Function at 0x1400088d0
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x80
mov rax, qword [0x1400bc0f8]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rax, qword [rcx + 0x90]
xor ebx, ebx
mov rbp, qword [rcx + 0x50]
test rax, rax
mov r15, qword [rcx + 0x48]
mov rdi, rcx
mov esi, ebx
mov r13d, ebx
lea r11, [rax + 0x28]
mov r12d, ebx
cmove r11, rbx
lea r10, [r15 + rbp]
mov qword [rsp + 0x50], r11
mov qword [rsp + 0x58], r10
mov rdx, qword [r11]
test rdx, rdx
je 0x14000893b
add r15, rdx
sub rbp, rdx
movzx r9d, byte [r15]
mov byte [rsp + 0x41], r9b
mov qword [rsp + 0xb8], r14
test rbp, rbp
je 0x140008a01
movzx eax, r9b
movzx r8d, r9b
and r8b, 0xf
shr al, 7
test r8b, r8b
movzx eax, al
mov ecx, ebx
mov byte [rsp + 0x40], r8b
cmovne ecx, eax
test cl, cl
jne 0x140008a01
lea r14, [rdi + 0xd0]
test dword [r14], 0x1000
jne 0x140008a01
lea eax, [r8 - 8]
cmp al, 2
jbe 0x1400089d7
mov dword [rsp + 0x48], 1
cmp rbp, 2
jb 0x140008ac0
movzx r13d, byte [r15 + 1]
mov eax, r13d
shr r13, 5
and r13d, 4
and eax, 0x7f
cmp rax, 0x7e
jae 0x140008a67
cmp rbp, r13
jb 0x140008a85
mov esi, eax
lea r12, [r13 + 2]
jmp 0x140008ac0
mov r9d, 0x25
lea r8, str.fragmented_control_frames_are_illegal
mov rcx, rdi
lea edx, [r9 - 0x1d]
call fcn.140013010
or dword [rdi + 0xd0], 0x400
xor eax, eax
jmp 0x140008dda
movzx r8d, r9b
mov dword [rsp + 0x48], ebx
and r8b, 0xf
lea r14, [rdi + 0xd0]
mov byte [rsp + 0x40], r8b
test rbp, rbp
je 0x14000899c
lea eax, [r8 - 8]
cmp al, 2
jbe 0x14000899c
mov dword [rsp + 0x48], ebx
mov byte [rsp + 0x40], r8b
test rdx, rdx
je 0x14000899c
mov r9d, gethostname
lea r8, str.non_continuation_in_the_middle_of_a_fragmented_message
mov rcx, rdi
lea edx, [r9 - 0x2e]
call fcn.140013010
or dword [r14], 0x400
xor eax, eax
jmp 0x140008dda
jne 0x140008a85
lea rax, [r13 + 4]
cmp rbp, rax
jb 0x140008a85
movzx ecx, word [r15 + 2]
mov r12, rax
call qword [sym.imp.WS2_32.dll_ntohs]
movzx esi, ax
jmp 0x140008ab0
lea rax, [r13 + 0xa]
cmp rbp, rax
jb 0x140008ac0
mov ecx, dword [r15 + 2]
mov r12, rax
call qword [sym.imp.WS2_32.dll_ntohl]
mov ecx, dword [r15 + 6]
mov ebx, eax
shl rbx, 0x20
call qword [sym.imp.WS2_32.dll_ntohl]
mov esi, eax
add rsi, rbx
mov r11, qword [rsp + 0x50]
mov r10, qword [rsp + 0x58]
movzx r9d, byte [rsp + 0x41]
lea rcx, [r12 + rsi]
mov qword [rsp + 0x58], rcx
test rcx, rcx
je 0x140008ada
cmp rcx, rbp
ja 0x140008ada
mov eax, 1
jmp 0x140008adc
xor eax, eax
cmp rcx, r12
jb 0x14000907c
cmp rcx, rsi
jb 0x14000907c
mov ebx, eax
test eax, eax
je 0x140008dd8
mov qword [rsp + 0x68], rsi
lea rbx, [r15 + r12]
mov qword [rsp + 0x60], rbx
mov edx, eax
mov byte [rsp + 0x70], r9b
mov dword [rsp + 0x44], eax
test r13, r13
je 0x140008b4c
xor ecx, ecx
mov dword [rsp + 0x44], eax
test rsi, rsi
je 0x140008b4c
mov dword [rsp + 0x44], eax
nop word [rax + rax]
mov rax, rcx
and eax, 3
sub rax, r13
add rax, r15
movzx eax, byte [rax + r12]
xor byte [rbx + rcx], al
inc rcx
cmp rcx, rsi
jb 0x140008b30
cmp dword [rsp + 0x48], 0
je 0x140008e0b
test r9b, r9b
js 0x140008b6d
cmp byte [rsp + 0x40], 0
je 0x140008b6d
inc r15
mov qword [r11], 1
sub r10, rbx
mov dword [rsp + 0x44], edx
mov r8, r10
mov rdx, rbx
mov rcx, r15
call fcn.14004c3b0
mov rdx, qword [rsp + 0x50]
sub r15, rbx
add qword [rdx], rsi
add qword [rdi + 0x50], r15
cmp byte [rsp + 0x41], 0
jge 0x140008dd4
mov rax, qword [rdi + 0x48]
mov rbp, qword [rdx]
movzx ecx, byte [rax]
or cl, 0x80
mov qword [rdx], 0
mov rbx, qword [rdi + 0xa0]
inc rax
mov qword [rsp + 0x60], rax
lea rax, [rbp - 1]
mov qword [rsp + 0x68], rax
mov byte [rsp + 0x70], cl
test cl, 8
je 0x140008c89
test rbx, rbx
jne 0x140008be8
mov rax, qword [rdi + 0x88]
test rax, rax
cmovne rbx, rax
mov r8d, 0x8f2
lea rdx, str.E:oldworkWorkCodeTD202109includecommonmongoose.c
mov ecx, 4
call fcn.140003ad0
lea r12, str.user
lea rsi, str.proto
test eax, eax
je 0x140008c53
mov eax, dword [rdi + 0x68]
lea rcx, str._p__s_ev_d_ev_data_p_flags0x_lx_rmbl_d_smbl_d
cmp rbx, qword [rdi + 0xa0]
mov r8, rsi
mov dword [rsp + 0x38], eax
mov r9d, WSAStartup
mov eax, dword [rdi + 0x50]
cmove r8, r12
mov dword [rsp + 0x30], eax
mov rdx, rdi
mov eax, dword [r14]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.140003d70
mov rax, qword [rdi + 0x18]
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x140008c76
xor r9d, r9d
mov dword [rsp + 0x20], WSAStartup
xor r8d, r8d
mov rcx, rdi
call fcn.14000ab30
test rbx, rbx
je 0x140008d62
mov edx, WSAStartup
jmp 0x140008d34
test rbx, rbx
jne 0x140008c9c
mov rax, qword [rdi + 0x88]
test rax, rax
cmovne rbx, rax
mov r8d, 0x8f2
lea rdx, str.E:oldworkWorkCodeTD202109includecommonmongoose.c
mov ecx, 4
call fcn.140003ad0
lea r12, str.user
lea rsi, str.proto
test eax, eax
je 0x140008d07
mov eax, dword [rdi + 0x68]
lea rcx, str._p__s_ev_d_ev_data_p_flags0x_lx_rmbl_d_smbl_d
cmp rbx, qword [rdi + 0xa0]
mov r8, rsi
mov dword [rsp + 0x38], eax
mov r9d, WSAStartup
mov eax, dword [rdi + 0x50]
cmove r8, r12
mov dword [rsp + 0x30], eax
mov rdx, rdi
mov eax, dword [r14]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.140003d70
mov rax, qword [rdi + 0x18]
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x140008d2a
xor r9d, r9d
mov dword [rsp + 0x20], WSAStartup
xor r8d, r8d
mov rcx, rdi
call fcn.14000ab30
test rbx, rbx
je 0x140008d62
mov edx, WSAStartup
mov r15d, dword [r14]
lea r8, [rsp + 0x60]
mov rcx, rdi
call rbx
cmp rbx, qword [rdi + 0xa0]
jne 0x140008d62
mov ecx, dword [r14]
cmp ecx, r15d
je 0x140008d62
mov eax, r15d
xor eax, ecx
and eax, 0x3f03d00
xor eax, r15d
mov dword [r14], eax
mov rax, qword [rdi + 0x18]
lea rdx, str.E:oldworkWorkCodeTD202109includecommonmongoose.c
mov r8d, 0x908
mov ecx, 4
inc dword [rax + 0x2c]
call fcn.140003ad0
test eax, eax
je 0x140008db2
mov eax, dword [rdi + 0x68]
lea rcx, str._p_after__s_flags0x_lx_rmbl_d_smbl_d
cmp rbx, qword [rdi + 0xa0]
mov rdx, rdi
mov r9d, dword [r14]
mov dword [rsp + 0x28], eax
cmove rsi, r12
mov eax, dword [rdi + 0x50]
mov r8, rsi
mov dword [rsp + 0x20], eax
call fcn.140003d70
test rbp, rbp
je 0x140008dd4
mov r8, qword [rdi + 0x50]
cmp rbp, r8
ja 0x140008dd4
mov rcx, qword [rdi + 0x48]
sub r8, rbp
lea rdx, [rcx + rbp]
call fcn.14004c3b0
sub qword [rdi + 0x50], rbp
mov ebx, dword [rsp + 0x44]
mov eax, ebx
mov r14, qword [rsp + 0xb8]
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14003fb10
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rsi
ret
movzx ecx, r9b
and ecx, 0xf
sub ecx, 8
je 0x140008e2f
cmp ecx, 1
jne 0x140008e63
lea edx, [rcx + 9]
mov r9, rsi
mov rcx, rdi
mov r8, rbx
call fcn.140013010
jmp 0x140008e63
cmp esi, 0xffffffff
jne 0x140008e49
mov rsi, 0xffffffffffffffff
nop dword [rax + rax]
inc rsi
cmp byte [rbx + rsi], 0
jne 0x140008e40
mov r9, rsi
mov r8, rbx
mov edx, 8
mov rcx, rdi
call fcn.140013010
or dword [r14], 0x400
test byte [rsp + 0x70], 8
mov rbx, qword [rdi + 0xa0]
je 0x140008f29
test rbx, rbx
jne 0x140008e88
mov rax, qword [rdi + 0x88]
test rax, rax
cmovne rbx, rax
mov r8d, 0x8f2
lea rdx, str.E:oldworkWorkCodeTD202109includecommonmongoose.c
mov ecx, 4
call fcn.140003ad0
lea r12, str.user
lea rsi, str.proto
test eax, eax
je 0x140008ef3
mov eax, dword [rdi + 0x68]
lea rcx, str._p__s_ev_d_ev_data_p_flags0x_lx_rmbl_d_smbl_d
cmp rbx, qword [rdi + 0xa0]
mov r8, rsi
mov dword [rsp + 0x38], eax
mov r9d, WSAStartup
mov eax, dword [rdi + 0x50]
cmove r8, r12
mov dword [rsp + 0x30], eax
mov rdx, rdi
mov eax, dword [r14]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.140003d70
mov rax, qword [rdi + 0x18]
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x140008f16
xor r9d, r9d
mov dword [rsp + 0x20], WSAStartup
xor r8d, r8d
mov rcx, rdi
call fcn.14000ab30
test rbx, rbx
je 0x140008fff
mov edx, WSAStartup
jmp 0x140008fd4
test rbx, rbx
jne 0x140008f3c
mov rax, qword [rdi + 0x88]
test rax, rax
cmovne rbx, rax
mov r8d, 0x8f2
lea rdx, str.E:oldworkWorkCodeTD202109includecommonmongoose.c
mov ecx, 4
call fcn.140003ad0
lea r12, str.user
lea rsi, str.proto
test eax, eax
je 0x140008fa7
mov eax, dword [rdi + 0x68]
lea rcx, str._p__s_ev_d_ev_data_p_flags0x_lx_rmbl_d_smbl_d
cmp rbx, qword [rdi + 0xa0]
mov r8, rsi
mov dword [rsp + 0x38], eax
mov r9d, WSAStartup
mov eax, dword [rdi + 0x50]
cmove r8, r12
mov dword [rsp + 0x30], eax
mov rdx, rdi
mov eax, dword [r14]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.140003d70
mov rax, qword [rdi + 0x18]
mov rdx, qword [rax + 8]
test rdx, rdx
je 0x140008fca
xor r9d, r9d
mov dword [rsp + 0x20], WSAStartup
xor r8d, r8d
mov rcx, rdi
call fcn.14000ab30
test rbx, rbx
je 0x140008fff
mov edx, WSAStartup
mov ebp, dword [r14]
lea r8, [rsp + 0x60]
mov rcx, rdi
call rbx
cmp rbx, qword [rdi + 0xa0]
jne 0x140008fff
mov ecx, dword [r14]
cmp ecx, ebp
je 0x140008fff
mov eax, ebp
xor eax, ecx
and eax, 0x3f03d00
xor eax, ebp
mov dword [r14], eax
mov rax, qword [rdi + 0x18]
lea rdx, str.E:oldworkWorkCodeTD202109includecommonmongoose.c
mov r8d, 0x908
mov ecx, 4
inc dword [rax + 0x2c]
call fcn.140003ad0
test eax, eax
je 0x14000904f
mov eax, dword [rdi + 0x68]
lea rcx, str._p_after__s_flags0x_lx_rmbl_d_smbl_d
cmp rbx, qword [rdi + 0xa0]
mov rdx, rdi
mov r9d, dword [r14]
mov dword [rsp + 0x28], eax
cmove rsi, r12
mov eax, dword [rdi + 0x50]
mov r8, rsi
mov dword [rsp + 0x20], eax
call fcn.140003d70
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rdi + 0x48]
mov rbx, qword [rsp + 0x58]
mov r8, qword [rdi + 0x50]
sub r8, qword [rdx]
add rcx, qword [rdx]
sub r8, rbx
lea rdx, [rcx + rbx]
call fcn.14004c3b0
sub qword [rdi + 0x50], rbx
jmp 0x140008dd4
xor ebx, ebx
lea r8, str.overflowed_message
mov rcx, rdi
lea r9d, [rbx + 0x12]
lea edx, [rbx + 8]
call fcn.140013010
or dword [r14], 0x400
jmp 0x140008dd8