Function at 0x1400025c0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov dword [rax + 8], ecx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x140
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x1400920c0]
xor rax, rsp
mov qword [rsp + 0x120], rax
mov r13d, ecx
lea rcx, str.ntdll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
movups xmm0, xmmword [str.a_YwSRLIOlOWI____E]
movups xmmword [rsp + 0x50], xmm0
movzx edx, word [0x140085db8]
mov word [rsp + 0x60], dx
movzx edx, byte [0x140085dba]
mov byte [rsp + 0x62], dl
xor edi, edi
mov r8d, edi
mov ebx, dword [reloc.WS2_32.dll_accept]
cmp ebx, 2
jl 0x140002775
movdqa xmm5, xmmword [0x140085e80]
movdqa xmm4, xmmword [0x140085ec0]
movdqa xmm6, xmmword [0x140085ea0]
movdqa xmm0, xmmword [0x140085ed0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x50]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085eb0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085eb0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140002670
cmp r8d, 0x13
jge 0x1400027af
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x13
jl 0x140002780
lea rdx, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea r9, [rsp + 0xe8]
xor r8d, r8d
mov dl, 1
lea ecx, [r8 + 0x14]
call rax
movups xmm0, xmmword [str._dCRJ_iBOI_R_t___6_3__K]
movups xmmword [rsp + 0x88], xmm0
movsd xmm0, qword [0x140085cd0]
movsd qword [rsp + 0x98], xmm0
movzx eax, byte [0x140085cd8]
mov byte [rsp + 0xa0], al
mov r8d, edi
cmp ebx, 2
jl 0x140002945
movdqa xmm5, xmmword [0x140085e80]
movdqa xmm4, xmmword [0x140085ec0]
movdqa xmm6, xmmword [0x140085ea0]
movdqa xmm0, xmmword [0x140085ed0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x88]
mov edx, dword [rsp + 0x40]
nop dword [rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085eb0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085eb0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x18
jl 0x140002840
cmp r8d, 0x19
jge 0x14000298f
movsxd rax, r8d
lea r9, [rsp + 0x88]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x19
jl 0x140002960
lea rdx, [rsp + 0x88]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r14, rax
mov qword [rsp + 0x70], rax
movups xmm0, xmmword [str._qCGTPYZHXq___7D]
movups xmmword [rsp + 0x50], xmm0
movzx ecx, word [0x140085bf0]
mov word [rsp + 0x60], cx
cmp byte [0x140085bf1], dil
je 0x140002b4f
mov r8d, edi
cmp ebx, 2
jl 0x140002b15
movdqa xmm5, xmmword [0x140085e80]
movdqa xmm4, xmmword [0x140085ec0]
movdqa xmm6, xmmword [0x140085ea0]
movdqa xmm0, xmmword [0x140085ed0]
movdqa xmmword [rsp + 0x40], xmm0
lea rcx, [rsp + 0x50]
mov edx, dword [rsp + 0x40]
nop dword [rax + rax]
movd xmm2, r8d
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085eb0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx]
xorps xmm2, xmm0
movd dword [rcx], xmm2
lea eax, [r8 + 4]
movd xmm3, eax
pshufd xmm3, xmm3, 0
paddd xmm3, xmm5
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085eb0]
packuswb xmm2, xmm2
movd xmm0, edx
paddb xmm2, xmm0
movd xmm0, dword [rcx + 4]
xorps xmm2, xmm0
movd dword [rcx + 4], xmm2
add r8d, 8
lea rcx, [rcx + 8]
cmp r8d, 0x10
jl 0x140002a10
cmp r8d, 0x12
jge 0x140002b4f
movsxd rax, r8d
lea r9, [rsp + 0x50]
add r9, rax
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0x12
jl 0x140002b20
lea rdx, [rsp + 0x50]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, rax
mov qword [rsp + 0x78], rax
movsd xmm0, qword [str._zFRViHT_XML_]
movsd qword [rsp + 0x40], xmm0
mov ecx, dword [0x140085b18]
mov dword [rsp + 0x48], ecx
movzx ecx, word [0x140085b1c]
mov word [rsp + 0x4c], cx
cmp byte [0x140085b1d], dil
je 0x140002cdf
mov r8d, edi
cmp ebx, 2
jl 0x140002ca4
movdqa xmm4, xmmword [0x140085ec0]
movdqa xmm2, xmmword [0x140085e80]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140085ea0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085eb0]
packuswb xmm2, xmm2
mov eax, dword [0x140085ed0]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [str._zFRViHT_XML_]
xorps xmm2, xmm0
movd dword [rsp + 0x40], xmm2
movdqa xmm3, xmmword [0x140085e90]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 1
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140085ea0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140085eb0]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rsp + 0x44]
xorps xmm2, xmm1
movd dword [rsp + 0x44], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rsp + 0x40]
add r9, rax
nop
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x140002cb0
lea rdx, [rsp + 0x40]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r15, rax
mov qword [rsp + 0x80], rax
mov dword [rsp + 0xa8], Ordinal_50
mov qword [rsp + 0xb8], rdi
mov dword [rsp + 0xc0], edi
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xc8], rdi
movups xmm0, xmmword [rsp + 0xa8]
movups xmmword [rsp + 0xf0], xmm0
movups xmm1, xmmword [rsp + 0xb8]
movups xmmword [rsp + 0x100], xmm1
movups xmm0, xmmword [rsp + 0xc8]
movups xmmword [rsp + 0x110], xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0xd8], xmm1
mov ebx, reloc.WLDAP32.dll_Ordinal_32
mov ecx, ebx
call fcn.140072a84
mov rsi, rax
mov qword [0x1400931f8], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movsd xmm6, qword [0x140085e68]
mov rcx, rsi
call fcn.140072800
test rsi, rsi
je 0x140002d9d
mov qword [0x1400931f8], 0x8123
mov eax, ebx
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mulsd xmm0, xmm6
cvttsd2si rbx, xmm0
mov ebx, ebx
mov dword [rsp + 0x68], ebx
mov ecx, ebx
call fcn.140072a84
mov qword [0x1400931f8], rax
jmp 0x140002dee
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov r8d, ebx
mov rdx, qword [0x1400931f8]
lea ecx, [r9 + 0x10]
call r14
cmp eax, 0xc0000004
jne 0x140002e20
mov rsi, qword [0x1400931f8]
jmp 0x140002d85
test eax, eax
jns 0x140002e55
mov rbx, qword [0x1400931f8]
mov rcx, rbx
call fcn.140072800
test rbx, rbx
je 0x140002e43
mov qword [0x1400931f8], 0x8123
mov rcx, qword [0x1400931e0]
test rcx, rcx
je 0x140002e55
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, edi
mov rax, qword [0x1400931f8]
cmp dword [rax], 0
jbe 0x140002fab
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea rdx, [0x140093540]
call qword [sym.imp.KERNEL32.dll_GetProcessHandleCount]
cmp dword [0x140093540], 0x378
jbe 0x140002eba
mov rbx, qword [0x1400931f8]
mov rcx, rbx
call fcn.140072800
test rbx, rbx
je 0x140002ea8
mov qword [0x1400931f8], 0x8123
mov rcx, qword [0x1400931e0]
test rcx, rcx
je 0x140002ec1
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [0x1400931e0]
mov eax, esi
lea rbx, [rax + rax*2]
mov rax, qword [0x1400931f8]
cmp word [rax + rbx*8 + 0xe], 0
je 0x140002f8a
cmp byte [rax + rbx*8 + 0xc], 7
jne 0x140002f8a
mov eax, dword [rax + rbx*8 + 8]
mov qword [rsp + 0xd8], rax
test rcx, rcx
je 0x140002efc
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea r9, [rsp + 0xd8]
lea r8, [rsp + 0xf0]
mov edx, 0x40
lea rcx, [0x1400931e0]
call r15
mov rcx, qword [0x1400931e0]
lea rdx, [rcx - 1]
cmp rdx, 0xfffffffffffffffd
ja 0x140002f8a
test eax, eax
js 0x140002f8a
mov rax, qword [0x1400931f8]
movzx edx, word [rax + rbx*8 + 0xe]
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], 0x1fffff
lea r9, [0x1400931e8]
mov r8, 0xffffffffffffffff
call r12
mov rcx, qword [0x1400931e8]
lea rdx, [rcx - 1]
cmp rdx, 0xfffffffffffffffd
ja 0x140002f8a
test eax, eax
js 0x140002f8a
call qword [sym.imp.KERNEL32.dll_GetProcessId]
cmp eax, r13d
je 0x140002f9d
mov rcx, qword [0x1400931e8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
inc esi
mov rax, qword [0x1400931f8]
cmp esi, dword [rax]
jb 0x140002e67
jmp 0x140002fab
mov rax, qword [0x1400931e8]
mov qword [0x1400931f0], rax
mov rbx, qword [0x1400931f8]
mov rcx, rbx
call fcn.140072800
test rbx, rbx
je 0x140002fca
mov qword [0x1400931f8], 0x8123
mov rcx, qword [0x1400931e0]
test rcx, rcx
je 0x140002fdc
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [0x1400931f0]
mov rcx, qword [rsp + 0x120]
xor rcx, rsp
call fcn.1400727e0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret