Function at 0x140105c60
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, pe_nt_image_headers64
call fcn.140112170
sub rsp, rax
mov rax, qword [0x140338648]
xor rax, rsp
mov qword [rsp + 0x60], rax
movzx r12d, byte [rcx]
lea r15, [rcx + 0x10]
mov r10, qword [rsp + 0xe0]
mov rdi, r9
mov r9, qword [rcx + 0x30]
mov rbp, r8
mov rax, qword [rcx + 0x28]
mov rsi, rdx
mov qword [rsp + 0x40], r9
mov r14, rcx
mov qword [rsp + 0x38], r10
lea rbx, [rcx + 0x20]
mov byte [rsp + 0x30], r12b
mov qword [rsp + 0x48], rax
test r12b, 0x40
jne 0x140105ce0
mov r8, r9
mov rdx, r15
call rax
inc qword [rbx]
mov r9, qword [rsp + 0x40]
mov r10, qword [rsp + 0x38]
mov r8d, r12d
xor r13d, r13d
and r8d, 7
mov r12d, reloc.WS2_32.dll_ntohs
sub r12d, r8d
mov byte [r14], r8b
mov dword [rsp + 0x38], r12d
mov ecx, r13d
cmp r12d, 0xf
jae 0x140105d2b
mov edx, r12d
add rdx, r14
nop word [rax + rax]
movzx eax, byte [rdx]
mov byte [rdx], r13b
lea rdx, [rdx + 1]
or rcx, rax
shl rcx, 8
sub r8, 1
jne 0x140105d10
lea rbx, [r14 + 0x20]
movzx eax, byte [r14 + 0xf]
or rcx, rax
mov byte [r14 + 0xf], 1
cmp rcx, rdi
je 0x140105d47
mov eax, 0xffffffff
jmp 0x140105fcc
lea rax, [rdi + 0xf]
or rax, 8
shr rax, 3
add qword [rbx], rax
movabs rax, 0x2000000000000000
cmp qword [rbx], rax
jbe 0x140105d6f
mov eax, 0xfffffffe
jmp 0x140105fcc
mov rbx, rdi
shr rbx, 4
test rbx, rbx
je 0x140105df2
mov qword [rsp + 0x28], r15
mov r8, rbx
mov rdx, rbp
mov qword [rsp + 0x20], r14
mov rcx, rsi
call r10
shl rbx, 4
add rsi, rbx
add rbp, rbx
sub rdi, rbx
je 0x140105df2
shr rbx, 4
lea r8, [r14 + 0x10]
mov r9, 0xfffffffffffffff8
mov rdx, r13
sub r9, r14
nop word [rax + rax]
movzx eax, byte [r8 - 1]
lea r8, [r8 - 1]
add rdx, rax
movzx ecx, bl
add rdx, rcx
shr rbx, 8
mov byte [r8], dl
lea rax, [r9 + r8]
shr rdx, 8
test rax, rax
je 0x140105dfb
test rbx, rbx
jne 0x140105dc0
test rdx, rdx
jne 0x140105dc0
jmp 0x140105dfb
test rdi, rdi
je 0x140105f84
mov edx, r13d
test rdi, rdi
je 0x140105fea
mov rcx, r13
nop word [rax + rax]
movzx eax, byte [rcx + rsi]
inc edx
xor byte [rcx + r14 + 0x10], al
mov rbx, rdi
mov ecx, edx
mov r15, rbp
mov r12, rsi
cmp rcx, rdi
jb 0x140105e10
mov r8, qword [rsp + 0x40]
lea rcx, [r14 + 0x10]
mov rsi, qword [rsp + 0x48]
mov rdx, rcx
call rsi
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call rsi
mov eax, r13d
mov rsi, r12
cmp rbx, 8
jb 0x140105f5d
lea ecx, [rdi - 1]
mov edx, ecx
lea r8, [rcx + rbp]
lea rcx, [rsp + 0x50]
add rcx, rdx
cmp rbp, rcx
ja 0x140105e81
lea rcx, [rsp + 0x50]
cmp r8, rcx
jae 0x140105f5d
lea rcx, [rdx + r12]
cmp r15, rcx
ja 0x140105e96
mov rsi, r12
cmp r8, r12
jae 0x140105f5d
mov rsi, r12
cmp rbx, 0x40
jb 0x140105f35
mov r8, rbx
mov r9, rbx
and r8d, 0x3f
sub r9, r8
mov r10d, 0x20
nop word [rax + rax]
movdqu xmm0, xmmword [rsp + r13 + 0x50]
lea ecx, [r10 - 0x10]
add eax, 0x40
movdqu xmm1, xmmword [r12 + r13]
xorps xmm1, xmm0
movdqu xmm0, xmmword [rsp + rcx + 0x50]
movdqu xmmword [r15 + r13], xmm1
mov r13d, eax
movdqu xmm1, xmmword [rcx + r12]
xorps xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
mov ecx, r10d
movdqu xmm0, xmmword [rsp + rcx + 0x50]
movdqu xmm1, xmmword [rcx + r12]
xorps xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
lea ecx, [r10 + 0x10]
add r10d, 0x40
movdqu xmm1, xmmword [rcx + r12]
movdqu xmm0, xmmword [rsp + rcx + 0x50]
xorps xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
cmp r13, r9
jb 0x140105ec0
cmp r8, 8
jb 0x140105f5d
mov rdx, rdi
and rdx, 0xfffffffffffffff8
mov ecx, eax
nop
movq xmm1, qword [rcx + rsi]
add eax, 8
movq xmm0, qword [rsp + rcx + 0x50]
xorps xmm1, xmm0
movq qword [rcx + rbp], xmm1
mov ecx, eax
cmp rcx, rdx
jb 0x140105f40
mov r12d, dword [rsp + 0x38]
lea r15, [r14 + 0x10]
mov edx, eax
cmp rdx, rdi
jae 0x140105f84
nop dword [rax]
movzx ecx, byte [rdx + rsi]
inc eax
xor cl, byte [rsp + rdx + 0x50]
mov byte [rdx + rbp], cl
mov edx, eax
cmp rdx, rdi
jb 0x140105f70
cmp r12d, 0x10
jae 0x140105fa0
mov r8d, reloc.WS2_32.dll_recv
mov ecx, r12d
sub r8d, r12d
add rcx, r14
xor edx, edx
call fcn.1402541c0
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
xor qword [r15], rax
mov rax, qword [rsp + 0x58]
xor qword [r14 + 0x18], rax
movzx eax, byte [rsp + 0x30]
mov byte [r14], al
xor eax, eax
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1401121d0
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov r8, qword [rsp + 0x40]
mov rdx, r15
mov rcx, r15
call qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [rsp + 0x48]
mov eax, r13d
jmp 0x140105f66