Function at 0x140173220
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xe8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x60], 0xfffffffffffffffe
mov r15, rdx
mov qword [rbp + 0x10], rcx
cmp rdx, 0x15
jae 0x14017327f
cmp r15, 1
jbe 0x1401738e1
mov r8d, 1
mov rcx, qword [rbp + 0x10]
mov rdx, r15
add rsp, 0xe8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
jmp fcn.140173b00
lea rax, [r15*4]
movabs rsi, 0x7ffffffffffffff8
and rsi, rax
movzx eax, byte [0x14030a0c1]
mov edx, 4
mov rcx, rsi
call fcn.140039d90
test rax, rax
je 0x140173a43
mov qword [rbp + 0x28], rax
mov qword [rbp - 8], rsi
movzx eax, byte [0x14030a0c1]
mov ecx, pe_nt_image_headers64
mov edx, 8
call fcn.140039d90
test rax, rax
je 0x140173a4f
mov rdi, rax
mov rax, qword [rbp + 0x10]
lea rcx, [rax + 0xc]
mov qword [rbp - 0x18], rcx
add rax, 0xfffffffffffffff8
mov qword [rbp - 0x10], rax
mov eax, reloc.WS2_32.dll_recv
mov qword [rbp + 0x58], rax
xor esi, esi
xor r14d, r14d
mov qword [rbp], r15
jmp 0x140173319
mov esi, 1
mov r14, qword [rbp + 8]
mov rax, r15
sub rax, r14
jbe 0x1401738a5
mov rcx, qword [rbp + 0x10]
lea rcx, [rcx + r14*8]
cmp rax, 2
mov qword [rbp + 0x38], rdi
jae 0x140173410
mov r8, rax
lea rbx, [r8 + r14]
mov r13, qword [rbp + 0x58]
mov rdi, rbx
sub rdi, r14
jb 0x1401739bf
cmp rbx, r15
ja 0x1401739bf
jae 0x140173394
cmp r8, 0xa
jae 0x140173394
lea rbx, [r14 + 0xa]
cmp rbx, r15
cmovae rbx, r15
cmp r8, 1
adc r8, 0
mov rdi, rbx
sub rdi, r14
mov rax, qword [rbp + 0x38]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x40], r13
mov rdx, rdi
call fcn.140173b00
mov r13, qword [rbp + 0x58]
cmp rsi, r13
jne 0x140173480
mov qword [rbp + 0x30], r14
mov r12, rsi
lea rax, [r13*2]
mov qword [rbp + 0x50], rax
mov rcx, r13
shl rcx, 5
movzx eax, byte [0x14030a0c1]
mov edx, 8
call fcn.140039d90
test rax, rax
je 0x1401739e5
mov rsi, rax
shl r13, 4
mov rcx, rax
mov r14, qword [rbp + 0x38]
mov rdx, r14
mov r8, r13
call sub.VCRUNTIME140.dll_memcpy
mov r8d, 8
mov rcx, r14
mov rdx, r13
call fcn.140039da0
mov r13, rsi
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x58], rax
mov rsi, r12
mov r14, qword [rbp + 0x30]
jmp 0x140173484
movzx edx, byte [rcx + 8]
cmp dl, byte [rcx]
jae 0x140173770
mov r8d, 2
cmp rax, 2
je 0x140173448
nop dword [rax + rax]
mov r9d, edx
movzx edx, byte [rcx + r8*8]
cmp dl, r9b
jae 0x140173448
inc r8
cmp rax, r8
jne 0x140173430
mov r8, rax
mov rbx, r8
add rbx, r14
jb 0x140173a03
cmp rbx, r15
mov r13, qword [rbp + 0x58]
ja 0x140173a23
cmp r8, 2
jae 0x14017379e
mov r8d, 1
jmp 0x140173346
mov r13, qword [rbp + 0x38]
mov rax, rsi
shl rax, 4
mov qword [r13 + rax], rdi
mov qword [r13 + rax + 8], r14
inc rsi
mov r14, rbx
cmp rsi, 2
mov rdi, r13
jb 0x140173319
mov qword [rbp + 8], rbx
mov qword [rbp + 0x38], rdi
jmp 0x140173510
mov r15, rdi
mov rdx, qword [rbp + 0x28]
mov rbx, qword [rbp + 0x18]
mov r12, qword [rbp + 0x20]
mov rdi, qword [rbp + 0x38]
add r13, rdi
add r14, rdi
sub r8, rdx
mov rcx, r15
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp - 0x20]
add rax, qword [rbp + 0x30]
mov qword [r14], rax
mov rax, qword [rbp - 0x28]
mov qword [r14 + 8], rax
lea rdx, [r13 + 0x10]
not r12
add rbx, r12
shl rbx, 4
mov rcx, r13
mov r8, rbx
call sub.VCRUNTIME140.dll_memmove
cmp rsi, 1
mov r15, qword [rbp]
jbe 0x140173310
mov r11, rsi
lea r10, [rsi - 1]
mov rcx, r10
shl rcx, 4
mov rax, qword [rdi + rcx]
mov rcx, qword [rdi + rcx + 8]
add rcx, rax
cmp rcx, r15
je 0x140173580
mov rdx, r11
shl rdx, 4
mov r8, qword [rdx + rdi - 0x20]
cmp r8, rax
jbe 0x140173580
cmp r11, 2
je 0x1401737cc
lea r12, [r11 - 3]
mov rcx, r12
shl rcx, 4
mov rcx, qword [rdi + rcx]
lea r9, [r8 + rax]
cmp rcx, r9
jbe 0x140173595
cmp r11, 3
jbe 0x14017388b
add r8, rcx
cmp qword [rdx + rdi - 0x40], r8
jbe 0x140173595
jmp 0x140173899
cmp r11, 2
je 0x14017359a
lea r12, [r11 - 3]
mov rcx, r12
shl rcx, 4
mov rcx, qword [rdi + rcx]
cmp rcx, rax
jb 0x14017359e
lea r12, [r11 - 2]
cmp r11, r12
jbe 0x140173939
lea r14, [r12 + 1]
cmp r11, r14
jbe 0x1401738f6
mov qword [rbp + 0x50], r10
mov r13, r12
shl r13, 4
mov rcx, qword [rdi + r13 + 8]
shl r14, 4
mov rax, qword [rdi + r14]
mov rbx, qword [rdi + r14 + 8]
add rbx, rax
mov rsi, rbx
sub rsi, rcx
jb 0x14017397c
cmp rbx, r15
ja 0x14017399c
mov qword [rbp - 0x20], rax
mov qword [rbp + 0x20], r12
mov qword [rbp + 0x18], r11
mov rdx, qword [rdi + r13]
mov rax, qword [rbp + 0x10]
mov qword [rbp - 0x28], rcx
lea r15, [rax + rcx*8]
lea rdi, [r15 + rdx*8]
mov r12, rsi
sub r12, rdx
cmp r12, rdx
mov qword [rbp + 0x30], rdx
jae 0x1401736c0
lea r8, [r12*8]
mov rsi, qword [rbp + 0x28]
mov rcx, rsi
mov rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea r8, [rsi + r12*8]
cmp qword [rbp + 0x30], 0
jle 0x140173755
test r12, r12
mov rsi, qword [rbp + 0x50]
jle 0x1401734b2
mov rax, qword [rbp - 0x10]
lea rax, [rax + rbx*8]
mov r11, qword [rbp + 0x28]
mov rbx, qword [rbp + 0x18]
mov r12, qword [rbp + 0x20]
nop word cs:[rax + rax]
movzx ecx, byte [r8 - 8]
movzx edx, byte [rdi - 8]
cmp cl, dl
mov r9d, 0
sbb r9, r9
cmp cl, dl
mov r10d, 0
adc r10, 0xffffffffffffffff
cmp cl, dl
lea rdi, [rdi + r9*8]
lea r8, [r8 + r10*8]
mov rcx, r8
cmovb rcx, rdi
mov rcx, qword [rcx]
mov qword [rax], rcx
cmp rdi, r15
jbe 0x1401736b5
add rax, 0xfffffffffffffff8
cmp r8, r11
ja 0x140173670
mov r15, rdi
mov rdx, r11
jmp 0x1401734c1
lea r8, [rdx*8]
mov r12, qword [rbp + 0x28]
mov rcx, r12
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0x30]
lea r8, [r12 + rax*8]
test rax, rax
jle 0x140173750
cmp rsi, rax
jle 0x140173750
mov rax, qword [rbp + 0x10]
lea rax, [rax + rbx*8]
mov rdx, r12
mov rsi, qword [rbp + 0x50]
mov rbx, qword [rbp + 0x18]
mov r12, qword [rbp + 0x20]
movzx r9d, byte [rdi]
xor r10d, r10d
xor ecx, ecx
cmp r9b, byte [rdx]
setae r10b
setb r9b
mov r11, rdx
cmovb r11, rdi
mov r11, qword [r11]
mov qword [r15], r11
add r15, 8
lea rdx, [rdx + r10*8]
cmp rdx, r8
jae 0x1401734c1
mov cl, r9b
lea rdi, [rdi + rcx*8]
cmp rdi, rax
jb 0x140173700
jmp 0x1401734c1
mov rdx, r12
jmp 0x14017375c
mov r15, rdi
mov rdx, qword [rbp + 0x28]
mov rsi, qword [rbp + 0x50]
jmp 0x1401734b9
mov r8d, 2
cmp rax, 2
je 0x14017333e
mov r9d, edx
movzx edx, byte [rcx + r8*8]
cmp dl, r9b
jb 0x14017333e
inc r8
cmp rax, r8
jne 0x140173780
jmp 0x14017333b
mov r12, rbx
mov qword [rbp + 0x50], rsi
mov rax, r8
shr rax, 1
lea rdx, [rcx + r8*8]
lea r9, [rax*8]
sub rdx, r9
cmp rax, 1
mov qword [rbp + 0x30], r14
jne 0x1401737da
xor r9d, r9d
jmp 0x140173849
mov esi, 2
mov r14, qword [rbp + 8]
jmp 0x140173319
mov r10, rax
and r10, 0xfffffffffffffffe
mov r9, qword [rbp - 0x18]
lea r11, [r9 + r14*8]
mov r9, qword [rbp - 0x10]
lea rsi, [r9 + r12*8]
xor r9d, r9d
movabs r13, 0x1ffffffffffffffe
nop
movzx ebx, byte [r11 + r9*8 - 0xc]
mov edi, dword [r11 + r9*8 - 8]
mov r14, qword [rsi]
mov qword [r11 + r9*8 - 0xc], r14
mov byte [rsi], bl
mov dword [rsi + 4], edi
mov rdi, r9
xor rdi, r13
add rdi, rax
movzx ebx, byte [r11 + r9*8 - 4]
mov r14d, dword [r11 + r9*8]
mov r15, qword [rdx + rdi*8]
mov qword [r11 + r9*8 - 4], r15
mov byte [rdx + rdi*8], bl
mov dword [rdx + rdi*8 + 4], r14d
add r9, 2
add rsi, 0xfffffffffffffff0
cmp r10, r9
jne 0x140173800
test r8b, 2
je 0x140173873
mov r10, r9
not r10
add rax, r10
movzx r10d, byte [rcx + r9*8]
mov r11d, dword [rcx + r9*8 + 4]
mov rsi, qword [rdx + rax*8]
mov qword [rcx + r9*8], rsi
mov byte [rdx + rax*8], r10b
mov dword [rdx + rax*8 + 4], r11d
mov r15, qword [rbp]
mov r13, qword [rbp + 0x58]
mov rsi, qword [rbp + 0x50]
mov rbx, r12
mov r14, qword [rbp + 0x30]
jmp 0x140173346
mov esi, 3
mov r14, qword [rbp + 8]
jmp 0x140173319
mov rsi, r11
mov r14, qword [rbp + 8]
jmp 0x140173319
mov rdx, qword [rbp + 0x58]
shl rdx, 4
mov r8d, 8
mov rcx, rdi
call fcn.140039da0
mov r8d, 4
mov rcx, qword [rbp + 0x28]
mov rdx, qword [rbp - 8]
add rsp, 0xe8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
jmp fcn.140039da0
nop
add rsp, 0xe8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
lea rax, [0x14025d1e0]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
mov qword [rbp - 0x48], 8
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp + 0x48], rdi
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x40], rax
lea rdx, [0x14025d270]
lea rcx, [rbp - 0x58]
call fcn.1401f72b0
jmp 0x140173a5b
lea rax, [0x14025d1e0]
mov qword [rbp - 0x58], rax
mov qword [rbp - 0x50], 1
mov qword [rbp - 0x48], 8
xorps xmm0, xmm0
movups xmmword [rbp - 0x40], xmm0
mov qword [rbp + 0x48], rdi
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x40], rax
lea rdx, [0x14025d258]
lea rcx, [rbp - 0x58]
call fcn.1401f72b0
jmp 0x140173a5b
mov qword [rbp + 0x48], rdi
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x40], rax
lea r8, [0x14025d288]
mov rdx, rbx
call fcn.1401f7870
jmp 0x140173a5b
mov qword [rbp + 0x48], rdi
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x40], rax
lea r8, [0x14025d288]
mov rcx, rbx
mov rdx, r15
call fcn.1401f7800
jmp 0x140173a5b
mov rax, qword [rbp + 0x38]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x40], r13
lea rcx, [0x14025d2e8]
lea r8, [0x14025d318]
mov edx, 0x2c
call fcn.1401f7370
jmp 0x140173a5b
mov rax, qword [rbp + 0x38]
mov qword [rbp + 0x48], rax
mov rax, qword [rbp + 0x50]
mov qword [rbp + 0x40], rax
lea rcx, [0x14025d2d0]
call fcn.1401f7230
jmp 0x140173a5b
mov qword [rbp + 0x48], rdi
mov rax, qword [rbp + 0x58]
mov qword [rbp + 0x40], rax
lea r8, [0x14025d240]
mov rcx, r14
mov rdx, rbx
call fcn.1401f7870
jmp 0x140173a5b
mov rax, qword [rbp + 0x38]
mov qword [rbp + 0x48], rax
mov qword [rbp + 0x40], r13
lea r8, [0x14025d240]
mov rcx, rbx
mov rdx, r15
call fcn.1401f7800
jmp 0x140173a5b
lea rcx, [0x14025d2a0]
call fcn.1401f7230
lea rcx, [0x14025d2b8]
call fcn.1401f7230
ud2