Function at 0x140551eb0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xf0]
sub rsp, 0x1f0
mov rax, qword [0x1406dc5c0]
xor rax, rsp
mov qword [rbp + 0xe0], rax
cmp byte [0x1406ddf26], 0
jne 0x140551eff
mov byte [0x1406ddf26], 1
mov byte [0x1406ddf27], 1
mov rbx, qword [0x1406ddb60]
lea rdx, [rbx + 0x120]
cmp qword [rdx + 0x18], 0x10
jb 0x140551f17
mov rdx, qword [rdx]
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowA]
xor edi, edi
movabs r15, 0x7fffffffffffffff
test rax, rax
jne 0x140552106
mov byte [rbx + 0x170], dil
mov rax, qword gs:[0x58]
mov rdi, qword [rax]
mov ecx, 0x338
mov eax, dword [rcx + rdi]
mov ebx, 0x270
test al, 1
jne 0x140551f79
or eax, 1
mov dword [rcx + rdi], eax
mov dword [rdi + rbx + 2], 0x1758bee
mov word [rdi + rbx], 0x9b93
lea rcx, [0x140642bc0]
call fcn.14063c804
nop
lea rdx, [rdi + rbx]
cmp byte [rdx + 5], 0
je 0x140551f9a
xor byte [rdx], 0xa3
xor byte [rdx + 1], 0xe3
xor byte [rdx + 2], 0xdd
xor byte [rdx + 3], 0xa7
xor byte [rdx + 4], 0x75
mov byte [rdx + 5], 0
xor r14d, r14d
mov qword [rbp - 0x58], r14
movdqa xmm0, xmmword [0x1406c10d0]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], r14b
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x140551fc0
lea rcx, [rbp - 0x58]
call fcn.14054ed20
nop
mov qword [rsp + 0x68], r14
movdqa xmm0, xmmword [0x1406c10d0]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Game_is_not_Running
lea rcx, [rsp + 0x68]
call fcn.14054ed20
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x78]
call fcn.14055f830
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x140552021
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140557910
nop
lea rcx, [rbp - 0x78]
call fcn.14054ecc0
nop
lea rcx, [rsp + 0x68]
call fcn.14054ecc0
mov qword [rsp + 0x68], r14
mov qword [rsp + 0x78], r14
mov qword [rbp - 0x80], r14
mov rdi, qword [rbp - 0x48]
lea rsi, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae rsi, qword [rbp - 0x58]
cmp rdi, 0x10
jae 0x140552077
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x68], xmm0
mov ebx, reloc.WS2_32.dll_ntohs
jmp 0x1405520e7
mov rbx, rdi
or rbx, 0xf
cmp rbx, r15
cmova rbx, r15
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1405520c4
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140552917
mov rcx, rax
call fcn.14063c358
mov rcx, rax
test rax, rax
je 0x1405520bd
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1405520d3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1405520d0
call fcn.14063c358
jmp 0x1405520d3
mov rax, r14
mov qword [rsp + 0x68], rax
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], rbx
lea rcx, [rsp + 0x68]
call fcn.140562ba0
nop
lea rcx, [rbp - 0x58]
call fcn.14054ecc0
xor edi, edi
mov qword [rsp + 0x68], rdi
movdqa xmm0, xmmword [0x1406c10d0]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], 0
mov r8d, 7
lea rdx, str.DUN.log
lea rcx, [rsp + 0x68]
call fcn.14054ed20
nop
lea rcx, [rsp + 0x68]
call fcn.14055a330
movzx ebx, al
lea rcx, [rsp + 0x68]
call fcn.14054ecc0
lea rsi, [0x1406ddec0]
test bl, bl
jne 0x140552233
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp - 0x30]
call fcn.14063d484
mov qword [rsp + 0x68], rdi
movdqa xmm0, xmmword [0x1406c10d0]
movdqu xmmword [rsp + 0x78], xmm0
mov byte [rsp + 0x68], bl
mov r8d, 7
lea rdx, str.DUN.log
lea rcx, [rsp + 0x68]
call fcn.14054ed20
nop
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x30]
call fcn.1405595f0
nop
lea rcx, [rsp + 0x68]
call fcn.14054ecc0
mov qword [rbp - 0x58], rdi
movdqa xmm0, xmmword [0x1406c10d0]
movdqu xmmword [rbp - 0x48], xmm0
mov byte [rbp - 0x58], bl
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rsi + r8], 0
jne 0x1405521d0
mov rdx, rsi
lea rcx, [rbp - 0x58]
call fcn.14054ed20
nop
lea rdx, [rbp - 0x58]
lea rcx, [rbp - 0x30]
call fcn.140559ee0
nop
lea rcx, [rbp - 0x58]
call fcn.14054ecc0
nop
lea rcx, [rbp - 0x28]
call fcn.14055bb30
test rax, rax
jne 0x140552229
mov rax, qword [rbp - 0x30]
movsxd rcx, dword [rax + 4]
lea rax, [rbp - 0x30]
add rcx, rax
xor r8d, r8d
lea edx, [r8 + 2]
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
lea rcx, [rbp - 0x30]
call fcn.140559990
nop
mov rax, qword gs:[0x58]
mov r12, qword [rax]
mov esi, 0x3e8
add rsi, r12
mov r13d, 0x45c
mov r15d, 0x2b8
add r15, r12
mov ebx, 0x2f8
add rbx, r12
mov r14d, 0x280
add r14, r12
nop word [rax + rax]
inc qword [0x1406dd830]
call fcn.140552920
cmp byte [rax + 0x71], 0
je 0x1405522b7
mov r9, rdi
movabs r13, 0x497d33bdcfd95f7b
nop
movzx ecx, r9b
and cl, 7
shl cl, 3
mov r8, r13
shr r8, cl
xor byte [r9 + rax], r8b
inc r9
cmp r9, 0x71
jb 0x140552290
mov r13d, 0x45c
mov byte [rax + 0x71], 0
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x68], 0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1405522d5
mov rdx, rax
lea rcx, [rsp + 0x68]
call fcn.14054ed20
nop
movdqa xmm0, xmmword [0x1406c1d70]
mov word [rbp - 0x68], 0x4d73
mov eax, 0x464
mov ecx, eax
mov eax, dword [rax + r12]
mov edx, 0x308
mov edi, edx
test al, 1
jne 0x14055235b
or eax, 1
mov dword [rcx + r12], eax
lea rcx, [r12 + rdx]
mov byte [rcx + 0x12], 1
lea rax, [rcx + 0x11]
lea rdx, [rbp - 0x67]
cmp rcx, rdx
ja 0x140552343
lea rdx, [rbp - 0x78]
cmp rax, rdx
jb 0x140552343
movups xmmword [rcx], xmm0
movzx eax, word [rbp - 0x68]
mov word [rcx + 0x10], ax
jmp 0x14055234e
movups xmmword [rcx], xmm0
movzx eax, word [rbp - 0x68]
mov word [rcx + 0x10], ax
lea rcx, [0x140642b60]
call fcn.14063c804
nop
lea r9, [r12 + rdi]
cmp byte [r9 + 0x12], 0
je 0x1405523a7
xor edx, edx
movabs r13, 0x2d73c39735cf4d01
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r13
shr rax, cl
xor byte [rdx + r9], al
inc rdx
cmp rdx, 0x12
jb 0x140552380
mov r13d, 0x45c
mov byte [r9 + 0x12], 0
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [r9 + r8], 0
jne 0x1405523b0
mov rdx, r9
lea rcx, [rsp + 0x68]
call fcn.140557910
lea rdx, [rsp + 0x68]
cmp qword [rbp - 0x80], 0x10
cmovae rdx, qword [rsp + 0x68]
lea rcx, [rsp + 0x48]
call fcn.14055fae0
nop
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.14055f830
nop
lea rcx, [rsp + 0x48]
call fcn.14054ecc0
movdqa xmm0, xmmword [0x1406c28a0]
mov dword [rbp - 0x68], 0x3d10426f
mov word [rbp - 0x64], 0x47b0
mov eax, 0x2dc
mov ecx, eax
mov eax, dword [rax + r12]
test al, 1
jne 0x140552477
or eax, 1
mov dword [rcx + r12], eax
mov ecx, 0x320
add rcx, r12
mov byte [rcx + 0x16], 1
lea rax, [rcx + 0x15]
lea rdx, [rbp - 0x63]
cmp rcx, rdx
ja 0x140552459
lea rdx, [rbp - 0x78]
cmp rax, rdx
jb 0x140552459
movups xmmword [rcx], xmm0
mov eax, dword [rbp - 0x68]
mov dword [rcx + 0x10], eax
movzx eax, word [rbp - 0x64]
mov word [rcx + 0x14], ax
jmp 0x14055246a
movups xmmword [rcx], xmm0
mov eax, dword [rbp - 0x68]
mov dword [rcx + 0x10], eax
movzx eax, word [rbp - 0x64]
mov word [rcx + 0x14], ax
lea rcx, [0x140642b30]
call fcn.14063c804
nop
mov r9d, 0x320
add r9, r12
cmp byte [r9 + 0x16], 0
je 0x1405524c7
xor edx, edx
movabs r13, 0x937747c349753109
nop dword [rax]
nop word [rax + rax]
movzx ecx, dl
and cl, 7
shl cl, 3
mov rax, r13
shr rax, cl
xor byte [rdx + r9], al
inc rdx
cmp rdx, 0x16
jb 0x1405524a0
mov r13d, 0x45c
mov byte [r9 + 0x16], 0
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [r9 + r8], 0
jne 0x1405524d0
mov rdx, r9
lea rcx, [rbp - 0x58]
call fcn.140557910
mov ecx, 0x2c4
mov eax, dword [r12 + rcx]
test al, 1
jne 0x140552514
or eax, 1
mov dword [r12 + rcx], eax
mov dword [rsi + 4], 0x12b80ab
mov dword [rsi], 0xb4fe16e1
lea rcx, [0x140642b00]
call fcn.14063c804
nop
cmp byte [rsi + 7], 0
je 0x140552539
xor byte [rsi], 0xc7
xor byte [rsi + 1], 0x63
xor byte [rsi + 2], 0x8b
xor byte [rsi + 3], 0xdd
xor byte [rsi + 4], 0xcf
xor byte [rsi + 5], 0xbd
xor byte [rsi + 6], 0x2b
mov byte [rsi + 7], 0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rsi + r8], 0
jne 0x140552540
mov rdx, rsi
lea rcx, [rbp - 0x58]
call fcn.140557910
lea rcx, [rsp + 0x28]
call fcn.14054f8d0
nop
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.14055f830
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14055257c
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140557910
nop
lea rcx, [rbp - 0x78]
call fcn.14054ecc0
nop
lea rcx, [rsp + 0x28]
call fcn.14054ecc0
mov eax, dword [r12 + r13]
test al, 1
jne 0x1405525cc
or eax, 1
mov dword [r12 + r13], eax
mov word [r15 + 5], 0x14d
mov dword [r15], 0xe086fae3
mov byte [r15 + 4], 0x3e
lea rcx, [0x140642ae0]
call fcn.14063c804
nop
cmp byte [r15 + 6], 0
je 0x1405525f5
xor byte [r15], 0xc5
xor byte [r15 + 1], 0x97
xor byte [r15 + 2], 0xe7
xor byte [r15 + 3], 0x83
xor byte [r15 + 4], 3
xor byte [r15 + 5], 0x4d
mov byte [r15 + 6], 0
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [r15 + r8], 0
jne 0x140552600
mov rdx, r15
lea rcx, [rbp - 0x58]
call fcn.140557910
lea rcx, [rbp - 0x78]
call fcn.14054fb70
nop
mov rdx, rax
lea rcx, [rsp + 0x28]
call fcn.14055f830
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14055263c
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140557910
nop
lea rcx, [rsp + 0x28]
call fcn.14054ecc0
nop
lea rcx, [rbp - 0x78]
call fcn.14054ecc0
mov ecx, 0x418
mov eax, dword [rcx + r12]
test al, 1
jne 0x140552695
or eax, 1
mov dword [rcx + r12], eax
mov word [rbx + 9], 0x197
mov dword [rbx], 0x73dee183
mov dword [rbx + 4], 0x5bf8ce4c
mov byte [rbx + 8], 0x98
lea rcx, [0x140642ac0]
call fcn.14063c804
nop
cmp byte [rbx + 0xa], 0
je 0x1405526c6
xor byte [rbx], 0xa5
xor byte [rbx + 1], 0x97
xor byte [rbx + 2], 0xbb
xor byte [rbx + 3], 1
xor byte [rbx + 4], 0x3f
xor byte [rbx + 5], 0xa7
xor byte [rbx + 6], 0x97
xor byte [rbx + 7], 0x35
xor byte [rbx + 8], 0xa5
xor byte [rbx + 9], 0x97
mov byte [rbx + 0xa], 0
mov r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1405526d0
mov rdx, rbx
lea rcx, [rbp - 0x58]
call fcn.140557910
lea rdx, [0x1406ddd70]
cmp qword [0x1406ddd88], 0x10
cmovae rdx, qword [0x1406ddd70]
mov r8, qword [0x1406ddd80]
lea rcx, [rbp - 0x58]
call fcn.140557910
mov ecx, 0x410
mov eax, dword [rcx + r12]
test al, 1
jne 0x140552741
or eax, 1
mov dword [rcx + r12], eax
mov word [r14 + 5], 0x125
mov dword [r14], 0x3f20d987
mov byte [r14 + 4], 0x9c
lea rcx, [0x140642aa0]
call fcn.14063c804
nop
cmp byte [r14 + 6], 0
je 0x14055276a
xor byte [r14], 0xa1
xor byte [r14 + 1], 0xbd
xor byte [r14 + 2], 0x55
xor byte [r14 + 3], 0x51
xor byte [r14 + 4], 0xa1
xor byte [r14 + 5], 0x25
mov byte [r14 + 6], 0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [r14 + r8], 0
jne 0x140552771
mov rdx, r14
lea rcx, [rbp - 0x58]
call fcn.140557910
mov qword [rbp - 0x78], 0
mov qword [rbp - 0x68], 0
mov qword [rbp - 0x60], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x78], 0
mov r8, 0xffffffffffffffff
lea rax, [0x1406ddec0]
inc r8
cmp byte [rax + r8], 0
jne 0x1405527b1
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.14054ed20
nop
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x28]
call fcn.14055f830
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x1405527e5
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp - 0x58]
call fcn.140557910
nop
lea rcx, [rsp + 0x28]
call fcn.14054ecc0
nop
lea rcx, [rbp - 0x78]
call fcn.14054ecc0
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], 0x10
cmovae rdx, qword [rbp - 0x58]
lea rcx, [rsp + 0x28]
call fcn.14055fae0
mov rcx, rax
call fcn.140562ba0
test al, al
je 0x140552886
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x140552848
imul rax, rax, 0x64
jmp 0x140552863
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
movabs rcx, 0x7ffffffb57e837fe
cmp rax, rcx
jg 0x1405528e2
movabs rcx, 0x4a817c800
add rcx, rax
mov qword [rsp + 0x20], rcx
jmp 0x1405528f1
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rdi, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rdi, 0x989680
jne 0x1405528a4
imul rax, rax, 0x64
jmp 0x1405528bf
cqo
idiv rdi
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rdi
add rax, rcx
movabs rcx, 0x7ffffffed5fa0dfe
cmp rax, rcx
jg 0x1405528e2
movabs rcx, 0x12a05f200
add rcx, rax
mov qword [rsp + 0x20], rcx
jmp 0x1405528f1
movabs rax, 0x7fffffffffffffff
mov qword [rsp + 0x20], rax
lea rcx, [rsp + 0x20]
call fcn.140557e20
nop
lea rcx, [rbp - 0x58]
call fcn.14054ecc0
nop
lea rcx, [rsp + 0x68]
call fcn.14054ecc0
xor edi, edi
jmp 0x140552270
call fcn.140547a30
int3