Function at 0x1401ca5d0
Capabilities:
Encode data using xor

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x78
call fcn.1401a9c70
sub rsp, rax
mov rax, qword [0x140516080]
xor rax, rsp
mov qword [rsp + 0x60], rax
movzx r12d, byte [rcx]
lea r15, [rcx + 0x10]
mov r10, qword [rsp + 0xe0]
mov rdi, r9
mov r9, qword [rcx + 0x30]
mov rbp, r8
mov rax, qword [rcx + 0x28]
mov rsi, rdx
mov qword [rsp + 0x40], r9
mov r14, rcx
mov qword [rsp + 0x38], r10
lea rbx, [rcx + 0x20]
mov byte [rsp + 0x30], r12b
mov qword [rsp + 0x48], rax
test r12b, 0x40
jne 0x1401ca650
mov r8, r9
mov rdx, r15
call rax
inc qword [rbx]
mov r9, qword [rsp + 0x40]
mov r10, qword [rsp + 0x38]
mov r8d, r12d
xor r13d, r13d
and r8d, 7
mov r12d, reloc.WS2_32.dll_ntohs
sub r12d, r8d
mov byte [r14], r8b
mov dword [rsp + 0x38], r12d
mov ecx, r13d
cmp r12d, 0xf
jae 0x1401ca69b
mov edx, r12d
add rdx, r14
nop word [rax + rax]
movzx eax, byte [rdx]
mov byte [rdx], r13b
lea rdx, [rdx + 1]
or rcx, rax
shl rcx, 8
sub r8, 1
jne 0x1401ca680
lea rbx, [r14 + 0x20]
movzx eax, byte [r14 + 0xf]
or rcx, rax
mov byte [r14 + 0xf], 1
cmp rcx, rdi
je 0x1401ca6b7
mov eax, 0xffffffff
jmp 0x1401ca93c
lea rax, [rdi + 0xf]
or rax, 8
shr rax, 3
add qword [rbx], rax
movabs rax, 0x2000000000000000
cmp qword [rbx], rax
jbe 0x1401ca6df
mov eax, 0xfffffffe
jmp 0x1401ca93c
mov rbx, rdi
shr rbx, 4
test rbx, rbx
je 0x1401ca762
mov qword [rsp + 0x28], r15
mov r8, rbx
mov rdx, rbp
mov qword [rsp + 0x20], r14
mov rcx, rsi
call r10
shl rbx, 4
add rsi, rbx
add rbp, rbx
sub rdi, rbx
je 0x1401ca762
shr rbx, 4
lea r8, [r14 + 0x10]
mov r9, 0xfffffffffffffff8
mov rdx, r13
sub r9, r14
nop word [rax + rax]
movzx eax, byte [r8 - 1]
lea r8, [r8 - 1]
add rdx, rax
movzx ecx, bl
add rdx, rcx
shr rbx, 8
mov byte [r8], dl
lea rax, [r9 + r8]
shr rdx, 8
test rax, rax
je 0x1401ca76b
test rbx, rbx
jne 0x1401ca730
test rdx, rdx
jne 0x1401ca730
jmp 0x1401ca76b
test rdi, rdi
je 0x1401ca8f4
mov edx, r13d
test rdi, rdi
je 0x1401ca95a
mov rcx, r13
nop word [rax + rax]
movzx eax, byte [rcx + rsi]
inc edx
xor byte [rcx + r14 + 0x10], al
mov rbx, rdi
mov ecx, edx
mov r15, rbp
mov r12, rsi
cmp rcx, rdi
jb 0x1401ca780
mov r8, qword [rsp + 0x40]
lea rcx, [r14 + 0x10]
mov rsi, qword [rsp + 0x48]
mov rdx, rcx
call rsi
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call rsi
mov eax, r13d
mov rsi, r12
cmp rbx, 8
jb 0x1401ca8cd
lea ecx, [rdi - 1]
mov edx, ecx
lea r8, [rcx + rbp]
lea rcx, [rsp + 0x50]
add rcx, rdx
cmp rbp, rcx
ja 0x1401ca7f1
lea rcx, [rsp + 0x50]
cmp r8, rcx
jae 0x1401ca8cd
lea rcx, [rdx + r12]
cmp r15, rcx
ja 0x1401ca806
mov rsi, r12
cmp r8, r12
jae 0x1401ca8cd
mov rsi, r12
cmp rbx, 0x40
jb 0x1401ca8a5
mov r8, rbx
mov r9, rbx
and r8d, 0x3f
sub r9, r8
mov r10d, 0x20
nop word [rax + rax]
movdqu xmm0, xmmword [rsp + r13 + 0x50]
lea ecx, [r10 - 0x10]
add eax, 0x40
movdqu xmm1, xmmword [r12 + r13]
xorps xmm1, xmm0
movdqu xmm0, xmmword [rsp + rcx + 0x50]
movdqu xmmword [r15 + r13], xmm1
mov r13d, eax
movdqu xmm1, xmmword [rcx + r12]
xorps xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
mov ecx, r10d
movdqu xmm0, xmmword [rsp + rcx + 0x50]
movdqu xmm1, xmmword [rcx + r12]
xorps xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
lea ecx, [r10 + 0x10]
add r10d, 0x40
movdqu xmm1, xmmword [rcx + r12]
movdqu xmm0, xmmword [rsp + rcx + 0x50]
xorps xmm1, xmm0
movdqu xmmword [rcx + r15], xmm1
cmp r13, r9
jb 0x1401ca830
cmp r8, 8
jb 0x1401ca8cd
mov rdx, rdi
and rdx, 0xfffffffffffffff8
mov ecx, eax
nop
movq xmm1, qword [rcx + rsi]
add eax, 8
movq xmm0, qword [rsp + rcx + 0x50]
xorps xmm1, xmm0
movq qword [rcx + rbp], xmm1
mov ecx, eax
cmp rcx, rdx
jb 0x1401ca8b0
mov r12d, dword [rsp + 0x38]
lea r15, [r14 + 0x10]
mov edx, eax
cmp rdx, rdi
jae 0x1401ca8f4
nop dword [rax]
movzx ecx, byte [rdx + rsi]
inc eax
xor cl, byte [rsp + rdx + 0x50]
mov byte [rdx + rbp], cl
mov edx, eax
cmp rdx, rdi
jb 0x1401ca8e0
cmp r12d, 0x10
jae 0x1401ca910
mov r8d, reloc.WS2_32.dll_recv
mov ecx, r12d
sub r8d, r12d
add rcx, r14
xor edx, edx
call fcn.140313090
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [rsp + 0x48]
mov rax, qword [rsp + 0x50]
xor qword [r15], rax
mov rax, qword [rsp + 0x58]
xor qword [r14 + 0x18], rax
movzx eax, byte [rsp + 0x30]
mov byte [r14], al
xor eax, eax
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1401a92a0
add rsp, 0x78
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov r8, qword [rsp + 0x40]
mov rdx, r15
mov rcx, r15
call qword [rsp + 0x48]
mov r8, qword [rsp + 0x40]
lea rdx, [rsp + 0x50]
mov rcx, r14
call qword [rsp + 0x48]
mov eax, r13d
jmp 0x1401ca8d6