Function at 0x14000d0b0
Capabilities:
Encode data using xor
Get session user name

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x1402350c0]
xor rax, rsp
mov qword [rbp], rax
lea rdx, [rsp + 0x20]
mov dword [rsp + 0x20], 0xc8
lea rcx, [rsp + 0x30]
call qword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor edi, edi
lea rcx, [rsp + 0x30]
mov ebx, edi
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], bl
jne 0x14000d100
test rax, rax
je 0x14000d13e
nop dword [rax]
movsx ecx, byte [rsp + rbx + 0x30]
call fcn.14005a614
mov byte [rsp + rbx + 0x30], al
lea rcx, [rsp + 0x30]
inc rbx
mov rax, 0xffffffffffffffff
nop dword [rax]
inc rax
cmp byte [rcx + rax], dil
jne 0x14000d130
cmp rbx, rax
jb 0x14000d110
cmp byte [0x1401abb2f], dil
mov rax, qword [str._uruwa:egcd8]
mov ebx, dword [0x140235078]
mov qword [rsp + 0x28], rax
je 0x14000d27a
mov r8d, edi
cmp ebx, 2
jl 0x14000d249
movdqa xmm2, xmmword [0x140075b70]
movdqa xmm4, xmmword [0x1401abb90]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.2222]
psubd xmm2, xmm0
movd xmm0, dword [rsp + 0x28]
andps xmm2, xmmword [0x140075bb0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401abb80]
xorps xmm2, xmm0
movd dword [rsp + 0x28], xmm2
movdqa xmm2, xmmword [0x140075b80]
movdqa xmm1, xmm2
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.2222]
psubd xmm2, xmm0
movd xmm0, dword [rsp + 0x2c]
andps xmm2, xmmword [0x140075bb0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x1401abb80]
xorps xmm2, xmm0
movd dword [rsp + 0x2c], xmm2
jmp 0x14000d27a
lea r9, [rsp + 0x28]
nop
mov eax, 0x51eb851f
lea r9, [r9 + 1]
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x33
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x14000d250
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x30]
call fcn.140048370
test rax, rax
jne 0x14000d434
mov eax, dword [0x1401abb30]
lea rdx, [rsp + 0x28]
mov dword [rsp + 0x28], eax
lea rcx, [rsp + 0x30]
movzx eax, word [0x1401abb34]
xor byte [rsp + 0x29], 0x34
xor byte [rsp + 0x2a], 0x35
xor byte [rsp + 0x2b], 0x36
mov word [rsp + 0x2c], ax
xor al, 0x37
xor byte [rsp + 0x2d], 0x38
mov byte [rsp + 0x2c], al
mov byte [rsp + 0x28], 0x56
call fcn.140048370
test rax, rax
jne 0x14000d434
cmp byte [0x1401abb3f], dil
mov rax, qword [str.uyavj:ogtgt:obdbk9]
mov qword [rsp + 0x28], rax
je 0x14000d41a
mov r8d, edi
cmp ebx, 2
jl 0x14000d3ea
movdqa xmm3, xmmword [0x140075b70]
movdqa xmm2, xmmword [0x140075b80]
movdqa xmm1, xmm3
movdqa xmm5, xmmword [0x1401abb90]
movdqa xmm0, xmm3
mov eax, dword [0x1401abb80]
punpckhdq xmm0, xmm3
punpckldq xmm1, xmm3
pmuldq xmm0, xmm5
pmuldq xmm1, xmm5
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x28]
pmulld xmm0, xmmword [str.2222]
psubd xmm3, xmm0
movd xmm0, eax
andps xmm3, xmmword [0x140075bb0]
packuswb xmm3, xmm3
packuswb xmm3, xmm3
paddb xmm3, xmm0
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
xorps xmm3, xmm1
movdqa xmm1, xmm2
pmuldq xmm0, xmm5
punpckldq xmm1, xmm2
pmuldq xmm1, xmm5
movd dword [rsp + 0x28], xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
movd xmm1, dword [rsp + 0x2c]
pmulld xmm0, xmmword [str.2222]
psubd xmm2, xmm0
movd xmm0, eax
andps xmm2, xmmword [0x140075bb0]
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
xorps xmm2, xmm1
movd dword [rsp + 0x2c], xmm2
jmp 0x14000d41a
lea r9, [rsp + 0x28]
nop
mov eax, 0x51eb851f
lea r9, [r9 + 1]
mul r8d
shr edx, 4
movsx eax, dl
imul ecx, eax, 0x32
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x33
xor byte [r9 - 1], al
cmp r8d, 8
jl 0x14000d3f0
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0x30]
call fcn.140048370
test rax, rax
setne dil
mov eax, edi
jmp 0x14000d439
mov eax, 1
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.140046770
lea r11, [rsp + 0x110]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret