Function at 0x1400aaa40
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x78]
sub rsp, 0x150
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
mov rax, qword [0x1401b06f8]
xor rax, rsp
mov qword [rbp], rax
movzx r12d, r9b
mov byte [rsp + 0x30], r9b
movzx r15d, r8b
mov byte [rsp + 0x31], r8b
movzx r13d, dl
mov rbx, rcx
mov qword [rsp + 0x50], rcx
mov qword [rsp + 0x40], rcx
xor r14d, r14d
mov esi, r14d
mov dword [rsp + 0x48], r14d
call fcn.1400a7ab0
mov rdi, rax
test rax, rax
jne 0x1400aaace
mov qword [rbx], r14
mov qword [rbx + 8], r14
mov qword [rbx + 0x10], r14
jmp 0x1400ab09d
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], r14
mov ecx, 0x5dc
call fcn.1401293a4
mov qword [rbp - 0x80], rax
lea rbx, [rax + 0x5dc]
mov qword [rbp - 0x70], rbx
xor edx, edx
mov r8d, 0x5dc
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp - 0x78], rbx
mov rax, qword [0x1401cd0d0]
mov qword [rsp + 0x20], r14
mov r9d, 0x5dc
mov r8, qword [rbp - 0x80]
mov rdx, rdi
mov rcx, qword [0x1401cd148]
test rax, rax
je 0x1400aab37
call rax
jmp 0x1400aab3d
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [rsp + 0x58], r14d
mov rdx, qword [0x1401cd150]
mov rcx, qword [0x1401cd148]
mov rax, qword [0x1401cd0d0]
mov qword [rsp + 0x20], r14
mov r9d, 4
lea r8, [rsp + 0x58]
test rax, rax
je 0x1400aab70
call rax
jmp 0x1400aab76
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
movzx ecx, word [0x1401cd138]
mov eax, dword [rsp + 0x58]
imul rax, rcx
xor edx, edx
div rcx
mov rcx, rax
mov qword [rsp + 0x40], rax
cmp byte [0x1401cd160], 0
je 0x1400ab0ef
mov r8, qword [rbp - 0x80]
mov edx, dword [r8]
mov dword [rsp + 0x58], edx
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
mov qword [rbp - 0x58], r14
mov r14d, reloc.WS2_32.dll_recv
mov rax, qword [rbp - 0x78]
sub rax, r8
add rax, 0xfffffffffffffffc
cmp r14, rax
jae 0x1400ab02f
xorps xmm9, xmm9
nop dword [rax]
nop dword [rax + rax]
cmp byte [0x1401cd160], 0
je 0x1400ab0e1
mov ebx, dword [r8 + r14]
cmp ebx, edx
je 0x1400ab02f
test ebx, ebx
je 0x1400ab017
cmp ebx, ecx
je 0x1400ab017
mov ecx, ebx
call fcn.1400aa840
test al, al
je 0x1400ab00a
lea rcx, [rbp - 0x50]
call fcn.1400ab8c0
nop
mov dword [rbp - 0x50], ebx
test r13b, r13b
jne 0x1400aac38
test r15b, r15b
jne 0x1400aac38
test r12b, r12b
je 0x1400aad82
movzx edi, word [0x1401cd138]
imul rdi, rbx
add rdi, qword [0x1401cd130]
xor eax, eax
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x60], xmm1
mov qword [rsp + 0x70], rax
mov ecx, 0x5dc
call fcn.1401293a4
mov qword [rsp + 0x60], rax
lea rbx, [rax + 0x5dc]
mov qword [rsp + 0x70], rbx
xor edx, edx
mov r8d, 0x5dc
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rsp + 0x68], rbx
mov rax, qword [0x1401cd0d0]
mov qword [rsp + 0x20], 0
mov r9d, 0x5dc
mov r8, qword [rsp + 0x60]
mov rdx, rdi
mov rcx, qword [0x1401cd148]
test rax, rax
je 0x1400aacb8
call rax
jmp 0x1400aacbe
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov rcx, qword [rsp + 0x60]
test r13b, r13b
je 0x1400aace7
cmp byte [0x1401cd160], 0
je 0x1400ab0fd
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rbp - 0x48], xmm0
movsd xmm0, qword [rcx + 0x20]
movsd qword [rbp - 0x38], xmm0
test r15b, r15b
je 0x1400aacff
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x60]
call fcn.1400a9ea0
mov rcx, qword [rsp + 0x60]
test r12b, r12b
je 0x1400aad17
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x60]
call fcn.1400aa440
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x1400aad4e
mov rdx, qword [rsp + 0x70]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400aad49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400ab08e
call fcn.140129630
test r13b, r13b
je 0x1400aad82
movsd xmm0, qword [rbp - 0x48]
ucomisd xmm0, xmm9
jp 0x1400aad82
jne 0x1400aad82
movsd xmm0, qword [rbp - 0x40]
ucomisd xmm0, xmm9
jp 0x1400aad82
jne 0x1400aad82
movsd xmm0, qword [rbp - 0x38]
ucomisd xmm0, xmm9
jp 0x1400aad82
jne 0x1400aad82
xor dil, dil
jmp 0x1400aad85
mov dil, 1
mov r12d, dword [rbp - 0x30]
test r15b, r15b
je 0x1400aad98
cmp r12d, 0xffffffff
setne r15b
jmp 0x1400aad9b
mov r15b, 1
cmp byte [rsp + 0x30], 0
je 0x1400aaf83
mov rax, qword [str.fZXXOW:pPECHU_OY]
mov qword [rsp + 0x38], rax
cmp byte [0x140192387], 0
je 0x1400aaf10
cmp dword [reloc.WS2_32.dll_accept], 2
jl 0x1400aaed0
movdqa xmm4, xmmword [0x140192aa0]
mov eax, 4
movd xmm6, eax
mov eax, Ordinal_33
movd xmm5, eax
movdqa xmm2, xmmword [0x140192830]
movdqa xmm1, xmm2
punpckldq xmm1, xmm2
pmuldq xmm1, xmm4
movdqa xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401928a0]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140192a00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140192a40]
movd xmm0, dword [rsp + 0x38]
xorps xmm2, xmm0
movd dword [rsp + 0x38], xmm2
movdqa xmm3, xmmword [0x140192840]
movdqa xmm1, xmm3
punpckldq xmm1, xmm3
pmuldq xmm1, xmm4
movdqa xmm0, xmm3
punpckhdq xmm0, xmm3
pmuldq xmm0, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm6
movdqa xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x1401928a0]
psubd xmm3, xmm0
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x140192a00]
packuswb xmm2, xmm2
paddb xmm2, xmmword [0x140192a40]
movd xmm0, dword [rsp + 0x3c]
xorps xmm2, xmm0
movd dword [rsp + 0x3c], xmm2
jmp 0x1400aaf10
lea r9, [rsp + 0x38]
xor r8d, r8d
nop dword [rax + rax]
mov eax, 0x4d4873ed
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x35
movzx eax, r8b
sub al, cl
add al, 0x33
xor byte [r9], al
inc r8d
lea r9, [r9 + 1]
cmp r8d, 8
jl 0x1400aaee0
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x38]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x1400aaf30
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x60]
call fcn.140016340
or esi, 2
lea rdx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0x10
cmovae rdx, qword [rsp + 0x60]
lea rcx, [rbp - 0x20]
cmp qword [rbp - 8], 0x10
cmovae rcx, qword [rbp - 0x20]
mov r8, qword [rbp - 0x10]
cmp r8, qword [rsp + 0x70]
jne 0x1400aaf83
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
jne 0x1400aaf83
xor bl, bl
jmp 0x1400aaf85
mov bl, 1
test sil, 2
je 0x1400aaf98
and esi, 0xfffffffd
lea rcx, [rsp + 0x60]
call fcn.14000d220
test dil, dil
je 0x1400aaff5
test r15b, r15b
je 0x1400aaff5
test bl, bl
je 0x1400aaff5
mov rdx, qword [rbp - 0x60]
cmp rdx, qword [rbp - 0x58]
je 0x1400aafe7
mov eax, dword [rbp - 0x50]
mov dword [rdx], eax
movups xmm0, xmmword [rbp - 0x48]
movups xmmword [rdx + 8], xmm0
movsd xmm0, qword [rbp - 0x38]
movsd qword [rdx + 0x18], xmm0
mov dword [rdx + 0x20], r12d
mov rax, qword [rbp - 0x28]
mov qword [rdx + 0x28], rax
lea rcx, [rdx + 0x30]
lea rdx, [rbp - 0x20]
call fcn.14000f0d0
add qword [rbp - 0x60], 0x50
jmp 0x1400aaff5
lea r8, [rbp - 0x50]
lea rcx, [rbp - 0x68]
call fcn.1400acfa0
nop
lea rcx, [rbp - 0x20]
call fcn.14000d220
movzx r15d, byte [rsp + 0x31]
movzx r12d, byte [rsp + 0x30]
mov edx, dword [rsp + 0x58]
mov rcx, qword [rsp + 0x40]
mov r8, qword [rbp - 0x80]
add r14, 4
mov rax, qword [rbp - 0x78]
sub rax, r8
add rax, 0xfffffffffffffffc
cmp r14, rax
jb 0x1400aabe0
mov rdx, qword [rbp - 0x58]
xor r9d, r9d
mov qword [rbp - 0x58], r9
mov rcx, qword [rbp - 0x60]
mov qword [rbp - 0x60], r9
mov rax, qword [rbp - 0x68]
mov qword [rbp - 0x68], r9
mov rbx, qword [rsp + 0x50]
mov qword [rbx], rax
mov qword [rbx + 8], rcx
mov qword [rbx + 0x10], rdx
test r8, r8
je 0x1400ab09d
mov rdx, qword [rbp - 0x70]
sub rdx, r8
mov rax, r8
cmp rdx, 0x1000
jb 0x1400ab095
add rdx, 0x27
mov r8, qword [r8 - 8]
sub rax, r8
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400ab095
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rcx, r8
call fcn.140129630
mov rax, rbx
mov rcx, qword [rbp]
xor rcx, rsp
call fcn.1401292a0
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
movss xmm0, dword [0x14019253c]
call fcn.140098f80
nop
movss xmm0, dword [0x14019253c]
call fcn.140098f80
nop
movss xmm0, dword [0x14019253c]
call fcn.140098f80
int3