Function at 0x14004bd80
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x14011c028]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov rsi, r9
mov rdi, rdx
mov r15, rcx
mov qword [rbp + 0x28], rdx
mov qword [rbp + 0x30], r9
xor r12d, r12d
mov edx, 0x8cc
lea rcx, [rbp + 8]
call fcn.1400031b0
mov r14, rax
movdqa xmm0, xmmword [0x1400f92b0]
movdqu xmmword [rsp + 0x48], xmm0
mov dword [rsp + 0x58], 0x91a3a3a8
mov dword [rsp + 0x5c], 0xa6a5a5ad
mov dword [rsp + 0x60], 0xaaa9babc
mov word [rsp + 0x64], pe_nt_image_headers64
mov eax, r12d
nop word [rax + rax]
lea ecx, [rax - 0x45]
xor byte [rsp + rax + 0x48], cl
inc rax
cmp rax, 0x1c
jb 0x14004be00
mov byte [rsp + 0x65], 0
lea rax, [rsp + 0x48]
mov rbx, 0xffffffffffffffff
mov rcx, rbx
inc rcx
cmp byte [rax + rcx], 0
jne 0x14004be24
mov rdx, qword [rdi + 0x10]
movabs rax, 0x7fffffffffffffff
sub rax, rdx
cmp rax, rcx
jb 0x14004c0b0
mov rax, rdi
cmp qword [rdi + 0x18], 0x10
jb 0x14004be54
mov rax, qword [rdi]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x48]
lea rcx, [rbp - 0x18]
call fcn.140029850
nop
mov dword [rsp + 0x40], 0xd8d8d0c7
mov dword [rsp + 0x44], 0x100bccb
mov rcx, r12
nop word [rax + rax]
lea eax, [rcx - 0x45]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 6
jb 0x14004be90
mov byte [rsp + 0x47], 0
lea rax, [rsp + 0x40]
mov r8, rbx
nop dword [rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14004beb0
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x18]
call fcn.1400273b0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x58], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x48], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r9, r14
lea r8, [rbp - 0x58]
lea rcx, [rbp - 0x38]
call fcn.140029660
nop
mov word [rsp + 0x40], 0x7c
mov byte [rsp + 0x42], 0
lea rax, [rsp + 0x40]
mov r8, rbx
nop dword [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14004bf10
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x38]
call fcn.1400273b0
xorps xmm0, xmm0
movups xmmword [rbp - 0x78], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x68], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x78], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x68], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, rsi
cmp qword [rsi + 0x18], 0x10
jb 0x14004bf62
mov rdx, qword [rsi]
mov r8, qword [rsi + 0x10]
lea rcx, [rbp - 0x78]
call fcn.1400273b0
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x78], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x68], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x78], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov dword [rsp + 0x40], 0x100b6c7
mov rcx, r12
nop dword [rax + rax]
lea eax, [rcx - 0x45]
xor byte [rsp + rcx + 0x40], al
inc rcx
cmp rcx, 2
jb 0x14004bfb0
mov byte [rsp + 0x43], 0
lea rax, [rsp + 0x40]
nop word [rax + rax]
inc rbx
cmp byte [rax + rbx], 0
jne 0x14004bfd0
mov r8, rbx
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.1400273b0
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x48], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x58], xmm1
mov qword [rax + 0x10], r12
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea rdx, [rsp + 0x48]
movq r8, xmm0
movdqa xmm0, xmm1
psrldq xmm0, 8
movq rax, xmm0
cmp rax, 0x10
cmovae rdx, r8
movq r8, xmm1
mov rcx, r15
call fcn.1400273b0
nop
lea rcx, [rsp + 0x48]
call fcn.140027180
nop
lea rcx, [rsp + 0x68]
call fcn.140027180
nop
lea rcx, [rbp - 0x78]
call fcn.140027180
nop
lea rcx, [rbp - 0x38]
call fcn.140027180
nop
lea rcx, [rbp - 0x58]
call fcn.140027180
nop
lea rcx, [rbp - 0x18]
call fcn.140027180
nop
lea rcx, [rbp + 8]
call fcn.140027180
nop
mov rcx, rdi
call fcn.140027180
nop
mov rcx, rsi
call fcn.140027180
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.1400d1560
add rsp, 0x140
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140003100
nop
int3