Function at 0x140361830
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, pe_nt_image_headers64
call fcn.14038d7d0
sub rsp, rax
mov rax, qword [0x14047f040]
xor rax, rsp
mov qword [rsp + 0x100], rax
mov rbx, qword [rcx + 0x340]
lea r12, [rcx + 0x1f8]
mov r13, qword [rsp + 0x180]
lea rax, [rsp + 0x60]
mov rbp, rcx
mov qword [rsp + 0x50], r8
neg rax
lea rcx, [rsp + 0x60]
and eax, 0xf
mov r15, r9
add rax, rcx
mov r14, rdx
mov qword [rsp + 0x38], rax
lea rdi, [rbp + 0x1a0]
mov dword [rdi], 0
lea r9, [rbp + 0x180]
mov qword [rsp + 0x20], rdi
lea rcx, [rax + 0x30]
mov qword [rsp + 0x30], rcx
mov rcx, rax
lea rsi, [rax + 0x40]
cmp rbx, 0x40
ja 0x140361c77
mov edx, 0x80
mov qword [rsp + 0x40], rdx
mov r8d, edx
lea rdx, [0x14043b680]
call fcn.140039300
mov rdx, qword [rsp + 0x38]
mov rcx, r12
call fcn.14031c750
mov rax, qword [rsp + 0x30]
xor edi, edi
test byte [rbp + 0x6c], 2
movups xmm0, xmmword [rbp + 0x30c]
mov dword [rbp + 0x1f0], 0
mov qword [rbp + 0x320], recvfrom
movups xmmword [rax], xmm0
mov qword [rbp + 0x328], rbx
je 0x140361b1d
test rbx, rbx
je 0x140361c50
cmp rbx, 0x10
jb 0x140361ae1
lea rcx, [r14 - 1]
lea rdx, [rbx - 1]
add rcx, rbx
add rdx, rsi
cmp r14, rdx
ja 0x140361957
cmp rcx, rsi
jae 0x140361ae1
lea rax, [r15 - 1]
add rax, rbx
cmp r14, rax
ja 0x14036196c
cmp rcx, r15
jae 0x140361ae1
cmp rsi, rax
ja 0x14036197a
cmp rdx, r15
jae 0x140361ae1
mov rcx, rbx
and rcx, 0xfffffffffffffff0
mov rdx, r15
lea r9, [rsi + 4]
sub rdx, rsi
mov r8, r14
sub r8, rsi
nop dword [rax]
nop word [rax + rax]
movd xmm1, dword [r9 - 4]
xorps xmm0, xmm0
movd xmm2, dword [rdx + r9 - 4]
add rdi, 0x10
movd xmm3, dword [rdx + r9]
lea r9, [r9 + 0x10]
punpcklbw xmm2, xmm0
punpcklwd xmm2, xmm0
punpcklbw xmm1, xmm0
punpcklwd xmm1, xmm0
xorps xmm2, xmm1
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
xorps xmm0, xmm0
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14044a7f0]
packuswb xmm2, xmm2
movd dword [r9 - 0x14], xmm2
movd xmm1, dword [r9 - 0x10]
movd dword [r8 + r9 - 0x14], xmm2
punpcklbw xmm1, xmm0
punpcklwd xmm1, xmm0
punpcklbw xmm3, xmm0
punpcklwd xmm3, xmm0
xorps xmm3, xmm1
pshuflw xmm0, xmm3, 0xd8
pshufhw xmm1, xmm0, 0xd8
xorps xmm0, xmm0
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14044a7f0]
packuswb xmm2, xmm2
movd dword [r9 - 0x10], xmm2
movd xmm1, dword [r9 - 0xc]
movd dword [r8 + r9 - 0x10], xmm2
movd xmm2, dword [rdx + r9 - 0xc]
punpcklbw xmm2, xmm0
punpcklwd xmm2, xmm0
punpcklbw xmm1, xmm0
punpcklwd xmm1, xmm0
xorps xmm2, xmm1
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
xorps xmm0, xmm0
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14044a7f0]
packuswb xmm2, xmm2
movd dword [r9 - 0xc], xmm2
movd xmm1, dword [r9 - 8]
movd dword [r8 + r9 - 0xc], xmm2
movd xmm2, dword [rdx + r9 - 8]
punpcklbw xmm2, xmm0
punpcklwd xmm2, xmm0
punpcklbw xmm1, xmm0
punpcklwd xmm1, xmm0
xorps xmm2, xmm1
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm1, xmm0, 0xd8
pshufd xmm2, xmm1, 0xd8
andps xmm2, xmmword [0x14044a7f0]
packuswb xmm2, xmm2
movd dword [r9 - 8], xmm2
movd dword [r8 + r9 - 8], xmm2
cmp rdi, rcx
jb 0x1403619a0
cmp rdi, rbx
jae 0x140361c50
mov r8, r15
lea rcx, [rdi + rsi]
mov r9, r14
sub r8, rsi
sub r9, rsi
mov rdx, rbx
sub rdx, rdi
mov rdi, rbx
nop word [rax + rax]
movzx eax, byte [rcx + r8]
xor byte [rcx], al
movzx eax, byte [rcx]
mov byte [r9 + rcx], al
lea rcx, [rcx + 1]
sub rdx, 1
jne 0x140361b00
jmp 0x140361c50
test rbx, rbx
je 0x140361c50
cmp rbx, 0x40
jb 0x140361c10
lea rcx, [rbx - 1]
lea rdx, [r14 - 1]
add rcx, rsi
add rdx, rbx
cmp rsi, rdx
ja 0x140361b4c
cmp rcx, r14
jae 0x140361c10
lea rax, [r15 - 1]
add rax, rbx
cmp rsi, rax
ja 0x140361b61
cmp rcx, r15
jae 0x140361c10
cmp r14, rax
ja 0x140361b6f
cmp rdx, r15
jae 0x140361c10
mov rdx, rbx
and rdx, 0xffffffffffffffc0
mov r8, r15
lea rax, [rsi + 0x10]
mov r9, r15
sub r8, r14
sub r9, rsi
mov r10, r14
sub r10, rsi
nop dword [rax]
movdqu xmm0, xmmword [rax - 0x10]
lea rcx, [r10 + rax]
add rdi, 0x40
movdqu xmm2, xmmword [rax + r9 - 0x10]
lea rax, [rax + 0x40]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax - 0x50], xmm2
movdqu xmm0, xmmword [rax - 0x40]
movdqu xmm2, xmmword [rax + r9 - 0x30]
movdqu xmmword [rcx - 0x10], xmm1
movdqu xmm1, xmmword [rcx + r8]
xorps xmm0, xmm1
movdqu xmmword [rax - 0x40], xmm1
movdqa xmm1, xmm2
movdqu xmmword [rcx], xmm0
movdqu xmm0, xmmword [rax - 0x30]
movdqu xmmword [rax - 0x30], xmm2
xorps xmm1, xmm0
movdqu xmm0, xmmword [rax - 0x20]
movdqu xmmword [rcx + 0x10], xmm1
movdqu xmm1, xmmword [rax + r9 - 0x20]
xorps xmm0, xmm1
movdqu xmmword [rax - 0x20], xmm1
movdqu xmmword [rcx + 0x20], xmm0
cmp rdi, rdx
jb 0x140361b90
cmp rdi, rbx
jae 0x140361c50
mov r10, r15
lea r8, [rdi + rsi]
mov r11, r14
sub r10, r14
sub r11, rsi
mov r9, rbx
sub r9, rdi
mov rdi, rbx
nop dword [rax]
lea rcx, [r11 + r8]
movzx edx, byte [r10 + rcx]
lea r8, [r8 + 1]
movzx eax, dl
xor al, byte [r8 - 1]
mov byte [r8 - 1], dl
mov byte [rcx], al
sub r9, 1
jne 0x140361c30
mov rbx, rdi
lea rcx, [rdi + rsi]
neg rbx
xor edx, edx
and ebx, 0xf
mov r8d, ebx
call sub.VCRUNTIME140.dll_memset
lea rax, [rbx + rdi]
add rsi, rax
lea r8, [rax + 0x20]
jmp 0x140361d4d
mov edx, 0x40
mov qword [rsp + 0x40], rdx
mov r8d, edx
lea rdx, [0x14043b680]
call fcn.140039300
mov rdx, qword [rsp + 0x38]
mov rcx, r12
call fcn.14031c750
mov r8d, reloc.WS2_32.dll_recv
mov dword [rdi], 1
lea rdx, [rbp + 0x30c]
mov dword [rbp + 0x1f0], 0
mov rcx, r12
call fcn.14031c850
test byte [rbp + 0x6c], 2
mov r8, rbx
mov qword [rsp + 0x30], rsi
mov rdx, r15
mov qword [rbp + 0x320], recvfrom
mov qword [rbp + 0x328], rbx
je 0x140361d09
lea r9, [rbp + 0x180]
mov qword [rsp + 0x20], rdi
mov rcx, r14
call fcn.140039300
mov r8, rbx
mov rdx, r14
mov rcx, r12
call fcn.14031c850
jmp 0x140361d2b
mov rcx, r12
call fcn.14031c850
lea r9, [rbp + 0x180]
mov qword [rsp + 0x20], rdi
mov r8, rbx
mov rdx, r15
mov rcx, r14
call fcn.140039300
mov r8, rbx
lea rdx, [0x14043b680]
neg r8
mov rcx, r12
and r8d, 0xf
call fcn.14031c850
mov r8d, reloc.WS2_32.dll_recv
mov rdi, rbx
movups xmm0, xmmword [rbp + 0x320]
add r15, rdi
lea rbx, [r14 + rdi]
mov rdi, qword [rsp + 0x30]
mov rcx, r12
mov rdx, rdi
movups xmmword [rsi], xmm0
call fcn.14031c850
mov rdx, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x38]
call fcn.140001240
test byte [rbp + 0x6c], 2
lea rdx, [rbp + 0x2fc]
mov rcx, r12
cmove rdx, rdi
call fcn.14031c6a0
test byte [rbp + 0x6c], 2
mov qword [rbp + 0x340], 0xffffffffffffffff
je 0x140361db1
movups xmm0, xmmword [rbp + 0x2fc]
movups xmmword [rbx], xmm0
jmp 0x140361de6
mov r8d, reloc.WS2_32.dll_recv
mov rdx, r15
mov rcx, rdi
call fcn.1400012b0
test eax, eax
je 0x140361de2
cmp r13, 0x10
jbe 0x140361dde
sub rbx, r13
lea r8, [r13 - 0x10]
xor edx, edx
lea rcx, [rbx + 0x10]
call sub.VCRUNTIME140.dll_memset
xor eax, eax
jmp 0x140361df3
sub r13, 0x10
mov rcx, qword [rsp + 0x50]
mov eax, 1
mov qword [rcx], r13
mov rcx, qword [rsp + 0x100]
xor rcx, rsp
call fcn.1401c7900
add rsp, 0x118
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret