Function at 0x140035f20
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 8]
sub rsp, 0x108
xor r12d, r12d
lea rbx, [0x140084350]
mov r13, r9
mov dword [rsp + 0x48], r12d
mov qword [rsp + 0x50], rbx
mov r9, r8
movups xmm0, xmmword [rsp + 0x48]
mov r10, rdx
mov qword [rsp + 0x20], r12
mov rdi, rcx
mov r8d, r12d
movdqu xmmword [r13], xmm0
mov eax, dword [rcx + 0xa0]
cmp eax, 4
je 0x140036738
lea rsi, [rcx + 0x30]
lea r14d, [r12 + 0xa]
mov r11d, 8
cmp eax, 5
je 0x140036738
cmp r8, r9
jb 0x140035fae
lea rsi, [rdi + 0x30]
cmp qword [rsi], r12
jne 0x140036738
test eax, eax
jne 0x140036125
mov rax, r9
sub rax, r8
je 0x14003601a
mov rcx, qword [rsi]
test rcx, rcx
je 0x14003601a
mov dl, byte [r8 + r10]
cmp rax, 1
jbe 0x140035ffe
cmp rcx, 2
jne 0x140035fed
mov byte [rdi + 0x18], dl
mov al, byte [r8 + r10 + 1]
mov byte [rdi + 0x19], al
lea rax, [rcx - 2]
mov qword [rsi], rax
mov rax, rcx
jmp 0x14003601d
lea rax, [rcx - 1]
mov byte [rdi + 0x19], dl
mov qword [rsi], rax
mov eax, 1
jmp 0x14003601d
lea rax, [rcx - 1]
mov qword [rsi], rax
mov eax, 1
cmp rcx, 2
jne 0x140036015
mov byte [rdi + 0x18], dl
jmp 0x14003601d
mov byte [rdi + 0x19], dl
jmp 0x14003601d
mov rax, r12
add r8, rax
mov qword [rsp + 0x20], r8
cmp qword [rsi], r12
ja 0x1400364e3
movzx edx, byte [rdi + 0x18]
mov ecx, edx
and ecx, 0xf
cmp ecx, r11d
jb 0x14003604a
mov al, byte [rdi + 0x19]
and al, 0x7f
cmp al, 0x7d
jbe 0x14003604a
mov edx, r11d
jmp 0x1400360bf
test dl, 0x40
jne 0x1400360ba
test dl, 0x30
jne 0x1400360ba
lea eax, [rcx - 3]
cmp eax, 4
jbe 0x1400360b3
cmp ecx, 0xb
jae 0x1400360b3
cmp ecx, r11d
jb 0x14003606f
test dl, dl
js 0x14003606f
mov edx, r14d
jmp 0x1400360bf
cmp qword [rdi + 0x40], r12
jne 0x14003608d
test ecx, ecx
je 0x140036095
mov al, byte [rdi + 0x19]
cmp byte [rdi + 9], r12b
je 0x14003609c
test al, al
js 0x1400360a7
mov edx, recv
jmp 0x1400360bf
lea eax, [rcx - 1]
cmp eax, 6
ja 0x140036079
mov edx, ntohl
jmp 0x1400360bf
test al, al
jns 0x1400360a7
mov edx, reloc.WS2_32.dll_listen
jmp 0x1400360bf
mov dword [rsp + 0x30], r12d
mov qword [rsp + 0x38], rbx
jmp 0x1400360ce
mov edx, 7
jmp 0x1400360bf
mov edx, 9
lea rcx, [rsp + 0x30]
call fcn.14000da9c
mov r8, qword [rsp + 0x20]
movups xmm0, xmmword [rsp + 0x30]
movdqu xmmword [r13], xmm0
cmp dword [r13], r12d
jne 0x140036738
mov dword [rdi + 0xa0], 1
mov qword [rdi + 0x38], r12
mov al, byte [rdi + 0x19]
and al, 0x7f
cmp al, 0x7e
jne 0x140036101
mov ecx, 4
jmp 0x14003610c
cmp al, 0x7f
mov ecx, 2
cmove rcx, r14
cmp byte [rdi + 0x19], r12b
lea rax, [rcx + 4]
cmovge rax, rcx
sub rax, 2
mov qword [rdi + 0x30], rax
jmp 0x1400364e3
cmp eax, 1
jne 0x140036506
mov rbx, qword [rsi]
lea rdx, [r8 + r10]
mov rcx, qword [rdi + 0x38]
mov rax, r9
sub rax, r8
mov r12, rsi
cmp rax, rbx
cmovb rbx, rax
add rcx, 0x88
add rcx, rdi
mov r8, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, qword [rsp + 0x20]
add qword [rdi + 0x38], rbx
add r8, rbx
sub qword [rsi], rbx
cmp qword [rsi], 0
mov qword [rsp + 0x20], r8
jne 0x140036719
lea rsi, [rdi + 0x88]
movsd xmm0, qword [rsi]
lea r14, [rdi + 0x18]
movzx ebx, word [r14]
lea rdx, [rsp + 0x60]
mov eax, dword [rsi + 8]
lea rcx, [rbp + 0x50]
mov word [rbp + 0x50], bx
shr bx, 8
and bl, 0x7f
movsd qword [rsp + 0x60], xmm0
mov dword [rsp + 0x68], eax
call fcn.14000659c
cmp bl, 0x7e
jne 0x140036221
cmp rax, 0x7d
jbe 0x14003622e
and dword [rsp + 0x70], 0
lea rax, [0x140084350]
mov qword [rsp + 0x78], rax
movups xmm0, xmmword [rsp + 0x70]
movdqu xmmword [r13], xmm0
cmp dword [r13], 0
jne 0x140036738
mov rdx, rsi
mov dword [rdi + 0xa0], 3
mov rcx, r14
call fcn.14000659c
movzx ebx, byte [r14]
mov edx, 8
and ebx, 0xf
mov qword [rdi + 0x30], rax
mov r15, rax
cmp ebx, edx
jb 0x140036338
mov cl, byte [rdi + 0x19]
test cl, cl
js 0x14003623f
and dword [rbp + 0x68], 0
jmp 0x14003626e
cmp bl, 0x7f
jne 0x1400361bd
cmp rax, 0xffff
ja 0x1400361bd
mov edx, reloc.WS2_32.dll_ntohl
lea rcx, [rsp + 0x70]
call fcn.14000da9c
jmp 0x1400361ce
and cl, 0x7f
cmp cl, 0x7e
jne 0x14003624e
mov eax, 2
jmp 0x140036257
xor eax, eax
cmp cl, 0x7f
cmove rax, rdx
lea rdx, [rax + rsi]
sub rax, rdx
lea r8, [rsi + 4]
add r8, rax
lea rcx, [rbp + 0x68]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rdi + 0x20]
lea rdx, [rbp - 0x70]
mov r9, r15
mov r8d, ebx
call fcn.1400309c8
mov rbx, rax
mov rax, qword [rax + 8]
test rax, rax
je 0x140036291
lock inc dword [rax + 8]
mov eax, dword [rbp + 0x68]
mov r14, qword [rbx]
mov r15d, eax
mov rbx, qword [rbx + 8]
and dword [rbp - 0x38], 0
and dword [rbp - 0x34], 0
shl r15, 0x20
or r15, rax
test rbx, rbx
je 0x1400362dd
or eax, 0xffffffff
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400362dd
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
or eax, 0xffffffff
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400362dd
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
lea rsi, [rdi + 0x60]
mov qword [rsi], r14
mov rcx, rsi
mov r14, qword [rsi + 8]
mov qword [rsi + 8], rbx
test r14, r14
je 0x140036327
or eax, 0xffffffff
lock xadd dword [r14 + 8], eax
cmp eax, 1
jne 0x140036327
mov rax, qword [r14]
mov rcx, r14
call qword [rax]
mov rcx, rsi
or eax, 0xffffffff
lock xadd dword [r14 + 0xc], eax
cmp eax, 1
jne 0x140036327
mov rax, qword [r14]
mov rcx, r14
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, rsi
mov rax, qword [rbp - 0x38]
mov qword [rsi + 0x18], rax
mov qword [rsi + 0x10], r15
jmp 0x1400364cb
mov rax, qword [rdi + 0x40]
test rax, rax
jne 0x14003644f
cmp r15, qword [rdi + 0x10]
ja 0x140036721
mov al, byte [rdi + 0x19]
lea r8, [rdi + 0x88]
test al, al
js 0x140036364
and dword [rsp + 0x28], 0
jmp 0x140036391
and al, 0x7f
cmp al, 0x7e
jne 0x140036371
mov ecx, 2
jmp 0x140036379
xor ecx, ecx
cmp al, 0x7f
cmove rcx, rdx
lea rdx, [r8 + rcx]
add rcx, 4
sub r8, rdx
add r8, rcx
lea rcx, [rsp + 0x28]
call sub.VCRUNTIME140.dll_memcpy
mov rcx, qword [rdi + 0x20]
lea rdx, [rbp - 0x60]
mov r9, r15
mov r8d, ebx
call fcn.1400309c8
mov rsi, rax
mov rax, qword [rax + 8]
test rax, rax
je 0x1400363b4
lock inc dword [rax + 8]
mov eax, dword [rsp + 0x28]
or r15d, 0xffffffff
mov rbx, qword [rsi]
mov r14d, eax
mov rsi, qword [rsi + 8]
and dword [rbp - 0x18], 0
and dword [rbp - 0x14], 0
shl r14, 0x20
or r14, rax
test rsi, rsi
je 0x140036405
mov eax, r15d
lock xadd dword [rsi + 8], eax
add eax, r15d
jne 0x140036405
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax]
mov eax, r15d
lock xadd dword [rsi + 0xc], eax
add eax, r15d
jne 0x140036405
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + reloc.WS2_32.dll_htonl]
mov qword [rdi + 0x40], rbx
mov rbx, qword [rdi + 0x48]
mov qword [rdi + 0x48], rsi
test rbx, rbx
je 0x140036441
mov eax, r15d
lock xadd dword [rbx + 8], eax
add eax, r15d
jne 0x140036441
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, r15d
lock xadd dword [rbx + 0xc], eax
add eax, r15d
jne 0x140036441
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov rax, qword [rbp - 0x18]
mov qword [rdi + 0x58], rax
mov qword [rdi + 0x50], r14
jmp 0x1400364c7
lea rbx, [rax + 0x50]
mov rcx, qword [rbx + 0x10]
add rcx, r15
cmp rcx, qword [rdi + 0x10]
ja 0x140036721
mov al, byte [rdi + 0x19]
lea r8, [rdi + 0x88]
test al, al
js 0x14003647a
xor eax, eax
mov dword [rsp + 0x2c], eax
jmp 0x1400364ab
and al, 0x7f
cmp al, 0x7e
jne 0x140036487
mov ecx, 2
jmp 0x14003648f
xor ecx, ecx
cmp al, 0x7f
cmove rcx, rdx
lea rdx, [r8 + rcx]
add rcx, 4
sub r8, rdx
add r8, rcx
lea rcx, [rsp + 0x2c]
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [rsp + 0x2c]
mov edx, eax
mov rcx, rbx
shl rax, 0x20
or rax, rdx
mov qword [rdi + 0x50], rax
mov rdx, qword [rbx + 0x10]
add rdx, r15
call fcn.14001d2b0
lea rcx, [rdi + 0x40]
mov r8, qword [rsp + 0x20]
mov rsi, r12
xor r12d, r12d
mov qword [rdi + 0x80], rcx
mov r14d, 0xa
mov eax, dword [rdi + 0xa0]
cmp eax, 4
je 0x140036738
mov r9, qword [rbp + 0x60]
lea rbx, [0x140084350]
mov r10, qword [rbp + 0x58]
jmp 0x140035f8d
cmp eax, 2
jne 0x14003651b
mov dword [rdi + 0xa0], 3
lea rsi, [rdi + 0x30]
jmp 0x1400364e3
cmp eax, 3
jne 0x140036751
mov r14, qword [rsi]
mov rax, r9
sub rax, r8
mov r15, rsi
cmp rax, r14
cmovb r14, rax
test r14, r14
je 0x14003666d
lea r9, [r8 + r10]
cmp byte [rdi + 0x19], r12b
jge 0x14003658b
mov rax, qword [rdi + 0x80]
mov rcx, r12
mov rdx, qword [rax + 0x10]
mov dword [rsp + 0x40], edx
mov rax, rcx
and eax, 3
mov al, byte [rsp + rax + 0x40]
xor byte [rcx + r9], al
inc rcx
cmp rcx, r14
jb 0x14003655c
mov rax, qword [rdi + 0x80]
mov rcx, r14
and ecx, 3
je 0x140036587
shl cl, 3
ror rdx, cl
mov qword [rax + 0x10], rdx
mov rax, qword [rdi + 0x80]
mov r8, r14
mov rdx, r9
mov rbx, qword [rax]
add rbx, 0x50
mov rcx, rbx
mov rsi, qword [rbx + 0x10]
call fcn.14001d34c
mov r11, qword [rdi + 0x80]
mov rax, qword [r11]
cmp dword [rax + 0x70], 1
jne 0x140036647
cmp qword [rbx + 0x18], 0xf
mov rcx, rbx
jbe 0x1400365cc
mov rcx, qword [rbx]
mov rdx, qword [rbx + 0x10]
add rdx, rcx
cmp qword [rbx + 0x18], 0xf
jbe 0x1400365dd
mov rbx, qword [rbx]
lea rax, [rbx + rsi]
cmp rax, rdx
je 0x140036647
lea rbx, [0x1400622b0]
movzx ecx, byte [rax]
movzx r9d, byte [rax]
movzx r10d, byte [rcx + rbx]
cmp dword [r11 + 0x18], r12d
je 0x140036610
mov r8d, dword [r11 + 0x1c]
and r9d, 0x3f
shl r8d, 6
or r8d, r9d
jmp 0x14003661f
mov r8d, 0xff
mov ecx, r10d
sar r8d, cl
and r8d, r9d
mov dword [r11 + 0x1c], r8d
mov ecx, dword [r11 + 0x18]
add ecx, 0x10
shl ecx, 4
add ecx, r10d
movzx r8d, byte [rcx + rbx]
mov dword [r11 + 0x18], r8d
cmp r8d, 1
je 0x1400366a7
inc rax
cmp rax, rdx
jne 0x1400365ed
sub qword [rdi + 0x30], r14
mov r8, qword [rsp + 0x20]
add r8, r14
mov qword [rsp + 0x20], r8
cmp dword [r13], r12d
jne 0x140036738
lea rsi, [rdi + 0x30]
lea rbx, [0x140084350]
lea rcx, [rsi]
mov rsi, r15
cmp qword [rcx], r12
ja 0x1400364dd
mov al, byte [rdi + 0x18]
test al, al
jns 0x1400366f2
and al, 0xf
cmp al, 1
jne 0x1400366c3
mov rax, qword [rdi + 0x80]
cmp dword [rax + 0x18], r12d
je 0x1400366c3
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rsp + 0x48]
call fcn.14000da9c
jmp 0x1400366d7
mov edx, reloc.WS2_32.dll_recv
lea rcx, [rbp - 0x10]
call fcn.14000da9c
mov r14, r12
movups xmm0, xmmword [rax]
movdqu xmmword [r13], xmm0
jmp 0x14003664b
mov dword [rdi + 0xa0], 4
mov dword [rsp + 0x48], r12d
mov qword [rsp + 0x50], rbx
movups xmm0, xmmword [rsp + 0x48]
movdqu xmmword [r13], xmm0
cmp dword [r13], r12d
jne 0x140036738
mov r8, qword [rsp + 0x20]
jmp 0x1400364dd
and word [rdi + 0x18], 0
xor eax, eax
mov dword [rdi + 0xa0], r12d
mov qword [rcx], 2
mov qword [rdi + 0x88], rax
mov dword [rdi + 0x90], eax
jmp 0x1400364dd
xor r12d, r12d
jmp 0x1400364e3
mov edx, 4
lea rcx, [rbp - 0x80]
call fcn.14000da9c
movups xmm0, xmmword [rax]
movdqu xmmword [r13], xmm0
mov rax, qword [rsp + 0x20]
add rsp, 0x108
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
mov edx, 1
lea rcx, [rbp - 0x80]
call fcn.14000da9c
movups xmm0, xmmword [rax]
xor eax, eax
movdqu xmmword [r13], xmm0
jmp 0x14003673d