Function at 0x1401443c0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push r12
push r14
push r15
mov eax, pe_nt_image_headers64
call fcn.1401c7cd0
sub rsp, rax
mov rax, qword [0x1402c2ed0]
xor rax, rsp
mov qword [rsp + 0x100], rax
mov rsi, qword [rcx + 0x70]
mov r12, r9
mov qword [rsp + 0x50], r9
mov r15, r8
mov r14, rdx
mov qword [rsp + 0x40], rcx
mov rbx, qword [rsi + 0xc8]
lea rax, [rbx + 0x10]
cmp r9, rax
je 0x140144417
or eax, 0xffffffff
jmp 0x1401447a9
mov qword [rsp + 0x128], rbp
lea rax, [rsp + 0x60]
neg rax
mov qword [rsp + 0x120], rdi
and eax, 0xf
mov qword [rsp + 0x118], r13
lea rcx, [rsp + 0x60]
xor edi, edi
add rcx, rax
mov r9, rsi
mov qword [rsp + 0x38], rcx
lea rax, [rcx + 0x30]
mov qword [rsp + 0x30], rax
lea rbp, [rcx + 0x40]
cmp rbx, 0x40
ja 0x140144638
mov edx, 0x80
mov dword [rsi + 0x20], edi
lea rax, [rsi + 0x20]
mov qword [rsp + 0x48], rdx
mov r8d, edx
mov qword [rsp + 0x20], rax
lea rdx, [0x14022a0d0]
call fcn.140174b20
mov rdx, qword [rsp + 0x38]
lea r13, [rsi + 0xd0]
mov rcx, r13
call fcn.14016b750
mov rax, qword [rsp + 0x30]
movups xmm0, xmmword [rsi + 0x94]
mov dword [rsi + 0x70], edi
movups xmmword [rax], xmm0
mov rax, qword [rsp + 0x40]
mov qword [rsi + 0xa8], reloc.WS2_32.dll_listen
mov qword [rsi + 0xb0], rbx
cmp dword [rax + 0x10], edi
je 0x140144511
test rbx, rbx
je 0x14014460e
mov r8, r15
mov r9, r14
sub r8, rbp
mov rdx, rbp
sub r9, rbp
mov rdi, rbx
nop word [rax + rax]
movzx ecx, byte [r8 + rdx]
movzx eax, byte [rdx]
lea rdx, [rdx + 1]
xor ecx, eax
mov byte [rdx - 1], cl
mov byte [r9 + rdx - 1], cl
sub rbx, 1
jne 0x1401444f0
jmp 0x14014460e
test rbx, rbx
je 0x14014460e
cmp rbx, 0x20
jb 0x1401445c7
lea rcx, [rbx - 1]
lea rax, [r14 - 1]
add rcx, rbp
add rax, rbx
cmp rbp, rax
ja 0x140144540
cmp rcx, r14
jae 0x1401445c7
lea rax, [r15 - 1]
add rax, rbx
cmp rbp, rax
ja 0x140144551
cmp rcx, r15
jae 0x1401445c7
cmp r14, rax
ja 0x140144562
lea rax, [r14 - 1]
add rax, rbx
cmp rax, r15
jae 0x1401445c7
mov r8, rbx
mov r9, r15
mov r10, r15
and r8, 0xffffffffffffffe0
sub r9, r14
sub r10, rbp
mov rdx, r14
mov rcx, rbp
sub rdx, rbp
nop
movdqu xmm0, xmmword [rcx]
lea rax, [rcx + rdx]
add rdi, 0x20
lea rcx, [rcx + 0x20]
movdqu xmm2, xmmword [rax + r9]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rcx - 0x20], xmm2
movdqu xmm0, xmmword [rcx - 0x10]
movdqu xmmword [rax], xmm1
movdqu xmm1, xmmword [rcx + r10 - 0x10]
pxor xmm0, xmm1
movdqu xmmword [rcx + rdx - 0x10], xmm0
movdqu xmmword [rcx - 0x10], xmm1
cmp rdi, r8
jb 0x140144580
cmp rdi, rbx
jae 0x14014460e
mov r9, r15
lea r8, [rdi + rbp]
mov r10, r14
sub r9, r14
sub r10, rbp
sub rbx, rdi
add rdi, rbx
nop dword [rax]
nop word [rax + rax]
movzx eax, byte [r8]
lea rcx, [r10 + r8]
movzx edx, byte [rcx + r9]
mov byte [r8], dl
lea r8, [r8 + 1]
xor al, dl
mov byte [rcx], al
sub rbx, 1
jne 0x1401445f0
mov rbx, rdi
lea rcx, [rdi + rbp]
neg rbx
xor edx, edx
and ebx, 0xf
mov r8d, ebx
call fcn.1401c8c30
lea rax, [rbx + rdi]
mov rbx, rdi
add rbp, rax
lea r8, [rax + 0x10]
jmp 0x140144721
mov eax, 0x40
mov dword [rsi + 0x20], edi
lea r12, [rsi + 0x20]
mov qword [rsp + 0x48], rax
mov r8d, eax
mov qword [rsp + 0x20], r12
lea rdx, [0x14022a0d0]
call fcn.140174b20
mov rdx, qword [rsp + 0x38]
lea r13, [rsi + 0xd0]
mov rcx, r13
call fcn.14016b750
mov dword [r12], 1
lea rdx, [rsi + 0x94]
mov r8d, reloc.WS2_32.dll_recv
mov dword [rsi + 0x70], edi
mov rcx, r13
call fcn.14016b8b0
mov rax, qword [rsp + 0x40]
mov r8, rbx
mov qword [rsi + 0xa8], reloc.WS2_32.dll_listen
mov rdx, r15
mov qword [rsi + 0xb0], rbx
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x58], rdi
cmp dword [rax + 0x10], edi
je 0x1401446dd
mov r9, rsi
mov qword [rsp + 0x20], r12
mov rcx, r14
call fcn.140174b20
mov r8, rbx
mov rdx, r14
mov rcx, r13
call fcn.14016b8b0
jmp 0x1401446fb
mov rcx, r13
call fcn.14016b8b0
mov r9, rsi
mov qword [rsp + 0x20], r12
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.140174b20
mov r8, rbx
lea rdx, [0x14022a0d0]
neg r8
mov rcx, r13
and r8d, 0xf
call fcn.14016b8b0
mov r8, qword [rsp + 0x58]
mov rdi, rbx
mov r12, qword [rsp + 0x50]
movups xmm0, xmmword [rsi + 0xa8]
add r15, rbx
add r8, 0x10
lea rbx, [r14 + rdi]
mov rcx, r13
mov rdi, qword [rsp + 0x30]
mov rdx, rdi
movups xmmword [rbp], xmm0
call fcn.14016b8b0
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x38]
call fcn.1400db5e0
mov rbp, qword [rsp + 0x40]
lea rdx, [rsi + 0x84]
cmp dword [rbp + 0x10], 0
jne 0x14014476b
mov rdx, rdi
mov rcx, r13
call fcn.14016b6b0
mov r13, qword [rsp + 0x118]
mov qword [rsi + 0xc8], 0xffffffffffffffff
cmp dword [rbp + 0x10], 0
mov rbp, qword [rsp + 0x128]
je 0x1401447c9
movups xmm0, xmmword [rsi + 0x84]
movups xmmword [rbx], xmm0
mov eax, r12d
mov rdi, qword [rsp + 0x120]
mov rcx, qword [rsp + 0x100]
xor rcx, rsp
call fcn.1401c7760
add rsp, 0x130
pop r15
pop r14
pop r12
pop rsi
pop rbx
ret
mov r8d, reloc.WS2_32.dll_recv
mov rdx, r15
mov rcx, rdi
call fcn.1400dbf80
test eax, eax
je 0x14014479e
sub rbx, r12
lea r8, [r12 - 0x10]
xor edx, edx
lea rcx, [rbx + 0x10]
call fcn.1401c8c30
or eax, 0xffffffff
jmp 0x1401447a1