Function at 0x140005290
Capabilities:
Encode data using xor

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rsi
push rdi
sub rsp, 0xe0
mov rax, qword [0x140087118]
xor rax, rsp
mov qword [rsp + 0xd0], rax
mov rbx, rcx
xor esi, esi
mov dword [0x140087798], 2
mov qword [r11 - 0x60], rsi
movdqa xmm0, xmmword [0x14006abc0]
movdqu xmmword [r11 - 0x50], xmm0
mov byte [r11 - 0x60], sil
lea ecx, [rsi + 8]
call fcn.140066880
mov qword [rsp + 0x38], rax
test rax, rax
je 0x1400052f5
mov rcx, rax
call fcn.14000fb50
nop
mov ecx, 0x1024
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rdi, rax
xor edx, edx
mov r8d, 0x1024
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov byte [0x140087610], 0
xor r8d, r8d
lea rdx, [0x14006ace3]
lea rcx, [0x140087618]
call fcn.140003080
mov dword [rsp + 0x48], 0x170a081d
mov dword [rsp + 0x4c], 0xf3f2e0df
mov word [rsp + 0x50], 0x100
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x48], al
inc rcx
cmp rcx, 8
jb 0x140005350
mov byte [rsp + 0x51], 0
mov qword [rsp + 0xb8], 8
mov qword [rsp + 0xc0], reloc.WS2_32.dll_ntohs
mov rax, qword [rsp + 0x48]
mov qword [rsp + 0xa8], rax
mov byte [rsp + 0xb0], 0
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x58]
call fcn.140011210
mov r8, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400053b1
mov r8, qword [rax]
mov dword [rsp + 0x38], 0x160a1e1d
mov dword [rsp + 0x3c], 0x100efef
mov rcx, rsi
nop dword [rax]
nop dword [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x38], al
inc rcx
cmp rcx, 6
jb 0x1400053d0
mov byte [rsp + 0x3f], 0
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x88]
call fcn.14000eb20
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140005438
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005433
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005433
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
movdqa xmm0, xmmword [0x14006abc0]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
mov rdx, qword [rsp + 0xc0]
cmp rdx, 0x10
jb 0x140005491
inc rdx
mov rcx, qword [rsp + 0xa8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000548c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000548c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
lea rdx, [0x1400876f8]
lea rcx, [rsp + 0x58]
call fcn.140011210
mov r8, rax
cmp qword [rax + 0x18], 0x10
jb 0x1400054af
mov r8, qword [rax]
mov dword [rsp + 0x38], 0x170a081d
mov dword [rsp + 0x3c], 0xe6e8df
mov byte [rsp + 0x40], 1
mov rcx, rsi
nop word [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x38], al
inc rcx
cmp rcx, 7
jb 0x1400054d0
mov byte [rsp + 0x40], 0
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x88]
call fcn.14000eb20
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x140005538
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005533
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005533
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
lea rdx, [0x1400876d8]
lea rcx, [rsp + 0xa8]
call fcn.140002860
mov r8, rax
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x30]
call fcn.140015c60
mov r8, rax
cmp qword [rax + 0x18], 0x10
jb 0x14000556b
mov r8, qword [rax]
mov dword [rsp + 0x48], 0x170a081d
mov dword [rsp + 0x4c], 0xeaf6efe5
mov dword [rsp + 0x50], 0xeef2e4e7
mov dword [rsp + 0x54], 0x100e7e7
mov rcx, rsi
nop
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x48], al
inc rcx
cmp rcx, 0xe
jb 0x140005590
mov byte [rsp + 0x57], 0
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x88]
call fcn.14000eb20
nop
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x1400055f8
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400055f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400055f3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
lea rcx, [rsp + 0x88]
call fcn.14000edc0
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x70], rsi
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140005620
mov rdx, rax
lea rcx, [rsp + 0x58]
call fcn.1400025a0
mov dword [rsp + 0x48], 0x50170d1d
mov dword [rsp + 0x4c], 0xaceeede4
mov word [rsp + 0x50], 0x100
mov rcx, rsi
nop dword [rax]
nop word [rax + rax]
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0x48], al
inc rcx
cmp rcx, 8
jb 0x140005660
mov byte [rsp + 0x51], 0
movdqa xmm0, xmmword [0x14006ad80]
movdqu xmmword [rsp + 0xa8], xmm0
mov byte [rsp + 0xb8], 1
mov rcx, rsi
lea eax, [rcx + 0x7c]
xor byte [rsp + rcx + 0xa8], al
inc rcx
cmp rcx, 0xf
jb 0x140005691
mov byte [rsp + 0xb8], 0
xor eax, eax
mov word [rsp + 0x38], ax
mov dword [rsp + 0x28], esi
lea rax, [rsp + 0x58]
mov qword [rsp + 0x20], rax
mov r9, rdi
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x38]
call fcn.14000bd00
test al, al
jne 0x14000572e
mov byte [0x140087611], 1
mov rdx, qword [rsp + 0xa0]
cmp rdx, 0x10
jb 0x140005729
inc rdx
mov rcx, qword [rsp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005724
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400058cd
call fcn.1400668bc
jmp 0x1400058da
cmp dword [0x140087768], 1
je 0x140005790
mov rcx, rbx
call fcn.140008be0
mov rcx, rbx
call fcn.140005290
nop
mov rdx, qword [rsp + 0xa0]
cmp rdx, 0x10
jb 0x14000578b
inc rdx
mov rcx, qword [rsp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005786
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400058cd
call fcn.1400668bc
jmp 0x1400058da
cmp dword [0x14008778c], 0xf1
je 0x1400057f5
mov rcx, rbx
call fcn.140008be0
mov rcx, rbx
call fcn.140005290
nop
mov rdx, qword [rsp + 0xa0]
cmp rdx, 0x10
jb 0x1400057f0
inc rdx
mov rcx, qword [rsp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400057eb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400058cd
call fcn.1400668bc
jmp 0x1400058da
lea rax, str.Req_IDNF
cmp rdi, rax
jne 0x140005850
mov byte [0x140087611], 1
mov rdx, qword [rsp + 0xa0]
cmp rdx, 0x10
jb 0x14000584b
inc rdx
mov rcx, qword [rsp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005846
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400058cd
call fcn.1400668bc
jmp 0x1400058da
xor edx, edx
mov r8d, 0x1024
mov rcx, qword [0x140087760]
call sub.VCRUNTIME140.dll_memset
mov rcx, rdi
mov rdx, qword [0x140087760]
nop
movzx eax, byte [rcx]
mov byte [rdx], al
lea rcx, [rcx + 1]
lea rdx, [rdx + 1]
test al, al
jne 0x140005870
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, rbx
call fcn.1400063c0
nop
mov rdx, qword [rsp + 0xa0]
cmp rdx, 0x10
jb 0x1400058da
inc rdx
mov rcx, qword [rsp + 0x88]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400058d4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400058d4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400668bc
nop
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.140066950
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret