Function at 0x14000bd00
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x100
mov rax, qword [0x140087118]
xor rax, rsp
mov qword [rsp + 0xf8], rax
mov r13, r9
mov r15, r8
mov r12, rdx
mov rbx, rcx
mov qword [rsp + 0x68], r9
mov rsi, qword [rsp + 0x160]
mov qword [rsp + 0x50], rsi
call fcn.140018f50
mov r14, rax
test rax, rax
jne 0x14000bd5d
mov rcx, rsi
call fcn.140001cd0
jmp 0x14000c6bf
xor edi, edi
mov qword [rsp + 0x80], rdi
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x80], dil
mov qword [rsp + 0xb8], rdi
movdqa xmm0, xmmword [0x14006abc0]
movdqu xmmword [rsp + 0xc8], xmm0
mov byte [rsp + 0xb8], dil
mov r8, r15
mov rdx, r12
mov rcx, rbx
call fcn.14000a660
nop
mov r8, qword [0x1400874d0]
mov edx, 0x2712
mov rcx, r14
call fcn.14001b750
lea edx, [rdi + 0x51]
lea r8d, [rdi + 1]
mov rcx, r14
call fcn.14001b750
mov dword [rsp + 0xa0], 0x13120812
mov dword [rsp + 0xa4], 0xf0f5f0
mov byte [rsp + 0xa8], 1
mov ecx, edi
nop word [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0xa0], al
inc rcx
cmp rcx, 7
jb 0x14000be00
mov byte [rsp + 0xa8], 0
lea r8, [rsp + 0xa0]
mov edx, 0x2722
mov rcx, r14
call fcn.14001b750
mov r8, r12
mov edx, 0x27c1
mov rcx, r14
call fcn.14001b750
mov edx, 0x40
lea r8d, [rdx - 0x3f]
mov rcx, r14
call fcn.14001b750
mov r8, rsi
lea r15, [rsi + 0x18]
mov qword [rsp + 0xa0], r15
cmp qword [r15], 0x10
jb 0x14000be69
mov r8, qword [rsi]
mov edx, 0x271f
mov rcx, r14
call fcn.14001b750
lea r8, [0x14000d1e0]
mov edx, 0x4e2b
mov rcx, r14
call fcn.14001b750
lea r8, [rsp + 0x80]
mov edx, 0x2711
mov rcx, r14
call fcn.14001b750
lea r8, [0x14000a9b0]
mov edx, 0x4e6f
mov rcx, r14
call fcn.14001b750
lea r8, [rsp + 0xb8]
mov edx, 0x272d
mov rcx, r14
call fcn.14001b750
nop
mov rcx, r14
call fcn.140019010
mov ebx, eax
mov rcx, r14
call fcn.140018f30
mov rcx, qword [0x1400874d0]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test ebx, ebx
jne 0x14000c0b6
lea rbx, [rsp + 0x80]
cmp qword [rsp + 0x98], 0x10
cmovae rbx, qword [rsp + 0x80]
mov rax, qword [rsp + 0x90]
cmp rax, 5
jb 0x14000bfb0
lea r14, [rax + rbx]
lea r8, [r14 - 4]
sub r8, rbx
mov edx, 0x65
mov rcx, rbx
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
je 0x14000bfb0
lea r12, str.error
nop dword [rax]
nop word [rax + rax]
mov rcx, rdi
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r9 + rcx]
inc rcx
cmp al, byte [r12 + rcx - 1]
jne 0x14000bf79
cmp rcx, 5
jne 0x14000bf60
mov eax, edi
jmp 0x14000bf7e
sbb eax, eax
or eax, 1
test eax, eax
je 0x14000bfa3
inc r9
lea r8, [r14 - 4]
sub r8, r9
mov edx, 0x65
mov rcx, r9
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
jne 0x14000bf50
jmp 0x14000bfb0
sub r9, rbx
cmp r9, 0xffffffffffffffff
jne 0x14000c0b6
mov ecx, 0x1024
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [0x140087760], rax
xor edx, edx
mov r8d, 0x1024
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
lea rcx, [rsp + 0x80]
mov r8, qword [rsp + 0x80]
mov r9, qword [rsp + 0x98]
cmp r9, 0x10
cmovae rcx, r8
sub r13, rcx
nop word [rax + rax]
movzx eax, byte [rcx]
mov byte [rcx + r13], al
lea rcx, [rcx + 1]
test al, al
jne 0x14000c000
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0x10
jb 0x14000c062
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c04d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c5e6
call fcn.1400668bc
mov r9, qword [rsp + 0x98]
mov r8, qword [rsp + 0x80]
movdqa xmm0, xmmword [0x14006abc0]
movdqu xmmword [rsp + 0xc8], xmm0
mov byte [rsp + 0xb8], 0
cmp r9, 0x10
jb 0x14000c323
lea rdx, [r9 + 1]
mov rax, r8
cmp rdx, 0x1000
jb 0x14000c0ae
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c645
mov rcx, r8
jmp 0x14000c31e
mov eax, dword [rsp + 0x168]
cmp eax, 1
je 0x14000c1a1
cmp eax, 2
je 0x14000c38d
mov rdx, rsi
lea rcx, [rsp + 0xd8]
call fcn.140002860
mov r8, rax
mov dword [rsp + 0x58], 0x50121118
mov word [rsp + 0x5c], 0x100
mov rdx, rdi
nop dword [rax]
nop dword [rax + rax]
lea ecx, [rdx + 0x7c]
xor byte [rsp + rdx + 0x58], cl
inc rdx
cmp rdx, 4
jb 0x14000c100
mov byte [rsp + 0x5d], 0
movdqa xmm0, xmmword [0x14006ad80]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x78], 1
mov rcx, rdi
nop dword [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 0xf
jb 0x14000c130
mov byte [rsp + 0x78], 0
mov dword [rsp + 0x60], 0x170d1d
mov byte [rsp + 0x64], 1
mov rcx, rdi
nop word [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x60], al
inc rcx
cmp rcx, 3
jb 0x14000c160
mov byte [rsp + 0x64], 0
mov dword [rsp + 0x28], 1
mov qword [rsp + 0x20], r8
mov r9, r13
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x68]
lea rcx, [rsp + 0x60]
call fcn.14000bd00
test al, al
jne 0x14000c284
mov rdx, rsi
lea rcx, [rsp + 0xd8]
call fcn.140002860
mov r8, rax
mov dword [rsp + 0x58], 0x50121118
mov word [rsp + 0x5c], 0x100
mov rdx, rdi
nop word [rax + rax]
lea ecx, [rdx + 0x7c]
xor byte [rsp + rdx + 0x58], cl
inc rdx
cmp rdx, 4
jb 0x14000c1d0
mov byte [rsp + 0x5d], 0
movdqa xmm0, xmmword [0x14006ad80]
movdqu xmmword [rsp + 0xa0], xmm0
mov byte [rsp + 0xb0], 1
mov rcx, rdi
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0xa0], al
inc rcx
cmp rcx, 0xf
jb 0x14000c201
mov byte [rsp + 0xb0], 0
mov dword [rsp + 0x68], 0x1a0c1212
mov dword [rsp + 0x6c], 0xfbedf0
mov byte [rsp + 0x70], 1
mov rcx, rdi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x68], al
inc rcx
cmp rcx, 7
jb 0x14000c240
mov byte [rsp + 0x70], 0
mov dword [rsp + 0x28], 2
mov qword [rsp + 0x20], r8
mov r9, r13
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x68]
call fcn.14000bd00
test al, al
je 0x14000c38d
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0x10
jb 0x14000c2c7
inc rdx
mov rcx, qword [rsp + 0xb8]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000c2c2
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c5e6
call fcn.1400668bc
movdqa xmm0, xmmword [0x14006abc0]
mov byte [rsp + 0xb8], 0
movdqu xmmword [rsp + 0xc8], xmm0
mov rdx, qword [rsp + 0x98]
cmp rdx, 0x10
jb 0x14000c323
inc rdx
mov rcx, qword [rsp + 0x80]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14000c31e
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c645
call fcn.1400668bc
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x80], 0
mov rdx, qword [r15]
cmp rdx, 0x10
jb 0x14000c378
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14000c373
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000c6e4
mov rcx, r8
call fcn.1400668bc
mov qword [rsi + 0x10], rdi
mov qword [r15], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
mov al, 1
jmp 0x14000c6c1
mov rdx, qword [rsp + 0xd0]
cmp rdx, 0x10
jb 0x14000c3d0
inc rdx
mov rcx, qword [rsp + 0xb8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c3cb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c5e6
call fcn.1400668bc
movdqa xmm0, xmmword [0x14006abc0]
movdqu xmmword [rsp + 0xc8], xmm0
mov byte [rsp + 0xb8], 0
mov rdx, qword [rsp + 0x98]
cmp rdx, 0x10
jb 0x14000c42c
inc rdx
mov rcx, qword [rsp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000c427
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000c645
call fcn.1400668bc
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x80], 0
mov rdx, qword [r15]
cmp rdx, 0x10
jb 0x14000c481
inc rdx
mov rcx, qword [rsi]
cmp rdx, 0x1000
jb 0x14000c47c
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000c6e4
mov rcx, r8
call fcn.1400668bc
mov qword [rsi + 0x10], rdi
mov qword [r15], reloc.WS2_32.dll_ntohs
mov byte [rsi], 0
jmp 0x14000c6bf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor al, al
mov rcx, qword [rsp + 0xf8]
xor rcx, rsp
call fcn.140066950
add rsp, 0x100
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3