Function at 0x1400c32f0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0x100
mov rax, qword [0x1401deb80]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov r15, rdx
mov rsi, rcx
mov rax, qword [rdx]
lea rdx, [rsp + 0x30]
mov rcx, r15
call qword [rax + 0x78]
mov r12, qword [rax + 8]
xor ebx, ebx
mov edi, ebx
mov rcx, rsi
call fcn.1400bcc80
cmp eax, 0xb
jne 0x1400c3487
mov rcx, rsi
call fcn.14010bed0
test al, al
je 0x1400c3487
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b8030
mov r14, rax
mov rcx, rax
call fcn.140118e60
test al, al
je 0x1400c3487
mov r8, rsi
mov rdx, r15
lea rcx, [rbp - 0x79]
call fcn.1400b5110
nop
mov r8, rsi
mov rdx, r15
lea rcx, [rbp - 0x31]
call fcn.1400b5110
nop
mov rcx, rsi
call fcn.14010bf80
mov r15, qword [rax + 0x28]
mov rcx, rsi
call fcn.14010bf80
mov rsi, qword [rax + 0x28]
mov rax, qword [r14]
lea rdx, [rbp - 0x79]
mov rcx, r14
call qword [rax + Ordinal_41]
mov rax, qword [r14]
lea rdx, [rbp - 0x31]
mov rcx, r14
call qword [rax + 0x30]
mov rcx, qword [rbp - 0x71]
mov rax, qword [rcx]
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x79]
call qword [rax + 0x20]
test al, al
jne 0x1400c343f
lea rdx, [rbp - 0x69]
mov rcx, r15
call fcn.1400c7090
lea rbx, [rax + 2]
lea rdx, [rbp - 0x41]
lea rcx, [rsi + 0x48]
call fcn.1400c7300
add rbx, rax
mov ecx, ebx
or ecx, 1
bsr edx, ecx
lea edx, [rdx + rdx*8]
add edx, 0x49
shr rdx, 6
add rdx, rbx
add rdi, rdx
mov rcx, qword [rbp - 0x71]
mov rax, qword [rcx]
lea rdx, [rbp - 0x79]
call qword [rax + Ordinal_145]
mov rcx, qword [rbp - 0x71]
mov rax, qword [rcx]
lea r8, [rbp - 0x31]
lea rdx, [rbp - 0x79]
call qword [rax + 0x20]
test al, al
je 0x1400c33e0
mov rcx, qword [rbp - 0x29]
mov rax, qword [rcx]
lea rdx, [rbp - 0x31]
call qword [rax + pe_nt_image_headers64]
cmp dword [rbp - 1], 9
jne 0x1400c3460
lea rcx, [rbp - 0x21]
call fcn.1400b0ad0
nop
mov rcx, qword [rbp - 0x71]
mov r8, qword [rcx]
lea rdx, [rbp - 0x79]
call qword [r8 + pe_nt_image_headers64]
cmp dword [rbp - 0x49], 9
jne 0x1400c3482
lea rcx, [rbp - 0x69]
call fcn.1400b0ad0
nop
jmp case.default.0x1400c34ff
movzx eax, byte [rsi + 1]
and al, 0x60
cmp al, 0x60
jne 0x1400c34a4
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b7200
mov r14d, eax
jmp 0x1400c34d9
mov rax, qword [rsi + 0x20]
mov rcx, qword [rax + 0x20]
cmp byte [rcx + 0x4b], bl
je 0x1400c34b9
mov r14d, 1
jmp 0x1400c34d9
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b9690
mov rcx, rbx
mov r14d, 1
test al, al
cmovne rcx, r14
mov r14, rcx
mov rcx, rsi
call fcn.1400bcc80
dec eax
cmp eax, 0x11
ja case.default.0x1400c34ff
cdqe
lea rdx, [0x140000000]
mov ecx, dword [rdx + rax*4 + 0xc39d8]
add rcx, rdx
jmp rcx
movzx eax, byte [rsi + 1]
and al, 0x60
cmp al, 0x60
jne 0x1400c354d
test r14, r14
je case.default.0x1400c34ff
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b88c0
movsxd rcx, eax
or rcx, 1
bsr rax, rcx
lea ecx, [rax*8 + 0x49]
add ecx, eax
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400c3514
jmp case.default.0x1400c34ff
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b7db0
movsxd rcx, eax
or rcx, 1
bsr rax, rcx
lea edi, [rax*8 + 0x49]
add edi, eax
jmp 0x1400c372b
movzx eax, byte [rsi + 1]
and al, 0x60
cmp al, 0x60
jne 0x1400c35c3
test r14, r14
je case.default.0x1400c34ff
nop word [rax + rax]
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b8990
or rax, 1
bsr rcx, rax
lea ecx, [rcx + rcx*8]
add ecx, 0x49
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400c3590
jmp case.default.0x1400c34ff
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b7f00
or rax, 1
bsr rcx, rax
jmp 0x1400c3722
movzx eax, byte [rsi + 1]
and al, 0x60
cmp al, 0x60
jne 0x1400c362e
test r14, r14
je case.default.0x1400c34ff
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b88c0
mov ecx, eax
sar ecx, 0x1f
add eax, eax
xor ecx, eax
or ecx, 1
bsr eax, ecx
lea ecx, [rax*8 + 0x49]
add ecx, eax
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400c35f1
jmp case.default.0x1400c34ff
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b7db0
mov ecx, eax
sar ecx, 0x1f
add eax, eax
xor ecx, eax
or ecx, 1
bsr eax, ecx
lea edi, [rax*8 + 0x49]
add edi, eax
jmp 0x1400c372b
movzx eax, byte [rsi + 1]
and al, 0x60
cmp al, 0x60
jne 0x1400c36b0
test r14, r14
je case.default.0x1400c34ff
nop dword [rax]
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b8990
mov rcx, rax
sar rcx, 0x3f
add rax, rax
xor rcx, rax
or rcx, 1
bsr rax, rcx
lea ecx, [rax*8 + 0x49]
add ecx, eax
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400c3670
jmp case.default.0x1400c34ff
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b7f00
mov rcx, rax
sar rcx, 0x3f
add rax, rax
xor rcx, rax
jmp 0x1400c355e
movzx eax, byte [rsi + 1]
and al, 0x60
cmp al, 0x60
jne 0x1400c370e
test r14, r14
je case.default.0x1400c34ff
nop
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b8d30
or eax, 1
bsr ecx, eax
lea ecx, [rcx + rcx*8]
add ecx, 0x49
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400c36e0
jmp case.default.0x1400c34ff
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b91d0
or eax, 1
bsr ecx, eax
lea edi, [rcx*8 + 0x49]
add edi, ecx
shr rdi, 6
mov rax, rdi
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.140149a30
mov rbx, qword [rsp + 0x150]
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
movzx eax, byte [rsi + 1]
and al, 0x60
cmp al, 0x60
jne 0x1400c37a0
test r14, r14
je case.default.0x1400c34ff
nop dword [rax + rax]
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b8e00
or rax, 1
bsr rcx, rax
lea ecx, [rcx + rcx*8]
add ecx, 0x49
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400c3770
jmp case.default.0x1400c34ff
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b92f0
or rax, 1
bsr rcx, rax
jmp 0x1400c3722
lea rdi, [r14*4]
jmp case.default.0x1400c34ff
lea rdi, [r14*8]
jmp case.default.0x1400c34ff
mov rdi, r14
jmp case.default.0x1400c34ff
movzx eax, byte [rsi + 1]
and al, 0x60
cmp al, 0x60
jne 0x1400c381a
test r14, r14
je case.default.0x1400c34ff
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b8a60
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + gethostname]
add rdi, rax
inc rbx
cmp rbx, r14
jb 0x1400c37f0
jmp case.default.0x1400c34ff
xor r9d, r9d
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b80a0
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + gethostname]
mov rdi, rax
jmp case.default.0x1400c34ff
movzx eax, byte [rsi + 1]
and al, 0x60
cmp al, 0x60
jne 0x1400c388f
test r14, r14
je case.default.0x1400c34ff
nop
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b8a60
mov rdx, qword [rax]
mov rcx, rax
call qword [rdx + gethostname]
mov ecx, eax
or ecx, 1
bsr edx, ecx
lea edx, [rdx + rdx*8]
add edx, 0x49
shr rdx, 6
add rdx, rax
add rdi, rdx
inc rbx
cmp rbx, r14
jb 0x1400c3850
jmp case.default.0x1400c34ff
xor r9d, r9d
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b80a0
mov rcx, rax
call fcn.1400beca0
mov rdi, rax
jmp case.default.0x1400c34ff
movzx eax, byte [rsi + 1]
and al, 0x60
cmp al, 0x60
jne 0x1400c38fd
test r14, r14
je case.default.0x1400c34ff
mov r9d, ebx
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b8640
movsxd rcx, dword [rax + 4]
or rcx, 1
bsr rax, rcx
lea ecx, [rax*8 + 0x49]
add ecx, eax
shr rcx, 6
add rdi, rcx
inc rbx
cmp rbx, r14
jb 0x1400c38c3
jmp case.default.0x1400c34ff
mov r8, rsi
mov rdx, r15
mov rcx, r12
call fcn.1400b7880
movsxd rcx, dword [rax + 4]
jmp 0x1400c355e
mov r13, rbx
test r14, r14
je case.default.0x1400c34ff
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
movzx eax, byte [rsi + 1]
and al, 0x60
mov r8, rsi
mov rdx, r15
mov rcx, r12
cmp al, 0x60
jne 0x1400c395f
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
mov r9d, r13d
call fcn.1400b8c60
jmp 0x1400c3969
lea r9, [rsp + 0x40]
call fcn.1400b9060
mov rdx, qword [rax + 0x10]
mov eax, edx
or eax, 1
bsr ecx, eax
lea ecx, [rcx + rcx*8]
add ecx, 0x49
shr rcx, 6
add rcx, rdx
add rdi, rcx
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x1400c39be
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400c39b9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400c39cf
call fcn.140149f74
inc r13
cmp r13, r14
jae case.default.0x1400c34ff
jmp 0x1400c3920
call fcn.140153174
int3