Function at 0x140181430
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xb0
mov rax, qword [0x1402bf270]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov rdi, rdx
mov rsi, rcx
mov qword [rbp + 0x27], rdx
mov byte [rbp - 0x51], 0x62
mov al, listen
mov dl, reloc.WS2_32.dll_socket
mov r8b, reloc.WS2_32.dll_ntohs
mov r9b, gethostname
mov cl, reloc.WS2_32.dll_recvfrom
mov r10b, 7
mov r11b, reloc.WS2_32.dll_recv
movzx ebx, cl
xor r14d, r14d
xor al, 0x62
mov byte [rbp - 0x50], al
xor dl, 0x62
mov byte [rbp - 0x4f], dl
xor r8b, 0x62
mov byte [rbp - 0x4e], r8b
xor r9b, 0x62
mov byte [rbp - 0x4d], r9b
xor cl, 0x62
mov byte [rbp - 0x4c], cl
xor r10b, 0x62
mov byte [rbp - 0x4b], r10b
xor r11b, 0x62
mov byte [rbp - 0x4a], r11b
xor bl, 0x62
mov byte [rbp - 0x49], bl
mov byte [rbp - 0x48], r14b
xor r15d, r15d
mov qword [rbp - 0x31], r15
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x19], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x50]
mov rbx, 0xffffffffffffffff
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x1401814e0
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x31]
call fcn.14014d7f0
lea rdx, [rbp - 0x31]
mov rcx, rdi
call fcn.140185bd0
cmp byte [rax], 3
jne 0x140181820
mov rdx, qword [rax + 8]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14018151d
mov rdx, qword [rdx]
lea rcx, [rsi + 0xa0]
call fcn.14014d7f0
movdqa xmm0, xmmword [str._UNVtUWRUnHIH]
movdqu xmmword [rbp - 0x51], xmm0
mov rcx, r15
nop dword [rax]
movzx eax, byte [rbp - 0x51]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0xe
jb 0x140181540
mov byte [rbp - 0x42], r14b
mov qword [rbp - 0x31], r15
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x19], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x50]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x140181570
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x31]
call fcn.14014d7f0
lea rdx, [rbp - 0x31]
mov rcx, rdi
call fcn.140185bd0
cmp byte [rax], 3
jne 0x140181857
mov rdx, qword [rax + 8]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1401815ad
mov rdx, qword [rdx]
lea rcx, [rsi + 0xc0]
call fcn.14014d7f0
mov byte [rbp - 0x51], reloc.WLDAP32.dll_Ordinal_46
mov al, 0x40
mov cl, 0x5b
mov dl, 0x43
mov r8b, 0x65
mov r9b, 0x4b
mov r10b, 0x57
mov r11b, 0x5d
xor al, 0x2e
mov byte [rbp - 0x50], al
xor cl, 0x2e
mov byte [rbp - 0x4f], cl
xor dl, 0x2e
mov byte [rbp - 0x4e], dl
xor r8b, 0x2e
mov byte [rbp - 0x4d], r8b
xor r9b, 0x2e
mov byte [rbp - 0x4c], r9b
xor r10b, 0x2e
mov byte [rbp - 0x4b], r10b
xor r11b, 0x2e
mov byte [rbp - 0x4a], r11b
mov byte [rbp - 0x49], r14b
mov qword [rbp - 0x31], r15
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x19], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x50]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x140181620
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x31]
call fcn.14014d7f0
lea rdx, [rbp - 0x31]
mov rcx, rdi
call fcn.140185bd0
cmp byte [rax], 3
jne 0x14018188e
mov rdx, qword [rax + 8]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14018165d
mov rdx, qword [rdx]
lea rcx, [rsi + 0xe0]
call fcn.14014d7f0
mov byte [rbp - 0x51], reloc.WLDAP32.dll_Ordinal_33
mov al, 0x57
mov cl, 0x44
mov dl, 0x53
mov r8b, 0x52
mov r9b, 0x48
mov r10b, Ordinal_79
mov r11b, reloc.WLDAP32.dll_Ordinal_79
xor al, 0x21
mov byte [rbp - 0x50], al
xor cl, 0x21
mov byte [rbp - 0x4f], cl
xor dl, 0x21
mov byte [rbp - 0x4e], dl
xor r8b, 0x21
mov byte [rbp - 0x4d], r8b
xor r9b, 0x21
mov byte [rbp - 0x4c], r9b
xor r10b, 0x21
mov byte [rbp - 0x4b], r10b
xor r11b, 0x21
mov byte [rbp - 0x4a], r11b
mov byte [rbp - 0x49], r14b
mov qword [rbp - 0x31], r15
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x19], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x50]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], r14b
jne 0x1401816d0
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x31]
call fcn.14014d7f0
lea rdx, [rbp - 0x31]
mov rcx, rdi
call fcn.140185bd0
cmp byte [rax], 3
jne 0x1401818c5
mov rdx, qword [rax + 8]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x14018170d
mov rdx, qword [rdx]
lea rcx, [rsi + 0x100]
call fcn.14014d7f0
movdqa xmm0, xmmword [0x1402a3410]
movdqu xmmword [rbp - 0x51], xmm0
mov word [rbp - 0x41], 0x6f6a
xor eax, eax
mov byte [rbp - 0x3f], al
mov rcx, r15
nop dword [rax]
nop dword [rax + rax]
movzx eax, byte [rbp - 0x51]
xor byte [rbp + rcx - 0x50], al
inc rcx
cmp rcx, 0x11
jb 0x140181740
mov byte [rbp - 0x3f], r14b
mov qword [rbp - 0x31], r15
mov qword [rbp - 0x21], r15
mov qword [rbp - 0x19], reloc.WS2_32.dll_ntohs
lea rax, [rbp - 0x50]
nop dword [rax]
inc rbx
cmp byte [rax + rbx], r14b
jne 0x140181770
mov r8, rbx
lea rdx, [rbp - 0x50]
lea rcx, [rbp - 0x31]
call fcn.14014d7f0
lea rdx, [rbp - 0x31]
mov rcx, rdi
call fcn.140185bd0
cmp byte [rax], 3
jne 0x1401817e9
mov rdx, qword [rax + 8]
mov r8, qword [rdx + 0x10]
cmp qword [rdx + 0x18], 0x10
jb 0x1401817ac
mov rdx, qword [rdx]
lea rcx, [rsi + 0x120]
call fcn.14014d7f0
nop
lea rcx, [rdi + 8]
movzx edx, byte [rdi]
call fcn.14017fdc0
nop
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.1402683a0
mov rbx, qword [rsp + 0xf0]
add rsp, 0xb0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
mov rcx, rax
call fcn.1401848e0
mov qword [rbp - 0x59], rax
lea r8, [rbp - 0x59]
lea rcx, [rbp - 0x51]
call fcn.140190f10
nop
mov r8, rax
lea rcx, [rbp - 0x11]
call fcn.140190fb0
lea rdx, [0x1402bb3d8]
lea rcx, [rbp - 0x11]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.1401848e0
mov qword [rbp - 0x59], rax
lea r8, [rbp - 0x59]
lea rcx, [rbp - 0x51]
call fcn.140190f10
nop
mov r8, rax
lea rcx, [rbp - 0x11]
call fcn.140190fb0
lea rdx, [0x1402bb3d8]
lea rcx, [rbp - 0x11]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.1401848e0
mov qword [rbp - 0x59], rax
lea r8, [rbp - 0x59]
lea rcx, [rbp - 0x51]
call fcn.140190f10
nop
mov r8, rax
lea rcx, [rbp - 0x11]
call fcn.140190fb0
lea rdx, [0x1402bb3d8]
lea rcx, [rbp - 0x11]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.1401848e0
mov qword [rbp - 0x59], rax
lea r8, [rbp - 0x59]
lea rcx, [rbp - 0x51]
call fcn.140190f10
nop
mov r8, rax
lea rcx, [rbp - 0x11]
call fcn.140190fb0
lea rdx, [0x1402bb3d8]
lea rcx, [rbp - 0x11]
call sub.VCRUNTIME140.dll__CxxThrowException
nop
mov rcx, rax
call fcn.1401848e0
mov qword [rbp - 0x59], rax
lea r8, [rbp - 0x59]
lea rcx, [rbp - 0x51]
call fcn.140190f10
nop
mov r8, rax
lea rcx, [rbp - 0x11]
call fcn.140190fb0
lea rdx, [0x1402bb3d8]
lea rcx, [rbp - 0x11]
call sub.VCRUNTIME140.dll__CxxThrowException
int3