Function at 0x14009a690
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
movaps xmmword [rsp + 0x70], xmm6
movaps xmmword [rsp + 0x60], xmm7
mov rax, qword [0x1401b06f8]
xor rax, rsp
mov qword [rbp - 0x28], rax
mov r13d, edx
mov rbx, rcx
mov qword [rbp - 0x30], rcx
lea r14, [rcx + 0x10]
cmp qword [rcx + 0x18], 0x10
jb 0x14009a6ed
mov rsi, qword [rcx]
mov r15, rsi
add r15, qword [r14]
mov rdi, rsi
jmp 0x14009a6f9
mov rsi, rbx
mov r15, qword [r14]
add r15, rbx
mov rdi, rbx
cmp rdi, r15
je 0x14009a715
sub rsi, rdi
movsx ecx, byte [rdi]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_toupper]
mov byte [rsi + rdi], al
inc rdi
cmp rdi, r15
jne 0x14009a701
mov eax, dword [str.bbrwp6]
mov dword [rbp - 0x60], eax
movzx eax, word [0x140191df4]
mov word [rbp - 0x5c], ax
mov byte [rbp - 0x60], 0x53
xor byte [rbp - 0x5f], 0x32
xor byte [rbp - 0x5e], 0x33
xor byte [rbp - 0x5d], 0x34
xor al, 0x35
mov byte [rbp - 0x5c], al
xor byte [rbp - 0x5b], 0x36
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x60]
mov rsi, 0xffffffffffffffff
mov r8, rsi
nop
inc r8
cmp byte [rax + r8], 0
jne 0x14009a760
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.140016340
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
mov r8, qword [r14]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14009a795
mov rcx, qword [rbx]
cmp r8, qword [rbp - 0x40]
jne 0x14009a7c0
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14009a7c0
lea rcx, [rbp - 0x50]
call fcn.14000d220
nop
mov rcx, rbx
call fcn.14000d220
mov eax, reloc.WLDAP32.dll_Ordinal_32
jmp 0x14009b1aa
lea rcx, [rbp - 0x50]
call fcn.14000d220
movsd xmm0, qword [str.wu_ee]
movsd qword [rbp - 0x60], xmm0
movzx ecx, word [0x140192210]
mov word [rbp - 0x58], cx
movzx eax, byte [0x140192212]
mov byte [rbp - 0x60], Ordinal_79
xor byte [rbp - 0x5f], 0x32
xor byte [rbp - 0x5e], 0x33
xor byte [rbp - 0x5d], 0x34
xor byte [rbp - 0x5c], 0x35
xor byte [rbp - 0x5b], 0x36
xor byte [rbp - 0x5a], 0x37
xor byte [rbp - 0x59], 0x38
xor cl, 0x39
mov byte [rbp - 0x58], cl
xor byte [rbp - 0x57], 0x3a
xor al, 0x3b
mov byte [rbp - 0x56], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x60]
mov r8, rsi
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14009a830
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.140016340
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
mov r8, qword [r14]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14009a865
mov rcx, qword [rbx]
cmp r8, qword [rbp - 0x40]
jne 0x14009a890
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14009a890
lea rcx, [rbp - 0x50]
call fcn.14000d220
nop
mov rcx, rbx
call fcn.14000d220
mov eax, 0xa0
jmp 0x14009b1aa
lea rcx, [rbp - 0x50]
call fcn.14000d220
movsd xmm0, qword [0x140191e40]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [0x140191e48]
mov dword [rbp - 0x58], eax
mov r15, r14
xor edi, edi
lea eax, [rdi + 1]
lea ecx, [rdi + 0x1f]
mov r12d, dword [reloc.WS2_32.dll_accept]
cmp byte [reloc.WLDAP32.dll_Ordinal_60], dil
je 0x14009aa1f
mov r8d, edi
cmp r12d, 2
jl 0x14009a9d8
movdqa xmm4, xmmword [0x140192a10]
movd xmm6, eax
movd xmm5, ecx
movdqa xmm2, xmmword [0x140192830]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401928b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140192a00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140192a30]
movd xmm0, dword [0x140191e40]
xorps xmm2, xmm0
movd dword [rbp - 0x60], xmm2
movdqa xmm3, xmmword [0x140192840]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401928b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140192a00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140192a30]
movd xmm0, dword [rbp - 0x5c]
xorps xmm2, xmm0
movd dword [rbp - 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xc
jl 0x14009a9f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], dil
jne 0x14009aa35
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.140016340
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
mov r8, qword [r15]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14009aa69
mov rcx, qword [rbx]
cmp r8, qword [rbp - 0x40]
jne 0x14009aa94
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14009aa94
lea rcx, [rbp - 0x50]
call fcn.14000d220
nop
mov rcx, rbx
call fcn.14000d220
mov eax, 0xa1
jmp 0x14009b1aa
lea rcx, [rbp - 0x50]
call fcn.14000d220
movsd xmm0, qword [0x1401920e0]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [0x1401920e8]
mov dword [rbp - 0x58], eax
movzx eax, byte [0x1401920ec]
mov byte [rbp - 0x54], al
mov r8d, edi
cmp r12d, 2
jl 0x14009abd7
movdqa xmm4, xmmword [0x140192a10]
mov eax, 1
movd xmm6, eax
mov eax, Ordinal_33
movd xmm5, eax
movdqa xmm2, xmmword [0x140192830]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401928b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140192a00]
packuswb xmm2, xmm2
mov eax, dword [0x140192a30]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x1401920e0]
xorps xmm2, xmm0
movd dword [rbp - 0x60], xmm2
movdqa xmm3, xmmword [0x140192840]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401928b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140192a00]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x5c]
xorps xmm2, xmm1
movd dword [rbp - 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xd
jl 0x14009abe1
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], dil
jne 0x14009ac26
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.140016340
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
mov r8, qword [r15]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14009ac5a
mov rcx, qword [rbx]
cmp r8, qword [rbp - 0x40]
jne 0x14009ac85
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14009ac85
lea rcx, [rbp - 0x50]
call fcn.14000d220
nop
mov rcx, rbx
call fcn.14000d220
mov eax, 0xa2
jmp 0x14009b1aa
lea rcx, [rbp - 0x50]
call fcn.14000d220
movsd xmm0, qword [0x140192170]
movsd qword [rbp - 0x60], xmm0
mov eax, dword [0x140192178]
mov dword [rbp - 0x58], eax
movzx eax, word [0x14019217c]
mov word [rbp - 0x54], ax
mov r14, r15
cmp byte [0x14019217d], dil
je 0x14009ae1f
mov r8d, edi
cmp r12d, 2
jl 0x14009add9
movdqa xmm4, xmmword [0x140192a10]
mov eax, 1
movd xmm6, eax
mov eax, Ordinal_33
movd xmm5, eax
movdqa xmm2, xmmword [0x140192830]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401928b0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140192a00]
packuswb xmm2, xmm2
mov eax, dword [0x140192a30]
movd xmm0, eax
paddb xmm2, xmm0
movd xmm0, dword [0x140192170]
xorps xmm2, xmm0
movd dword [rbp - 0x60], xmm2
movdqa xmm3, xmmword [0x140192840]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401928b0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140192a00]
packuswb xmm2, xmm2
movd xmm0, eax
paddb xmm2, xmm0
movd xmm1, dword [rbp - 0x5c]
xorps xmm2, xmm1
movd dword [rbp - 0x5c], xmm2
mov r8d, 8
movsxd rax, r8d
lea r9, [rbp - 0x60]
add r9, rax
nop dword [rax]
nop word [rax + rax]
mov eax, 0x94f2095
imul r8d
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, r8b
sub al, cl
add al, 0x31
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 0xe
jl 0x14009adf0
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], dil
jne 0x14009ae35
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.140016340
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
mov r8, qword [r14]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14009ae69
mov rcx, qword [rbx]
cmp r8, qword [rbp - 0x40]
jne 0x14009ae94
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14009ae94
lea rcx, [rbp - 0x50]
call fcn.14000d220
nop
mov rcx, rbx
call fcn.14000d220
mov eax, 0xa3
jmp 0x14009b1aa
lea rcx, [rbp - 0x50]
call fcn.14000d220
mov eax, dword [str.esq4bw]
mov dword [rbp - 0x60], eax
cmp byte [0x140191ed7], dil
je 0x14009af7c
cmp r12d, 2
jl 0x14009af4a
movdqa xmm3, xmmword [0x140192830]
movdqa xmm2, xmm3
punpckldq xmm2, xmm3
pmuldq xmm2, xmmword [0x140192a10]
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmmword [0x140192a10]
shufps xmm2, xmm0, 0xdd
mov ecx, 1
movd xmm0, ecx
psrad xmm2, xmm0
mov ecx, Ordinal_33
movd xmm0, ecx
movdqa xmm1, xmm2
psrld xmm1, xmm0
paddd xmm1, xmm2
pmulld xmm1, xmmword [0x1401928b0]
psubd xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140192a00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140192a30]
movd xmm0, eax
xorps xmm2, xmm0
movd dword [rbp - 0x60], xmm2
jmp 0x14009af7c
lea r8, [rbp - 0x60]
nop
mov eax, 0x94f2095
imul edi
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x37
movzx eax, dil
sub al, cl
add al, 0x31
xor byte [r8], al
inc edi
lea r8, [r8 + 1]
cmp edi, 4
jl 0x14009af50
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x60]
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x14009af92
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.140016340
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
mov r8, qword [r14]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14009afc7
mov rcx, qword [rbx]
cmp r8, qword [rbp - 0x40]
jne 0x14009aff2
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14009aff2
lea rcx, [rbp - 0x50]
call fcn.14000d220
nop
mov rcx, rbx
call fcn.14000d220
mov eax, 9
jmp 0x14009b1aa
lea rcx, [rbp - 0x50]
call fcn.14000d220
movsd xmm0, qword [str.wu_ewl9]
movsd qword [rbp - 0x60], xmm0
movzx eax, byte [reloc.WS2_32.dll_gethostname]
mov byte [rbp - 0x60], Ordinal_79
xor byte [rbp - 0x5f], 0x32
xor byte [rbp - 0x5e], 0x33
xor byte [rbp - 0x5d], 0x34
xor byte [rbp - 0x5c], 0x35
xor byte [rbp - 0x5b], 0x36
xor byte [rbp - 0x5a], 0x37
xor byte [rbp - 0x59], 0x38
xor al, 0x39
mov byte [rbp - 0x58], al
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x60]
mov r8, rsi
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14009b050
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.140016340
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
mov r8, qword [r14]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14009b085
mov rcx, qword [rbx]
cmp r8, qword [rbp - 0x40]
jne 0x14009b0b0
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14009b0b0
lea rcx, [rbp - 0x50]
call fcn.14000d220
nop
mov rcx, rbx
call fcn.14000d220
mov eax, 0xa4
jmp 0x14009b1aa
lea rcx, [rbp - 0x50]
call fcn.14000d220
movsd xmm0, qword [str.cta]
movsd qword [rbp - 0x60], xmm0
movzx eax, word [0x1401921e0]
mov word [rbp - 0x58], ax
cmp byte [0x1401921e1], 0
je 0x14009b102
mov byte [rbp - 0x60], 0x52
xor byte [rbp - 0x5f], 0x32
xor byte [rbp - 0x5e], 0x33
xor byte [rbp - 0x5d], 0x34
xor byte [rbp - 0x5c], 0x35
xor byte [rbp - 0x5b], 0x36
xor byte [rbp - 0x5a], 0x37
xor byte [rbp - 0x59], 0x38
xor byte [rbp - 0x58], 0x39
xor byte [rbp - 0x57], 0x3a
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x40], xmm1
lea rax, [rbp - 0x60]
inc rsi
cmp byte [rax + rsi], 0
jne 0x14009b115
mov r8, rsi
lea rdx, [rbp - 0x60]
lea rcx, [rbp - 0x50]
call fcn.140016340
lea rdx, [rbp - 0x50]
cmp qword [rbp - 0x38], 0x10
cmovae rdx, qword [rbp - 0x50]
mov r8, qword [r14]
mov rcx, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14009b14c
mov rcx, qword [rbx]
cmp r8, qword [rbp - 0x40]
jne 0x14009b174
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x14009b174
lea rcx, [rbp - 0x50]
call fcn.14000d220
nop
mov rcx, rbx
call fcn.14000d220
mov eax, 0xa5
jmp 0x14009b1aa
lea rcx, [rbp - 0x50]
call fcn.14000d220
cmp qword [r14], 1
jne 0x14009b19f
mov rax, rbx
cmp qword [rbx + 0x18], 0x10
jb 0x14009b190
mov rax, qword [rbx]
movsx edi, byte [rax]
mov rcx, rbx
call fcn.14000d220
mov eax, edi
jmp 0x14009b1aa
mov rcx, rbx
call fcn.14000d220
mov eax, r13d
mov rcx, qword [rbp - 0x28]
xor rcx, rsp
call fcn.1401292a0
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [rsp + 0x70]
movaps xmm7, xmmword [rsp + 0x60]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret