Function at 0x140031060
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
mov rbp, rsp
sub rsp, 0x50
movdqa xmm0, xmmword [0x1401b3ec0]
mov rdi, rcx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x8692919d
xor ecx, ecx
mov dword [rbp - 0x1c], 0xb5aa8696
mov word [rbp - 0x18], 0x100
nop word [rax + rax]
lea eax, [rcx - 0x21]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x18
jb 0x1400310a0
mov rsi, 0xffffffffffffffff
mov byte [rbp - 0x17], 0
mov rax, rsi
lea rcx, [rbp - 0x30]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400310c2
mov rbx, qword [rdi + 0x18]
mov rcx, rdi
mov r8, qword [rdi + 0x10]
cmp rbx, 0x10
jb 0x1400310df
mov rcx, qword [rdi]
mov qword [rsp + 0x78], r14
cmp r8, rax
jne 0x1400310fa
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400314ba
movdqa xmm0, xmmword [0x1401b3df0]
xor ecx, ecx
movdqa xmm1, xmmword [0x1401b3c20]
movdqu xmmword [rbp - 0x30], xmm0
mov word [rbp - 0x10], 0x100
movdqu xmmword [rbp - 0x20], xmm1
nop dword [rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x20
jb 0x140031120
mov r14, qword [rdi + 0x10]
lea rcx, [rbp - 0x30]
mov byte [rbp - 0xf], 0
mov rax, rsi
nop
inc rax
cmp byte [rcx + rax], 0
jne 0x140031140
mov rcx, rdi
cmp rbx, 0x10
jb 0x140031155
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14003116e
mov r8, r14
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400314ba
movdqa xmm0, xmmword [0x1401b3df0]
xor ecx, ecx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x55636970
mov dword [rbp - 0x1c], 0x676b7067
mov dword [rbp - 0x18], 0x4d5269
mov byte [rbp - 0x14], 1
nop word [rax + rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x1400311a0
mov byte [rbp - 0x14], 0
lea rcx, [rbp - 0x30]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400311c0
mov rcx, rdi
cmp rbx, 0x10
jb 0x1400311d5
mov rcx, qword [rdi]
cmp r14, rax
jne 0x1400311ee
mov r8, r14
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400314ba
movdqa xmm0, xmmword [0x1401b3c80]
xor ecx, ecx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x696f6b6d
mov dword [rbp - 0x1c], 0x6f65446f
mov dword [rbp - 0x18], 0x4d5269
mov byte [rbp - 0x14], 1
nop word [rax + rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x1b
jb 0x140031220
mov byte [rbp - 0x14], 0
lea rcx, [rbp - 0x30]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140031240
mov rcx, rdi
cmp rbx, 0x10
jb 0x140031255
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14003126e
mov r8, r14
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400314ba
movdqa xmm0, xmmword [0x1401b3c70]
xor ecx, ecx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x66634169
mov dword [rbp - 0x1c], 0x6a47617c
mov dword [rbp - 0x18], 0x50666e78
mov word [rbp - 0x14], 0x53
mov byte [rbp - 0x12], 1
nop dword [rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x1d
jb 0x1400312a0
mov byte [rbp - 0x12], 0
lea rcx, [rbp - 0x30]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400312c0
mov rcx, rdi
cmp rbx, 0x10
jb 0x1400312d5
mov rcx, qword [rdi]
cmp r14, rax
jne 0x1400312ee
mov r8, r14
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400314ba
movdqa xmm0, xmmword [0x1401b3d70]
xor ecx, ecx
movdqa xmm1, xmmword [0x1401b3db0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x10], 0x54492766
movdqu xmmword [rbp - 0x20], xmm1
mov word [rbp - 0xc], 0x100
nop word [rax + rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x24
jb 0x140031320
mov byte [rbp - 0xb], 0
lea rcx, [rbp - 0x30]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140031340
mov rcx, rdi
cmp rbx, 0x10
jb 0x140031355
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14003136e
mov r8, r14
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400314ba
movdqa xmm0, xmmword [0x1401b3d80]
xor ecx, ecx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x455a6b
mov byte [rbp - 0x1c], 1
nop dword [rax + rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x13
jb 0x140031390
mov byte [rbp - 0x1c], 0
lea rcx, [rbp - 0x30]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400313b0
mov rcx, rdi
cmp rbx, 0x10
jb 0x1400313c5
mov rcx, qword [rdi]
cmp r14, rax
jne 0x1400313de
mov r8, r14
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400314ba
movdqa xmm0, xmmword [0x1401b3dc0]
xor ecx, ecx
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x20], 0x587f716a
mov word [rbp - 0x1c], Ordinal_79
mov byte [rbp - 0x1a], 1
nop
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x15
jb 0x140031400
mov byte [rbp - 0x1a], 0
lea rcx, [rbp - 0x30]
mov rax, rsi
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x140031420
mov rcx, rdi
cmp rbx, 0x10
jb 0x140031435
mov rcx, qword [rdi]
cmp r14, rax
jne 0x14003144a
mov r8, r14
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x1400314ba
movdqa xmm0, xmmword [0x1401b3c70]
xor ecx, ecx
movdqa xmm1, xmmword [0x1401b36a0]
movdqu xmmword [rbp - 0x30], xmm0
mov dword [rbp - 0x10], 0x100564b
movdqu xmmword [rbp - 0x20], xmm1
nop dword [rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x30], al
inc rcx
cmp rcx, 0x22
jb 0x140031470
mov byte [rbp - 0xd], 0
lea rax, [rbp - 0x30]
nop dword [rax + rax]
inc rsi
cmp byte [rax + rsi], 0
jne 0x140031490
mov rcx, rdi
cmp rbx, 0x10
jb 0x1400314a5
mov rcx, qword [rdi]
cmp r14, rsi
jne 0x1400314f1
mov r8, r14
lea rdx, [rbp - 0x30]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400314f1
cmp rbx, 0x10
jb 0x1400314ed
mov rcx, qword [rdi]
lea rdx, [rbx + 1]
cmp rdx, 0x1000
jb 0x1400314e8
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003154e
mov rcx, r8
call fcn.14012eab4
mov al, 1
jmp 0x140031526
cmp rbx, 0x10
jb 0x140031524
mov rcx, qword [rdi]
lea rdx, [rbx + 1]
cmp rdx, 0x1000
jb 0x14003151f
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14003154e
mov rcx, r8
call fcn.14012eab4
xor al, al
mov r14, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x80]
mov byte [rdi], 0
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov qword [rdi + 0x10], 0
add rsp, 0x50
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3