Function at 0x140036a20
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x918
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x890], 0xfffffffffffffffe
mov rsi, r9
mov rdi, r8
mov rbx, rdx
lea r14, [rbp - 0x48]
mov r8d, 0x800
mov rcx, r14
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x828], rbx
mov qword [rbp + 0x830], r14
mov qword [rbp + 0x838], 0x800
xorps xmm0, xmm0
movups xmmword [rbp + 0x840], xmm0
movups xmmword [rbp + 0x850], xmm0
mov qword [rbp + 0x860], reloc.WS2_32.dll_ntohs
lea rcx, [rbp + 0x828]
call fcn.14003b4c0
test al, al
je 0x140036b34
mov eax, dword [0x140185f38]
mov ecx, dword [0x14019f7f0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 0x28]
jg 0x14003729c
mov qword [rbp + 0x7b8], 0
mov byte [rbp + 0x7c0], 0
xorps xmm0, xmm0
movups xmmword [rbp + 0x7f8], xmm0
mov byte [rbp + 0x808], 0
movups xmmword [rbp + 0x810], xmm0
mov byte [rbp + 0x820], 0
movups xmmword [rbp + 0x7c8], xmm0
movups xmmword [rbp + 0x7d8], xmm0
movups xmmword [rbp + 0x7e1], xmm0
cmp qword [rbp + 0x858], 0
je 0x140036b3c
cmp qword [rbp + 0x860], 0x10
jb 0x140036b45
mov rbx, qword [rbp + 0x848]
jmp 0x140036b4c
xor r13d, r13d
jmp 0x140036cc3
mov rbx, qword [rbp + 0x830]
jmp 0x140036b4c
lea rbx, [rbp + 0x848]
mov rcx, rbx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
lea rdx, [rax + rbx]
mov byte [rsp + 0x28], 1
mov dword [rsp + 0x20], 0
lea r9, [0x140185f10]
lea r8, [rbp + 0x7b8]
mov rcx, rbx
call fcn.14003b7a0
test al, al
je 0x140036c29
lea rdx, [rbp + 0x810]
mov rcx, qword [rbp + 0x7c8]
mov rax, qword [rbp + 0x7d0]
sub rax, rcx
sar rax, 3
movabs r15, 0xaaaaaaaaaaaaaaab
imul rax, r15
add rcx, 0x18
cmp rax, 2
cmovb rcx, rdx
lea rdi, [rbp + 0x870]
mov rdx, rdi
call fcn.14001cee0
mov rax, qword [rsi + 0x18]
cmp rdi, rsi
je 0x140036d1f
cmp rax, 0x10
jb 0x140036c0f
mov rcx, qword [rsi]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140036c0a
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003723a
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400f0ba0
movups xmm0, xmmword [rbp + 0x870]
movups xmm1, xmmword [rbp + 0x880]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
jmp 0x140036d5d
cmp byte [0x140184900], 0
jne 0x140036c4a
movabs rax, 0x5443454e4e4f43
mov qword [0x1401848f8], rax
mov byte [0x140184900], 1
lea rcx, [0x1401848f8]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
cmp qword [rdi + 0x10], rax
jne 0x140036c80
cmp qword [rdi + 0x18], 0x10
jb 0x140036c66
mov rdi, qword [rdi]
lea rdx, [0x1401848f8]
mov rcx, rdi
mov r8, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
sete r13b
jmp 0x140036c83
xor r13d, r13d
mov rcx, qword [rbp + 0x7c8]
test rcx, rcx
je 0x140036cc3
mov rdx, qword [rbp + 0x7d8]
sub rdx, rcx
cmp rdx, 0x1000
jb 0x140036cbe
mov rax, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
jae 0x14003723a
add rdx, 0x27
mov rcx, rax
call fcn.1400f0ba0
mov rax, qword [rbp + 0x860]
cmp rax, 0x10
jb 0x140036d08
mov rcx, qword [rbp + 0x848]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140036d03
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003723a
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400f0ba0
mov eax, r13d
add rsp, 0x918
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
cmp rax, 0x10
jb 0x140036d5d
mov rcx, qword [rbp + 0x870]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140036d58
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003723a
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400f0ba0
mov rcx, qword [rbp + 0x7c8]
mov rax, qword [rbp + 0x7d0]
sub rax, rcx
sar rax, 3
imul rax, r15
add rcx, 0x30
cmp rax, 3
lea rax, [rbp + 0x810]
cmovb rcx, rax
mov rdx, rdi
call fcn.14001cee0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov rbx, rax
cmp qword [rbp + 0x888], 0x10
jb 0x140036dab
mov rdi, qword [rbp + 0x870]
mov dword [rbx], 0
lea rdx, [rbp + 0x868]
mov rcx, rdi
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
cmp rdi, qword [rbp + 0x868]
je 0x14003735f
cmp dword [rbx], 0x22
je 0x140037370
mov dword [rsi + 0x20], eax
mov rax, qword [rbp + 0x888]
cmp rax, 0x10
jb 0x140036e25
mov rcx, qword [rbp + 0x870]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140036e20
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003723a
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400f0ba0
mov rcx, qword [rbp + 0x7c8]
mov rax, qword [rbp + 0x7d0]
sub rax, rcx
sar rax, 3
imul rax, r15
add rcx, 0x48
cmp rax, 4
lea rax, [rbp + 0x810]
cmovb rcx, rax
lea rdi, [rbp + 0x870]
mov rdx, rdi
call fcn.14001cee0
lea r14, [rsi + 0x28]
cmp r14, rdi
je 0x140036ec0
mov rax, qword [rsi + 0x40]
cmp rax, 0x10
jb 0x140036ea7
mov rcx, qword [r14]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140036ea2
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003723a
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400f0ba0
movups xmm0, xmmword [rbp + 0x870]
movups xmm1, xmmword [rbp + 0x880]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
jmp 0x140036f05
mov rax, qword [rbp + 0x888]
cmp rax, 0x10
jb 0x140036f05
mov rcx, qword [rbp + 0x870]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140036f00
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003723a
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400f0ba0
lea rbx, [rbp + 0x828]
jmp 0x140036f2c
call fcn.1400f0ba0
movups xmm0, xmmword [rbp + 0x870]
movups xmm1, xmmword [rbp + 0x880]
movups xmmword [r14 + 0x10], xmm1
movups xmmword [r14], xmm0
cmp dword [rsi + 0x20], 0x64
setne r13b
jne 0x140036c83
mov rcx, rbx
call fcn.14003b4c0
test al, al
je 0x140036c83
mov rcx, rbx
call fcn.14003b4c0
test al, al
je 0x140036c83
cmp qword [rbp + 0x858], 0
je 0x140036f80
cmp qword [rbp + 0x860], 0x10
lea r12, [rbp + 0x848]
jb 0x140036f87
mov r12, qword [rbp + 0x848]
jmp 0x140036f87
mov r12, qword [rbp + 0x830]
mov rcx, r12
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
lea rdx, [rax + r12]
mov byte [rsp + 0x28], 1
mov dword [rsp + 0x20], 0
mov rcx, r12
lea r8, [rbp + 0x7b8]
lea r9, [0x140185f10]
call fcn.14003b7a0
test al, al
je 0x140036c83
mov rcx, qword [rbp + 0x7c8]
mov rax, qword [rbp + 0x7d0]
sub rax, rcx
sar rax, 3
imul rax, r15
add rcx, 0x18
cmp rax, 2
lea rax, [rbp + 0x810]
cmovb rcx, rax
mov rdx, rdi
call fcn.14001cee0
cmp rdi, rsi
je 0x140037050
mov rax, qword [rsi + 0x18]
cmp rax, 0x10
jb 0x140037035
mov rcx, qword [rsi]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140037030
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003723a
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400f0ba0
movups xmm0, xmmword [rbp + 0x870]
movups xmm1, xmmword [rbp + 0x880]
movups xmmword [rsi + 0x10], xmm1
movups xmmword [rsi], xmm0
jmp 0x1400370a0
mov rax, qword [rbp + 0x888]
cmp rax, 0x10
jb 0x1400370a0
mov rcx, qword [rbp + 0x870]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140037090
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003723a
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400f0ba0
nop word cs:[rax + rax]
mov rcx, qword [rbp + 0x7c8]
mov rax, qword [rbp + 0x7d0]
sub rax, rcx
sar rax, 3
imul rax, r15
add rcx, 0x30
cmp rax, 3
lea rax, [rbp + 0x810]
cmovb rcx, rax
mov rdx, rdi
call fcn.14001cee0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
mov r12, rax
cmp qword [rbp + 0x888], 0x10
mov r13, rdi
jb 0x1400370f1
mov r13, qword [rbp + 0x870]
mov dword [r12], 0
mov rcx, r13
lea rdx, [rbp + 0x868]
mov r8d, 0xa
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
cmp r13, qword [rbp + 0x868]
je 0x14003728b
cmp dword [r12], 0x22
je 0x140037240
mov dword [rsi + 0x20], eax
mov rax, qword [rbp + 0x888]
cmp rax, 0x10
jb 0x14003716f
mov rcx, qword [rbp + 0x870]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x14003716a
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003723a
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400f0ba0
mov rcx, qword [rbp + 0x7c8]
mov rax, qword [rbp + 0x7d0]
sub rax, rcx
sar rax, 3
imul rax, r15
add rcx, 0x48
cmp rax, 4
lea rax, [rbp + 0x810]
cmovb rcx, rax
mov rdx, rdi
call fcn.14001cee0
cmp r14, rdi
je 0x1400371f0
mov rax, qword [rsi + 0x40]
cmp rax, 0x10
jb 0x140036f15
mov rcx, qword [r14]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140036f10
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003723a
add rax, 0x28
mov rdx, rax
mov rcx, r8
jmp 0x140036f10
mov rax, qword [rbp + 0x888]
cmp rax, 0x10
jb 0x140036f2c
mov rcx, qword [rbp + 0x870]
lea rdx, [rax + 1]
cmp rdx, 0x1000
jb 0x140037230
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14003723a
add rax, 0x28
mov rdx, rax
mov rcx, r8
call fcn.1400f0ba0
jmp 0x140036f2c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
cmp byte [0x1401847a3], 0
jne 0x14003727f
movaps xmm0, xmmword [0x1401012e0]
movups xmmword [0x140184788], xmm0
movabs rax, 0x6e617220666f2074
mov qword [0x140184798], rax
mov word [0x1401847a0], 0x6567
mov byte [0x1401847a2], 0
mov byte [0x1401847a3], 1
lea rcx, [0x140184788]
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
call fcn.14005b010
lea rcx, [0x140184770]
call sub.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_
lea rcx, [0x140185f38]
call fcn.1400f0bdc
cmp dword [0x140185f38], 0xffffffff
jne 0x140036ad1
cmp byte [0x140184aba], 0
jne 0x140037329
xor ecx, ecx
movabs r8, 0xcccccccccccccccd
lea r9, [0x1400fc250]
lea r10, [0x140184a96]
mov rax, rcx
mul r8
shr rdx, 2
and rdx, 0xfffffffffffffffc
lea rax, [rdx + rdx*4]
lea rdx, [r9 + rcx]
sub rdx, rax
movzx eax, byte [rdx + 0x2187]
movzx edx, byte [rdx + 0x2188]
xor al, byte [rcx + r9 + 0x219b]
xor dl, byte [rcx + r9 + 0x219c]
mov byte [rcx + r10], al
mov byte [rcx + r10 + 1], dl
add rcx, 2
cmp rcx, 0x24
jne 0x1400372d8
mov byte [0x140184aba], 1
lea rcx, [0x140185f10]
lea rdx, [0x140184a96]
mov r8d, 1
call fcn.14001cd10
lea rcx, [0x14003b6a0]
call fcn.1400f0d90
lea rcx, [0x140185f38]
call fcn.1400f0c90
jmp 0x140036ad1
call fcn.14005b010
lea rcx, [0x140184770]
call sub.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const____ptr64_
cmp byte [0x1401847a3], 0
jne 0x1400373af
movaps xmm0, xmmword [0x1401012e0]
movups xmmword [0x140184788], xmm0
movabs rax, 0x6e617220666f2074
mov qword [0x140184798], rax
mov word [0x1401847a0], 0x6567
mov byte [0x1401847a2], 0
mov byte [0x1401847a3], 1
lea rcx, [0x140184788]
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const____ptr64_
int3