Function at 0x140038aac
Capabilities:
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x47]
sub rsp, 0xb0
movups xmm0, xmmword [str.XRLJReKTPL___c6_5__it_9_nnwcS]
mov eax, dword [0x14044e670]
xor ebx, ebx
cmp byte [0x14044e675], bl
mov esi, 0x8d3dcb09
movups xmmword [rbp - 0x49], xmm0
mov r14b, 0x36
mov dword [rbp - 0x31], eax
movsd xmm0, qword [0x14044e668]
mov edi, 1
movzx eax, word [0x14044e674]
movsd qword [rbp - 0x39], xmm0
mov word [rbp - 0x2d], ax
je 0x140038b35
mov r8d, ebx
lea r9, [rbp - 0x49]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x1e
jl 0x140038b10
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.XRLJReUSJ]
mov eax, dword [0x14044fcd0]
lea r9, [rbp - 0x49]
mov dword [rbp - 0x31], eax
mov r8d, ebx
mov al, byte [0x14044fcd4]
movups xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x2d], al
movsd xmm0, qword [0x14044fcc8]
movsd qword [rbp - 0x39], xmm0
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x1d
jl 0x140038b70
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [0x140450880]
lea r9, [rbp - 0x49]
movups xmm0, xmmword [str.XRLJReUSJZ2__e_7_j9___po_8udihZ]
mov dword [rbp - 0x29], eax
mov r8d, ebx
movups xmm1, xmmword [0x140450870]
mov al, byte [0x140450884]
movups xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x25], al
movups xmmword [rbp - 0x39], xmm1
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x25
jl 0x140038bce
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [0x1404506b8]
lea r9, [rbp - 0x49]
movups xmm0, xmmword [str.XRLJReUSJZ2__e_7_]
mov dword [rbp - 0x29], eax
mov r8d, ebx
movups xmm1, xmmword [0x1404506a8]
mov al, byte [0x1404506bc]
movups xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x25], al
movups xmmword [rbp - 0x39], xmm1
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x25
jl 0x140038c2c
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.XRLJReUSJZ2__e2_8i8.__:on__tghqiY]
mov eax, dword [0x14044f918]
mov r8d, ebx
movups xmm1, xmmword [0x14044f908]
mov dword [rbp - 0x29], eax
lea r9, [rbp - 0x49]
movups xmmword [rbp - 0x49], xmm0
movups xmmword [rbp - 0x39], xmm1
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x24
jl 0x140038c81
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x14044ed6d], bl
movups xmm0, xmmword [0x14044ed50]
mov eax, dword [0x14044ed68]
mov dword [rbp - 0x31], eax
movzx eax, word [0x14044ed6c]
movups xmmword [rbp - 0x49], xmm0
mov word [rbp - 0x2d], ax
movsd xmm0, qword [0x14044ed60]
movsd qword [rbp - 0x39], xmm0
je 0x140038d10
mov r8d, ebx
lea r9, [rbp - 0x49]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x1e
jl 0x140038ceb
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x14044e16b], bl
movups xmm0, xmmword [0x14044e150]
mov eax, dword [str.piaQ]
mov dword [rbp - 0x31], eax
movups xmmword [rbp - 0x49], xmm0
movsd xmm0, qword [0x14044e160]
movsd qword [rbp - 0x39], xmm0
je 0x140038d6f
mov r8d, ebx
lea r9, [rbp - 0x49]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x1c
jl 0x140038d4a
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x14044ef08]
mov eax, dword [0x14044ef20]
lea r9, [rbp - 0x49]
mov dword [rbp - 0x31], eax
mov r8d, ebx
mov al, byte [0x14044ef24]
movups xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x2d], al
movsd xmm0, qword [0x14044ef18]
movsd qword [rbp - 0x39], xmm0
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x1d
jl 0x140038daa
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [0x14044eb60]
lea r9, [rbp - 0x49]
movups xmm0, xmmword [0x14044eb50]
mov dword [rbp - 0x39], eax
mov r8d, ebx
mov al, byte [0x14044eb64]
movups xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x35], al
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x15
jl 0x140038dfd
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x14044ed4d], bl
mov eax, dword [0x14044ed48]
movups xmm0, xmmword [str.XULJNZH]
mov dword [rbp - 0x39], eax
movzx eax, word [0x14044ed4c]
movups xmmword [rbp - 0x49], xmm0
mov word [rbp - 0x35], ax
je 0x140038e7f
mov r8d, ebx
lea r9, [rbp - 0x49]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x16
jl 0x140038e5a
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm0, xmmword [str.AZQZ]
lea r9, [rbp - 0x19]
movaps xmm1, xmmword [str._____9_.__7_t__2_z4__6]
mov r8d, ebx
mov al, byte [0x14044f8d0]
movaps xmmword [rbp - 0x19], xmm0
movaps xmm0, xmmword [0x14044f8a0]
movaps xmmword [rbp + 7], xmm0
movaps xmm0, xmmword [0x14044f8c0]
movaps xmmword [rbp - 9], xmm1
movaps xmm1, xmmword [0x14044f8b0]
movaps xmmword [rbp + 0x27], xmm0
movaps xmmword [rbp + 0x17], xmm1
mov byte [rbp + 0x37], al
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x51
jl 0x140038ed0
lea rcx, [rbp - 0x19]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movaps xmm0, xmmword [0x14044ef70]
lea r9, [rbp - 0x19]
movaps xmm1, xmmword [0x14044ef80]
mov r8d, ebx
movaps xmmword [rbp - 0x19], xmm0
movaps xmm0, xmmword [0x14044ef90]
movaps xmmword [rbp + 7], xmm0
movaps xmm0, xmmword [0x14044efb0]
movaps xmmword [rbp - 9], xmm1
movaps xmm1, xmmword [0x14044efa0]
movaps xmmword [rbp + 0x27], xmm0
movaps xmmword [rbp + 0x17], xmm1
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x50
jl 0x140038f3d
lea rcx, [rbp - 0x19]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [str.XRLJRe_YHY_34__g:_9.8mp__rajsgW]
movzx eax, word [0x14044fbd0]
mov r8d, ebx
movups xmm1, xmmword [0x14044fbc0]
mov word [rbp - 0x29], ax
lea r9, [rbp - 0x49]
movups xmmword [rbp - 0x49], xmm0
movups xmmword [rbp - 0x39], xmm1
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x22
jl 0x140038f94
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x14044f6c8]
mov eax, dword [0x14044f6e0]
lea r9, [rbp - 0x49]
mov dword [rbp - 0x31], eax
mov r8d, ebx
movzx eax, word [0x14044f6e4]
movups xmmword [rbp - 0x49], xmm0
mov word [rbp - 0x2d], ax
movsd xmm0, qword [0x14044f6d8]
mov al, byte [0x14044f6e6]
movsd qword [rbp - 0x39], xmm0
mov byte [rbp - 0x2b], al
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x1f
jl 0x140038fff
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [0x14044e16b], bl
movups xmm0, xmmword [0x14044e150]
mov eax, dword [str.piaQ]
mov dword [rbp - 0x31], eax
movups xmmword [rbp - 0x49], xmm0
movsd xmm0, qword [0x14044e160]
movsd qword [rbp - 0x39], xmm0
je 0x140039083
mov r8d, ebx
lea r9, [rbp - 0x49]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x1c
jl 0x14003905e
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
cmp byte [reloc.WLDAP32.dll_Ordinal_79], bl
movups xmm0, xmmword [str._G_VT_UZ]
movzx eax, word [0x140450410]
mov word [rbp - 0x31], ax
movups xmmword [rbp - 0x49], xmm0
movsd xmm0, qword [0x140450408]
movsd qword [rbp - 0x39], xmm0
je 0x1400390e4
mov r8d, ebx
lea r9, [rbp - 0x49]
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x1a
jl 0x1400390bf
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
movups xmm0, xmmword [0x14044ef08]
mov eax, dword [0x14044ef20]
lea r9, [rbp - 0x49]
mov dword [rbp - 0x31], eax
mov r8d, ebx
mov al, byte [0x14044ef24]
movups xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x2d], al
movsd xmm0, qword [0x14044ef18]
movsd qword [rbp - 0x39], xmm0
mov eax, esi
mul r8d
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, r8b
add r8d, edi
sub al, cl
add al, r14b
xor byte [r9], al
add r9, rdi
cmp r8d, 0x1d
jl 0x14003911f
lea rcx, [rbp - 0x49]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov eax, dword [0x14044fbd4]
lea r8, [rbp + 0x67]
mov dword [rbp + 0x67], eax
movzx eax, word [0x14044fbd8]
mov word [rbp + 0x6b], ax
mov al, byte [reloc.WLDAP32.dll_Ordinal_60]
mov byte [rbp + 0x6d], al
mov eax, esi
mul ebx
shr edx, 5
movsx eax, dl
imul ecx, eax, 0x3a
mov al, bl
add ebx, edi
sub al, cl
add al, r14b
xor byte [r8], al
add r8, rdi
cmp ebx, 7
jl 0x14003916f
lea rcx, [rbp + 0x67]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret