Function at 0x1400c3de0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
lea rbx, str.dnsroot
sub rsp, 0x28
mov rax, qword [0x1403e8320]
mov rsi, qword [rax + 8]
mov r12, rcx
test rsi, rsi
jne 0x1400c3e3b
mov rdx, rbx
mov rcx, r12
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x1400c40ed
mov rcx, r12
mov edx, 0x2e
call sub.msvcrt.dll_strchr
mov rcx, rbx
lea r12, [rax + 1]
test rax, rax
je 0x1400c3e02
test rsi, rsi
je 0x1400c3e0a
mov rcx, r12
call sub.msvcrt.dll_strlen
mov r9, r12
mov r8, rax
mov ebp, eax
cmp eax, 0xb
jbe 0x1400c4100
mov r10d, eax
mov r13d, 0x9e3779b9
mov r11d, 0x9e3779b9
mov ecx, 0xfeedbeef
nop dword [rax + rax]
movzx edx, byte [r9 + 5]
movzx eax, byte [r9 + 6]
shl edx, 8
shl eax, 0x10
add edx, eax
movzx eax, byte [r9 + 4]
add edx, eax
movzx eax, byte [r9 + 7]
shl eax, 0x18
add edx, eax
movzx eax, byte [r9 + 9]
add edx, r13d
movzx r13d, byte [r9 + 0xa]
shl eax, 8
shl r13d, 0x10
add eax, r13d
movzx r13d, byte [r9 + 8]
add eax, r13d
movzx r13d, byte [r9 + 0xb]
shl r13d, 0x18
add eax, r13d
movzx r13d, byte [r9 + 2]
add eax, ecx
movzx ecx, byte [r9 + 1]
shl r13d, 0x10
shl ecx, 8
add ecx, r13d
movzx r13d, byte [r9]
add ecx, r13d
movzx r13d, byte [r9 + 3]
shl r13d, 0x18
add ecx, r13d
sub ecx, edx
sub edx, eax
sub ecx, eax
add ecx, r11d
mov r11d, eax
shr r11d, 0xd
xor ecx, r11d
sub edx, ecx
sub eax, ecx
mov r11d, edx
mov edx, ecx
shl edx, 8
xor edx, r11d
sub eax, edx
mov r11d, eax
mov eax, edx
shr eax, 0xd
xor eax, r11d
sub ecx, edx
sub r10d, 0xc
add r9, 0xc
sub ecx, eax
sub edx, eax
mov r11d, ecx
mov ecx, eax
shr ecx, 0xc
xor ecx, r11d
sub edx, ecx
sub eax, ecx
mov r11d, edx
mov edx, ecx
shl edx, 0x10
xor edx, r11d
sub eax, edx
sub ecx, edx
mov r11d, eax
mov eax, edx
shr eax, 5
xor eax, r11d
mov r11d, eax
sub ecx, eax
sub edx, eax
shr r11d, 3
xor r11d, ecx
mov r13d, r11d
sub edx, r11d
sub eax, r11d
shl r13d, 0xa
xor r13d, edx
mov ecx, r13d
sub eax, r13d
shr ecx, 0xf
xor ecx, eax
cmp r10d, 0xb
ja 0x1400c3e70
add ecx, r8d
cmp r10d, 0xb
ja case.0x1400c3f97.0
lea rdi, [0x1402914a4]
movsxd rax, dword [rdi + r10*4]
add rax, rdi
jmp rax
movzx eax, byte [r9 + 0xa]
shl eax, 0x18
add ecx, eax
movzx eax, byte [r9 + 9]
shl eax, 0x10
add ecx, eax
movzx eax, byte [r9 + 8]
shl eax, 8
add ecx, eax
movzx eax, byte [r9 + 7]
shl eax, 0x18
add r13d, eax
movzx eax, byte [r9 + 6]
shl eax, 0x10
add r13d, eax
movzx eax, byte [r9 + 5]
shl eax, 8
add r13d, eax
movzx eax, byte [r9 + 4]
add r13d, eax
movzx eax, byte [r9 + 3]
shl eax, 0x18
add r11d, eax
movzx eax, byte [r9 + 2]
shl eax, 0x10
add r11d, eax
movzx eax, byte [r9 + 1]
shl eax, 8
add r11d, eax
movzx eax, byte [r9]
add r11d, eax
lea eax, [rcx + r13]
mov edx, ecx
sub r13d, ecx
sub r11d, eax
shr edx, 0xd
xor edx, r11d
mov eax, edx
sub r13d, edx
sub ecx, edx
shl eax, 8
xor eax, r13d
sub ecx, eax
sub edx, eax
mov r9d, ecx
mov ecx, eax
shr ecx, 0xd
xor ecx, r9d
mov r9d, ecx
sub edx, ecx
sub eax, ecx
shr r9d, 0xc
xor r9d, edx
mov edx, r9d
sub eax, r9d
sub ecx, r9d
shl edx, 0x10
xor edx, eax
mov eax, edx
sub ecx, edx
sub r9d, edx
shr eax, 5
xor eax, ecx
mov ecx, eax
sub r9d, eax
sub edx, eax
shr ecx, 3
xor ecx, r9d
mov r14d, ecx
sub edx, ecx
sub eax, ecx
shl r14d, 0xa
xor r14d, edx
mov rdx, qword [rsi + 0x10]
sub eax, r14d
shr r14d, 0xf
xor r14d, eax
mov eax, dword [rdx + 8]
sub eax, 1
and eax, r14d
shl rax, 4
add rax, qword [rdx]
mov r13, qword [rax]
test r13, r13
je 0x1400c3e0a
mov rax, qword [rdx + 0x20]
mov edi, r8d
mov r15, rax
sub r13, rax
neg r15
jmp 0x1400c40c8
mov r13, qword [r13 + 0x30]
test r13, r13
je 0x1400c3e0a
add r13, r15
cmp dword [r13 + 0x44], r14d
jne 0x1400c40b8
cmp dword [r13 + 0x40], ebp
jne 0x1400c40b8
mov rcx, qword [r13 + 0x38]
mov r8, rdi
mov rdx, r12
call sub.msvcrt.dll_memcmp
test eax, eax
jne 0x1400c40b8
mov rax, qword [r13 + 8]
jmp 0x1400c40ef
xor eax, eax
add rsp, 0x28
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov r10d, eax
mov r13d, 0x9e3779b9
mov r11d, 0x9e3779b9
mov ecx, 0xfeedbeef
jmp 0x1400c3f80