Function at 0x140069f70
Capabilities:
Encode data using xor
Set console window title

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x130]
sub rsp, 0x230
mov rax, qword [0x14032a5b0]
xor rax, rsp
mov qword [rbp + 0x120], rax
mov dword [rbp + 0x28], 0x4e48476b
mov dword [rbp + 0x2c], 0x1005e4e
xor esi, esi
mov ecx, esi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x27]
xor byte [rbp + rcx + 0x28], al
inc rcx
cmp rcx, 6
jb 0x140069fc0
mov byte [rbp + 0x2f], sil
lea rcx, [rbp + 0x28]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
movdqa xmm0, xmmword [str.___tiDBCKLDXT]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rsp + 0x40], 1
mov rcx, rsi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x27]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0xf
jb 0x14006a000
mov byte [rsp + 0x40], sil
lea rdx, [rsp + 0x30]
call fcn.14006e380
lea rcx, [0x140334450]
call fcn.140061ca0
mov dword [rbp + 0x28], 0x5a4444
mov byte [rbp + 0x2c], 1
mov rcx, rsi
nop dword [rax]
lea eax, [rcx + 0x27]
xor byte [rbp + rcx + 0x28], al
inc rcx
cmp rcx, 3
jb 0x14006a040
mov byte [rbp + 0x2c], sil
lea rcx, [rbp + 0x28]
call fcn.14022f388
movdqa xmm0, xmmword [str.___tq]
movdqa xmmword [rbp - 0x50], xmm0
movdqa xmm1, xmmword [0x140300f40]
movdqa xmmword [rbp - 0x40], xmm1
movdqa xmm0, xmmword [0x140300ee0]
movdqa xmmword [rbp - 0x30], xmm0
movdqa xmm1, xmmword [0x140300f10]
movdqa xmmword [rbp - 0x20], xmm1
movdqa xmm0, xmmword [0x140300e70]
movdqa xmmword [rbp - 0x10], xmm0
mov byte [rbp], 1
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x27]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x4f
jb 0x14006a0b0
mov byte [rbp], sil
lea rdx, [rbp - 0x50]
call fcn.14006e380
mov qword [rbp + 0x58], rsi
mov qword [rbp + 0x68], rsi
mov qword [rbp + 0x70], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x58], sil
mov qword [rbp + 0x78], rsi
mov qword [rbp + 0x88], rsi
mov edi, reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x90], rdi
mov byte [rbp + 0x78], 0
mov qword [rbp + 0x38], rsi
mov qword [rbp + 0x48], rsi
mov qword [rbp + 0x50], rdi
mov byte [rbp + 0x38], 0
mov eax, dword [rbp + 0x30]
mov dword [rbp + 0x28], eax
lea rdx, [rbp + 0x28]
call fcn.14006ea00
mov ecx, dword [rbp + 0x28]
sub ecx, 1
je 0x14006a3db
sub ecx, 1
je 0x14006a28e
sub ecx, 1
je 0x14006a1b1
cmp ecx, 1
jne 0x14006a6e3
movdqa xmm0, xmmword [0x140300ea0]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], reloc.WS2_32.dll_socket
mov byte [rsp + 0x42], cl
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x27]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x11
jb 0x14006a160
mov byte [rsp + 0x42], 0
lea rdx, [rsp + 0x30]
call fcn.14006e380
lea rdx, [rbp + 0x38]
lea rcx, [0x140332c80]
call fcn.140077500
lea rdx, [rbp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.14006bcd0
mov rdx, rax
lea rcx, [0x140334450]
call fcn.140066ef0
jmp 0x14006a4c1
movdqa xmm0, xmmword [0x140300f30]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x190252
mov byte [rsp + 0x44], 1
mov rcx, rsi
nop
lea eax, [rcx + 0x27]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x13
jb 0x14006a1d0
mov byte [rsp + 0x44], 0
lea rdx, [rsp + 0x30]
call fcn.14006e380
lea rdx, [rbp + 0x58]
lea rcx, [0x140332c80]
call fcn.140077500
movdqa xmm0, xmmword [0x140300ea0]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], reloc.WS2_32.dll_socket
mov byte [rsp + 0x42], 1
mov rcx, rsi
nop dword [rax]
lea eax, [rcx + 0x27]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x11
jb 0x14006a220
mov byte [rsp + 0x42], 0
lea rdx, [rsp + 0x30]
call fcn.14006e380
lea rdx, [rbp + 0x38]
lea rcx, [0x140332c80]
call fcn.140077500
lea rax, [rsp + 0x30]
mov qword [rbp + 0x28], rax
lea rdx, [rbp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.14006bcd0
mov rbx, rax
lea rdx, [rbp + 0x58]
lea rcx, [rbp - 0x78]
call fcn.14006bcd0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [0x140334450]
call fcn.140065c00
jmp 0x14006a4c1
movdqa xmm0, xmmword [0x140300f30]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x190252
mov byte [rsp + 0x44], 1
mov rcx, rsi
nop dword [rax]
lea eax, [rcx + 0x27]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x13
jb 0x14006a2b0
mov byte [rsp + 0x44], 0
lea rdx, [rsp + 0x30]
call fcn.14006e380
lea rdx, [rbp + 0x58]
lea rcx, [0x140332c80]
call fcn.140077500
movdqa xmm0, xmmword [0x140300f20]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x100180d
mov rcx, rsi
nop dword [rax + rax]
lea eax, [rcx + 0x27]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x12
jb 0x14006a300
mov byte [rsp + 0x43], 0
lea rdx, [rsp + 0x30]
call fcn.14006e380
lea rdx, [rbp + 0x78]
lea rcx, [0x140332c80]
call fcn.140077500
movdqa xmm0, xmmword [0x140300ea0]
movdqu xmmword [rsp + 0x30], xmm0
mov word [rsp + 0x40], reloc.WS2_32.dll_socket
mov byte [rsp + 0x42], 1
mov rcx, rsi
nop dword [rax]
lea eax, [rcx + 0x27]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x11
jb 0x14006a350
mov byte [rsp + 0x42], 0
lea rdx, [rsp + 0x30]
call fcn.14006e380
lea rdx, [rbp + 0x38]
lea rcx, [0x140332c80]
call fcn.140077500
lea rax, [rbp - 0x78]
mov qword [rsp + 0x50], rax
lea rdx, [rbp + 0x38]
lea rcx, [rbp - 0x78]
call fcn.14006bcd0
mov rdi, rax
lea rax, [rsp + 0x30]
mov qword [rbp + 0x28], rax
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x30]
call fcn.14006bcd0
mov rbx, rax
lea rdx, [rbp + 0x58]
lea rcx, [rsp + 0x60]
call fcn.14006bcd0
nop
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [0x140334450]
call fcn.140064420
jmp 0x14006a4ba
movdqa xmm0, xmmword [0x140300f30]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x190252
mov byte [rsp + 0x44], 1
mov rcx, rsi
nop dword [rax]
lea eax, [rcx + 0x27]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x13
jb 0x14006a400
mov byte [rsp + 0x44], 0
lea rdx, [rsp + 0x30]
call fcn.14006e380
lea rdx, [rbp + 0x58]
lea rcx, [0x140332c80]
call fcn.140077500
movdqa xmm0, xmmword [0x140300f20]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rsp + 0x40], 0x100180d
mov rcx, rsi
nop dword [rax + rax]
lea eax, [rcx + 0x27]
xor byte [rsp + rcx + 0x30], al
inc rcx
cmp rcx, 0x12
jb 0x14006a450
mov byte [rsp + 0x43], 0
lea rdx, [rsp + 0x30]
call fcn.14006e380
lea rdx, [rbp + 0x78]
lea rcx, [0x140332c80]
call fcn.140077500
lea rax, [rsp + 0x60]
mov qword [rsp + 0x58], rax
lea rdx, [rbp + 0x78]
lea rcx, [rsp + 0x60]
call fcn.14006bcd0
mov rbx, rax
lea rdx, [rbp + 0x58]
lea rcx, [rbp - 0x78]
call fcn.14006bcd0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [0x140334450]
call fcn.140062e70
mov rdi, qword [rbp + 0x90]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], rax
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x40], rsi
mov qword [rsp + 0x48], reloc.WS2_32.dll_ntohs
lea r8d, [rax + 6]
lea rdx, str.949902
lea rcx, [rsp + 0x30]
call fcn.14006d370
lea r8, [rsp + 0x30]
lea rdx, [rbp + 0x98]
lea rcx, [0x140334450]
call fcn.140068200
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov dword [rbp + 0x30], esi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rax
xorps xmm1, xmm1
movups xmmword [rbp + 0xb0], xmm1
movups xmmword [rbp + 0xc0], xmm1
movups xmmword [rbp + 0xd0], xmm1
movups xmmword [rbp + 0xe0], xmm1
movups xmmword [rbp + 0xf0], xmm1
movups xmmword [rbp + 0x100], xmm1
mov qword [rbp + 0x110], rax
mov word [rbp + 0x28], si
lea r9, [rbp + 0x28]
mov r8, qword [rbp + 0x98]
lea rdx, [rbp + 0xb0]
lea rcx, [rbp + 0x10]
call fcn.140069c60
test eax, eax
jne 0x14006a5b2
mov edx, 0xffffffff
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea rdx, [rbp + 0x30]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x10]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [rbp + 0x30]
mov rcx, qword [rbp + 0x98]
test rcx, rcx
je 0x14006a607
mov rdx, qword [rbp + 0xa8]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006a5f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006a72d
call fcn.14021ad70
xorps xmm0, xmm0
movdqu xmmword [rbp + 0x98], xmm0
mov qword [rbp + 0xa8], rsi
mov rdx, qword [rbp + 0x50]
cmp rdx, 0x10
jb 0x14006a643
inc rdx
mov rcx, qword [rbp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006a63d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006a733
call fcn.14021ad70
nop
cmp rdi, 0x10
jb 0x14006a67c
lea rdx, [rdi + 1]
mov rcx, qword [rbp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006a676
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006a739
call fcn.14021ad70
nop
mov rdx, qword [rbp + 0x70]
cmp rdx, 0x10
jb 0x14006a6b3
inc rdx
mov rcx, qword [rbp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006a6ae
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006a6dd
call fcn.14021ad70
mov eax, ebx
mov rcx, qword [rbp + 0x120]
xor rcx, rsp
call fcn.14021ad50
lea r11, [rsp + 0x230]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
call fcn.14022f310
nop
movdqa xmm0, xmmword [0x140300f00]
movdqu xmmword [rsp + 0x60], xmm0
movdqa xmm1, xmmword [0x140300ec0]
movdqu xmmword [rsp + 0x70], xmm1
mov dword [rbp - 0x80], 0x25203c24
mov word [rbp - 0x7c], Ordinal_41
mov byte [rbp - 0x7a], 1
lea rdx, [rsp + 0x60]
call fcn.14006a740
mov ecx, 0xbb8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call fcn.14022a04c
int3
call fcn.14022f310
nop
call fcn.14022f310
nop
call fcn.14022f310
int3