Function at 0x14008c430
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xa0
mov rax, qword [0x140160880]
xor rax, rsp
mov qword [rbp + 0x3f], rax
mov rdx, qword [0x1401a9810]
mov rsi, qword [0x1401ab130]
add rsi, rdx
lea r14, [rdx + 0x3d0]
movss xmm0, dword [rcx]
movss dword [rbp + 0xf], xmm0
movss xmm1, dword [rcx + 4]
movss dword [rbp + 0x13], xmm1
movss xmm0, dword [rcx + 8]
movss dword [rbp + 0x17], xmm0
call fcn.14008bfa0
test al, al
je 0x14008c941
xorps xmm0, xmm0
mov dword [rbp - 0x39], 0xaaaaaa43
mov byte [rbp - 0x35], 0xaa
movdqu xmmword [rbp + 0x27], xmm0
xor r15d, r15d
mov qword [rbp + 0x37], r15
lea edx, [r15 + 5]
lea rcx, [rbp + 0x27]
call fcn.1400b4630
mov rbx, qword [rbp + 0x27]
lea r8d, [r15 + 5]
lea rdx, [rbp - 0x39]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 5]
mov qword [rbp + 0x2f], rax
mov rdx, r14
sub rdx, rsi
sub rdx, 5
mov rcx, qword [rbp + 0x27]
movzx eax, dl
xor al, 0xaa
mov byte [rcx + 1], al
mov rcx, qword [rbp + 0x27]
mov eax, edx
shr eax, 8
xor al, 0xaa
mov byte [rcx + 2], al
mov rcx, qword [rbp + 0x27]
mov eax, edx
shr eax, 0x10
xor al, 0xaa
mov byte [rcx + 3], al
mov rax, qword [rbp + 0x27]
shr edx, 0x18
xor dl, 0xaa
mov byte [rax + 4], dl
mov r8, qword [rbp + 0x2f]
mov ecx, r15d
mov r9, qword [rbp + 0x27]
mov rdx, r8
sub rdx, r9
cmp r9, r8
cmova rdx, r15
mov rax, r9
test rdx, rdx
je 0x14008c5b3
cmp rdx, 0x40
jb 0x14008c5b3
and rdx, 0xffffffffffffffc0
movdqa xmm2, xmmword [0x140149860]
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rax]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax], xmm1
movdqu xmm0, xmmword [rax + 0x10]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax + 0x10], xmm1
movdqu xmm0, xmmword [rax + 0x20]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax + 0x20], xmm1
movdqu xmm0, xmmword [rax + 0x30]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax + 0x30], xmm1
add rax, 0x40
add rcx, 0x40
cmp rcx, rdx
jne 0x14008c560
mov r9, qword [rbp + 0x27]
cmp rax, r8
je 0x14008c5cf
nop dword [rax + rax]
xor byte [rax], 0xaa
inc rax
cmp rax, r8
jne 0x14008c5c0
mov r9, qword [rbp + 0x27]
xorps xmm0, xmm0
movdqu xmmword [rbp - 9], xmm0
mov qword [rbp + 7], r15
mov rdx, qword [rbp + 0x2f]
sub rdx, r9
je 0x14008c611
lea rcx, [rbp - 9]
call fcn.1400b4630
mov rdi, qword [rbp - 9]
mov rbx, qword [rbp + 0x2f]
mov rdx, qword [rbp + 0x27]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea r8, [rbx + rdi]
mov qword [rbp - 1], r8
jmp 0x14008c615
mov r8, qword [rbp - 1]
mov rdx, qword [rbp - 9]
sub r8, rdx
mov rcx, rsi
call fcn.14007e660
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x14008c662
mov rdx, qword [rbp + 7]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c65c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008c65c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401266ac
nop
mov rcx, qword [rbp + 0x27]
test rcx, rcx
je 0x14008c69f
mov rdx, qword [rbp + 0x37]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c69a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008c69a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401266ac
sub rsi, r14
sub rsi, 0x1c
xorps xmm0, xmm0
mov word [rbp - 0x31], 0x6deb
mov byte [rbp - 0x2f], 0xab
mov eax, dword [rbp + 0xf]
movzx ecx, al
xor cl, 0xaa
mov byte [rbp - 0x2e], cl
mov ecx, eax
shr ecx, 8
xor cl, 0xaa
mov byte [rbp - 0x2d], cl
mov ecx, eax
shr ecx, 0x10
xor cl, 0xaa
mov byte [rbp - 0x2c], cl
shr eax, 0x18
xor al, 0xaa
mov byte [rbp - 0x2b], al
mov dword [rbp - 0x2a], 0xaeeb6deb
mov eax, dword [rbp + 0x13]
movzx ecx, al
xor cl, 0xaa
mov byte [rbp - 0x26], cl
mov ecx, eax
shr ecx, 8
xor cl, 0xaa
mov byte [rbp - 0x25], cl
mov ecx, eax
shr ecx, 0x10
xor cl, 0xaa
mov byte [rbp - 0x24], cl
shr eax, 0x18
xor al, 0xaa
mov byte [rbp - 0x23], al
mov dword [rbp - 0x22], 0xa2eb6deb
mov eax, dword [rbp + 0x17]
movzx ecx, al
xor cl, 0xaa
mov byte [rbp - 0x1e], cl
mov ecx, eax
shr ecx, 8
xor cl, 0xaa
mov byte [rbp - 0x1d], cl
mov ecx, eax
shr ecx, 0x10
xor cl, 0xaa
mov byte [rbp - 0x1c], cl
shr eax, 0x18
xor al, 0xaa
mov byte [rbp - 0x1b], al
mov dword [rbp - 0x1a], 0xbaa5eb59
mov dword [rbp - 0x16], 0xaaaa43b3
mov word [rbp - 0x12], 0xaaaa
movdqu xmmword [rbp + 0x27], xmm0
mov qword [rbp + 0x37], r15
mov edx, reloc.WLDAP32.dll_Ordinal_33
lea rcx, [rbp + 0x27]
call fcn.1400b4630
mov rbx, qword [rbp + 0x27]
mov r8d, reloc.WLDAP32.dll_Ordinal_33
lea rdx, [rbp - 0x31]
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbx + 0x21]
mov qword [rbp + 0x2f], rax
mov rcx, qword [rbp + 0x27]
movzx eax, sil
xor al, 0xaa
mov byte [rcx + 0x1d], al
mov rcx, qword [rbp + 0x27]
mov eax, esi
shr eax, 8
xor al, 0xaa
mov byte [rcx + 0x1e], al
mov rcx, qword [rbp + 0x27]
mov eax, esi
shr eax, 0x10
xor al, 0xaa
mov byte [rcx + 0x1f], al
mov rax, qword [rbp + 0x27]
shr esi, 0x18
xor sil, 0xaa
mov byte [rax + 0x20], sil
mov r8, qword [rbp + 0x2f]
mov rcx, r15
mov r9, qword [rbp + 0x27]
mov rdx, r8
sub rdx, r9
cmp r9, r8
cmova rdx, r15
mov rax, r9
test rdx, rdx
je 0x14008c853
cmp rdx, 0x40
jb 0x14008c853
and rdx, 0xffffffffffffffc0
movdqa xmm2, xmmword [0x140149860]
nop dword [rax]
nop word [rax + rax]
movdqu xmm0, xmmword [rax]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax], xmm1
movdqu xmm0, xmmword [rax + 0x10]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax + 0x10], xmm1
movdqu xmm0, xmmword [rax + 0x20]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax + 0x20], xmm1
movdqu xmm0, xmmword [rax + 0x30]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax + 0x30], xmm1
add rax, 0x40
add rcx, 0x40
cmp rcx, rdx
jne 0x14008c800
mov r9, qword [rbp + 0x27]
cmp rax, r8
je 0x14008c86f
nop dword [rax + rax]
xor byte [rax], 0xaa
inc rax
cmp rax, r8
jne 0x14008c860
mov r9, qword [rbp + 0x27]
xorps xmm0, xmm0
movdqu xmmword [rbp - 9], xmm0
mov qword [rbp + 7], r15
mov rdx, qword [rbp + 0x2f]
sub rdx, r9
je 0x14008c8b1
lea rcx, [rbp - 9]
call fcn.1400b4630
mov rdi, qword [rbp - 9]
mov rbx, qword [rbp + 0x2f]
mov rdx, qword [rbp + 0x27]
sub rbx, rdx
mov r8, rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memmove
lea r8, [rdi + rbx]
mov qword [rbp - 1], r8
jmp 0x14008c8b5
mov r8, qword [rbp - 1]
mov rdx, qword [rbp - 9]
sub r8, rdx
mov rcx, r14
call fcn.14007e660
mov rcx, qword [rbp - 9]
test rcx, rcx
je 0x14008c902
mov rdx, qword [rbp + 7]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c8fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008c8fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401266ac
nop
mov rcx, qword [rbp + 0x27]
test rcx, rcx
je 0x14008c946
mov rdx, qword [rbp + 0x37]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14008c93a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14008c93a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1401266ac
jmp 0x14008c946
call fcn.14008c200
mov rcx, qword [rbp + 0x3f]
xor rcx, rsp
call fcn.1401263f0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov rsp, r11
pop r15
pop r14
pop rbp
ret