Function at 0x140097000
Capabilities:
Encode data using xor

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x60
mov eax, dword [0x14018fc00]
xor ecx, ecx
cmp dword [reloc.WS2_32.dll_accept], 2
movsd xmm0, qword [str._KTP]
mov dword [rbp - 0x18], eax
movzx eax, byte [0x14018fc04]
mov byte [rbp - 0x14], al
movsd qword [rbp - 0x20], xmm0
jl 0x140097150
movdqa xmm2, xmmword [0x1401906d0]
mov eax, 5
movdqa xmm3, xmmword [0x1401906e0]
movdqa xmm1, xmm2
movdqa xmm4, xmmword [0x140190a30]
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
mov ecx, 8
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
movaps xmmword [rsp + 0x50], xmm6
movd xmm6, eax
mov eax, Ordinal_33
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm2
movd xmm5, eax
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140190790]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [str._KTP]
pshufd xmm2, xmm1, 0xd8
movdqa xmm1, xmm3
andps xmm2, xmmword [0x1401908d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140190930]
xorps xmm2, xmm0
punpckldq xmm1, xmm3
movd dword [rbp - 0x20], xmm2
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
paddd xmm1, xmm3
psrad xmm1, xmm6
movaps xmm6, xmmword [rsp + 0x50]
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x140190790]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
movd xmm0, dword [rbp - 0x1c]
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x1401908d0]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140190930]
xorps xmm2, xmm0
movd dword [rbp - 0x1c], xmm2
movsxd rax, ecx
lea r8, [rbp - 0x20]
add r8, rax
nop word [rax + rax]
mov eax, 0x92492493
lea r8, [r8 + 1]
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x38
movzx eax, cl
inc ecx
sub al, dl
add al, 0x37
xor byte [r8 - 1], al
cmp ecx, 0xd
jl 0x140097160
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.ActivateActCtx_ActivateActCtxWorker_AddAtomA_AddAtomW_AddConsoleAliasA_AddConsoleAliasW_AddIntegrityLabelToBoundaryDescriptor_AddLocalAlternateComputerNameA_AddLocalAlternateComputerNameW_AddRefActCtx_AddRefActCtxWorker_AddResourceAttributeAce_AddSIDToBoundaryDescriptor_AddScopedPolicyIDAce_AddSecureMemoryCacheCallback_AdjustCalendarDate_AllocConsole_AllocateUserPhysicalPages_AllocateUserPhysicalPagesNuma_ApplicationRecoveryFinished_ApplicationRecoveryInProgress_AreFileApisANSI_AssignProcessToJobObject_AttachConsole_BackupRead_BackupSeek_BackupWrite_BaseCheckAppcompatCache_BaseCheckAppcompatCacheEx_BaseCheckAppcompatCacheExWorker_BaseCheckAppcompatCacheWorker_BaseCheckElevation_BaseCleanupAppcompatCacheSupport_BaseCleanupAppcompatCacheSupportWorker_BaseDestroyVDMEnvironment_BaseDllReadWriteIniFile_BaseDumpAppcompatCache_BaseDumpAppcompatCacheWorker_BaseElevationPostProcessing_BaseFlushAppcompatCache_BaseFlushAppcompatCacheWorker_BaseFormatObjectAttributes_BaseFormatTimeOut_BaseFreeAppCompatDataForProcessWorker_BaseGenerateAppCompatData_BaseGetNamedObjectDirectory_BaseInitAppcompatCacheSupport_BaseInitAppcompatCacheSupportWorker_BaseIsAppcompatInfrastructureDisabled_BaseIsAppcompatInfrastructureDisabledWorker_BaseIsDosApplication_BaseQueryModuleData_BaseReadAppCompatDataForProcessWorker_BaseSetLastNTError_BaseThreadInitThunk_BaseUpdateAppcompatCache_BaseUpdateAppcompatCacheWorker_BaseUpdateVDMEntry_BaseVerifyUnicodeString_BaseWriteErrorElevationRequiredEvent_Basep8BitStringToDynamicUnicodeString_BasepAllocateActivationContextActivationBlock_BasepAnsiStringToDynamicUnicodeString_BasepAppContainerEnvironmentExtension_BasepAppXExtension_BasepCheckAppCompat_BasepCheckWebBladeHashes_BasepCheckWinSaferRestrictions_BasepConstructSxsCreateProcessMessage_BasepCopyEncryption_BasepFreeActivationContextActivationBlock_BasepFreeAppCompatData_BasepGetAppCompatData_BasepGetComputerNameFromNtPath_BasepGetExeArchType_BasepInitAppCompatData_BasepIsProcessAllowed_BasepMapModuleHandle_BasepNotifyLoadStringResource_BasepPostSuccessAppXExtension_BasepProcessInvalidImage_BasepQueryAppCompat_BasepQueryModuleChpeSettings_BasepReleaseAppXContext_BasepReleaseSxsCreateProcessUtilityStruct_BasepReportFault_BasepSetFileEncryptionCompression_Beep_BeginUpdateResourceA_BeginUpdateResourceW_BindIoCompletionCallback_BuildCommDCBA_BuildCommDCBAndTimeoutsA_BuildCommDCBAndTimeoutsW_BuildCommDCBW_CallNamedPipeA_CallNamedPipeW_CallbackMayRunLong_CancelDeviceWakeupRequest_CancelIo_CancelIoEx_CancelSynchronousIo_CancelTimerQueueTimer_CancelWaitableTimer_ChangeTimerQueueTimer_CheckAllowDecryptedRemoteDestinationPolicy_CheckElevation_CheckElevationEnabled_CheckForReadOnlyResource_CheckForReadOnlyResourceFilter_CheckNameLegalDOS8Dot3A_CheckNameLegalDOS8Dot3W_CheckRemoteDebuggerPresent_CheckTokenCapability_CheckTokenMembershipEx_ClearCommBreak_ClearCommError_CloseConsoleHandle_CloseHandle_ClosePrivateNamespace_CloseProfileUserMapping_CmdBatNotification_CommConfigDialogA_CommConfigDialogW_CompareCalendarDates_CompareFileTime_CompareStringA_CompareStringEx_CompareStringOrdinal_CompareStringW_ConnectNamedPipe_ConsoleMenuControl_ContinueDebugEvent_ConvertCalDateTimeToSystemTime_ConvertDefaultLocale_ConvertFiberToThread_ConvertNLSDayOfWeekToWin32DayOfWeek_ConvertSystemTimeToCalDateTime_ConvertThreadToFiber_ConvertThreadToFiberEx_CopyContext_CopyFile2_CopyFileA_CopyFileExA_CopyFileExW_CopyFileTransactedA_CopyFileTransactedW_CopyFileW_CopyLZFile_CreateActCtxA_CreateActCtxW_CreateActCtxWWorker_CreateBoundaryDescriptorA_CreateBoundaryDescriptorW_CreateConsoleScreenBuffer_CreateDirectoryA_CreateDirectoryExA_CreateDirectoryExW_CreateDirectoryTransactedA_CreateDirectoryTransactedW_CreateDirectoryW_CreateEventA_CreateEventExA_CreateEventExW_CreateEventW_CreateFiber_CreateFiberEx_CreateFile2_CreateFileA_CreateFileMappingA_CreateFileMappingNumaA_CreateFileMappingNumaW_CreateFileMappingW_CreateFileTransactedA_CreateFileTransactedW_CreateFileW_CreateHardLinkA_CreateHardLinkTransactedA_CreateHardLinkTransactedW_CreateHardLinkW_CreateIoCompletionPort_CreateJobObjectA_CreateJobObjectW_C
call fcn.140096ee0
test eax, eax
je 0x14009728c
cmp byte [0x14018fb49], 0
movsd xmm0, qword [str.YL_VW]
movzx eax, word [0x14018fb48]
movsd qword [rbp - 0x40], xmm0
mov word [rbp - 0x38], ax
je 0x1400971f9
xor byte [rbp - 0x3f], 0x38
xor byte [rbp - 0x3e], 0x39
xor byte [rbp - 0x3d], 0x3a
xor byte [rbp - 0x3c], 0x3b
xor byte [rbp - 0x3b], 0x3c
xor byte [rbp - 0x3a], 0x3d
xor byte [rbp - 0x39], 0x3e
xor byte [rbp - 0x38], 0x3f
xor byte [rbp - 0x37], 0x40
mov byte [rbp - 0x40], WSAGetLastError
lea rcx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.A_SHAFinal_A_SHAInit_A_SHAUpdate_AlpcAdjustCompletionListConcurrencyCount_AlpcFreeCompletionListMessage_AlpcGetCompletionListLastMessageInformation_AlpcGetCompletionListMessageAttributes_AlpcGetHeaderSize_AlpcGetMessageAttribute_AlpcGetMessageFromCompletionList_AlpcGetOutstandingCompletionListMessageCount_AlpcInitializeMessageAttribute_AlpcMaxAllowedMessageLength_AlpcRegisterCompletionList_AlpcRegisterCompletionListWorkerThread_AlpcRundownCompletionList_AlpcUnregisterCompletionList_AlpcUnregisterCompletionListWorkerThread_ApiSetQueryApiSetPresence_CsrAllocateCaptureBuffer_CsrAllocateMessagePointer_CsrCaptureMessageBuffer_CsrCaptureMessageMultiUnicodeStringsInPlace_CsrCaptureMessageString_CsrCaptureTimeout_CsrClientCallServer_CsrClientConnectToServer_CsrFreeCaptureBuffer_CsrGetProcessId_CsrIdentifyAlertableThread_CsrSetPriorityClass_CsrVerifyRegion_DbgBreakPoint_DbgPrint_DbgPrintEx_DbgPrintReturnControlC_DbgPrompt_DbgQueryDebugFilterState_DbgSetDebugFilterState_DbgUiConnectToDbg_DbgUiContinue_DbgUiConvertStateChangeStructure_DbgUiConvertStateChangeStructureEx_DbgUiDebugActiveProcess_DbgUiGetThreadDebugObject_DbgUiIssueRemoteBreakin_DbgUiRemoteBreakin_DbgUiSetThreadDebugObject_DbgUiStopDebugging_DbgUiWaitStateChange_DbgUserBreakPoint_EtwCheckCoverage_EtwCreateTraceInstanceId_EtwDeliverDataBlock_EtwEnumerateProcessRegGuids_EtwEventActivityIdControl_EtwEventEnabled_EtwEventProviderEnabled_EtwEventRegister_EtwEventSetInformation_EtwEventUnregister_EtwEventWrite_EtwEventWriteEndScenario_EtwEventWriteEx_EtwEventWriteFull_EtwEventWriteNoRegistration_EtwEventWriteStartScenario_EtwEventWriteString_EtwEventWriteTransfer_EtwGetTraceEnableFlags_EtwGetTraceEnableLevel_EtwGetTraceLoggerHandle_EtwLogTraceEvent_EtwNotificationRegister_EtwNotificationUnregister_EtwProcessPrivateLoggerRequest_EtwRegisterSecurityProvider_EtwRegisterTraceGuidsA_EtwRegisterTraceGuidsW_EtwReplyNotification_EtwSendNotification_EtwSetMark_EtwTraceEventInstance_EtwTraceMessage_EtwTraceMessageVa_EtwUnregisterTraceGuids_EtwWriteUMSecurityEvent_EtwpCreateEtwThread_EtwpGetCpuSpeed_EvtIntReportAuthzEventAndSourceAsync_EvtIntReportEventAndSourceAsync_ExpInterlockedPopEntrySListEnd_ExpInterlockedPopEntrySListFault_ExpInterlockedPopEntrySListResume_KiRaiseUserExceptionDispatcher_KiUserApcDispatcher_KiUserCallbackDispatcher_KiUserExceptionDispatcher_KiUserInvertedFunctionTable_LdrAccessResource_LdrAddDllDirectory_LdrAddLoadAsDataTable_LdrAddRefDll_LdrAppxHandleIntegrityFailure_LdrCallEnclave_LdrControlFlowGuardEnforced_LdrCreateEnclave_LdrDeleteEnclave_LdrDisableThreadCalloutsForDll_LdrEnumResources_LdrEnumerateLoadedModules_LdrFastFailInLoaderCallout_LdrFindEntryForAddress_LdrFindResourceDirectory_U_LdrFindResourceEx_U_LdrFindResource_U_LdrFlushAlternateResourceModules_LdrGetDllDirectory_LdrGetDllFullName_LdrGetDllHandle_LdrGetDllHandleByMapping_LdrGetDllHandleByName_LdrGetDllHandleEx_LdrGetDllPath_LdrGetFailureData_LdrGetFileNameFromLoadAsDataTable_LdrGetKnownDllSectionHandle_LdrGetProcedureAddress_LdrGetProcedureAddressEx_LdrGetProcedureAddressForCaller_LdrInitShimEngineDynamic_LdrInitializeEnclave_LdrInitializeThunk_LdrLoadAlternateResourceModule_LdrLoadAlternateResourceModuleEx_LdrLoadDll_LdrLoadEnclaveModule_LdrLockLoaderLock_LdrOpenImageFileOptionsKey_LdrProcessInitializationComplete_LdrProcessRelocationBlock_LdrProcessRelocationBlockEx_LdrQueryImageFileExecutionOptions_LdrQueryImageFileExecutionOptionsEx_LdrQueryImageFileKeyOption_LdrQueryModuleServiceTags_LdrQueryOptionalDelayLoadedAPI_LdrQueryProcessModuleInformation_LdrRegisterDllNotification_LdrRemoveDllDirectory_LdrRemoveLoadAsDataTable_LdrResFindResource_LdrResFindResourceDirectory_LdrResGetRCConfig_LdrResRelease_LdrResSearchResource_LdrResolveDelayLoadedAPI_LdrResolveDelayLoadsFromDll_LdrRscIsTypeExist_LdrSetAppCompatDllRedirectionCallback_LdrSetDefaultDllDirectories_LdrSetDllDirectory_LdrSetDllManifestProber_LdrSetImplicitPathOptions_LdrSetMUICacheType_LdrShutdownProcess_LdrShutdownThread_LdrStandardizeSystemPath_LdrSystemDllInitBlock_LdrUnloadAlternateResourceModule_LdrUnloadAlternateResourceModuleEx_LdrU
call fcn.140096ee0
test eax, eax
je 0x14009728c
movzx ecx, word [0x14018fc18]
movzx eax, byte [0x14018fc1a]
movsd xmm0, qword [str.BKH_b]
xor al, 0x41
movsd qword [rbp - 0x30], xmm0
xor byte [rbp - 0x2f], 0x38
xor byte [rbp - 0x2e], 0x39
xor byte [rbp - 0x2d], 0x3a
xor byte [rbp - 0x2c], 0x3b
xor byte [rbp - 0x2b], 0x3c
xor byte [rbp - 0x2a], 0x3d
xor byte [rbp - 0x29], 0x3e
mov word [rbp - 0x28], cx
xor cl, 0x3f
xor byte [rbp - 0x27], 0x40
mov byte [rbp - 0x28], cl
lea rcx, [rbp - 0x30]
mov byte [rbp - 0x30], 0x75
mov byte [rbp - 0x26], al
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.ActivateKeyboardLayout_AddClipboardFormatListener_AdjustWindowRect_AdjustWindowRectEx_AdjustWindowRectExForDpi_AlignRects_AllowForegroundActivation_AllowSetForegroundWindow_AnimateWindow_AnyPopup_AppendMenuA_AppendMenuW_AreDpiAwarenessContextsEqual_ArrangeIconicWindows_AttachThreadInput_BeginDeferWindowPos_BeginPaint_BlockInput_BringWindowToTop_BroadcastSystemMessage_BroadcastSystemMessageA_BroadcastSystemMessageExA_BroadcastSystemMessageExW_BroadcastSystemMessageW_BuildReasonArray_CalcMenuBar_CalculatePopupWindowPosition_CallMsgFilter_CallMsgFilterA_CallMsgFilterW_CallNextHookEx_CallWindowProcA_CallWindowProcW_CancelShutdown_CascadeChildWindows_CascadeWindows_ChangeClipboardChain_ChangeDisplaySettingsA_ChangeDisplaySettingsExA_ChangeDisplaySettingsExW_ChangeDisplaySettingsW_ChangeMenuA_ChangeMenuW_ChangeWindowMessageFilter_ChangeWindowMessageFilterEx_CharLowerA_CharLowerBuffA_CharLowerBuffW_CharLowerW_CharNextA_CharNextExA_CharNextW_CharPrevA_CharPrevExA_CharPrevW_CharToOemA_CharToOemBuffA_CharToOemBuffW_CharToOemW_CharUpperA_CharUpperBuffA_CharUpperBuffW_CharUpperW_CheckDBCSEnabledExt_CheckDlgButton_CheckMenuItem_CheckMenuRadioItem_CheckProcessForClipboardAccess_CheckProcessSession_CheckRadioButton_CheckWindowThreadDesktop_ChildWindowFromPoint_ChildWindowFromPointEx_CliImmSetHotKey_ClientThreadSetup_ClientToScreen_ClipCursor_CloseClipboard_CloseDesktop_CloseGestureInfoHandle_CloseTouchInputHandle_CloseWindow_CloseWindowStation_ConsoleControl_ControlMagnification_CopyAcceleratorTableA_CopyAcceleratorTableW_CopyIcon_CopyImage_CopyRect_CountClipboardFormats_CreateAcceleratorTableA_CreateAcceleratorTableW_CreateCaret_CreateCursor_CreateDCompositionHwndTarget_CreateDesktopA_CreateDesktopExA_CreateDesktopExW_CreateDesktopW_CreateDialogIndirectParamA_CreateDialogIndirectParamAorW_CreateDialogIndirectParamW_CreateDialogParamA_CreateDialogParamW_CreateIcon_CreateIconFromResource_CreateIconFromResourceEx_CreateIconIndirect_CreateMDIWindowA_CreateMDIWindowW_CreateMenu_CreatePalmRejectionDelayZone_CreatePopupMenu_CreateSystemThreads_CreateWindowExA_CreateWindowExW_CreateWindowInBand_CreateWindowInBandEx_CreateWindowIndirect_CreateWindowStationA_CreateWindowStationW_CsrBroadcastSystemMessageExW_CtxInitUser32_DWMBindCursorToOutputConfig_DWMCommitInputSystemOutputConfig_DWMSetCursorOrientation_DWMSetInputSystemOutputConfig_DdeAbandonTransaction_DdeAccessData_DdeAddData_DdeClientTransaction_DdeCmpStringHandles_DdeConnect_DdeConnectList_DdeCreateDataHandle_DdeCreateStringHandleA_DdeCreateStringHandleW_DdeDisconnect_DdeDisconnectList_DdeEnableCallback_DdeFreeDataHandle_DdeFreeStringHandle_DdeGetData_DdeGetLastError_DdeGetQualityOfService_DdeImpersonateClient_DdeInitializeA_DdeInitializeW_DdeKeepStringHandle_DdeNameService_DdePostAdvise_DdeQueryConvInfo_DdeQueryNextServer_DdeQueryStringA_DdeQueryStringW_DdeReconnect_DdeSetQualityOfService_DdeSetUserHandle_DdeUnaccessData_DdeUninitialize_DefFrameProcA_DefFrameProcW_DefMDIChildProcA_DefMDIChildProcW_DefRawInputProc_DeferWindowPos_DeferWindowPosAndBand_DelegateInput_DeleteMenu_DeregisterShellHookWindow_DestroyAcceleratorTable_DestroyCaret_DestroyCursor_DestroyDCompositionHwndTarget_DestroyIcon_DestroyMenu_DestroyPalmRejectionDelayZone_DestroyReasons_DestroyWindow_DialogBoxIndirectParamA_DialogBoxIndirectParamAorW_DialogBoxIndirectParamW_DialogBoxParamA_DialogBoxParamW_DisableProcessWindowsGhosting_DispatchMessageA_DispatchMessageW_DisplayConfigGetDeviceInfo_DisplayConfigSetDeviceInfo_DisplayExitWindowsWarnings_DlgDirListA_DlgDirListComboBoxA_DlgDirListComboBoxW_DlgDirListW_DlgDirSelectComboBoxExA_DlgDirSelectComboBoxExW_DlgDirSelectExA_DlgDirSelectExW_DoSoundConnect_DoSoundDisconnect_DragDetect_DragObject_DrawAnimatedRects_DrawCaption_DrawCaptionTempA_DrawCaptionTempW_DrawEdge_DrawFocusRect_DrawFrame_DrawFrameControl_DrawIcon_DrawIconEx_DrawMenuBar_DrawMenuBarTemp_DrawStateA_DrawStateW_DrawTextA_DrawTextExA_DrawTextExW_DrawTextW_DwmGetDxRgn_DwmGetDxSharedSurface_DwmGetRemoteSessionOcclusionEvent_DwmGetRemoteSessionOcclusionState_DwmKernelShutdown_DwmKernelStartup_DwmLockScreenUpdates_DwmVal
call fcn.140096ee0
test eax, eax
je 0x14009728c
mov eax, 1
add rsp, 0x60
pop rbp
ret
xor eax, eax
add rsp, 0x60
pop rbp
ret