Function at 0x14001dc60
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, pe_nt_image_headers64
call fcn.14002a170
sub rsp, rax
mov rax, qword [0x140250648]
xor rax, rsp
mov qword [rsp + 0x60], rax
movzx r12d, byte [rcx]
lea r15, [rcx + 0x10]
mov r10, qword [rsp + 0xe0]
mov rdi, r9
mov r9, qword [rcx + 0x30]
mov rbp, r8
mov rax, qword [rcx + 0x28]
mov rsi, rdx
mov qword [rsp + 0x40], r9
mov r14, rcx
mov qword [rsp + 0x38], r10
lea rbx, [rcx + 0x20]
mov byte [rsp + 0x30], r12b
mov qword [rsp + 0x48], rax
test r12b, 0x40
jne 0x14001dce0
mov r8, r9
mov rdx, r15
call rax
inc qword [rbx]
mov r9, qword [rsp + 0x40]
mov r10, qword [rsp + 0x38]
mov r8d, r12d
xor r13d, r13d
and r8d, 7
mov r12d, reloc.WS2_32.dll_ntohs
sub r12d, r8d
mov byte [r14], r8b
mov dword [rsp + 0x38], r12d
mov ecx, r13d
cmp r12d, 0xf
jae 0x14001dd2b
mov edx, r12d
add rdx, r14
nop word [rax + rax]
movzx eax, byte [rdx]
mov byte [rdx], r13b
lea rdx, [rdx + 1]
or rcx, rax
shl rcx, 8
sub r8, 1
jne 0x14001dd10
lea rbx, [r14 + 0x20]
movzx eax, byte [r14 + 0xf]
or rcx, rax
mov byte [r14 + 0xf], 1
cmp rcx, rdi
je 0x14001dd47
mov eax, 0xffffffff
jmp 0x14001dfcc
lea rax, [rdi + 0xf]
or rax, 8
shr rax, 3
add qword [rbx], rax
movabs rax, 0x2000000000000000
cmp qword [rbx], rax
jbe 0x14001dd6f
mov eax, 0xfffffffe
jmp 0x14001dfcc
mov rbx, rdi
shr rbx, 4
test rbx, rbx
je 0x14001ddf2
mov qword [rsp + 0x28], r15
mov r8, rbx
mov rdx, rbp
mov qword [rsp + 0x20], r14
mov rcx, rsi
call r10
shl rbx, 4
add rsi, rbx
add rbp, rbx
sub rdi, rbx
je 0x14001ddf2
shr rbx, 4
lea r8, [r14 + 0x10]
mov r9, 0xfffffffffffffff8
mov rdx, r13
sub r9, r14
nop word [rax + rax]
movzx eax, byte [r8 - 1]
lea r8, [r8 - 1]
add rdx, rax
movzx ecx, bl
add rdx, rcx
shr rbx, 8
mov byte [r8], dl
lea rax, [r9 + r8]
shr rdx, 8
test rax, rax
je 0x14001ddfb
test rbx, rbx
jne 0x14001ddc0
test rdx, rdx
jne 0x14001ddc0
jmp 0x14001ddfb
test rdi, rdi
je 0x14001df84
mov edx, r13d
test rdi, rdi
je 0x14001dfea
mov rcx, r13
nop word [rax + rax]
movzx eax, byte [rcx + rsi]
inc edx
xor byte [rcx + r14 + 0x10], al
mov rbx, rdi
mov ecx, edx
mov r15, rbp
mov r12, rsi
cmp rcx, rdi
jb 0x14001de10
mov r8, qword [rsp + 0x40]
lea rcx, [r14 + 0x10]
mov rsi, qword [rsp + 0x48]
mov rdx, rcx
call rsi
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call rsi
mov eax, r13d
mov rsi, r12
cmp rbx, 8
jb 0x14001df5d
lea ecx, [rdi - 1]
mov edx, ecx
lea r8, [rcx + rbp]
lea rcx, [rsp + 0x50]
add rcx, rdx
cmp rbp, rcx
ja 0x14001de81
lea rcx, [rsp + 0x50]
cmp r8, rcx
jae 0x14001df5d
lea rcx, [rdx + r12]
cmp r15, rcx
ja 0x14001de96
mov rsi, r12
cmp r8, r12
jae 0x14001df5d
mov rsi, r12
cmp rbx, 0x40
jb 0x14001df35
mov r8, rbx
mov r9, rbx
and r8d, 0x3f
sub r9, r8
mov r10d, 0x20
nop word [rax + rax]
movdqu xmm0, xmmword [rsp + r13 + 0x50]
lea ecx, [r10 - 0x10]
add eax, 0x40
movdqu xmm1, xmmword [r12 + r13]
xorps xmm1, xmm0
movdqu xmm0, xmmword [rsp + rcx + 0x50]
movdqu xmmword [r15 + r13], xmm1
mov r13d, eax
movdqu xmm1, xmmword [rcx + r12]
xorps xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
mov ecx, r10d
movdqu xmm0, xmmword [rsp + rcx + 0x50]
movdqu xmm1, xmmword [rcx + r12]
xorps xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
lea ecx, [r10 + 0x10]
add r10d, 0x40
movdqu xmm1, xmmword [rcx + r12]
movdqu xmm0, xmmword [rsp + rcx + 0x50]
xorps xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
cmp r13, r9
jb 0x14001dec0
cmp r8, 8
jb 0x14001df5d
mov rdx, rdi
and rdx, 0xfffffffffffffff8
mov ecx, eax
nop
movq xmm1, qword [rcx + rsi]
add eax, 8
movq xmm0, qword [rsp + rcx + 0x50]
xorps xmm1, xmm0
movq qword [rcx + rbp], xmm1
mov ecx, eax
cmp rcx, rdx
jb 0x14001df40
mov r12d, dword [rsp + 0x38]
lea r15, [r14 + 0x10]
mov edx, eax
cmp rdx, rdi
jae 0x14001df84
nop dword [rax]
movzx ecx, byte [rdx + rsi]
inc eax
xor cl, byte [rsp + rdx + 0x50]
mov byte [rdx + rbp], cl
mov edx, eax
cmp rdx, rdi
jb 0x14001df70
cmp r12d, 0x10
jae 0x14001dfa0
mov r8d, reloc.WS2_32.dll_recv
mov ecx, r12d
sub r8d, r12d
add rcx, r14
xor edx, edx
call fcn.14016c1c0
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
xor qword [r15], rax
mov rax, qword [rsp + 0x58]
xor qword [r14 + 0x18], rax
movzx eax, byte [rsp + 0x30]
mov byte [r14], al
xor eax, eax
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14002a1d0
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov r8, qword [rsp + 0x40]
mov rdx, r15
mov rcx, r15
call qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [rsp + 0x48]
mov eax, r13d
jmp 0x14001df66