Function at 0x14004dc70
Capabilities:
Encode data using xor

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
mov qword [rbp + 0x2f], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
movdqa xmm0, xmmword [0x1400a8450]
movdqu xmmword [rbp - 0x19], xmm0
movdqa xmm1, xmmword [0x1400a8850]
movdqu xmmword [rbp - 9], xmm1
mov word [rbp + 7], 0xba
mov byte [rbp + 9], 1
xor r12d, r12d
mov ecx, r12d
lea eax, [rcx - 0x27]
xor byte [rbp + rcx - 0x19], al
inc rcx
cmp rcx, 0x21
jb 0x14004dcc0
mov byte [rbp + 9], r12b
mov qword [rbp + 0x27], reloc.WS2_32.dll_ntohs
mov qword [rbp + 0x1f], r12
mov byte [rbp + 0xf], r12b
cmp byte [rbp - 0x19], r12b
jne 0x14004dcef
mov r8, r12
jmp 0x14004dd00
lea rax, [rbp - 0x19]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r12b
jne 0x14004dcf7
lea rdx, [rbp - 0x19]
lea rcx, [rbp + 0xf]
call fcn.140034cf0
nop
mov dword [rbp + 0x67], 0xb5b7b496
mov dword [rbp + 0x6b], 0x100bbb3
mov rcx, r12
nop
lea eax, [rcx - 0x27]
xor byte [rbp + rcx + 0x67], al
inc rcx
cmp rcx, 6
jb 0x14004dd20
mov byte [rbp + 0x6e], 0
mov qword [rbp - 0x21], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x29], r12
mov byte [rbp - 0x39], 0
cmp byte [rbp + 0x67], 0
jne 0x14004dd4f
mov r8, r12
jmp 0x14004dd6a
lea rax, [rbp + 0x67]
or r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp byte [rax + r8], 0
jne 0x14004dd60
lea rdx, [rbp + 0x67]
lea rcx, [rbp - 0x39]
call fcn.140034cf0
nop
mov qword [rbp - 1], reloc.WS2_32.dll_ntohs
mov qword [rbp - 9], r12
mov byte [rbp - 0x19], 0
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rbp + 0xf]
lea rcx, [rbp - 0x19]
call fcn.140034e20
lea rdx, [rbp - 0x19]
lea rcx, [rbp - 0x59]
call fcn.14004cd50
mov rbx, qword [rbp - 0x49]
test rbx, rbx
je 0x14004de72
mov r15, qword [rbp - 0x29]
lea r14, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
cmovae r14, qword [rbp - 0x39]
test r15, r15
je 0x14004de70
test rbx, rbx
je 0x14004de45
cmp r15, rbx
ja 0x14004de45
sub rbx, r15
inc rbx
lea rsi, [rbp - 0x59]
cmp qword [rbp - 0x41], 0x10
cmovae rsi, qword [rbp - 0x59]
nop
test rbx, rbx
je 0x14004de45
movsx edx, byte [r14]
mov r8, rbx
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_memchr]
mov rdi, rax
test rax, rax
je 0x14004de45
mov r8, r15
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcmp
test eax, eax
je 0x14004de2e
sub rsi, rdi
dec rsi
add rbx, rsi
lea rsi, [rdi + 1]
jmp 0x14004ddf0
lea rax, [rbp - 0x59]
cmp qword [rbp - 0x41], 0x10
cmovae rax, qword [rbp - 0x59]
sub rdi, rax
cmp rdi, 0xffffffffffffffff
jne 0x14004de70
lea rdx, [rbp - 0x59]
cmp qword [rbp - 0x41], 0x10
cmovae rdx, qword [rbp - 0x59]
lea rcx, [rbp - 0x39]
cmp qword [rbp - 0x21], 0x10
cmovae rcx, qword [rbp - 0x39]
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x14004de70
xor bl, bl
jmp 0x14004de72
mov bl, 1
mov rax, qword [rbp - 0x41]
cmp rax, 0x10
jb 0x14004ded1
inc rax
mov rcx, qword [rbp - 0x59]
cmp rax, 0x1000
jb 0x14004decc
test cl, 0x1f
je 0x14004de97
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rbp - 0x59]
mov rcx, qword [rax - 8]
cmp rcx, rax
jb 0x14004deab
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rbp - 0x59]
sub rax, rcx
cmp rax, 8
jae 0x14004debf
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rax, 0x27
jbe 0x14004decc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140054a50
mov qword [rbp - 0x41], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x49], r12
mov byte [rbp - 0x59], 0
mov rax, qword [rbp - 0x21]
cmp rax, 0x10
jb 0x14004df40
inc rax
mov rcx, qword [rbp - 0x39]
cmp rax, 0x1000
jb 0x14004df3b
test cl, 0x1f
je 0x14004df06
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rbp - 0x39]
mov rcx, qword [rax - 8]
cmp rcx, rax
jb 0x14004df1a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rbp - 0x39]
sub rax, rcx
cmp rax, 8
jae 0x14004df2e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rax, 0x27
jbe 0x14004df3b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140054a50
mov qword [rbp - 0x21], reloc.WS2_32.dll_ntohs
mov qword [rbp - 0x29], r12
mov byte [rbp - 0x39], 0
mov rax, qword [rbp + 0x27]
cmp rax, 0x10
jb 0x14004dfaa
inc rax
mov rcx, qword [rbp + 0xf]
cmp rax, 0x1000
jb 0x14004dfa5
test cl, 0x1f
je 0x14004df75
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x14004df85
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
sub rcx, rax
cmp rcx, 8
jae 0x14004df95
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
cmp rcx, 0x27
jbe 0x14004dfa2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, rax
call fcn.140054a50
movzx eax, bl
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret