Function at 0x1400cfb90
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov rcx, qword [0x140587680]
lea rdx, [rbp + 0x67]
movaps xmmword [rax - 0x18], xmm7
movaps xmmword [rax - 0x28], xmm9
mov dword [rbp + 0x67], 0x43a00000
mov rax, qword [rcx + 0x3ed8]
mov dword [rbp + 0x6b], 0x43660000
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [rbp - 0x19]
movss xmm0, dword [rax + 0x18]
subss xmm0, dword [rax + 0x64]
movss xmm2, dword [rax + 0x1c]
subss xmm2, dword [rax + 0x68]
addss xmm0, dword [0x1404f4e00]
addss xmm2, dword [0x1404f4d80]
movss dword [rax + 0xe0], xmm0
movss dword [rax + 0xe4], xmm2
movss xmm1, dword [rax + 0xf8]
maxss xmm1, xmm0
movss xmm0, dword [rax + 0xfc]
maxss xmm0, xmm2
movss dword [rax + 0xf8], xmm1
movss dword [rax + 0xfc], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
movsd xmm0, qword [str.fPQKM_I_]
xor al, 0x3c
movsd qword [rbp - 0x19], xmm0
xor byte [rbp - 0x18], 0x35
xor byte [rbp - 0x17], 0x36
xor byte [rbp - 0x16], 0x37
xor byte [rbp - 0x15], 0x38
xor byte [rbp - 0x14], 0x39
xor byte [rbp - 0x13], 0x3a
xor byte [rbp - 0x12], 0x3b
mov byte [rbp - 0x11], al
mov byte [rbp - 0x19], 0x52
call fcn.140054380
mov rcx, qword [0x140587680]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0x9b], 0
jne 0x1400cfcc1
movss xmm1, dword [0x1404f4edc]
lea rcx, [rbp + 0x67]
mov qword [rbp + 0x67], 0
call fcn.140025a10
mov rcx, qword [0x140587680]
mov rax, qword [rcx + 0x3ed8]
lea r8, [0x1405bf3b0]
movss xmm7, dword [0x1404f4d64]
xor ebx, ebx
mov qword [rsp + 0x38], rbx
mov r9d, 0x40
mov qword [rsp + 0x30], rbx
xor edx, edx
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [rbp - 0x19]
mov dword [rsp + 0x28], ebx
mov qword [rbp + 0x67], 0
movss xmm0, dword [rax + 0xf8]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x64]
addss xmm1, xmm7
movss dword [rax + 0xe0], xmm1
maxss xmm0, xmm1
movss dword [rax + 0xf8], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
movsd xmm0, qword [str.aFSEVXW_]
xor al, 0x3c
movsd qword [rbp - 0x19], xmm0
xor byte [rbp - 0x18], 0x35
xor byte [rbp - 0x17], 0x36
xor byte [rbp - 0x16], 0x37
xor byte [rbp - 0x15], 0x38
xor byte [rbp - 0x14], 0x39
xor byte [rbp - 0x13], 0x3a
xor byte [rbp - 0x12], 0x3b
mov byte [rbp - 0x11], al
lea rax, [rbp + 0x67]
mov qword [rsp + 0x20], rax
mov byte [rbp - 0x19], 0x55
call fcn.14004f130
mov rcx, qword [0x140587680]
lea r8, [0x1405bf470]
mov qword [rsp + 0x38], rbx
mov r9d, 0x40
mov qword [rsp + 0x30], rbx
xor edx, edx
mov dword [rsp + 0x28], 0x8000
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [rbp - 0x19]
mov qword [rbp + 0x67], rbx
movss xmm0, dword [rax + 0xf8]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x64]
addss xmm1, xmm7
movss dword [rax + 0xe0], xmm1
maxss xmm0, xmm1
movss dword [rax + 0xf8], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
movsd xmm0, qword [str.dTEDOVH__]
xor al, 0x3c
movsd qword [rbp - 0x19], xmm0
xor byte [rbp - 0x18], 0x35
xor byte [rbp - 0x17], 0x36
xor byte [rbp - 0x16], 0x37
xor byte [rbp - 0x15], 0x38
xor byte [rbp - 0x14], 0x39
xor byte [rbp - 0x13], 0x3a
xor byte [rbp - 0x12], 0x3b
mov byte [rbp - 0x11], al
lea rax, [rbp + 0x67]
mov qword [rsp + 0x20], rax
mov byte [rbp - 0x19], 0x50
call fcn.14004f130
mov rcx, qword [0x140587680]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x64]
movss xmm0, dword [rax + 0xf8]
addss xmm1, xmm7
movss dword [rax + 0xe0], xmm1
maxss xmm0, xmm1
cmp byte [0x1404f4a1f], bl
movdqa xmm9, xmmword [0x1404f5410]
movss dword [rax + 0xf8], xmm0
mov rax, qword [str.xURVJ__wZXQQI_rZ_]
mov edi, dword [reloc.WS2_32.dll_accept]
mov qword [rbp + 0x67], rax
je 0x1400cffc4
cmp edi, 2
jl 0x1400cff83
movdqa xmm2, xmmword [0x1404f52e0]
movdqa xmm3, xmmword [0x1404f5340]
movdqa xmm1, xmm2
movdqa xmm4, xmmword [0x1404f5820]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movdqa xmm1, xmm3
pmulld xmm0, xmmword [0x1404f53a0]
psubd xmm2, xmm0
punpckldq xmm1, xmm3
movd xmm0, dword [rbp + 0x67]
andps xmm2, xmm9
packuswb xmm2, xmm2
pmuldq xmm1, xmm4
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1404f5440]
xorps xmm2, xmm0
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
movd dword [rbp + 0x67], xmm2
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1404f53a0]
psubd xmm3, xmm0
movd xmm0, dword [rbp + 0x6b]
andps xmm3, xmm9
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmmword [0x1404f5440]
xorps xmm3, xmm0
movd dword [rbp + 0x6b], xmm3
jmp 0x1400cffc4
lea r9, [rbp + 0x67]
mov r8d, ebx
nop word [rax + rax]
mov eax, 0xa0a0a0a1
lea r9, [r9 + 1]
imul r8d
add edx, r8d
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x34
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x1400cff90
mov qword [rsp + 0x38], rbx
lea rax, [rbp + 0x6f]
mov qword [rsp + 0x30], rbx
lea r8, [0x1405bf330]
mov dword [rsp + 0x28], ebx
lea rcx, [rbp + 0x67]
mov r9d, 0x40
mov qword [rsp + 0x20], rax
xor edx, edx
mov qword [rbp + 0x6f], rbx
call fcn.14004f130
mov rcx, qword [0x140587680]
lea r8, [0x1405bf370]
mov qword [rsp + 0x38], rbx
mov r9d, 0x40
mov qword [rsp + 0x30], rbx
xor edx, edx
mov dword [rsp + 0x28], ebx
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
movzx ecx, word [0x1404f4388]
mov word [rbp - 0x11], cx
xor cl, 0x3c
xor byte [rbp - 0x10], 0x3d
movss xmm0, dword [rax + 0xf8]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x64]
mov byte [rbp - 0x11], cl
lea rcx, [rbp - 0x19]
mov qword [rbp + 0x67], rbx
addss xmm1, xmm7
movss dword [rax + 0xe0], xmm1
maxss xmm0, xmm1
movss dword [rax + 0xf8], xmm0
movzx eax, byte [0x1404f438a]
movsd xmm0, qword [str.pETWKeuy_]
xor al, 0x3e
movsd qword [rbp - 0x19], xmm0
xor byte [rbp - 0x18], 0x35
xor byte [rbp - 0x17], 0x36
xor byte [rbp - 0x16], 0x37
xor byte [rbp - 0x15], 0x38
xor byte [rbp - 0x14], 0x39
xor byte [rbp - 0x13], 0x3a
xor byte [rbp - 0x12], 0x3b
mov byte [rbp - 0xf], al
lea rax, [rbp + 0x67]
mov qword [rsp + 0x20], rax
mov byte [rbp - 0x19], 0x44
call fcn.14004f130
mov rcx, qword [0x140587680]
mov rax, qword [rcx + 0x3ed8]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
cmp byte [rax + 0x9b], bl
jne 0x1400d00fe
movss xmm1, dword [0x1404f4edc]
lea rcx, [rbp + 0x6f]
mov qword [rbp + 0x6f], rbx
call fcn.140025a10
mov rcx, qword [0x140587680]
mov rax, qword [rcx + 0x3ed8]
lea rdx, [rbp + 0x67]
mov byte [rax + 0x98], 1
mov rax, qword [rcx + 0x3ed8]
lea rcx, [rbp - 0x19]
mov dword [rbp + 0x67], 0x438d0000
mov dword [rbp + 0x6b], 0x41f00000
movss xmm0, dword [rax + 0xf8]
movss xmm1, dword [rax + 0x18]
subss xmm1, dword [rax + 0x64]
addss xmm1, xmm7
maxss xmm0, xmm1
movss dword [rax + 0xe0], xmm1
movss dword [rax + 0xf8], xmm0
movzx eax, byte [reloc.WLDAP32.dll_Ordinal_60]
movsd xmm0, qword [str.fPQKM_I_]
xor al, 0x3c
movsd qword [rbp - 0x19], xmm0
xor byte [rbp - 0x18], 0x35
xor byte [rbp - 0x17], 0x36
xor byte [rbp - 0x16], 0x37
xor byte [rbp - 0x15], 0x38
xor byte [rbp - 0x14], 0x39
xor byte [rbp - 0x13], 0x3a
xor byte [rbp - 0x12], 0x3b
mov byte [rbp - 0x11], al
mov byte [rbp - 0x19], 0x52
call fcn.1400463b0
test al, al
je 0x1400d03ae
cmp byte [0x1405bf3b0], bl
je 0x1400d01c5
cmp byte [0x1405bf470], bl
je 0x1400d01c5
cmp byte [0x1405bf330], bl
je 0x1400d01c5
cmp byte [0x1405bf370], bl
je 0x1400d01c5
mov byte [0x1405bf4b1], 1
jmp 0x1400d03ae
mov eax, dword [0x1404f45d8]
mov dword [rbp + 0x27], eax
movzx eax, word [0x1404f45dc]
mov word [rbp + 0x2b], ax
movzx eax, byte [0x1404f45de]
mov byte [0x1405bf4c5], 1
mov byte [rbp + 0x2d], al
movups xmm0, xmmword [str.AFSEVXW]
movups xmm1, xmmword [0x1404f45b8]
movups xmmword [rbp - 9], xmm0
movups xmm0, xmmword [0x1404f45c8]
movups xmmword [rbp + 7], xmm1
movups xmmword [rbp + 0x17], xmm0
cmp edi, 2
jl 0x1400d0330
movdqa xmm0, xmmword [0x1404f5440]
lea rcx, [rbp - 5]
movdqa xmm4, xmmword [0x1404f52e0]
movdqa xmm3, xmmword [0x1404f5820]
movdqa xmm5, xmmword [0x1404f53a0]
movdqa xmmword [rbp - 0x19], xmm0
mov edx, dword [rbp - 0x19]
movd xmm2, ebx
lea eax, [rbx + 4]
pshufd xmm2, xmm2, 0
lea rcx, [rcx + 8]
paddd xmm2, xmm4
add ebx, 8
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 0xc]
xorps xmm2, xmm0
movd dword [rcx - 0xc], xmm2
movd xmm2, eax
mov eax, ebx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm4
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, edx
andps xmm2, xmm9
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [rcx - 8]
xorps xmm2, xmm0
movd dword [rcx - 8], xmm2
cmp ebx, 0x30
jl 0x1400d0240
cmp eax, 0x37
jge 0x1400d036f
movsxd rax, ebx
lea r8, [rbp - 9]
add r8, rax
nop word [rax + rax]
mov eax, 0xa0a0a0a1
lea r8, [r8 + 1]
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x33
movzx eax, bl
inc ebx
sub al, cl
add al, 0x34
xor byte [r8 - 1], al
cmp ebx, 0x37
jl 0x1400d0340
lea rax, [rbp - 9]
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x1400d0380
lea rdx, [rbp - 9]
lea rcx, [0x140586688]
call fcn.140064e60
mov dword [0x1405bf4b4], 3
mov dword [0x1405bf4c0], 0x1b58
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
movaps xmm7, xmmword [r11 - 0x10]
movaps xmm9, xmmword [r11 - 0x20]
mov rsp, r11
pop rbp
jmp fcn.14001f1b0