Function at 0x1400702e0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rsi
push r12
lea rbp, [rsp - 0x47]
sub rsp, 0x100
mov r12, r8
mov rsi, rdx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, eax
lea rdx, [rbp + 0x7f]
call qword [sym.imp.KERNEL32.dll_ProcessIdToSessionId]
test eax, eax
je 0x140070df5
mov qword [rsp + 0x128], rbx
lea rdx, str.Session_ID:
lea rcx, [0x140124000]
mov qword [rsp + 0x130], rdi
call fcn.14000cfc0
mov edx, dword [rbp + 0x7f]
mov rcx, rax
call fcn.1400099c0
mov rcx, rax
call fcn.14000d230
xor eax, eax
mov dword [rbp - 0x46], 0x94939291
xor ebx, ebx
mov byte [rbp - 0x42], al
mov edx, ebx
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x46]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 4
jb 0x140070360
mov byte [rbp - 0x42], bl
mov edx, ebx
mov dword [rbp - 0x4c], 0x948e9ec7
mov word [rbp - 0x48], 0x99
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 5
jb 0x140070390
lea r9, [rbp + 0x67]
mov byte [rbp - 0x47], bl
mov r8, rsi
mov dword [rbp + 0x67], ebx
lea rdx, [rbp - 0x4c]
mov rcx, 0xffffffffffffffff
call fcn.140072bd0
mov r8d, dword [rbp + 0x67]
lea rcx, [rbp - 0x46]
mov qword [rsp + 0x20], rcx
lea r9, [0x1400bd2e8]
mov rcx, 0xffffffffffffffff
mov rdx, rax
call fcn.1400728e0
movdqa xmm0, xmmword [0x1400be140]
mov rdi, rax
movdqa xmm1, xmmword [0x1400bdde0]
xor eax, eax
mov byte [rbp - 0x5f], al
mov edx, ebx
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rbp - 0x69], 0x3c2b3067
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x65], 0x7c632b75
mov word [rbp - 0x61], 0x1849
nop
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 0x2a
jb 0x140070420
mov rdx, rdi
mov byte [rbp - 0x5f], bl
lea rcx, [rsp + 0x30]
call fcn.14006fb10
test rdi, rdi
jne 0x1400704bc
movdqa xmm0, xmmword [0x1400be150]
xor eax, eax
movdqa xmm1, xmmword [0x1400bdde0]
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rbp - 0x5d], al
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x69], 0x63652a67
mov dword [rbp - 0x65], 0x7f692e79
mov dword [rbp - 0x61], 0x1e777c64
nop dword [rax]
nop word [rax + rax]
movsxd rax, ebx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rbx - 0x17]
inc ebx
xor byte [rcx], al
cmp ebx, 0x2c
jb 0x140070490
lea rcx, [rsp + 0x30]
mov byte [rbp - 0x5d], 0
call fcn.14006fb10
xor eax, eax
jmp 0x140070ca7
movdqa xmm0, xmmword [0x1400bdfc0]
mov edx, ebx
movdqu xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0xf0], r15
mov word [rbp - 0x79], 0x81
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 0x11
jb 0x1400704e0
mov byte [rbp - 0x78], bl
mov edx, ebx
mov dword [rbp - 0x4c], 0x948e9ec7
mov word [rbp - 0x48], 0x99
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x4c]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 5
jb 0x140070510
lea r9, [rbp + 0x67]
mov byte [rbp - 0x47], bl
mov r8, rsi
mov dword [rbp + 0x67], ebx
lea rdx, [rbp - 0x4c]
mov rcx, 0xffffffffffffffff
call fcn.140072bd0
mov r8d, dword [rbp + 0x67]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x20], rcx
lea r9, [0x1400bd2f0]
mov rcx, 0xffffffffffffffff
mov rdx, rax
call fcn.1400728e0
movdqa xmm0, xmmword [0x1400be0a0]
mov r15, rax
xor eax, eax
mov dword [rbp - 0x79], 0xccdbc08a
mov byte [rbp - 0x6f], al
mov edx, ebx
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rbp - 0x75], 0x6c93db85
mov word [rbp - 0x71], 0x859
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 0x1a
jb 0x1400705a0
mov rdx, r15
mov byte [rbp - 0x6f], bl
lea rcx, [rsp + 0x30]
call fcn.14006fb10
test r15, r15
jne 0x14007062c
movdqa xmm0, xmmword [0x1400be0b0]
xor eax, eax
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rbp - 0x6d], al
mov dword [rbp - 0x79], 0x9395da8a
mov dword [rbp - 0x75], 0x6f99de89
mov dword [rbp - 0x71], 0xe676c74
nop dword [rax]
nop dword [rax + rax]
movsxd rax, ebx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rbx - 0x17]
inc ebx
xor byte [rcx], al
cmp ebx, 0x1c
jb 0x140070600
lea rcx, [rsp + 0x30]
mov byte [rbp - 0x6d], 0
call fcn.14006fb10
xor eax, eax
jmp 0x140070c9f
mov dword [rbp + 0x67], 0x939291
mov edx, ebx
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x67]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 3
jb 0x140070640
lea rax, [rbp + 0x67]
mov byte [rbp + 0x6a], bl
lea r9, [0x1400bd304]
mov qword [rsp + 0x20], rax
mov r8d, 0x100
lea rdx, [rdi + 0x12]
mov rcx, 0xffffffffffffffff
call fcn.1400728e0
movdqa xmm0, xmmword [0x1400be280]
mov rdi, rax
movdqa xmm1, xmmword [0x1400bd750]
xor eax, eax
mov byte [rbp - 0x69], al
mov edx, ebx
movdqu xmmword [rsp + 0x30], xmm0
movdqu xmmword [rbp - 0x79], xmm1
nop dword [rax]
nop dword [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x17]
inc edx
xor byte [rsp + rcx + 0x30], al
cmp edx, 0x20
jb 0x1400706b0
mov rdx, rdi
mov byte [rbp - 0x69], bl
lea rcx, [rsp + 0x30]
call fcn.14006fb10
test rdi, rdi
jne 0x14007072c
movdqa xmm0, xmmword [0x1400be170]
movdqa xmm1, xmmword [0x1400bddf0]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rbp - 0x69], 0x63675965
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x65], 0x57d79
nop
movsxd rax, ebx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rbx - 0x17]
inc ebx
xor byte [rcx], al
cmp ebx, 0x27
jb 0x140070700
lea rcx, [rsp + 0x30]
mov byte [rbp - 0x62], 0
call fcn.14006fb10
xor eax, eax
jmp 0x140070c9f
mov r9d, 7
mov qword [rsp + 0xf8], r14
mov rdx, rdi
mov rcx, 0xffffffffffffffff
lea r8d, [r9 - 4]
call fcn.140072800
movdqa xmm0, xmmword [0x1400be280]
mov rsi, rax
movdqa xmm1, xmmword [0x1400bd750]
xor eax, eax
mov byte [rbp - 0x69], al
mov edx, ebx
movdqu xmmword [rsp + 0x30], xmm0
movdqu xmmword [rbp - 0x79], xmm1
nop dword [rax]
nop word [rax + rax]
movsxd rcx, edx
lea eax, [rdx - 0x17]
inc edx
xor byte [rsp + rcx + 0x30], al
cmp edx, 0x20
jb 0x140070780
mov rdx, rsi
mov byte [rbp - 0x69], bl
lea rcx, [rsp + 0x30]
call fcn.14006fb10
lea r14, [rbp - 0x39]
mov qword [rbp - 0x39], rbx
sub r14, rsi
mov rdi, rsi
nop
lea r8, [r14 + rdi]
mov rdx, rdi
lea rcx, [0x140125af0]
call fcn.1400773e0
test al, al
je 0x140070da5
inc rdi
mov rax, rdi
sub rax, rsi
cmp rax, 8
jb 0x1400707b0
movdqa xmm0, xmmword [0x1400be290]
xor eax, eax
movdqa xmm1, xmmword [0x1400bd880]
mov edx, ebx
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rbp - 0x61], al
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x69], 0x29733a29
mov dword [rbp - 0x65], 0x1a576261
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 0x28
jb 0x140070810
mov rdx, qword [rbp - 0x39]
lea rcx, [rsp + 0x30]
mov byte [rbp - 0x61], bl
call fcn.14006fb10
mov ecx, dword [rbp + 0x7f]
lea r14, [rbp - 0x31]
mov rax, qword [rbp - 0x39]
dec ecx
mov qword [rbp - 0x31], rbx
lea rsi, [rax + rcx*8]
mov rdi, rsi
sub r14, rsi
nop dword [rax]
nop word [rax + rax]
lea r8, [r14 + rdi]
mov rdx, rdi
lea rcx, [0x140125af0]
call fcn.1400773e0
test al, al
je 0x140070d55
inc rdi
mov rax, rdi
sub rax, rsi
cmp rax, 8
jb 0x140070860
movdqa xmm0, xmmword [0x1400be1b0]
mov edx, ebx
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rbp - 0x79], 0xf1a295
nop dword [rax]
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 0x13
jb 0x1400708b0
mov rdx, qword [rbp - 0x31]
lea rcx, [rsp + 0x30]
mov byte [rbp - 0x76], bl
call fcn.14006fb10
xorps xmm0, xmm0
lea rsi, [rbp - 0x19]
movups xmmword [rbp - 0x19], xmm0
mov rdi, r15
sub rsi, r15
movups xmmword [rbp - 9], xmm0
movups xmmword [rbp + 7], xmm0
movups xmmword [rbp + 0x17], xmm0
movups xmmword [rbp + 0x27], xmm0
nop dword [rax]
lea r8, [rsi + rdi]
mov rdx, rdi
lea rcx, [0x140125af0]
call fcn.1400773e0
test al, al
je 0x140070d0c
inc rdi
mov rax, rdi
sub rax, r15
cmp rax, 0x50
jb 0x140070900
movdqa xmm0, xmmword [0x1400be090]
mov edx, ebx
mov edi, dword [rbp - 0x16]
mov r15d, dword [rbp - 0xf]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rbp - 0x79], 0x84cbdac3
mov dword [rbp - 0x75], 0x589392d8
mov word [rbp - 0x71], 0xb
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 0x19
jb 0x140070960
mov edx, edi
mov byte [rbp - 0x70], bl
lea rcx, [rsp + 0x30]
call fcn.14006fb10
movdqa xmm0, xmmword [0x1400be2d0]
xor eax, eax
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rbp - 0x6f], al
mov edx, ebx
mov dword [rbp - 0x79], 0xccdbc08d
mov dword [rbp - 0x75], 0x6c93db85
mov word [rbp - 0x71], 0x859
nop
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 0x1a
jb 0x1400709b0
mov edx, r15d
mov byte [rbp - 0x6f], bl
lea rcx, [rsp + 0x30]
call fcn.14006fb10
mov rsi, rdi
mov qword [rbp - 0x29], rbx
add rsi, qword [rbp - 0x31]
lea r14, [rbp - 0x29]
mov rdi, rsi
sub r14, rsi
nop dword [rax]
lea r8, [r14 + rdi]
mov rdx, rdi
lea rcx, [0x140125af0]
call fcn.1400773e0
test al, al
je 0x140070cc3
inc rdi
mov rax, rdi
sub rax, rsi
cmp rax, 8
jb 0x1400709f0
movdqa xmm0, xmmword [0x1400be5a0]
xor eax, eax
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rbp - 0x75], al
mov edx, ebx
mov dword [rbp - 0x79], 0xf6a39695
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 0x14
jb 0x140070a40
mov rdx, qword [rbp - 0x29]
lea rcx, [rsp + 0x30]
mov byte [rbp - 0x75], bl
call fcn.14006fb10
mov rsi, r15
mov qword [rbp - 0x41], rbx
add rsi, qword [rbp - 0x29]
lea r14, [rbp - 0x41]
mov rdi, rsi
sub r14, rsi
nop dword [rax]
lea r8, [r14 + rdi]
mov rdx, rdi
lea rcx, [0x140125af0]
call fcn.1400773e0
test al, al
je 0x140070c42
inc rdi
mov rax, rdi
sub rax, rsi
cmp rax, 8
jb 0x140070a80
movdqa xmm0, xmmword [0x1400be590]
xor eax, eax
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rbp - 0x75], al
mov edx, ebx
mov dword [rbp - 0x79], 0xf6a39695
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rdx - 0x17]
inc edx
xor byte [rcx], al
cmp edx, 0x14
jb 0x140070ad0
mov rdx, qword [rbp - 0x41]
lea rcx, [rsp + 0x30]
mov byte [rbp - 0x75], bl
call fcn.14006fb10
mov ecx, 0x1000
call fcn.140089cbc
mov r14, qword [rbp - 0x41]
mov rsi, rax
mov rdi, rbx
nop dword [rax]
lea r8, [rdi + rsi]
lea rdx, [rdi + r14]
lea rcx, [0x140125af0]
call fcn.1400773e0
test al, al
je 0x140070bfc
inc rdi
cmp rdi, 0x1000
jb 0x140070b10
mov rax, rbx
nop dword [rax + rax]
mov rcx, qword [rsi + rax*8]
test rcx, rcx
je 0x140070b4e
cmp rcx, r12
je 0x140070b66
inc rax
cmp rax, 0x200
jb 0x140070b40
mov rcx, rsi
call fcn.140088eac
jmp 0x140070c95
movdqa xmm0, xmmword [0x1400be030]
lea rdi, [rax*8]
mov rdx, qword [rbp - 0x41]
movdqa xmm1, xmmword [0x1400bde80]
add rdx, rdi
movdqu xmmword [rsp + 0x30], xmm0
xor eax, eax
mov dword [rbp - 0x59], 0x687e697f
movdqa xmm0, xmmword [0x1400bdf60]
mov byte [rbp - 0x4d], al
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x55], 0x5672e3d
movdqu xmmword [rbp - 0x69], xmm0
mov dword [rbp - 0x51], 0x2e7b4e4d
nop word [rax + rax]
movsxd rax, ebx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rbx - 0x17]
inc ebx
xor byte [rcx], al
cmp ebx, 0x3c
jb 0x140070bc0
mov r8, rdi
mov byte [rbp - 0x4d], 0
lea rcx, [rsp + 0x30]
call fcn.14006fb10
mov rcx, rsi
call fcn.140088eac
mov rax, qword [rbp - 0x41]
add rax, rdi
jmp 0x140070c97
movdqa xmm0, xmmword [0x1400be2f0]
movdqa xmm1, xmmword [0x1400bd690]
movdqu xmmword [rsp + 0x30], xmm0
movdqu xmmword [rbp - 0x79], xmm1
nop word [rax + rax]
movsxd rax, ebx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rbx - 0x17]
inc ebx
xor byte [rcx], al
cmp ebx, 0x1f
jb 0x140070c20
mov byte [rbp - 0x6a], 0
lea rcx, [rsp + 0x30]
jmp 0x140070c90
movdqa xmm0, xmmword [0x1400be2f0]
xor eax, eax
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rbp - 0x6f], al
mov dword [rbp - 0x79], 0x88db9e98
mov dword [rbp - 0x75], 0x65939c9c
mov word [rbp - 0x71], 0x832
nop dword [rax]
movsxd rax, ebx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rbx - 0x17]
inc ebx
xor byte [rcx], al
cmp ebx, 0x1a
jb 0x140070c70
mov byte [rbp - 0x6f], 0
lea rcx, [rsp + 0x30]
call fcn.14006fb10
xor eax, eax
mov r14, qword [rsp + 0xf8]
mov r15, qword [rsp + 0xf0]
mov rbx, qword [rsp + 0x128]
mov rdi, qword [rsp + 0x130]
add rsp, 0x100
pop r12
pop rsi
pop rbp
ret
movdqa xmm0, xmmword [0x1400be2f0]
xor eax, eax
movdqu xmmword [rsp + 0x30], xmm0
mov byte [rbp - 0x6f], al
mov dword [rbp - 0x79], 0x88db9e98
mov dword [rbp - 0x75], 0x65939c9c
mov word [rbp - 0x71], 0x833
nop word [rax + rax]
movsxd rax, ebx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rbx - 0x17]
inc ebx
xor byte [rcx], al
cmp ebx, 0x1a
jb 0x140070cf0
jmp 0x140070c87
movdqa xmm0, xmmword [0x1400be2f0]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rbp - 0x79], 0x88db9e98
mov dword [rbp - 0x75], 0x65939c9c
mov word [rbp - 0x71], 0xb
nop
movsxd rax, ebx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rbx - 0x17]
inc ebx
xor byte [rcx], al
cmp ebx, 0x19
jb 0x140070d30
mov byte [rbp - 0x70], 0
lea rcx, [rsp + 0x30]
jmp 0x140070c90
movdqa xmm0, xmmword [0x1400be2f0]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rbp - 0x79], 0x88db9e98
mov dword [rbp - 0x75], 0x65939c9c
mov word [rbp - 0x71], 0xb
nop word [rax + rax]
movsxd rax, ebx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rbx - 0x17]
inc ebx
xor byte [rcx], al
cmp ebx, 0x19
jb 0x140070d80
mov byte [rbp - 0x70], 0
lea rcx, [rsp + 0x30]
jmp 0x140070c90
movdqa xmm0, xmmword [0x1400be2f0]
movdqa xmm1, xmmword [0x1400bde00]
movdqu xmmword [rsp + 0x30], xmm0
mov dword [rbp - 0x69], 0x63675965
movdqu xmmword [rbp - 0x79], xmm1
mov dword [rbp - 0x65], 0x57d79
nop
movsxd rax, ebx
lea rcx, [rsp + 0x30]
add rcx, rax
lea eax, [rbx - 0x17]
inc ebx
xor byte [rcx], al
cmp ebx, 0x27
jb 0x140070dd0
mov byte [rbp - 0x62], 0
lea rcx, [rsp + 0x30]
jmp 0x140070c90
xor eax, eax
add rsp, 0x100
pop r12
pop rsi
pop rbp
ret