Function at 0x14000e050
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rsi
push r12
sub rsp, 0x230
mov rax, qword [0x140112080]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov rsi, rcx
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0xb0]
xor edx, edx
mov r8d, 0x104
xor r12d, r12d
call sub.VCRUNTIME140.dll_memset
lea ecx, [r12 + 0xc]
mov dword [rsp + 0x40], reloc.WS2_32.dll_recv
mov qword [rsp + 0x44], reloc.WLDAP32.dll_Ordinal_32
call fcn.1400dd030
lea r8d, [r12 + 0xc]
mov qword [rsp + 0x90], rax
lea rdx, [rsp + 0x40]
mov rcx, rax
lea rbx, [rax + 0xc]
mov qword [rsp + 0xa0], rbx
call sub.VCRUNTIME140.dll_memmove
mov edx, dword [0x14011a524]
lea r8, [rsp + 0x90]
add rdx, qword [rsi]
mov qword [rsp + 0x98], rbx
call fcn.14000de00
test rax, rax
je 0x14000e5df
mov rcx, qword [0x14011a638]
test rcx, rcx
je 0x14000e5df
cmp dword [0x14011a640], r12d
je 0x14000e5df
mov r9d, 0x104
mov qword [rsp + 0x20], r12
lea r8, [rsp + 0xb0]
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x14000e5df
mov qword [rsp + 0x258], rdi
lea rax, [rsp + 0xb0]
mov rdi, 0xffffffffffffffff
mov qword [rsp + 0x228], r14
vpxor xmm0, xmm0, xmm0
vpxor xmm1, xmm1, xmm1
mov r8, rdi
vmovups xmmword [rsp + 0x50], xmm0
vmovdqu xmmword [rsp + 0x60], xmm1
nop dword [rax]
inc r8
cmp byte [rax + r8], r12b
jne 0x14000e170
mov qword [rsp + 0x260], r13
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x50]
mov qword [rsp + 0x220], r15
call fcn.14000d920
lea rax, [rsp + 0x50]
mov r14d, reloc.WS2_32.dll_ntohs
lea rbx, [rsi + 0x50]
cmp rbx, rax
je 0x14000e204
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000e1e9
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000e1e4
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000e577
mov rcx, r8
call fcn.1400dd38c
vmovups ymm0, ymmword [rsp + 0x50]
lea r15, [rbx + 0x10]
mov rdx, r14
mov qword [r15], r12
vmovups ymmword [rbx], ymm0
mov byte [rsp + 0x50], r12b
jmp 0x14000e20d
mov rdx, qword [rsp + 0x68]
lea r15, [rbx + 0x10]
cmp rdx, 0x10
jb 0x14000e248
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e240
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e577
vzeroupper
call fcn.1400dd38c
mov r10, qword [rbx + 0x18]
mov r12, rbx
mov rsi, qword [r15]
cmp r10, 0x10
jb 0x14000e25b
mov r12, qword [rbx]
cmp rsi, 1
jb 0x14000e2a8
lea r13, [rsi + r12]
mov r8, rsi
mov edx, 0x5f
mov rcx, r12
vzeroupper
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x14000e2a4
nop dword [rax]
cmp byte [rax], 0x5f
je 0x14000e47a
inc rax
mov r8, r13
sub r8, rax
mov rcx, rax
mov edx, 0x5f
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x14000e280
mov r10, qword [rbx + 0x18]
cmp byte [0x1400f5c13], 0
vmovsd xmm0, qword [str.eVUEYYgwUUY]
mov eax, dword [0x1400f5c10]
vmovsd qword [rsp + 0x30], xmm0
mov dword [rsp + 0x38], eax
je 0x14000e433
vmovdqu xmm5, xmmword [0x1400fe260]
vmovaps xmmword [rsp + 0x210], xmm6
lea r9, [rsp + 0x38]
vmovaps xmmword [rsp + 0x200], xmm7
mov eax, 1
vmovaps xmmword [rsp + 0x1f0], xmm8
vmovdqu xmm8, xmmword [0x1400fe2c0]
vmovaps xmmword [rsp + 0x1e0], xmm9
vmovd xmm7, eax
vmovaps xmmword [rsp + 0x1d0], xmm10
mov eax, Ordinal_33
vmovaps xmm10, xmmword [rsp + 0x1d0]
vmovaps xmm9, xmmword [rsp + 0x1e0]
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm8
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm8
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm7
vmovd xmm6, eax
vpsrld xmm1, xmm4, xmm6
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmmword [0x1400fe290]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm0, xmm3, xmmword [0x1400fe220]
vpaddb xmm2, xmm0, xmmword [0x1400fe2d0]
vmovdqu xmm5, xmmword [0x1400fe280]
vmovd xmm0, dword [str.eVUEYYgwUUY]
vpxor xmm1, xmm2, xmm0
vmovd dword [rsp + 0x30], xmm1
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm8
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm8
vmovaps xmm8, xmmword [rsp + 0x1f0]
lea r8d, [rax - 0x17]
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm7
vmovaps xmm7, xmmword [rsp + 0x200]
vpsrld xmm1, xmm4, xmm6
vmovaps xmm6, xmmword [rsp + 0x210]
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmmword [0x1400fe290]
vmovd xmm1, dword [rsp + 0x34]
vpsubd xmm3, xmm5, xmm2
vpshufb xmm0, xmm3, xmmword [0x1400fe220]
vpaddb xmm2, xmm0, xmmword [0x1400fe2d0]
vpxor xmm0, xmm2, xmm1
vmovd dword [rsp + 0x34], xmm0
nop
mov eax, 0x29e4129f
lea r9, [r9 + 1]
mul r8d
mov eax, r8d
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul ecx, eax, 0x37
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x32
xor byte [r9 - 1], al
cmp r8d, 0xc
jl 0x14000e400
lea rax, [rsp + 0x30]
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x14000e440
cmp rdi, r10
ja 0x14000e58b
cmp r10, 0x10
jb 0x14000e45b
mov rbx, qword [rbx]
mov qword [r15], rdi
lea rdx, [rsp + 0x30]
mov r8, rdi
mov rcx, rbx
vzeroupper
call sub.VCRUNTIME140.dll_memcpy
mov byte [rbx + rdi], 0
jmp 0x14000e59e
sub rax, r12
cmp rax, rdi
je 0x14000e2a4
mov rcx, qword [rsp + 0x30]
mov rcx, qword [rcx + 0x60]
test rcx, rcx
je 0x14000e2a4
sub rcx, rax
inc rax
vpxor xmm0, xmm0, xmm0
vpxor xmm1, xmm1, xmm1
lea r8, [rcx - 1]
vmovups xmmword [rsp + 0x70], xmm0
vmovdqu xmmword [rsp + 0x80], xmm1
cmp rsi, rax
jb 0x14000e5e3
sub rsi, rax
mov rcx, rbx
cmp rsi, r8
cmovb r8, rsi
cmp qword [rbx + 0x18], 0x10
jb 0x14000e4d9
mov rcx, qword [rbx]
lea rdx, [rcx + rax]
lea rcx, [rsp + 0x70]
call fcn.14000d920
lea rax, [rsp + 0x70]
cmp rbx, rax
je 0x14000e53f
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14000e527
mov rcx, qword [rbx]
inc rdx
cmp rdx, 0x1000
jb 0x14000e522
mov r8, qword [rcx - 8]
add rdx, 0x27
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000e577
mov rcx, r8
call fcn.1400dd38c
vmovups ymm0, ymmword [rsp + 0x70]
mov qword [r15], 0
vmovups ymmword [rbx], ymm0
mov byte [rsp + 0x70], 0
jmp 0x14000e547
mov r14, qword [rsp + 0x88]
cmp r14, 0x10
jb 0x14000e59e
mov rcx, qword [rsp + 0x70]
lea rdx, [r14 + 1]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e581
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000e581
vzeroupper
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
vzeroupper
call fcn.1400dd38c
jmp 0x14000e59e
lea r9, [rsp + 0x30]
mov rdx, rdi
mov rcx, rbx
vzeroupper
call fcn.14000e930
mov r13, qword [rsp + 0x260]
mov al, 1
mov r15, qword [rsp + 0x220]
mov rdi, qword [rsp + 0x258]
mov r14, qword [rsp + 0x228]
vzeroupper
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.1400dcef0
add rsp, 0x230
pop r12
pop rsi
pop rbx
ret
xor al, al
jmp 0x14000e5c0
call fcn.14000e910
int3