Function at 0x140001cd4
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov r14, rcx
movsxd rbx, edx
lea rcx, [r8 + 4]
mov rsi, r8
mov r8d, 0x11c
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov byte [rbx + r14 - 2], 0
mov r13d, 1
mov dword [rsi], 4
mov r15b, r13b
mov al, byte [r14]
test al, al
je 0x1400023d9
mov rdi, r14
cmp al, 0xa
je 0x140001d35
cmp al, 0xd
je 0x140001d35
add r14, r13
mov al, byte [r14]
test al, al
jne 0x140001d23
mov rbx, r14
sub rbx, rdi
test rbx, rbx
jle 0x14000239d
test r15b, r15b
je 0x140001f76
xor r15b, r15b
cmp byte [rdi], 0x20
jne 0x140001d60
add rdi, r13
sub rbx, r13
test rbx, rbx
jg 0x140001d50
cmp rbx, 4
jle 0x1400023d5
mov eax, dword [0x14000e85c]
lea r9, [rbp + 0x40]
mov dword [rbp + 0x40], eax
xor r8d, r8d
mov al, byte [0x14000e860]
mov byte [rbp + 0x44], al
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
mov al, r8b
add r8d, r13d
sub al, cl
add al, 0x34
xor byte [r9], al
add r9, r13
cmp r8d, 5
jl 0x140001d83
mov r8d, 4
lea rdx, [rbp + 0x40]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x140001dd8
mov eax, 4
lea rcx, [rax - 8]
jmp 0x140001eaa
mov eax, dword [0x14000e870]
lea r9, [rbp + 0x58]
mov dword [rbp + 0x58], eax
xor r8d, r8d
movzx eax, word [0x14000e874]
mov word [rbp + 0x5c], ax
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
mov al, r8b
add r8d, r13d
sub al, cl
add al, 0x34
xor byte [r9], al
add r9, r13
cmp r8d, 6
jl 0x140001df3
mov r8d, 5
lea rdx, [rbp + 0x58]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x140001ea0
mov eax, dword [0x14000e854]
lea r9, [rbp - 0x50]
mov dword [rbp - 0x50], eax
xor r8d, r8d
movzx eax, word [0x14000e858]
mov word [rbp - 0x4c], ax
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
mov al, r8b
add r8d, r13d
sub al, cl
add al, 0x34
xor byte [r9], al
add r9, r13
cmp r8d, 6
jl 0x140001e55
mov r8d, 5
lea rdx, [rbp - 0x50]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x1400023cf
mov rcx, 0xfffffffffffffffb
lea eax, [rcx + 0xa]
add rbx, rcx
mov dword [rsi], 3
add rdi, rax
jmp 0x140001ec3
cmp byte [rdi], 0x20
jne 0x140001ec8
add rdi, r13
sub rbx, r13
test rbx, rbx
jg 0x140001eb8
cmp rbx, 4
jl 0x1400023d5
mov r8d, 4
lea rdx, str.1.0
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x140001ef2
sub rbx, 4
jmp 0x140001f17
mov r8d, 4
lea rdx, str.1.1
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x1400023c6
sub rbx, 4
mov eax, r13d
add rdi, 4
mov dword [rsi + 4], eax
test rbx, rbx
jle 0x1400023d5
cmp byte [rdi], 0x20
jne 0x140001f37
add rdi, r13
sub rbx, r13
test rbx, rbx
jg 0x140001f27
test rbx, rbx
jle 0x1400023d5
xor ecx, ecx
xor edx, edx
test rbx, rbx
jle 0x140001f6b
mov al, byte [rdi]
sub al, 0x30
cmp al, 9
ja 0x140001f6b
movsx eax, byte [rdi]
lea ecx, [rcx + rcx*4]
add edx, r13d
lea ecx, [rcx - 0x18]
add rdi, r13
lea ecx, [rax + rcx*2]
movsxd rax, edx
cmp rax, rbx
jl 0x140001f49
mov dword [rsi + 0x108], ecx
jmp 0x14000239d
movsx ecx, byte [rdi]
sub ecx, 0x43
je 0x14000218c
sub ecx, 0xa
je 0x140002112
sub ecx, 6
je 0x1400020b3
cmp ecx, r13d
jne 0x14000239d
cmp rbx, 0x12
jle 0x14000239d
movzx eax, word [0x14000e850]
lea r9, [rbp - 0x18]
movups xmm0, xmmword [str._gwyk]
mov word [rbp - 8], ax
xor r8d, r8d
mov al, byte [0x14000e852]
mov byte [rbp - 6], al
movups xmmword [rbp - 0x18], xmm0
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
mov al, r8b
add r8d, r13d
sub al, cl
add al, 0x34
xor byte [r9], al
add r9, r13
cmp r8d, 0x13
jl 0x140001fcd
mov r8d, reloc.WS2_32.dll_select
lea rdx, [rbp - 0x18]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x14000239d
add rdi, 0x12
sub rbx, 0x12
jmp 0x14000202d
cmp byte [rdi], 0x20
jne 0x14000209c
add rdi, r13
sub rbx, r13
test rbx, rbx
jg 0x140002022
jmp 0x14000209c
cmp byte [0x14000e86f], 0
mov rax, qword [str.wcys_dzec]
mov qword [rbp - 0x48], rax
je 0x14000207f
xor r8d, r8d
lea r9, [rbp - 0x48]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
mov al, r8b
add r8d, r13d
sub al, cl
add al, 0x34
xor byte [r9], al
add r9, r13
cmp r8d, 8
jl 0x14000204f
mov r8d, 7
lea rdx, [rbp - 0x48]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
je 0x1400020a7
add rdi, r13
sub rbx, r13
cmp rbx, 7
jge 0x140002034
jmp 0x14000239d
mov byte [rsi + 0x10d], r13b
jmp 0x14000239d
cmp rbx, 4
jle 0x14000239d
mov r8d, 5
lea rdx, str.SHA1:
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x1400020de
mov byte [rsi + 0x119], r13b
cmp rbx, 6
jle 0x14000239d
mov r8d, 7
lea rdx, str.SHA256:
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x14000239d
mov byte [rsi + 0x11a], r13b
jmp 0x14000239d
cmp rbx, 3
jle 0x14000239d
mov eax, dword [0x14000e884]
lea r9, [rbp + 0x50]
mov dword [rbp + 0x50], eax
xor r8d, r8d
mov al, byte [0x14000e888]
mov byte [rbp + 0x54], al
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
mov al, r8b
add r8d, r13d
sub al, cl
add al, 0x34
xor byte [r9], al
add r9, r13
cmp r8d, 5
jl 0x140002135
mov r8d, 4
lea rdx, [rbp + 0x50]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x14000239d
mov byte [rsi + 0x118], r13b
jmp 0x14000239d
cmp rbx, 0xb
jle 0x14000239d
cmp byte [0x14000e89b], 0
movsd xmm0, qword [str.wzxyznrss]
mov eax, dword [0x14000e898]
movsd qword [rbp - 0x28], xmm0
mov dword [rbp - 0x20], eax
je 0x1400021ec
xor r8d, r8d
lea r9, [rbp - 0x28]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
mov al, r8b
add r8d, r13d
sub al, cl
add al, 0x34
xor byte [r9], al
add r9, r13
cmp r8d, 0xc
jl 0x1400021bc
mov r8d, reloc.WS2_32.dll_inet_addr
lea rdx, [rbp - 0x28]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x1400022d9
add rdi, 0xb
sub rbx, 0xb
jmp 0x14000221c
cmp byte [rdi], 0x20
jne 0x140002221
add rdi, r13
sub rbx, r13
test rbx, rbx
jg 0x140002211
cmp rbx, 5
jl 0x14000239d
mov r8d, 5
lea rdx, str.CLOSE
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x140002250
mov byte [rsi + 0x10c], al
jmp 0x14000239d
cmp rbx, 0xa
jl 0x14000239d
movzx eax, word [0x14000e880]
lea r9, [rbp - 0x38]
movsd xmm0, qword [0x14000e878]
xor r8d, r8d
mov word [rbp - 0x30], ax
mov al, byte [0x14000e882]
mov byte [rbp - 0x2e], al
movsd qword [rbp - 0x38], xmm0
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
mov al, r8b
add r8d, r13d
sub al, cl
add al, 0x34
xor byte [r9], al
add r9, r13
cmp r8d, 0xb
jl 0x140002282
mov r8d, 0xa
lea rdx, [rbp - 0x38]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x14000239d
mov byte [rsi + 0x10c], r13b
jmp 0x14000239d
cmp rbx, 0xf
jle 0x14000239d
movups xmm0, xmmword [str.wzxcwn]
movdqu xmmword [rbp - 0x48], xmm0
psrldq xmm0, 0xf
movd eax, xmm0
test al, al
je 0x140002333
xor r8d, r8d
lea r9, [rbp - 0x48]
mov eax, 0x3521cfb3
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x35
mov al, r8b
add r8d, r13d
sub al, cl
add al, 0x34
xor byte [r9], al
add r9, r13
cmp r8d, 0x10
jl 0x140002303
mov r8d, recv
lea rdx, [rbp - 0x48]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x14000239d
add rdi, 0xf
sub rbx, 0xf
test rbx, rbx
jle 0x14000239d
cmp byte [rdi], 0x20
jne 0x140002367
add rdi, r13
sub rbx, r13
test rbx, rbx
jg 0x140002357
test rbx, rbx
jle 0x14000239d
xor ecx, ecx
xor edx, edx
mov al, byte [rdi]
sub al, 0x30
cmp al, 9
ja 0x140002396
movsx rax, byte [rdi]
lea rcx, [rcx + rcx*4]
add edx, r13d
lea rcx, [rcx - 0x18]
add rdi, r13
lea rcx, [rax + rcx*2]
movsxd rax, edx
cmp rax, rbx
jl 0x140002370
mov qword [rsi + 0x110], rcx
mov al, byte [r14]
cmp al, 0xd
jne 0x1400023aa
add r14, r13
mov al, byte [r14]
mov rdx, r14
mov cl, al
cmp al, 0xa
jne 0x1400023b7
mov al, byte [r14 + 1]
inc r14
cmp cl, 0xa
cmovne r14, rdx
jmp 0x140001d18
mov dword [rsi + 4], 2
jmp 0x1400023d5
mov dword [rsi], 4
xor al, al
jmp 0x1400023dc
mov al, r13b
add rsp, 0x70
pop r15
pop r14
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret