Function at 0x14006ba60
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0x100
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x140199900]
xor rax, rsp
mov qword [rbp + 7], rax
mov rsi, rdx
mov ebx, ecx
lea rcx, [0x14007ec70]
call qword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
movsd xmm0, qword [str.QJ__]
movsd qword [rbp - 0x79], xmm0
movzx eax, word [0x140163ed8]
mov ecx, 0x66
mov word [rbp - 0x79], cx
xor word [rbp - 0x77], 0x38
xor word [rbp - 0x75], 0x39
xor word [rbp - 0x73], 0x3a
xor ax, 0x3b
mov word [rbp - 0x71], ax
lea r8, [rbp - 0x79]
mov rdx, rsi
mov ecx, ebx
call fcn.14008ab10
test eax, eax
setg r15b
mov rax, qword [str.ZU:V_jZ_XM_]
mov qword [rbp - 0x79], rax
xor r12d, r12d
mov r14d, dword [reloc.WS2_32.dll_accept]
cmp word [0x140163ee6], r12w
je 0x14006bbd2
cmp r14d, 2
jl 0x14006bb8e
movdqa xmm3, xmmword [0x140125270]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x1401674d0]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x1401674d0]
shufps xmm2, xmm0, 0xdd
paddd xmm2, xmm3
psrad xmm2, 5
movdqa xmm0, xmm2
psrld xmm0, 0x1f
paddd xmm0, xmm2
pmulld xmm0, xmmword [0x140167380]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
paddw xmm2, xmmword [str.77777777]
movq xmm0, qword [rbp - 0x79]
xorps xmm2, xmm0
movq qword [rbp - 0x79], xmm2
jmp 0x14006bbd2
lea r8, [rbp - 0x79]
mov edi, r12d
nop word [rax + rax]
mov eax, 0x92492493
imul edi
add edx, edi
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul ecx, eax, 0x38
movzx eax, di
sub ax, cx
add ax, 0x37
xor word [r8], ax
inc edi
lea r8, [r8 + 2]
cmp edi, 4
jl 0x14006bba0
lea r8, [rbp - 0x79]
mov rdx, rsi
mov ecx, ebx
call fcn.14008ab10
movups xmm0, xmmword [0x140163ee8]
movups xmmword [rbp - 0x79], xmm0
movzx eax, word [0x140163ef8]
mov ecx, 0x69
mov word [rbp - 0x79], cx
xor word [rbp - 0x77], 0x38
xor word [rbp - 0x75], 0x39
xor word [rbp - 0x73], 0x3a
xor word [rbp - 0x71], 0x3b
xor word [rbp - 0x6f], 0x3c
xor word [rbp - 0x6d], 0x3d
xor word [rbp - 0x6b], 0x3e
xor ax, 0x3f
mov word [rbp - 0x69], ax
lea r8, [rbp - 0x79]
mov rdx, rsi
mov ecx, ebx
call fcn.14008ab10
movups xmm0, xmmword [str.gYJIzPQQ_5_]
movups xmmword [rbp - 0x61], xmm0
movups xmm1, xmmword [0x140163f10]
movups xmmword [rbp - 0x51], xmm1
mov eax, dword [0x140163f20]
mov dword [rbp - 0x41], eax
mov ecx, r12d
cmp r14d, 2
jl 0x14006bd82
movdqa xmm5, xmmword [0x140125270]
movdqa xmm4, xmmword [0x1401674d0]
movdqa xmm6, xmmword [0x140167380]
movdqa xmm7, xmmword [str.77777777]
lea rdx, [rbp - 0x61]
nop dword [rax]
nop dword [rax + rax]
movd xmm2, ecx
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rdx]
xorps xmm3, xmm0
movq qword [rdx], xmm3
lea eax, [rcx + 4]
movd xmm2, eax
pshufd xmm2, xmm2, 0
paddd xmm2, xmm5
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
psrad xmm1, 5
movdqa xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm3, xmm1, 0xd8
movq xmm2, xmm7
paddw xmm3, xmm2
movq xmm0, qword [rdx + 8]
xorps xmm3, xmm0
movq qword [rdx + 8], xmm3
add ecx, 8
lea rdx, [rdx + 0x10]
cmp ecx, 0x10
jl 0x14006bc90
cmp ecx, 0x12
jge 0x14006bdc2
movsxd rax, ecx
lea r8, [rbp - 0x61]
lea r8, [r8 + rax*2]
nop dword [rax]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
imul eax, eax, 0x38
movzx edi, cx
sub di, ax
add di, 0x37
xor word [r8], di
inc ecx
lea r8, [r8 + 2]
cmp ecx, 0x12
jl 0x14006bd90
lea r8, [rbp - 0x61]
mov rdx, rsi
mov ecx, ebx
call fcn.14008ab10
test eax, eax
setg dil
call fcn.1400a6220
mov qword [0x14019a6e0], rax
mov eax, dword [0x140163f24]
mov dword [rbp - 0x79], eax
movzx ecx, word [0x140163f28]
mov word [rbp - 0x75], cx
movzx eax, byte [0x140163f2a]
mov byte [rbp - 0x79], gethostname
xor byte [rbp - 0x78], 0x38
xor byte [rbp - 0x77], 0x39
xor byte [rbp - 0x76], 0x3a
xor cl, 0x3b
mov byte [rbp - 0x75], cl
xor byte [rbp - 0x74], 0x3c
xor al, 0x3d
mov byte [rbp - 0x73], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x21], xmm0
mov qword [rbp - 0x11], r12
mov qword [rbp - 9], r12
lea rax, [rbp - 0x79]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x14006be36
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x21]
call fcn.1400563d0
nop
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], rax
lea rdx, [rbp - 0x21]
lea rcx, [rbp - 0x61]
call fcn.140062e80
mov r8, rax
lea rdx, [rbp - 0x39]
lea rcx, [0x14019ab00]
call fcn.1400b7160
nop
mov dword [rbp - 1], r12d
lea rax, [rbp - 1]
mov qword [rsp + 0x48], rax
lea rax, [0x140082a20]
mov qword [rsp + 0x40], rax
mov byte [rsp + 0x38], dil
mov dword [rsp + 0x30], r12d
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], r15b
xor r9d, r9d
xor r8d, r8d
mov rdx, qword [rbp - 0x39]
mov rcx, qword [0x14019a6e0]
call fcn.1400a8600
test rax, rax
jne 0x14006becf
mov rcx, qword [0x14019a6e0]
call fcn.1400a7410
mov rcx, qword [0x14019a6e0]
call fcn.1400a7410
mov rax, qword [rbp - 0x39]
cmp rax, qword [rbp - 0x31]
je 0x14006bee9
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x11], r12
lea rax, [rbp - 0x21]
cmp qword [rbp - 9], 0xf
cmova rax, qword [rbp - 0x21]
mov byte [rax], 0
mov rsi, qword [rbp - 0x31]
movabs r14, 0x7fffffffffffffff
mov rcx, qword [rbp - 0x39]
sub rsi, rcx
mov rbx, r12
mov r8, r12
mov rax, r12
je 0x14006bf86
cmp rsi, r14
ja 0x14006c1e6
cmp rsi, 0x1000
jb 0x14006bf59
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x14006c1e0
call fcn.1401121bc
test rax, rax
je 0x14006c155
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x14006bf64
mov rcx, rsi
call fcn.1401121bc
mov rbx, rax
mov rdi, qword [rbp - 0x31]
mov rdx, qword [rbp - 0x39]
sub rdi, rdx
mov r8, rdi
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea r8, [rbx + rdi]
lea rax, [rbx + rsi]
mov rcx, qword [rbp - 0x39]
mov qword [rbp - 0x39], rbx
mov qword [rbp - 0x31], r8
mov rdx, qword [rbp - 0x29]
mov qword [rbp - 0x29], rax
test rcx, rcx
je 0x14006bfd0
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14006bfc3
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006c155
mov rcx, rdi
call fcn.140111b1c
mov r8, qword [rbp - 0x31]
mov rbx, qword [rbp - 0x39]
sub r8, rbx
xor edx, edx
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp - 0x21]
cmp qword [rbp - 9], 0xf
cmova rcx, qword [rbp - 0x21]
mov r8, qword [rbp - 0x11]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [rbp - 0x31]
mov rdi, qword [rbp - 0x39]
sub rcx, rdi
xor eax, eax
rep stosb byte [rdi], al
lea rdi, [rbp - 0x21]
cmp qword [rbp - 9], 0xf
cmova rdi, qword [rbp - 0x21]
mov rcx, qword [rbp - 0x11]
rep stosb byte [rdi], al
mov r8, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x39]
sub r8, rcx
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rsi, qword [rbp - 0x31]
mov rcx, qword [rbp - 0x39]
cmp rsi, rcx
je 0x14006c03f
mov rsi, rcx
mov qword [rbp - 0x31], rcx
sub rsi, rcx
mov rdi, r12
mov rbx, r12
mov rax, r12
je 0x14006c0b4
cmp rsi, r14
ja 0x14006c1e6
cmp rsi, 0x1000
jb 0x14006c088
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x14006c1e0
call fcn.1401121bc
test rax, rax
je 0x14006c155
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14006c093
mov rcx, rsi
call fcn.1401121bc
mov rdi, rax
mov rbx, qword [rbp - 0x31]
mov rdx, qword [rbp - 0x39]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
add rbx, rdi
lea rax, [rdi + rsi]
mov rcx, qword [rbp - 0x39]
mov qword [rbp - 0x39], rdi
mov qword [rbp - 0x31], rbx
mov rdx, qword [rbp - 0x29]
mov qword [rbp - 0x29], rax
test rcx, rcx
je 0x14006c0fa
sub rdx, rcx
cmp rdx, 0x1000
jb 0x14006c0ed
add rdx, 0x27
mov rdi, qword [rcx - 8]
sub rcx, rdi
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14006c155
mov rcx, rdi
call fcn.140111b1c
mov rbx, qword [rbp - 0x31]
mov rdi, qword [rbp - 0x39]
cmp rbx, rdi
je 0x14006c121
nop
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov byte [rdi], al
inc rdi
cmp rdi, rbx
jne 0x14006c100
mov rbx, qword [rbp - 0x31]
mov rdi, qword [rbp - 0x39]
cmp rbx, rdi
je 0x14006c121
mov qword [rbp - 0x31], rdi
test rdi, rdi
je 0x14006c170
mov rdx, qword [rbp - 0x29]
sub rdx, rdi
mov rax, rdi
cmp rdx, 0x1000
jb 0x14006c15c
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006c15c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, rdi
call fcn.140111b1c
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], r12
mov rdx, qword [rbp - 9]
cmp rdx, 0xf
jbe 0x14006c1ae
inc rdx
mov rcx, qword [rbp - 0x21]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006c1a9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14006c1a9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140111b1c
mov rcx, qword [rbp + 7]
xor rcx, rsp
call fcn.140111f90
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.1400805d0
nop
call fcn.140080b60
int3