Function at 0x1401c3320
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x2b0]
mov eax, 0x3b0
call fcn.140215a20
sub rsp, rax
mov rax, qword [0x140320c20]
xor rax, rsp
mov qword [rbp + 0x280], rax
mov rax, qword [rbp + 0x310]
mov r15d, Ordinal_41
mov rdi, qword [rbp + 0x320]
mov r14, r8
mov qword [rsp + 0x58], rax
mov r12, rcx
mov rax, qword [rbp + 0x328]
mov esi, 0x40
mov qword [rbp - 0x80], rax
mov bl, 1
mov qword [rsp + 0x78], r9
mov qword [rbp - 0x68], r8
mov qword [rbp - 0x70], rdx
mov qword [rbp - 0x78], rcx
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x24], 8
cmp rdi, 0x100000
jb 0x1401c33c1
lea r8, str.data_plus_mac_plus_padding_size___1024__1024
mov edx, 0x1c7
lea rcx, [0x140301450]
call fcn.14014c270
mov rcx, r12
mov qword [rsp + 0x3a8], r13
call fcn.14012bdd0
mov rcx, rax
call fcn.14012ea50
mov ecx, eax
cmp eax, 0x2a1
jg 0x1401c34b1
cmp eax, 0x2a1
je 0x1401c3499
cmp eax, 4
je 0x1401c345f
cmp eax, esi
je 0x1401c3432
cmp eax, 0x2a0
jne 0x1401c34be
lea rcx, [rbp - 0x30]
call fcn.140154ba0
test eax, eax
jle 0x1401c3bd0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
lea rax, [0x1401c4080]
lea r13, [0x140154c10]
lea r10d, [rcx - 0x18]
jmp 0x1401c3544
lea rcx, [rbp - 0x30]
call fcn.1401f3980
test eax, eax
jle 0x1401c3bd0
mov ecx, reloc.WS2_32.dll_sendto
lea rax, [0x1401c3ff0]
lea r13, [0x1401532d0]
lea r10d, [rcx - 0xc]
jmp 0x1401c3544
lea rcx, [rbp - 0x30]
call fcn.1401459a0
test eax, eax
jle 0x1401c3bd0
mov ecx, reloc.WS2_32.dll_recv
lea rax, [0x1401c3f70]
mov r15d, gethostbyname
lea r13, [0x1401459f0]
mov dword [rsp + 0x50], r15d
xor bl, bl
lea r10d, [rcx - 8]
jmp 0x1401c3544
lea rcx, [rbp - 0x30]
call fcn.140155e50
test eax, eax
jle 0x1401c3bd0
mov ecx, gethostbyname
jmp 0x1401c3527
sub ecx, 0x2a2
je 0x1401c3514
cmp ecx, 1
je 0x1401c34ea
lea r8, [0x1403013dc]
mov edx, 0x209
lea rcx, [0x140301460]
call fcn.14014c270
test r14, r14
je 0x1401c3bd0
xor r12d, r12d
mov qword [r14], r12
jmp 0x1401c3bd0
lea rcx, [rbp - 0x30]
call fcn.140154810
test eax, eax
jle 0x1401c3bd0
mov ecx, Ordinal_30
lea rax, [0x1401c4080]
lea r13, [0x140154c10]
lea r10d, [rcx - 0x14]
jmp 0x1401c3544
lea rcx, [rbp - 0x30]
call fcn.140156470
test eax, eax
jle 0x1401c3bd0
mov ecx, esi
mov r10d, reloc.WS2_32.dll_recv
lea r13, [0x140156500]
mov dword [rsp + 0x24], r10d
lea rax, [0x1401c4160]
lea esi, [r10 + 0x70]
movzx r11d, byte [rbp + 0x338]
mov r14d, reloc.WS2_32.dll_listen
mov dword [rsp + 0x28], ecx
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x2c], r14d
test r11b, r11b
je 0x1401c357d
mov r14d, dword [rbp + 0x330]
add r14d, 0xb
add r14d, r15d
mov dword [rsp + 0x2c], r14d
mov r15d, dword [rbp + 0x318]
test r11b, r11b
mov eax, 2
mov r9d, 6
cmovne r9d, eax
xor edx, edx
sub r15d, ecx
mov dword [rsp + 0x40], r9d
mov eax, edi
add r15d, r14d
sub eax, ecx
xor r12d, r12d
dec eax
mov dword [rsp + 0x30], r12d
add eax, r14d
mov ecx, r12d
add eax, r10d
mov edi, r12d
add eax, esi
div esi
xor edx, edx
mov r8d, eax
mov eax, r15d
div esi
mov dword [rsp + 0x34], edx
xor edx, edx
mov dword [rsp + 0x60], eax
lea eax, [r15 + r10]
div esi
test r11b, r11b
mov dword [rsp + 0x64], eax
setne cl
add ecx, r9d
cmp r8d, ecx
jbe 0x1401c35fa
mov edi, r8d
sub edi, r9d
mov dword [rsp + 0x30], edi
imul edi, esi
lea r15d, [r15*8]
test r11b, r11b
jne 0x1401c36c3
mov r8d, esi
lea rcx, [rbp + 0x100]
xor edx, edx
lea r15d, [r15 + rsi*8]
call fcn.140218bd0
mov eax, dword [rbp + 0x330]
cmp eax, 0x80
jbe 0x1401c364b
lea r8, str.mac_secret_length___sizeof_hmac_pad_
mov edx, 0x271
lea rcx, str.._ssl_s3_cbc.c
call fcn.14014c270
mov eax, dword [rbp + 0x330]
mov rdx, qword [rbp - 0x80]
lea rcx, [rbp + 0x100]
mov r8d, eax
call fcn.140218780
movdqa xmm2, xmmword [str.6666666666666666jjjjjjjjjjjjjjjj_]
mov edx, r12d
nop dword [rax]
mov eax, edx
movdqa xmm1, xmm2
movdqu xmm0, xmmword [rbp + rax + 0x100]
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
lea eax, [rdx + 0x10]
add edx, 0x20
movdqa xmm1, xmm2
movdqu xmm0, xmmword [rbp + rax + 0x100]
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
cmp edx, esi
jb 0x1401c3670
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x30]
call r13
mov r10d, dword [rsp + 0x24]
xor edx, edx
lea rcx, [rbp + 0xb0]
test bl, bl
je 0x1401c3718
lea eax, [r10 - 4]
mov r8d, eax
mov ebx, eax
call fcn.140218bd0
mov r8d, dword [rsp + 0x24]
mov eax, r15d
shr eax, 0x18
mov edx, r15d
mov byte [rbp + rbx + 0xb0], al
shr edx, 0x10
lea eax, [r8 - 3]
mov byte [rbp + rax + 0xb0], dl
lea eax, [r8 - 2]
mov edx, r15d
shr edx, 8
mov byte [rbp + rax + 0xb0], dl
lea eax, [r8 - 1]
jmp 0x1401c375c
mov r8d, r10d
call fcn.140218bd0
mov r8d, dword [rsp + 0x24]
mov edx, r15d
shr edx, 0x18
lea eax, [r8 - 5]
mov byte [rbp + rax + 0xb0], dl
lea eax, [r8 - 6]
mov edx, r15d
shr edx, 0x10
mov byte [rbp + rax + 0xb0], dl
lea eax, [r8 - 7]
mov edx, r15d
shr edx, 8
mov byte [rbp + rax + 0xb0], dl
lea eax, [r8 - 8]
mov byte [rbp + rax + 0xb0], r15b
test edi, edi
je 0x1401c389d
cmp byte [rbp + 0x338], r12b
je 0x1401c381c
cmp r14d, esi
jbe 0x1401c3bd0
mov rdx, qword [rsp + 0x78]
lea rcx, [rbp - 0x30]
mov ebx, r14d
sub ebx, esi
call r13
mov edx, esi
lea rcx, [rbp + 0x180]
add rdx, qword [rsp + 0x78]
mov r8d, ebx
mov r13d, ebx
call fcn.140218780
mov rdx, qword [rsp + 0x58]
lea rcx, [rbp + 0x180]
mov r8d, esi
add rcx, r13
sub r8d, ebx
call fcn.140218780
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x30]
call qword [rsp + gethostname]
xor edx, edx
mov eax, edi
div esi
dec eax
cmp eax, 1
jbe 0x1401c389d
mov r12, qword [rsp + 0x38]
lea r15d, [rax - 1]
mov r14, qword [rsp + 0x58]
mov ebx, esi
nop word [rax + rax]
mov edx, ebx
lea rcx, [rbp - 0x30]
sub rdx, r13
add rdx, r14
call r12
add ebx, esi
sub r15, 1
jne 0x1401c3800
xor r12d, r12d
jmp 0x1401c3898
mov r15, qword [rsp + 0x78]
lea r8d, [rsi - 0xd]
mov rdx, qword [rsp + 0x58]
lea rcx, [rbp + 0x18d]
mov eax, dword [r15 + 8]
movsd xmm0, qword [r15]
mov dword [rbp + 0x188], eax
movzx eax, byte [r15 + 0xc]
mov byte [rbp + 0x18c], al
movsd qword [rbp + 0x180], xmm0
call fcn.140218780
lea rdx, [rbp + 0x180]
lea rcx, [rbp - 0x30]
call r13
xor edx, edx
mov eax, edi
div esi
cmp eax, 1
jbe 0x1401c389d
mov r14, qword [rsp + 0x58]
lea r15d, [rax - 1]
mov ebx, esi
nop dword [rax]
mov eax, ebx
lea rdx, [r14 - 0xd]
add rdx, rax
lea rcx, [rbp - 0x30]
call r13
add ebx, esi
sub r15, 1
jne 0x1401c3880
mov r14d, dword [rsp + 0x2c]
mov ecx, dword [rsp + 0x30]
xor eax, eax
mov qword [rbp + 0xc0], rax
mov qword [rbp + 0xc8], rax
mov qword [rbp + 0xd0], rax
mov qword [rbp + 0xd8], rax
mov qword [rbp + 0xe0], rax
mov qword [rbp + 0xe8], rax
mov qword [rbp + 0xf0], rax
mov qword [rbp + 0xf8], rax
mov eax, dword [rsp + 0x40]
add eax, ecx
mov dword [rsp + 0x6c], eax
cmp ecx, eax
ja 0x1401c3b33
mov edx, dword [rsp + 0x34]
mov r8d, edx
shr r8d, 0x1f
movaps xmmword [rsp + 0x390], xmm6
mov dword [rsp + 0x2c], r8d
lea eax, [rdx + 1]
shr eax, 0x1f
mov dword [rsp + 0x40], eax
mov eax, esi
sub eax, dword [rsp + 0x24]
neg edx
mov dword [rsp + 0x68], eax
mov dword [rsp + 0x34], edx
nop
mov eax, ecx
lea rbx, [rbp + 0x200]
xor eax, dword [rsp + 0x60]
mov r10d, r12d
lea r13d, [rax - 1]
not eax
shr eax, 0x1f
shr r13d, 0x1f
and r13b, al
mov eax, ecx
xor eax, dword [rsp + 0x64]
neg r13b
lea r15d, [rax - 1]
not eax
shr eax, 0x1f
shr r15d, 0x1f
and r15b, al
neg r15b
movsx eax, r15b
movd xmm6, eax
movzx eax, r15b
punpcklbw xmm6, xmm6
not al
or al, r13b
punpcklwd xmm6, xmm6
movzx r12d, al
pshufd xmm6, xmm6, 0
nop
xor r11b, r11b
mov eax, edi
cmp edi, r14d
jae 0x1401c3991
mov rcx, qword [rsp + 0x78]
jmp 0x1401c39aa
mov ecx, r14d
add rcx, qword [rbp + 0x320]
cmp rax, rcx
jae 0x1401c39af
mov rcx, qword [rsp + 0x58]
mov eax, edi
sub eax, r14d
movzx r11d, byte [rax + rcx]
add edx, r10d
mov r9d, r10d
shr r9d, 0x1f
mov ecx, edx
shr ecx, 0x1f
movzx eax, r9b
xor al, r8b
xor cl, r8b
or cl, al
inc edi
xor cl, r9b
movzx eax, r13b
dec cl
movzx r8d, cl
movzx ecx, r9b
and r8d, eax
lea eax, [rdx - 1]
mov edx, dword [rsp + 0x40]
xor cl, dl
shr eax, 0x1f
xor al, dl
or al, cl
movzx ecx, r8b
xor al, r9b
not cl
dec al
and cl, r11b
and al, r13b
and r8b, 0x80
not al
or cl, r8b
and al, cl
and al, r12b
cmp r10d, dword [rsp + 0x68]
jb 0x1401c3a36
mov ecx, r10d
movzx r8d, r15b
sub ecx, esi
add ecx, dword [rsp + 0x24]
movzx edx, byte [rbp + rcx + 0xb0]
and dl, r8b
not r8b
and al, r8b
or al, dl
mov r8d, dword [rsp + 0x2c]
inc r10d
mov edx, dword [rsp + 0x34]
mov byte [rbx], al
inc rbx
cmp r10d, esi
jb 0x1401c3980
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 0x30]
call qword [rsp + gethostname]
lea rdx, [rbp + 0x200]
lea rcx, [rbp - 0x30]
call qword [rsp + 0x48]
mov r13d, dword [rsp + 0x28]
xor r12d, r12d
mov edx, r12d
cmp r13d, 0x20
jb 0x1401c3ae3
mov r8d, r13d
and r8d, 0xffffffe0
nop word [rax + rax]
mov eax, edx
movdqu xmm0, xmmword [rbp + rax + 0xc0]
movdqu xmm1, xmmword [rbp + rax + 0x200]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xc0], xmm1
lea eax, [rdx + 0x10]
add edx, 0x20
movdqu xmm0, xmmword [rbp + rax + 0xc0]
movdqu xmm1, xmmword [rbp + rax + 0x200]
pand xmm1, xmm6
por xmm1, xmm0
movdqu xmmword [rbp + rax + 0xc0], xmm1
cmp edx, r8d
jb 0x1401c3a90
cmp edx, r13d
jae 0x1401c3b0c
mov r8d, r13d
mov ecx, edx
sub r8d, edx
movzx eax, byte [rbp + rcx + 0x200]
lea rcx, [rcx + 1]
and al, r15b
or byte [rbp + rcx + 0xbf], al
sub r8, 1
jne 0x1401c3af0
mov ecx, dword [rsp + 0x30]
mov r8d, dword [rsp + 0x2c]
inc ecx
mov edx, dword [rsp + 0x34]
mov dword [rsp + 0x30], ecx
cmp ecx, dword [rsp + 0x6c]
jbe 0x1401c3920
movaps xmm6, xmmword [rsp + 0x390]
jmp 0x1401c3b38
mov r13d, dword [rsp + 0x28]
lea rcx, [rbp - 0x60]
call fcn.140127cc0
mov rdx, qword [rbp - 0x78]
lea rcx, [rbp - 0x60]
xor r8d, r8d
mov rdx, qword [rdx]
call fcn.140127700
test eax, eax
jle 0x1401c3bc7
cmp byte [rbp + 0x338], 0
je 0x1401c3bfb
mov ebx, dword [rsp + 0x50]
lea rcx, [rbp + 0x100]
mov r8d, ebx
mov edx, 0x5c
call fcn.140218bd0
mov r8d, dword [rbp + 0x330]
lea rcx, [rbp - 0x60]
mov rdx, qword [rbp - 0x80]
call fcn.140127960
test eax, eax
jle 0x1401c3bc7
mov r8d, ebx
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x60]
call fcn.140127960
test eax, eax
jle 0x1401c3bc7
mov r8d, r13d
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x60]
call fcn.140127960
test eax, eax
jg 0x1401c3c8b
lea rcx, [rbp - 0x60]
call fcn.140127980
xor eax, eax
mov r13, qword [rsp + 0x3a8]
mov rcx, qword [rbp + 0x280]
xor rcx, rsp
call fcn.140215090
add rsp, 0x3b0
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
movdqa xmm2, xmmword [0x1402705a0]
nop dword [rax]
nop word [rax + rax]
mov eax, r12d
movdqa xmm1, xmm2
movdqu xmm0, xmmword [rbp + rax + 0x100]
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
lea eax, [r12 + 0x10]
add r12d, 0x20
movdqa xmm1, xmm2
movdqu xmm0, xmmword [rbp + rax + 0x100]
pxor xmm1, xmm0
movdqu xmmword [rbp + rax + 0x100], xmm1
cmp r12d, esi
jb 0x1401c3c10
mov r8d, esi
lea rdx, [rbp + 0x100]
lea rcx, [rbp - 0x60]
call fcn.140127960
test eax, eax
jle 0x1401c3bc7
mov r8d, r13d
lea rdx, [rbp + 0xc0]
lea rcx, [rbp - 0x60]
call fcn.140127960
test eax, eax
jle 0x1401c3bc7
mov rdx, qword [rbp - 0x70]
lea r8, [rsp + 0x70]
lea rcx, [rbp - 0x60]
call fcn.1401275e0
mov rcx, qword [rbp - 0x68]
test rcx, rcx
je 0x1401c3cad
mov eax, dword [rsp + 0x70]
mov qword [rcx], rax
lea rcx, [rbp - 0x60]
call fcn.140127980
mov eax, 1
jmp 0x1401c3bd2