Function at 0x1400334d0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rsi
push r12
sub rsp, 0xc8
mov r12, qword [0x1400c64e8]
mov qword [rax + 0x10], rbx
mov qword [rax - 0x18], r13
mov r13, r12
mov qword [rax - 0x20], r14
cmp qword [r12 + 0x18], 0xf
jbe 0x140033503
mov r13, qword [r12]
movzx eax, word [0x1400b5d90]
xor sil, sil
movups xmm0, xmmword [0x1400b5d80]
mov r14d, dword [reloc.WS2_32.dll_accept]
xor r8d, r8d
mov word [rsp + 0x50], ax
movzx eax, byte [0x1400b5d92]
mov byte [rsp + 0x52], al
movaps xmmword [rsp + 0xa0], xmm6
movups xmmword [rsp + 0x40], xmm0
cmp r14d, 2
jl 0x140033687
movdqa xmm0, xmmword [0x1400b69d0]
lea rcx, [rsp + 0x44]
movdqa xmm5, xmmword [0x1400b6920]
movdqa xmm4, xmmword [0x1400b69c0]
movdqa xmm6, xmmword [0x1400b6940]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 3
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400b69b0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 3
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400b69b0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x140033580
cmp r8d, 0x13
jge 0x1400336d1
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
lea r9, [r9 + 1]
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor byte [r9 - 1], al
cmp r8d, 0x13
jl 0x1400336a0
lea r8, [rsp + 0x40]
xor edx, edx
mov ecx, 0xf001f
call qword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov qword [rsp + 0xe0], rax
mov rbx, rax
test rax, rax
je 0x140033bd0
xor r9d, r9d
mov qword [rsp + 0xf8], rdi
xor r8d, r8d
mov qword [rsp + 0x20], 0
mov edx, 0xf001f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov rdi, rax
test rax, rax
je 0x140033bbf
cmp dword [rax], 0x52545353
jne 0x140033bb6
cmp dword [rax + 4], 0x20000
jb 0x140033bb6
movzx r10d, byte [0x1400b5dae]
movzx r11d, word [0x1400b5dac]
mov qword [rsp + 0xf0], rbp
mov ebp, dword [0x1400b5da8]
mov qword [rsp + 0xb0], r15
xor r15d, r15d
movaps xmmword [rsp + 0x90], xmm7
movups xmm7, xmmword [str.hoonmW_3_t__:0]
nop dword [rax]
mov esi, 1
cmp dword [rdi + 0x1c], esi
jbe 0x140033b86
nop
mov ebx, dword [rdi + 0x18]
mov eax, esi
imul eax, dword [rdi + 0x14]
add rax, rdi
add rbx, rax
test r15d, r15d
je 0x1400339a1
mov rax, 0xffffffffffffffff
nop
inc rax
cmp byte [rbx + rax + 0x100], 0
jne 0x1400337b0
test rax, rax
jne 0x1400339a1
mov eax, dword [0x1400b5da8]
xor ecx, ecx
mov dword [rsp + 0x68], eax
movzx eax, word [0x1400b5dac]
mov word [rsp + 0x6c], ax
movzx eax, byte [0x1400b5dae]
mov byte [rsp + 0x6e], al
movups xmm0, xmmword [str.hoonmW_3_t__:0]
movups xmmword [rsp + 0x58], xmm0
cmp r14d, 2
jl 0x140033934
movdqa xmm0, xmmword [0x1400b69d0]
lea rdx, [rsp + 0x5c]
movdqa xmm5, xmmword [0x1400b6920]
movdqa xmm4, xmmword [0x1400b69c0]
movdqa xmm6, xmmword [0x1400b6940]
movdqa xmmword [rsp + 0x30], xmm0
mov r8d, dword [rsp + 0x30]
nop
movd xmm2, ecx
lea eax, [rcx + 4]
pshufd xmm2, xmm2, 0
lea rdx, [rdx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add ecx, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 3
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400b69b0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rdx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 3
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, r8d
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400b69b0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rdx - 8]
xorps xmm2, xmm0
movd dword [rdx - 8], xmm2
cmp ecx, 0x10
jl 0x140033830
cmp ecx, 0x17
jge 0x14003396d
movsxd rax, ecx
lea r8, [rsp + 0x58]
add r8, rax
nop
mov eax, 0x22b63cbf
lea r8, [r8 + 1]
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x3b
movzx eax, cl
inc ecx
sub al, dl
add al, 0x3a
xor byte [r8 - 1], al
cmp ecx, 0x17
jl 0x140033940
lea r8, [rsp + 0x58]
mov edx, 0x100
lea rcx, [rbx + 0x100]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
movzx r10d, byte [0x1400b5dae]
movzx r11d, word [0x1400b5dac]
mov ebp, dword [0x1400b5da8]
movups xmm7, xmmword [str.hoonmW_3_t__:0]
xor r8d, r8d
mov dword [rsp + 0x80], ebp
mov word [rsp + 0x84], r11w
mov byte [rsp + 0x86], r10b
movups xmmword [rsp + 0x70], xmm7
cmp r14d, 2
jl 0x140033b07
movdqa xmm0, xmmword [0x1400b69d0]
lea rcx, [rsp + 0x74]
movdqa xmm5, xmmword [0x1400b6920]
movdqa xmm4, xmmword [0x1400b69c0]
movdqa xmm6, xmmword [0x1400b6940]
movdqa xmmword [rsp + 0x30], xmm0
mov edx, dword [rsp + 0x30]
nop word [rax + rax]
movd xmm2, r8d
lea eax, [r8 + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm5
movd xmm3, eax
movdqa xmm1, xmm2
pshufd xmm3, xmm3, 0
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
paddd xmm3, xmm5
pmuldq xmm0, xmm4
add r8d, 8
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 3
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1400b69b0]
packuswb xmm2, xmm2
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rcx - 0xc], xmm2
shufps xmm1, xmm0, 0xdd
psrad xmm1, 3
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, edx
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1400b69b0]
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp r8d, 0x10
jl 0x140033a00
cmp r8d, 0x17
jge 0x140033b51
movsxd rax, r8d
lea r9, [rsp + 0x70]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x22b63cbf
lea r9, [r9 + 1]
imul r8d
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x3b
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x3a
xor byte [r9 - 1], al
cmp r8d, 0x17
jl 0x140033b20
lea rax, [rbx + 0x100]
lea r8, [rsp + 0x70]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x140033b73
inc rax
test ecx, ecx
jne 0x140033b60
test edx, edx
je 0x140033c29
inc esi
cmp esi, dword [rdi + 0x1c]
jb 0x140033790
inc r15d
cmp r15d, 2
jb 0x140033780
xor sil, sil
mov rbx, qword [rsp + 0xe0]
mov r15, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0xf0]
movaps xmm7, xmmword [rsp + 0x90]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdi, qword [rsp + 0xf8]
mov rdx, qword [r12 + 0x18]
mov rcx, r12
movaps xmm6, xmmword [rsp + 0xa0]
mov r14, qword [rsp + 0xb8]
mov r13, qword [rsp + 0xc0]
mov rbx, qword [rsp + 0xe8]
cmp rdx, 1
jb 0x140033cb4
cmp rdx, 0xf
jbe 0x140033c0c
mov rcx, qword [r12]
mov qword [r12 + 0x10], 1
movzx eax, sil
mov word [rcx], reloc.WLDAP32.dll_Ordinal_32
add rsp, 0xc8
pop r12
pop rsi
ret
mov eax, dword [rdi + 4]
cmp eax, 0x20007
jb 0x140033c93
cmp eax, 0x2000e
jb 0x140033c6e
lock bts dword [rdi + 0x24], 0
jb 0x140033ca9
mov r9d, 0xfff
lea rcx, [rbx + 0x200]
mov r8, r13
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
inc dword [rdi + 0x20]
mov sil, 1
mov dword [rdi + 0x24], 0
jmp 0x140033b96
mov r9d, 0xfff
lea rcx, [rbx + 0x200]
mov r8, r13
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
inc dword [rdi + 0x20]
mov sil, 1
jmp 0x140033b96
mov r9d, 0xff
mov rcx, rbx
mov r8, r13
lea edx, [r9 + 1]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy_s]
inc dword [rdi + 0x20]
mov sil, 1
jmp 0x140033b96
lea r9, [0x1400b3844]
mov edx, 1
call fcn.1400227b0
movzx eax, sil
add rsp, 0xc8
pop r12
pop rsi
ret