov r9d, dword [r14 + r8*4 + 0x2c07e0]
xor r9d, dword [r14 + rdx*4 + 0x2c0be0]
mov ecx, r10d
shr ecx, 8
movzx edx, cl
xor r9d, dword [r14 + rdx*4 + 0x2c0fe0]
movzx ecx, r10b
xor r9d, dword [r14 + rcx*4 + 0x2c13e0]
mov dword [r11], r9d
mov r10d, dword [rax - 0x1c]
mov r8d, r10d
shr r8, 0x18
mov ecx, r10d
shr ecx, 0x10
movzx edx, cl
mov r9d, dword [r14 + r8*4 + 0x2c07e0]
xor r9d, dword [r14 + rdx*4 + 0x2c0be0]
mov ecx, r10d
shr ecx, 8
movzx edx, cl
xor r9d, dword [r14 + rdx*4 + 0x2c0fe0]
movzx ecx, r10b
xor r9d, dword [r14 + rcx*4 + 0x2c13e0]
mov dword [r11 + 4], r9d
mov r10d, dword [rax - 0x18]
mov r8d, r10d
shr r8, 0x18
mov ecx, r10d
shr ecx, 0x10
movzx edx, cl
mov r9d, dword [r14 + r8*4 + 0x2c07e0]
xor r9d, dword [r14 + rdx*4 + 0x2c0be0]
mov ecx, r10d
shr ecx, 8
movzx edx, cl
xor r9d, dword [r14 + rdx*4 + 0x2c0fe0]
movzx ecx, r10b
xor r9d, dword [r14 + rcx*4 + 0x2c13e0]
mov dword [r11 + 8], r9d
mov r10d, dword [rax - 0x14]
mov r8d, r10d
shr r8, 0x18
mov ecx, r10d
shr ecx, 0x10
movzx edx, cl
mov r9d, dword [r14 + r8*4 + 0x2c07e0]
xor r9d, dword [r14 + rdx*4 + 0x2c0be0]
mov ecx, r10d
shr ecx, 8
movzx edx, cl
xor r9d, dword [r14 + rdx*4 + 0x2c0fe0]
movzx ecx, r10b
xor r9d, dword [r14 + rcx*4 + 0x2c13e0]
mov dword [r11 + 0xc], r9d
add r11, 0x10
add rax, 0xfffffffffffffff0
inc edi
cmp edi, dword [rsi + 0x2b4]
jl 0x1400f9830
mov ecx, dword [rax - 0x20]
mov dword [r11], ecx
mov ecx, dword [rax - 0x1c]
mov dword [r11 + 4], ecx
mov ecx, dword [rax - 0x18]
mov dword [r11 + 8], ecx
mov ecx, dword [rax - 0x14]
mov dword [r11 + 0xc], ecx
mov r14, qword [rsp + 0x40]
test r14, r14
je 0x1400f99b7
mov eax, dword [r13 + 8]
sub eax, 3
cmp eax, 1
ja 0x1400f99b7
lea rcx, [r13 + 0x50]
call fcn.140041a70
mov edi, eax
lea rcx, [r13 + 0x50]
call fcn.140041740
mov rdx, rax
lea rcx, [r14 + 0x4a0]
mov r9d, dword [rsi + 0xa8]
mov r8d, edi
call fcn.1401bad50
mov al, 1
mov rcx, qword [rbp + 0x8f0]
xor rcx, rsp
call fcn.1401d75d0
mov rbx, qword [rsp + 0xa48]
add rsp, 0xa00
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret