Function at 0x140163aa0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
mov rdi, qword [rcx + 0x18]
mov rax, rdi
inc rax
je 0x140164523
mov r15, rdx
mov rsi, rcx
mov r11, qword [rcx + 8]
lea r8, [r11 + 1]
mov rcx, r8
shr rcx, 3
mov r12, r8
and r12, 0xfffffffffffffff8
sub r12, rcx
cmp r11, 8
cmovb r12, r11
mov rcx, r12
shr rcx, 1
cmp rax, rcx
mov qword [rsp + 0x20], r11
mov qword [rsp + 0x38], rdi
jbe 0x140163b27
inc r12
cmp rax, r12
cmova r12, rax
cmp r12, 8
mov qword [rsp + 0x30], r8
jae 0x140163b54
xor eax, eax
cmp r12, 4
setae al
lea r14, [rax*4 + 4]
jmp 0x140163ba4
mov rbx, qword [rsi]
mov rcx, r8
shr rcx, 4
xor eax, eax
test r8b, 0xf
setne al
add rax, rcx
je 0x140163e61
cmp rax, 1
jne 0x140163df5
xor edx, edx
jmp 0x140163e47
mov rax, r12
shr rax, 0x3d
jne 0x140164523
shl r12, 3
mov r14d, 1
cmp r12, 0xe
jb 0x140163ba4
movabs rcx, 0x2492492492492493
mov rax, r12
mul rcx
sub r12, rdx
shr r12, 1
add r12, rdx
shr r12, 2
dec r12
bsr rcx, r12
not ecx
mov r14, 0xffffffffffffffff
shr r14, cl
inc r14
mov ecx, 0x68
mov rax, r14
mul rcx
jo 0x140164523
mov r12, rax
add r12, 0xf
and r12, 0xfffffffffffffff0
lea r13, [r14 + 0x10]
mov rbp, r12
add rbp, r13
jb 0x140164523
movabs rax, 0x7ffffffffffffff1
cmp rbp, rax
jae 0x140164523
test rbp, rbp
je 0x140163c2d
movzx eax, byte [0x1402153f8]
mov rcx, qword [0x140215360]
test rcx, rcx
jne 0x140163c10
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
test rax, rax
je 0x140163c23
mov rcx, rax
mov qword [0x140215360], rax
xor edx, edx
mov r8, rbp
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rdi, rax
test rax, rax
jne 0x140163c32
mov rcx, rbp
call fcn.14007ec50
ud2
mov edi, reloc.WS2_32.dll_recv
lea rbp, [r14 - 1]
mov rax, r14
shr rax, 3
mov rbx, r14
and rbx, 0xfffffffffffffff8
sub rbx, rax
cmp r14, 9
cmovb rbx, rbp
add rdi, r12
mov rcx, rdi
mov dl, 0xff
mov r8, r13
call sub.VCRUNTIME140.dll_memset
mov rax, rbx
sub rax, qword [rsp + 0x38]
mov r8, qword [rsp + 0x20]
cmp r8, 0xffffffffffffffff
je 0x140163dab
mov qword [rsp + 0x28], rax
mov rbx, qword [rsi]
lea r13, [rbx - 0x68]
mov r12, qword [r15]
mov r15, qword [r15 + 8]
xor r14d, r14d
jmp 0x140163d0b
shr rax, 0x39
lea rcx, [rdx - 0x10]
and rcx, rbp
mov byte [rdi + rdx], al
mov byte [rcx + rdi + 0x10], al
mov rax, r14
not rax
imul rax, rax, 0x68
not rdx
imul rcx, rdx, 0x68
mov rdx, qword [rbx + rax + 0x60]
mov qword [rdi + rcx + 0x60], rdx
movups xmm0, xmmword [rbx + rax + 0x50]
movups xmmword [rdi + rcx + 0x50], xmm0
movups xmm0, xmmword [rbx + rax + 0x40]
movups xmmword [rdi + rcx + 0x40], xmm0
movdqu xmm0, xmmword [rbx + rax]
movdqu xmm1, xmmword [rbx + rax + 0x10]
movups xmm2, xmmword [rbx + rax + 0x20]
movups xmm3, xmmword [rbx + rax + 0x30]
movups xmmword [rdi + rcx + 0x30], xmm3
movups xmmword [rdi + rcx + 0x20], xmm2
movdqu xmmword [rdi + rcx + 0x10], xmm1
movdqu xmmword [rdi + rcx], xmm0
lea rax, [r14 + 1]
cmp r14, r8
mov r14, rax
je 0x140163d91
cmp byte [rbx + r14], 0
js 0x140163cfb
mov rax, r14
neg rax
imul rax, rax, 0x68
mov r8, qword [r13 + rax]
mov r9, qword [r13 + rax + 0x10]
mov rcx, r12
mov rdx, r15
call fcn.140004500
mov rcx, rax
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
test edx, edx
jne 0x140163d67
mov r8d, reloc.WS2_32.dll_recv
nop word [rax + rax]
add rcx, r8
and rcx, rbp
movdqu xmm0, xmmword [rdi + rcx]
pmovmskb edx, xmm0
add r8, 0x10
test edx, edx
je 0x140163d50
mov r8, qword [rsp + 0x20]
tzcnt edx, edx
add rdx, rcx
and rdx, rbp
cmp byte [rdi + rdx], 0
js 0x140163c90
movdqa xmm0, xmmword [rdi]
pmovmskb ecx, xmm0
tzcnt edx, ecx
jmp 0x140163c90
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
mov rax, qword [rsp + 0x28]
mov qword [rsi + 0x10], rax
test r8, r8
jne 0x140163db9
jmp 0x140164505
mov rbx, qword [rsi]
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
mov qword [rsi + 0x10], rax
mov ecx, 0x68
mov rax, qword [rsp + 0x30]
mul rcx
add rax, 0xf
and rax, 0xfffffffffffffff0
add r8, rax
cmp r8, 0xffffffffffffffef
je 0x140164505
sub rbx, rax
mov rcx, qword [0x140215360]
xor edx, edx
mov r8, rbx
call qword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x140164505
movabs rcx, 0x1ffffffffffffffe
and rcx, rax
xor r9d, r9d
movdqa xmm0, xmmword [0x140168660]
nop dword [rax]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r9]
por xmm1, xmm0
movdqa xmmword [rbx + r9], xmm1
lea rdx, [r9 + 0x20]
pxor xmm1, xmm1
pcmpgtb xmm1, xmmword [rbx + r9 + 0x10]
por xmm1, xmm0
movdqa xmmword [rbx + r9 + 0x10], xmm1
mov r9, rdx
add rcx, 0xfffffffffffffffe
jne 0x140163e10
test al, 1
je 0x140163e61
pxor xmm0, xmm0
pcmpgtb xmm0, xmmword [rbx + rdx]
por xmm0, xmmword [0x140168660]
movdqa xmmword [rbx + rdx], xmm0
cmp r8, 0x10
jae 0x140163e85
lea rcx, [rbx + 0x10]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r11, qword [rsp + 0x20]
cmp r11, 0xffffffffffffffff
jne 0x140163e8f
xor eax, eax
jmp 0x1401644fe
movdqu xmm0, xmmword [rbx]
movdqu xmmword [rbx + r8], xmm0
mov qword [rsp + 0x60], r12
mov qword [rsp + 0x68], rsi
lea rax, [rbx - 0x68]
mov qword [rsp + 0x70], rax
mov rax, qword [r15]
mov rcx, qword [r15 + 8]
movabs rdx, 0x736f6d6570736575
xor rdx, rax
mov qword [rsp + 0x58], rdx
movabs rdx, 0x646f72616e646f6d
xor rdx, rcx
mov qword [rsp + 0x50], rdx
movabs rdx, 0x6c7967656e657261
xor rdx, rax
mov qword [rsp + 0x48], rdx
movabs rax, 0x7465646279746573
xor rax, rcx
mov qword [rsp + 0x40], rax
mov r13, rbx
xor esi, esi
jmp 0x140163f26
shr rcx, 0x39
lea rax, [rsi - 0x10]
and rax, r11
mov byte [rbx + rsi], cl
mov byte [rax + rbx + 0x10], cl
lea rax, [rsi + 1]
add r13, 0xffffffffffffff98
cmp rsi, r11
mov rsi, rax
je 0x1401644ef
cmp byte [rbx + rsi], 0x80
jne 0x140163f12
imul rax, rsi, 0xffffffffffffff98
lea rcx, [rbx + rax]
add rcx, 0xffffffffffffff98
mov qword [rsp + 0x80], rcx
add rax, rbx
mov qword [rsp + 0x78], rax
mov rax, rsi
not rax
imul rdx, rax, 0x68
add rdx, rbx
mov qword [rsp + 0x30], rsi
mov rax, rsi
neg rax
imul rax, rax, 0x68
add rax, qword [rsp + 0x70]
mov qword [rsp + 0x28], rax
jmp 0x14016404c
mov rcx, qword [rdx]
mov r8, qword [rax]
mov qword [rdx], r8
mov qword [rax], rcx
mov rcx, qword [rdx + 8]
mov r8, qword [rax + 8]
mov qword [rdx + 8], r8
mov qword [rax + 8], rcx
mov rcx, qword [rdx + 0x10]
mov r8, qword [rax + 0x10]
mov qword [rdx + 0x10], r8
mov qword [rax + 0x10], rcx
mov rcx, qword [rdx + 0x18]
mov r8, qword [rax + 0x18]
mov qword [rdx + 0x18], r8
mov qword [rax + 0x18], rcx
mov rcx, qword [rdx + 0x20]
mov r8, qword [rax + 0x20]
mov qword [rdx + 0x20], r8
mov qword [rax + 0x20], rcx
mov rcx, qword [rdx + 0x28]
mov r8, qword [rax + 0x28]
mov qword [rdx + 0x28], r8
mov qword [rax + 0x28], rcx
mov rcx, qword [rdx + 0x30]
mov r8, qword [rax + 0x30]
mov qword [rdx + 0x30], r8
mov qword [rax + 0x30], rcx
mov rcx, qword [rdx + 0x38]
mov r8, qword [rax + 0x38]
mov qword [rdx + 0x38], r8
mov qword [rax + 0x38], rcx
mov rcx, qword [rdx + 0x40]
mov r8, qword [rax + 0x40]
mov qword [rdx + 0x40], r8
mov qword [rax + 0x40], rcx
mov rcx, qword [rdx + 0x48]
mov r8, qword [rax + 0x48]
mov qword [rdx + 0x48], r8
mov qword [rax + 0x48], rcx
mov rcx, qword [rdx + 0x50]
mov r8, qword [rax + 0x50]
mov qword [rdx + 0x50], r8
mov qword [rax + 0x50], rcx
mov rcx, qword [rdx + 0x58]
mov r8, qword [rax + 0x58]
mov qword [rdx + 0x58], r8
mov qword [rax + 0x58], rcx
mov rcx, qword [rdx + 0x60]
mov r8, qword [rax + 0x60]
mov qword [rdx + 0x60], r8
mov qword [rax + 0x60], rcx
mov rax, qword [rsp + 0x28]
mov rdi, qword [rax]
mov rbp, qword [rax + 0x10]
mov rax, rbp
and rax, 0xfffffffffffffff8
je 0x1401640f0
mov r10, qword [rsp + 0x48]
mov r9, qword [rsp + 0x50]
mov r11, qword [rsp + 0x40]
xor r15d, r15d
mov r14, qword [rsp + 0x58]
nop dword [rax]
add r14, r9
rol r9, 0xd
mov rcx, qword [rdi + r15]
xor r9, r14
rol r14, 0x20
xor r11, rcx
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r14
xor r14, rcx
add r15, 8
cmp r15, rax
jb 0x140164080
mov r8d, ebp
and r8d, 7
cmp r8d, 3
jbe 0x140164114
mov r12d, dword [rdi + r15]
mov eax, 4
mov rcx, rax
or rcx, 1
cmp rcx, r8
jb 0x140164125
jmp 0x14016413e
mov r11, qword [rsp + 0x40]
mov r9, qword [rsp + 0x50]
mov r10, qword [rsp + 0x48]
mov r14, qword [rsp + 0x58]
xor r15d, r15d
mov r8d, ebp
and r8d, 7
cmp r8d, 3
ja 0x1401640d0
xor r12d, r12d
xor eax, eax
mov rcx, rax
or rcx, 1
cmp rcx, r8
jae 0x14016413e
lea rcx, [rax + r15]
movzx esi, word [rdi + rcx]
lea ecx, [rax*8]
shl rsi, cl
or r12, rsi
or rax, 2
cmp rax, r8
jae 0x140164160
add r15, rax
movzx esi, byte [rdi + r15]
shl eax, 3
mov ecx, eax
shl rsi, cl
or r12, rsi
jmp 0x140164165
test r8, r8
je 0x1401641c2
lea ecx, [r8*8]
mov edi, 0xff
shl rdi, cl
or rdi, r12
cmp r8, 7
jne 0x1401642a1
mov ecx, 8
add r14, r9
rol r9, 0xd
sub rcx, r8
xor r9, r14
rol r14, 0x20
xor r11, rdi
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
xor r11, r14
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r14, rdi
jmp 0x1401641c4
xor ecx, ecx
mov r8d, 1
sub r8, rcx
mov eax, r8d
and eax, 7
and r8, 0xfffffffffffffff8
cmp rcx, r8
jae 0x140164250
nop dword [rax]
add r14, r9
rol r9, 0xd
xor r9, r14
rol r14, 0x20
xor r11, 0xff
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r14
xor r14, 0xff
add rcx, 8
cmp rcx, r8
jb 0x1401641e0
xor r8d, r8d
cmp rax, 4
setae r8b
cmp eax, 4
mov edi, 0
mov ecx, 0xff
cmovae rdi, rcx
shl r8, 2
jmp 0x140164255
xor edi, edi
xor r8d, r8d
mov rsi, r8
lea ecx, [r8*8]
mov r15d, 0xff
shl r15, cl
or rsi, 1
mov r12, r8
or r12, 2
cmp rsi, rax
mov esi, 0
cmovae r15, rsi
cmovae r12, r8
or r15, rdi
lea ecx, [r12*8]
mov edi, 0xff
shl rdi, cl
cmp r12, rax
cmovae rdi, rsi
or rdi, r15
shl rbp, 0x38
movabs rax, 0x100000000000000
add rbp, rax
add r14, r9
rol r9, 0xd
or rbp, rdi
xor r9, r14
rol r14, 0x20
xor r11, rbp
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r11, r14
xor r9, r10
rol r10, 0x20
xor r14, rbp
add r14, r9
rol r9, 0xd
xor r9, r14
rol r14, 0x20
xor r10, 0xff
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r14
add r14, r9
rol r9, 0xd
xor r9, r14
rol r14, 0x20
add r10, r11
rol r11, 0x10
xor r11, r10
add r14, r11
rol r11, 0x15
add r10, r9
rol r9, 0x11
xor r9, r10
rol r10, 0x20
xor r11, r14
add r14, r9
rol r9, 0xd
add r10, r11
rol r11, 0x10
xor r11, r10
rol r11, 0x15
xor r9, r14
add r10, r9
rol r9, 0x11
mov rcx, r10
rol rcx, 0x20
xor rcx, r9
xor rcx, r11
xor rcx, r10
mov rax, rcx
mov r11, qword [rsp + 0x20]
and rax, r11
movdqu xmm0, xmmword [rbx + rax]
pmovmskb r8d, xmm0
mov r9, rax
test r8d, r8d
mov rsi, qword [rsp + 0x30]
jne 0x1401643ca
mov r10d, reloc.WS2_32.dll_recv
mov r9, rax
nop dword [rax]
add r9, r10
and r9, r11
movdqu xmm0, xmmword [rbx + r9]
pmovmskb r8d, xmm0
add r10, 0x10
test r8d, r8d
je 0x1401643b0
tzcnt r8d, r8d
add r8, r9
and r8, r11
cmp byte [rbx + r8], 0
js 0x1401643ea
movdqa xmm0, xmmword [rbx]
pmovmskb r8d, xmm0
tzcnt r8d, r8d
mov r9, rsi
sub r9, rax
mov r10, r8
sub r10, rax
xor r10, r9
and r10, r11
cmp r10, 0x10
jb 0x140163f00
mov rax, r8
not rax
imul rax, rax, 0x68
add rax, rbx
movzx r9d, byte [rbx + r8]
shr rcx, 0x39
lea r10, [r8 - 0x10]
and r10, r11
mov byte [rbx + r8], cl
mov byte [r10 + rbx + 0x10], cl
cmp r9b, 0xff
je 0x1401644a0
imul rcx, r8, 0xffffffffffffff98
add rcx, rbx
cmp qword [rsp + 0x80], rcx
jae 0x140163f80
cmp rax, qword [rsp + 0x78]
jae 0x140163f80
mov rax, 0xffffffffffffff98
nop dword [rax]
movzx r8d, byte [r13 + rax]
movzx r9d, byte [rcx + rax]
mov byte [r13 + rax], r9b
mov byte [rcx + rax], r8b
movzx r8d, byte [r13 + rax + 1]
movzx r9d, byte [rcx + rax + 1]
mov byte [r13 + rax + 1], r9b
mov byte [rcx + rax + 1], r8b
add rax, 2
jne 0x140164460
jmp 0x14016404c
lea rcx, [rsi - 0x10]
and rcx, r11
mov byte [rbx + rsi], 0xff
mov byte [rcx + rbx + 0x10], 0xff
mov rcx, qword [rdx + 0x60]
mov qword [rax + 0x60], rcx
movups xmm0, xmmword [rdx + 0x50]
movups xmmword [rax + 0x50], xmm0
movups xmm0, xmmword [rdx + 0x40]
movups xmmword [rax + 0x40], xmm0
movdqu xmm0, xmmword [rdx]
movdqu xmm1, xmmword [rdx + 0x10]
movups xmm2, xmmword [rdx + 0x20]
movups xmm3, xmmword [rdx + 0x30]
movups xmmword [rax + 0x30], xmm3
movups xmmword [rax + 0x20], xmm2
movdqu xmmword [rax + 0x10], xmm1
movdqu xmmword [rax], xmm0
jmp 0x140163f12
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x38]
mov rax, qword [rsp + 0x60]
sub rax, rdi
mov qword [rsi + 0x10], rax
movabs rax, 0x8000000000000001
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
call fcn.14007ec10
ud2