Function at 0x140061680
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x1400e1088]
xor rax, rsp
mov qword [rbp + 8], rax
mov r15, r8
mov r12, rdx
mov r13, rcx
mov qword [rbp - 0x50], rcx
mov qword [rbp - 0x48], rdx
mov qword [rbp - 0x40], r8
xor r14d, r14d
call fcn.1400656b0
mov rsi, rax
test rax, rax
jne 0x140061702
mov dword [rsp + 0x30], 0x4a49514d
mov word [rsp + 0x34], 0x100
mov rdx, r13
lea rcx, [rsp + 0x30]
call fcn.140055290
nop
mov rcx, r12
call fcn.140048f10
nop
mov rcx, r15
call fcn.140048f10
jmp 0x140061b97
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], 0
mov qword [rbp - 0x18], r14
mov qword [rbp - 8], r14
mov qword [rbp], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x18], 0
mov r8, r15
cmp qword [r15 + 0x18], 0x10
jb 0x140061737
mov r8, qword [r15]
mov edx, 0x2712
mov rcx, rsi
call fcn.140067eb0
mov edx, 0x51
lea r8d, [rdx - 0x50]
mov rcx, rsi
call fcn.140067eb0
mov dword [rsp + 0x20], 0x475c4148
mov dword [rsp + 0x24], 0x4415c52
mov dword [rsp + 0x28], 0x43455c
mov byte [rsp + 0x2c], 1
lea r8, [rsp + 0x20]
mov edx, 0x27c1
mov rcx, rsi
call fcn.140067eb0
mov edx, 0x40
lea r8d, [rdx - 0x3f]
mov rcx, rsi
call fcn.140067eb0
mov edx, 0xac
mov r8d, 1
mov rcx, rsi
call fcn.140067eb0
mov r8, r12
cmp qword [r12 + 0x18], 0x10
jb 0x1400617b7
mov r8, qword [r12]
mov edx, 0x271f
mov rcx, rsi
call fcn.140067eb0
lea r8, [0x140063f60]
mov edx, 0x4e2b
mov rcx, rsi
call fcn.140067eb0
lea r8, [rbp - 0x38]
mov edx, 0x2711
mov rcx, rsi
call fcn.140067eb0
lea r8, [0x14005c9f0]
mov edx, 0x4e6f
mov rcx, rsi
call fcn.140067eb0
lea r8, [rbp - 0x18]
mov edx, 0x272d
mov rcx, rsi
call fcn.140067eb0
mov rcx, rsi
call fcn.140065770
test eax, eax
je 0x140061861
mov ecx, eax
call fcn.140064d70
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x140061840
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.140049b30
lea rcx, [rsp + 0x38]
call fcn.14005b470
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
lea rdx, [rbp - 0x38]
lea rcx, [rsp + 0x38]
call fcn.140048fb0
mov rdi, rax
lea rax, [rbp - 0x70]
mov qword [rbp - 0x78], rax
mov rdx, r15
lea rcx, [rbp - 0x70]
call fcn.140048fb0
mov rbx, rax
mov rdx, r12
lea rcx, [rsp + 0x58]
call fcn.140048fb0
nop
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call fcn.140057600
lea r8, [rbp - 0x50]
mov edx, 0x400022
mov rcx, rsi
call fcn.140065680
test eax, eax
jne 0x140061a42
xor dil, dil
xor esi, esi
mov rcx, qword [rbp - 0x50]
cmp dword [rcx], esi
jle 0x1400619c2
xor r14d, r14d
nop dword [rax]
mov rax, qword [rcx + 8]
mov rbx, qword [r14 + rax]
test rbx, rbx
je 0x1400619ab
movdqa xmm0, xmmword [0x1400ba1a0]
movdqu xmmword [rsp + 0x38], xmm0
mov dword [rsp + 0x48], 0x53565d45
mov word [rsp + 0x4c], 0x44
mov byte [rsp + 0x4e], 1
xor ecx, ecx
nop word [rax + rax]
lea eax, [rcx + 0x23]
xor byte [rsp + rcx + 0x38], al
inc rcx
cmp rcx, 0x15
jb 0x140061920
mov byte [rsp + 0x4e], 0
lea rdx, [rsp + 0x38]
mov rcx, qword [rbx]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x140061997
mov dword [rsp + 0x20], 0x151416f
mov dword [rsp + 0x24], 0x446c0854
mov dword [rsp + 0x28], 0x5e545e48
mov word [rsp + 0x2c], 0x5b
mov byte [rsp + 0x2e], 1
nop dword [rax + rax]
lea ecx, [rax + 0x23]
xor byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 0xd
jb 0x140061970
mov byte [rsp + 0x2e], 0
lea rdx, [rsp + 0x20]
mov rcx, qword [rbx]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x14006199a
mov dil, 1
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x1400618f1
mov rcx, qword [rbp - 0x50]
inc esi
add r14, 8
cmp esi, dword [rcx]
jl 0x1400618e0
test dil, dil
jne 0x140061a3f
movdqa xmm0, xmmword [0x1400ba0d0]
movdqu xmmword [rsp + 0x58], xmm0
movdqa xmm1, xmmword [0x1400ba150]
movdqu xmmword [rsp + 0x68], xmm1
mov dword [rsp + 0x78], 0x22202d25
mov word [rsp + 0x7c], 0x100
xor ecx, ecx
nop
lea eax, [rcx + 0x23]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 0x24
jb 0x1400619f0
mov byte [rsp + 0x7d], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov r8d, Ordinal_41
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x38]
call fcn.140049b30
lea rcx, [rsp + 0x38]
call fcn.14005b470
xor r14d, r14d
movups xmm0, xmmword [rbp - 0x38]
movups xmmword [r13], xmm0
movups xmm1, xmmword [rbp - 0x28]
movups xmmword [r13 + 0x10], xmm1
mov qword [rbp - 0x28], r14
mov eax, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x20], rax
mov byte [rbp - 0x38], 0
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x140061aa7
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061a9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140061a9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b3dcc
mov rax, qword [rbp - 0x20]
mov qword [rbp - 8], r14
mov qword [rbp], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x18], 0
cmp rax, 0x10
jb 0x140061af2
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140061aed
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140061aed
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400b3dcc
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x38], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x140061b3e
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x140061b39
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140061bc1
mov rcx, r8
call fcn.1400b3dcc
mov qword [r12 + 0x10], r14
mov qword [r12 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r12], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x140061b87
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x140061b82
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x140061bc8
mov rcx, r8
call fcn.1400b3dcc
mov qword [r15 + 0x10], r14
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov rax, r13
mov rcx, qword [rbp + 8]
xor rcx, rsp
call fcn.1400b3b10
mov rbx, qword [rsp + 0x168]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3