Function at 0x14000d480
Capabilities:
Access pe header
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xe0
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
mov rax, qword [0x1400c30c0]
xor rax, rsp
mov qword [rbp - 0x11], rax
mov rbx, rdx
mov qword [rbp - 0x71], rdx
mov r15, rcx
mov qword [rbp - 0x59], rdx
xorps xmm0, xmm0
movups xmmword [rbp - 0x41], xmm0
lea rcx, [rbp + 0x5f]
movabs rax, 0xff00ff00ff00ff00
mov qword [rbp - 0x39], rax
mov qword [rbp - 0x31], rcx
mov r13, qword [rcx]
xor r13, rax
mov qword [rbp - 0x69], r13
mov qword [rbp - 0x41], r13
xor esi, esi
mov qword [rcx], rsi
mov rcx, qword [rdx + 8]
sub rcx, qword [rdx]
call qword [0x14009ca98]
mov r12, rax
mov qword [rbp - 0x79], rax
test rax, rax
je 0x14000d521
mov rdx, qword [rbx]
mov r8, qword [rbx + 8]
sub r8, rdx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rcx, r12
call qword [sym.imp.ntdll.dll_RtlImageNtHeader]
mov rdi, rax
mov dword [rbp - 0x49], esi
xor edx, edx
mov rcx, r15
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rbp - 0x49]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r14d, eax
mov dword [rsp + 0x30], eax
mov ecx, reloc.WS2_32.dll_sendto
call qword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [rbp - 0x49]
test esi, esi
je 0x14000d530
test r14d, r14d
je 0x14000d88e
mov r13d, 4
mov rcx, qword gs:[0x58]
add r13, qword [rcx]
mov eax, dword [r13]
cmp dword [0x1400c66ec], eax
jle 0x14000d5b5
lea rcx, [0x1400c66ec]
call fcn.140098490
cmp dword [0x1400c66ec], 0xffffffff
jne 0x14000d5b5
lea rcx, [0x14009b6a0]
call fcn.140098aec
lea rcx, [0x1400c66ec]
call fcn.140098430
mov r8d, dword [rdi + 0x50]
mov r14, rsi
mov rdx, rsi
call fcn.14000c840
mov r15, rax
mov r8, rdi
mov rdx, r12
mov rcx, rax
call fcn.14000cf50
test eax, eax
jne 0x14000d61d
mov ecx, dword [r13]
cmp dword [0x1400c66ec], ecx
jle 0x14000d612
lea rcx, [0x1400c66ec]
call fcn.140098490
cmp dword [0x1400c66ec], 0xffffffff
jne 0x14000d612
lea rcx, [0x14009b6a0]
call fcn.140098aec
lea rcx, [0x1400c66ec]
call fcn.140098430
mov r8, r15
mov rdx, r14
call fcn.14000c8f0
mov r9, rdi
mov r8, r12
mov edx, dword [rsp + 0x30]
mov rcx, r14
call fcn.14000d120
test eax, eax
jne 0x14000d677
mov eax, dword [r13]
cmp dword [0x1400c66ec], eax
jle 0x14000d66c
lea rcx, [0x1400c66ec]
call fcn.140098490
cmp dword [0x1400c66ec], 0xffffffff
jne 0x14000d66c
lea rcx, [0x14009b6a0]
call fcn.140098aec
lea rcx, [0x1400c66ec]
call fcn.140098430
mov r8, r15
mov rdx, r14
call fcn.14000c8f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
lea rcx, [rbp + 0x5f]
movabs rsi, 0xff00ff00ff00ff00
mov qword [rbp - 0x21], rsi
mov qword [rbp - 0x19], rcx
mov rax, qword [rcx]
xor rax, rsi
mov qword [rsp + 0x38], rax
mov qword [rbp - 0x29], rax
xor edx, edx
mov qword [rcx], rdx
movzx ebx, word [rdi + 0x14]
add rbx, 0x2c
movzx esi, dx
cmp dx, word [rdi + 6]
jae 0x14000d72b
add rbx, rdi
nop dword [rax]
mov eax, dword [r13]
cmp dword [0x1400c66ec], eax
jle 0x14000d6f9
lea rcx, [0x1400c66ec]
call fcn.140098490
cmp dword [0x1400c66ec], 0xffffffff
jne 0x14000d6f9
lea rcx, [0x14009b6a0]
call fcn.140098aec
lea rcx, [0x1400c66ec]
call fcn.140098430
mov eax, dword [rbx - 4]
mov r9d, dword [rbx]
add r9, r12
mov r8d, dword [rbx - 8]
add r8, r15
mov dword [rsp + 0x20], eax
mov rdx, r14
call fcn.14000c780
inc si
add rbx, 0x28
cmp si, word [rdi + 6]
jb 0x14000d6c0
mov rax, qword [rsp + 0x38]
lea rcx, [rbp + 0x5f]
movabs rbx, 0xff00ff00ff00ff00
xor rax, rbx
mov qword [rcx], rax
mov r9, rdi
mov r8, r15
mov edx, dword [rsp + 0x30]
mov rcx, r14
call fcn.14000cc80
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
lea rdx, [rbp + 0x5f]
mov qword [rbp - 0x21], rbx
mov qword [rbp - 0x19], rdx
mov rax, qword [rdx]
xor rax, rbx
mov qword [rsp + 0x38], rax
mov qword [rbp - 0x29], rax
xor ecx, ecx
mov qword [rdx], rcx
movzx ebx, word [rdi + 0x14]
add rbx, 0x28
movzx esi, cx
cmp cx, word [rdi + 6]
jae 0x14000d843
add rbx, rdi
mov ecx, 4
mov eax, dword [rbx]
test eax, eax
je 0x14000d825
test dword [rbx + 0x14], 0x2000000
je 0x14000d825
mov edx, eax
mov r9d, ecx
xor ecx, ecx
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r12, rax
mov ecx, dword [r13]
cmp dword [0x1400c66ec], ecx
jle 0x14000d7f7
lea rcx, [0x1400c66ec]
call fcn.140098490
cmp dword [0x1400c66ec], 0xffffffff
jne 0x14000d7f7
lea rcx, [0x14009b6a0]
call fcn.140098aec
lea rcx, [0x1400c66ec]
call fcn.140098430
mov eax, dword [rbx]
mov r8d, dword [rbx - 4]
add r8, r15
mov dword [rsp + 0x20], eax
mov r9, r12
mov rdx, r14
call fcn.14000c780
xor edx, edx
mov r8d, 0x8000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov ecx, 4
inc si
add rbx, 0x28
cmp si, word [rdi + 6]
jb 0x14000d791
mov r12, qword [rbp - 0x79]
mov rax, qword [rsp + 0x38]
lea rdx, [rbp + 0x5f]
movabs rsi, 0xff00ff00ff00ff00
xor rax, rsi
mov qword [rdx], rax
xor edx, edx
mov r8d, 0x8000
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, r12
call qword [0x14009ca90]
lea rdx, [0x14001fa30]
mov rcx, qword [0x14009c590]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rbx, qword [rbp - 0x71]
mov r13, qword [rbp - 0x69]
jmp 0x14000da4f
movups xmm0, xmmword [str.GJVYON]
movups xmmword [rbp - 0x41], xmm0
mov eax, dword [0x1400b5048]
mov dword [rbp - 0x31], eax
cmp byte [0x1400b504b], 0
je 0x14000da3c
xor edx, edx
mov ecx, edx
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x14000da04
movdqa xmm5, xmmword [0x1400b5490]
movdqa xmm4, xmmword [0x1400b54e0]
mov eax, 4
movd xmm6, eax
movdqa xmm7, xmmword [0x1400b54b0]
mov eax, Ordinal_33
movd xmm8, eax
movdqa xmm0, xmmword [str.7777777777777777O]
movdqa xmmword [rbp - 0x59], xmm0
lea rdx, [rbp - 0x3d]
mov r8d, dword [rbp - 0x59]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b54c0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx - 4]
pxor xmm2, xmm0
movd dword [rdx - 4], xmm2
lea eax, [rcx + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm8
paddd xmm0, xmm1
pmulld xmm0, xmm7
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
pand xmm2, xmmword [0x1400b54c0]
packuswb xmm2, xmm2
movd xmm0, r8d
paddb xmm2, xmm0
movd xmm0, dword [rdx]
pxor xmm2, xmm0
movd dword [rdx], xmm2
add ecx, 8
lea rdx, [rdx + 8]
cmp ecx, 0x10
jl 0x14000d900
cmp ecx, 0x14
jge 0x14000da3c
movsxd rax, ecx
lea r8, [rbp - 0x41]
add r8, rax
nop
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x34
movzx eax, cl
sub al, dl
add al, 0x37
xor byte [r8], al
inc ecx
lea r8, [r8 + 1]
cmp ecx, 0x14
jl 0x14000da10
lea rcx, [rbp - 0x41]
call fcn.140009550
movabs rsi, 0xff00ff00ff00ff00
xor r13, rsi
lea rax, [rbp + 0x5f]
mov qword [rax], r13
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000da9b
mov rdx, qword [rbx + 0x10]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14000da89
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000dad1
mov rcx, r8
call fcn.140098300
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 8], rax
mov qword [rbx + 0x10], rax
mov rcx, qword [rbp - 0x11]
xor rcx, rsp
call fcn.1400982e0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x50]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3