Function at 0x140331c70
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov eax, reloc.WS2_32.dll_getservbyport
call fcn.14036a3f0
sub rsp, rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax]
shl rax, 0x38
mov qword [rsp + 0x18], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 8]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x10]
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x40]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x40]
cmp dword [rax + 0x30], 0
je 0x140331cf7
cmp qword [rsp + 0x50], 0
je 0x140331cf7
mov rax, qword [rsp + 0x40]
mov eax, dword [rax + 0x2c]
cmp qword [rsp + 0x50], rax
je 0x140331cfe
xor eax, eax
jmp 0x14033250b
mov rax, qword [rsp + 0x40]
mov eax, dword [rax + 0x28]
mov dword [rsp + 4], eax
mov eax, dword [rsp + 4]
dec eax
mov dword [rsp + 4], eax
cmp dword [rsp + 4], 6
ja case.default.0x140331d34
mov eax, dword [rsp + 4]
lea rcx, [0x140000000]
mov eax, dword [rcx + rax*4 + 0x332510]
add rax, rcx
jmp rax
mov eax, 1
imul rax, rax, 6
mov rcx, qword [rsp + 0x40]
movzx eax, byte [rcx + rax + 0x38]
shl rax, 0x30
mov rcx, qword [rsp + 0x18]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x18], rax
mov eax, 1
imul rax, rax, 5
mov rcx, qword [rsp + 0x40]
movzx eax, byte [rcx + rax + 0x38]
shl rax, 0x28
mov rcx, qword [rsp + 0x18]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x18], rax
mov eax, 1
imul rax, rax, 4
mov rcx, qword [rsp + 0x40]
movzx eax, byte [rcx + rax + 0x38]
shl rax, 0x20
mov rcx, qword [rsp + 0x18]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x18], rax
mov eax, 1
imul rax, rax, 3
mov rcx, qword [rsp + 0x40]
movzx eax, byte [rcx + rax + 0x38]
shl rax, 0x18
mov rcx, qword [rsp + 0x18]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x18], rax
mov eax, 1
imul rax, rax, 2
mov rcx, qword [rsp + 0x40]
movzx eax, byte [rcx + rax + 0x38]
shl rax, 0x10
mov rcx, qword [rsp + 0x18]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x18], rax
mov eax, 1
imul rax, rax, 1
mov rcx, qword [rsp + 0x40]
movzx eax, byte [rcx + rax + 0x38]
shl rax, 8
mov rcx, qword [rsp + 0x18]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x18], rax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x40]
movzx eax, byte [rcx + rax + 0x38]
mov rcx, qword [rsp + 0x18]
or rcx, rax
mov rax, rcx
mov qword [rsp + 0x18], rax
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x10]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10], rax
mov dword [rsp], 0
jmp 0x140331e69
mov eax, dword [rsp]
inc eax
mov dword [rsp], eax
mov rax, qword [rsp + 0x40]
mov eax, dword [rax + 0x30]
cmp dword [rsp], eax
jae 0x140331fcd
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 8]
shl rax, 0xd
mov rcx, qword [rsp + 8]
shr rcx, 0x33
or rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x28]
shl rax, 0x20
mov rcx, qword [rsp + 0x28]
shr rcx, 0x20
or rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x10]
shl rax, 0x10
mov rcx, qword [rsp + 0x10]
shr rcx, 0x30
or rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x10]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10]
shl rax, 0x15
mov rcx, qword [rsp + 0x10]
shr rcx, 0x2b
or rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x10]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 8]
shl rax, 0x11
mov rcx, qword [rsp + 8]
shr rcx, 0x2f
or rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x20]
shl rax, 0x20
mov rcx, qword [rsp + 0x20]
shr rcx, 0x20
or rax, rcx
mov qword [rsp + 0x20], rax
xor eax, eax
test eax, eax
jne 0x140331e7a
jmp 0x140331e61
mov rax, qword [rsp + 0x18]
mov rcx, qword [rsp + 0x28]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x40]
cmp dword [rax + 0x2c], 0x10
jne 0x140331fff
mov rax, qword [rsp + 0x20]
xor rax, 0xee
mov qword [rsp + 0x20], rax
jmp 0x14033200f
mov rax, qword [rsp + 0x20]
xor rax, 0xff
mov qword [rsp + 0x20], rax
mov dword [rsp], 0
jmp 0x140332020
mov eax, dword [rsp]
inc eax
mov dword [rsp], eax
mov rax, qword [rsp + 0x40]
mov eax, dword [rax + 0x34]
cmp dword [rsp], eax
jae 0x140332184
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 8]
shl rax, 0xd
mov rcx, qword [rsp + 8]
shr rcx, 0x33
or rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x28]
shl rax, 0x20
mov rcx, qword [rsp + 0x28]
shr rcx, 0x20
or rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x10]
shl rax, 0x10
mov rcx, qword [rsp + 0x10]
shr rcx, 0x30
or rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x10]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10]
shl rax, 0x15
mov rcx, qword [rsp + 0x10]
shr rcx, 0x2b
or rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x10]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 8]
shl rax, 0x11
mov rcx, qword [rsp + 8]
shr rcx, 0x2f
or rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x20]
shl rax, 0x20
mov rcx, qword [rsp + 0x20]
shr rcx, 0x20
or rax, rcx
mov qword [rsp + 0x20], rax
xor eax, eax
test eax, eax
jne 0x140332031
jmp 0x140332018
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x28]
xor rcx, rax
mov rax, rcx
xor rax, qword [rsp + 0x20]
xor rax, qword [rsp + 0x10]
mov qword [rsp + 0x18], rax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x48]
movzx edx, byte [rsp + 0x18]
mov byte [rcx + rax], dl
mov eax, dword [rsp + 0x18]
shr eax, 8
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx], al
mov eax, dword [rsp + 0x18]
shr eax, 0x10
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx], al
mov eax, dword [rsp + 0x18]
shr eax, 0x18
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx], al
mov rax, qword [rsp + 0x18]
shr rax, 0x20
mov ecx, 1
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx + 4], al
mov rax, qword [rsp + 0x18]
shr rax, 0x20
shr eax, 8
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx + 4], al
mov rax, qword [rsp + 0x18]
shr rax, 0x20
shr eax, 0x10
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx + 4], al
mov rax, qword [rsp + 0x18]
shr rax, 0x20
shr eax, 0x18
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx + 4], al
mov rax, qword [rsp + 0x40]
cmp dword [rax + 0x2c], 8
jne 0x14033228b
mov eax, 1
jmp 0x14033250b
mov rax, qword [rsp + 8]
xor rax, 0xdd
mov qword [rsp + 8], rax
mov dword [rsp], 0
jmp 0x1403322ac
mov eax, dword [rsp]
inc eax
mov dword [rsp], eax
mov rax, qword [rsp + 0x40]
mov eax, dword [rax + 0x34]
cmp dword [rsp], eax
jae 0x140332410
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 8]
shl rax, 0xd
mov rcx, qword [rsp + 8]
shr rcx, 0x33
or rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x28]
shl rax, 0x20
mov rcx, qword [rsp + 0x28]
shr rcx, 0x20
or rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0x10]
shl rax, 0x10
mov rcx, qword [rsp + 0x10]
shr rcx, 0x30
or rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 0x10]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x10]
shl rax, 0x15
mov rcx, qword [rsp + 0x10]
shr rcx, 0x2b
or rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x10]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 0x10], rax
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x20]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 8]
shl rax, 0x11
mov rcx, qword [rsp + 8]
shr rcx, 0x2f
or rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x20]
mov rcx, qword [rsp + 8]
xor rcx, rax
mov rax, rcx
mov qword [rsp + 8], rax
mov rax, qword [rsp + 0x20]
shl rax, 0x20
mov rcx, qword [rsp + 0x20]
shr rcx, 0x20
or rax, rcx
mov qword [rsp + 0x20], rax
xor eax, eax
test eax, eax
jne 0x1403322bd
jmp 0x1403322a4
mov rax, qword [rsp + 8]
mov rcx, qword [rsp + 0x28]
xor rcx, rax
mov rax, rcx
xor rax, qword [rsp + 0x20]
xor rax, qword [rsp + 0x10]
mov qword [rsp + 0x18], rax
mov eax, 1
imul rax, rax, 0
mov rcx, qword [rsp + 0x48]
movzx edx, byte [rsp + 0x18]
mov byte [rcx + rax + 8], dl
mov eax, dword [rsp + 0x18]
shr eax, 8
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx + 8], al
mov eax, dword [rsp + 0x18]
shr eax, 0x10
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx + 8], al
mov eax, dword [rsp + 0x18]
shr eax, 0x18
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx + 8], al
mov rax, qword [rsp + 0x18]
shr rax, 0x20
mov ecx, 1
imul rcx, rcx, 0
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx + 0xc], al
mov rax, qword [rsp + 0x18]
shr rax, 0x20
shr eax, 8
mov ecx, 1
imul rcx, rcx, 1
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx + 0xc], al
mov rax, qword [rsp + 0x18]
shr rax, 0x20
shr eax, 0x10
mov ecx, 1
imul rcx, rcx, 2
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx + 0xc], al
mov rax, qword [rsp + 0x18]
shr rax, 0x20
shr eax, 0x18
mov ecx, 1
imul rcx, rcx, 3
mov rdx, qword [rsp + 0x48]
mov byte [rdx + rcx + 0xc], al
mov eax, 1
add rsp, 0x38
ret