Function at 0x18000fb70
Capabilities:
Encode data using xor

Disassembly:
push rbp
push rbx
push rdi
push r14
lea rbp, [rsp - 0x3f]
sub rsp, 0xe8
mov rax, qword [0x180037020]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r14, r8
mov rdi, rdx
mov rbx, rcx
test rdx, rdx
je 0x180010015
test r8, r8
je 0x180010015
lea rax, [rbp + 0xb]
mov qword [rbp + 0x27], rdx
mov qword [rsp + 0xe0], r15
lea r8, [rbp + 0xf]
xor r15d, r15d
mov qword [rbp + 0xf], 0x25
mov qword [rsp + 0x38], r15
mov edx, 0x80862007
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r15d
lea r9d, [r15 + 0x20]
mov qword [rbp + 0x17], r15
mov qword [rbp + 0x1f], r15
mov dword [rbp + 0xb], r15d
mov qword [rsp + 0x20], r15
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x18000fd07
xor eax, eax
mov dword [rbp - 0x69], 0xf37bf30e
mov word [rbp - 0x15], ax
mov r8d, r15d
mov dword [rbp - 0x65], 0xf378f30a
mov r10d, 0xcab
mov dword [rbp - 0x61], 0xf33bf31f
mov dword [rbp - 0x5d], 0xf330f332
mov dword [rbp - 0x59], 0xf33af338
mov dword [rbp - 0x55], 0xf314f37f
mov dword [rbp - 0x51], 0xf342f30e
mov dword [rbp - 0x4d], 0xf316f317
mov dword [rbp - 0x49], 0xf308f304
mov dword [rbp - 0x45], 0xf304f314
mov dword [rbp - 0x41], 0xf31ef308
mov dword [rbp - 0x3d], 0xf34cf30e
mov dword [rbp - 0x39], 0xf307f31b
mov dword [rbp - 0x35], 0xf304f31d
mov dword [rbp - 0x31], 0xf313f304
mov dword [rbp - 0x2d], 0xf354f31f
mov dword [rbp - 0x29], 0xf312f314
mov dword [rbp - 0x25], 0xf30af313
mov dword [rbp - 0x21], 0xf309f31c
mov dword [rbp - 0x1d], 0xf35cf308
mov dword [rbp - 0x19], 0xf306f34d
nop dword [rax]
nop word [rax + rax]
movsxd rax, r8d
lea rcx, [rbp - 0x69]
lea rcx, [rcx + rax*2]
movzx eax, r8w
sub ax, r10w
inc r8d
xor word [rcx], ax
cmp r8d, 0x2a
jb 0x18000fcb0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [rbp - 0x69]
mov word [rbp - 0x15], r15w
call fcn.180015960
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x180015b40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor al, al
jmp 0x18000ff1d
mov rdi, qword [rbp + 0x1f]
mov qword [rsp + 0x128], rsi
test rdi, rdi
je 0x18000ff3e
mov qword [rsp + 0x38], r15
lea rax, [rbp + 7]
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x69]
xorps xmm0, xmm0
mov dword [rsp + 0x28], r15d
mov r9d, 0x30
mov qword [rsp + 0x20], r15
mov edx, 0x80862007
mov qword [rbp - 0x51], r15
mov rcx, rbx
mov qword [rbp - 0x41], recvfrom
movdqu xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x69], 0x19
mov qword [rbp - 0x49], rdi
mov dword [rbp + 7], r15d
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
je 0x18000ff3e
mov rsi, qword [rbp - 0x51]
test rsi, rsi
je 0x18000ff3e
mov r9d, recvfrom
mov r8, r14
mov rdx, rsi
mov rcx, rbx
call fcn.18000fad0
mov qword [rsp + 0x38], r15
lea r8, [rbp - 0x69]
movzx r14d, al
mov qword [rbp - 0x49], r15
lea rax, [rbp + 7]
mov qword [rbp - 0x41], recvfrom
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
mov dword [rsp + 0x28], r15d
mov r9d, 0x30
mov edx, 0x80862007
mov qword [rsp + 0x20], r15
mov rcx, rbx
mov qword [rbp - 0x69], 0x1a
movdqu xmmword [rbp - 0x61], xmm0
mov qword [rbp - 0x51], rsi
mov dword [rbp + 7], r15d
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x18000ff11
mov dword [rbp - 0x69], 0xf377f30e
mov r9d, r15d
mov dword [rbp - 0x65], 0xf378f30a
mov r10d, 0xcab
mov dword [rbp - 0x61], 0xf33bf31f
mov dword [rbp - 0x5d], 0xf330f332
mov dword [rbp - 0x59], 0xf33af338
mov dword [rbp - 0x55], 0xf314f37f
mov dword [rbp - 0x51], 0xf342f30e
mov dword [rbp - 0x4d], 0xf30af316
mov dword [rbp - 0x49], 0xf307f308
mov dword [rbp - 0x45], 0xf348f317
mov dword [rbp - 0x41], 0xf325f320
mov dword [rbp - 0x3d], 0xf31ff34b
mov dword [rbp - 0x39], 0xf30ff31d
mov dword [rbp - 0x35], 0xf315f30c
mov dword [rbp - 0x31], 0xf31df351
mov dword [rbp - 0x2d], 0xf354f315
mov dword [rbp - 0x29], 0xf31ef305
mov dword [rbp - 0x25], 0xf30bf30e
mov dword [rbp - 0x21], 0xf319f310
mov dword [rbp - 0x1d], 0xf310f31a
mov dword [rbp - 0x19], 0xf31ff35d
mov dword [rbp - 0x15], 0xf3e4f31b
mov dword [rbp - 0x11], 0xf3e7f3f3
mov dword [rbp - 0xd], 0xf3f7f3f0
mov dword [rbp - 9], 0xf3b6f3a5
mov dword [rbp - 5], 0xf3ff
nop dword [rax + rax]
movsxd rax, r9d
lea r8, [rbp - 0x69]
lea r8, [r8 + rax*2]
movzx eax, r9w
sub ax, r10w
inc r9d
xor word [r8], ax
cmp r9d, 0x33
jb 0x18000fec0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [rbp - 0x69]
mov word [rbp - 3], r15w
call fcn.180015960
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x180015b40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
movzx eax, r14b
mov rsi, qword [rsp + 0x128]
mov r15, qword [rsp + 0xe0]
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.180029c20
add rsp, 0xe8
pop r14
pop rdi
pop rbx
pop rbp
ret
xor eax, eax
mov dword [rbp - 0x69], 0xf37bf30e
mov word [rbp - 0x29], ax
mov r10d, 0xcab
mov dword [rbp - 0x65], 0xf378f30a
mov dword [rbp - 0x61], 0xf33bf31f
mov dword [rbp - 0x5d], 0xf330f332
mov dword [rbp - 0x59], 0xf33af338
mov dword [rbp - 0x55], 0xf314f37f
mov dword [rbp - 0x51], 0xf342f30e
mov dword [rbp - 0x4d], 0xf305f30e
mov dword [rbp - 0x49], 0xf346f315
mov dword [rbp - 0x45], 0xf327f32e
mov dword [rbp - 0x41], 0xf319f349
mov dword [rbp - 0x3d], 0xf30df31b
mov dword [rbp - 0x39], 0xf30bf30e
mov dword [rbp - 0x35], 0xf31ff34f
mov dword [rbp - 0x31], 0xf352f317
mov dword [rbp - 0x2d], 0xf30cf343
nop word [rax + rax]
movsxd rdx, eax
lea r8, [rbp - 0x69]
lea r8, [r8 + rdx*2]
movzx edx, ax
sub dx, r10w
inc eax
xor word [r8], dx
cmp eax, 0x20
jb 0x18000ffc0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
lea rdx, [rbp - 0x69]
mov word [rbp - 0x29], r15w
call fcn.180015960
mov rdx, rdi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___void_const____ptr64____ptr64]
mov rcx, rax
lea rdx, [0x180015b40]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64____cdecl___class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64_____ptr64]
xor al, al
jmp 0x18000ff15
xor al, al
jmp 0x18000ff25