Function at 0x1800973d0
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xb8]
sub rsp, 0x190
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
mov rax, qword [0x1803435b8]
xor rax, rsp
mov qword [rbp + 0x60], rax
xor edi, edi
lea rcx, [0x180343158]
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
cmovae rcx, qword [0x180343158]
mov r8, qword [0x180343168]
test r8, r8
jne 0x180097543
lea rdx, [0x18013233b]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x180097543
movdqa xmm0, xmmword [0x180125220]
movdqu xmmword [rsp + 0x58], xmm0
mov dword [rsp + 0x68], 0xdad39dd8
mov dword [rsp + 0x6c], 0xeae5b4ae
mov word [rsp + 0x70], 0x100
mov ecx, edi
lea eax, [rcx - 0x54]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 0x18
jb 0x180097470
mov byte [rsp + 0x71], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x78], xmm1
lea rax, [rsp + 0x58]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1800974a4
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x78]
call fcn.18005bb80
nop
lea rdx, [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
cmovae rdx, qword [rsp + 0x78]
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
mov qword [rbp - 0x38], rdi
mov qword [rbp - 0x30], rdi
nop dword [rax]
inc rbx
cmp byte [rdx + rbx], 0
jne 0x1800974e0
mov r8, rbx
lea rcx, [rbp - 0x48]
call fcn.18005bb80
lea rcx, [rbp - 0x48]
call fcn.180093780
nop
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x180097a01
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800979fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800979f2
jmp 0x1800979fc
movdqa xmm0, xmmword [0x180125290]
movdqa xmmword [rbp - 0x20], xmm0
movdqa xmm1, xmmword [0x1801252a0]
movdqa xmmword [rbp - 0x10], xmm1
movdqa xmm0, xmmword [0x1801250f0]
movdqa xmmword [rbp], xmm0
movdqa xmm1, xmmword [0x180125110]
movdqa xmmword [rbp + 0x10], xmm1
movdqa xmm0, xmmword [0x180125100]
movdqa xmmword [rbp + 0x20], xmm0
mov dword [rbp + 0x30], 0x9a8a8f9d
mov dword [rbp + 0x34], 0x66082364
mov dword [rbp + 0x38], 0x100616a
mov rcx, rdi
nop dword [rax]
lea eax, [rcx - 0x54]
xor byte [rbp + rcx - 0x20], al
inc rcx
cmp rcx, 0x5a
jb 0x1800975a0
mov byte [rbp + 0x3b], dil
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rdi
mov qword [rbp - 0x70], rdi
lea rax, [rbp - 0x20]
mov rbx, 0xffffffffffffffff
mov r8, rbx
inc r8
cmp byte [rax + r8], dil
jne 0x1800975d2
lea rdx, [rbp - 0x20]
lea rcx, [rsp + 0x78]
call fcn.18005bb80
nop
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
mov r13, qword [rbp - 0x78]
sub rax, r13
cmp rax, 1
jb 0x180097a3a
lea r12, [rsp + 0x78]
mov r14, qword [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
cmovae r12, r14
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
lea r15, [r13 + 1]
mov edi, reloc.WS2_32.dll_ntohs
lea rsi, [rsp + 0x58]
cmp r15, rdi
jbe 0x1800976bc
mov rdi, r15
or rdi, 0xf
cmp rdi, rcx
jbe 0x180097677
mov rdi, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.1800ef5f4
test rax, rax
je 0x18009769f
lea rsi, [rax + 0x27]
and rsi, 0xffffffffffffffe0
mov qword [rsi - 8], rax
jmp 0x1800976b7
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmp rdi, rax
cmovb rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x1800976a6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180097a40
jmp 0x18009765c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1800976b5
call fcn.1800ef5f4
mov rsi, rax
jmp 0x1800976b7
xor esi, esi
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x68], r15
mov qword [rsp + 0x70], rdi
mov byte [rsi], 0xa
lea rcx, [rsi + 1]
mov r8, r13
mov rdx, r12
call sub.VCRUNTIME140.dll_memcpy
mov byte [rsi + r15], 0
mov rcx, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x70]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x180097718
lea rax, [rcx + 1]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x58]
mov word [rax + rcx], 0xa
lea rax, [rsp + 0x58]
jmp 0x180097739
mov qword [rsp + 0x20], 1
lea r9, [0x18012382c]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rsp + 0x58]
call fcn.18000b590
xorps xmm0, xmm0
movups xmmword [rbp - 0x48], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x38], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x38], xmm1
xor edi, edi
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
cmp qword [reloc.WS2_32.dll_ntohs], 0x10
lea rdx, [0x180343158]
cmovae rdx, qword [0x180343158]
mov r8, qword [0x180343168]
lea rcx, [rbp - 0x48]
call fcn.180009aa0
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x58], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], dil
mov rcx, qword [rbp - 0x58]
mov rdx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x1800977f1
lea rax, [rcx + 1]
mov qword [rbp - 0x58], rax
lea rax, [rbp - 0x68]
cmp rdx, 0x10
cmovae rax, qword [rbp - 0x68]
mov word [rax + rcx], 0xa
lea rax, [rbp - 0x68]
jmp 0x180097811
mov qword [rsp + 0x20], 1
lea r9, [0x18012382c]
xor r8d, r8d
lea edx, [r8 + 1]
lea rcx, [rbp - 0x68]
call fcn.18000b590
movups xmm7, xmmword [rax]
movups xmmword [rbp + 0x40], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp + 0x50], xmm6
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x18009786d
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180097868
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180097868
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ef630
movdqa xmm0, xmmword [0x180103e70]
movdqu xmmword [rbp - 0x58], xmm0
mov byte [rbp - 0x68], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, 0x10
jb 0x1800978bc
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800978b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800978b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ef630
movdqa xmm0, xmmword [0x180103e70]
movdqu xmmword [rbp - 0x38], xmm0
mov byte [rbp - 0x48], 0
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x18009790d
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180097908
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180097908
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ef630
movdqa xmm0, xmmword [0x180103e70]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
mov rax, qword [0x180345e28]
mov rcx, qword [rax]
test rcx, rcx
je 0x180097984
cmp qword [rcx + 8], 0
je 0x180097984
lea rdx, [rbp + 0x40]
movq rcx, xmm7
psrldq xmm6, 8
movq rax, xmm6
cmp rax, 0x10
cmovae rdx, rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rdi
inc rbx
cmp byte [rdx + rbx], 0
jne 0x180097963
mov r8, rbx
lea rcx, [rsp + 0x38]
call fcn.18005bb80
lea rcx, [rsp + 0x38]
call fcn.180093780
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 0x10
jb 0x1800979c3
inc rdx
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800979bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800979bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800ef630
nop
mov rax, qword [rbp - 0x70]
cmp rax, 0x10
jb 0x180097a01
lea rdx, [rax + 1]
mov rax, r14
cmp rdx, 0x1000
jb 0x1800979f9
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1800979f9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, r14
call fcn.1800ef630
mov al, 1
mov rcx, qword [rbp + 0x60]
xor rcx, rsp
call fcn.1800ef750
lea r11, [rsp + 0x190]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1800025d0
nop
call fcn.180002530
int3