Function at 0x14007a3c0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x10]
sub rsp, 0x110
mov rax, qword [0x14011a0b8]
xor rax, rsp
mov qword [rbp], rax
mov r15, r8
mov r12, rdx
mov r13, rcx
mov qword [rbp - 0x58], rcx
mov qword [rbp - 0x50], rdx
mov qword [rbp - 0x48], r8
call fcn.14007e0a0
mov rdi, rax
test rax, rax
jne 0x14007a43f
mov dword [rsp + 0x30], 0xebeaf0ea
mov word [rsp + 0x34], 0x100
mov rdx, r13
lea rcx, [rsp + 0x30]
call fcn.14006e970
nop
mov rcx, r12
call fcn.14004a0c0
nop
mov rcx, r15
call fcn.14004a0c0
jmp 0x14007a985
xor ebx, ebx
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], bl
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], bl
mov r8, r15
cmp qword [r15 + 0x18], 0x10
jb 0x14007a474
mov r8, qword [r15]
mov edx, 0x2712
mov rcx, rdi
call fcn.1400808a0
mov edx, 0x51
lea r8d, [rdx - 0x50]
mov rcx, rdi
call fcn.1400808a0
mov dword [rsp + 0x20], 0xe6ffe0ef
mov dword [rsp + 0x24], 0xa5e2fdfd
mov dword [rsp + 0x28], 0xe0e4fb
mov byte [rsp + 0x2c], 1
lea r8, [rsp + 0x20]
mov edx, 0x27c1
mov rcx, rdi
call fcn.1400808a0
mov edx, 0x40
lea r8d, [rdx - 0x3f]
mov rcx, rdi
call fcn.1400808a0
mov edx, 0xac
mov r8d, 1
mov rcx, rdi
call fcn.1400808a0
mov r8, r12
cmp qword [r12 + 0x18], 0x10
jb 0x14007a4f4
mov r8, qword [r12]
mov edx, 0x271f
mov rcx, rdi
call fcn.1400808a0
lea r8, [0x14007c8f0]
mov edx, 0x4e2b
mov rcx, rdi
call fcn.1400808a0
lea r8, [rbp - 0x40]
mov edx, 0x2711
mov rcx, rdi
call fcn.1400808a0
lea r8, [0x140076eb0]
mov edx, 0x4e6f
mov rcx, rdi
call fcn.1400808a0
lea r8, [rbp - 0x20]
mov edx, 0x272d
mov rcx, rdi
call fcn.1400808a0
mov rcx, rdi
call fcn.14007e160
test eax, eax
je 0x14007a5a1
mov ecx, eax
call fcn.14007d760
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14007a580
mov rdx, rax
lea rcx, [rsp + 0x38]
call fcn.14004af40
lea rcx, [rsp + 0x38]
call fcn.1400758d0
lea rax, [rsp + 0x38]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x48], rbx
mov qword [rsp + 0x50], rbx
mov r14, qword [rbp - 0x30]
lea rsi, [rbp - 0x40]
cmp qword [rbp - 0x28], 0x10
cmovae rsi, qword [rbp - 0x40]
cmp r14, 0x10
jae 0x14007a5e1
movups xmm0, xmmword [rsi]
movups xmmword [rsp + 0x38], xmm0
mov ebx, reloc.WS2_32.dll_ntohs
jmp 0x14007a65a
mov rbx, r14
or rbx, 0xf
movabs rax, 0x7fffffffffffffff
cmp rbx, rax
cmova rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x14007a638
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14007a9bd
mov rcx, rax
call fcn.1400cbeb0
mov rcx, rax
test rax, rax
je 0x14007a631
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x14007a646
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x14007a644
call fcn.1400cbeb0
jmp 0x14007a646
xor eax, eax
mov qword [rsp + 0x38], rax
lea r8, [r14 + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rbx
lea rax, [rbp - 0x78]
mov qword [rbp - 0x80], rax
mov rdx, r15
lea rcx, [rbp - 0x78]
call fcn.14004dc70
mov rbx, rax
mov rdx, r12
lea rcx, [rsp + 0x58]
call fcn.14004dc70
nop
lea r8, [rsp + 0x38]
mov rdx, rbx
mov rcx, rax
call fcn.140071770
lea r8, [rbp - 0x58]
mov edx, 0x400022
mov rcx, rdi
call fcn.14007e070
test eax, eax
jne 0x14007a82f
xor dil, dil
xor esi, esi
mov rcx, qword [rbp - 0x58]
cmp dword [rcx], esi
jle 0x14007a7b2
xor r14d, r14d
nop word [rax + rax]
mov rax, qword [rcx + 8]
mov rbx, qword [r14 + rax]
test rbx, rbx
je 0x14007a79b
movdqa xmm0, xmmword [0x1400d3170]
movdqu xmmword [rsp + 0x38], xmm0
mov dword [rsp + 0x48], 0xf2f5fce2
mov word [rsp + 0x4c], 0xeb
mov byte [rsp + 0x4e], 1
xor ecx, ecx
nop word [rax + rax]
lea eax, [rcx - 0x7c]
xor byte [rsp + rcx + 0x38], al
inc rcx
cmp rcx, 0x15
jb 0x14007a710
mov byte [rsp + 0x4e], 0
lea rdx, [rsp + 0x38]
mov rcx, qword [rbx]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
jne 0x14007a787
mov dword [rsp + 0x20], 0xa0f2e0c8
mov dword [rsp + 0x24], 0xe5cfa9fb
mov dword [rsp + 0x28], 0xfff7ffef
mov word [rsp + 0x2c], 0xe4
mov byte [rsp + 0x2e], 1
nop dword [rax + rax]
lea ecx, [rax - 0x7c]
xor byte [rsp + rax + 0x20], cl
inc rax
cmp rax, 0xd
jb 0x14007a760
mov byte [rsp + 0x2e], 0
lea rdx, [rsp + 0x20]
mov rcx, qword [rbx]
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x14007a78a
mov dil, 1
mov rbx, qword [rbx + 8]
test rbx, rbx
jne 0x14007a6e1
mov rcx, qword [rbp - 0x58]
inc esi
add r14, 8
cmp esi, dword [rcx]
jl 0x14007a6d0
test dil, dil
jne 0x14007a82f
movdqa xmm0, xmmword [0x1400d3090]
movdqu xmmword [rsp + 0x58], xmm0
movdqa xmm1, xmmword [0x1400d3100]
movdqu xmmword [rsp + 0x68], xmm1
mov dword [rsp + 0x78], 0xc3c3ccc2
mov word [rsp + 0x7c], 0x100
xor ecx, ecx
nop
lea eax, [rcx - 0x7c]
xor byte [rsp + rcx + 0x58], al
inc rcx
cmp rcx, 0x24
jb 0x14007a7e0
mov byte [rsp + 0x7d], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x50], reloc.WS2_32.dll_ntohs
mov r8d, Ordinal_41
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x38]
call fcn.14004af40
lea rcx, [rsp + 0x38]
call fcn.1400758d0
xor ebx, ebx
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [r13], xmm0
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [r13 + 0x10], xmm1
mov qword [rbp - 0x30], rbx
mov eax, reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x28], rax
mov byte [rbp - 0x40], bl
mov rdx, qword [rbp - 8]
cmp rdx, 0x10
jb 0x14007a895
inc rdx
mov rcx, qword [rbp - 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a88c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a88c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400cbef4
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0x10], rbx
mov qword [rbp - 8], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x20], 0
cmp rax, 0x10
jb 0x14007a8e0
lea rdx, [rax + 1]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14007a8db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14007a8db
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400cbef4
mov qword [rbp - 0x30], rbx
mov qword [rbp - 0x28], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x40], 0
mov rdx, qword [r12 + 0x18]
cmp rdx, 0x10
jb 0x14007a92c
mov rcx, qword [r12]
inc rdx
cmp rdx, 0x1000
jb 0x14007a927
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007a9af
mov rcx, r8
call fcn.1400cbef4
mov qword [r12 + 0x10], rbx
mov qword [r12 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r12], 0
mov rdx, qword [r15 + 0x18]
cmp rdx, 0x10
jb 0x14007a975
inc rdx
mov rcx, qword [r15]
cmp rdx, 0x1000
jb 0x14007a970
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14007a9b6
mov rcx, r8
call fcn.1400cbef4
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], reloc.WS2_32.dll_ntohs
mov byte [r15], 0
mov rax, r13
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.1400cbe90
mov rbx, qword [rsp + 0x168]
add rsp, 0x110
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140002cf0
int3