Function at 0x1400a9430
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x78]
sub rsp, 0x150
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x1401ae6f8]
xor rax, rsp
mov qword [rbp], rax
movzx r12d, r9b
mov byte [rsp + 0x30], r9b
movzx r15d, r8b
mov byte [rsp + 0x31], r8b
movzx r13d, dl
mov rbx, rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x40], rcx
xor r14d, r14d
mov esi, r14d
mov dword [rsp + 0x48], r14d
call fcn.1400a6600
mov rdi, rax
test rax, rax
jne 0x1400a94be
mov qword [rbx], r14
mov qword [rbx + 8], r14
mov qword [rbx + 0x10], r14
jmp 0x1400a9a8f
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], r14
mov ecx, 0x5dc
call fcn.140127a24
mov qword [rbp - 0x80], rax
lea rbx, [rax + 0x5dc]
mov qword [rbp - 0x70], rbx
xor edx, edx
mov r8d, 0x5dc
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x78], rbx
mov rax, qword [0x1401cb0c0]
mov qword [rsp + 0x20], r14
mov r9d, 0x5dc
mov r8, qword [rbp - 0x80]
mov rdx, rdi
mov rcx, qword [0x1401cb138]
test rax, rax
je 0x1400a9527
call rax
jmp 0x1400a952d
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [rsp + 0x58], r14d
mov rdx, qword [0x1401cb140]
mov rcx, qword [0x1401cb138]
mov rax, qword [0x1401cb0c0]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rsp + 0x58]
test rax, rax
je 0x1400a9560
call rax
jmp 0x1400a9566
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx ecx, word [0x1401cb128]
mov eax, dword [rsp + 0x58]
imul rax, rcx
xor edx, edx
div rcx
mov rcx, rax
mov qword [rsp + 0x40], rax
cmp byte [0x1401cb150], 0
je 0x1400a9ae1
mov r8, qword [rbp - 0x80]
mov edx, dword [r8]
mov dword [rsp + 0x58], edx
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
mov qword [rbp - 0x58], r14
mov r14d, reloc.WS2_32.dll_recv
mov rax, qword [rbp - 0x78]
sub rax, r8
add rax, 0xfffffffffffffffc
cmp r14, rax
jae 0x1400a9a21
xorps xmm9, xmm9
nop dword [rax]
nop dword [rax + rax]
cmp byte [0x1401cb150], 0
je 0x1400a9ad3
mov ebx, dword [r8 + r14]
cmp ebx, edx
je 0x1400a9a21
test ebx, ebx
je 0x1400a9a09
cmp ebx, ecx
je 0x1400a9a09
mov ecx, ebx
call fcn.1400a9230
test al, al
je 0x1400a99fc
lea rcx, [rbp - 0x50]
call fcn.1400aa250
nop
mov dword [rbp - 0x50], ebx
test r13b, r13b
jne 0x1400a9628
test r15b, r15b
jne 0x1400a9628
test r12b, r12b
je 0x1400a9772
movzx edi, word [0x1401cb128]
imul rdi, rbx
add rdi, qword [0x1401cb120]
xor eax, eax
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov qword [rsp + 0x70], rax
mov ecx, 0x5dc
call fcn.140127a24
mov qword [rsp + 0x60], rax
lea rbx, [rax + 0x5dc]
mov qword [rsp + 0x70], rbx
xor edx, edx
mov r8d, 0x5dc
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x68], rbx
mov rax, qword [0x1401cb0c0]
mov qword [rsp + 0x20], 0
mov r9d, 0x5dc
mov r8, qword [rsp + 0x60]
mov rdx, rdi
mov rcx, qword [0x1401cb138]
test rax, rax
je 0x1400a96a8
call rax
jmp 0x1400a96ae
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x60]
test r13b, r13b
je 0x1400a96d7
cmp byte [0x1401cb150], 0
je 0x1400a9aef
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rbp - 0x48], xmm0
movsd xmm0, qword [rcx + 0x20]
movsd qword [rbp - 0x38], xmm0
test r15b, r15b
je 0x1400a96ef
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x60]
call fcn.1400a8890
mov rcx, qword [rsp + 0x60]
test r12b, r12b
je 0x1400a9707
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x60]
call fcn.1400a8e30
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400a973e
mov rdx, qword [rsp + 0x70]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400a9739
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400a9a80
call fcn.140127cb0
test r13b, r13b
je 0x1400a9772
movsd xmm0, qword [rbp - 0x48]
ucomisd xmm0, xmm9
jp 0x1400a9772
jne 0x1400a9772
movsd xmm0, qword [rbp - 0x40]
ucomisd xmm0, xmm9
jp 0x1400a9772
jne 0x1400a9772
movsd xmm0, qword [rbp - 0x38]
ucomisd xmm0, xmm9
jp 0x1400a9772
jne 0x1400a9772
xor dil, dil
jmp 0x1400a9775
mov dil, 1
mov r12d, dword [rbp - 0x30]
test r15b, r15b
je 0x1400a9788
cmp r12d, 0xffffffff
setne r15b
jmp 0x1400a978b
mov r15b, 1
cmp byte [rsp + 0x30], 0
je 0x1400a9975
mov rax, qword [str.cYSWULRWO_9sZHMC_]
mov qword [rsp + 0x38], rax
cmp byte [0x14019021f], 0
je 0x1400a9902
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1400a98c0
movdqa xmm4, xmmword [0x140190970]
mov eax, 4
movd xmm6, eax
mov eax, Ordinal_33
movd xmm5, eax
movdqa xmm2, xmmword [0x1401906d0]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140190760]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401908d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140190920]
movd xmm0, dword [rsp + 0x38]
xorps xmm2, xmm0
movd dword [rsp + 0x38], xmm2
movdqa xmm3, xmmword [0x1401906e0]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140190760]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401908d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140190920]
movd xmm0, dword [rsp + 0x3c]
xorps xmm2, xmm0
movd dword [rsp + 0x3c], xmm2
jmp 0x1400a9902
lea r9, [rsp + 0x38]
xor r8d, r8d
nop dword [rax + rax]
mov eax, 0x4bda12f7
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, 1
sub al, dl
movsx eax, al
imul ecx, eax, 0x36
add cl, r8b
xor byte [r9], cl
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400a98d0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x38]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400a9922
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x60]
call fcn.140016190
or esi, 2
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rdx, qword [rsp + 0x60]
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x10]
cmp r8, qword [rsp + 0x70]
jne 0x1400a9975
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400a9975
xor bl, bl
jmp 0x1400a9977
mov bl, 1
test sil, 2
je 0x1400a998a
and esi, 0xfffffffd
lea rcx, [rsp + 0x60]
call fcn.14000d000
test dil, dil
je 0x1400a99e7
test r15b, r15b
je 0x1400a99e7
test bl, bl
je 0x1400a99e7
mov rdx, qword [rbp - 0x60]
cmp rdx, qword [rbp - 0x58]
je 0x1400a99d9
mov eax, dword [rbp - 0x50]
mov dword [rdx], eax
movups xmm0, xmmword [rbp - 0x48]
movups xmmword [rdx + 8], xmm0
movsd xmm0, qword [rbp - 0x38]
movsd qword [rdx + 0x18], xmm0
mov dword [rdx + 0x20], r12d
mov rax, qword [rbp - 0x28]
mov qword [rdx + 0x28], rax
lea rcx, [rdx + 0x30]
lea rdx, [rbp - 0x20]
call fcn.14000eeb0
add qword [rbp - 0x60], 0x50
jmp 0x1400a99e7
lea r8, [rbp - 0x50]
lea rcx, [rbp - 0x68]
call fcn.1400ab680
nop
lea rcx, [rbp - 0x20]
call fcn.14000d000
movzx r15d, byte [rsp + 0x31]
movzx r12d, byte [rsp + 0x30]
mov edx, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x40]
mov r8, qword [rbp - 0x80]
add r14, 4
mov rax, qword [rbp - 0x78]
sub rax, r8
add rax, 0xfffffffffffffffc
cmp r14, rax
jb 0x1400a95d0
mov rdx, qword [rbp - 0x58]
xor r9d, r9d
mov qword [rbp - 0x58], r9
mov rcx, qword [rbp - 0x60]
mov qword [rbp - 0x60], r9
mov rax, qword [rbp - 0x68]
mov qword [rbp - 0x68], r9
mov rbx, qword [rsp + 0x50]
mov qword [rbx], rax
mov qword [rbx + 8], rcx
mov qword [rbx + 0x10], rdx
test r8, r8
je 0x1400a9a8f
mov rdx, qword [rbp - 0x70]
sub rdx, r8
mov rax, r8
cmp rdx, 0x1000
jb 0x1400a9a87
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400a9a87
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, r8
call fcn.140127cb0
mov rax, rbx
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.140127920
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movss xmm0, dword [0x1401903dc]
call fcn.140097df0
nop
movss xmm0, dword [0x1401903dc]
call fcn.140097df0
nop
movss xmm0, dword [0x1401903dc]
call fcn.140097df0
int3