Function at 0x14006b820
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x14019b900]
xor rax, rsp
mov qword [rbp + 7], rax
mov rsi, rdx
mov ebx, ecx
lea rcx, [0x14007ec10]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
movsd xmm0, qword [str._HY]
movsd qword [rbp - 0x79], xmm0
movzx eax, word [0x1401654f8]
mov ecx, 0x66
mov word [rbp - 0x79], cx
xor word [rbp - 0x77], 0x3a
xor word [rbp - 0x75], 0x3b
xor word [rbp - 0x73], 0x3c
xor ax, 0x3d
mov word [rbp - 0x71], ax
lea r8, [rbp - 0x79]
mov rdx, rsi
mov ecx, ebx
call fcn.14008be60
test eax, eax
setg r15b
mov rax, qword [str.TW_PT_lYZ3A]
mov qword [rbp - 0x79], rax
xor r12d, r12d
mov r14d, dword [reloc.WS2_32.dll_accept]
cmp word [reloc.WLDAP32.dll_Ordinal_60], r12w
je 0x14006b981
cmp r14d, 2
jl 0x14006b94a
movdqa xmm3, xmmword [0x140126540]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1401693c0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1401693c0]
shufps xmm2, xmm0, 0xdd
psrad xmm2, 4
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x140169270]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [str.99999999]
movq xmm0, qword [rbp - 0x79]
xorps xmm2, xmm0
movq qword [rbp - 0x79], xmm2
jmp 0x14006b981
lea r8, [rbp - 0x79]
mov edi, r12d
mov eax, 0x4d4873ed
imul edi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x35
movzx eax, di
sub ax, cx
add ax, 0x39
xor word [r8], ax
inc edi
lea r8, [r8 + 2]
cmp edi, 4
jl 0x14006b951
lea r8, [rbp - 0x79]
mov rdx, rsi
mov ecx, ebx
call fcn.14008be60
movups xmm0, xmmword [0x140165508]
movups xmmword [rbp - 0x79], xmm0
movzx eax, word [0x140165518]
mov ecx, 0x69
mov word [rbp - 0x79], cx
xor word [rbp - 0x77], 0x3a
xor word [rbp - 0x75], 0x3b
xor word [rbp - 0x73], 0x3c
xor word [rbp - 0x71], 0x3d
xor word [rbp - 0x6f], 0x3e
xor word [rbp - 0x6d], 0x3f
xor word [rbp - 0x6b], 0x40
xor ax, 0x41
mov word [rbp - 0x69], ax
lea r8, [rbp - 0x79]
mov rdx, rsi
mov ecx, ebx
call fcn.14008be60
movups xmm0, xmmword [str.i_HORS__7__]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [0x140165530]
movups xmmword [rbp - 0x51], xmm1
mov eax, dword [0x140165540]
mov dword [rbp - 0x41], eax
mov ecx, r12d
cmp r14d, 2
jl 0x14006bb1d
movdqa xmm5, xmmword [0x140126540]
movdqa xmm4, xmmword [0x1401693c0]
movdqa xmm6, xmmword [0x140169270]
movdqa xmm7, xmmword [str.99999999]
lea rdx, [rbp - 0x61]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rdx]
xorps xmm3, xmm0
movq qword [rdx], xmm3
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rdx + 8]
xorps xmm3, xmm0
movq qword [rdx + 8], xmm3
add ecx, 8
lea rdx, [rdx + 0x10]
cmp ecx, 0x10
jl 0x14006ba33
cmp ecx, 0x12
jge 0x14006bb60
movsxd rax, ecx
lea r8, [rbp - 0x61]
lea r8, [r8 + rax*2]
nop dword [rax + rax]
mov eax, 0x4d4873ed
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul eax, eax, 0x35
movzx edi, cx
sub di, ax
add di, 0x39
xor word [r8], di
inc ecx
lea r8, [r8 + 2]
cmp ecx, 0x12
jl 0x14006bb30
lea r8, [rbp - 0x61]
mov rdx, rsi
mov ecx, ebx
call fcn.14008be60
test eax, eax
setg dil
call fcn.1400a7390
mov qword [0x14019c6e0], rax
mov eax, dword [0x140165544]
mov dword [rbp - 0x79], eax
movzx ecx, word [0x140165548]
mov word [rbp - 0x75], cx
movzx eax, byte [0x14016554a]
mov byte [rbp - 0x79], gethostname
xor byte [rbp - 0x78], 0x3a
xor byte [rbp - 0x77], 0x3b
xor byte [rbp - 0x76], 0x3c
xor cl, 0x3d
mov byte [rbp - 0x75], cl
xor byte [rbp - 0x74], 0x3e
xor al, 0x3f
mov byte [rbp - 0x73], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], r12
lea rax, [rbp - 0x79]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x14006bbd4
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x21]
call fcn.1400562e0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], rax
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 0x61]
call fcn.140062d90
mov r8, rax
lea rdx, [rbp - 0x39]
lea rcx, [0x14019cb00]
call fcn.1400b8230
nop
mov dword [rbp - 1], r12d
lea rax, [rbp - 1]
mov qword [rsp + 0x48], rax
lea rax, [0x140082990]
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x38], dil
mov dword [rsp + 0x30], r12d
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], r15b
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp - 0x39]
mov rcx, qword [0x14019c6e0]
call fcn.1400a9770
test rax, rax
jne 0x14006bc6d
mov rcx, qword [0x14019c6e0]
call fcn.1400a8580
mov rcx, qword [0x14019c6e0]
call fcn.1400a8580
mov rax, qword [rbp - 0x39]
cmp rax, qword [rbp - 0x31]
je 0x14006bc87
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x11], r12
lea rax, [rbp - 0x21]
cmp qword [rbp - 9], 0xf
cmova rax, qword [rbp - 0x21]
mov byte [rax], 0
mov rsi, qword [rbp - 0x31]
movabs r14, 0x7fffffffffffffff
mov rcx, qword [rbp - 0x39]
sub rsi, rcx
mov rbx, r12
mov r8, r12
mov rax, r12
je 0x14006bd24
cmp rsi, r14
ja 0x14006bf86
cmp rsi, 0x1000
jb 0x14006bcf7
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x14006bf80
call fcn.14011328c
test rax, rax
je 0x14006bef5
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14006bd02
mov rcx, rsi
call fcn.14011328c
mov rbx, rax
mov rdi, qword [rbp - 0x31]
mov rdx, qword [rbp - 0x39]
sub rdi, rdx
mov r8, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea r8, [rbx + rdi]
lea rax, [rbx + rsi]
mov rcx, qword [rbp - 0x39]
mov qword [rbp - 0x39], rbx
mov qword [rbp - 0x31], r8
mov rdx, qword [rbp - 0x29]
mov qword [rbp - 0x29], rax
test rcx, rcx
je 0x14006bd6e
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14006bd61
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006bef5
mov rcx, rdi
call fcn.140112bec
mov r8, qword [rbp - 0x31]
mov rbx, qword [rbp - 0x39]
sub r8, rbx
xor edx, edx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp - 0x21]
cmp qword [rbp - 9], 0xf
cmova rcx, qword [rbp - 0x21]
mov r8, qword [rbp - 0x11]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbp - 0x31]
mov rdi, qword [rbp - 0x39]
sub rcx, rdi
xor eax, eax
rep stosb byte [rdi], al
lea rdi, [rbp - 0x21]
cmp qword [rbp - 9], 0xf
cmova rdi, qword [rbp - 0x21]
mov rcx, qword [rbp - 0x11]
rep stosb byte [rdi], al
mov r8, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x39]
sub r8, rcx
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rsi, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x39]
cmp rsi, rcx
je 0x14006bddd
mov rsi, rcx
mov qword [rbp - 0x31], rcx
sub rsi, rcx
mov rdi, r12
mov rbx, r12
mov rax, r12
je 0x14006be52
cmp rsi, r14
ja 0x14006bf86
cmp rsi, 0x1000
jb 0x14006be26
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x14006bf80
call fcn.14011328c
test rax, rax
je 0x14006bef5
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14006be31
mov rcx, rsi
call fcn.14011328c
mov rdi, rax
mov rbx, qword [rbp - 0x31]
mov rdx, qword [rbp - 0x39]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
add rbx, rdi
lea rax, [rdi + rsi]
mov rcx, qword [rbp - 0x39]
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], rbx
mov rdx, qword [rbp - 0x29]
mov qword [rbp - 0x29], rax
test rcx, rcx
je 0x14006be98
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14006be8b
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006bef5
mov rcx, rdi
call fcn.140112bec
mov rbx, qword [rbp - 0x31]
mov rdi, qword [rbp - 0x39]
cmp rbx, rdi
je 0x14006bec1
nop dword [rax]
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov byte [rdi], al
inc rdi
cmp rdi, rbx
jne 0x14006bea0
mov rbx, qword [rbp - 0x31]
mov rdi, qword [rbp - 0x39]
cmp rbx, rdi
je 0x14006bec1
mov qword [rbp - 0x31], rdi
test rdi, rdi
je 0x14006bf10
mov rdx, qword [rbp - 0x29]
sub rdx, rdi
mov rax, rdi
cmp rdx, 0x1000
jb 0x14006befc
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006befc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rdi
call fcn.140112bec
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r12
mov rdx, qword [rbp - 9]
cmp rdx, 0xf
jbe 0x14006bf4e
inc rdx
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006bf49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006bf49
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140112bec
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.140113060
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140080560
nop
call fcn.140080af0
int3