Function at 0x1402b2b80
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x108
call fcn.1402c5820
sub rsp, rax
mov rax, qword [0x14039ac80]
xor rax, rsp
mov qword [rsp + 0xf0], rax
mov rdi, qword [rcx + 0x340]
lea rax, [rsp + 0x50]
mov r12, qword [rsp + 0x170]
lea r13, [rsp + 0x50]
neg rax
mov qword [rsp + 0x48], r8
and eax, 0xf
mov qword [rsp + 0x40], r12
add r13, rax
xor esi, esi
mov r15, r9
mov rbp, rcx
lea r9, [rcx + 0x180]
mov r14, rdx
lea rax, [r13 + 0x30]
mov qword [rsp + 0x30], rax
lea rax, [rcx + 0x1a0]
mov dword [rax], esi
lea rbx, [r13 + 0x40]
mov qword [rsp + 0x20], rax
mov rcx, r13
cmp rdi, 0x40
ja 0x1402b2e2b
mov edx, pe_nt_image_headers64
mov qword [rsp + 0x38], rdx
mov r8d, edx
lea rdx, [0x140372330]
call fcn.140037900
mov rdx, r13
lea rcx, [rbp + 0x1f8]
call fcn.1401cf7c0
test byte [rbp + 0x6c], 2
movups xmm0, xmmword [rbp + 0x30c]
mov dword [rbp + 0x1f0], esi
mov qword [rbp + 0x320], reloc.WS2_32.dll_listen
movups xmmword [r13 + 0x30], xmm0
mov qword [rbp + 0x328], rdi
je 0x1402b2c9b
test rdi, rdi
je 0x1402b2e00
mov rcx, r15
mov rdx, r14
sub rcx, rbx
mov rsi, rdi
sub rdx, rbx
nop dword [rax]
movzx eax, byte [rcx + rbx]
xor byte [rbx], al
movzx eax, byte [rbx]
mov byte [rdx + rbx], al
lea rbx, [rbx + 1]
sub rdi, 1
jne 0x1402b2c80
jmp 0x1402b2e00
test rdi, rdi
je 0x1402b2e00
cmp rdi, 0x40
jb 0x1402b2db6
lea rcx, [rdi - 1]
lea rdx, [r14 - 1]
add rcx, rbx
add rdx, rdi
cmp rbx, rdx
ja 0x1402b2cca
cmp rcx, r14
jae 0x1402b2db6
lea rax, [r15 - 1]
add rax, rdi
cmp rbx, rax
ja 0x1402b2cdf
cmp rcx, r15
jae 0x1402b2db6
cmp r14, rax
ja 0x1402b2ced
cmp rdx, r15
jae 0x1402b2db6
mov r8, rdi
and r8, 0xffffffffffffffc0
mov rax, r15
lea rcx, [r13 + 0x50]
sub rax, rbx
mov r9, r15
sub r9, r14
mov rdx, r14
sub rdx, rbx
lea r10, [rax + 0x10]
lea r11, [rax + 0x20]
lea r12, [rax - 0x10]
nop word [rax + rax]
movdqu xmm0, xmmword [rcx - 0x10]
lea rax, [rcx + rdx]
add rsi, 0x40
movdqu xmm2, xmmword [r12 + rcx]
movdqu xmm3, xmmword [r10 + rcx]
movdqu xmmword [rcx - 0x10], xmm2
lea rcx, [rcx + 0x40]
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmm0, xmmword [rcx - 0x40]
movdqu xmm2, xmmword [rax + r9]
movdqu xmmword [rdx + rcx - 0x50], xmm1
movdqa xmm1, xmm2
pxor xmm1, xmm0
movdqu xmmword [rcx - 0x40], xmm2
movdqu xmm0, xmmword [rcx - 0x30]
movdqu xmm2, xmmword [r11 + rcx - 0x40]
movdqu xmmword [rax], xmm1
movdqa xmm1, xmm3
pxor xmm1, xmm0
movdqu xmmword [rdx + rcx - 0x30], xmm1
movdqa xmm1, xmm2
movdqu xmmword [rcx - 0x30], xmm3
movdqu xmm0, xmmword [rcx - 0x20]
movdqu xmmword [rcx - 0x20], xmm2
pxor xmm1, xmm0
movdqu xmmword [rdx + rcx - 0x20], xmm1
cmp rsi, r8
jb 0x1402b2d20
mov r12, qword [rsp + 0x40]
cmp rsi, rdi
jae 0x1402b2e00
lea r8, [r13 + 0x40]
mov r10, r15
add r8, rsi
mov r11, r14
sub r10, r14
sub r11, rbx
mov r9, rdi
sub r9, rsi
mov rsi, rdi
nop dword [rax]
nop word [rax + rax]
lea rcx, [r8 + r11]
movzx edx, byte [rcx + r10]
lea r8, [r8 + 1]
movzx eax, dl
xor al, byte [r8 - 1]
mov byte [r8 - 1], dl
mov byte [rcx], al
sub r9, 1
jne 0x1402b2de0
mov rbx, rsi
lea rcx, [r13 + 0x40]
neg rbx
add rcx, rsi
and ebx, 0xf
xor edx, edx
mov r8d, ebx
call sub.VCRUNTIME140.dll_memset
lea rax, [rbx + rsi]
lea r8, [rax + 0x20]
lea rcx, [rax + r13]
jmp 0x1402b2f24
mov edx, 0x40
mov qword [rsp + 0x38], rdx
mov r8d, edx
lea rdx, [0x140372330]
call fcn.140037900
mov rdx, r13
lea rcx, [rbp + 0x1f8]
call fcn.1401cf7c0
mov r8d, reloc.WS2_32.dll_recv
mov dword [rbp + 0x1a0], 1
lea rdx, [rbp + 0x30c]
mov dword [rbp + 0x1f0], esi
lea rcx, [rbp + 0x1f8]
call fcn.1401cf8c0
test byte [rbp + 0x6c], 2
mov r8, rdi
mov qword [rsp + 0x30], rbx
mov rdx, r15
mov qword [rbp + 0x320], reloc.WS2_32.dll_listen
mov qword [rbp + 0x328], rdi
je 0x1402b2ece
lea rax, [rbp + 0x1a0]
mov rcx, r14
lea r9, [rbp + 0x180]
mov qword [rsp + 0x20], rax
call fcn.140037900
mov r8, rdi
lea rcx, [rbp + 0x1f8]
mov rdx, r14
call fcn.1401cf8c0
jmp 0x1402b2efb
lea rcx, [rbp + 0x1f8]
call fcn.1401cf8c0
lea rax, [rbp + 0x1a0]
mov r8, rdi
lea r9, [rbp + 0x180]
mov qword [rsp + 0x20], rax
mov rdx, r15
mov rcx, r14
call fcn.140037900
mov r8, rdi
lea rdx, [0x140372330]
neg r8
lea rcx, [rbp + 0x1f8]
and r8d, 0xf
call fcn.1401cf8c0
mov r8d, reloc.WS2_32.dll_recv
mov rcx, r13
mov rsi, rdi
movups xmm0, xmmword [rbp + 0x320]
lea rbx, [r14 + rsi]
add r15, rsi
mov r14, qword [rsp + 0x30]
movups xmmword [rcx + 0x40], xmm0
lea rcx, [rbp + 0x1f8]
mov rdx, r14
call fcn.1401cf8c0
mov rdx, qword [rsp + 0x38]
mov rcx, r13
call fcn.140001240
test byte [rbp + 0x6c], 2
lea rdx, [rbp + 0x2fc]
lea rcx, [rbp + 0x1f8]
cmove rdx, r14
call fcn.1401cf710
test byte [rbp + 0x6c], 2
mov qword [rbp + 0x340], 0xffffffffffffffff
je 0x1402b2f8f
movups xmm0, xmmword [rbp + 0x2fc]
movups xmmword [rbx], xmm0
jmp 0x1402b2fc5
mov r8d, reloc.WS2_32.dll_recv
mov rdx, r15
mov rcx, r14
call fcn.1400012b0
test eax, eax
je 0x1402b2fc1
cmp r12, 0x10
jbe 0x1402b2fbd
sub rbx, r12
lea r8, [r12 - 0x10]
xor edx, edx
lea rcx, [rbx + 0x10]
call sub.VCRUNTIME140.dll_memset
xor eax, eax
jmp 0x1402b2fd2
sub r12, 0x10
mov rcx, qword [rsp + 0x48]
mov eax, 1
mov qword [rcx], r12
mov rcx, qword [rsp + 0xf0]
xor rcx, rsp
call fcn.1402c5880
add rsp, 0x108
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret