Function at 0x140031bc0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
push rbp
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [0x1401d12b0]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rsi, rdx
mov rdi, rcx
mov qword [rbp - 0x18], rcx
mov qword [rbp - 0x18], rdx
movdqa xmm0, xmmword [0x1401b3730]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x100465b
xor r12d, r12d
mov ecx, r12d
nop
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x12
jb 0x140031c10
mov byte [rbp - 0x2d], r12b
lea rcx, [rbp - 0x40]
mov rbx, 0xffffffffffffffff
mov rax, rbx
inc rax
cmp byte [rcx + rax], r12b
jne 0x140031c32
mov r8, qword [rdx + 0x10]
mov rcx, rsi
cmp qword [rdx + 0x18], 0x10
jb 0x140031c4c
mov rcx, qword [rdx]
cmp r8, rax
jne 0x140031cc2
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140031cc2
movdqa xmm0, xmmword [0x1401b3f00]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x8697919d
mov word [rbp - 0x2c], 0x100
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx - 0x21]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x14
jb 0x140031c80
mov byte [rbp - 0x2b], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140031cb0
lea rdx, [rbp - 0x40]
jmp 0x14003254d
movdqa xmm0, xmmword [0x1401b36e0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x100465b
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x12
jb 0x140031ce0
mov byte [rbp - 0x2d], r12b
mov r14, qword [rsi + 0x10]
mov r15, qword [rsi + 0x18]
lea rcx, [rbp - 0x40]
mov rax, rbx
inc rax
cmp byte [rcx + rax], r12b
jne 0x140031d03
mov rcx, rsi
cmp r15, 0x10
jb 0x140031d18
mov rcx, qword [rsi]
cmp r14, rax
jne 0x140031d92
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140031d92
mov dword [rbp - 0x40], 0xb8978db0
mov dword [rbp - 0x3c], 0x899d94
mov byte [rbp - 0x38], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 9]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 7
jb 0x140031d50
mov byte [rbp - 0x38], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140031d80
lea rdx, [rbp - 0x40]
jmp 0x14003254d
movdqa xmm0, xmmword [0x1401b3d30]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x35366968
mov dword [rbp - 0x2c], 0x1004a57
mov rcx, r12
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x16
jb 0x140031db0
mov byte [rbp - 0x29], r12b
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x140031dd0
mov rcx, rsi
cmp r15, 0x10
jb 0x140031de5
mov rcx, qword [rsi]
cmp r14, rax
jne 0x140031e62
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140031e62
mov dword [rbp - 0x40], 0x9f8f97bf
mov dword [rbp - 0x3c], 0x8c9c9f89
mov word [rbp - 0x38], 0x100
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 9]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 8
jb 0x140031e20
mov byte [rbp - 0x37], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140031e50
lea rdx, [rbp - 0x40]
jmp 0x14003254d
movdqa xmm0, xmmword [0x1401b3d30]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x33366968
mov dword [rbp - 0x2c], 0x1004a57
mov rcx, r12
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x16
jb 0x140031e80
mov byte [rbp - 0x29], r12b
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x140031ea0
mov rcx, rsi
cmp r15, 0x10
jb 0x140031eb5
mov rcx, qword [rsi]
cmp r14, rax
jne 0x140031f32
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140031f32
mov dword [rbp - 0x40], 0xda8b91b6
mov dword [rbp - 0x3c], 0x8d9c99b9
mov word [rbp - 0x38], Ordinal_143
mov byte [rbp - 0x36], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 9]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 9
jb 0x140031ef0
mov byte [rbp - 0x36], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140031f20
lea rdx, [rbp - 0x40]
jmp 0x14003254d
movdqa xmm0, xmmword [0x1401b3d30]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x34366968
mov dword [rbp - 0x2c], 0x1004a57
mov rcx, r12
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x16
jb 0x140031f50
mov byte [rbp - 0x29], r12b
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x140031f70
mov rcx, rsi
cmp r15, 0x10
jb 0x140031f85
mov rcx, qword [rsi]
cmp r14, rax
jne 0x140032002
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140032002
mov dword [rbp - 0x40], 0x9f8f97bf
mov dword [rbp - 0x3c], 0x95949e89
mov word [rbp - 0x38], 0x9a
mov byte [rbp - 0x36], 1
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 9]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 9
jb 0x140031fc0
mov byte [rbp - 0x36], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140031ff0
lea rdx, [rbp - 0x40]
jmp 0x14003254d
movdqa xmm0, xmmword [0x1401b3ef0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0xb1aec7df
mov word [rbp - 0x2c], 0x100
mov rcx, r12
nop
lea eax, [rcx - 0x21]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x14
jb 0x140032020
mov byte [rbp - 0x2b], r12b
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x140032040
mov rcx, rsi
cmp r15, 0x10
jb 0x140032055
mov rcx, qword [rsi]
cmp r14, rax
jne 0x1400320be
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400320be
movdqa xmm0, xmmword [0x1401b3e20]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
mov rcx, r12
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x10
jb 0x140032080
mov byte [rbp - 0x2f], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x1400320b0
jmp 0x140032549
movdqa xmm0, xmmword [0x1401b3c40]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x3336443d
mov dword [rbp - 0x2c], 0x7c6f6757
mov dword [rbp - 0x28], 0x1004e53
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x1a
jb 0x1400320f0
mov byte [rbp - 0x25], r12b
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x140032110
mov rcx, rsi
cmp r15, 0x10
jb 0x140032125
mov rcx, qword [rsi]
cmp r14, rax
jne 0x1400321a2
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400321a2
mov dword [rbp - 0x40], 0x9e949ab9
mov dword [rbp - 0x3c], 0xafda9c94
mov dword [rbp - 0x38], 0x9a8c8f89
mov word [rbp - 0x34], reloc.WS2_32.dll_WSACleanup
mov byte [rbp - 0x32], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0xd
jb 0x140032160
mov byte [rbp - 0x32], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140032190
lea rdx, [rbp - 0x40]
jmp 0x14003254d
movdqa xmm0, xmmword [0x1401b3c40]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x36364953
mov dword [rbp - 0x2c], 0x7c6f6757
mov dword [rbp - 0x28], 0x1004e53
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x1a
jb 0x1400321d0
mov byte [rbp - 0x25], r12b
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x1400321f0
mov rcx, rsi
cmp r15, 0x10
jb 0x140032205
mov rcx, qword [rsi]
cmp r14, rax
jne 0x140032282
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140032282
mov dword [rbp - 0x40], 0x979894b1
mov dword [rbp - 0x3c], 0x8c95889e
mov dword [rbp - 0x38], 0x70647790
mov word [rbp - 0x34], 0x100
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx - 9]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0xc
jb 0x140032240
mov byte [rbp - 0x33], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140032270
lea rdx, [rbp - 0x40]
jmp 0x14003254d
movdqa xmm0, xmmword [0x1401b3c50]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x47
mov byte [rbp - 0x2e], 1
mov rcx, r12
nop dword [rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x11
jb 0x1400322a0
mov byte [rbp - 0x2e], r12b
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x1400322c0
mov rcx, rsi
cmp r15, 0x10
jb 0x1400322d5
mov rcx, qword [rsi]
cmp r14, rax
jne 0x140032352
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140032352
movdqa xmm0, xmmword [0x1401b3c60]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0x100646c
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x12
jb 0x140032310
mov byte [rbp - 0x2d], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140032340
lea rdx, [rbp - 0x40]
jmp 0x14003254d
movdqa xmm0, xmmword [0x1401b3bf0]
movdqu xmmword [rbp - 0x40], xmm0
movdqa xmm1, xmmword [str.arYWzfinhxnNQ]
movdqu xmmword [rbp - 0x30], xmm1
mov byte [rbp - 0x20], 1
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x1f
jb 0x140032380
mov byte [rbp - 0x20], r12b
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x1400323a0
mov rcx, rsi
cmp r15, 0x10
jb 0x1400323b5
mov rcx, qword [rsi]
cmp r14, rax
jne 0x140032422
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x140032422
movdqa xmm0, xmmword [0x1401b3590]
movdqu xmmword [rbp - 0x40], xmm0
mov byte [rbp - 0x30], 1
mov rcx, r12
nop
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0xf
jb 0x1400323e0
mov byte [rbp - 0x30], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140032410
lea rdx, [rbp - 0x40]
jmp 0x14003254d
movdqa xmm0, xmmword [0x1401b3ee0]
movdqu xmmword [rbp - 0x40], xmm0
mov dword [rbp - 0x30], 0xb1ae878a
mov word [rbp - 0x2c], 0x100
mov rcx, r12
nop
lea eax, [rcx - 0x21]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x14
jb 0x140032440
mov byte [rbp - 0x2b], r12b
lea rcx, [rbp - 0x40]
mov rax, rbx
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], r12b
jne 0x140032460
mov rcx, rsi
cmp r15, 0x10
jb 0x140032475
mov rcx, qword [rsi]
cmp r14, rax
jne 0x1400324ef
mov r8, r14
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400324ef
mov dword [rbp - 0x40], 0xd78494a3
mov dword [rbp - 0x3c], 0x9f9389ab
mov dword [rbp - 0x38], 0x1008f99
mov rcx, r12
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0xa
jb 0x1400324b0
mov byte [rbp - 0x35], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x1400324e0
lea rdx, [rbp - 0x40]
jmp 0x14003254d
movdqa xmm0, xmmword [0x1401b36b0]
movdqu xmmword [rbp - 0x40], xmm0
mov word [rbp - 0x30], 0x100
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0xc]
xor byte [rbp + rcx - 0x40], al
inc rcx
cmp rcx, 0x10
jb 0x140032510
mov byte [rbp - 0x2f], r12b
mov qword [rdi], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rdi], r12b
lea rax, [rbp - 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], r12b
jne 0x140032540
lea rdx, [rbp - 0x40]
mov r8, rbx
mov rcx, rdi
call fcn.140008610
nop
mov rdx, qword [rsi + 0x18]
cmp rdx, 0x10
jb 0x14003258f
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14003258a
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x1400325c6
mov rcx, r8
call fcn.14012eab4
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov rax, rdi
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.14012e570
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3