Function at 0x1402e5610
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0xa8
call fcn.140410240
sub rsp, rax
mov rax, qword [0x140542918]
xor rax, rsp
mov qword [rsp + 0x90], rax
mov rdi, qword [rsp + 0x118]
mov rbp, rcx
mov rbx, qword [rsp + 0x120]
xor r15d, r15d
mov rcx, rdi
mov dword [rsp + 0x3c], r9d
mov r13d, r9d
mov qword [rsp + 0x40], r8
mov r14, rdx
mov dword [rsp + 0x34], 1
mov esi, r15d
call fcn.1401fe870
mov dword [rsp + 0x38], eax
test eax, eax
jle 0x1402e56c8
mov r12, qword [rsp + 0x128]
xor edx, edx
movsxd rcx, eax
mov rax, r12
div rcx
mov ecx, 0xffffffff
cmp rax, rcx
jb 0x1402e56ee
call fcn.1401f4f60
lea r8, str.pbkdf2_derive
mov edx, 0x149
lea rcx, str.providersimplementationskdfspbkdf2.c
call fcn.1401f5080
xor r8d, r8d
lea edx, [r15 + 0x69]
mov ecx, reloc.WS2_32.dll_gethostname
call fcn.1401f5180
xor eax, eax
mov rcx, qword [rsp + 0x90]
xor rcx, rsp
call fcn.14040ff40
add rsp, 0xa8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
cmp dword [rsp + 0x130], esi
je 0x1402e5796
lea rax, [r12*8]
cmp rax, 0x70
jae 0x1402e5730
call fcn.1401f4f60
lea r8, str.pbkdf2_derive
mov edx, 0x14f
lea rcx, str.providersimplementationskdfspbkdf2.c
call fcn.1401f5080
xor r8d, r8d
mov edx, 0xab
jmp 0x1402e56be
cmp r13d, 0x10
jge 0x1402e575f
call fcn.1401f4f60
lea r8, str.pbkdf2_derive
mov edx, 0x153
lea rcx, str.providersimplementationskdfspbkdf2.c
call fcn.1401f5080
xor r8d, r8d
lea edx, [r8 + 0x70]
jmp 0x1402e56be
cmp qword [rsp + 0x110], 0x3e8
jae 0x1402e5796
call fcn.1401f4f60
lea r8, str.pbkdf2_derive
mov edx, 0x157
lea rcx, str.providersimplementationskdfspbkdf2.c
call fcn.1401f5080
xor r8d, r8d
lea edx, [r8 + 0x7b]
jmp 0x1402e56be
call fcn.1403555e0
mov r13, rax
test rax, rax
je 0x1402e56c8
mov r9, rdi
mov qword [rsp + 0x20], r15
mov r8d, r14d
mov rdx, rbp
mov rcx, rax
call fcn.140355800
test eax, eax
je 0x1402e5a0e
call fcn.1403555e0
mov rsi, rax
test rax, rax
je 0x1402e5a0e
test r12d, r12d
je 0x1402e5a08
mov ecx, dword [rsp + 0x34]
nop dword [rax]
nop word [rax + rax]
cmp r12d, dword [rsp + 0x38]
mov eax, ecx
mov byte [rsp + 0x33], cl
mov edi, r12d
cmovg edi, dword [rsp + 0x38]
mov rdx, r13
shr eax, 0x18
mov byte [rsp + 0x30], al
mov eax, ecx
shr eax, 0x10
mov byte [rsp + 0x31], al
mov eax, ecx
shr eax, 8
mov rcx, rsi
mov byte [rsp + 0x32], al
call fcn.1403554d0
test eax, eax
je 0x1402e5a0e
movsxd r8, dword [rsp + 0x3c]
mov rcx, rsi
mov rdx, qword [rsp + 0x40]
call fcn.140355b00
test eax, eax
je 0x1402e5a0e
mov r8d, 4
lea rdx, [rsp + 0x30]
mov rcx, rsi
call fcn.140355b00
test eax, eax
je 0x1402e5a0e
xor r8d, r8d
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.140355750
test eax, eax
je 0x1402e5a0e
movsxd r14, edi
lea rdx, [rsp + 0x50]
mov r8, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov ebp, 1
cmp rbp, qword [rsp + 0x110]
jae 0x1402e59f2
mov rdx, r13
mov rcx, rsi
call fcn.1403554d0
test eax, eax
je 0x1402e5a0e
movsxd r8, dword [rsp + 0x38]
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.140355b00
test eax, eax
je 0x1402e5a0e
xor r8d, r8d
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.140355750
test eax, eax
je 0x1402e5a0e
mov r9, r15
test edi, edi
jle 0x1402e59ac
cmp edi, 0x40
jb 0x1402e59ac
lea eax, [rdi - 1]
movsxd rcx, eax
lea rax, [rsp + 0x50]
add rax, rcx
lea rdx, [rcx + rbx]
cmp rbx, rax
ja 0x1402e5920
lea rax, [rsp + 0x50]
cmp rdx, rax
jae 0x1402e59ac
mov ecx, edi
and ecx, 0x8000003f
jge 0x1402e5931
dec ecx
or ecx, 0xffffffc0
inc ecx
mov eax, edi
lea rdx, [rsp + 0x60]
sub eax, ecx
lea rcx, [rsp + 0x50]
sub rcx, rbx
movsxd r8, eax
sub rdx, rbx
lea rax, [rbx + 0x20]
nop dword [rax]
movdqu xmm0, xmmword [rax - 0x20]
add r9, 0x40
movdqu xmm1, xmmword [rcx + rax - 0x20]
movdqu xmm2, xmmword [rcx + rax]
lea rax, [rax + 0x40]
pxor xmm1, xmm0
movdqu xmmword [rax - 0x60], xmm1
movdqu xmm0, xmmword [rax - 0x50]
movdqu xmm1, xmmword [rdx + rax - 0x60]
pxor xmm1, xmm0
movdqu xmmword [rax - 0x50], xmm1
movdqu xmm0, xmmword [rax - 0x40]
movdqu xmm1, xmmword [rdx + rax - 0x40]
pxor xmm2, xmm0
movdqu xmmword [rax - 0x40], xmm2
movdqu xmm0, xmmword [rax - 0x30]
pxor xmm1, xmm0
movdqu xmmword [rax - 0x30], xmm1
cmp r9, r8
jl 0x1402e5950
cmp r9, r14
jge 0x1402e59e1
lea r8, [rsp + 0x50]
mov rdx, r14
sub r8, rbx
lea rax, [r9 + rbx]
sub rdx, r9
nop dword [rax]
nop word [rax + rax]
movzx ecx, byte [r8 + rax]
xor byte [rax], cl
lea rax, [rax + 1]
sub rdx, 1
jne 0x1402e59d0
inc rbp
cmp rbp, qword [rsp + 0x110]
jb 0x1402e58a2
mov ecx, dword [rsp + 0x34]
add rbx, r14
inc ecx
mov dword [rsp + 0x34], ecx
sub r12d, edi
jne 0x1402e57f0
mov r15d, 1
mov rcx, rsi
call fcn.140355570
mov rcx, r13
call fcn.140355570
mov eax, r15d
jmp 0x1402e56ca