Function at 0x140032f00
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
xor r15d, r15d
mov r12d, 0x80
mov dword [rsp + 0x40], r8d
mov esi, 2
mov dword [rsp + 0xf0], r12d
mov r13d, reloc.WS2_32.dll_sendto
mov dword [rsp + 0x50], 1
mov r14d, esi
mov dword [rsp + 0xf8], r13d
test r8b, 1
je 0x140032f79
mov r12d, 0x400
lea r14d, [rsi - 1]
mov r13d, 8
mov dword [rsp + 0xf0], r12d
mov dword [rsp + 0xf8], r13d
mov dword [rsp + 0x50], r15d
cmp r8d, 0x80000000
jb 0x140032fb0
mov ecx, r8d
mov r12d, 1
shr ecx, 8
mov r14d, 1
and ecx, 0x1f
inc ecx
shl r12d, cl
mov ecx, r8d
shr ecx, 5
and ecx, 7
mov dword [rsp + 0xf0], r12d
shl r14d, cl
lea ecx, [r12 + 3]
imul ecx, r14d
shl ecx, 7
add ecx, 0x40
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov qword [rsp + 0x88], rax
test rax, rax
je 0x140033431
mov r8, qword [rsp + 0xe0]
mov qword [rsp + 0xa8], rbx
mov rcx, r8
lea rbx, [rax + 0x40]
mov qword [rsp + 0xa0], rbp
mov eax, r14d
mov qword [rsp + 0x98], rdi
shl eax, 5
mov ebp, eax
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x58], rbp
lea rdi, [rbx + rax*4]
mov eax, r14d
shl eax, 6
mov qword [rsp + 0x78], rdi
lea rax, [rbx + rax*4]
mov qword [rsp + 0x68], rax
lea eax, [r14 + r14*2]
shl eax, 5
lea rax, [rbx + rax*4]
mov qword [rsp + 0x60], rax
mov eax, dword [rsp + 0x40]
shr eax, 1
and eax, 0xf
mov dword [rsp + 0x40], eax
cmp eax, 1
mov eax, r14d
je 0x14003306a
shl eax, 7
mov r9d, 0x50
mov dword [rsp + 0x30], eax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x48], rax
call fcn.140032400
jmp 0x140033087
shl eax, 7
mov r9d, 0x50
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x48], rax
call fcn.14002ff80
cmp dword [rsp + 0x50], r15d
je 0x140033204
mov r8d, dword [rsp + 0x48]
mov rdx, rbx
mov rcx, rdi
call fcn.140030640
test r12d, r12d
je 0x1400332a6
mov rbx, qword [rsp + 0x60]
mov ebp, r8d
shr ebp, 3
bts r13d, 8
nop dword [rax + rax]
lea r8, [rbx + r15*4]
test ebp, ebp
je 0x140033113
mov edx, esi
nop word [rax + rax]
lea eax, [rdx - 2]
mov ecx, eax
mov rax, qword [rdi + rax*8]
mov qword [r8 + rcx*8], rax
lea eax, [rdx - 1]
mov ecx, eax
mov rax, qword [rdi + rax*8]
mov qword [r8 + rcx*8], rax
mov eax, edx
lea rcx, [rax*8]
mov rax, qword [rcx + rdi]
mov qword [rcx + r8], rax
lea eax, [rdx + 1]
mov ecx, eax
add edx, 4
mov rax, qword [rdi + rax*8]
mov qword [r8 + rcx*8], rax
lea eax, [rdx - 2]
cmp eax, ebp
jb 0x1400330d0
mov rdx, qword [rsp + 0x68]
mov r9d, r13d
mov r8d, r14d
mov rcx, rdi
call fcn.1400329d0
add r15d, dword [rsp + 0x58]
sub r12, 1
jne 0x1400330c0
mov r12d, dword [rsp + 0xf0]
mov rbx, qword [rsp + 0x70]
mov rbp, qword [rsp + 0x58]
test r12d, r12d
je 0x1400332a6
mov r13d, dword [rsp + 0xf8]
lea eax, [rbp - 0x10]
mov ebp, dword [rsp + 0x48]
lea rax, [rdi + rax*4]
shr ebp, 3
lea ebx, [r12 - 1]
mov r15d, r12d
bts r13d, 8
mov r12, rax
nop dword [rax]
nop word [rax + rax]
mov rcx, qword [rsp + 0x60]
mov eax, ebx
and eax, dword [r12]
imul eax, r14d
shl eax, 5
lea r8, [rcx + rax*4]
test ebp, ebp
je 0x1400331de
mov edx, esi
nop dword [rax]
lea eax, [rdx - 2]
mov ecx, eax
mov rax, qword [r8 + rax*8]
xor qword [rdi + rcx*8], rax
lea eax, [rdx - 1]
mov ecx, eax
mov rax, qword [r8 + rax*8]
xor qword [rdi + rcx*8], rax
mov eax, edx
lea rcx, [rdi + rax*8]
mov rax, qword [r8 + rax*8]
xor qword [rcx], rax
lea eax, [rdx + 1]
mov ecx, eax
add edx, 4
mov rax, qword [r8 + rax*8]
xor qword [rdi + rcx*8], rax
lea eax, [rdx - 2]
cmp eax, ebp
jb 0x1400331a0
mov rdx, qword [rsp + 0x68]
mov r9d, r13d
mov r8d, r14d
mov rcx, rdi
call fcn.1400329d0
sub r15, 1
jne 0x140033180
mov rbx, qword [rsp + 0x70]
mov r12d, dword [rsp + 0xf0]
test r12d, r12d
je 0x1400332a6
mov ebp, dword [rsp + 0x48]
mov rdi, qword [rsp + 0x60]
shr ebp, 3
mov r15d, r12d
xor r13d, r13d
mov r12, qword [rsp + 0x68]
lea r8, [rdi + r13*4]
test ebp, ebp
je 0x140033273
mov edx, esi
nop
lea eax, [rdx - 2]
mov ecx, eax
mov rax, qword [rbx + rax*8]
mov qword [r8 + rcx*8], rax
lea eax, [rdx - 1]
mov ecx, eax
mov rax, qword [rbx + rax*8]
mov qword [r8 + rcx*8], rax
mov eax, edx
lea rcx, [rax*8]
mov rax, qword [rcx + rbx]
mov qword [rcx + r8], rax
lea eax, [rdx + 1]
mov ecx, eax
add edx, 4
mov rax, qword [rbx + rax*8]
mov qword [r8 + rcx*8], rax
lea eax, [rdx - 2]
cmp eax, ebp
jb 0x140033230
mov r9d, dword [rsp + 0xf8]
mov r8d, r14d
mov rdx, r12
mov rcx, rbx
call fcn.1400329d0
mov rax, qword [rsp + 0x58]
add r13d, eax
sub r15, 1
jne 0x140033224
mov rdi, qword [rsp + 0x78]
mov r12d, dword [rsp + 0xf0]
jmp 0x1400332ab
mov rax, qword [rsp + 0x58]
test r12d, r12d
je 0x140033351
mov ebp, dword [rsp + 0x48]
add eax, 0xfffffff0
shr ebp, 3
mov r15d, r12d
lea r13, [rbx + rax*4]
nop word [rax + rax]
mov rcx, qword [rsp + 0x60]
lea eax, [r12 - 1]
and eax, dword [r13]
imul eax, r14d
shl eax, 5
lea r8, [rcx + rax*4]
test ebp, ebp
je 0x14003332e
mov edx, esi
nop
lea eax, [rdx - 2]
mov ecx, eax
mov rax, qword [r8 + rax*8]
xor qword [rbx + rcx*8], rax
lea eax, [rdx - 1]
mov ecx, eax
mov rax, qword [r8 + rax*8]
xor qword [rbx + rcx*8], rax
mov eax, edx
lea rcx, [rbx + rax*8]
mov rax, qword [r8 + rax*8]
xor qword [rcx], rax
lea eax, [rdx + 1]
mov ecx, eax
add edx, 4
mov rax, qword [r8 + rax*8]
xor qword [rbx + rcx*8], rax
lea eax, [rdx - 2]
cmp eax, ebp
jb 0x1400332f0
mov r9d, dword [rsp + 0xf8]
mov r8d, r14d
mov rdx, qword [rsp + 0x68]
mov rcx, rbx
call fcn.1400329d0
sub r15, 1
jne 0x1400332d0
mov rdi, qword [rsp + 0x78]
cmp dword [rsp + 0x50], 0
mov rbp, qword [rsp + 0xa0]
mov rax, qword [rsp + 0x48]
je 0x1400333b3
mov edx, eax
shr edx, 3
test edx, edx
je 0x1400333b3
nop
lea eax, [rsi - 2]
mov ecx, eax
mov rax, qword [rdi + rax*8]
xor qword [rbx + rcx*8], rax
lea eax, [rsi - 1]
mov ecx, eax
mov rax, qword [rdi + rax*8]
xor qword [rbx + rcx*8], rax
mov eax, esi
lea rcx, [rbx + rax*8]
mov rax, qword [rdi + rax*8]
xor qword [rcx], rax
lea eax, [rsi + 1]
mov ecx, eax
add esi, 4
mov rax, qword [rdi + rax*8]
xor qword [rbx + rcx*8], rax
lea eax, [rsi - 2]
cmp eax, edx
jb 0x140033370
mov rax, qword [rsp + 0x48]
sub dword [rsp + 0x40], 1
mov r8, rbx
mov rdi, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xe8]
je 0x1400333ec
mov dword [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_32
mov r9d, eax
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0xe0]
call fcn.140032400
jmp 0x14003340a
mov qword [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_32
mov qword [rsp + 0x28], rcx
mov rcx, qword [rsp + 0xe0]
mov r9d, eax
call fcn.14002ff80
mov rcx, qword [rsp + 0x88]
mov rbx, qword [rsp + 0xa8]
add rsp, 0xb0
pop r15
pop r14
pop r13
pop r12
pop rsi
jmp qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
lea rdx, str.Out_of_memory_
xor ecx, ecx
call fcn.140033450
mov ecx, esi
call fcn.1400293c0
int3